last executing test programs: 3.839297489s ago: executing program 2 (id=2942): r0 = socket$netlink(0x10, 0x3, 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000001080)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040000}, 0x100) 3.760619661s ago: executing program 2 (id=2944): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r3) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x24, 0x2, {{0x100, 0x7, 0x6361, 0x2, 0xfffffffd, 0x6}, [@TCA_NETEM_DELAY_DIST={0x6, 0x2, "a8bd"}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2.196323795s ago: executing program 2 (id=2948): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) close(r6) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r8, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 1.913953065s ago: executing program 3 (id=2953): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e21, @local}], 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000000)={0x209, 0x6, 0x807, 0x2097}, 0x8) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x2a000}], 0x1, 0x0, 0x0, 0x804c040}, 0x0) 1.853996624s ago: executing program 4 (id=2954): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFC_CMD_DEP_LINK_UP(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x40080c0}, 0x8000) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, &(0x7f0000000040)=""/73}, 0x20) openat$ppp(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a31000000000800054000000002"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) syz_emit_ethernet(0x4e, &(0x7f0000000340)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x5a}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 1.794872436s ago: executing program 4 (id=2956): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc00000019000100000000000400000000000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000070000000000000000faff0000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000020000000000000000000000002000000000000000000000000000000000000001000000000000004400050020010000000000000000000000000000000000022b0000000a000000000000000000000000000000000000000000000004"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x8, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa210106, @local, {[@ssrr={0x89, 0x7, 0xe9, [@multicast2]}, @generic={0x7, 0x2}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x20, 0x8000}}}}}}, 0x0) 1.572884802s ago: executing program 4 (id=2960): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(md5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="674e6883a6537778de895c168af25e4293dad05de695165fdd311b11ef3874645f23d15fbc24c42aaba44fa9b26e23c5151581f678004490b5b7051ebe969c3dfe", 0x41) 1.478422841s ago: executing program 4 (id=2961): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x0, 0x6361, 0x2, 0xfffffffd, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.382304343s ago: executing program 0 (id=2962): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r0, 0x6, 0x1, 0x0, &(0x7f00000000c0)=0x9) syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1.359541933s ago: executing program 1 (id=2963): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, 0x0, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_DISABLE_HT={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x40}}, 0x0) 1.241360947s ago: executing program 2 (id=2964): socket$inet_sctp(0x2, 0xe6a75bb3fa8875d2, 0x84) r0 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000040)=@id, &(0x7f00000000c0)=0x10, 0x800) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000001200)={'wlan1\x00', &(0x7f0000001100)=@ethtool_rxnfc={0x2a, 0x8, 0x7e1ab084, {0x3, @usr_ip4_spec={@multicast1, @multicast1, 0x53, 0x7f, 0x1, 0x9}, {0x0, @random="7729ba522e59", 0xa, 0x0, [0x10000, 0x3]}, @hdata="a86b57371eff451fd353517f755532b803741b5b2aade83e68f35d937d79d8993111b4ca75f0612da64df99e636e9cb7eb62b35f", {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 0x9, 0x6, [0x6]}, 0x3, 0x6}}}) setsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f0000000100)=0x7, 0x4) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x7, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000c40), 0x12) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f00000000c0), 0x12) 1.1633755s ago: executing program 4 (id=2965): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000100)={r0, r0, 0x0, 0x0, 0x0, 0x42, 0x58, 0x0, 0x5886, 0x61, 0x0, 0x8, 'syz1\x00'}) 1.074036274s ago: executing program 1 (id=2966): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x7d4165c9) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x0, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x4e24, 0x91, @remote, 0x1}}, 0x0, 0x0, 0x32, 0x0, "0c9e089c1b4a04000bde79f04103c458187eb46c2d996aff287154e786455261c425a7519cc275d04e6205abd307a0c4fa3838bf399ad5bd35f21907c7988d1300"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e24, 0x0, @private1={0xfc, 0x1, '\x00', 0xfe}, 0x2}}, 0x0, 0x0, 0x4, 0x0, "a1c1dd75a6843e10951cd4b347113e55eb499519becf7542c90bc21470e441225642855b5f2faed4a18d67efd5f2fdf98328de94410300"}, 0xd8) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r6) socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r6, 0x9) listen(r5, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000680)={@in6={{0xa, 0x4e21, 0x1, @mcast2, 0x4}}, 0x0, 0x0, 0x11, 0x0, "2b20a9a47cddc63b223be606d7fa19f22a369ae714de81ca4d11e10450d766feb63b382d54ba4bb57a219cad5ddfc1e4fe763044bcb3fbff48eb964283000000000000000100"}, 0xd8) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000540)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a066f0200ff000000000000000058000b4824ca945f64009400ff03", 0x2c}], 0x1) 953.89849ms ago: executing program 3 (id=2967): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r2, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) 952.676711ms ago: executing program 1 (id=2968): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) r2 = gettid() r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, 0x0, 0x0) listen(r3, 0x8) r4 = accept4(r3, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, 0x0, &(0x7f00000004c0)) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = socket(0x3, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000240)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000040)=0x10) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f0000000200)=@assoc_value={0x0, 0xfffffcbf}, 0x8) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="1c0100002b00010002000000fddbdf250901228014000000fe8000000000000000000000000000bb140002000100000000000000000000000000000150bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a"], 0x11c}], 0x1}, 0x0) getsockopt$bt_BT_RCVMTU(r7, 0x112, 0xd, &(0x7f00000000c0), &(0x7f0000000040)=0x2) r9 = socket(0x10, 0x803, 0x0) syz_emit_ethernet(0x5a, &(0x7f00000003c0)={@multicast, @dev, @val={@void, {0x8100, 0x2}}, {@canfd={0xd, {{0x1, 0x1, 0x1, 0x1}, 0x16, 0x3, 0x0, 0x0, "ffecad88920dc7efa78318cd5a704d76dea841d31b077edf7a8fe1eabc1b2c6ea46ec1877bd0aba6e61becbcdb1926c063e1605eda443c8809e55971dad8984f"}}}}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304f9fffffffedbdf2500007400", @ANYRES32=r1, @ANYBLOB="049c01000750050008001300", @ANYRES32=r2, @ANYBLOB="1400030076657468305f766972745f77696669001e7333368770d1073549c825093cdd0993038bfa"], 0x3c}, 0x1, 0x0, 0x0, 0x4802}, 0x0) 844.998498ms ago: executing program 0 (id=2969): socket$inet_udplite(0x2, 0x2, 0x88) socket(0x10, 0x80002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xb, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf07f}, 0x94) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000000206050000000000000000000000000005000400000000000900020073797a32000000000c0007800800120000000000050005000a000000a8c218b862c13fa957c92451ff858d42d270de726a147ba41760982fa7b64b95e6dd8edae81b478b6bc4c46ac9a294b304054196f24985e3b6ef71340b659649d2b4b927e8d798fdf321f1f7f73536ff21a6a0ee3bde9f678f5439fd1cb16200d025bf8176acc68f4f4895b4600eeadbff0302eaab33bc83926ae89cbba3f947828395dcffdb350657daf0e842ca47a11dc2c217e26832ad3356dfca175b0a0aa9ce5faa97c9637f5e8161b30d6f88a7e455c43046d81b46c279efe693418106496ef6297078e2603c9b11e74a5b30e99ccc27bfc056a0b131c98d9dd6177e0de26139e1553dfef0e0ab8c6c77644185f5509aa0d4983eea16f874fc47c9a144eae9abc772baa7622056a9856f8e8c0e2344b0a7f06a40f34e92b1b86da58d6777cebe773e21023e5d62f1cc9f94ab4b98dce79c8c5aa7fdf24627591aa0007395a1f251b536866eabc0dd6bfcb696e5a3c42a930129215e053855ca907c3ce8dba916e62cd7cdb2849d20"], 0x3c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000006301530000000000950000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d2, 0x0) r2 = accept4(0xffffffffffffffff, &(0x7f00000002c0)=@phonet, &(0x7f0000000480)=0xfffffffffffffdcf, 0x0) sendmsg$nl_netfilter(r2, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x5c, 0x11, 0x1, 0x5, 0x70bd27, 0x25dfdbfe, {0x7, 0x0, 0x4}, [@nested={0x47, 0x133, 0x0, 0x1, [@generic="64ce23ad7aaae4e89ddc7111ab13e58af9b665403105ac9c5e78234a54d929c6f23123a6697d37664542b46d1b1d4938a2ea0329b394fc2bf3d6ab6c802006b05b19ec"]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x1a4}}, 0x0) bind$bt_hci(r1, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r4, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="5000000003080101000000000000000000000000050003001100000006000240004000002c00048008000740000000004800014000000000080007400000000008000240000000007cff054000000000a5ff43265f06ed5bf555236d6bfa5aca915ac23b3e2b658e0375e6cdbda7cb7ca9f2974ced19f4f65a4bc6f1592b4f64be0209bd5fdcdde29fffcc9ca83abe2d66c7e347db50af36953dfe0ab4376120eea8760ab3653966"], 0x50}}, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r6, 0x400448ca, 0x0) 739.265769ms ago: executing program 4 (id=2970): sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c4) r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000040)=0xa000, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) recvfrom$inet(r0, 0x0, 0x0, 0x20, 0x0, 0x0) syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) 685.718049ms ago: executing program 2 (id=2971): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_TTL={0x5, 0x6, 0x7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x1}, @NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0xaca9}]}]}, 0x40}}, 0x0) 614.174457ms ago: executing program 0 (id=2972): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00', r0}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000fbdbdf25270000000e0001006e657464657673696d0000000f0002006e6574"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000ff7f0000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f00000000c0)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000000)="3f000000010000", 0x7) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r5) sendmsg$IEEE802154_LLSEC_SETPARAMS(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000003c0)={0x20, r6, 0x5, 0x0, 0x0, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x2000c094) 480.620667ms ago: executing program 1 (id=2973): socket$inet6_udplite(0xa, 0x2, 0x88) socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000180)) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000680)) socket$inet_mptcp(0x2, 0x1, 0x106) socket$packet(0x11, 0x3, 0x300) pipe(&(0x7f0000000140)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket(0x10, 0x803, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 433.026053ms ago: executing program 3 (id=2974): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000a40)={0x20, r2, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x24004084}, 0x40000) 430.899502ms ago: executing program 0 (id=2975): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200)=0x1, 0x12) write$cgroup_int(r1, &(0x7f00000000c0), 0x12) 304.211022ms ago: executing program 1 (id=2976): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0xfffe, 0x3000000, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r0, &(0x7f0000000280)="8f2a0a65", 0x4) 265.734861ms ago: executing program 0 (id=2977): socket$inet6_sctp(0xa, 0x801, 0x84) syz_init_net_socket$ax25(0x3, 0x3, 0xc4) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$inet6(0xa, 0x80002, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000180)) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000680)) socket$inet_mptcp(0x2, 0x1, 0x106) socket$packet(0x11, 0x3, 0x300) pipe(&(0x7f0000000200)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket(0x10, 0x803, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 264.874933ms ago: executing program 3 (id=2978): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x7d4165c9) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x0, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x4e24, 0x91, @remote, 0x1}}, 0x0, 0x0, 0x32, 0x0, "0c9e089c1b4a04000bde79f04103c458187eb46c2d996aff287154e786455261c425a7519cc275d04e6205abd307a0c4fa3838bf399ad5bd35f21907c7988d1300"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e24, 0x0, @private1={0xfc, 0x1, '\x00', 0xfe}, 0x2}}, 0x0, 0x0, 0x4, 0x0, "a1c1dd75a6843e10951cd4b347113e55eb499519becf7542c90bc21470e441225642855b5f2faed4a18d67efd5f2fdf98328de94410300"}, 0xd8) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r6) socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r6, 0x9) listen(r5, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000680)={@in6={{0xa, 0x4e21, 0x1, @mcast2, 0x4}}, 0x0, 0x0, 0x11, 0x0, "2b20a9a47cddc63b223be606d7fa19f22a369ae714de81ca4d11e10450d766feb63b382d54ba4bb57a219cad5ddfc1e4fe763044bcb3fbff48eb964283000000000000000100"}, 0xd8) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000540)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a066f0200ff000000000000000058000b4824ca945f64009400ff03", 0x2c}], 0x1) 213.286617ms ago: executing program 2 (id=2979): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x1c, r1, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4814) 177.370996ms ago: executing program 3 (id=2980): socket$inet_sctp(0x2, 0xe6a75bb3fa8875d2, 0x84) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000040)=@id, &(0x7f00000000c0)=0x10, 0x800) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000001200)={'wlan1\x00', 0x0}) setsockopt$TIPC_CONN_TIMEOUT(r1, 0x10f, 0x82, &(0x7f0000000100)=0x7, 0x4) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000011000100000000000000000007000000", @ANYBLOB="000000002000000014001a8010"], 0x34}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x7, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r5 = openat$cgroup_type(r4, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r5, &(0x7f0000000280), 0x9) r6 = openat$cgroup_procs(r4, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000c40), 0x12) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f00000000c0), 0x12) 125.249791ms ago: executing program 1 (id=2981): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000004c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002, 0x2000}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x406f413, 0x0) 30.214645ms ago: executing program 0 (id=2982): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)={0x2c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004090}, 0x0) 0s ago: executing program 3 (id=2983): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000006c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) sendmmsg$inet(r0, &(0x7f0000000600)=[{{&(0x7f0000000c00)={0x2, 0x4e20, @multicast2}, 0x10, 0x0}}], 0x1, 0x2000c044) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000040)="fbe65dc390da7ee179a4", 0xa}, {&(0x7f0000000700)="fdc913c5fb15c710950f8e561c846edc4223d841cad2a2154e3bad5fc74c8e5172171929da09a2e314c77de173e154838fc39c1684ea331216706f4d645dc0aea3d0e06b72545914394805a2513f1cc11bea6266382e51a10d7021329f79eb6067dfb71729c45f1c6833a0c39fab03fe8b0287fb43941b186dca8a2566859bd9d703269b72961338b8770982f94f867fb9cbdfbad33279788d610dc62ac87a843b674dcd97fd1ac6cb09047da172d781dd0a889441efaceaea", 0xb9}, {&(0x7f0000000f40)="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", 0x445}], 0x3}, 0x40080) kernel console output (not intermixed with test programs): interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.936709][ T5874] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.949362][ T5874] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.956433][ T5874] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.982533][ T5874] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.095330][ T5865] hsr_slave_0: entered promiscuous mode [ 90.102576][ T5865] hsr_slave_1: entered promiscuous mode [ 90.109375][ T5865] debugfs: 'hsr0' already exists in 'hsr' [ 90.115146][ T5865] Cannot create hsr debugfs directory [ 90.200704][ T5861] hsr_slave_0: entered promiscuous mode [ 90.207923][ T5861] hsr_slave_1: entered promiscuous mode [ 90.214069][ T5861] debugfs: 'hsr0' already exists in 'hsr' [ 90.220930][ T5861] Cannot create hsr debugfs directory [ 90.356566][ T5874] hsr_slave_0: entered promiscuous mode [ 90.363099][ T5874] hsr_slave_1: entered