last executing test programs: 19.375111802s ago: executing program 0 (id=8194): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000140)={0x0, 0x700, 0x20, 0x6, 0x3e7c}, &(0x7f0000000200)=0x18) 19.155726832s ago: executing program 0 (id=8200): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x2001}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x30, r2, 0x1, 0x0, 0x100000, {{}, {}, {0x14, 0x19, {0x2, 0x1, 0x0, 0x8}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4008000}, 0x9004) 18.886931173s ago: executing program 0 (id=8206): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x4c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x8}, {}, {0x7, 0xb}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x1cc05}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_MASK={0x8, 0x6, 0x6}]}}]}, 0x4c}}, 0x400c084) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000100)="711f0b8d0bfa464eb5913da9760d", 0xe}}, 0x24000840) recvmmsg(r0, &(0x7f0000002e40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}}], 0x40000000000019e, 0x142, 0x0) 18.787333989s ago: executing program 0 (id=8209): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000640)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="02"], 0x10) socket$kcm(0xa, 0x2, 0x73) 18.554737926s ago: executing program 0 (id=8213): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='westwood\x00', 0x9) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) 18.2148501s ago: executing program 0 (id=8222): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000002c0)={@val={0x8, 0xf6}, @val={0x7, 0x0, 0x2, 0x1000, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0x16, 0x66, 0x0, 0x8b, 0x33, 0x0, @rand_addr=0x64010102, @broadcast}, "3297"}}, 0x24) 5.751026174s ago: executing program 4 (id=8425): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x0, {0x0, 0x0, 0x4}, 0x1}, 0x18) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000400)="81b641f1f3843704b6", 0x9}], 0x1}, 0x48005) close(r0) 5.563555639s ago: executing program 4 (id=8427): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000000c0)={0x0, 0x1}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000180)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x14004841) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000040)=ANY=[], 0x1000f) 5.409155443s ago: executing program 4 (id=8429): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x400000000000247, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r2, &(0x7f00000036c0)={&(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e, 0x0}, 0x40040) 4.438794984s ago: executing program 4 (id=8442): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x2, 0x2, 0x0, @void, @value}, 0x10) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={@cgroup=r2, 0xffffffffffffffff, 0x2, 0x0, 0x4000, @void, @value}, 0x10) 4.323546768s ago: executing program 4 (id=8444): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) shutdown(r0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) connect$unix(r1, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 4.034871363s ago: executing program 2 (id=8447): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmsg$tipc(r1, &(0x7f00000028c0)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f00000014c0)="5cba6df9ef6915af538811bc9c8e5541040e8c523d701f2ee6c31f03a6556c0cb167071b5d3a25e7eaf645299b85d43230c0fa4d8cee329a05b40ff7511c9b12941bf77e9771df0bfb1080c908a1e54e13525d", 0x53}, {&(0x7f0000001540)="00c216a19434a84a80cfe7fbab34955d44f6bc803514f8989b73453555d213c77d7a2dfacb9170fa591583b6e9556d0830df2ff683791ab07c9a58473197f95c420911f469e3df785595d619abc5b8a552e46480f2668933713926d2e2b4808970bec77e8967dab410ff2bf6a0ebb47b931ad10096aab053ddd4313239029ee98799c219f798ea52a2695cefed", 0x8d}], 0x2, 0x0, 0x0, 0x40080}, 0x20048880) recvmsg$unix(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000380)=""/86, 0x56}, {&(0x7f0000000400)=""/139, 0x8b}], 0x2}, 0x40000023) 3.973367988s ago: executing program 4 (id=8449): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, 0x3b, 0x107, 0x0, 0x0, {0x3, 0x7c}}, 0x14}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f00000000c0)={'filter\x00', 0x7, 0x4, 0x3f8, 0x200, 0xf0, 0x0, 0x310, 0x310, 0x310, 0x8000000, 0x0, {[{{@uncond, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_macvtap\x00', 'wg1\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @empty, @multicast2}}}, {{@arp={@multicast1, @multicast2, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'gre0\x00', 'bridge0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x448) 3.959096997s ago: executing program 2 (id=8450): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x4c, &(0x7f0000000080)=0xcdb, 0x4) connect$unix(r1, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 3.883364411s ago: executing program 2 (id=8451): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000040)={0x0, 0xea60}, 0x10) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e23, 0xa4e4, @remote, 0x3}, 0x1c) writev(r0, &(0x7f0000001440)=[{&(0x7f0000000080)="8d", 0x1}], 0x1) 3.56104658s ago: executing program 2 (id=8454): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001880)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="02"], 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) 3.391176082s ago: executing program 2 (id=8456): sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, 0x0, 0x8040) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000011000100000000000000000007000000", @ANYRES32, @ANYBLOB="000000000000000014001a80100005800c000880080001"], 0x34}}, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001300290a000000000000000007000000", @ANYRES32=r1], 0x34}}, 0x0) 3.100149755s ago: executing program 2 (id=8458): getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r1, 0x6, 0x19, 0x0, &(0x7f0000000000)) 2.982755998s ago: executing program 3 (id=8460): unshare(0x40600) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x14, 0x15, 0x301, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) read(r0, &(0x7f0000000080)=""/186, 0xba) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000044000701fcffff7c00000c0004"], 0x20}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) 2.370687887s ago: executing program 1 (id=8461): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002001100000004000100080004"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x8090) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r2) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002000a00000004000100080004"], 0x44}}, 0x0) 2.208216268s ago: executing program 1 (id=8462): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'team_slave_0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r4 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000100000008000100", @ANYRES32=r3, @ANYBLOB="400002803c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400946f08000600", @ANYRES32=r1], 0x5c}, 0x1, 0xf000}, 0x0) 1.485578127s ago: executing program 3 (id=8463): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendto$rxrpc(r1, &(0x7f00000003c0)="e3710f00217c24965647c62556fdfd5a1c8fa69473fa99bc3dc851c71da76d5b70edf18e3d94a3c2d0f4fdf0765a30bb", 0x30, 0x4000, 0x0, 0x0) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000000100)=""/40, 0x28}, {&(0x7f0000000480)=""/102, 0x66}], 0x2}, 0x2041) 1.483453039s ago: executing program 1 (id=8464): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffe64, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x1a) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) close(r2) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000005c0)={r2, r1, 0x0, r2}, 0x10) 1.244621795s ago: executing program 3 (id=8465): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x20, 0x4) setsockopt$sock_attach_bpf(r1, 0x1, 0x34, &(0x7f00000000c0)=r0, 0x4) listen(r1, 0x0) close(r1) 1.186916754s ago: executing program 1 (id=8466): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x2, 0x0, 0x0, @void, @value}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 1.080287575s ago: executing program 3 (id=8467): socket$kcm(0x2, 0x2, 0x73) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x2, 0x2, 0x0, @void, @value}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 1.035523908s ago: executing program 1 (id=8468): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000001400)={0xe0000017}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f00000001c0)={0xf}) epoll_wait(r2, &(0x7f0000001940)=[{}, {}], 0x2, 0x0) 944.032004ms ago: executing program 3 (id=8469): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000035c0), r1) sendmsg$nl_xfrm(r1, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000ec0)=@acquire={0x210, 0x17, 0x2, 0x70bd27, 0x25dfdbfe, {{@in=@dev={0xac, 0x14, 0x14, 0x2f}, 0x4d5, 0x2b}, @in=@empty, {@in=@loopback, @in6=@dev={0xfe, 0x80, '\x00', 0x2b}, 0x4e22, 0x45, 0x4e20, 0x9, 0x2, 0x20, 0x20, 0x2}, {{@in=@multicast2, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e21, 0xfff2, 0x4e21, 0x8, 0xa, 0xa0, 0x80, 0x29}, {0x9, 0x2000000000, 0x3, 0xb, 0x5, 0x5, 0xffff, 0x87d6}, {0x1, 0x7, 0x1, 0x3ff}, 0x5, 0x6e6bb8, 0x2, 0x1, 0x2}, 0x1, 0x0, 0x9d12, 0x70bd2d}, [@migrate={0xe8, 0x11, [{@in=@remote, @in6=@local, @in6=@remote, @in6=@private0, 0x33, 0x1, 0x0, 0x3502, 0x2, 0x2}, {@in6=@remote, @in6=@rand_addr=' \x01\x00', @in=@dev={0xac, 0x14, 0x14, 0x1d}, @in6=@local, 0x32, 0x2, 0x0, 0x0, 0x2, 0x2}, {@in6=@remote, @in6=@private0, @in=@loopback, @in6=@ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x3, 0x0, 0x3501, 0x2, 0xa}]}]}, 0x210}}, 0x8001) 670.84127ms ago: executing program 1 (id=8470): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000d00)={r1}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xffe4, 0xfffffffffffffda0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000004000000080000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r3], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r4, &(0x7f00000000c0), 0x0}, 0x20) 0s ago: executing program 3 (id=8471): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4, 0x0, 0x3}}, 0x2e) kernel console output (not intermixed with test programs): new IBSS network, BSSID 50:50:50:50:50:50 [ 103.249374][ T5855] Bluetooth: hci0: command tx timeout [ 103.267923][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.275784][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.328205][ T5855] Bluetooth: hci4: command tx timeout [ 103.409767][ T5855] Bluetooth: hci3: command tx timeout [ 103.415243][ T5855] Bluetooth: hci2: command tx timeout [ 103.420836][ T5850] Bluetooth: hci1: command tx timeout [ 103.471613][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.524553][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.691634][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.741618][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.114600][ T5966] dccp_v4_rcv: dropped packet with invalid checksum [ 116.537152][ T6521] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 117.134385][ T6547] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 118.565828][ T6612] dccp_invalid_packet: P.Data Offset(4) too small [ 132.687451][ T7283] dccp_v6_rcv: dropped packet with invalid checksum [ 132.941246][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.947929][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.936512][ T7434] ICMPv6: NA: 00:00:00:00:00:00 advertised our address fe80::aa on syz_tun! [ 137.804760][ T7524] dccp_invalid_packet: P.type (RESPONSE) not Data || [Data]Ack, while P.X == 0 [ 141.608163][ T7714] dccp_invalid_packet: P.CsCov 4 exceeds packet length 28 [ 145.838754][ T7932] IPv6: addrconf: prefix option has invalid lifetime [ 146.275945][ T7954] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x9 [ 147.040150][ T7994] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 147.998358][ T8024] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 148.378320][ T8039] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1049'. [ 148.982464][ T8057] netlink: 'syz.4.1058': attribute type 24 has an invalid length. [ 149.754096][ T8083] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 150.037262][ T8094] netlink: 'syz.1.1076': attribute type 24 has an invalid length. [ 150.294429][ T8107] netlink: 'syz.1.1082': attribute type 10 has an invalid length. [ 150.315130][ T8110] tipc: Trying to set illegal importance in message [ 150.325924][ T8107] team0: Device ipvlan1 failed to register rx_handler [ 150.525555][ T8116] xt_recent: hitcount (4294967295) is larger than allowed maximum (65535) [ 150.866509][ T8136] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1097'. [ 150.891623][ T8139] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1098'. [ 151.178397][ T8153] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1105'. [ 151.221588][ T8153] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1105'. [ 151.354760][ T8161] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1110'. [ 151.668128][ T8177] netlink: 'syz.1.1116': attribute type 1 has an invalid length. [ 151.695261][ T8177] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1116'. [ 151.835285][ T8181] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 152.249245][ T8202] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1129'. [ 152.475097][ T8215] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1135'. [ 152.847448][ T8220] netdevsim netdevsim1 netdevsim1: Unsupported IPsec algorithm [ 152.895167][ T8196] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 153.080669][ T8242] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 153.222703][ T8249] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1148'. [ 153.319033][ T8253] Cannot find add_set index 65534 as target [ 153.468962][ T8262] netlink: 'syz.2.1155': attribute type 1 has an invalid length. [ 153.519506][ T8262] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1155'. [ 153.889335][ T8281] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$ULvyآDUDw}z [ 153.993827][ T8289] netlink: 'syz.1.1168': attribute type 10 has an invalid length. [ 154.099550][ T8291] Cannot find map_set index 0 as target [ 154.123820][ T8289] 8021q: adding VLAN 0 to HW filter on device team0 [ 154.134496][ T5855] Bluetooth: hci0: command 0x0401 tx timeout [ 154.144050][ T8289] bond0: (slave team0): Enslaving as an active interface with an up link [ 154.201089][ T8295] Unknown options in mask 1f4 [ 155.877179][ T8377] netlink: 'syz.4.1205': attribute type 10 has an invalid length. [ 155.961963][ T8377] veth0_macvtap: left promiscuous mode [ 157.083681][ T8438] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 157.730214][ T8465] bond1: entered promiscuous mode [ 157.750866][ T8465] bond1: entered allmulticast mode [ 157.759227][ T8471] xt_limit: Overflow, try lower: 0/0 [ 157.790420][ T8465] 8021q: adding VLAN 0 to HW filter on device bond1 [ 158.578685][ T8508] netlink: 'syz.3.1258': attribute type 1 has an invalid length. [ 158.626109][ T8508] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1258'. [ 158.710417][ T8516] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1259'. [ 159.060837][ T8534] nftables ruleset with unbound chain [ 160.071430][ T8583] netlink: 'syz.0.1286': attribute type 11 has an invalid length. [ 160.097918][ T8583] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1286'. [ 160.248373][ T8592] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1289'. [ 160.828515][ T8617] netlink: 'syz.3.1300': attribute type 1 has an invalid length. [ 160.860484][ T8617] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1300'. [ 161.090052][ T8631] xt_ecn: cannot match TCP bits for non-tcp packets [ 161.266420][ T8639] IPv6: Can't replace route, no match found [ 162.739028][ T8712] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1346'. [ 162.759567][ T8713] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1348'. [ 163.529482][ T8754] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 163.773539][ T8764] netlink: 'syz.1.1372': attribute type 1 has an invalid length. [ 163.784422][ T8765] syz.4.1373: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 163.823881][ T8764] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1372'. [ 163.843159][ T8765] CPU: 0 UID: 0 PID: 8765 Comm: syz.4.1373 Not tainted 6.14.0-syzkaller-13335-g7f1ff1b38a7c #0 PREEMPT(full) [ 163.843191][ T8765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 163.843209][ T8765] Call Trace: [ 163.843218][ T8765] [ 163.843227][ T8765] dump_stack_lvl+0x241/0x360 [ 163.843279][ T8765] ? __pfx_dump_stack_lvl+0x10/0x10 [ 163.843312][ T8765] ? __pfx__printk+0x10/0x10 [ 163.843341][ T8765] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 163.843375][ T8765] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 