last executing test programs: 7.813786304s ago: executing program 1 (id=10588): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x1c, r1, 0x6858604f277b68af, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x0) 7.689384044s ago: executing program 1 (id=10591): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x6}]}) ioctl$PPPIOCSDEBUG(r0, 0x40047440, &(0x7f00000000c0)=0xfff) write$ppp(r0, &(0x7f00000010c0)="1e00", 0x2) 7.526231175s ago: executing program 1 (id=10595): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xc4, 0x19, 0xfd3649826d894c67, 0x0, 0x4, {{@in6=@private0={0xfc, 0x0, '\x00', 0x2}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0xfffffffffffffffc}, {}, 0x400}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x4c050) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x40000000000000}}, [@tmpl={0x84, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}, {{@in6=@remote, 0x0, 0x33}, 0x0, @in6=@dev}]}]}, 0x13c}}, 0x0) syz_emit_ethernet(0x46, &(0x7f00000009c0)={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x10, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra}}}}}, 0x0) 7.369168237s ago: executing program 1 (id=10599): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001880)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="0200000002"], 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001880)=ANY=[], 0x10) 7.25517251s ago: executing program 1 (id=10602): r0 = socket$inet(0xa, 0x801, 0x84) sendto$inet(r0, &(0x7f0000000240)='M', 0x1, 0x0, &(0x7f00000000c0)={0x2, 0x0, @rand_addr=0x64010101}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000080)={0x4, 0xfff, 0x2, 0x4, 0x1, 0x9, 0x8, 0x7ff}, &(0x7f0000000140)=0x20) 6.959552009s ago: executing program 1 (id=10608): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x84, &(0x7f00000000c0)={r2, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c) 5.992452351s ago: executing program 0 (id=10621): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="04"], 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000cc0), r0) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000012c0), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)={0x20, r1, 0xf03, 0x0, 0x0, {}, [@NLBL_MGMT_A_DOMAIN={0xb, 0x1, '\x00\x00\x00\x00\x00\x00\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x2400c800}, 0x4000) 5.70628847s ago: executing program 0 (id=10626): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000340)={r1, r1, 0xc, 0x43, &(0x7f00000009c0)="160000000000000000b2317233f54c843626ac7a395c5e5813bc3845128e05bad960a992250417d49077e5115119c68046fe02eb1844ade0375cb76a4fc856ea0f9181", 0x9, 0x1, 0x16c0, 0x5505, 0x8b, 0x1, 0x0, 'syz0\x00'}) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) 5.340845357s ago: executing program 0 (id=10628): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r1, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r0}, 0x20) recvfrom$inet6(r0, &(0x7f0000004000)=""/4107, 0x100b, 0x10000, 0x0, 0x0) 4.337254066s ago: executing program 0 (id=10634): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000001a40)={@val={0x1c, 0xf5}, @val, @mpls}, 0xe) 3.752767664s ago: executing program 3 (id=10638): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000080)="a0", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r0, 0x21) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000440)={0x0, 0x7, 0x20, 0x7, 0x7, 0x10001}, 0x14) 3.631432818s ago: executing program 0 (id=10640): getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, 0x0) r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000380)={r2, 0x5}, 0x8) 3.412269848s ago: executing program 0 (id=10643): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000040)={'raw\x00', 0x0, [0x2807f, 0x1, 0x20000009, 0x80000001, 0x4809]}, &(0x7f0000000400)=0x54) 2.803765809s ago: executing program 3 (id=10649): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000006f40)=[{{0x0, 0x0, 0x0}, 0x401}], 0x1, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000100)=0x1e79, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 1.832551041s ago: executing program 3 (id=10658): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r1, &(0x7f0000000040)={0x23, 0x4, 0x3}, 0x10) bind$phonet(r0, &(0x7f0000000040)={0x23, 0x4}, 0x10) close(r0) 1.562418872s ago: executing program 3 (id=10662): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}}]}, 0x48}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.307880432s ago: executing program 2 (id=10666): bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000680)='page_pool_state_hold\x00', r0}, 0x18) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2608064c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.098201929s ago: executing program 3 (id=10669): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', 0x0}) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote, r1}, 0x14) close(r0) 872.218553ms ago: executing program 4 (id=10671): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'netdevsim0\x00', 