promiscuous mode [ 90.370096][ T5874] debugfs: 'hsr0' already exists in 'hsr' [ 90.375853][ T5874] Cannot create hsr debugfs directory [ 90.819034][ T5869] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 90.849696][ T5869] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 90.877862][ T5869] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 90.890398][ T5869] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 90.967620][ T5872] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 90.995897][ T5872] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 91.024343][ T5872] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 91.035846][ T5872] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 91.091182][ T5865] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 91.098766][ T5879] Bluetooth: hci2: command tx timeout [ 91.098776][ T5873] Bluetooth: hci1: command tx timeout [ 91.110130][ T5873] Bluetooth: hci0: command tx timeout [ 91.120529][ T5865] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 91.143539][ T5865] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 91.176937][ T5879] Bluetooth: hci3: command tx timeout [ 91.188237][ T5865] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 91.256557][ T5879] Bluetooth: hci4: command tx timeout [ 91.276237][ T5861] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 91.289649][ T5861] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 91.303358][ T5861] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 91.314733][ T5861] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 91.453860][ T5874] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 91.477942][ T5874] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 91.489721][ T5874] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 91.503075][ T5874] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 91.559763][ T5869] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.632398][ T5869] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.653288][ T5872] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.693756][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.701435][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.747049][ T5865] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.761480][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.768756][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.795439][ T5872] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.815280][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.822499][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.845246][ T5865] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.878961][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.886234][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.922592][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.929791][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.941181][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.948342][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.019440][ T5874] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.042899][ T5861] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.135660][ T5861] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.175785][ T5874] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.211324][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.218575][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.265339][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.272715][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.329507][ T3490] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.336749][ T3490] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.367171][ T3490] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.374373][ T3490] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.506986][ T5869] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.851866][ T5872] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.048305][ T5872] veth0_vlan: entered promiscuous mode [ 93.084696][ T5872] veth1_vlan: entered promiscuous mode [ 93.177475][ T5879] Bluetooth: hci0: command tx timeout [ 93.182966][ T5879] Bluetooth: hci1: command tx timeout [ 93.188595][ T5873] Bluetooth: hci2: command tx timeout [ 93.244707][ T5865] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.257106][ T5879] Bluetooth: hci3: command tx timeout [ 93.311915][ T5872] veth0_macvtap: entered promiscuous mode [ 93.338283][ T5879] Bluetooth: hci4: command tx timeout [ 93.343494][ T5872] veth1_macvtap: entered promiscuous mode [ 93.364472][ T5861] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.412794][ T5872] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.442474][ T5872] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.474983][ T5874] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.490280][ T58] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.500280][ T58] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.524314][ T58] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.534291][ T58] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.575434][ T5861] veth0_vlan: entered promiscuous mode [ 93.619625][ T5865] veth0_vlan: entered promiscuous mode [ 93.628821][ T5869] veth0_vlan: entered promiscuous mode [ 93.638566][ T5861] veth1_vlan: entered promiscuous mode [ 93.689552][ T5869] veth1_vlan: entered promiscuous mode [ 93.702253][ T5865] veth1_vlan: entered promiscuous mode [ 93.754881][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.767556][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.835567][ T5861] veth0_macvtap: entered promiscuous mode [ 93.847827][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.849317][ T5861] veth1_macvtap: entered promiscuous mode [ 93.855683][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.877891][ T5874] veth0_vlan: entered promiscuous mode [ 93.910866][ T5865] veth0_macvtap: entered promiscuous mode [ 93.934155][ T5874] veth1_vlan: entered promiscuous mode [ 93.968167][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.983595][ T5869] veth0_macvtap: entered promiscuous mode [ 93.993161][ T5865] veth1_macvtap: entered promiscuous mode [ 94.005138][ T5872] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 94.020171][ T5869] veth1_macvtap: entered promiscuous mode [ 94.052894][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.103876][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.118315][ T5869] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.179851][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.201053][ T5869] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.211108][ T197] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.244105][ T197] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.290446][ T5874] veth0_macvtap: entered promiscuous mode [ 94.339575][ T197] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.373267][ T5991] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7'. [ 94.390620][ T197] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.399788][ T197] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.410580][ T197] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.430876][ T5874] veth1_macvtap: entered promiscuous mode [ 94.476047][ T197] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.500532][ T197] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.550049][ T197] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.562898][ T197] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.608563][ T197] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.620990][ T197] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.673575][ T5874] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.731833][ T5874] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.759815][ T1116] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.783215][ T1116] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.844586][ T49] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.888789][ T49] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.899749][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.899792][ T1116] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.908599][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.931141][ T1116] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.963200][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.973397][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.022920][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.038369][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.100107][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.113334][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.233036][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.249772][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.259738][ T5879] Bluetooth: hci2: command tx timeout [ 95.264648][ T5873] Bluetooth: hci0: command tx timeout [ 95.265176][ T5879] Bluetooth: hci1: command tx timeout [ 95.310996][ T6005] syz.3.12 uses obsolete (PF_INET,SOCK_PACKET) [ 95.337833][ T5879] Bluetooth: hci3: command tx timeout [ 95.374644][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.417869][ T5879] Bluetooth: hci4: command tx timeout [ 95.438142][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.782260][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.826405][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.044109][ T6024] netlink: 'syz.3.15': attribute type 29 has an invalid length. [ 96.083152][ T6024] netlink: 'syz.3.15': attribute type 29 has an invalid length. [ 96.122516][ T6024] netlink: 500 bytes leftover after parsing attributes in process `syz.3.15'. [ 96.163183][ T6024] unsupported nla_type 58 [ 96.176715][ T6026] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 96.217485][ T6026] gretap1: entered promiscuous mode [ 96.228143][ T6029] sock: sock_set_timeout: `syz.0.1' (pid 6029) tries to set negative timeout [ 96.233866][ T6026] gretap1: entered allmulticast mode [ 96.481642][ T6034] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 97.003421][ T5936] IPVS: starting estimator thread 0... [ 97.018172][ T6059] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 97.128337][ T6065] IPVS: using max 25 ests per chain, 60000 per kthread [ 97.258465][ T6072] netlink: 4 bytes leftover after parsing attributes in process `syz.4.35'. [ 97.262940][ T980] cfg80211: failed to load regulatory.db [ 97.913378][ T6095] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 97.939161][ T6092] netdevsim netdevsim4 : renamed from netdevsim0 (while UP) [ 98.074329][ T6097] warning: `syz.3.44' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 98.360540][ T6108] netlink: 8 bytes leftover after parsing attributes in process `syz.0.49'. [ 99.088428][ T6138] netlink: 24 bytes leftover after parsing attributes in process `syz.3.63'. [ 99.228988][ T6143] netlink: 8 bytes leftover after parsing attributes in process `syz.2.65'. [ 99.276986][ T6143] netlink: 12 bytes leftover after parsing attributes in process `syz.2.65'. [ 99.383106][ T13] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.430487][ T13] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.479074][ T13] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.517082][ T13] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.551943][ T6155] netlink: 'syz.1.70': attribute type 17 has an invalid length. [ 99.591018][ T6155] netlink: 4 bytes leftover after parsing attributes in process `syz.1.70'. [ 99.606466][ T6155] netlink: 28 bytes leftover after parsing attributes in process `syz.1.70'. [ 100.585278][ T6196] netlink: 51 bytes leftover after parsing attributes in process `syz.2.89'. [ 100.732693][ T6199] veth0: entered promiscuous mode [ 100.763053][ T6199] netlink: 4 bytes leftover after parsing attributes in process `syz.0.90'. [ 100.959780][ T6204] netlink: 'syz.1.93': attribute type 5 has an invalid length. [ 100.983550][ T6204] Zero length message leads to an empty skb [ 101.604901][ T6230] batadv_slave_1: entered promiscuous mode [ 101.626162][ T6229] batadv_slave_1: left promiscuous mode [ 101.635503][ T6231] netlink: 'syz.1.105': attribute type 1 has an invalid length. [ 101.669673][ T6233] netlink: 'syz.0.107': attribute type 11 has an invalid length. [ 101.788233][ T6235] netlink: 'syz.3.108': attribute type 4 has an invalid length. [ 102.328140][ T6264] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 4032 [ 102.599527][ T6277] netlink: 28 bytes leftover after parsing attributes in process `syz.0.123'. [ 102.609763][ T6277] netlink: 'syz.0.123': attribute type 7 has an invalid length. [ 102.620908][ T6277] netlink: 'syz.0.123': attribute type 8 has an invalid length. [ 102.629817][ T6277] netlink: 4 bytes leftover after parsing attributes in process `syz.0.123'. [ 102.784089][ T6277] gretap0: entered promiscuous mode [ 102.797326][ T6277] batadv_slave_1: entered promiscuous mode [ 102.804474][ T6277] erspan0: entered promiscuous mode [ 103.042318][ T5866] IPVS: starting estimator thread 0... [ 103.186653][ T6287] IPVS: using max 23 ests per chain, 55200 per kthread [ 103.239442][ T6293] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.131'. [ 103.716180][ T6311] syzkaller1: entered promiscuous mode [ 103.724929][ T6311] syzkaller1: entered allmulticast mode [ 103.953475][ T6319] netlink: 12 bytes leftover after parsing attributes in process `syz.2.142'. [ 104.182373][ T6331] netlink: 8 bytes leftover after parsing attributes in process `syz.1.146'. [ 104.672381][ T6351] netlink: 'syz.4.154': attribute type 14 has an invalid length. [ 104.718557][ T6351] netlink: 4 bytes leftover after parsing attributes in process `syz.4.154'. [ 104.746116][ T49] netdevsim netdevsim4 : set [0, 0] type 1 family 0 port 8472 - 0 [ 104.765472][ T6351] netlink: 'syz.4.154': attribute type 14 has an invalid length. [ 104.782799][ T49] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.803398][ T6351] netlink: 4 bytes leftover after parsing attributes in process `syz.4.154'. [ 104.829245][ T49] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.847492][ T49] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 105.485734][ T6364] netlink: 4 bytes leftover after parsing attributes in process `syz.1.161'. [ 105.750576][ T6371] netlink: 12 bytes leftover after parsing attributes in process `syz.0.164'. [ 105.856967][ T6378] netlink: 236 bytes leftover after parsing attributes in process `syz.1.165'. [ 107.363777][ T6425] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 107.619298][ T6434] netlink: 'syz.0.187': attribute type 9 has an invalid length. [ 107.699644][ T6434] netlink: 'syz.0.187': attribute type 9 has an invalid length. [ 108.035460][ T6452] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 108.379381][ T6464] netlink: 16 bytes leftover after parsing attributes in process `syz.1.200'. [ 108.462975][ T6467] netlink: 'syz.4.201': attribute type 1 has an invalid length. [ 108.663986][ T6467] 8021q: adding VLAN 0 to HW filter on device bond1 [ 108.807968][ T6473] 8021q: adding VLAN 0 to HW filter on device bond1 [ 108.818100][ T6473] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 108.833019][ T6473] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 109.225920][ T6491] bond1: entered allmulticast mode [ 109.242905][ T6491] 8021q: adding VLAN 0 to HW filter on device bond1 [ 109.261250][ T6491] bridge0: port 3(bond1) entered blocking state [ 109.269936][ T6491] bridge0: port 3(bond1) entered disabled state [ 109.280372][ T6491] bond1: entered promiscuous mode [ 109.291931][ T6491] bridge0: port 3(bond1) entered blocking state [ 109.298651][ T6491] bridge0: port 3(bond1) entered forwarding state [ 109.315337][ T197] bridge0: port 3(bond1) entered disabled state [ 109.950737][ T6525] netlink: 8 bytes leftover after parsing attributes in process `syz.4.223'. [ 110.059582][ T5873] Bluetooth: hci4: command 0x0405 tx timeout [ 110.501278][ T6546] netlink: 'syz.1.233': attribute type 12 has an invalid length. [ 110.519615][ T6546] netlink: 'syz.1.233': attribute type 29 has an invalid length. [ 110.535070][ T6546] netlink: 148 bytes leftover after parsing attributes in process `syz.1.233'. [ 110.576459][ T6546] netlink: 'syz.1.233': attribute type 2 has an invalid length. [ 110.608215][ T6546] netlink: 23 bytes leftover after parsing attributes in process `syz.1.233'. [ 111.291561][ T6584] netlink: 4 bytes leftover after parsing attributes in process `syz.2.247'. [ 111.782628][ T6589] netlink: 8 bytes leftover after parsing attributes in process `syz.4.249'. [ 112.350443][ T6581] netlink: 'syz.1.246': attribute type 21 has an invalid length. [ 112.358619][ T6581] netlink: 4 bytes leftover after parsing attributes in process `syz.1.246'. [ 112.391508][ T6581] netlink: 'syz.1.246': attribute type 21 has an invalid length. [ 112.415484][ T6581] netlink: 4 bytes leftover after parsing attributes in process `syz.1.246'. [ 