163.843406][ T8765] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 163.843441][ T8765] warn_alloc+0x27c/0x410 [ 163.843464][ T8765] ? __vmalloc_node_range_noprof+0x108/0x1390 [ 163.843491][ T8765] ? __pfx_warn_alloc+0x10/0x10 [ 163.843515][ T8765] ? kasan_save_track+0x3f/0x80 [ 163.843538][ T8765] ? __kasan_kmalloc+0x9d/0xb0 [ 163.843564][ T8765] ? xsk_setsockopt+0x449/0x840 [ 163.843582][ T8765] ? do_sock_setsockopt+0x3b1/0x710 [ 163.843602][ T8765] ? __x64_sys_setsockopt+0x1ee/0x280 [ 163.843621][ T8765] ? do_syscall_64+0xf3/0x230 [ 163.843645][ T8765] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.843677][ T8765] __vmalloc_node_range_noprof+0x128/0x1390 [ 163.843738][ T8765] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 163.843765][ T8765] ? __kasan_kmalloc+0x9d/0xb0 [ 163.843797][ T8765] vmalloc_user_noprof+0x74/0x80 [ 163.843818][ T8765] ? xskq_create+0xb6/0x170 [ 163.843839][ T8765] xskq_create+0xb6/0x170 [ 163.843864][ T8765] xsk_init_queue+0xa1/0x100 [ 163.843890][ T8765] xsk_setsockopt+0x449/0x840 [ 163.843914][ T8765] ? __pfx_xsk_setsockopt+0x10/0x10 [ 163.843933][ T8765] ? __lock_acquire+0xad5/0xd80 [ 163.843955][ T8765] ? __pfx_aa_sk_perm+0x10/0x10 [ 163.843988][ T8765] ? aa_sock_opt_perm+0x79/0x120 [ 163.844023][ T8765] ? __pfx_xsk_setsockopt+0x10/0x10 [ 163.844043][ T8765] do_sock_setsockopt+0x3b1/0x710 [ 163.844072][ T8765] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 163.844090][ T8765] ? __fget_files+0x2a/0x420 [ 163.844126][ T8765] ? __fget_files+0x39d/0x420 [ 163.844143][ T8765] ? __fget_files+0x2a/0x420 [ 163.844171][ T8765] __x64_sys_setsockopt+0x1ee/0x280 [ 163.844200][ T8765] do_syscall_64+0xf3/0x230 [ 163.844226][ T8765] ? clear_bhb_loop+0x45/0xa0 [ 163.844250][ T8765] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.844270][ T8765] RIP: 0033:0x7fb89df8d169 [ 163.844295][ T8765] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 163.844312][ T8765] RSP: 002b:00007fb89ede1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 163.844335][ T8765] RAX: ffffffffffffffda RBX: 00007fb89e1a5fa0 RCX: 00007fb89df8d169 [ 163.844351][ T8765] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 163.844364][ T8765] RBP: 00007fb89e00e730 R08: 0000000000000004 R09: 0000000000000000 [ 163.844377][ T8765] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 163.844390][ T8765] R13: 0000000000000000 R14: 00007fb89e1a5fa0 R15: 00007ffd84bf1de8 [ 163.844421][ T8765] [ 163.847379][ T8765] Mem-Info: [ 163.980418][ T30] audit: type=1800 audit(1744201099.382:2): pid=8773 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1377" name="memory.events" dev="tmpfs" ino=1378 res=0 errno=0 [ 164.009417][ T8765] active_anon:4781 inactive_anon:0 isolated_anon:0 [ 164.009417][ T8765] active_file:1094 inactive_file:38330 isolated_file:0 [ 164.009417][ T8765] unevictable:768 dirty:315 writeback:0 [ 164.009417][ T8765] slab_reclaimable:9739 slab_unreclaimable:98443 [ 164.009417][ T8765] mapped:28498 shmem:1432 pagetables:907 [ 164.009417][ T8765] sec_pagetables:0 bounce:0 [ 164.009417][ T8765] kernel_misc_reclaimable:0 [ 164.009417][ T8765] free:1348127 free_pcp:535 free_cma:0 [ 164.257902][ T8765] Node 0 active_anon:18824kB inactive_anon:0kB active_file:4376kB inactive_file:153248kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:113892kB dirty:1260kB writeback:0kB shmem:4192kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10744kB pagetables:3828kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 164.312595][ T8779] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1378'. [ 164.325692][ T8779] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1378'. [ 164.347593][ T8765] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 164.391910][ T8765] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 164.453247][ T8765] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 164.492866][ T8785] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1383'. [ 164.502713][ T8765] Node 0 DMA32 free:1474524kB boost:0kB min:34152kB low:42688kB high:51224kB reserved_highatomic:0KB active_anon:18816kB inactive_anon:0kB active_file:4376kB inactive_file:153148kB unevictable:1536kB writepending:1260kB present:3129332kB managed:2547248kB mlocked:0kB bounce:0kB free_pcp:1796kB local_pcp:1164kB free_cma:0kB [ 164.570627][ T8787] geneve2: entered promiscuous mode [ 164.598722][ T8765] lowmem_reserve[]: 0 0 0 0 0 [ 164.603179][ T8787] geneve2: entered allmulticast mode [ 164.614338][ T8765] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:100kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 164.704861][ T8765] lowmem_reserve[]: 0 0 0 0 0 [ 164.727028][ T8765] Node 1 Normal free:3904624kB boost:0kB min:55748kB low:69684kB high:83620kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 164.815312][ T8797] netlink: 'syz.2.1389': attribute type 21 has an invalid length. [ 164.823581][ T8765] lowmem_reserve[]: 0 0 0 0 0 [ 164.832185][ T8765] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 164.865466][ T8797] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1389'. [ 164.874717][ T8765] Node 0 DMA32: 4*4kB (UME) 3*8kB (UME) 306*16kB (U) 147*32kB (UME) 182*64kB (UE) 84*128kB (UE) 53*256kB (UME) 40*512kB (UM) 23*1024kB (UME) 11*2048kB (UME) 332*4096kB (UM) = 1472040kB [ 164.929367][ T8765] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 164.987887][ T8765] Node 1 Normal: 236*4kB (UE) 48*8kB (UME) 34*16kB (UME) 215*32kB (UME) 93*64kB (UME) 30*128kB (UME) 14*256kB (UM) 11*512kB (UME) 4*1024kB (UM) 1*2048kB (U) 945*4096kB (M) = 3904624kB [ 165.034294][ T8765] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 165.059809][ T8765] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 165.081379][ T8765] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 165.113310][ T8765] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 165.143434][ T8765] 40857 total pagecache pages [ 165.171212][ T8765] 0 pages in swap cache [ 165.175443][ T8765] Free swap = 124996kB [ 165.189581][ T8765] Total swap = 124996kB [ 165.193786][ T8765] 2097051 pages RAM [ 165.197617][ T8765] 0 pages HighMem/MovableOnly [ 165.231717][ T8765] 428581 pages reserved [ 165.235937][ T8765] 0 pages cma reserved [ 165.244641][ T8814] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1397'. [ 165.668318][ T8832] xt_CT: You must specify a L4 protocol and not use inversions on it [ 165.882072][ T8841] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1411'. [ 166.184226][ T8862] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 166.567150][ T8880] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 166.596420][ T8882] syz.4.1431 uses obsolete (PF_INET,SOCK_PACKET) [ 167.214062][ T8912] netlink: 'syz.4.1445': attribute type 3 has an invalid length. [ 167.664482][ T8931] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1455'. [ 167.761311][ T8937] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1458'. [ 168.583020][ T8976] ip6gre1: entered promiscuous mode [ 168.818005][ T8976] syz.4.1477 (8976) used greatest stack depth: 19256 bytes left [ 169.063463][ T8997] xt_TCPMSS: Only works on TCP SYN packets [ 169.405172][ T9014] xt_socket: unknown flags 0x50 [ 169.418873][ T9006] bond1: entered promiscuous mode [ 169.438395][ T9006] bond1: entered allmulticast mode [ 169.444494][ T9006] 8021q: adding VLAN 0 to HW filter on device bond1 [ 169.538882][ T9020] netlink: 'syz.0.1497': attribute type 20 has an invalid length. [ 169.684918][ T9028] openvswitch: netlink: Message has 3 unknown bytes. [ 169.707023][ T9028] openvswitch: netlink: Actions may not be safe on all matching packets [ 170.102071][ T9050] xt_HMARK: spi-set and port-set can't be combined [ 170.282384][ T9056] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1519'. [ 171.159710][ T9084] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1529'. [ 172.123635][ T9133] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1550'. [ 172.184836][ T9133] bridge_slave_1: left allmulticast mode [ 172.209112][ T9133] bridge_slave_1: left promiscuous mode [ 172.215832][ T9133] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.252380][ T9143] netlink: 'syz.2.1555': attribute type 11 has an invalid length. [ 172.263612][ T9143] netlink: 'syz.2.1555': attribute type 11 has an invalid length. [ 172.272413][ T9143] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1555'. [ 172.328840][ T9133] bridge_slave_0: left allmulticast mode [ 172.335629][ T9133] bridge_slave_0: left promiscuous mode [ 172.353428][ T9133] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.642298][ T9155] netlink: 'syz.4.1559': attribute type 1 has an invalid length. [ 172.697888][ T9155] netlink: 244 bytes leftover after parsing attributes in process `syz.4.1559'. [ 172.919558][ T9165] xfrm0 speed is unknown, defaulting to 1000 [ 172.925737][ T9165] xfrm0 speed is unknown, defaulting to 1000 [ 172.978262][ T9170] x_tables: duplicate underflow at hook 4 [ 172.994274][ T9165] xfrm0 speed is unknown, defaulting to 1000 [ 173.064026][ T9165] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 173.111696][ T9165] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 173.200831][ T9178] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1569'. [ 173.218413][ T9180] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1570'. [ 173.273343][ T9165] xfrm0 speed is unknown, defaulting to 1000 [ 173.286685][ T9165] xfrm0 speed is unknown, defaulting to 1000 [ 173.322032][ T9165] xfrm0 speed is unknown, defaulting to 1000 [ 173.362973][ T9165] xfrm0 speed is unknown, defaulting to 1000 [ 173.415373][ T9165] xfrm0 speed is unknown, defaulting to 1000 [ 173.692651][ T9198] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 174.966240][ T9265] openvswitch: netlink: Tunnel attr 303 out of range max 16 [ 175.105568][ T9269] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1614'. [ 175.138020][ T9273] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1613'. [ 175.175024][ T9273] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 175.248867][ T9273] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 175.268011][ T9273] gretap1: entered promiscuous mode [ 175.293898][ T9273] gretap1: entered allmulticast mode [ 175.407965][ T9279] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1618'. [ 175.437996][ T9279] tc_dump_action: action bad kind [ 175.967759][ T9308] netlink: 1196 bytes leftover after parsing attributes in process `syz.2.1632'. [ 176.264247][ T9323] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 176.502031][ T9336] netlink: 'syz.3.1646': attribute type 21 has an invalid length. [ 176.527906][ T9336] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1646'. [ 177.303034][ T9375] sctp: [Deprecated]: syz.3.1666 (pid 9375) Use of int in max_burst socket option. [ 177.303034][ T9375] Use struct sctp_assoc_value instead [ 178.044300][ T9411] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1684'. [ 178.120752][ T9414] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1685'. [ 178.233901][ T9420] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1688'. [ 178.349824][ T9426] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 178.688443][ T9439] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1698'. [ 179.281278][ T9473] xt_TPROXY: Can be used only with -p tcp or -p udp [ 179.447968][ T9478] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1715'. [ 179.482775][ T9478] bridge_slave_1: left allmulticast mode [ 179.515447][ T9478] bridge_slave_1: left promiscuous mode [ 179.538137][ T9478] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.569546][ T9478] bridge_slave_0: left allmulticast mode [ 179.600451][ T9478] bridge_slave_0: left promiscuous mode [ 179.637657][ T9478] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.686434][ T9490] set match dimension is over the limit! [ 179.964938][ T9502] netlink: 'syz.3.1728': attribute type 21 has an invalid length. [ 179.998364][ T9502] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1728'. [ 180.148229][ T9508] netlink: 'syz.4.1731': attribute type 21 has an invalid length. [ 180.156403][ T9508] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 180.452957][ T9525] xt_bpf: check failed: parse error [ 180.767399][ T9539] openvswitch: netlink: Actions may not be safe on all matching packets [ 181.068453][ T9555] netlink: 'syz.3.1754': attribute type 1 has an invalid length. [ 181.098067][ T9555] netlink: 228 bytes leftover after parsing attributes in process `syz.3.1754'. [ 181.178081][ T9558] netlink: 'syz.1.1756': attribute type 1 has an invalid length. [ 181.292031][ T9565] netlink: 'syz.3.1760': attribute type 21 has an invalid length. [ 181.432634][ T9570] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1761'. [ 182.244417][ T9610] Cannot find del_set index 17 as target [ 182.726322][ T9634] openvswitch: netlink: Actions may not be safe on all matching packets [ 182.977990][ T9648] warning: `syz.1.1801' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 183.015003][ T9650] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1802'. [ 183.083620][ T9652] netlink: 'syz.2.1803': attribute type 4 has an invalid length. [ 183.903178][ T9690] netlink: 'syz.4.1821': attribute type 33 has an invalid length. [ 184.107436][ T9700] unsupported nlmsg_type 40 [ 184.333093][ T9714] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 184.661917][ T9728] x_tables: arp_tables: MARK.2 target: invalid size 8 (kernel) != (user) 0 [ 184.794173][ T9731] bond1: entered allmulticast mode [ 184.802349][ T9731] 8021q: adding VLAN 0 to HW filter on device bond1 [ 185.084948][ T9748] x_tables: unsorted underflow at hook 4 [ 185.280451][ T9756] SET target dimension over the limit! [ 186.507903][ T9817] netdevsim netdevsim2 netdevsim2: entered allmulticast mode [ 187.550467][ T9868] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1907'. [ 187.707966][ T9874] netlink: 'syz.1.1911': attribute type 11 has an invalid length. [ 187.959345][ T9886] netlink: 'syz.3.1916': attribute type 11 has an invalid length. [ 187.967230][ T9886] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1916'. [ 188.507585][ T9911] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1928'. [ 188.566725][ T9911] Oܼ: renamed from hsr0 (while UP) [ 188.651026][ T9911] Oܼ: entered promiscuous mode [ 188.656719][ T9911] A link change request failed with some changes committed already. Interface Oܼ may have been left with an inconsistent configuration, please check. [ 188.906940][ T9927] netlink: 'syz.0.1933': attribute type 24 has an invalid length. [ 189.562291][ T9960] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 189.569647][ T9960] IPv6: NLM_F_CREATE should be set when creating new route [ 189.825401][ T9972] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1952'. [ 189.888285][ T9972] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1952'. [ 189.948692][ T9972] netlink: 'syz.1.1952': attribute type 3 has an invalid length. [ 190.945616][T10027] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1975'. [ 191.636365][T10054] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 191.696783][T10054] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 191.738002][T10054] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 191.772846][T10054] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 191.828367][T10054] geneve2: entered promiscuous mode [ 191.843884][T10054] geneve2: entered allmulticast mode [ 191.891764][T10054] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 191.928722][T10054] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 191.949328][T10054] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 191.965578][T10054] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 192.498016][T10096] netlink: 'syz.2.2002': attribute type 10 has an invalid length. [ 192.535956][T10096] team0: Cannot enslave team device to itself [ 192.817974][T10110] x_tables: unsorted entry at hook 2 [ 193.686123][T10154] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2027'. [ 193.733186][T10154] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2027'. [ 193.817952][T10158] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 193.988988][T10168] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2032'. [ 194.375820][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.382261][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.558203][T10239] netlink: 'syz.0.2064': attribute type 3 has an invalid length. [ 195.583476][T10239] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2064'. [ 195.596885][T10243] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2065'. [ 195.640397][T10243] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2065'. [ 