0x0}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000300000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffd62, @void, @value}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@newlink={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r2}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x88000}, 0x0) 804.817449ms ago: executing program 2 (id=10672): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x4094) 804.0818ms ago: executing program 3 (id=10673): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f00000000c0), 0x8) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000000)={0x2}, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xffe4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 662.875145ms ago: executing program 4 (id=10674): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x20) r1 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) connect$l2tp6(r0, &(0x7f0000000140)={0xa, 0x0, 0x4cb, @ipv4={'\x00', '\xff\xff', @empty}, 0x5, 0x8}, 0x20) 647.855998ms ago: executing program 2 (id=10675): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@op={0x18, 0x117, 0x3, 0xbe084adba71ec664}], 0x18}], 0x1, 0x0) 550.028969ms ago: executing program 4 (id=10676): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001600)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000100}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r0}, 0x10) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180)={0x0, 0x0}, 0x0) r2 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r1, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000003c0)={r2, r0, 0x4}, 0x10) 462.532929ms ago: executing program 2 (id=10677): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020a040007000000b6f1ffff0000854105001a"], 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e00"], 0x70}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0) 370.178521ms ago: executing program 4 (id=10678): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000200)='F', 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x6) ioctl$sock_bt_hci(r1, 0x800448d2, &(0x7f0000000000)) 293.66275ms ago: executing program 2 (id=10679): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="1f003300d00000000802110000010802110000005050505050500000", @ANYRES8=r0], 0x3c}, 0x1, 0x0, 0x0, 0x4010}, 0x10) 200.317311ms ago: executing program 4 (id=10680): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000340)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg(r0, &(0x7f0000002a00)=[{{0x0, 0x0, &(0x7f0000002980)=[{&(0x7f0000000540)="2fd2a18e801ccf3b8250dd92af8e3464ab43a5e766fb53a8d1b0a0ae6ca0dcc44992f3594545a782213c7997f22a50f8eeea8c474bf93943d102b3d6786c7be22dcb49fb1cec48fe998ebd9f2e52139d26666016e26b51698374db23842c99b7f4ad595b0e77122d3700dcb5d62872061b9c07", 0x73}, {&(0x7f00000007c0)="e9ef943c9047a37640b3bd47c1dba4b6d45c5f01a1a8f3ea8499f62e892f7269bb29e20fa8a997caf708f5c5404302c65e2d0c247922949b1df836d5a2e95648bee935a7d4df20b50610bc2fac10518a16614481bd6605c830bb25bfb8ff7994ee30da8d09e9d30da0625857116a448e8725091306dd7163ba75553fbd9f87542dd44399dd", 0x85}], 0x2}}], 0x1, 0x4e810) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/247, 0xf7}], 0x1}, 0x2}], 0x2, 0x10122, 0x0) 66.638435ms ago: executing program 4 (id=10681): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000940)={@val={0x0, 0x16}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x67, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x4, 0x8000000000000008}}}}}}}, 0x3e) 0s ago: executing program 2 (id=10682): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)={0x90, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x39, 0xe, {{{}, {}, @device_b, @broadcast, @from_mac=@device_b}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ibss_ssid}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0x0, 0x1, 0x0, 0x1, 0x0, 0x8b, 0x8}}, @void}}, @NL80211_ATTR_BEACON_TAIL={0x20, 0xf, [@ht={0x2d, 0x1a, {0x2, 0x1, 0x5, 0x0, {0x0, 0x4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x1}}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x90}}, 0x0) kernel console output (not intermixed with test programs): consistent configuration, please check. [ 157.510774][ T9199] netlink: 'syz.4.1625': attribute type 2 has an invalid length. [ 157.627836][ T9160] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 157.784187][ T9212] netlink: 'syz.4.1632': attribute type 1 has an invalid length. [ 157.814471][ T9212] netlink: 'syz.4.1632': attribute type 3 has an invalid length. [ 157.836418][ T9212] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1632'. [ 157.877298][ T9212] NCSI netlink: No device for ifindex 0 [ 158.500353][ T9253] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1653'. [ 158.682907][ T9260] Cannot find del_set index 3 as target [ 158.719132][ T9266] syz.4.1658 uses obsolete (PF_INET,SOCK_PACKET) [ 158.723665][ T9265] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1656'. [ 158.857627][ T5852] Bluetooth: hci0: command 0x080f tx timeout [ 159.174553][ T9289] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1670'. [ 159.207126][ T9289] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1670'. [ 159.278218][ T9293] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1671'. [ 