112.465142][ T58] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.488824][ T58] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.540705][ T58] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.575396][ T58] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.562140][ T6638] netlink: 'syz.3.271': attribute type 10 has an invalid length. [ 113.599021][ T6638] netlink: 40 bytes leftover after parsing attributes in process `syz.3.271'. [ 113.645287][ T6638] dummy0: entered promiscuous mode [ 113.670999][ T6638] bridge0: port 4(dummy0) entered blocking state [ 113.695285][ T6638] bridge0: port 4(dummy0) entered disabled state [ 113.740269][ T6638] dummy0: entered allmulticast mode [ 113.765740][ T6638] bridge0: port 4(dummy0) entered blocking state [ 113.772576][ T6638] bridge0: port 4(dummy0) entered forwarding state [ 114.160631][ T6661] pim6reg1: entered promiscuous mode [ 114.166007][ T6661] pim6reg1: entered allmulticast mode [ 114.346667][ T197] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 114.500338][ T6679] netlink: 'syz.1.291': attribute type 30 has an invalid length. [ 114.861021][ T6694] netlink: 4 bytes leftover after parsing attributes in process `syz.4.296'. [ 115.222115][ T6701] syzkaller1: entered promiscuous mode [ 115.255682][ T6701] syzkaller1: entered allmulticast mode [ 116.426853][ T6750] netlink: 'syz.2.318': attribute type 12 has an invalid length. [ 116.450169][ T6750] netlink: 4 bytes leftover after parsing attributes in process `syz.2.318'. [ 116.484597][ T6750] netlink: 'syz.2.318': attribute type 12 has an invalid length. [ 116.513113][ T6750] netlink: 4 bytes leftover after parsing attributes in process `syz.2.318'. [ 117.016580][ T6765] netlink: 40 bytes leftover after parsing attributes in process `syz.0.324'. [ 117.669990][ T6789] netlink: 96 bytes leftover after parsing attributes in process `syz.4.337'. [ 120.323733][ T6876] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.369'. [ 121.481306][ T6900] netlink: 'syz.1.379': attribute type 15 has an invalid length. [ 121.509884][ T6900] netlink: 4 bytes leftover after parsing attributes in process `syz.1.379'. [ 121.552884][ T6900] netlink: 'syz.1.379': attribute type 15 has an invalid length. [ 121.592310][ T6900] netlink: 4 bytes leftover after parsing attributes in process `syz.1.379'. [ 123.520466][ T6929] syzkaller1: entered promiscuous mode [ 123.526011][ T6929] syzkaller1: entered allmulticast mode [ 123.586678][ T6929] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 124.536396][ T12] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 124.853300][ T6963] netlink: 4 bytes leftover after parsing attributes in process `syz.1.403'. [ 125.483638][ T6980] netlink: 4 bytes leftover after parsing attributes in process `syz.4.410'. [ 125.765633][ T6713] Set syz1 is full, maxelem 65536 reached [ 125.850488][ T6986] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 126.081286][ T7000] netlink: 'syz.4.418': attribute type 22 has an invalid length. [ 126.104967][ T7000] netlink: 4 bytes leftover after parsing attributes in process `syz.4.418'. [ 126.144800][ T7000] netlink: 'syz.4.418': attribute type 22 has an invalid length. [ 126.183475][ T7000] netlink: 4 bytes leftover after parsing attributes in process `syz.4.418'. [ 126.216897][ T7005] netlink: 12 bytes leftover after parsing attributes in process `syz.2.420'. [ 126.368811][ T7005] netlink: 12 bytes leftover after parsing attributes in process `syz.2.420'. [ 126.857364][ T7028] netlink: 4 bytes leftover after parsing attributes in process `syz.1.429'. [ 126.942279][ T7034] netlink: 4 bytes leftover after parsing attributes in process `syz.3.432'. [ 127.206628][ T7045] netlink: 12 bytes leftover after parsing attributes in process `syz.2.437'. [ 127.265933][ T7047] netlink: 9 bytes leftover after parsing attributes in process `syz.4.439'. [ 127.282104][ T7047] gretap0: entered promiscuous mode [ 127.302912][ T7047] netlink: 5 bytes leftover after parsing attributes in process `syz.4.439'. [ 127.320318][ T7047] 0ªî{X¹¦: renamed from gretap0 [ 127.353842][ T7047] 0ªî{X¹¦: left promiscuous mode [ 127.368683][ T7047] 0ªî{X¹¦: entered allmulticast mode [ 127.391371][ T7047] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 127.879623][ T7064] netlink: 'syz.2.445': attribute type 1 has an invalid length. [ 128.015102][ T7064] 8021q: adding VLAN 0 to HW filter on device bond3 [ 128.110910][ T7071] bond3: (slave geneve2): making interface the new active one [ 128.139282][ T7071] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 128.468570][ T7090] netlink: 'syz.1.457': attribute type 4 has an invalid length. [ 128.474558][ T7091] openvswitch: netlink: IPv4 tun info is not correct [ 128.978187][ T7115] netlink: 'syz.3.463': attribute type 9 has an invalid length. [ 128.987650][ T7115] netlink: 4 bytes leftover after parsing attributes in process `syz.3.463'. [ 129.002765][ T13] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0xfa [ 129.042131][ T58] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 129.042245][ T7115] netlink: 'syz.3.463': attribute type 9 has an invalid length. [ 129.086466][ T58] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 129.105981][ T7115] netlink: 4 bytes leftover after parsing attributes in process `syz.3.463'. [ 129.139358][ T58] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 129.181463][ T58] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 129.768173][ T7136] netlink: 48 bytes leftover after parsing attributes in process `syz.1.472'. [ 129.938769][ T7142] pim6reg1: entered promiscuous mode [ 129.944480][ T7142] pim6reg1: entered allmulticast mode [ 130.269638][ T7153] netlink: 8 bytes leftover after parsing attributes in process `syz.0.479'. [ 130.784243][ T7176] netlink: 'syz.4.488': attribute type 4 has an invalid length. [ 130.858827][ T7178] netlink: 'syz.4.488': attribute type 4 has an invalid length. [ 130.904333][ T7179] bridge_slave_0: left allmulticast mode [ 130.949615][ T7179] bridge_slave_0: left promiscuous mode [ 130.976469][ T7179] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.005427][ T7179] bridge_slave_1: left allmulticast mode [ 131.070651][ T7179] bridge_slave_1: left promiscuous mode [ 131.086312][ T7179] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.262761][ T7179] bond0: (slave bond_slave_0): Releasing backup interface [ 131.284078][ T7193] netlink: 12 bytes leftover after parsing attributes in process `syz.0.496'. [ 131.332856][ T7179] bond0: (slave bond_slave_1): Releasing backup interface [ 131.370277][ T7179] team0: Port device team_slave_0 removed [ 131.401118][ T7179] team0: Port device team_slave_1 removed [ 131.440718][ T7179] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 131.479526][ T7179] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 131.495797][ T7179] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 131.510401][ T7179] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 131.565863][ T7179] bond3: (slave geneve2): Releasing active interface [ 131.930581][ T7207] netlink: 'syz.4.503': attribute type 1 has an invalid length. [ 132.515522][ T7235] syzkaller1: entered promiscuous mode [ 132.535187][ T7235] syzkaller1: entered allmulticast mode [ 132.836604][ T7248] __nla_validate_parse: 1 callbacks suppressed [ 132.836628][ T7248] netlink: 8 bytes leftover after parsing attributes in process `syz.3.518'. [ 133.064620][ T12] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 133.126644][ T7264] netlink: 'syz.0.523': attribute type 12 has an invalid length. [ 133.144246][ T7264] netlink: 'syz.0.523': attribute type 29 has an invalid length. [ 133.163814][ T7264] netlink: 148 bytes leftover after parsing attributes in process `syz.0.523'. [ 133.212202][ T7265] netlink: 'syz.0.523': attribute type 12 has an invalid length. [ 133.240394][ T7265] netlink: 'syz.0.523': attribute type 29 has an invalid length. [ 133.259327][ T7265] netlink: 148 bytes leftover after parsing attributes in process `syz.0.523'. [ 133.491999][ T7272] netlink: 212316 bytes leftover after parsing attributes in process `syz.0.526'. [ 133.942175][ T7283] netlink: 'syz.0.534': attribute type 4 has an invalid length. [ 133.981281][ T7287] netlink: 8 bytes leftover after parsing attributes in process `syz.2.532'. [ 133.995629][ T7283] netlink: 'syz.0.534': attribute type 4 has an invalid length. [ 134.009208][ T7287] netlink: 12 bytes leftover after parsing attributes in process `syz.2.532'. [ 134.067036][ T7287] netlink: 'syz.2.532': attribute type 7 has an invalid length. [ 134.271737][ T7295] syzkaller1: entered promiscuous mode [ 134.286166][ T7295] syzkaller1: entered allmulticast mode [ 134.293232][ T7299] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.539'. [ 134.625856][ T7314] netlink: 'syz.4.545': attribute type 1 has an invalid length. [ 134.669324][ T7314] bond2: entered promiscuous mode [ 134.675516][ T7314] 8021q: adding VLAN 0 to HW filter on device bond2 [ 134.762222][ T7314] 8021q: adding VLAN 0 to HW filter on device bond3 [ 134.772702][ T7314] bond2: (slave bond3): making interface the new active one [ 134.780550][ T7314] bond3: entered promiscuous mode [ 134.786825][ T7314] bond2: (slave bond3): Enslaving as an active interface with an up link [ 134.803997][ T7318] ip6gre1: entered allmulticast mode [ 134.920422][ T7322] netlink: 4 bytes leftover after parsing attributes in process `syz.1.547'. [ 135.008783][ T7327] netlink: 4 bytes leftover after parsing attributes in process `syz.1.550'. [ 135.040737][ T7327] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.157904][ T7327] bridge_slave_1 (unregistering): left allmulticast mode [ 135.172256][ T7327] bridge_slave_1 (unregistering): left promiscuous mode [ 135.180501][ T7327] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.030165][ T7356] netlink: 112 bytes leftover after parsing attributes in process `syz.0.564'. [ 136.204671][ T7362] netlink: 'syz.2.565': attribute type 18 has an invalid length. [ 136.279541][ T7362] netlink: 'syz.2.565': attribute type 18 has an invalid length. [ 136.574395][ T7376] block nbd2: NBD_DISCONNECT [ 137.240276][ T12] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 138.221352][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.228533][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.308466][ T7441] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 138.684821][ T7457] __nla_validate_parse: 5 callbacks suppressed [ 138.684844][ T7457] netlink: 9 bytes leftover after parsing attributes in process `syz.4.606'. [ 138.738525][ T7461] netlink: 5 bytes leftover after parsing attributes in process `syz.4.606'. [ 138.766749][ T7457] 0ªî{X¹¦: entered promiscuous mode [ 138.772112][ T7457] 0ªî{X¹¦: left allmulticast mode [ 138.832740][ T7461] 1ªî{X¹¦: renamed from 30ªî{X¹¦ [ 138.865005][ T7461] 1ªî{X¹¦: left promiscuous mode [ 138.886965][ T7461] 1ªî{X¹¦: entered allmulticast mode [ 138.895188][ T7461] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 139.195937][ T7478] netlink: 'syz.4.614': attribute type 12 has an invalid length. [ 139.214918][ T7481] netlink: 'syz.1.616': attribute type 1 has an invalid length. [ 139.291779][ T7481] bond1: entered promiscuous mode [ 139.301133][ T7481] 8021q: adding VLAN 0 to HW filter on device bond1 [ 139.339165][ T7487] 8021q: adding VLAN 0 to HW filter on device bond1 [ 139.359944][ T7487] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 139.376482][ T7487] bond1: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 139.409877][ T7487] bond1: (slave wireguard0): making interface the new active one [ 139.435238][ T7487] wireguard0: entered promiscuous mode [ 139.460137][ T7487] bond1: (slave wireguard0): Enslaving as an active interface with an up link [ 139.733150][ T7497] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.621'. [ 140.001031][ T7506] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 140.031418][ T7506] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 140.131548][ T7514] syz_tun: entered allmulticast mode [ 140.143103][ T7512] netlink: 12 bytes leftover after parsing attributes in process `syz.4.628'. [ 140.170136][ T7513] syz_tun: left allmulticast mode [ 140.971751][ T13] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 140.989116][ T7547] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 141.224245][ T7558] netlink: 4 bytes leftover after parsing attributes in process `syz.0.648'. [ 141.327744][ T7562] nbd: nbd4 already in use [ 141.691141][ T7579] netlink: 24 bytes leftover after parsing attributes in process `syz.4.657'. [ 141.825779][ T7583] netlink: 4 bytes leftover after parsing attributes in process `syz.2.658'. [ 141.846679][ T7586] netlink: 28 bytes leftover after parsing attributes in process `syz.4.660'. [ 141.883430][ T7586] netlink: 'syz.4.660': attribute type 7 has an invalid length. [ 141.932667][ T7586] netlink: 'syz.4.660': attribute type 8 has an invalid length. [ 141.952661][ T7586] netlink: 4 bytes leftover after parsing attributes in process `syz.4.660'. [ 141.962877][ T7588] Illegal XDP return value 3212956480 on prog (id 75) dev N/A, expect packet loss! [ 142.093935][ T7592] netlink: 'syz.2.663': attribute type 21 has an invalid length. [ 142.120415][ T7592] netlink: 'syz.2.663': attribute type 22 has an invalid length. [ 142.129957][ T7592] netlink: 'syz.2.663': attribute type 23 has an invalid length. [ 142.153863][ T7592] netlink: 'syz.2.663': attribute type 25 has an invalid length. [ 142.162273][ T7592] netlink: 'syz.2.663': attribute type 26 has an invalid length. [ 142.170716][ T7592] netlink: 16 bytes leftover after parsing attributes in process `syz.2.663'. [ 143.010201][ T7626] bridge_slave_0: left allmulticast mode [ 143.044124][ T7626] bridge_slave_0: left promiscuous mode [ 143.059244][ T7626] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.113416][ T7626] bond0: (slave bond_slave_0): Releasing backup interface [ 143.146797][ T7626] bond0: (slave bond_slave_1): Releasing backup interface [ 143.203920][ T7626] team0: Port device team_slave_0 removed [ 143.258057][ T7626] team0: Port device team_slave_1 removed [ 143.275864][ T7626] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 143.298291][ T7626] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 143.313634][ T7626] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 143.333638][ T7626] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 143.475626][ T7626] bond1: (slave wireguard0): Releasing backup interface [ 143.522519][ T7626] wireguard0: left promiscuous mode [ 143.643566][ T7646] dummy0: left allmulticast mode [ 143.666663][ T7646] bridge0: port 4(dummy0) entered disabled state [ 143.684841][ T7646] bond1: left promiscuous mode [ 143.691351][ T7646] bridge0: port 3(bond1) entered disabled state [ 143.700143][ T7646] bridge_slave_1: left allmulticast mode [ 143.705933][ T7646] bridge_slave_1: left promiscuous mode [ 143.712261][ T7646] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.725139][ T7646] bridge_slave_0: left allmulticast mode [ 143.733134][ T7646] bridge_slave_0: left promiscuous mode [ 143.743045][ T7646] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.210457][ T7674] trusted_key: syz.3.697 sent an empty control message without MSG_MORE. [ 144.292797][ T7678] netlink: 'syz.4.700': attribute type 1 has an invalid length. [ 144.301357][ T7678] netlink: 'syz.4.700': attribute type 2 has an invalid length. [ 144.312380][ T7678] netlink: 'syz.4.700': attribute type 1 has an invalid length. [ 144.320850][ T7678] netlink: 'syz.4.700': attribute type 2 has an invalid length. [ 144.574716][ T7691] __nla_validate_parse: 3 callbacks suppressed [ 144.574740][ T7691] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.704'. [ 144.866452][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 145.567345][ T7720] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 146.698309][ T7774] netlink: 12 bytes leftover after parsing attributes in process `syz.2.737'. [ 147.048388][ T7789] netlink: 596 bytes leftover after parsing attributes in process `syz.4.740'. [ 147.082959][ T7790] netlink: 24 bytes leftover after parsing attributes in process `syz.1.743'. [ 147.146053][ T7782] netlink: 'syz.4.740': attribute type 29 has an invalid length. [ 147.249610][ T7794] netlink: 24 bytes leftover after parsing attributes in process `syz.3.745'. [ 147.293917][ T7784] netlink: 'syz.4.740': attribute type 29 has an invalid length. [ 147.342729][ T7796] netlink: 84 bytes leftover after parsing attributes in process `syz.0.744'. [ 147.640148][ T7800] raw_sendmsg: syz.4.747 forgot to set AF_INET. Fix it! [ 147.770558][ T7811] netlink: 'syz.3.751': attribute type 1 has an invalid length. [ 147.780348][ T7812] netlink: 8 bytes leftover after parsing attributes in process `syz.2.750'. [ 147.800580][ T7811] netlink: 'syz.3.751': attribute type 4 has an invalid length. [ 147.824725][ T7811] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.751'. [ 148.131846][ T7822] netlink: 12 bytes leftover after parsing attributes in process `syz.3.756'. [ 148.753797][ T7841] netlink: 'syz.2.765': attribute type 1 has an invalid length. [ 148.857129][ T7848] bond4: (slave bridge1): making interface the new active one [ 148.865794][ T7848] bond4: (slave bridge1): Enslaving as an active interface with an up link [ 149.429995][ T7868] sctp: [Deprecated]: syz.0.775 (pid 7868) Use of int in maxseg socket option. [ 149.429995][ T7868] Use struct sctp_assoc_value instead [ 149.454294][ T7869] tipc: Started in network mode [ 149.463768][ T7869] tipc: Node identity ac14140f, cluster identity 4711 [ 149.479663][ T7869] tipc: New replicast peer: 255.255.255.255 [ 149.511022][ T7869] tipc: Enabled bearer , priority 10 [ 149.824703][ T7877] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 149.841723][ T7877] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.864790][ T7886] netlink: 4 bytes leftover after parsing attributes in process `syz.2.782'. [ 149.903450][ T7884] veth1_to_bond: entered allmulticast mode [ 150.005859][ T7886] veth1_to_bond (unregistering): left allmulticast mode [ 150.030223][ T7888] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 150.093210][ T7877] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 150.126719][ T7877] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.235302][ T7877] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 150.263090][ T7877] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.334161][ T7903] netlink: 'syz.0.787': attribute type 1 has an invalid length. [ 150.343833][ T7903] netlink: 'syz.0.787': attribute type 4 has an invalid length. [ 150.360327][ T7903] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.787'. [ 150.420240][ T7877] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 150.449550][ T7877] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.603545][ T983] tipc: Node number set to 2886997007 [ 150.769475][ T1116] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.811178][ T1116] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.873628][ T3490] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.903942][ T3490] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.007604][ T49] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 151.020656][ T49] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.160651][ T7919] syzkaller0: entered promiscuous mode [ 151.166456][ T7919] syzkaller0: entered allmulticast mode [ 151.173033][ T3490] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 151.186489][ T3490] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.946728][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 153.625353][ T7980] netlink: 'syz.1.815': attribute type 3 has an invalid length. [ 154.856646][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.929406][ T8032] netlink: 'syz.0.835': attribute type 1 has an invalid length. [ 155.103319][ T8032] bond1: (slave bridge1): making interface the new active one [ 155.123012][ T8032] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 155.236976][ T58] nci: nci_rx_work: unknown MT 0x6 [ 155.372453][ T8052] netlink: 'syz.0.843': attribute type 4 has an invalid length. [ 155.671394][ T8058] syzkaller0: entered promiscuous mode [ 155.677269][ T8058] syzkaller0: entered allmulticast mode [ 155.703604][ T8064] veth1: entered allmulticast mode [ 157.316168][ T8089] ip6erspan0: entered promiscuous mode [ 157.364631][ T8097] netlink: 4 bytes leftover after parsing attributes in process `syz.2.859'. [ 157.379214][ T8091] netlink: 32 bytes leftover after parsing attributes in process `syz.4.858'. [ 158.665933][ T8152] netlink: 4 bytes leftover after parsing attributes in process `syz.1.879'. [ 158.680679][ T8152] Unsupported xt match [ 158.680699][ T8152] unable to load match [ 158.834871][ T8162] af_packet: tpacket_rcv: packet too big, clamped from 65232 to 3944. macoff=96 [ 160.642619][ T8235] netlink: 92 bytes leftover after parsing attributes in process `syz.2.915'. [ 160.681820][ T8236] only policy match revision 0 supported [ 160.681845][ T8236] unable to load match [ 162.235903][ T8287] netlink: 8 bytes leftover after parsing attributes in process `syz.2.937'. [ 162.288711][ T8287] netlink: 12 bytes leftover after parsing attributes in process `syz.2.937'. [ 162.360350][ T8294] netlink: 12 bytes leftover after parsing attributes in process `syz.1.940'. [ 162.369753][ T8292] lo speed is unknown, defaulting to 1000 [ 162.383762][ T8292] lo speed is unknown, defaulting to 1000 [ 162.407009][ T8292] lo speed is unknown, defaulting to 1000 [ 162.432367][ T8292] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 162.493687][ T8292] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 162.604313][ T8292] lo speed is unknown, defaulting to 1000 [ 162.612698][ T8292] lo speed is unknown, defaulting to 1000 [ 162.620959][ T8292] lo speed is unknown, defaulting to 1000 [ 162.630522][ T8292] lo speed is unknown, defaulting to 1000 [ 162.641728][ T8292] lo speed is unknown, defaulting to 1000 [ 163.218232][ T8321] netlink: 830 bytes leftover after parsing attributes in process `syz.4.953'. [ 163.708381][ T8338] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 163.891428][ T8346] netlink: 12 bytes leftover after parsing attributes in process `syz.1.964'. [ 164.338776][ T8357] skbuff: bad partial csum: csum=65506/2 headroom=144 headlen=65526 [ 166.358695][ T8430] netlink: 'syz.2.992': attribute type 13 has an invalid length. [ 167.147338][ T8452] syzkaller0: entered promiscuous mode [ 167.154233][ T8452] syzkaller0: entered allmulticast mode [ 167.173465][ T8456] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1001'. [ 167.702044][ T8472] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1010'. [ 167.865192][ T8480] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1012'. [ 167.896288][ T8480] netlink: 'syz.0.1012': attribute type 7 has an invalid length. [ 167.904231][ T8480] netlink: 'syz.0.1012': attribute type 8 has an invalid length. [ 167.944310][ T8480] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1012'. [ 167.973974][ T8484] netlink: 'syz.4.1013': attribute type 1 has an invalid length. [ 168.179883][ T8489] bond4: (slave geneve2): making interface the new active one [ 168.188582][ T8489] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 168.230032][ T12] netdevsim netdevsim4 : set [1, 1] type 2 family 0 port 20004 - 0 [ 168.276363][ T12] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 168.296495][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 168.331134][ T12] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 168.362666][ T8497] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1019'. [ 168.375029][ T12] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 168.506420][ T8500] batadv_slave_0: entered allmulticast mode [ 168.522374][ T8501] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1020'. [ 168.545669][ T8500] dvmrp8: entered allmulticast mode [ 168.567905][ T8498] batadv_slave_0: left allmulticast mode [ 168.573997][ T8498] dvmrp8: left allmulticast mode [ 169.204545][ T8525] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1033'. [ 169.691960][ T8542] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1041'. [ 170.225551][ T8566] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1048'. [ 170.288620][ T8561] netlink: 'syz.2.1046': attribute type 13 has an invalid length. [ 170.297847][ T8566] netlink: 'syz.3.1048': attribute type 20 has an invalid length. [ 170.310747][ T8566] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1048'. [ 170.326053][ T8566] netlink: 'syz.3.1048': attribute type 20 has an invalid length. [ 170.395387][ T8561] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 170.836688][ T8580] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1053'. [ 171.303530][ T8600] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1064'. [ 171.323608][ T8601] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1065'. [ 172.031014][ T8624] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1071'. [ 172.942832][ T8654] syzkaller1: entered promiscuous mode [ 172.963619][ T8654] syzkaller1: entered allmulticast mode [ 173.494909][ T8688] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1098'. [ 173.956881][ T8708] netlink: 'syz.0.1106': attribute type 1 has an invalid length. [ 173.994306][ T8708] netlink: 'syz.0.1106': attribute type 4 has an invalid length. [ 174.021547][ T8708] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.1106'. [ 174.070856][ T8713] netlink: 'syz.0.1106': attribute type 1 has an invalid length. [ 174.097475][ T8713] netlink: 'syz.0.1106': attribute type 4 has an invalid length. [ 174.127859][ T8713] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.1106'. [ 174.352680][ T8722] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1109'. [ 175.166472][ T8751] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1122'. [ 175.937934][ T8768] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1127'. [ 176.571984][ T5983] IPVS: starting estimator thread 0... [ 176.660661][ T8800] Bluetooth: MGMT ver 1.23 [ 176.696537][ T8796] IPVS: using max 27 ests per chain, 64800 per kthread [ 177.060446][ T8810] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1144'. [ 177.705324][ T8823] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1148'. [ 178.326201][ T8847] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1159'. [ 178.521956][ T8854] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1161'. [ 178.944583][ T8864] tipc: Enabled bearer , priority 0 [ 179.175452][ T8864] syzkaller0: entered promiscuous mode [ 179.204947][ T8864] syzkaller0: entered allmulticast mode [ 179.231336][ T8864] tipc: Resetting bearer [ 179.244375][ T8880] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1172'. [ 179.446650][ T8862] tipc: Resetting bearer [ 179.764654][ T8903] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1175'. [ 180.934175][ T8862] tipc: Disabling bearer [ 181.298980][ T8923] netlink: 14544 bytes leftover after parsing attributes in process `syz.0.1177'. [ 181.338743][ T8927] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1181'. [ 182.053238][ T8955] syzkaller0: entered promiscuous mode [ 182.060384][ T8955] syzkaller0: entered allmulticast mode [ 182.075783][ T8958] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 182.102249][ T8958] syzkaller0: Linktype set failed because interface is up [ 182.148203][ T49] syzkaller0: tun_net_xmit 48 [ 182.841347][ T8973] netlink: 'syz.0.1196': attribute type 1 has an invalid length. [ 183.967568][ T8973] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 184.404859][ T9012] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1208'. [ 184.600992][ T9012] netlink: 'syz.4.1208': attribute type 1 has an invalid length. [ 185.378483][ T9029] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1214'. [ 185.429252][ T9029] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1214'. [ 185.663584][ T9031] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1215'. [ 185.694929][ T9033] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1216'. [ 186.030355][ T9047] netlink: 'syz.2.1220': attribute type 4 has an invalid length. [ 186.206306][ T9051] syzkaller1: entered promiscuous mode [ 186.211863][ T9051] syzkaller1: entered allmulticast mode [ 186.568672][ T9065] syz_tun: entered allmulticast mode [ 186.607381][ T9065] syz_tun: left allmulticast mode [ 186.727418][ T9069] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1228'. [ 186.800165][ T9069] geneve2: entered promiscuous mode [ 186.831886][ T9075] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 188.218662][ T9107] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.227517][ T9107] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.744969][ T9107] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 188.793907][ T9107] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 189.571242][ T43] lo speed is unknown, defaulting to 1000 [ 189.581700][ T43] syz2: Port: 1 Link DOWN [ 189.756791][ T3490] netdevsim netdevsim4 : unset [0, 0] type 1 family 0 port 8472 - 0 [ 189.764957][ T3490] netdevsim netdevsim4 : unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.790166][ T3490] netdevsim netdevsim4 : unset [1, 1] type 2 family 0 port 20004 - 0 [ 189.956519][ T3490] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 189.965470][ T3490] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.990942][ T3490] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 190.035995][ T3490] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 190.063413][ T3490] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.088370][ T3490] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 190.142429][ T3490] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 190.166298][ T3490] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.207099][ T3490] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 191.061947][ T9190] syzkaller1: entered promiscuous mode [ 191.078231][ T9190] syzkaller1: entered allmulticast mode [ 191.106854][ T9193] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1265'. [ 191.321692][ T9201] netlink: 'syz.2.1270': attribute type 4 has an invalid length. [ 191.830649][ T9212] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1275'. [ 191.862526][ T9212] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1275'. [ 191.912525][ T9217] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1277'. [ 192.108421][ T9225] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1280'. [ 192.532792][ T9243] sctp: [Deprecated]: syz.3.1287 (pid 9243) Use of int in maxseg socket option. [ 192.532792][ T9243] Use struct sctp_assoc_value instead [ 192.895017][ T9251] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1290'. [ 192.922479][ T9251] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1290'. [ 192.980556][ T9253] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1291'. [ 193.456426][ T9274] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1299'. [ 194.450472][ T9301] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1309'. [ 194.856675][ T5873] Bluetooth: hci0: command 0x0c1a tx timeout [ 194.862871][ T5879] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 195.557310][ T9308] syzkaller0: entered promiscuous mode [ 195.563021][ T9308] syzkaller0: entered allmulticast mode [ 197.367273][ T9343] netlink: 'syz.0.1322': attribute type 12 has an invalid length. [ 197.404826][ T9343] netlink: 'syz.0.1322': attribute type 29 has an invalid length. [ 197.475377][ T9343] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1322'. [ 197.493295][ T9343] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1322'. [ 197.670705][ T9354] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1326'. [ 197.962421][ T9362] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1328'. [ 199.662272][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.669182][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.688326][ T1306] clip:clip_start_xmit: skb_dst(skb) == NULL [ 199.905598][ T9432] macvlan4: entered promiscuous mode [ 199.911415][ T9432] macvlan4: entered allmulticast mode [ 199.924114][ T9432] veth1_to_bond: entered promiscuous mode [ 199.932653][ T9432] veth1_to_bond: entered allmulticast mode [ 199.949447][ T9432] team0: Port device macvlan4 added [ 199.968295][ T9428] syzkaller1: entered promiscuous mode [ 199.973925][ T9428] syzkaller1: entered allmulticast mode [ 200.143021][ T9441] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1361'. [ 200.163789][ T9438] batman_adv: batadv0: Adding interface: dummy0 [ 200.176529][ T9438] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 200.207364][ T9438] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 200.471895][ T9454] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 200.523533][ T9457] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1364'. [ 200.675873][ T9467] netlink: 'syz.2.1370': attribute type 1 has an invalid length. [ 200.862580][ T9467] 8021q: adding VLAN 0 to HW filter on device bond5 [ 200.946127][ T9474] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1371'. [ 200.981810][ T9474] 8021q: adding VLAN 0 to HW filter on device bond3 [ 201.072180][ T9470] bond5: (slave veth7): Enslaving as an active interface with a down link [ 201.170525][ T9471] bond5: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 201.273083][ T9474] 8021q: adding VLAN 0 to HW filter on device bond3 [ 201.293477][ T9474] bond3: (slave vxcan1): The slave device specified does not support setting the MAC address [ 201.329387][ T9474] bond3: (slave vxcan1): Error -95 calling set_mac_address [ 201.641586][ T9495] netlink: 22 bytes leftover after parsing attributes in process `syz.2.1376'. [ 201.835634][ T9509] netlink: 'syz.3.1379': attribute type 10 has