195.690646][T10247] openvswitch: netlink: Actions may not be safe on all matching packets [ 195.947948][T10257] netlink: 'syz.2.2070': attribute type 4 has an invalid length. [ 196.176269][T10267] netlink: 'syz.4.2074': attribute type 2 has an invalid length. [ 196.263012][T10245] infiniband syz0: set active [ 196.268016][T10245] infiniband syz0: added bond_slave_1 [ 196.312981][T10245] RDS/IB: syz0: added [ 196.318956][T10245] smc: adding ib device syz0 with port count 1 [ 196.326945][T10245] smc: ib device syz0 port 1 has pnetid [ 196.374988][T10272] netlink: 404 bytes leftover after parsing attributes in process `syz.2.2078'. [ 196.383581][T10273] netlink: 'syz.3.2079': attribute type 7 has an invalid length. [ 196.413209][T10272] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2078'. [ 196.443097][T10272] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2078'. [ 196.472099][T10272] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2078'. [ 196.581287][T10276] raw_sendmsg: syz.4.2081 forgot to set AF_INET. Fix it! [ 196.633038][T10279] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 196.691316][T10281] xt_TPROXY: Can be used only with -p tcp or -p udp [ 197.129876][T10297] xt_CT: No such helper "pptp" [ 197.533971][T10317] bridge0: port 3(gretap0) entered blocking state [ 197.544659][T10317] bridge0: port 3(gretap0) entered disabled state [ 197.564900][T10317] gretap0: entered allmulticast mode [ 197.597255][T10317] gretap0: entered promiscuous mode [ 197.613888][T10317] bridge0: port 3(gretap0) entered blocking state [ 197.620573][T10317] bridge0: port 3(gretap0) entered forwarding state [ 197.685405][T10322] openvswitch: netlink: Actions may not be safe on all matching packets [ 198.254548][T10346] netlink: 'syz.4.2116': attribute type 13 has an invalid length. [ 198.313175][T10346] net veth1_virt_wifi virt_wifi0: refused to change device tx_queue_len [ 198.455287][T10352] delete_channel: no stack [ 199.026039][T10376] netlink: 'syz.2.2130': attribute type 21 has an invalid length. [ 199.059979][T10376] netlink: 'syz.2.2130': attribute type 1 has an invalid length. [ 199.609432][T10400] __nla_validate_parse: 4 callbacks suppressed [ 199.609454][T10400] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2142'. [ 199.654526][T10400] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2142'. [ 199.688002][T10400] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2142'. [ 200.765173][T10448] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2165'. [ 201.238735][T10471] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2176'. [ 201.619259][T10493] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 201.795349][T10499] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2191'. [ 201.821588][T10499] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2191'. [ 202.396426][T10529] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2206'. [ 202.983457][T10556] netlink: 'syz.4.2220': attribute type 3 has an invalid length. [ 203.010245][T10556] netlink: 'syz.4.2220': attribute type 3 has an invalid length. [ 203.018362][T10556] netlink: 'syz.4.2220': attribute type 3 has an invalid length. [ 203.026216][T10556] netlink: 'syz.4.2220': attribute type 3 has an invalid length. [ 203.045546][T10556] netlink: 'syz.4.2220': attribute type 3 has an invalid length. [ 203.066452][T10556] netlink: 'syz.4.2220': attribute type 3 has an invalid length. [ 203.086829][T10556] netlink: 'syz.4.2220': attribute type 3 has an invalid length. [ 203.111453][T10556] netlink: 'syz.4.2220': attribute type 3 has an invalid length. [ 203.122016][T10561] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2222'. [ 203.133428][T10556] netlink: 'syz.4.2220': attribute type 3 has an invalid length. [ 203.141796][T10556] netlink: 'syz.4.2220': attribute type 3 has an invalid length. [ 203.153502][T10564] IPv6: NLM_F_CREATE should be specified when creating new route [ 203.340103][T10569] sock: sock_timestamping_bind_phc: sock not bind to device [ 203.534168][T10580] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2231'. [ 204.127564][T10613] xt_CT: You must specify a L4 protocol and not use inversions on it [ 204.474400][T10629] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 204.545828][T10633] lo speed is unknown, defaulting to 1000 [ 204.565522][T10633] lo speed is unknown, defaulting to 1000 [ 204.583661][T10633] lo speed is unknown, defaulting to 1000 [ 204.665676][T10633] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 204.740174][T10633] lo speed is unknown, defaulting to 1000 [ 204.785980][T10633] lo speed is unknown, defaulting to 1000 [ 204.804597][T10643] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2261'. [ 204.847103][T10633] lo speed is unknown, defaulting to 1000 [ 204.869891][T10633] lo speed is unknown, defaulting to 1000 [ 204.909630][T10633] lo speed is unknown, defaulting to 1000 [ 205.034143][T10650] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 205.125892][T10655] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2268'. [ 205.260032][T10660] IPv6: Can't replace route, no match found [ 205.338232][T10665] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2273'. [ 205.571745][T10675] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 205.745365][T10687] xt_policy: neither incoming nor outgoing policy selected [ 206.014135][T10701] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 206.301719][T10714] ieee802154 phy0 wpan0: encryption failed: -22 [ 206.336711][T10716] IPv6: NLM_F_REPLACE set, but no existing node found! [ 208.125914][T10763] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 208.328395][T10805] xt_ipcomp: unknown flags B [ 208.537431][T10814] bridge2: entered promiscuous mode [ 208.592297][T10814] bridge2: entered allmulticast mode [ 208.898077][T10834] xt_l2tp: missing protocol rule (udp|l2tpip) [ 208.947443][T10838] netlink: zone id is out of range [ 208.988550][T10838] netlink: zone id is out of range [ 208.998928][T10838] netlink: zone id is out of range [ 209.025641][T10838] netlink: zone id is out of range [ 209.252448][T10849] validate_nla: 43 callbacks suppressed [ 209.252472][T10849] netlink: 'syz.3.2357': attribute type 26 has an invalid length. [ 209.398955][T10858] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2361'. [ 209.408205][ T5855] Bluetooth: hci0: command 0x0401 tx timeout [ 209.689238][T10877] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2369'. [ 209.953208][T10883] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 211.540656][T10964] netlink: 'syz.4.2411': attribute type 1 has an invalid length. [ 211.568480][T10964] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2411'. [ 211.726789][T10972] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2413'. [ 211.957955][T10981] netlink: 'syz.2.2419': attribute type 9 has an invalid length. [ 211.993722][T10981] netlink: 'syz.2.2419': attribute type 6 has an invalid length. [ 212.177675][T10992] netlink: 'syz.1.2423': attribute type 1 has an invalid length. [ 212.200446][T10992] xfrm0 speed is unknown, defaulting to 1000 [ 212.660978][T11020] xt_ecn: cannot match TCP bits for non-tcp packets [ 212.815253][T11026] netlink: 'syz.3.2441': attribute type 6 has an invalid length. [ 213.074742][T11039] netlink: set zone limit has 8 unknown bytes [ 213.095859][T11040] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2447'. [ 213.398035][T11056] netlink: 'syz.2.2455': attribute type 1 has an invalid length. [ 214.224651][T11100] .: renamed from bond0 (while UP) [ 214.547138][T11115] xt_socket: unknown flags 0x3c [ 214.612104][T11120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.653517][T11120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.678041][T11120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.716523][T11120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.740421][T11120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.753169][T11120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.770305][T11120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.793549][T11120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.810972][T11120] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 214.832342][T11120] batadv_slave_0: entered promiscuous mode [ 214.845707][T11120] batadv_slave_0: entered allmulticast mode [ 215.007343][T11134] openvswitch: netlink: IP tunnel dst address not specified [ 215.248131][T11148] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2499'. [ 215.368121][T11156] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2503'. [ 215.377958][T11154] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2502'. [ 215.623315][T11166] netlink: 'syz.3.2507': attribute type 7 has an invalid length. [ 216.317919][T11201] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2525'. [ 217.011779][T11240] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2544'. [ 217.044602][T11240] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2544'. [ 217.502614][T11266] netlink: 'syz.4.2557': attribute type 10 has an invalid length. [ 217.529641][T11266] veth0_vlan: entered allmulticast mode [ 217.592205][T11266] veth0_vlan: left promiscuous mode [ 217.601848][T11266] veth0_vlan: entered promiscuous mode [ 217.644963][T11266] team0: Device veth0_vlan failed to register rx_handler [ 217.735283][T11277] delete_channel: no stack [ 218.286597][T11304] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2577'. [ 218.317238][T11308] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2579'. [ 218.432686][T11312] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2583'. [ 218.445544][T11312] openvswitch: netlink: Actions may not be safe on all matching packets [ 218.638231][T11322] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 218.956672][T11340] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2595'. [ 219.312206][T11360] sctp: [Deprecated]: syz.2.2605 (pid 11360) Use of int in maxseg socket option. [ 219.312206][T11360] Use struct sctp_assoc_value instead [ 219.963209][T11393] xt_time: unknown flags 0x4 [ 220.063373][T11397] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 220.653690][T11429] netlink: 'syz.2.2637': attribute type 10 has an invalid length. [ 220.789928][T11429] .: (slave wlan1): Enslaving as an active interface with an up link [ 221.349185][ T5848] Bluetooth: hci4: link tx timeout [ 221.355068][ T5848] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 221.364045][T11466] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2656'. [ 221.897496][T11489] xt_CT: No such helper "syz1" [ 221.990461][T11498] netlink: 'syz.1.2672': attribute type 3 has an invalid length. [ 222.010067][T11498] netlink: 201372 bytes leftover after parsing attributes in process `syz.1.2672'. [ 222.046214][T11500] netlink: 248 bytes leftover after parsing attributes in process `syz.0.2673'. [ 222.060595][ T5848] Bluetooth: hci2: command 0x0406 tx timeout [ 222.063306][ T5850] Bluetooth: hci0: command 0x0401 tx timeout [ 222.066976][ T5848] Bluetooth: hci3: command 0x0406 tx timeout [ 222.072742][ T55] Bluetooth: hci1: command 0x0406 tx timeout [ 222.976049][T11542] netlink: 9 bytes leftover after parsing attributes in process `syz.0.2689'. [ 223.063550][T11542] gretap0: entered promiscuous mode [ 223.407853][ T5847] Bluetooth: hci4: command 0x0406 tx timeout [ 223.700578][T11576] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2702'. [ 223.902387][T11583] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 224.038885][T11591] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2709'. [ 224.039383][T11590] netlink: 'syz.4.2710': attribute type 2 has an invalid length. [ 224.094397][T11590] netlink: 244 bytes leftover after parsing attributes in process `syz.4.2710'. [ 224.197950][T11597] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2711'. [ 224.269949][T11601] (unnamed net_device) (uninitialized): down delay (33554432) is not a multiple of miimon (640), value rounded to 33553920 ms [ 224.361599][T11605] netlink: 204 bytes leftover after parsing attributes in process `syz.4.2715'. [ 224.472128][T11609] gre1: entered promiscuous mode [ 224.477148][T11609] gre1: entered allmulticast mode [ 224.527913][T11614] netlink: 'syz.3.2719': attribute type 1 has an invalid length. [ 224.535701][T11614] netlink: 244 bytes leftover after parsing attributes in process `syz.3.2719'. [ 225.078751][T11642] netlink: 'syz.3.2728': attribute type 1 has an invalid length. [ 225.086558][T11642] netlink: 'syz.3.2728': attribute type 2 has an invalid length. [ 226.206507][T11701] : renamed from bridge_slave_0 (while UP) [ 226.258303][T11660] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 226.462068][T11712] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 226.504656][T11717] IPVS: Unknown mcast interface: pim6reg1 [ 226.912737][T11733] IPv6: sit1: Disabled Multicast RS [ 227.160510][T11748] netlink: 'syz.0.2769': attribute type 39 has an invalid length. [ 227.184553][T11750] x_tables: ip6_tables: REDIRECT target: used from hooks INPUT, but only usable from PREROUTING/OUTPUT [ 227.259385][T11748] veth0_macvtap: left promiscuous mode [ 227.488595][ T5842] Bluetooth: hci0: command 0x0401 tx timeout [ 227.704552][T11778] netlink: 'syz.0.2779': attribute type 10 has an invalid length. [ 227.751710][T11778] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 228.470956][T11809] xt_cluster: you have exceeded the maximum number of cluster nodes (768 > 32) [ 229.022341][T11843] netlink: 'syz.4.2813': attribute type 1 has an invalid length. [ 229.055217][T11843] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2813'. [ 229.119668][T11841] xt_CT: No such helper "pptp" [ 229.535307][T11869] netlink: 164 bytes leftover after parsing attributes in process `syz.4.2825'. [ 229.794283][T11881] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2831'. [ 230.365853][T11913] delete_channel: no stack [ 230.729050][T11929] tunl0: entered promiscuous mode [ 230.743916][T11929] netlink: 'syz.3.2849': attribute type 3 has an invalid length. [ 230.763937][T11929] netlink: 9 bytes leftover after parsing attributes in process `syz.3.2849'. [ 231.094755][T11947] netlink: 'syz.0.2861': attribute type 1 has an invalid length. [ 231.132070][T11947] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2861'. [ 231.178082][T11947] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2861'. [ 231.267511][T11957] openvswitch: netlink: Missing key (keys=40, expected=80) [ 231.721436][T11980] netlink: 300 bytes leftover after parsing attributes in process `syz.3.2877'. [ 231.891606][T11991] netlink: 'syz.1.2879': attribute type 33 has an invalid length. [ 231.947187][T11991] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2879'. [ 232.218728][T12008] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2886'. [ 232.351967][T12016] ieee802154 phy1 wpan1: encryption failed: -22 [ 232.414657][T12018] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2889'. [ 232.451464][T12018] netlink: 'syz.0.2889': attribute type 2 has an invalid length. [ 233.010032][T12048] netlink: 'syz.4.2905': attribute type 21 has an invalid length. [ 233.728717][T12083] netlink: 'syz.1.2922': attribute type 1 has an invalid length. [ 233.748235][T12087] ipt_ECN: cannot use operation on non-tcp rule [ 234.894657][T12149] netlink: 'syz.4.2954': attribute type 7 has an invalid length. [ 235.299272][T12170] netlink: 'syz.2.2962': attribute type 10 has an invalid length. [ 235.314108][T12170] syz_tun: entered promiscuous mode [ 235.397108][T12170] .: (slave syz_tun): Enslaving as an active interface with an up link [ 235.621018][T12183] netlink: 'syz.3.2970': attribute type 64 has an invalid length. [ 235.651604][T12183] __nla_validate_parse: 4 callbacks suppressed [ 235.651625][T12183] netlink: 5 bytes leftover after parsing attributes in process `syz.3.2970'. [ 236.053240][T12205] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 236.544800][T12235] netlink: 'syz.1.2994': attribute type 1 has an invalid length. [ 236.576518][T12235] netlink: 'syz.1.2994': attribute type 3 has an invalid length. [ 236.592005][T12235] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2994'. [ 237.484062][T12279] : renamed from vlan0 (while UP) [ 237.506511][T12284] netlink: 'syz.2.3018': attribute type 5 has an invalid length. [ 237.704471][T12294] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3024'. [ 238.128795][T12316] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3036'. [ 238.176897][T12321] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 238.285760][T12325] netlink: 'syz.1.3039': attribute type 7 has an invalid length. [ 238.331362][T12324] netlink: 116 bytes leftover after parsing attributes in process `syz.0.3041'. [ 239.515707][T12391] xt_hashlimit: invalid rate [ 241.350381][T12475] netlink: 'syz.4.3108': attribute type 8 has an invalid length. [ 241.385119][T12475] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 241.471356][T12482] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 241.631550][T12487] delete_channel: no stack [ 242.404787][T12530] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3132'. [ 242.735014][T12544] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 242.970865][T12558] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3148'. [ 243.132386][T12566] delete_channel: no stack [ 243.299102][T12575] ieee802154 phy1 wpan1: encryption failed: -22 [ 243.440266][T12579] netlink: 5 bytes leftover after parsing attributes in process `syz.2.3159'. [ 243.651260][T12592] xt_l2tp: v2 doesn't support IP mode [ 243.788101][T12599] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3169'. [ 243.807431][T12599] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3169'. [ 244.067893][T12612] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 244.632376][T12644] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3188'. [ 245.195859][T12671] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3205'. [ 245.218374][T12674] netlink: zone id is out of range [ 245.223597][T12674] netlink: set zone limit has 8 unknown bytes [ 245.541768][T12689] netlink: 'syz.4.3215': attribute type 1 has an invalid length. [ 245.557152][T12689] netlink: 220 bytes leftover after parsing attributes in process `syz.4.3215'. [ 245.841445][T12703] SET target dimension over the limit! [ 246.608899][T12743] openvswitch: netlink: Actions may not be safe on all matching packets [ 246.780113][T12750] netlink: 'syz.4.3243': attribute type 2 has an invalid length. [ 246.818919][T12750] netlink: 'syz.4.3243': attribute type 1 has an invalid length. [ 246.991732][T12763] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3248'. [ 247.835001][T12807] netlink: 'syz.0.3270': attribute type 4 has an invalid length. [ 248.328164][T12833] netlink: 'syz.3.3283': attribute type 21 has an invalid length. [ 248.386903][T12837] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3284'. [ 249.249256][T12875] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3298'. [ 249.372753][T12880] netlink: 'syz.2.3303': attribute type 33 has an invalid length. [ 249.574476][T12890] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3307'. [ 250.193915][T12925] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3324'. [ 250.209688][T12927] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3325'. [ 250.921830][T12962] netlink: 'syz.1.3343': attribute type 1 has an invalid length. [ 250.930097][T12962] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3343'. [ 251.396041][T12989] netlink: 'syz.4.3353': attribute type 16 has an invalid length. [ 251.437058][T12989] netlink: 'syz.4.3353': attribute type 17 has an invalid length. [ 251.656730][ T1223] lo speed is unknown, defaulting to 1000 [ 251.685591][ T1223] syz2: Port: 1 Link DOWN [ 252.087642][T13019] netlink: 'syz.3.3368': attribute type 11 has an invalid length. [ 252.096427][T13019] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3368'. [ 252.299744][T13031] netlink: 'syz.2.3373': attribute type 10 has an invalid length. [ 252.367287][T13037] netlink: 'syz.1.3377': attribute type 1 has an invalid length. [ 252.380547][T13031] team0: Device veth0_macvtap failed to register rx_handler [ 252.388176][T13037] netlink: 'syz.1.3377': attribute type 11 has an invalid length. [ 252.396028][T13037] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3377'. [ 252.657019][T13051] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3383'. [ 252.907893][T13061] x_tables: unsorted underflow at hook 1 [ 252.958417][T13066] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3392'. [ 253.331001][T13088] netlink: 'syz.3.3404': attribute type 4 has an invalid length. [ 253.447366][T13090] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3403'. [ 253.539011][T13095] xt_nfacct: accounting object `syz1' does not exists [ 253.671706][T13102] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3410'. [ 253.678161][T13100] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3409'. [ 253.714318][T13100] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3409'. [ 253.734358][T13105] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3412'. [ 254.215685][T13132] openvswitch: netlink: Missing key (keys=40, expected=80) [ 254.368359][T13134] ipt_REJECT: TCP_RESET invalid for non-tcp [ 254.580170][T13149] netlink: 'syz.1.3432': attribute type 1 has an invalid length. [ 254.611234][T13149] netlink: 'syz.1.3432': attribute type 2 has an invalid length. [ 254.741834][T13156] mac80211_hwsim hwsim6 : renamed from wlan1 (while UP) [ 255.286981][T13188] netlink: 'syz.4.3452': attribute type 30 has an invalid length. [ 255.287975][T13182] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3450'. [ 255.412825][T13193] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3454'. [ 255.422009][T13193] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3454'. [ 255.434471][T13193] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3454'. [ 255.458100][T13182] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 255.563359][T13199] SET target dimension over the limit! [ 255.695568][T13203] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3460'. [ 255.818645][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.547771][T13248] xt_hashlimit: max too large, truncated to 1048576 [ 256.752393][T13259] syz.1.3488 uses old SIOCAX25GETINFO [ 256.781534][T13262] validate_nla: 3 callbacks suppressed [ 256.781558][T13262] netlink: 'syz.2.3489': attribute type 1 has an invalid length. [ 257.087401][T13277] netlink: 'syz.0.3496': attribute type 2 has an invalid length. [ 257.148793][T13277] netlink: 'syz.0.3496': attribute type 6 has an invalid length. [ 257.708090][T13306] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 258.961946][T13373] __nla_validate_parse: 6 callbacks suppressed [ 258.961969][T13373] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3544'. [ 258.997512][T13373] netlink: 'syz.1.3544': attribute type 3 has an invalid length. [ 259.014185][T13375] netlink: 'syz.3.3545': attribute type 2 has an invalid length. [ 259.065055][T13375] netlink: 'syz.3.3545': attribute type 8 has an invalid length. [ 259.082589][T13375] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3545'. [ 259.358022][T13391] netlink: 'syz.4.3553': attribute type 1 has an invalid length. [ 259.435121][T13395] netlink: 'syz.2.3555': attribute type 8 has an invalid length. [ 259.861052][T13416] sctp: [Deprecated]: syz.0.3568 (pid 13416) Use of struct sctp_assoc_value in delayed_ack socket option. [ 259.861052][T13416] Use struct sctp_sack_info instead [ 259.917368][T13420] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3565'. [ 260.806173][T13466] bond0: entered promiscuous mode [ 260.814985][T13466] bond0: entered allmulticast mode [ 260.836370][T13466] 8021q: adding VLAN 0 to HW filter on device bond0 [ 261.219349][T13490] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 262.272694][T13547] ieee802154 phy1 wpan1: encryption failed: -22 [ 262.927503][T13576] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3644'. [ 262.953342][T13576] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 263.719386][T13617] netlink: 'syz.3.3663': attribute type 1 has an invalid length. [ 263.774265][T13617] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3663'. [ 263.913061][T13622] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3667'. [ 263.960631][T13622] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3667'. [ 264.054874][T13629] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3670'. [ 264.074865][T13629] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3670'. [ 264.108654][T13631] netlink: 'syz.0.3671': attribute type 2 has an invalid length. [ 264.138774][T13629] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3670'. [ 264.205142][T13629] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3670'. [ 264.262573][T13629] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3670'. [ 264.297823][T13629] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3670'. [ 264.308760][T13629] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3670'. [ 264.331616][T13629] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3670'. [ 264.341658][T13629] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3670'. [ 264.351573][T13629] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3670'. [ 265.320997][T13677] netlink: 'syz.2.3694': attribute type 10 has an invalid length. [ 265.353454][T13677] batman_adv: batadv0: Adding interface: wlan0 [ 265.369250][T13677] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.440738][T13677] batman_adv: batadv0: Interface activated: wlan0 [ 266.128099][T13710] openvswitch: netlink: Message has -1 unknown bytes. [ 267.867933][T13799] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 268.193858][T13818] xt_connbytes: Forcing CT accounting to be enabled [ 268.541382][T13836] xt_CT: You must specify a L4 protocol and not use inversions on it [ 269.832546][T13902] xt_CT: You must specify a L4 protocol and not use inversions on it [ 270.926270][T13963] IPv6: NLM_F_CREATE should be specified when creating new route [ 271.109091][T13972] SET target dimension over the limit! [ 271.208204][T13976] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 272.168056][T14021] : renamed from dummy0 (while UP) [ 273.282839][T14077] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.633836][T14152] netlink: 'syz.4.3926': attribute type 7 has an invalid length. [ 274.652143][T14152] __nla_validate_parse: 164 callbacks suppressed [ 274.652233][T14152] netlink: 140 bytes leftover after parsing attributes in process `syz.4.3926'. [ 274.899499][T14163] xt_cgroup: xt_cgroup: no path or classid specified [ 275.118367][T14176] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3940'. [ 275.127605][T14176] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3940'. [ 276.082520][T14228] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3965'. [ 276.952727][T14276] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3988'. [ 277.103585][T14282] netlink: 'syz.0.3994': attribute type 2 has an invalid length. [ 277.232769][T14292] openvswitch: netlink: Key type 12304 is out of range max 32 [ 277.490482][T14306] ipt_REJECT: TCP_RESET invalid for non-tcp [ 277.646644][T14312] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4009'. [ 278.118136][T14338] ipvlan0: entered promiscuous mode [ 278.123438][T14338] ipvlan0: entered allmulticast mode [ 278.154623][T14338] veth0_vlan: entered allmulticast mode [ 278.193838][T14341] netlink: 'syz.3.4022': attribute type 21 has an invalid length. [ 279.021871][T14387] netlink: 288 bytes leftover after parsing attributes in process `syz.2.4041'. [ 279.193727][T14394] ip6t_rpfilter: unknown options [ 279.193788][T14395] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4047'. [ 279.229872][T14395] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4047'. [ 279.325080][T14399] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4049'. [ 279.850200][T14430] xt_TCPMSS: Only works on TCP SYN packets [ 280.053290][T14439] IPv6: sit1: Disabled Multicast RS [ 280.091877][T14439] sit1: entered allmulticast mode [ 280.518231][T14460] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 280.555444][T14460] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 280.967401][T14484] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4091'. [ 281.465113][T14508] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4102'. [ 281.977538][T14536] netlink: 'syz.2.4117': attribute type 1 has an invalid length. [ 282.019687][T14536] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4117'. [ 282.077799][T14536] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4117'. [ 282.947354][T14585] netlink: 'syz.4.4141': attribute type 1 has an invalid length. [ 282.988382][T14585] netlink: 232 bytes leftover after parsing attributes in process `syz.4.4141'. [ 282.999589][T14584] bridge_slave_0: left allmulticast mode [ 283.006427][T14584] bridge_slave_0: left promiscuous mode [ 283.026586][T14584] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.141830][T14584] bridge_slave_1: left allmulticast mode [ 283.152475][T14584] bridge_slave_1: left promiscuous mode [ 283.182176][T14584] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.222744][T14584] bond0: (slave bond_slave_0): Releasing backup interface [ 283.272184][T14584] bond0: (slave bond_slave_1): Releasing backup interface [ 283.323627][T14584] team0: Port device team_slave_0 removed [ 283.362620][T14584] team0: Port device team_slave_1 removed [ 283.369784][T14584] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 283.393283][T14584] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 283.403827][T14584] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 284.472012][T14646] netlink: 144 bytes leftover after parsing attributes in process `syz.0.4171'. [ 284.745787][T14660] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 285.578711][T14698] xt_hashlimit: max too large, truncated to 1048576 [ 286.228497][T14729] xt_NFQUEUE: number of total queues is 0 [ 286.434774][T14742] Cannot find del_set index 65531 as target [ 286.778652][T14761] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 286.958890][T14769] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4232'. [ 287.642923][T14806] xt_recent: Unsupported userspace flags (00000042) [ 287.852664][T14815] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 288.031495][T14826] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4260'. [ 288.043647][T14827] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4261'. [ 288.307218][T14841] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (32767) [ 288.350826][T14841] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 288.547039][T14853] netlink: 'syz.4.4273': attribute type 1 has an invalid length. [ 289.337519][T14897] xt_socket: unknown flags 0x2 [ 289.436720][T14899] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4297'. [ 289.447617][T14899] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-tlb(5) [ 289.715311][T14917] netlink: 'syz.0.4306': attribute type 32 has an invalid length. [ 290.262112][T14941] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-xor(2) [ 290.445816][T14952] xt_bpf: check failed: parse error [ 290.766629][T14972] netlink: 'syz.4.4329': attribute type 11 has an invalid length. [ 290.798442][T14972] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4329'. [ 291.227370][T14994] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4338'. [ 291.670278][T15015] netlink: 'syz.0.4346': attribute type 4 has an invalid length. [ 291.763753][T15020] netlink: 'syz.3.4349': attribute type 3 has an invalid length. [ 291.787533][T15020] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4349'. [ 291.856551][T15021] lo: entered promiscuous mode [ 291.878124][T15021] netlink: 'syz.1.4347': attribute type 2 has an invalid length. [ 291.916729][T15021] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 292.286692][T15044] No such timeout policy "syz0" [ 292.310895][T15035] xt_CT: No such helper "snmp_trap" [ 292.712168][T15064] netlink: 'syz.4.4366': attribute type 28 has an invalid length. [ 292.775326][T15064] netlink: 'syz.4.4366': attribute type 3 has an invalid length. [ 292.808168][T15064] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4366'. [ 294.686870][T15167] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 294.717663][T15174] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4412'. [ 294.964978][T15185] netlink: 'syz.1.4416': attribute type 1 has an invalid length. [ 295.069803][T15190] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4418'. [ 295.607962][T15214] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4429'. [ 295.853297][T15227] netlink: 'syz.4.4434': attribute type 21 has an invalid length. [ 295.897915][T15227] netlink: 'syz.4.4434': attribute type 20 has an invalid length. [ 295.916408][T15227] IPv6: NLM_F_CREATE should be specified when creating new route [ 296.006310][T15233] xt_CT: No such helper "pptp" [ 297.716266][T15308] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4470'. [ 297.757793][T15308] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4470'. [ 297.808199][T15308] netlink: 'syz.4.4470': attribute type 14 has an invalid length. [ 297.816069][T15315] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4473'. [ 297.856885][T15308] netlink: 'syz.4.4470': attribute type 13 has an invalid length. [ 298.341232][T15341] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4485'. [ 298.676673][T15359] netlink: 'syz.2.4494': attribute type 3 has an invalid length. [ 299.529832][T15400] 8021q: adding VLAN 0 to HW filter on device bond0 [ 299.570128][T15400] team0: Port device bond0 added [ 299.777318][T15412] Bluetooth: MGMT ver 1.23 [ 299.916557][T15419] Zero length message leads to an empty skb [ 300.642377][T15462] netlink: 256 bytes leftover after parsing attributes in process `syz.3.4545'. [ 301.107069][T15484] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4556'. [ 301.418948][T15498] netlink: 244 bytes leftover after parsing attributes in process `syz.0.4562'. [ 301.637172][T15508] netlink: 'syz.2.4568': attribute type 2 has an invalid length. [ 302.570250][T15548] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4587'. [ 302.721298][T15550] netlink: 'syz.0.4590': attribute type 18 has an invalid length. [ 302.756297][T15550] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 302.765956][T15550] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 302.775201][T15550] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 302.784027][T15550] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 302.842332][ T5890] IPVS: starting estimator thread 0... [ 302.939476][T15557] IPVS: using max 24 ests per chain, 57600 per kthread [ 303.167917][ T5842] Bluetooth: hci4: command 0x0406 tx timeout [ 304.881596][T15653] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4634'. [ 304.905793][T15653] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4634'. [ 305.388601][T15682] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4644'. [ 306.606567][T15714] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4656'. [ 306.635105][T15714] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4656'. [ 307.065729][T15737] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4664'. [ 307.406282][T15757] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4673'. [ 308.308586][T15805] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4690'. [ 308.552946][ T5890] IPVS: starting estimator thread 0... [ 308.558875][T15815] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 308.720286][T15816] IPVS: using max 30 ests per chain, 72000 per kthread [ 308.861636][T15829] Driver unsupported XDP return value 0 on prog (id 297) dev N/A, expect packet loss! [ 310.462395][T15899] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4724'. [ 310.491094][T15902] netlink: 76 bytes leftover after parsing attributes in process `syz.3.4725'. [ 310.522689][T15902] nbd: illegal input index -8454144 [ 310.901322][T15919] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4731'. [ 310.974716][T15919] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4731'. [ 310.985694][T15926] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4732'. [ 311.195498][T15931] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check. [ 312.282255][T15980] netlink: 'syz.4.4756': attribute type 1 has an invalid length. [ 312.305866][T15980] netlink: 204 bytes leftover after parsing attributes in process `syz.4.4756'. [ 312.809271][T16007] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4768'. [ 312.823500][T16009] netlink: 'syz.3.4770': attribute type 13 has an invalid length. [ 312.842917][T16007] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4768'. [ 312.854345][T16009] veth0_macvtap: left promiscuous mode [ 312.884418][T16009] macvtap0: entered allmulticast mode [ 312.910337][T16009] macvtap0: refused to change device tx_queue_len [ 312.928673][T16011] IPVS: Error connecting to the multicast addr [ 313.686721][T16044] netlink: 504 bytes leftover after parsing attributes in process `syz.3.4786'. [ 313.761484][T16047] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4787'. [ 315.571830][T16134] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 316.190423][T16163] __nla_validate_parse: 2 callbacks suppressed [ 316.190446][T16163] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4844'. [ 316.389181][T16171] netlink: 'syz.0.4848': attribute type 2 has an invalid length. [ 316.562205][T16173] xfrm0 speed is unknown, defaulting to 1000 [ 316.781086][T16187] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4856'. [ 316.808907][T16187] netlink: 'syz.3.4856': attribute type 30 has an invalid length. [ 316.833794][T16187] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4856'. [ 317.012814][T16173] lo speed is unknown, defaulting to 1000 [ 317.258466][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.408223][ T5847] Bluetooth: hci0: command 0x0401 tx timeout [ 317.414415][ T5842] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 318.123258][T16237] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4877'. [ 319.046001][T16270] rdma_op ffff88807ad689f0 conn xmit_rdma 0000000000000000 [ 319.599454][T16296] netlink: 'syz.2.4905': attribute type 3 has an invalid length. [ 319.760449][T16304] netlink: 'syz.4.4909': attribute type 2 has an invalid length. [ 320.151765][T16324] tipc: Started in network mode [ 320.170662][T16324] tipc: Node identity , cluster identity 4711 [ 320.181886][T16324] tipc: Failed to set node id, please configure manually [ 320.212551][T16324] tipc: Enabling of bearer rejected, failed to enable media [ 320.316555][T16333] netlink: 830 bytes leftover after parsing attributes in process `syz.0.4923'. [ 320.454787][T16344] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4925'. [ 320.536106][T16336] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4925'. [ 321.694997][T16394] netlink: 128 bytes leftover after parsing attributes in process `syz.0.4953'. [ 322.180762][T16415] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4962'. [ 322.219001][T16419] netlink: 'syz.1.4955': attribute type 1 has an invalid length. [ 322.852914][T16452] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4976'. [ 322.867361][T16452] netlink: 176 bytes leftover after parsing attributes in process `syz.0.4976'. [ 322.914764][T16452] netlink: 'syz.0.4976': attribute type 5 has an invalid length. [ 323.154717][T16465] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4980'. [ 323.415723][T16437] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 324.589590][T16531] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5010'. [ 324.625844][T16531] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5010'. [ 325.092837][T16553] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5021'. [ 325.467055][T16571] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5031'. [ 325.502571][T16571] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5031'. [ 325.530665][T16576] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 325.554738][T16576] team0: Device macvtap1 is already an upper device of the team interface [ 325.937561][T16592] netlink: 'syz.0.5040': attribute type 4 has an invalid length. [ 326.716963][T16624] __nla_validate_parse: 2 callbacks suppressed [ 326.716990][T16624] netlink: 80 bytes leftover after parsing attributes in process `syz.4.5055'. [ 327.095531][T16646] netlink: 'syz.4.5066': attribute type 1 has an invalid length. [ 327.105409][T16646] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5066'. [ 327.207105][T16650] netlink: 148 bytes leftover after parsing attributes in process `syz.4.5068'. [ 327.866167][T16678] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 328.024896][T16683] netlink: 72 bytes leftover after parsing attributes in process `syz.0.5083'. [ 328.297492][T16695] netlink: 'syz.4.5089': attribute type 29 has an invalid length. [ 328.323120][T16695] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5089'. [ 328.360641][T16695] netlink: 'syz.4.5089': attribute type 29 has an invalid length. [ 328.397212][T16695] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5089'. [ 329.567073][T16753] netlink: 'syz.4.5117': attribute type 11 has an invalid length. [ 329.594701][T16757] Dead loop on virtual device ip6_vti0, fix it urgently! [ 330.063809][T16779] bond0: option mode: unable to set because the bond device is up [ 330.380340][T16795] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5139'. [ 330.895167][T16821] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5152'. [ 330.914208][T16821] netlink: 5 bytes leftover after parsing attributes in process `syz.3.5152'. [ 331.199269][T16837] netlink: 192 bytes leftover after parsing attributes in process `syz.1.5159'. [ 331.830175][ T52] IPVS: starting estimator thread 0... [ 331.943410][T16874] IPVS: using max 25 ests per chain, 60000 per kthread [ 332.380881][T16904] tipc: Started in network mode [ 332.385902][T16904] tipc: Node identity , cluster identity 4711 [ 332.394199][T16906] IPVS: ip_vs_edit_dest(): server weight less than zero [ 332.394224][T16904] tipc: Failed to set node id, please configure manually [ 332.410102][T16904] tipc: Enabling of bearer rejected, failed to enable media [ 332.557930][T16912] netlink: 'syz.4.5194': attribute type 2 has an invalid length. [ 332.734295][T16918] netlink: 'syz.0.5197': attribute type 3 has an invalid length. [ 332.964132][T16928] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5203'. [ 333.153990][T16928] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.367347][T16928] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.626282][T16928] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.653254][T16957] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5216'. [ 333.871512][T16928] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.151337][T16928] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.215086][T16928] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.302235][T16928] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.370066][T16991] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 334.391354][T16928] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.428606][T16990] tipc: Started in network mode [ 334.433653][T16990] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 334.465548][T16990] tipc: Enabling of bearer rejected, failed to enable media [ 335.002027][T17025] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5248'. [ 335.237892][T17035] netlink: 104 bytes leftover after parsing attributes in process `syz.0.5253'. [ 335.611043][T17050] netlink: 'syz.0.5262': attribute type 1 has an invalid length. [ 335.811293][T17061] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 335.951687][T17064] netlink: 'syz.4.5268': attribute type 32 has an invalid length. [ 335.990768][T17064] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5268'. [ 336.032487][T17064] (unnamed net_device) (uninitialized): option coupled_control: invalid value (52) [ 336.440512][T17089] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.5281'. [ 336.755587][T17100] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5286'. [ 336.944433][T17112] (unnamed net_device) (uninitialized): (slave batadv_slave_0): Device is not bonding slave [ 336.987876][T17112] (unnamed net_device) (uninitialized): option active_slave: invalid value (batadv_slave_0) [ 337.089760][T17120] tipc: MTU too low for tipc bearer [ 337.197352][T17124] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 337.472448][T17141] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5306'. [ 337.485368][T17141] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5306'. [ 337.500851][T17141] netlink: 'syz.0.5306': attribute type 7 has an invalid length. [ 337.720779][T17154] pim6reg527: entered allmulticast mode [ 337.914255][T17161] netlink: 'syz.3.5316': attribute type 3 has an invalid length. [ 337.923924][T17161] netlink: 766 bytes leftover after parsing attributes in process `syz.3.5316'. [ 338.161000][ T5890] IPVS: starting estimator thread 0... [ 338.259077][T17174] IPVS: using max 25 ests per chain, 60000 per kthread [ 338.502292][T17192] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5330'. [ 338.694758][T17201] netlink: 'syz.2.5334': attribute type 3 has an invalid length. [ 338.910904][T17202] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 339.127600][T17217] pim6reg: entered allmulticast mode [ 339.151516][T17217] pim6reg: left allmulticast mode [ 339.509403][T17227] tipc: Enabling of bearer rejected, failed to enable media [ 339.621812][T17234] netlink: 'syz.3.5350': attribute type 1 has an invalid length. [ 339.718528][T17237] vxcan1: entered allmulticast mode [ 340.261193][T17268] netlink: 'syz.4.5367': attribute type 1 has an invalid length. [ 340.274337][T17268] netlink: 244 bytes leftover after parsing attributes in process `syz.4.5367'. [ 340.354134][T17273] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5369'. [ 340.407908][T17273] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5369'. [ 340.983571][T17306] tipc: Started in network mode [ 341.006975][T17306] tipc: Node identity fe800000000000000000000000000013, cluster identity 4711 [ 341.053255][T17306] tipc: Enabling of bearer rejected, failed to enable media [ 341.065667][T17312] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5389'. [ 341.803362][T17351] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5406'. [ 342.346531][T17377] netlink: 'syz.0.5418': attribute type 1 has an invalid length. [ 342.478020][T17384] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 344.094974][T17445] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5452'. [ 344.124747][T17445] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5452'. [ 344.140792][T17445] netlink: 'syz.4.5452': attribute type 14 has an invalid length. [ 344.855825][T17484] tipc: Enabled bearer , priority 10 [ 344.876030][T17487] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5473'. [ 345.052919][T17495] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5476'. [ 345.072257][T17495] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5476'. [ 345.109508][T17495] netlink: 'syz.2.5476': attribute type 15 has an invalid length. [ 345.269977][T17505] Bluetooth: MGMT ver 1.23 [ 345.654683][T17526] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5492'. [ 345.683761][T17526] tipc: Invalid UDP bearer configuration [ 345.683825][T17526] tipc: Enabling of bearer rejected, failed to enable media [ 345.969213][ T5890] tipc: Node number set to 4269801491 [ 346.002391][T17541] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 346.509938][T17565] netlink: 'syz.2.5511': attribute type 2 has an invalid length. [ 346.673635][T17576] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5516'. [ 347.278827][T17602] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5528'. [ 347.424514][T17611] sock: sock_timestamping_bind_phc: sock not bind to device [ 348.566085][T17669] netlink: 161716 bytes leftover after parsing attributes in process `syz.1.5561'. [ 348.739861][T17677] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5565'. [ 348.878487][T17681] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 349.489977][T17713] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5583'. [ 350.142541][T17748] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5600'. [ 350.164045][T17750] veth1_macvtap: left promiscuous mode [ 350.187151][T17750] macsec0: entered promiscuous mode [ 350.231029][T17756] veth1_macvtap: entered promiscuous mode [ 350.237121][T17756] macsec0: left promiscuous mode [ 350.854917][T17787] netlink: 'syz.2.5620': attribute type 1 has an invalid length. [ 350.864420][T17787] netlink: 220 bytes leftover after parsing attributes in process `syz.2.5620'. [ 350.875089][T17787] netlink: 'syz.2.5620': attribute type 1 has an invalid length. [ 351.713109][T17833] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5641'. [ 351.733624][T17833] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5641'. [ 352.527975][T17874] sctp: [Deprecated]: syz.0.5660 (pid 17874) Use of int in max_burst socket option deprecated. [ 352.527975][T17874] Use struct sctp_assoc_value instead [ 352.531898][T17877] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5663'. [ 352.929923][T17899] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5671'. [ 352.973563][T17895] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5671'. [ 353.246484][T17913] netlink: 'syz.4.5678': attribute type 3 has an invalid length. [ 353.947491][T17942] netlink: 'syz.0.5693': attribute type 12 has an invalid length. [ 353.975577][T17942] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5693'. [ 354.026715][T17944] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5694'. [ 354.437468][T17968] team0: Device vti1 is of different type [ 354.595619][T17976] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5709'. [ 354.625115][T17976] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5709'. [ 