an invalid length. [ 201.899480][ T9509] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 202.254723][ T9520] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1384'. [ 202.813727][ T9540] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1393'. [ 202.918557][ T9540] netlink: 260 bytes leftover after parsing attributes in process `syz.0.1393'. [ 202.989253][ T9546] netlink: 'syz.3.1396': attribute type 1 has an invalid length. [ 203.003389][ T9546] netlink: 'syz.3.1396': attribute type 4 has an invalid length. [ 203.028696][ T9548] netlink: 'syz.1.1397': attribute type 10 has an invalid length. [ 203.045319][ T9546] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.1396'. [ 203.060790][ T9548] team0: Device hsr_slave_0 failed to register rx_handler [ 203.145709][ T9551] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1399'. [ 203.168381][ T9551] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1399'. [ 203.338852][ T9558] tipc: Enabled bearer , priority 0 [ 203.515592][ T9558] syzkaller0: entered promiscuous mode [ 203.540654][ T9558] syzkaller0: entered allmulticast mode [ 203.562098][ T9558] tipc: Resetting bearer [ 203.769474][ T3490] tipc: Resetting bearer [ 203.813268][ T9556] tipc: Resetting bearer [ 205.282879][ T9556] tipc: Disabling bearer [ 205.292291][ T9572] netlink: 'syz.4.1405': attribute type 7 has an invalid length. [ 205.301505][ T9572] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1405'. [ 205.503200][ T9590] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1412'. [ 205.517387][ T9593] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1413'. [ 205.567338][ T9590] 8021q: adding VLAN 0 to HW filter on device bond2 [ 205.672555][ T9590] vlan2: entered allmulticast mode [ 205.679582][ T9590] bond2: entered allmulticast mode [ 206.709781][ T9631] tipc: Started in network mode [ 206.715015][ T9631] tipc: Node identity 6a106f50c6ea, cluster identity 4711 [ 206.784230][ T9631] tipc: Enabled bearer , priority 0 [ 206.905676][ T9635] syzkaller0: entered promiscuous mode [ 206.925205][ T9635] syzkaller0: entered allmulticast mode [ 206.947493][ T9635] tipc: Resetting bearer [ 207.067995][ T9630] tipc: Resetting bearer [ 207.312388][ T9649] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1433'. [ 207.796334][ T9] tipc: Node number set to 2902093648 [ 208.426186][ T9630] tipc: Disabling bearer [ 208.622188][ T9657] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1436'. [ 208.695405][ T9654] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1435'. [ 209.219200][ T9677] tipc: Started in network mode [ 209.224287][ T9677] tipc: Node identity ae9923eb7475, cluster identity 4711 [ 209.256654][ T9677] tipc: Enabled bearer , priority 0 [ 209.365032][ T9677] syzkaller0: entered promiscuous mode [ 209.373550][ T9677] syzkaller0: entered allmulticast mode [ 209.399497][ T9677] tipc: Resetting bearer [ 209.469397][ T9676] tipc: Resetting bearer [ 209.573639][ T9693] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1449'. [ 210.329065][ T5866] tipc: Node number set to 3672908779 [ 210.708995][ T9716] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1455'. [ 211.441407][ T9676] tipc: Disabling bearer [ 211.452126][ T9693] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 211.483692][ T9709] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 211.751742][ T9729] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1459'. [ 211.977876][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 211.984240][ T5184] Bluetooth: hci1: command 0x0406 tx timeout [ 211.992148][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 211.998603][ T5864] Bluetooth: hci2: command 0x0406 tx timeout [ 212.335513][ T9751] tipc: Enabled bearer , priority 0 [ 212.467379][ T9752] syzkaller0: entered promiscuous mode [ 212.473924][ T9752] syzkaller0: entered allmulticast mode [ 212.484596][ T9752] tipc: Resetting bearer [ 212.617122][ T58] tipc: Resetting bearer [ 212.643229][ T9732] lo speed is unknown, defaulting to 1000 [ 212.664637][ T9742] tipc: Resetting bearer [ 213.841153][ T9742] tipc: Disabling bearer [ 213.870995][ T9761] pim6reg1: entered promiscuous mode [ 213.876629][ T9761] pim6reg1: entered allmulticast mode [ 213.898900][ T9770] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 213.924907][ T9770] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.965200][ T9772] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1468'. [ 214.017993][ T9772] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1468'. [ 214.019786][ T9770] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 214.042424][ T9770] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.268749][ T9770] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 214.287530][ T9770] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.467000][ T9770] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 214.499021][ T9770] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.610156][ T34] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 214.620707][ T34] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.657903][ T34] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 214.669255][ T34] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.700370][ T3490] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 214.711930][ T3490] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.738023][ T3490] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 214.750982][ T3490] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.866883][ T9791] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1474'. [ 214.902632][ T9795] netlink: 'syz.3.1475': attribute type 1 has an invalid length. [ 215.012229][ T9795] 8021q: adding VLAN 0 to HW filter on device bond2 [ 215.026697][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.077788][ T9798] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1477'. [ 215.091077][ T9800] bond2: (slave geneve2): making interface the new active one [ 215.101275][ T9800] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 215.207248][ T9807] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1478'. [ 215.319439][ T9811] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 215.327050][ T9811] IPv6: NLM_F_CREATE should be set when creating new route [ 215.923488][ T9818] gretap1: left promiscuous mode [ 215.929296][ T9818] gretap1: left allmulticast mode [ 215.944568][ T9818] ip6gre1: left allmulticast mode [ 215.956450][ T9818] bond1: left promiscuous mode [ 215.964690][ T9818] ip6erspan0: left promiscuous mode [ 216.001542][ T9828] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1487'. [ 216.026828][ T34] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 216.056112][ T34] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.078557][ T34] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 216.092231][ T34] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.156515][ T34] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 216.165452][ T34] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.402565][ T34] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 216.419150][ T34] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.481325][ T9834] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1490'. [ 217.891669][ T9896] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1509'. [ 218.253087][ T9908] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1514'. [ 219.323799][ T9947] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1530'. [ 219.357530][ T9944] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode [ 219.365041][ T9944] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode [ 219.681169][ T9960] syzkaller1: entered promiscuous mode [ 219.706393][ T9960] syzkaller1: entered allmulticast mode [ 219.808355][ T9966] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1538'. [ 219.817531][ T9965] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1537'. [ 220.089436][ T9974] syzkaller1: entered promiscuous mode [ 220.116282][ T9974] syzkaller1: entered allmulticast mode [ 220.270763][ T9984] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1547'. [ 220.422828][ T9994] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1550'. [ 220.459356][ T9996] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1549'. [ 220.472719][ T9996] netlink: 'syz.4.1549': attribute type 1 has an invalid length. [ 220.510040][ T9996] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1549'. [ 220.531872][ T9994] batadv_slave_1: entered promiscuous mode [ 220.549879][ T9994] debugfs: 'hsr1' already exists in 'hsr' [ 220.555691][ T9994] Cannot create hsr debugfs directory [ 221.510974][T10036] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1566'. [ 221.587035][T10038] tipc: Enabled bearer , priority 0 [ 221.682196][T10038] syzkaller0: entered promiscuous mode [ 221.692093][T10038] syzkaller0: entered allmulticast mode [ 221.701488][T10038] tipc: Resetting bearer [ 221.775178][T10037] tipc: Resetting bearer [ 222.206805][T10061] nbd1: detected capacity change from 0 to 127 [ 222.878774][ T5870] block nbd1: Receive control failed (result -104) [ 223.328006][T10037] tipc: Disabling bearer [ 223.495113][T10069] netlink: 'syz.3.1575': attribute type 4 has an invalid length. [ 223.584844][T10069] netlink: 'syz.3.1575': attribute type 4 has an invalid length. [ 223.789738][T10082] netlink: 'syz.2.1582': attribute type 1 has an invalid length. [ 223.827735][T10085] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1583'. [ 223.948396][T10082] 8021q: adding VLAN 0 to HW filter on device bond6 [ 223.958118][T10095] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1583'. [ 224.108140][T10091] vlan0: entered allmulticast mode [ 224.113626][T10091] veth1: entered allmulticast mode [ 224.118025][T10088] svc: failed to register nfsdv3 RPC service (errno 111). [ 224.134000][T10091] bond6: (slave vlan0): making interface the new active one [ 224.145639][T10091] bond6: (slave vlan0): Enslaving as an active interface with an up link [ 224.159732][T10088] svc: failed to register nfsaclv3 RPC service (errno 111). [ 224.650111][T10114] netlink: 'syz.3.1589': attribute type 1 has an invalid length. [ 224.694978][T10118] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1591'. [ 224.742358][T10120] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1589'. [ 224.762305][T10114] 8021q: adding VLAN 0 to HW filter on device bond3 [ 225.167410][T10142] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1597'. [ 225.367614][T10147] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1598'. [ 225.389524][T10146] syz.2.1599 uses old SIOCAX25GETINFO [ 225.451532][T10150] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1598'. [ 226.263182][T10177] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1606'. [ 227.182753][T10163] veth0_virt_wifi: renamed from veth0_vlan [ 228.357673][T10231] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1617'. [ 229.184204][T10253] tipc: New replicast peer: 255.255.255.255 [ 229.193366][T10253] tipc: Enabled bearer , priority 10 [ 229.376163][ T5529] veth0_virt_wifi: left promiscuous mode [ 229.501533][ T5529] veth0_virt_wifi: entered promiscuous mode [ 229.518531][T10261] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1626'. [ 229.626342][T10265] syz_tun: entered allmulticast mode [ 229.822924][T10272] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1630'. [ 230.077360][T10284] netlink: 'syz.1.1634': attribute type 4 has an invalid length. [ 230.146497][T10284] netlink: 'syz.1.1634': attribute type 4 has an invalid length. [ 230.219790][T10287] bond5: (slave veth0_to_bond): Releasing active interface [ 230.248202][T10287] bond4: (slave bridge1): Releasing active interface [ 230.261921][T10287] bond5: (slave veth7): Releasing active interface [ 230.283162][ T5984] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.293901][T10287] bond6: (slave vlan0): Releasing active interface [ 230.426682][ T5866] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.508406][T10296] A link change request failed with some changes committed already. Interface bond3 may have been left with an inconsistent configuration, please check. [ 230.530332][ T5951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.790228][T10317] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1639'. [ 230.801592][T10317] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1639'. [ 230.856451][ T5870] Bluetooth: hci4: command 0x0405 tx timeout [ 231.074370][T10333] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1645'. [ 231.116552][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.181154][T10334] syzkaller0: entered allmulticast mode [ 232.108290][T10363] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1653'. [ 232.279618][T10371] netlink: 'syz.2.1656': attribute type 1 has an invalid length. [ 232.284229][T10365] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1655'. [ 232.480017][T10375] 8021q: adding VLAN 0 to HW filter on device bond8 [ 232.515730][T10375] bond7: (slave bond8): making interface the new active one [ 232.544210][T10375] bond7: (slave bond8): Enslaving as an active interface with an up link [ 232.595527][T10371] bond7: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 232.609302][T10371] bond7: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 232.823319][T10389] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1662'. [ 232.933386][T10395] tipc: Enabled bearer , priority 0 [ 233.023429][T10400] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1667'. [ 233.047074][T10395] syzkaller0: entered promiscuous mode [ 233.052891][T10395] syzkaller0: entered allmulticast mode [ 233.063036][T10395] tipc: Resetting bearer [ 233.100138][T10391] tipc: Resetting bearer [ 233.161871][T10404] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1668'. [ 234.645816][T10391] tipc: Disabling bearer [ 234.754445][T10425] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1672'. [ 234.963609][T10431] netlink: 'syz.4.1675': attribute type 10 has an invalid length. [ 234.995293][T10431] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 235.009948][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 235.028824][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 235.633466][T10462] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1685'. [ 235.772078][T10470] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1686'. [ 235.985525][T10474] netlink: 'syz.4.1688': attribute type 1 has an invalid length. [ 236.102963][T10474] 8021q: adding VLAN 0 to HW filter on device bond6 [ 236.113533][T10474] bond5: (slave bond6): making interface the new active one [ 236.125972][T10474] bond5: (slave bond6): Enslaving as an active interface with an up link [ 236.192280][T10479] bond5: (slave gretap0): Enslaving as a backup interface with an up link [ 236.223094][T10474] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1688'. [ 236.251855][T10474] 8021q: adding VLAN 0 to HW filter on device bond5 [ 236.512447][T10492] netlink: 'syz.4.1693': attribute type 1 has an invalid length. [ 236.683975][T10492] 8021q: adding VLAN 0 to HW filter on device bond7 [ 236.788125][T10499] bond7: (slave veth11): Enslaving as an active interface with a down link [ 236.948653][T10502] vlan2: entered allmulticast mode [ 236.979764][T10502] veth0_to_bond: entered allmulticast mode [ 236.997583][T10502] bond7: (slave vlan2): Opening slave failed [ 237.166335][T10509] netlink: 'syz.1.1697': attribute type 10 has an invalid length. [ 237.196942][T10509] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 237.495535][T10519] lo speed is unknown, defaulting to 1000 [ 237.532898][T10522] IPVS: set_ctl: invalid protocol: 43 172.30.0.5:20000 [ 237.625012][T10513] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1698'. [ 237.778784][T10513] ifb0: entered promiscuous mode [ 237.798072][T10513] ifb0: entered allmulticast mode [ 237.881708][T10534] syzkaller0: entered promiscuous mode [ 237.896563][T10534] syzkaller0: entered allmulticast mode [ 239.109485][T10553] tipc: Enabling of bearer rejected, failed to enable media [ 239.335447][T10572] netlink: 'syz.3.1712': attribute type 1 has an invalid length. [ 239.473140][T10574] bridge6: entered allmulticast mode [ 239.528492][T10584] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1713'. [ 239.655459][T10578] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 239.690433][T10578] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 239.755074][T10582] gretap1: entered promiscuous mode [ 239.764924][T10582] bond4: (slave gretap1): making interface the new active one [ 239.774739][T10582] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 239.831325][T10587] macvlan0: entered promiscuous mode [ 239.838101][T10587] macvlan0: entered allmulticast mode [ 239.844818][T10587] bond4: entered promiscuous mode [ 239.903488][T10587] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 