354.651775][T17976] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5709'. [ 354.667010][T17976] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5709'. [ 354.676940][T17976] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5709'. [ 354.695183][T17976] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5709'. [ 354.706416][T17976] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5709'. [ 354.724368][T17976] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5709'. [ 354.755431][T17976] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5709'. [ 354.776913][T17976] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5709'. [ 354.815981][T17976] A link change request failed with some changes committed already. Interface . may have been left with an inconsistent configuration, please check. [ 355.347067][T18013] netlink: 'syz.0.5724': attribute type 1 has an invalid length. [ 355.377889][T18013] xfrm0 speed is unknown, defaulting to 1000 [ 355.409161][T18006] netlink: 'syz.0.5724': attribute type 1 has an invalid length. [ 360.721244][T18283] __nla_validate_parse: 9 callbacks suppressed [ 360.721266][T18283] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5856'. [ 360.742340][T18285] netlink: 'syz.2.5855': attribute type 10 has an invalid length. [ 360.777217][T18284] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 360.830570][T18287] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5857'. [ 360.956533][T18292] nbd: couldn't find device at index 65536 [ 361.494420][T18319] netlink: 'syz.2.5872': attribute type 1 has an invalid length. [ 361.537788][T18319] netlink: 236 bytes leftover after parsing attributes in process `syz.2.5872'. [ 361.558727][T18321] netlink: 88 bytes leftover after parsing attributes in process `syz.4.5874'. [ 361.573706][T18321] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5874'. [ 361.600897][T18321] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5874'. [ 361.976271][T18344] netlink: 'syz.3.5883': attribute type 25 has an invalid length. [ 363.288655][T18414] gretap0: entered promiscuous mode [ 363.338904][T18414] macsec1: entered promiscuous mode [ 363.379051][T18414] gretap0: left promiscuous mode [ 363.663728][T18434] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5924'. [ 363.692577][T18434] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5924'. [ 363.933188][T18449] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5931'. [ 364.169086][T18460] netlink: 'syz.4.5936': attribute type 2 has an invalid length. [ 364.836942][T18495] netlink: 248 bytes leftover after parsing attributes in process `syz.2.5955'. [ 364.860354][T18495] NCSI netlink: No device for ifindex 0 [ 365.625047][T18540] netlink: 'syz.3.5976': attribute type 11 has an invalid length. [ 366.439856][T18583] team0: Device is already in use. [ 366.541690][T18590] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6000'. [ 366.568269][T18590] netlink: 272 bytes leftover after parsing attributes in process `syz.0.6000'. [ 366.595285][T18590] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6000'. [ 366.813048][T18600] netlink: 'syz.4.6005': attribute type 29 has an invalid length. [ 367.038430][T18610] netlink: 13 bytes leftover after parsing attributes in process `syz.2.6010'. [ 367.380479][T18626] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6018'. [ 367.427231][T18626] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 367.451454][T18626] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (1) [ 368.277886][T18670] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6039'. [ 368.505675][T18676] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6042'. [ 368.891152][T18683] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6045'. [ 369.080832][T18696] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 3, id = 0 [ 369.094877][T18695] IPVS: stopping backup sync thread 18696 ... [ 369.708951][T18731] netlink: 216 bytes leftover after parsing attributes in process `syz.4.6067'. [ 369.720552][T18731] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6067'. [ 369.731282][T18732] IPVS: length: 8 != 1152 [ 372.127777][ T5842] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 372.725830][T18902] tipc: Enabling of bearer rejected, media not registered [ 373.456236][T18943] batadv0: entered allmulticast mode [ 373.718334][T18958] __nla_validate_parse: 2 callbacks suppressed [ 373.718359][T18958] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6177'. [ 374.231976][T18985] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6190'. [ 374.550918][T19005] netlink: 256 bytes leftover after parsing attributes in process `syz.2.6198'. [ 374.863066][T19022] tipc: Started in network mode [ 374.888306][T19022] tipc: Node identity e0000002, cluster identity 4711 [ 374.896415][T19022] tipc: Enabling of bearer rejected, failed to enable media [ 375.155001][T19034] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6209'. [ 375.951110][T19083] Bluetooth: MGMT ver 1.23 [ 377.578651][T19167] syz.0.6272 (19167) used obsolete PPPIOCDETACH ioctl [ 377.623578][T19172] netlink: 'syz.3.6273': attribute type 1 has an invalid length. [ 377.639547][T19172] netlink: 'syz.3.6273': attribute type 3 has an invalid length. [ 377.648764][T19172] netlink: 224 bytes leftover after parsing attributes in process `syz.3.6273'. [ 377.669364][T19172] NCSI netlink: No device for ifindex 131080 [ 378.279477][T19207] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6289'. [ 378.633031][T19230] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6301'. [ 379.286421][T19265] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6318'. [ 379.367278][T19271] netlink: 'syz.2.6321': attribute type 11 has an invalid length. [ 380.011119][T19306] nbd: must specify at least one socket [ 381.146271][T19369] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6369'. [ 381.741923][T19401] netlink: 'syz.1.6383': attribute type 11 has an invalid length. [ 381.931268][T19413] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6390'. [ 382.003889][T19417] netlink: 'syz.0.6391': attribute type 1 has an invalid length. [ 382.020658][T19417] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6391'. [ 382.469036][T19439] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6401'. [ 383.110145][T19469] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6417'. [ 383.496152][T19493] netem: change failed [ 383.851296][T19512] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6438'. [ 384.139756][T19522] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6442'. [ 384.397406][T19538] netlink: 'syz.4.6450': attribute type 2 has an invalid length. [ 385.688478][T19607] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6482'. [ 385.739583][T19607] netlink: 21 bytes leftover after parsing attributes in process `syz.1.6482'. [ 385.859093][T19613] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6484'. [ 386.024940][T19623] netlink: 165 bytes leftover after parsing attributes in process `syz.1.6489'. [ 386.097035][T19626] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 386.106097][T19626] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 386.115018][T19626] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 386.124284][T19626] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 386.134203][T19626] vxlan1: entered promiscuous mode [ 386.140097][T19626] vxlan1: entered allmulticast mode [ 386.316867][T19637] netlink: 'syz.1.6496': attribute type 11 has an invalid length. [ 386.534635][T19646] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6501'. [ 386.639864][T19655] xt_CT: You must specify a L4 protocol and not use inversions on it [ 387.115603][T19679] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6516'. [ 387.173168][T19681] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6517'. [ 387.571456][T19703] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6526'. [ 388.278993][T19733] veth0: entered promiscuous mode [ 388.292207][T19731] veth0: left promiscuous mode [ 388.485753][T19741] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6544'. [ 388.888928][T19755] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6551'. [ 389.724929][ T52] hid-generic 0005:0C45:0007.0001: item fetching failed at offset 0/1 [ 389.779225][ T52] hid-generic 0005:0C45:0007.0001: probe with driver hid-generic failed with error -22 [ 389.821589][T19811] ipvlan2: entered allmulticast mode [ 390.939277][T19856] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 391.460373][T19886] netlink: 'syz.4.6613': attribute type 5 has an invalid length. [ 391.810239][T19903] __nla_validate_parse: 1 callbacks suppressed [ 391.810261][T19903] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6620'. [ 392.027252][T19912] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6625'. [ 392.085894][T19912] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 392.136691][T19912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.523606][T19932] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6634'. [ 393.683128][T19994] netlink: 'syz.2.6664': attribute type 5 has an invalid length. [ 393.709264][T19994] netlink: 'syz.2.6664': attribute type 5 has an invalid length. [ 394.574166][T20028] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6679'. [ 394.708182][T20034] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6682'. [ 394.839497][T20042] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6684'. [ 394.881492][T20042] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6684'. [ 395.571071][T20067] xfrm0 speed is unknown, defaulting to 1000 [ 395.815889][T20086] vxcan1: tx address claim with dlc 0 [ 396.227451][T20067] lo speed is unknown, defaulting to 1000 [ 397.119972][T20141] netlink: 'syz.0.6731': attribute type 29 has an invalid length. [ 397.138695][T20141] netlink: 'syz.0.6731': attribute type 29 has an invalid length. [ 397.163433][T20141] netlink: 'syz.0.6731': attribute type 29 has an invalid length. [ 397.729288][T20168] bridge: RTM_NEWNEIGH with invalid state 0x4 [ 397.761951][T20172] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6745'. [ 397.789512][T20173] netlink: 160 bytes leftover after parsing attributes in process `syz.4.6746'. [ 397.836297][T20176] netlink: 96 bytes leftover after parsing attributes in process `syz.3.6747'. [ 398.984869][T20229] tipc: Enabling of bearer rejected, failed to enable media [ 399.331222][T20244] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6778'. [ 399.604307][T20250] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6781'. [ 400.166615][T20265] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6788'. [ 400.560488][T20281] netlink: 10 bytes leftover after parsing attributes in process `syz.2.6796'. [ 401.048511][T20309] netlink: 'syz.0.6808': attribute type 14 has an invalid length. [ 402.076514][T20359] syz_tun: entered allmulticast mode [ 402.764380][T20386] veth0_to_hsr: invalid flags given to default FDB implementation [ 403.071470][T20397] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6850'. [ 403.101794][T20397] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6850'. [ 404.124030][T20454] netlink: 'syz.3.6877': attribute type 2 has an invalid length. [ 404.451428][T20473] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6887'. [ 404.726418][T20485] netlink: 104 bytes leftover after parsing attributes in process `syz.1.6892'. [ 404.943292][T20496] netlink: 188 bytes leftover after parsing attributes in process `syz.4.6897'. [ 405.633002][T20526] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6909'. [ 405.829686][T20536] netlink: 108 bytes leftover after parsing attributes in process `syz.2.6915'. [ 405.851452][T20536] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6915'. [ 406.098502][T20551] netlink: 'syz.4.6922': attribute type 5 has an invalid length. [ 406.110240][T20553] netlink: 108 bytes leftover after parsing attributes in process `syz.2.6924'. [ 406.239154][T20559] bridge_slave_0: default FDB implementation only supports local addresses [ 406.644122][T20582] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6939'. [ 406.762910][T20589] sch_fq: defrate 0 ignored. [ 407.607585][T20629] netlink: 'syz.0.6960': attribute type 2 has an invalid length. [ 408.627932][T20684] __nla_validate_parse: 2 callbacks suppressed [ 408.627955][T20684] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6985'. [ 408.954980][T20699] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6990'. [ 408.965801][T20699] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6990'. [ 409.366535][T20715] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7000'. [ 409.734830][T20735] netlink: 11562 bytes leftover after parsing attributes in process `syz.2.7008'. [ 409.940183][T20747] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7014'. [ 409.991017][T20751] netlink: 'syz.3.7017': attribute type 4 has an invalid length. [ 410.539175][T20784] netlink: 176 bytes leftover after parsing attributes in process `syz.1.7030'. [ 410.576318][T20784] ip6gretap0: entered promiscuous mode [ 410.601444][T20784] netlink: 176 bytes leftover after parsing attributes in process `syz.1.7030'. [ 410.998248][T20808] netlink: 'syz.1.7042': attribute type 2 has an invalid length. [ 411.100453][T20810] bond2: entered promiscuous mode [ 411.107496][T20810] bond2: entered allmulticast mode [ 411.116479][T20810] 8021q: adding VLAN 0 to HW filter on device bond2 [ 411.326034][T20810] bond2 (unregistering): Released all slaves [ 411.361306][T20817] netlink: 64 bytes leftover after parsing attributes in process `syz.3.7047'. [ 411.692103][T20838] sctp: [Deprecated]: syz.2.7056 (pid 20838) Use of int in maxseg socket option. [ 411.692103][T20838] Use struct sctp_assoc_value instead [ 412.638667][T20874] netlink: 'syz.0.7074': attribute type 1 has an invalid length. [ 412.652762][T20874] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7074'. [ 413.102139][T20900] team0: No ports can be present during mode change [ 413.126249][T20902] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 413.644485][T20933] __nla_validate_parse: 2 callbacks suppressed [ 413.644503][T20933] netlink: 104 bytes leftover after parsing attributes in process `syz.4.7103'. [ 413.703337][T20934] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 414.933501][T21005] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7135'. [ 415.273258][T21023] netlink: 14 bytes leftover after parsing attributes in process `syz.2.7146'. [ 415.682256][T21023] . (unregistering): (slave bond_slave_0): Releasing backup interface [ 415.717550][T21023] . (unregistering): (slave bond_slave_1): Releasing backup interface [ 415.751711][T21023] . (unregistering): (slave ): Releasing backup interface [ 415.772950][T21023] . (unregistering): (slave syz_tun): Releasing backup interface [ 415.789540][T21023] . (unregistering): Released all slaves [ 415.913705][ T36] tipc: Subscription rejected, illegal request [ 416.000083][T21051] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7159'. [ 416.044692][T21053] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7160'. [ 416.672086][T21085] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7174'. [ 417.088391][T21106] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7183'. [ 418.425521][T21170] veth0: entered promiscuous mode [ 418.458894][T21169] veth0: left promiscuous mode [ 418.587465][T21174] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7215'. [ 418.967477][T21192] tipc: Started in network mode [ 418.973357][T21192] tipc: Node identity ac14140f, cluster identity 4711 [ 418.981465][T21192] tipc: New replicast peer: 255.255.255.255 [ 418.989264][T21192] tipc: Enabled bearer , priority 10 [ 419.342170][ T30] audit: type=1804 audit(1744201354.742:3): pid=21209 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.7232" name="/newroot/1468/cgroup.controllers" dev="tmpfs" ino=7368 res=1 errno=0 [ 419.409464][ T30] audit: type=1800 audit(1744201354.742:4): pid=21209 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.7232" name="cgroup.controllers" dev="tmpfs" ino=7368 res=0 errno=0 [ 420.108489][ T5916] tipc: Node number set to 2886997007 [ 420.116932][T21253] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7252'. [ 420.627167][T21274] netlink: 64 bytes leftover after parsing attributes in process `syz.1.7262'. [ 420.785471][T21285] 8021q: adding VLAN 0 to HW filter on device bond2 [ 420.801022][T21285] bond0: (slave bond2): Enslaving as an active interface with a down link [ 421.022320][T21298] netlink: 44 bytes leftover after parsing attributes in process `syz.4.7271'. [ 422.040523][T21343] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7293'. [ 