239.962883][T10587] bond4: (slave macvlan0): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 239.965923][T10602] netlink: 'syz.2.1716': attribute type 10 has an invalid length. [ 239.994109][T10587] bond4: left promiscuous mode [ 240.340658][T10607] netlink: 'syz.4.1717': attribute type 11 has an invalid length. [ 240.352211][T10607] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1717'. [ 240.404597][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 240.445359][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 240.639708][T10617] netlink: 'syz.0.1719': attribute type 83 has an invalid length. [ 240.677909][T10620] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1720'. [ 240.735705][T10622] netlink: 'syz.2.1721': attribute type 10 has an invalid length. [ 240.900733][T10620] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1720'. [ 241.010112][T10637] tipc: Enabled bearer , priority 0 [ 241.019707][ T1116] wlan1: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 241.022283][T10625] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 241.040432][T10625] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 241.172350][T10625] tipc: Resetting bearer [ 242.024939][T10679] netlink: 'syz.0.1733': attribute type 10 has an invalid length. [ 242.033968][T10679] syz_tun: entered promiscuous mode [ 242.053230][T10679] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 242.276719][T10651] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 242.558783][T10693] ip6erspan0: entered promiscuous mode [ 242.840249][T10708] tipc: Enabling of bearer rejected, already enabled [ 243.070421][T10717] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1742'. [ 243.149656][T10711] netlink: 'syz.4.1741': attribute type 10 has an invalid length. [ 243.162490][T10711] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1741'. [ 243.451549][T10727] tipc: Started in network mode [ 243.479835][T10727] tipc: Node identity 82862893e0b5, cluster identity 4711 [ 243.507360][T10727] tipc: Enabled bearer , priority 0 [ 243.676360][T10728] syzkaller0: entered promiscuous mode [ 243.685300][T10728] syzkaller0: entered allmulticast mode [ 243.708880][T10728] tipc: Resetting bearer [ 243.912693][T10725] tipc: Resetting bearer [ 244.616742][ T43] tipc: Node number set to 1647519891 [ 246.656508][T10725] tipc: Disabling bearer [ 246.692305][T10796] netlink: 'syz.3.1761': attribute type 1 has an invalid length. [ 246.701507][T10796] netlink: 'syz.3.1761': attribute type 2 has an invalid length. [ 246.722451][T10796] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1761'. [ 247.332198][T10820] netlink: 'syz.1.1771': attribute type 1 has an invalid length. [ 247.353795][T10817] tipc: Enabled bearer , priority 0 [ 247.383101][T10825] mac80211_hwsim hwsim8 syzkaller0: entered promiscuous mode [ 247.403495][T10825] mac80211_hwsim hwsim8 syzkaller0: entered allmulticast mode [ 247.415196][T10821] tipc: Enabled bearer , priority 0 [ 247.438595][T10821] syzkaller0: entered promiscuous mode [ 247.444127][T10821] syzkaller0: entered allmulticast mode [ 247.474153][T10817] tipc: Resetting bearer [ 247.500717][T10821] tipc: Resetting bearer [ 247.516607][T10819] tipc: Resetting bearer [ 247.598804][T10819] tipc: Disabling bearer [ 247.671168][T10832] netlink: 'syz.3.1777': attribute type 1 has an invalid length. [ 247.802177][T10836] bond5: (slave gretap2): making interface the new active one [ 247.811141][T10836] bond5: (slave gretap2): Enslaving as an active interface with an up link [ 247.825911][T10838] netlink: 'syz.4.1781': attribute type 9 has an invalid length. [ 247.845115][T10842] tipc: Enabling of bearer rejected, already enabled [ 247.879219][T10832] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1777'. [ 247.901128][T10843] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1779'. [ 247.931602][T10843] openvswitch: netlink: Flow actions attr not present in new flow. [ 247.948973][T10832] 8021q: adding VLAN 0 to HW filter on device bond5 [ 247.989395][T10845] tipc: Enabling of bearer rejected, already enabled [ 248.196509][T10850] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 248.443055][T10865] tipc: Started in network mode [ 248.476296][T10865] tipc: Node identity 080211, cluster identity 4711 [ 248.506118][T10865] tipc: Enabled bearer , priority 0 [ 248.558525][T10869] tipc: Resetting bearer [ 248.776071][T10874] tipc: Resetting bearer [ 249.345760][T10894] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 249.372271][T10894] netlink: 'syz.4.1797': attribute type 10 has an invalid length. [ 249.383391][T10894] mac80211_hwsim hwsim9 wlan1: left allmulticast mode [ 249.394064][T10894] batman_adv: batadv0: Removing interface: dummy0 [ 249.412176][T10894] bridge_slave_0: left allmulticast mode [ 249.423188][T10894] bridge_slave_0: left promiscuous mode [ 249.432439][T10894] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.474497][T10894] bridge_slave_1: left allmulticast mode [ 249.495867][T10894] bridge_slave_1: left promiscuous mode [ 249.508029][T10894] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.517171][ T5866] tipc: Node number set to 134353152 [ 249.534033][T10894] bond0: (slave bond_slave_0): Releasing backup interface [ 249.555185][T10894] bond0: (slave bond_slave_1): Releasing backup interface [ 249.575238][T10894] team0: Port device team_slave_0 removed [ 249.596627][T10894] team0: Port device team_slave_1 removed [ 249.615323][ T5866] IPVS: starting estimator thread 0... [ 249.625530][T10903] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 249.627082][T10894] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 249.670487][T10894] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 249.677904][T10910] netlink: 'syz.1.1800': attribute type 1 has an invalid length. [ 249.710946][T10894] bond0: (slave wlan1): Releasing backup interface [ 249.729503][T10906] IPVS: using max 26 ests per chain, 62400 per kthread [ 249.766904][T10894] bond2: (slave bond3): Releasing backup interface [ 249.773651][T10894] bond3: left promiscuous mode [ 249.788745][T10894] bond4: (slave geneve2): Releasing active interface [ 249.825510][T10894] bond5: (slave bond6): Releasing backup interface [ 249.844465][T10894] bond5: (slave bond6): the permanent HWaddr of slave - 3e:98:43:30:32:d4 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 249.867304][T10894] bond5: (slave gretap0): making interface the new active one [ 249.893822][T10923] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1800'. [ 249.960862][T10894] bond5: (slave gretap0): Releasing backup interface [ 250.004814][T10894] bond7: (slave veth11): Releasing active interface [ 250.050053][T10904] tipc: Enabled bearer , priority 0 [ 250.110505][T10910] 8021q: adding VLAN 0 to HW filter on device bond4 [ 250.210568][T10912] 8021q: adding VLAN 0 to HW filter on device bond4 [ 250.220408][T10912] bond4: (slave vxcan1): The slave device specified does not support setting the MAC address [ 250.239060][T10912] bond4: (slave vxcan1): Error -95 calling set_mac_address [ 250.285063][T10918] veth11: entered promiscuous mode [ 250.305450][T10918] bond4: (slave veth11): Enslaving as an active interface with a down link [ 250.328781][T10907] syzkaller0: entered promiscuous mode [ 250.334431][T10907] syzkaller0: entered allmulticast mode [ 250.344680][T10923] 8021q: adding VLAN 0 to HW filter on device bond4 [ 250.373998][T10922] tipc: Resetting bearer [ 250.437730][T10897] tipc: Resetting bearer [ 250.493956][T10897] tipc: Disabling bearer [ 250.510393][T10935] tipc: Enabling of bearer rejected, already enabled [ 250.539186][T10944] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1807'. [ 250.760430][T10945] syzkaller0: entered promiscuous mode [ 250.771687][T10945] syzkaller0: entered allmulticast mode [ 250.869938][T10955] tipc: Enabling of bearer rejected, already enabled [ 250.973464][T10958] syz_tun (unregistering): left allmulticast mode [ 251.137699][T10967] tipc: Enabling of bearer rejected, already enabled [ 251.284526][T10971] tipc: Enabled bearer , priority 0 [ 251.321821][T10971] syzkaller0: entered promiscuous mode [ 251.341790][T10971] syzkaller0: entered allmulticast mode [ 251.444332][T10971] tipc: Resetting bearer [ 251.483750][T10970] tipc: Resetting bearer [ 251.500036][T10984] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1821'. [ 251.513350][T10970] tipc: Disabling bearer [ 251.865789][T11001] netlink: 'syz.1.1827': attribute type 1 has an invalid length. [ 251.995908][T11005] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1825'. [ 252.031905][T11008] bond5: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 252.074508][T10997] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1825'. [ 252.159314][T11008] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1827'. [ 252.187837][T11001] veth13: entered promiscuous mode [ 252.223750][T11001] bond5: (slave veth13): Enslaving as a backup interface with a down link [ 252.247422][T11012] tipc: New replicast peer: 255.255.255.255 [ 252.270971][T11012] tipc: Enabled bearer , priority 10 [ 252.287773][T11008] 8021q: adding VLAN 0 to HW filter on device bond5 [ 252.297923][ T3490] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 252.364346][T11019] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1831'. [ 252.438686][ T3490] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 252.698974][T11033] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1836'. [ 252.709920][T11032] tipc: Enabling of bearer rejected, already enabled [ 252.727275][T11033] openvswitch: netlink: Flow actions attr not present in new flow. [ 252.779692][ T94] block nbd1: Possible stuck request ffff8880255fe1c0: control (read@1024,1024B). Runtime 30 seconds [ 252.792106][ T94] block nbd1: Possible stuck request ffff8880255fe380: control (read@2048,1024B). Runtime 30 seconds [ 252.804236][ T94] block nbd1: Possible stuck request ffff8880255fe540: control (read@3072,1024B). Runtime 30 seconds [ 252.815700][ T94] block nbd1: Possible stuck request ffff8880255fe000: control (read@0,1024B). Runtime 30 seconds [ 252.896096][T11037] tipc: Enabling of bearer rejected, already enabled [ 253.348411][T11057] syzkaller1: entered promiscuous mode [ 253.354040][T11057] syzkaller1: entered allmulticast mode [ 253.407464][T11064] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1850'. [ 253.433570][T11064] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1850'. [ 253.452679][T11064] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1850'. [ 253.473374][T11064] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1850'. [ 253.611415][T11071] tipc: Enabling of bearer rejected, already enabled [ 253.863958][T11081] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1857'. [ 254.187089][T11094] bond0: (slave wlan1): Releasing backup interface [ 254.231358][T11094] bond4: (slave veth11): Releasing active interface [ 254.300058][T11094] bond5: (slave ip6gretap1): Removing an active aggregator [ 254.328468][T11094] bond5: (slave ip6gretap1): Releasing backup interface [ 254.336088][T11094] bond5: (slave ip6gretap1): the permanent HWaddr of slave - fe:5a:72:0b:35:ac - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 254.419705][T11094] bond5: (slave veth13): Releasing backup interface [ 254.433760][T11097] team0: Mode changed to "broadcast" [ 254.703308][T11109] lo speed is unknown, defaulting to 1000 [ 254.711914][T11109] lo speed is unknown, defaulting to 1000 [ 254.731039][T11109] lo speed is unknown, defaulting to 1000 [ 254.875559][T11114] 8021q: adding VLAN 0 to HW filter on device bond0 [ 254.908729][T11114] 8021q: adding VLAN 0 to HW filter on device team0 [ 254.966747][T11114] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 255.307290][T11109] infiniband syz0: set active [ 255.312892][T11109] infiniband syz0: added lo [ 255.319030][ T9] lo speed is unknown, defaulting to 1000 [ 255.502738][T11136] tipc: Enabling of bearer rejected, already enabled [ 255.541028][T11109] RDS/IB: syz0: added [ 255.572774][T11109] smc: adding ib device syz0 with port count 1 [ 255.609702][T11109] smc: ib device syz0 port 1 has pnetid [ 255.618219][ T5936] lo speed is unknown, defaulting to 1000 [ 255.651612][T11109] lo speed is unknown, defaulting to 1000 [ 256.524009][T11175] tipc: Enabling of bearer rejected, already enabled [ 256.637559][T11109] lo speed is unknown, defaulting to 1000 [ 257.171704][T11202] tipc: Enabled bearer , priority 0 [ 257.194629][T11202] syzkaller0: entered promiscuous mode [ 257.214152][T11202] syzkaller0: entered allmulticast mode [ 257.259029][T11206] nftables ruleset with unbound chain [ 257.318909][T11208] tipc: Resetting bearer [ 257.383994][T11201] tipc: Resetting bearer [ 257.444122][T11201] tipc: Disabling bearer [ 257.523507][T11109] lo speed is unknown, defaulting to 1000 [ 257.714021][T11221] tipc: Enabled bearer , priority 0 [ 257.744482][T11221] syzkaller0: entered promiscuous mode [ 257.760005][T11221] syzkaller0: entered allmulticast mode [ 257.810232][T11221] tipc: Resetting bearer [ 257.814862][T11228] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 257.836497][T11219] tipc: Resetting bearer [ 257.948401][T11219] tipc: Disabling bearer [ 258.278824][T11109] lo speed is unknown, defaulting to 1000 [ 258.662810][T11109] lo speed is unknown, defaulting to 1000 [ 258.776921][T11263] __nla_validate_parse: 5 callbacks suppressed [ 258.776940][T11263] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1942'. [ 258.843281][T11265] syz_tun: entered allmulticast mode [ 258.863057][T11265] dvmrp1: entered allmulticast mode [ 258.931002][T11264] syz_tun: left allmulticast mode [ 258.975669][T11267] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1944'. [ 259.661259][T11294] tipc: Enabling of bearer rejected, already enabled [ 259.711488][T11297] netlink: 'syz.2.1958': attribute type 6 has an invalid length. [ 260.180649][ T5870] Bluetooth: hci4: link tx timeout [ 260.187173][ T5870] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 260.346589][T11322] tipc: Enabled bearer , priority 0 [ 260.381087][T11322] syzkaller0: entered promiscuous mode [ 260.391533][T11322] syzkaller0: entered allmulticast mode [ 260.441797][T11322] tipc: Resetting bearer [ 260.473433][T11319] tipc: Resetting bearer [ 260.521656][T11319] tipc: Disabling bearer [ 260.588446][T11336] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1976'. [ 261.100962][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.113268][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.123610][ T1306] clip:clip_start_xmit: skb_dst(skb) == NULL [ 261.172763][T11355] 8021q: adding VLAN 0 to HW filter on device bond0 [ 261.210646][T11355] bond0: (slave ip_vti0): The slave device specified does not support setting the MAC address [ 261.256154][T11355] bond0: (slave ip_vti0): Error -95 calling set_mac_address [ 261.299594][T11364] tipc: Enabled bearer , priority 0 [ 261.308327][T11359] syzkaller0: entered promiscuous mode [ 261.366355][T11359] syzkaller0: entered allmulticast mode [ 261.383081][T11364] tipc: Resetting bearer [ 261.415803][T11358] tipc: Resetting bearer [ 261.491401][T11358] tipc: Disabling bearer [ 261.596391][T11375] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1993'. [ 261.644931][T11377] veth1_macvtap: left promiscuous mode [ 262.216542][ T5870] Bluetooth: hci4: command 0x0405 tx timeout [ 262.881006][T11437] tipc: Enabled bearer , priority 0 [ 262.925215][T11437] syzkaller0: entered promiscuous mode [ 262.959476][T11437] syzkaller0: entered allmulticast mode [ 262.984835][T11444] tipc: Resetting bearer [ 262.992232][T11443] tipc: Enabling of bearer rejected, already enabled [ 263.005295][T11432] tipc: Resetting bearer [ 263.031398][T11432] tipc: Disabling bearer [ 263.246452][T11454] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2021'. [ 263.828668][T11481] tipc: Enabled bearer , priority 0 [ 263.900779][T11481] syzkaller0: entered promiscuous mode [ 263.913158][T11481] syzkaller0: entered allmulticast mode [ 263.960747][T11480] tipc: Resetting bearer [ 264.038656][T11480] tipc: Disabling bearer [ 264.545169][T11508] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2041'. [ 264.651303][T11516] tap0: tun_chr_ioctl cmd 2148553947 [ 265.050630][T11529] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2049'. [ 265.433046][T11548] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2057'. [ 265.478478][T11553] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2056'. [ 266.018302][T11575] bond0: (slave rose0): Enslaving as an active interface with an up link [ 266.238710][T11584] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2070'. [ 266.500954][T11599] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 266.501518][T11592] tipc: Enabled bearer , priority 0 [ 266.563680][T11592] syzkaller0: entered promiscuous mode [ 266.579491][T11592] syzkaller0: entered allmulticast mode [ 266.621654][T11592] tipc: Resetting bearer [ 266.672841][T11591] tipc: Resetting bearer [ 266.745269][T11591] tipc: Disabling bearer [ 266.979510][T11625] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2086'. [ 267.328451][T11639] netlink: 'syz.3.2088': attribute type 21 has an invalid length. [ 267.356396][T11639] IPv6: NLM_F_CREATE should be specified when creating new route [ 267.373818][T11639] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 267.381202][T11639] IPv6: NLM_F_CREATE should be set when creating new route [ 267.388558][T11639] IPv6: NLM_F_CREATE should be set when creating new route [ 267.395811][T11639] IPv6: NLM_F_CREATE should be set when creating new route [ 267.484658][T11644] tipc: Enabling of bearer rejected, already enabled [ 267.776881][T11656] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2095'. [ 267.886702][T11661] tipc: Enabled bearer , priority 0 [ 267.935593][T11661] syzkaller0: entered promiscuous mode [ 267.946570][T11661] syzkaller0: entered allmulticast mode [ 267.973973][T11664] tipc: Enabled bearer , priority 0 [ 268.004492][T11664] syzkaller0: entered promiscuous mode [ 268.014053][T11664] syzkaller0: entered allmulticast mode [ 268.025144][T11659] tipc: Resetting bearer [ 268.061261][T11659] tipc: Disabling bearer [ 268.099578][T11664] tipc: Resetting bearer [ 268.111631][T11663] tipc: Resetting bearer [ 268.160467][T11673] netlink: 188 bytes leftover after parsing attributes in process `syz.3.2102'. [ 268.194353][T11663] tipc: Disabling bearer [ 268.194939][T11673] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2102'. [ 268.738463][T11699] tipc: Enabled bearer , priority 0 [ 268.757002][T11699] syzkaller0: entered promiscuous mode [ 268.763616][T11699] syzkaller0: entered allmulticast mode [ 268.795580][T11696] tipc: Resetting bearer [ 268.851796][T11696] tipc: Disabling bearer [ 269.017438][T11708] syzkaller1: entered promiscuous mode [ 269.030245][T11708] syzkaller1: entered allmulticast mode [ 269.070726][T11711] netlink: 188 bytes leftover after parsing attributes in process `syz.0.2118'. [ 269.469647][T11730] tipc: Enabling of bearer rejected, already enabled [ 269.721916][T11734] tipc: Enabling of bearer rejected, already enabled [ 269.816508][ T5870] Bluetooth: hci4: command 0x0405 tx timeout [ 270.250952][T11757] tipc: Enabling of bearer rejected, already enabled [ 270.502884][T11766] vxcan1: tx address claim with different name [ 270.872822][T11785] tipc: Enabling of bearer rejected, already enabled [ 271.068240][T11793] tipc: Enabling of bearer rejected, already enabled [ 271.271379][T11799] tipc: Enabling of bearer rejected, already enabled [ 271.723758][T11818] tipc: Enabling of bearer rejected, already enabled [ 271.815514][T11818] mac80211_hwsim hwsim2 syzkaller0: left allmulticast mode [ 271.838023][T11818] tipc: Resetting bearer [ 271.848026][T11819] tipc: Enabling of bearer rejected, already enabled [ 272.140038][ T5870] Bluetooth: hci4: command 0x0405 tx timeout [ 272.222869][T11834] syzkaller0: entered promiscuous mode [ 272.272696][T11834] syzkaller0: entered allmulticast mode [ 272.734190][T11851] tipc: Enabled bearer , priority 0 [ 272.745359][T11851] syzkaller0: entered promiscuous mode [ 272.767014][T11851] syzkaller0: entered allmulticast mode [ 272.822172][T11849] tipc: Resetting bearer [ 272.925858][T11849] tipc: Disabling bearer [ 272.998092][T11855] tipc: Enabling of bearer rejected, already enabled [ 273.033901][T11859] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode [ 273.056821][T11859] tipc: Resetting bearer [ 273.525699][T11876] syzkaller1: entered promiscuous mode [ 273.534542][T11876] syzkaller1: entered allmulticast mode [ 273.722960][T11878] netlink: 'syz.0.2191': attribute type 1 has an invalid length. [ 273.734133][T11878] __nla_validate_parse: 1 callbacks suppressed [ 273.734152][T11878] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2191'. [ 273.750549][T11878] netlink: 'syz.0.2191': attribute type 2 has an invalid length. [ 273.762173][T11878] netlink: 'syz.0.2191': attribute type 1 has an invalid length. [ 274.051039][T11886] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2195'. [ 274.284721][T11892] tipc: Enabling of bearer rejected, already enabled [ 274.490979][T11898] tipc: Enabled bearer , priority 0 [ 274.527043][T11898] syzkaller0: entered promiscuous mode [ 274.532583][T11898] syzkaller0: entered allmulticast mode [ 274.654822][T11897] tipc: Resetting bearer [ 274.782530][T11897] tipc: Disabling bearer [ 274.915313][T11903] tipc: Enabling of bearer rejected, already enabled [ 275.352514][T11933] tipc: Enabled bearer , priority 0 [ 275.360384][T11933] syzkaller0: entered promiscuous mode [ 275.371088][T11933] syzkaller0: entered allmulticast mode [ 275.473040][T11932] tipc: Resetting bearer [ 275.581455][T11932] tipc: Disabling bearer [ 275.820470][T11948] tipc: Enabled bearer , priority 0 [ 275.846094][T11948] syzkaller0: entered promiscuous mode [ 275.856260][T11948] syzkaller0: entered allmulticast mode [ 276.150310][T11946] tipc: Resetting bearer [ 276.173440][T11946] tipc: Disabling bearer [ 276.368600][T11958] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2220'. [ 276.579635][T11967] netlink: 'syz.4.2225': attribute type 15 has an invalid length. [ 276.594880][T11970] tipc: Enabling of bearer rejected, already enabled [ 276.723261][T11972] tipc: Enabled bearer , priority 0 [ 276.755063][T11972] syzkaller0: entered promiscuous mode [ 276.789522][T11972] syzkaller0: entered allmulticast mode [ 276.841550][T11790] Set syz1 is full, maxelem 65536 reached [ 276.849705][T11971] tipc: Resetting bearer [ 276.959419][T11971] tipc: Disabling bearer [ 277.407424][T12004] tipc: Enabled bearer , priority 0 [ 277.430600][T12004] syzkaller0: entered promiscuous mode [ 277.436525][T12004] syzkaller0: entered allmulticast mode [ 277.521771][T12002] tipc: Resetting bearer [ 277.592886][T12002] tipc: Disabling bearer [ 277.643314][T12016] netlink: 'syz.1.2244': attribute type 19 has an invalid length. [ 277.665990][T12016] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2244'. [ 277.777997][T12016] netlink: 'syz.1.2244': attribute type 19 has an invalid length. [ 277.786017][T12016] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2244'. [ 277.860372][T12026] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2248'. [ 277.919363][T12030] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2248'. [ 278.048756][T12020] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 278.065769][T12020] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 278.133269][T12020] tipc: Resetting bearer [ 278.199162][T12020] mac80211_hwsim hwsim2 syzkaller0: left promiscuous mode [ 278.236917][T12020] gretap1: left promiscuous mode [ 278.312246][ T12] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 278.336245][ T12] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.381267][ T12] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 278.441874][ T12] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.497451][ T1116] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 278.515279][ T1116] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.536067][ T1116] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 278.547939][ T1116] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.703247][T12076] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2263'. [ 279.712773][T12076] netlink: 'syz.4.2263': attribute type 18 has an invalid length. [ 279.837710][T12076] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2263'. [ 279.847064][T12076] netlink: 'syz.4.2263': attribute type 18 has an invalid length. [ 279.901619][T12079] Set syz1 is full, maxelem 65536 reached [ 279.997145][T12080] syzkaller1: entered promiscuous mode [ 280.006309][T12080] syzkaller1: entered allmulticast mode [ 281.030119][T12112] netlink: 'syz.1.2278': attribute type 83 has an invalid length. [ 281.548033][T12136] tipc: Enabling of bearer rejected, already enabled [ 281.805130][T12145] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode [ 282.194491][T12164] tipc: Enabling of bearer rejected, already enabled [ 282.317182][T12172] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 282.854205][T12194] tipc: Enabling of bearer rejected, already enabled [ 282.866418][ T94] block nbd1: Possible stuck request ffff8880255fe1c0: control (read@1024,1024B). Runtime 60 seconds [ 282.877850][ T94] block nbd1: Possible stuck request ffff8880255fe380: control (read@2048,1024B). Runtime 60 seconds [ 282.889240][ T94] block nbd1: Possible stuck request ffff8880255fe540: control (read@3072,1024B). Runtime 60 seconds [ 282.900260][ T94] block nbd1: Possible stuck request ffff8880255fe000: control (read@0,1024B). Runtime 60 seconds [ 283.393097][T12210] tipc: Enabling of bearer rejected, already enabled [ 283.728610][T12226] tipc: Enabling of bearer rejected, already enabled [ 283.769123][T12229] tipc: Enabling of bearer rejected, already enabled [ 283.897153][T12236] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2330'. [ 284.105867][T12244] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2334'. [ 284.317519][T12252] syzkaller1: entered promiscuous mode [ 284.323070][T12252] syzkaller1: entered allmulticast mode [ 284.359595][T12255] syzkaller1: entered promiscuous mode [ 284.382875][T12255] syzkaller1: entered allmulticast mode [ 284.576826][T12266] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2340'. [ 284.779321][T12270] clip:clip_setentry: non-CLIP VCC [ 284.848399][T12274] vxcan1: entered allmulticast mode [ 285.084437][T12280] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2346'. [ 285.111178][T12282] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2347'. [ 285.129870][T12280] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2346'. [ 285.180471][T12284] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2348'. [ 285.823159][T12305] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2356'. [ 286.365286][T12326] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2363'. [ 286.442673][T12328] syzkaller0: entered promiscuous mode [ 286.449783][T12328] syzkaller0: entered allmulticast mode [ 286.617926][T12334] 8021q: adding VLAN 0 to HW filter on device bond9 [ 286.653242][T12334] team0: Failed to send port change of device bond9 via netlink (err -105) [ 286.692642][T12334] team0: Failed to send options change via netlink (err -105) [ 286.703898][T12334] team0: Port device bond9 added [ 286.730480][ T1116] team0: Failed to send port change of device bond9 via netlink (err -105) [ 287.311958][T12360] lo speed is unknown, defaulting to 1000 [ 287.355096][T12360] lo speed is unknown, defaulting to 1000 [ 288.175811][T12387] vlan0: entered promiscuous mode [ 288.181650][T12387] vlan0: entered allmulticast mode [ 288.186962][T12387] veth0_vlan: entered allmulticast mode [ 288.242051][T12381] lo speed is unknown, defaulting to 1000 [ 288.263773][T12381] lo speed is unknown, defaulting to 1000 [ 288.374449][T12395] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2384'. [ 289.588160][T12425] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2394'. [ 289.659423][T12427] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2393'. [ 289.696537][T12427] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2393'. [ 290.100817][T12441] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2401'. [ 290.247635][T12448] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2405'. [ 290.463807][T12462] netlink: 'syz.1.2408': attribute type 1 has an invalid length. [ 290.625837][T12462] 8021q: adding VLAN 0 to HW filter on device bond6 [ 290.679180][T12467] bond6: (slave veth15): Enslaving as an active interface with a down link [ 290.735323][T12474] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2412'. [ 290.930251][T12471] bond6: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 290.993600][T12462] bond6: (slave veth17): Enslaving as an active interface with a down link [ 291.189846][T12490] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode [ 291.199589][T12490] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode [ 291.541718][T12505] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2422'. [ 291.594405][T12509] netlink: 'syz.3.2425': attribute type 83 has an invalid length. [ 291.641948][T12511] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2424'. [ 291.843766][T12522] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2427'. [ 291.880003][T12523] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 291.946617][T12525] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2430'. [ 292.134008][T12531] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2431'. [ 292.247823][T12535] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2433'. [ 292.323944][T12537] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) ! [ 292.347641][T12537] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) ! [ 292.414166][T12539] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 292.623234][T12547] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2438'. [ 292.728176][T12549] netlink: 'syz.0.2439': attribute type 83 has an invalid length. [ 292.938689][ T12] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 292.955116][ T12] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 292.998241][ T12] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 293.019358][ T12] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 293.661558][T12580] netlink: 'syz.0.2451': attribute type 83 has an invalid length. [ 294.548199][T12610] tipc: Enabling of bearer rejected, already enabled [ 294.947370][T12625] netlink: 'syz.4.2464': attribute type 83 has an invalid length. [ 295.089665][T12604] mpoa:atm_mpoa_vcc_attach: mpoa:Short read (missed 12 bytes) from userland [ 295.143162][T12581] lec:lec_atm_close: lec0: Shut down! [ 295.320050][T12639] netlink: 'syz.4.2468': attribute type 1 has an invalid length. [ 295.411972][T12639] 8021q: adding VLAN 0 to HW filter on device bond8 [ 295.543606][T12641] vlan2: entered promiscuous mode [ 295.553920][T12641] bond8: entered promiscuous mode [ 295.560171][T12641] vlan2: entered allmulticast mode [ 295.565573][T12641] bond8: entered allmulticast mode [ 295.739136][T12650] __nla_validate_parse: 5 callbacks suppressed [ 295.739160][T12650] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2471'. [ 295.794338][T12652] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2470'. [ 296.102935][T12634] lec:lec_atm_close: lec0: Shut down! [ 296.249523][T12661] tipc: Enabled bearer , priority 0 [ 296.292059][T12668] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2474'. [ 296.302271][T12666] netlink: 'syz.3.2476': attribute type 83 has an invalid length. [ 296.302988][T12661] tipc: Resetting bearer [ 296.399088][T12660] tipc: Disabling bearer [ 296.584351][T12674] tipc: Enabled bearer , priority 0 [ 296.689156][T12674] syzkaller0: entered promiscuous mode [ 296.694719][T12674] syzkaller0: entered allmulticast mode [ 296.702197][T12674] tipc: Resetting bearer [ 296.717359][T12683] tipc: Enabling of bearer rejected, already enabled [ 296.732266][T12678] netlink: 'syz.1.2480': attribute type 10 has an invalid length. [ 296.749298][T12678] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 296.851748][ T58] tipc: Resetting bearer [ 296.861259][T12680] tipc: Enabled bearer , priority 0 [ 296.880933][T12673] tipc: Resetting bearer [ 298.128001][T12673] tipc: Disabling bearer [ 298.138634][T12685] syzkaller0: entered promiscuous mode [ 298.144311][T12685] syzkaller0: entered allmulticast mode [ 298.162916][T12693] netlink: 'syz.1.2484': attribute type 30 has an invalid length. [ 298.207111][T12695] tipc: Resetting bearer [ 298.220066][T12679] tipc: Resetting bearer [ 298.255737][T12679] tipc: Disabling bearer [ 298.335606][T12701] tipc: Enabling of bearer rejected, already enabled [ 298.466771][T12704] tipc: Enabling of bearer rejected, already enabled [ 298.733809][T12711] tipc: Enabling of bearer rejected, already enabled [ 298.786737][T12711] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 298.806456][T12711] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 298.948272][T12721] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2494'. [ 298.996291][T12721] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2494'. [ 299.005335][T12721] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2494'. [ 299.042231][T12721] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2494'. [ 299.218910][T12733] tipc: Enabling of bearer rejected, already enabled [ 299.469090][T12738] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2503'. [ 299.598688][T12747] tipc: Enabling of bearer rejected, already enabled [ 299.633473][T12747] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) ! [ 299.757725][T12755] tipc: Enabling of bearer rejected, already enabled [ 299.887340][T12760] tipc: Enabling of bearer