422.454889][T21369] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 423.126089][T21403] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7322'. [ 424.165005][T21453] netlink: 'syz.3.7344': attribute type 1 has an invalid length. [ 424.725949][T21485] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7359'. [ 424.886750][T21495] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7364'. [ 424.902433][T21495] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7364'. [ 425.218963][T21513] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 425.589387][T21531] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7380'. [ 426.240244][T21569] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 426.257576][T21569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.276977][T21569] mac80211_hwsim hwsim7 wlan0: entered promiscuous mode [ 426.294731][T21569] macsec2: entered allmulticast mode [ 426.302541][T21569] mac80211_hwsim hwsim7 wlan0: entered allmulticast mode [ 426.316444][T21569] mac80211_hwsim hwsim7 wlan0: left allmulticast mode [ 426.325458][T21569] mac80211_hwsim hwsim7 wlan0: left promiscuous mode [ 426.962115][T21598] vlan2: entered allmulticast mode [ 426.975936][T21598] batadv0: entered allmulticast mode [ 427.060893][T21604] gtp0: entered promiscuous mode [ 427.066081][T21604] gtp0: entered allmulticast mode [ 427.233348][T21610] netlink: 72 bytes leftover after parsing attributes in process `syz.0.7414'. [ 427.256621][T21613] netlink: 'syz.4.7416': attribute type 1 has an invalid length. [ 427.280441][T21613] netlink: 224 bytes leftover after parsing attributes in process `syz.4.7416'. [ 427.465204][T21621] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 428.205194][T21656] netlink: 104 bytes leftover after parsing attributes in process `syz.0.7436'. [ 429.126517][T21708] bridge0: port 1(batadv1) entered blocking state [ 429.136720][T21708] bridge0: port 1(batadv1) entered disabled state [ 429.145776][T21708] batadv1: entered allmulticast mode [ 429.170069][T21708] batadv1: entered promiscuous mode [ 429.210622][T21714] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7464'. [ 429.228823][T21714] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7464'. [ 429.303952][T21720] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7467'. [ 429.313470][T21720] netlink: 'syz.3.7467': attribute type 1 has an invalid length. [ 429.325153][T21720] netlink: 'syz.3.7467': attribute type 2 has an invalid length. [ 429.418906][T21722] tipc: Started in network mode [ 429.423850][T21722] tipc: Node identity ac14140f, cluster identity 4711 [ 429.443604][T21722] tipc: New replicast peer: 255.255.255.255 [ 429.462595][T21722] tipc: Enabled bearer , priority 10 [ 429.469134][T21725] netlink: 284 bytes leftover after parsing attributes in process `syz.0.7470'. [ 429.629054][ T1099] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 429.639035][ T1099] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 429.682395][T21737] sch_tbf: burst 0 is lower than device team_slave_0 mtu (1514) ! [ 430.579270][ T5890] tipc: Node number set to 2886997007 [ 433.174562][T21916] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7548'. [ 433.448540][T21925] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 433.477690][T21925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.809868][ T13] bond0: (slave team0): link status definitely down, disabling slave [ 435.265813][T22013] netlink: 'syz.0.7582': attribute type 7 has an invalid length. [ 435.313130][T22013] netlink: 15 bytes leftover after parsing attributes in process `syz.0.7582'. [ 435.354900][T22013] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7582'. [ 435.388281][T22013] netlink: 872 bytes leftover after parsing attributes in process `syz.0.7582'. [ 435.438317][T22013] netlink: 'syz.0.7582': attribute type 7 has an invalid length. [ 435.446454][T22013] netlink: 15 bytes leftover after parsing attributes in process `syz.0.7582'. [ 435.593697][T22027] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7588'. [ 435.625041][T22027] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7588'. [ 436.091007][T22051] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7599'. [ 436.236666][T22064] sctp: [Deprecated]: syz.3.7602 (pid 22064) Use of struct sctp_assoc_value in delayed_ack socket option. [ 436.236666][T22064] Use struct sctp_sack_info instead [ 436.535131][T22079] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7608'. [ 436.850477][T22094] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7614'. [ 436.916721][T22094] xfrm1: entered promiscuous mode [ 436.935695][T22094] xfrm1: entered allmulticast mode [ 437.290544][T22115] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 437.875269][T22146] tun0: tun_chr_ioctl cmd 1074025675 [ 437.887150][T22146] tun0: persist disabled [ 438.395020][T22171] batman_adv: batadv0: Adding interface: gretap2 [ 438.410407][T22171] batman_adv: batadv0: Not using interface gretap2 (retrying later): interface not active [ 438.533579][T22177] blkio.reset_stats is deprecated [ 439.108764][T22207] __nla_validate_parse: 2 callbacks suppressed [ 439.108786][T22207] netlink: 71 bytes leftover after parsing attributes in process `syz.2.7669'. [ 439.874883][T22245] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7687'. [ 440.015498][T22253] netlink: 71 bytes leftover after parsing attributes in process `syz.2.7691'. [ 440.112634][T22245] hsr_slave_1 (unregistering): left promiscuous mode [ 440.157784][T22258] veth0: entered promiscuous mode [ 440.167220][T22258] veth0: left promiscuous mode [ 440.502376][T22273] vxcan0: tx address claim with dest, not broadcast [ 441.086639][T22302] netlink: 10 bytes leftover after parsing attributes in process `syz.1.7715'. [ 441.399440][T22316] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7722'. [ 441.910855][T22343] (unnamed net_device) (uninitialized): ARP target 1.0.0.0 is already present [ 441.921764][T22343] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (1) [ 442.044943][T22352] veth0_to_hsr: entered promiscuous mode [ 442.095549][T22350] veth0_to_hsr: left promiscuous mode [ 442.438664][T22373] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7749'. [ 442.753147][T22391] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7758'. [ 443.165457][T22416] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7770'. [ 443.211559][T22416] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7770'. [ 443.586533][T22437] vxcan1: tx address claim with different name [ 444.334049][T22474] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7800'. [ 444.755403][T22494] netlink: 76 bytes leftover after parsing attributes in process `syz.4.7806'. [ 445.924016][T22542] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.7828'. [ 446.072750][T22550] : renamed from bond0 (while UP) [ 446.358647][T22565] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 446.792925][T22588] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 447.445441][T22615] tipc: New replicast peer: 255.255.255.255 [ 447.468678][T22615] tipc: Enabled bearer , priority 10 [ 448.166704][T22653] netlink: 'syz.0.7880': attribute type 4 has an invalid length. [ 448.177561][T22651] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7879'. [ 448.300246][T22657] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7882'. [ 448.578238][ T52] tipc: Node number set to 1 [ 448.882865][T22690] ip_vti0: Master is either lo or non-ether device [ 449.085574][T22700] netlink: 'syz.0.7903': attribute type 1 has an invalid length. [ 449.596540][T22730] syzkaller1: entered promiscuous mode [ 449.603613][T22730] syzkaller1: entered allmulticast mode [ 450.849922][T22794] netlink: 'syz.2.7944': attribute type 1 has an invalid length. [ 450.870805][T22794] netlink: 'syz.2.7944': attribute type 10 has an invalid length. [ 450.886220][T22794] netlink: 'syz.2.7944': attribute type 4 has an invalid length. [ 450.907176][T22794] netlink: 196 bytes leftover after parsing attributes in process `syz.2.7944'. [ 451.280525][T22809] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7950'. [ 451.803836][T22836] netlink: 104 bytes leftover after parsing attributes in process `syz.3.7963'. [ 453.597583][T22924] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8003'. [ 454.077058][T22949] bridge0: port 1(syz_tun) entered blocking state [ 454.092397][T22949] bridge0: port 1(syz_tun) entered disabled state [ 454.104005][T22949] syz_tun: entered allmulticast mode [ 454.116063][T22949] syz_tun: entered promiscuous mode [ 454.343297][T22958] sctp: [Deprecated]: syz.0.8016 (pid 22958) Use of struct sctp_assoc_value in delayed_ack socket option. [ 454.343297][T22958] Use struct sctp_sack_info instead [ 454.375409][T22959] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8017'. [ 454.588497][T22968] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 454.904867][T22984] netlink: 'syz.3.8028': attribute type 4 has an invalid length. [ 456.015546][T23031] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8048'. [ 456.777731][T23060] netlink: 'syz.4.8062': attribute type 4 has an invalid length. [ 456.854327][T23066] netlink: 'syz.2.8065': attribute type 29 has an invalid length. [ 456.939083][T23066] netlink: 'syz.2.8065': attribute type 29 has an invalid length. [ 456.958361][T23070] netlink: 'syz.2.8065': attribute type 29 has an invalid length. [ 456.974412][T23066] netlink: 'syz.2.8065': attribute type 29 has an invalid length. [ 458.166026][T23121] xfrm0 speed is unknown, defaulting to 1000 [ 458.948631][T23153] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 459.066573][T23121] lo speed is unknown, defaulting to 1000 [ 459.101889][T23163] netlink: 44 bytes leftover after parsing attributes in process `syz.4.8108'. [ 459.124146][T23163] netlink: 7 bytes leftover after parsing attributes in process `syz.4.8108'. [ 459.148907][T23163] netlink: 'syz.4.8108': attribute type 6 has an invalid length. [ 459.169220][T23163] netlink: 'syz.4.8108': attribute type 5 has an invalid length. [ 459.177185][T23163] netlink: 'syz.4.8108': attribute type 4 has an invalid length. [ 459.185786][T23163] netlink: 'syz.4.8108': attribute type 6 has an invalid length. [ 459.194742][T23163] netlink: 7 bytes leftover after parsing attributes in process `syz.4.8108'. [ 459.461510][T23176] batadv_slave_1: entered promiscuous mode [ 459.469805][T23175] batadv_slave_1: left promiscuous mode [ 460.736204][T23222] sctp: [Deprecated]: syz.1.8130 (pid 23222) Use of int in maxseg socket option. [ 460.736204][T23222] Use struct sctp_assoc_value instead [ 462.340324][T23286] netlink: 64 bytes leftover after parsing attributes in process `syz.2.8157'. [ 462.753278][T23309] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8167'. [ 462.878688][T23313] netlink: 'syz.3.8172': attribute type 4 has an invalid length. [ 463.041209][T23322] batadv_slave_1: entered promiscuous mode [ 463.074583][T23322] batadv_slave_1: entered allmulticast mode [ 463.572799][T23345] xt_CT: No such helper "pptp" [ 464.147442][T23376] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8201'. [ 464.564841][T23398] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8211'. [ 464.565136][T23392] xt_bpf: check failed: parse error [ 464.599776][T23398] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8211'. [ 465.776611][ T5847] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 465.793912][ T5847] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 465.803533][ T5847] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 465.815657][ T5847] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 465.826061][ T5847] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 465.992066][T23441] xfrm0 speed is unknown, defaulting to 1000 [ 466.455110][T23470] netlink: 'syz.2.8247': attribute type 1 has an invalid length. [ 466.547458][T23441] lo speed is unknown, defaulting to 1000 [ 466.971315][T23441] chnl_net:caif_netlink_parms(): no params data found [ 467.181727][T23441] bridge0: port 1(bridge_slave_0) entered blocking state [ 467.189990][T23441] bridge0: port 1(bridge_slave_0) entered disabled state [ 467.197282][T23441] bridge_slave_0: entered allmulticast mode [ 467.205784][T23441] bridge_slave_0: entered promiscuous mode [ 467.215038][T23441] bridge0: port 2(bridge_slave_1) entered blocking state [ 467.223025][T23441] bridge0: port 2(bridge_slave_1) entered disabled state [ 467.230522][T23441] bridge_slave_1: entered allmulticast mode [ 467.238557][T23441] bridge_slave_1: entered promiscuous mode [ 467.321340][T23441] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 467.361360][T23441] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 467.540443][T23441] team0: Port device team_slave_0 added [ 467.572896][T23441] team0: Port device team_slave_1 added [ 467.728533][T23441] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 467.740020][T23441] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 467.784218][T23441] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 467.798695][T23441] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 467.805696][T23441] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 467.832115][T23441] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 467.888790][ T5842] Bluetooth: hci0: command tx timeout [ 467.920944][T23441] hsr_slave_0: entered promiscuous mode [ 467.928295][T23441] hsr_slave_1: entered promiscuous mode [ 467.934852][T23441] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 467.944416][T23441] Cannot create hsr debugfs directory [ 468.047324][T23534] skbuff: bad partial csum: csum=65506/2 headroom=178 headlen=65526 [ 468.129991][T23538] netlink: 104 bytes leftover after parsing attributes in process `syz.2.8273'. [ 468.341277][T23441] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 468.365559][T23441] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.560707][T23441] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 468.571317][T23441] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.705642][T23441] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 468.731491][T23441] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.816000][T23441] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 468.860163][T23441] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.241070][T23441] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 469.274964][T23441] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 469.307102][T23441] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 469.342839][T23441] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 469.542954][T23441] 8021q: adding VLAN 0 to HW filter on device bond0 [ 469.625182][T23441] 8021q: adding VLAN 0 to HW filter on device team0 [ 469.665028][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 469.672290][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 469.746381][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 469.753659][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 469.968691][ T5842] Bluetooth: hci0: command tx timeout [ 470.319334][T23441] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 470.329177][T23625] netlink: 'syz.2.8310': attribute type 1 has an invalid length. [ 470.345637][T23627] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8311'. [ 470.353814][T23625] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.8310'. [ 470.491133][T23441] veth0_vlan: entered promiscuous mode [ 470.500289][T23631] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8313'. [ 470.541838][T23441] veth1_vlan: entered promiscuous mode [ 470.575343][T23633] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8314'. [ 470.575623][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888027e8c000: rx timeout, send abort [ 470.595377][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff888027e8c000: 0x3ff01: (3) A timeout occurred and this is the connection abort to close the session. [ 470.640050][T23441] veth0_macvtap: entered promiscuous mode [ 470.682910][T23441] veth1_macvtap: entered promiscuous mode [ 470.730247][T23441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 470.742288][T23441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 470.796877][T23441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 470.817679][T23441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 470.827562][T23441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 470.847234][T23441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 470.870265][T23441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 470.891126][T23441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 470.926851][T23441] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 470.979337][T23441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 471.014781][T23441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.036118][T23441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 471.058571][T23441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.069390][T23441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 471.085165][T23441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.101834][T23441] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 471.145387][T23441] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.167515][T23441] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.203177][T23441] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.222716][T23441] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.387005][T23441] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 471.414776][T23441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.466702][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 471.485569][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 471.579589][ T2139] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 471.602943][ T2139] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 471.840412][T23679] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8331'. [ 472.058019][ T5847] Bluetooth: hci0: command tx timeout [ 472.139585][T23694] netlink: 'syz.4.8339': attribute type 4 has an invalid length. [ 472.573397][T23717] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8349'. [ 472.909939][T23728] syzkaller1: entered promiscuous mode [ 472.925764][T23728] syzkaller1: entered allmulticast mode [ 473.372259][T23742] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8360'. [ 473.398803][T23742] netlink: 'syz.3.8360': attribute type 7 has an invalid length. [ 473.406596][T23742] netlink: 'syz.3.8360': attribute type 8 has an invalid length. [ 473.427872][T23742] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8360'. [ 473.774061][T23758] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8366'. [ 474.198484][T23778] siw: device registration error -23 [ 474.515124][T23795] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 474.685078][T23802] syzkaller1: entered promiscuous mode [ 474.692085][T23802] syzkaller1: entered allmulticast mode [ 475.909514][T23844] netlink: 232 bytes leftover after parsing attributes in process `syz.1.8402'. [ 475.920132][T23844] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8402'. [ 476.297372][T23859] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8408'. [ 476.474130][T23869] netlink: 788 bytes leftover after parsing attributes in process `syz.4.8411'. [ 476.951655][T23888] xfrm0 speed is unknown, defaulting to 1000 [ 477.884871][T23911] geneve3: entered promiscuous mode [ 477.895735][T23911] geneve3: entered allmulticast mode [ 477.930446][T23888] lo speed is unknown, defaulting to 1000 [ 478.460168][T23931] sit0: entered promiscuous mode [ 478.481715][T23931] netlink: 'syz.1.8437': attribute type 1 has an invalid length. [ 478.496887][T23931] netlink: 1 bytes leftover after parsing attributes in process `syz.1.8437'. [ 478.515506][T23933] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8438'. [ 478.620360][T23936] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8439'. [ 478.936297][T23943] xt_CT: No such helper "pptp" [ 479.128770][ T5845] syz_tun (unregistering): left allmulticast mode [ 479.135283][ T5845] syz_tun (unregistering): left promiscuous mode [ 479.147795][ T5845] bridge0: port 1(syz_tun) entered disabled state [ 479.181986][T23951] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8446'. [ 479.442359][ T36] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.576946][ T36] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.707525][ T36] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.821787][ T36] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.399868][T23983] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8460'. [ 480.434874][ T5844] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 480.445317][ T5844] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 480.458103][ T5844] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 480.469152][ T5844] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 480.477093][ T5844] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 481.379358][ T5847] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 481.390028][ T5847] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 481.400675][ T5847] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 481.410125][ T5847] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 481.437140][ T5847] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 481.539863][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 481.554890][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 481.566781][ T36] bond0 (unregistering): Released all slaves [ 481.583892][ T36] bond1 (unregistering): Released all slaves [ 481.601875][ T36] bond2 (unregistering): Released all slaves [ 481.623158][ T36] bond3 (unregistering): Released all slaves [ 481.643079][ T36] bond4 (unregistering): Released all slaves [ 481.836295][T24004] xfrm0 speed is unknown, defaulting to 1000 [ 481.861413][ T36] tipc: Disabling bearer [ 481.879523][ T36] tipc: Left network mode [ 481.912588][T23982] xfrm0 speed is unknown, defaulting to 1000 [ 482.528374][ T5844] Bluetooth: hci2: command tx timeout [ 482.561184][ T5849] syz_tun (unregistering): left allmulticast mode [ 482.629127][T24004] lo speed is unknown, defaulting to 1000 [ 483.448653][T24004] chnl_net:caif_netlink_parms(): no params data found [ 483.488097][ T5844] Bluetooth: hci4: command tx timeout [ 483.499805][T23982] lo speed is unknown, defaulting to 1000 [ 483.950208][ T5847] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 483.975565][ T5847] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 483.988683][ T5847] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 484.008636][ T5847] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 484.020193][ T5847] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 484.113166][ T5844] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 484.123249][ T5844] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 484.133190][ T5844] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 484.142017][ T5844] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 484.150449][ T5844] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 484.229069][ T36] hsr_slave_0: left promiscuous mode [ 484.235271][ T36] hsr_slave_1: left promiscuous mode [ 484.242782][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 484.251261][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 484.260190][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 484.273434][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 484.286140][ T36] [ 484.288515][ T36] ====================================================== [ 484.295556][ T36] WARNING: possible circular locking dependency detected [ 484.302601][ T36] 6.14.0-syzkaller-13335-g7f1ff1b38a7c #0 Not tainted [ 484.309402][ T36] ------------------------------------------------------ [ 484.316447][ T36] kworker/u8:2/36 is trying to acquire lock: [ 484.322451][ T36] ffff888027d44768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_netdev_notifier_call+0x1b3/0x1430 [ 484.333160][ T36] [ 484.333160][ T36] but task is already holding lock: [ 484.340644][ T36] ffff8880792a2d30 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x5a1/0x2510 [ 484.352288][ T36] [ 484.352288][ T36] which lock already depends on the new lock. [ 484.352288][ T36] [ 484.362721][ T36] [ 484.362721][ T36] the existing dependency chain (in reverse order) is: [ 484.371779][ T36] [ 484.371779][ T36] -> #3 (&dev_instance_lock_key#3){+.+.}-{4:4}: [ 484.380362][ T36] lock_acquire+0x116/0x2f0 [ 484.385423][ T36] __mutex_lock+0x1a5/0x10c0 [ 484.390563][ T36] xsk_bind+0x2fd/0xfb0 [ 484.395291][ T36] __sys_bind+0x1de/0x290 [ 484.400149][ T36] __x64_sys_bind+0x7a/0x90 [ 484.405175][ T36] do_syscall_64+0xf3/0x230 [ 484.410207][ T36] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.416616][ T36] [ 484.416616][ T36] -> #2 (&xs->mutex){+.+.}-{4:4}: [ 484.423831][ T36] lock_acquire+0x116/0x2f0 [ 484.428875][ T36] __mutex_lock+0x1a5/0x10c0 [ 484.433987][ T36] xsk_diag_dump+0x5be/0x19d0 [ 484.439192][ T36] netlink_dump+0x678/0xeb0 [ 484.444240][ T36] __netlink_dump_start+0x5a2/0x790 [ 484.449959][ T36] xsk_diag_handler_dump+0x1de/0x270 [ 484.455770][ T36] sock_diag_rcv_msg+0x3dc/0x5f0 [ 484.461230][ T36] netlink_rcv_skb+0x208/0x480 [ 484.466516][ T36] netlink_unicast+0x7f8/0x9a0 [ 484.471802][ T36] netlink_sendmsg+0x8c3/0xcd0 [ 484.477091][ T36] __sock_sendmsg+0x221/0x270 [ 484.482290][ T36] sock_write_iter+0x2d9/0x3f0 [ 484.487573][ T36] do_iter_readv_writev+0x71f/0x9d0 [ 484.493325][ T36] vfs_writev+0x38d/0xbc0 [ 484.498185][ T36] do_writev+0x1b8/0x360 [ 484.502962][ T36] do_syscall_64+0xf3/0x230 [ 484.507987][ T36] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.514418][ T36] [ 484.514418][ T36] -> #1 (&net->xdp.lock){+.+.}-{4:4}: [ 484.521977][ T36] lock_acquire+0x116/0x2f0 [ 484.526999][ T36] __mutex_lock+0x1a5/0x10c0 [ 484.532111][ T36] xsk_notifier+0x8b/0x230 [ 484.537061][ T36] notifier_call_chain+0x1a5/0x3f0 [ 484.542714][ T36] unregister_netdevice_many_notify+0x1572/0x2510 [ 484.549683][ T36] unregister_netdevice_queue+0x383/0x400 [ 484.555924][ T36] _cfg80211_unregister_wdev+0x163/0x590 [ 484.562083][ T36] ieee80211_if_remove+0x25d/0x320 [ 484.567720][ T36] ieee80211_del_iface+0x19/0x30 [ 484.573173][ T36] cfg80211_remove_virtual_intf+0x23f/0x410 [ 484.579592][ T36] genl_rcv_msg+0xb38/0xf00 [ 484.584625][ T36] netlink_rcv_skb+0x208/0x480 [ 484.589950][ T36] genl_rcv+0x28/0x40 [ 484.594498][ T36] netlink_unicast+0x7f8/0x9a0 [ 484.599799][ T36] netlink_sendmsg+0x8c3/0xcd0 [ 484.605091][ T36] __sock_sendmsg+0x221/0x270 [ 484.610314][ T36] ____sys_sendmsg+0x523/0x860 [ 484.615597][ T36] __sys_sendmsg+0x271/0x360 [ 484.620725][ T36] do_syscall_64+0xf3/0x230 [ 484.625751][ T36] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.632162][ T36] [ 484.632162][ T36] -> #0 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 484.639905][ T36] validate_chain+0xa69/0x24e0 [ 484.645194][ T36] __lock_acquire+0xad5/0xd80 [ 484.650390][ T36] lock_acquire+0x116/0x2f0 [ 484.655407][ T36] __mutex_lock+0x1a5/0x10c0 [ 484.660520][ T36] cfg80211_netdev_notifier_call+0x1b3/0x1430 [ 484.667202][ T36] notifier_call_chain+0x1a5/0x3f0 [ 484.672854][ T36] __dev_close_many+0x15d/0x760 [ 484.678236][ T36] dev_close_many+0x250/0x4c0 [ 484.683523][ T36] unregister_netdevice_many_notify+0x628/0x2510 [ 484.690376][ T36] default_device_exit_batch+0x7ff/0x880 [ 484.696545][ T36] cleanup_net+0x8af/0xd60 [ 484.701508][ T36] process_scheduled_works+0xac3/0x18e0 [ 484.707579][ T36] worker_thread+0x870/0xd50 [ 484.712705][ T36] kthread+0x7b7/0x940 [ 484.717295][ T36] ret_from_fork+0x4b/0x80 [ 484.722229][ T36] ret_from_fork_asm+0x1a/0x30 [ 484.727526][ T36] [ 484.727526][ T36] other info that might help us debug this: [ 484.727526][ T36] [ 484.737761][ T36] Chain exists of: [ 484.737761][ T36] &rdev->wiphy.mtx --> &xs->mutex --> &dev_instance_lock_key#3 [ 484.737761][ T36] [ 484.751310][ T36] Possible unsafe locking scenario: [ 484.751310][ T36] [ 484.758757][ T36] CPU0 CPU1 [ 484.764117][ T36] ---- ---- [ 484.769480][ T36] lock(&dev_instance_lock_key#3); [ 484.774689][ T36] lock(&xs->mutex); [ 484.781218][ T36] lock(&dev_instance_lock_key#3); [ 484.788949][ T36] lock(&rdev->wiphy.mtx); [ 484.793457][ T36] [ 484.793457][ T36] *** DEADLOCK *** [ 484.793457][ T36] [ 484.801591][ T36] 5 locks held by kworker/u8:2/36: [ 484.806713][ T36] #0: ffff88801bef6148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 [ 484.817604][ T36] #1: ffffc90000ad7c60 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 [ 484.828171][ T36] #2: ffffffff900efe90 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0x17c/0xd60 [ 484.837596][ T36] #3: ffffffff900fc9c8 (rtnl_mutex){+.+.}-{4:4}, at: default_device_exit_batch+0xde/0x880 [ 484.847665][ T36] #4: ffff8880792a2d30 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x5a1/0x2510 [ 484.859705][ T36] [ 484.859705][ T36] stack backtrace: [ 484.865709][ T36] CPU: 1 UID: 0 PID: 36 Comm: kworker/u8:2 Not tainted 6.14.0-syzkaller-13335-g7f1ff1b38a7c #0 PREEMPT(full) [ 484.865730][ T36] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 484.865742][ T36] Workqueue: netns cleanup_net [ 484.865773][ T36] Call Trace: [ 484.865780][ T36] [ 484.865788][ T36] dump_stack_lvl+0x241/0x360 [ 484.865813][ T36] ? __pfx_dump_stack_lvl+0x10/0x10 [ 484.865834][ T36] ? __pfx__printk+0x10/0x10 [ 484.865856][ T36] ? print_lock+0x171/0x1a0 [ 484.865875][ T36] print_circular_bug+0x2e1/0x300 [ 484.865896][ T36] check_noncircular+0x142/0x160 [ 484.865919][ T36] validate_chain+0xa69/0x24e0 [ 484.865938][ T36] ? unwind_next_frame+0xb8/0x23b0 [ 484.865957][ T36] ? unwind_next_frame+0x1aa4/0x23b0 [ 484.865977][ T36] ? unwind_next_frame+0xb8/0x23b0 [ 484.866001][ T36] __lock_acquire+0xad5/0xd80 [ 484.866020][ T36] lock_acquire+0x116/0x2f0 [ 484.866034][ T36] ? cfg80211_netdev_notifier_call+0x1b3/0x1430 [ 484.866064][ T36] __mutex_lock+0x1a5/0x10c0 [ 484.866083][ T36] ? cfg80211_netdev_notifier_call+0x1b3/0x1430 [ 484.866109][ T36] ? lockdep_unlock+0x8d/0x120 [ 484.866124][ T36] ? cfg80211_netdev_notifier_call+0x1b3/0x1430 [ 484.866148][ T36] ? __pfx___mutex_lock+0x10/0x10 [ 484.866174][ T36] cfg80211_netdev_notifier_call+0x1b3/0x1430 [ 484.866201][ T36] ? __pfx_cfg80211_netdev_notifier_call+0x10/0x10 [ 484.866226][ T36] ? __lock_acquire+0xad5/0xd80 [ 484.866242][ T36] ? do_raw_spin_lock+0x151/0x370 [ 484.866273][ T36] ? inetdev_event+0x4fb/0x1740 [ 484.866290][ T36] ? igmp_netdev_event+0x7c/0x770 [ 484.866307][ T36] notifier_call_chain+0x1a5/0x3f0 [ 484.866328][ T36] __dev_close_many+0x15d/0x760 [ 484.866349][ T36] ? __mutex_lock+0x380/0x10c0 [ 484.866367][ T36] ? __pfx___dev_close_many+0x10/0x10 [ 484.866391][ T36] dev_close_many+0x250/0x4c0 [ 484.866413][ T36] ? __pfx_dev_close_many+0x10/0x10 [ 484.866432][ T36] ? __lock_acquire+0xad5/0xd80 [ 484.866450][ T36] unregister_netdevice_many_notify+0x628/0x2510 [ 484.866471][ T36] ? lockdep_hardirqs_on+0x9d/0x150 [ 484.866489][ T36] ? __local_bh_enable_ip+0x168/0x200 [ 484.866506][ T36] ? batadv_tt_local_remove+0x119/0x230 [ 484.866521][ T36] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 484.866535][ T36] ? batadv_tt_local_remove+0x119/0x230 [ 484.866567][ T36] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 484.866591][ T36] ? unregister_netdevice_queue+0x2c4/0x400 [ 484.866611][ T36] ? batadv_meshif_destroy_netlink+0x1e6/0x270 [ 484.866634][ T36] default_device_exit_batch+0x7ff/0x880 [ 484.866660][ T36] ? __pfx_default_device_exit_batch+0x10/0x10 [ 484.866682][ T36] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 484.866703][ T36] ? cfg802154_pernet_exit+0xc3/0xe0 [ 484.866717][ T36] ? __pfx_default_device_exit_batch+0x10/0x10 [ 484.866740][ T36] cleanup_net+0x8af/0xd60 [ 484.866763][ T36] ? __pfx_cleanup_net+0x10/0x10 [ 484.866790][ T36] ? process_scheduled_works+0x9cb/0x18e0 [ 484.866807][ T36] process_scheduled_works+0xac3/0x18e0 [ 484.866835][ T36] ? __pfx_process_scheduled_works+0x10/0x10 [ 484.866855][ T36] ? assign_work+0x367/0x3d0 [ 484.866873][ T36] worker_thread+0x870/0xd50 [ 484.866896][ T36] ? __kthread_parkme+0x1a8/0x200 [ 484.866915][ T36] ? __pfx_worker_thread+0x10/0x10 [ 484.866933][ T36] kthread+0x7b7/0x940 [ 484.866954][ T36] ? __pfx_worker_thread+0x10/0x10 [ 484.866971][ T36] ? __pfx_kthread+0x10/0x10 [ 484.866990][ T36] ? __pfx_kthread+0x10/0x10 [ 484.867009][ T36] ? __pfx_kthread+0x10/0x10 [ 484.867029][ T36] ? __pfx_kthread+0x10/0x10 [ 484.867049][ T36] ? _raw_spin_unlock_irq+0x23/0x50 [ 484.867063][ T36] ? lockdep_hardirqs_on+0x9d/0x150 [ 484.867079][ T36] ? __pfx_kthread+0x10/0x10 [ 484.867099][ T36] ret_from_fork+0x4b/0x80 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 484.867114][ T36] ? __pfx_kthread+0x10/0x10 [ 484.867134][ T36] ret_from_fork_asm+0x1a/0x30 [ 484.867154][ T36] [ 485.247007][ T5844] Bluetooth: hci2: command tx timeout [ 485.331468][ T36] veth1_macvtap: left promiscuous mode [ 485.522133][ T36] team0 (unregistering): Port device team_slave_1 removed [ 485.542558][ T36] team0 (unregistering): Port device team_slave_0 removed [ 485.568511][ T5844] Bluetooth: hci4: command tx timeout [ 485.668344][ T36] vxcan1 (unregistering): left allmulticast mode [ 485.772395][T24043] xfrm0 speed is unknown, defaulting to 1000 [ 486.054020][ T5844] Bluetooth: hci1: command tx timeout [ 486.183703][T24043] lo speed is unknown, defaulting to 1000