rejected, already enabled [ 299.921497][T12760] netem: change failed [ 299.974784][T12766] netlink: 7 bytes leftover after parsing attributes in process `syz.1.2513'. [ 300.001681][T12766] netlink: 7 bytes leftover after parsing attributes in process `syz.1.2513'. [ 300.013700][T12765] tipc: Enabling of bearer rejected, already enabled [ 300.167445][T12772] tipc: Enabling of bearer rejected, already enabled [ 301.012571][T12803] syzkaller0: entered promiscuous mode [ 301.024888][T12803] syzkaller0: entered allmulticast mode [ 301.084929][T12807] __nla_validate_parse: 2 callbacks suppressed [ 301.084953][T12807] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2533'. [ 301.328258][T12815] netlink: 'syz.2.2536': attribute type 29 has an invalid length. [ 301.353972][T12815] netlink: 'syz.2.2536': attribute type 29 has an invalid length. [ 301.665923][T12829] tipc: Enabling of bearer rejected, already enabled [ 301.924292][T12837] syzkaller0: entered promiscuous mode [ 301.930020][T12837] syzkaller0: entered allmulticast mode [ 302.848436][T12858] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2550'. [ 303.528018][T12858] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 303.553671][T12858] netlink: 184 bytes leftover after parsing attributes in process `syz.2.2550'. [ 303.936454][T12882] netlink: 'syz.1.2559': attribute type 4 has an invalid length. [ 304.279600][T12895] tipc: Enabling of bearer rejected, failed to enable media [ 304.339705][T12897] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2566'. [ 304.389527][T12900] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2567'. [ 304.500107][T12897] bond0: (slave wlan1): Releasing backup interface [ 304.879495][T12922] netlink: 108 bytes leftover after parsing attributes in process `syz.1.2571'. [ 304.910712][T12922] netlink: 108 bytes leftover after parsing attributes in process `syz.1.2571'. [ 304.929835][T12922] netlink: 108 bytes leftover after parsing attributes in process `syz.1.2571'. [ 305.177677][T12935] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2577'. [ 305.933943][T12981] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2592'. [ 306.205993][T12993] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2594'. [ 307.106874][T13033] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2615'. [ 307.853641][T13055] syzkaller0: entered promiscuous mode [ 307.859464][T13055] syzkaller0: entered allmulticast mode [ 308.297860][T13073] syzkaller1: entered promiscuous mode [ 308.327350][T13073] syzkaller1: entered allmulticast mode [ 308.574009][T13092] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2639'. [ 308.695294][T13096] tipc: Enabling of bearer rejected, already enabled [ 308.910201][T13107] tipc: Enabling of bearer rejected, failed to enable media [ 309.497447][T13133] syzkaller1: entered promiscuous mode [ 309.532031][T13133] syzkaller1: entered allmulticast mode [ 309.672318][T13135] netlink: 'syz.0.2655': attribute type 4 has an invalid length. [ 309.682175][T13135] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2655'. [ 310.441127][T13186] tipc: Enabling of bearer rejected, already enabled [ 310.484394][ T9] IPVS: starting estimator thread 0... [ 310.495725][T13182] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 310.596533][T13188] IPVS: using max 25 ests per chain, 60000 per kthread [ 310.604055][T13191] tls_set_device_offload: netdev not found [ 310.933206][T13211] tipc: Enabling of bearer rejected, failed to enable media [ 311.304615][T13232] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 312.000761][T13277] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2702'. [ 312.314077][T13286] tipc: Enabling of bearer rejected, already enabled [ 312.513731][T13297] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2711'. [ 312.765234][T13309] netlink: 188 bytes leftover after parsing attributes in process `syz.3.2718'. [ 312.781431][T13309] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2718'. [ 312.898618][T13316] tipc: Enabling of bearer rejected, already enabled [ 312.912700][T13318] tipc: Enabling of bearer rejected, failed to enable media [ 312.936927][ T94] block nbd1: Possible stuck request ffff8880255fe1c0: control (read@1024,1024B). Runtime 90 seconds [ 312.948267][ T94] block nbd1: Possible stuck request ffff8880255fe380: control (read@2048,1024B). Runtime 90 seconds [ 312.960093][ T94] block nbd1: Possible stuck request ffff8880255fe540: control (read@3072,1024B). Runtime 90 seconds [ 312.972008][ T94] block nbd1: Possible stuck request ffff8880255fe000: control (read@0,1024B). Runtime 90 seconds [ 313.648011][T13353] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2733'. [ 313.720295][T13348] lo speed is unknown, defaulting to 1000 [ 313.739605][T13348] lo speed is unknown, defaulting to 1000 [ 313.876080][T13361] tipc: Enabled bearer , priority 0 [ 313.922360][T13361] tipc: Resetting bearer [ 313.957882][T13360] tipc: Disabling bearer [ 314.154772][T13371] sch_tbf: burst 19869 is lower than device lo mtu (11337746) ! [ 314.323447][T13376] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 314.327623][ T5879] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 314.666734][T13376] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 314.717203][T13390] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2747'. [ 315.006338][T13376] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 315.144740][T13376] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 315.294564][T13413] tipc: Enabling of bearer rejected, failed to enable media [ 315.615325][T13429] tipc: Enabling of bearer rejected, already enabled [ 315.664839][T13431] syzkaller1: entered promiscuous mode [ 315.676662][T13431] syzkaller1: entered allmulticast mode [ 316.237860][T13456] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2771'. [ 316.249478][T13458] tipc: Enabling of bearer rejected, already enabled [ 316.258063][T13454] netlink: 'syz.0.2772': attribute type 5 has an invalid length. [ 316.462011][T13465] tipc: Enabling of bearer rejected, already enabled [ 317.509740][T13512] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2794'. [ 317.519058][T13514] netlink: 'syz.0.2795': attribute type 10 has an invalid length. [ 317.546766][T13514] team0: Device hsr_slave_0 failed to register rx_handler [ 318.136406][T13544] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2806'. [ 318.231997][T13549] netlink: 'syz.4.2807': attribute type 4 has an invalid length. [ 318.290803][T13549] netlink: 'syz.4.2807': attribute type 4 has an invalid length. [ 318.312834][ T43] lo speed is unknown, defaulting to 1000 [ 318.325344][ T43] syz2: Port: 1 Link ACTIVE [ 318.370542][T13553] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2810'. [ 318.610327][T13566] netlink: 188 bytes leftover after parsing attributes in process `syz.3.2815'. [ 318.617739][T13565] lo speed is unknown, defaulting to 1000 [ 318.653747][T13566] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2815'. [ 318.671905][T13565] lo speed is unknown, defaulting to 1000 [ 319.355601][T13586] tipc: Enabling of bearer rejected, already enabled [ 319.357448][T13588] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 319.677998][T13603] syzkaller0: entered promiscuous mode [ 319.683575][T13603] syzkaller0: entered allmulticast mode [ 319.721777][T13595] syzkaller0: entered promiscuous mode [ 319.736646][T13595] syzkaller0: entered allmulticast mode [ 320.665155][T13635] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2836'. [ 320.698552][T13637] mac80211_hwsim hwsim2 syzkaller0: left promiscuous mode [ 320.705833][T13637] mac80211_hwsim hwsim2 syzkaller0: left allmulticast mode [ 320.737693][T13639] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2837'. [ 320.860662][T13639] bridge8: port 1(veth9) entered blocking state [ 320.878636][T13639] bridge8: port 1(veth9) entered disabled state [ 320.900359][T13639] veth9: entered allmulticast mode [ 320.910858][T13639] veth9: entered promiscuous mode [ 320.987799][T13648] bridge8: port 2(veth0_to_bond) entered blocking state [ 321.016380][T13648] bridge8: port 2(veth0_to_bond) entered disabled state [ 321.107949][T13648] veth0_to_bond: entered allmulticast mode [ 321.116576][T13648] veth0_to_bond: entered promiscuous mode [ 321.190631][T13656] syzkaller0: entered promiscuous mode [ 321.210519][T13656] syzkaller0: entered allmulticast mode [ 321.285477][T13645] mpoa:mpoad_close: () going down [ 321.783687][T13683] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2853'. [ 322.080195][T13697] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode [ 322.114744][T13697] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode [ 322.156523][T13701] syzkaller0: entered promiscuous mode [ 322.162186][T13701] syzkaller0: entered allmulticast mode [ 322.197269][T13700] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2858'. [ 322.315768][T13704] syzkaller0: entered promiscuous mode [ 322.356350][T13704] syzkaller0: entered allmulticast mode [ 322.540541][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.552618][ T1306] clip:clip_start_xmit: skb_dst(skb) == NULL [ 322.644557][T13721] tipc: Enabling of bearer rejected, already enabled [ 322.674293][T13723] netlink: 'syz.1.2868': attribute type 30 has an invalid length. [ 322.840973][T13725] tipc: Enabled bearer , priority 0 [ 322.859652][T13725] syzkaller0: entered promiscuous mode [ 322.865197][T13725] syzkaller0: entered allmulticast mode [ 322.975531][T13725] tipc: Resetting bearer [ 323.019176][T13724] tipc: Resetting bearer [ 323.065290][T13742] netlink: 188 bytes leftover after parsing attributes in process `syz.2.2875'. [ 323.084319][T13742] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2875'. [ 323.095072][T13724] tipc: Disabling bearer [ 323.493345][T13766] sctp: [Deprecated]: syz.2.2884 (pid 13766) Use of struct sctp_assoc_value in delayed_ack socket option. [ 323.493345][T13766] Use struct sctp_sack_info instead [ 323.571885][T13766] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2884'. [ 324.632789][T13817] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2903'. [ 324.943771][T13834] syzkaller0: entered promiscuous mode [ 324.963076][T13834] syzkaller0: entered allmulticast mode [ 325.151925][T13842] syzkaller0: entered promiscuous mode [ 325.161093][T13842] syzkaller0: entered allmulticast mode [ 325.295056][T13849] netlink: 'syz.2.2916': attribute type 11 has an invalid length. [ 325.376488][T13851] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2917'. [ 326.016462][T13887] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2932'. [ 326.239487][T13898] netlink: 'syz.3.2937': attribute type 25 has an invalid length. [ 326.570351][T13912] rdma_rxe: rxe_newlink: failed to add bond0 [ 328.017211][T13907] syzkaller0: entered promiscuous mode [ 328.023421][T13907] syzkaller0: entered allmulticast mode [ 328.296967][ T5879] Bluetooth: hci4: link tx timeout [ 328.306320][ T5879] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 328.318112][ T5879] Bluetooth: hci4: link tx timeout [ 328.323295][ T5879] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 328.331188][ T5879] Bluetooth: hci4: link tx timeout [ 328.337734][ T5879] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 328.825505][T13966] syzkaller0: entered promiscuous mode [ 328.844519][T13966] syzkaller0: entered allmulticast mode [ 328.975831][T13975] syzkaller0: entered promiscuous mode [ 328.981807][T13975] syzkaller0: entered allmulticast mode [ 329.352381][T13991] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input8 [ 329.626749][T14004] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2967'. [ 329.649481][T14005] sctp: [Deprecated]: syz.1.2968 (pid 14005) Use of struct sctp_assoc_value in delayed_ack socket option. [ 329.649481][T14005] Use struct sctp_sack_info instead [ 329.685647][T14003] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2969'. [ 329.747723][T14005] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2968'. [ 329.871286][T14016] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2972'. [ 330.378734][ T5879] Bluetooth: hci4: command 0x0405 tx timeout [ 330.468670][T11476] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN PTI [ 330.480628][T11476] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f] [ 330.489094][T11476] CPU: 1 UID: 0 PID: 11476 Comm: kbnepd bnep0 Not tainted syzkaller #0 PREEMPT(full) [ 330.498700][T11476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 330.508949][T11476] RIP: 0010:klist_del+0x49/0x110 [ 330.513918][T11476] Code: f6 49 89 dd 49 c1 ed 03 43 80 7c 25 00 00 74 08 48 89 df e8 09 8f b3 f6 4c 8b 33 49 83 e6 fe 49 8d 7e 58 48 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 05 e8 eb 8e b3 f6 4d 8b 7e 58 4c 89 f7 e8 5f 74 [ 330.533561][T11476] RSP: 0018:ffffc9000e05f768 EFLAGS: 00010202 [ 330.539656][T11476] RAX: 000000000000000b RBX: ffff888054a93060 RCX: ffff88802ea39e00 [ 330.547633][T11476] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000058 [ 330.555676][T11476] RBP: ffffc9000e05f890 R08: ffff8880315f5d23 R09: 1ffff110062beba4 [ 330.563672][T11476] R10: dffffc0000000000 R11: ffffed10062beba5 R12: dffffc0000000000 [ 330.571686][T11476] R13: 1ffff1100a95260c R14: 0000000000000000 R15: ffff888032eb4750 [ 330.579672][T11476] FS: 0000000000000000(0000) GS:ffff888125d1b000(0000) knlGS:0000000000000000 [ 330.588612][T11476] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 330.595224][T11476] CR2: 0000001b31f20000 CR3: 0000000030c56000 CR4: 00000000003526f0 [ 330.603299][T11476] Call Trace: [ 330.606585][T11476] [ 330.609523][T11476] device_del+0x280/0x8e0 [ 330.613864][T11476] ? _raw_spin_unlock_irq+0x2e/0x50 [ 330.619083][T11476] ? pm_runtime_set_memalloc_noio+0x1f4/0x260 [ 330.625165][T11476] ? __pfx_device_del+0x10/0x10 [ 330.630022][T11476] ? netdev_unregister_kobject+0x344/0x450 [ 330.635842][T11476] unregister_netdevice_many_notify+0x1a6b/0x1ff0 [ 330.642281][T11476] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 330.649154][T11476] ? rtnl_net_dev_lock+0x257/0x2f0 [ 330.654291][T11476] unregister_netdevice_queue+0x33c/0x380 [ 330.660022][T11476] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 330.666272][T11476] ? rtnl_net_dev_lock+0x36/0x2f0 [ 330.671309][T11476] ? rtnl_net_dev_lock+0x2de/0x2f0 [ 330.676436][T11476] unregister_netdev+0x1f/0x60 [ 330.681213][T11476] bnep_session+0x294d/0x2b40 [ 330.685898][T11476] ? rcu_is_watching+0x15/0xb0 [ 330.690666][T11476] ? trace_sched_exit_tp+0x36/0x110 [ 330.695897][T11476] ? __lock_acquire+0xab9/0xd20 [ 330.700773][T11476] ? __pfx_bnep_session+0x10/0x10 [ 330.705803][T11476] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 330.711712][T11476] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 330.718052][T11476] ? __pfx_woken_wake_function+0x10/0x10 [ 330.723698][T11476] ? __kthread_parkme+0x7b/0x200 [ 330.728732][T11476] ? __kthread_parkme+0x1a1/0x200 [ 330.733767][T11476] kthread+0x711/0x8a0 [ 330.737846][T11476] ? __pfx_bnep_session+0x10/0x10 [ 330.742875][T11476] ? __pfx_kthread+0x10/0x10 [ 330.747479][T11476] ? _raw_spin_unlock_irq+0x23/0x50 [ 330.752695][T11476] ? lockdep_hardirqs_on+0x9c/0x150 [ 330.757903][T11476] ? __pfx_kthread+0x10/0x10 [ 330.762600][T11476] ret_from_fork+0x3f9/0x770 [ 330.767197][T11476] ? __pfx_ret_from_fork+0x10/0x10 [ 330.772313][T11476] ? __switch_to_asm+0x39/0x70 [ 330.777132][T11476] ? __switch_to_asm+0x33/0x70 [ 330.781917][T11476] ? __pfx_kthread+0x10/0x10 [ 330.786537][T11476] ret_from_fork_asm+0x1a/0x30 [ 330.791316][T11476] [ 330.794362][T11476] Modules linked in: [ 330.798801][T11476] ---[ end trace 0000000000000000 ]--- [ 330.816289][T11476] RIP: 0010:klist_del+0x49/0x110 [ 330.821361][T11476] Code: f6 49 89 dd 49 c1 ed 03 43 80 7c 25 00 00 74 08 48 89 df e8 09 8f b3 f6 4c 8b 33 49 83 e6 fe 49 8d 7e 58 48 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 05 e8 eb 8e b3 f6 4d 8b 7e 58 4c 89 f7 e8 5f 74 [ 330.841705][T11476] RSP: 0018:ffffc9000e05f768 EFLAGS: 00010202 [ 330.848419][T11476] RAX: 000000000000000b RBX: ffff888054a93060 RCX: ffff88802ea39e00 [ 330.856745][T11476] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000058 [ 330.864766][T11476] RBP: ffffc9000e05f890 R08: ffff8880315f5d23 R09: 1ffff110062beba4 [ 330.873090][T11476] R10: dffffc0000000000 R11: ffffed10062beba5 R12: dffffc0000000000 [ 330.876564][T14046] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 330.881162][T11476] R13: 1ffff1100a95260c R14: 0000000000000000 R15: ffff888032eb4750 [ 330.896433][T11476] FS: 0000000000000000(0000) GS:ffff888125d1b000(0000) knlGS:0000000000000000 [ 330.905472][T11476] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 330.926350][T11476] CR2: 00007f7095d27d58 CR3: 0000000033980000 CR4: 00000000003526f0 [ 330.934495][T11476] Kernel panic - not syncing: Fatal exception [ 330.940915][T11476] Kernel Offset: disabled [ 330.945267][T11476] Rebooting in 86400 seconds..