159.927404][ T9328] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1691'. [ 160.191115][ T9340] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 160.264655][ T9346] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1697'. [ 160.304640][ T9348] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1699'. [ 160.563450][ T9361] x_tables: ip_tables: osf match: only valid for protocol 6 [ 160.838636][ T9374] netlink: 'syz.4.1711': attribute type 1 has an invalid length. [ 161.021587][ T9379] geneve2: entered promiscuous mode [ 161.042563][ T9379] geneve2: entered allmulticast mode [ 162.432128][ T9459] __nla_validate_parse: 4 callbacks suppressed [ 162.432150][ T9459] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1752'. [ 162.471337][ T9459] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1752'. [ 163.344326][ T9508] netlink: 'syz.1.1777': attribute type 7 has an invalid length. [ 163.359917][ T9508] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1777'. [ 163.410971][ T9514] xt_hashlimit: invalid rate [ 163.642339][ T9526] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 163.710379][ T9528] netlink: 'syz.4.1787': attribute type 9 has an invalid length. [ 164.010306][ T9543] delete_channel: no stack [ 164.301904][ T9563] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 164.303677][ T9564] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1805'. [ 164.381721][ T9564] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1805'. [ 164.384322][ T9563] xt_TCPMSS: Only works on TCP SYN packets [ 164.414133][ T9564] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1805'. [ 164.443340][ T9570] xt_l2tp: v2 doesn't support IP mode [ 164.831443][ T9589] openvswitch: netlink: Message has 3 unknown bytes. [ 164.879153][ T9589] openvswitch: netlink: Actions may not be safe on all matching packets [ 165.165145][ T9608] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1826'. [ 165.353389][ T9616] netlink: 'syz.0.1831': attribute type 1 has an invalid length. [ 165.405687][ T9616] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1831'. [ 165.592035][ T9628] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1838'. [ 166.012697][ T9656] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1851'. [ 166.052785][ T9656] 0FN: renamed from bond_slave_0 (while UP) [ 166.099395][ T9656] 0FN: entered allmulticast mode [ 166.227825][ T9667] netlink: 'syz.2.1857': attribute type 15 has an invalid length. [ 166.441520][ T9682] netlink: 'syz.0.1864': attribute type 6 has an invalid length. [ 166.896788][ T9709] netlink: 'syz.2.1877': attribute type 21 has an invalid length. [ 166.939108][ T9709] IPv6: NLM_F_CREATE should be specified when creating new route [ 166.959685][ T9712] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.997763][ T9715] netdevsim netdevsim4: Direct firmware load for  failed with error -2 [ 167.033192][ T9715] netdevsim netdevsim4: Falling back to sysfs fallback for:  [ 167.324330][ T9732] netlink: 'syz.0.1888': attribute type 2 has an invalid length. [ 167.528689][ T9742] netlink: 'syz.0.1894': attribute type 1 has an invalid length. [ 167.549665][ T9742] __nla_validate_parse: 1 callbacks suppressed [ 167.549684][ T9742] netlink: 220 bytes leftover after parsing attributes in process `syz.0.1894'. [ 167.573237][ T9745] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1895'. [ 167.741001][ T9750] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 168.141202][ T9774] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1910'. [ 168.634888][ T9804] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1925'. [ 168.666792][ T9804] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1925'. [ 168.691328][ T9804] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check. [ 168.912492][ T9822] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-xor(2) [ 168.914142][ T5963] IPVS: starting estimator thread 0... [ 169.057116][ T9823] IPVS: using max 33 ests per chain, 79200 per kthread [ 169.197054][ T9837] netlink: 'syz.0.1940': attribute type 5 has an invalid length. [ 169.601398][ T9863] netlink: 'syz.2.1953': attribute type 10 has an invalid length. [ 169.626751][ T58] IPVS: starting estimator thread 0... [ 169.659221][ T9863] macvlan0: entered promiscuous mode [ 169.674140][ T9863] macvlan0: entered allmulticast mode [ 169.692453][ T9863] veth1_vlan: entered allmulticast mode [ 169.710149][ T9869] Cannot find add_set index 0 as target [ 169.728138][ T9863] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 169.747029][ T9865] IPVS: using max 35 ests per chain, 84000 per kthread [ 170.044706][ T9887] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1964'. [ 170.373876][ T9906] netlink: 'syz.1.1974': attribute type 6 has an invalid length. [ 170.559868][ T9917] : renamed from bridge_slave_0 (while UP) [ 170.605228][ T9920] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1979'. [ 170.612137][ T9923] ieee802154 phy0 wpan0: encryption failed: -22 [ 170.914539][ T9941] netlink: 'syz.4.1990': attribute type 21 has an invalid length. [ 170.936394][ T9941] IPv6: NLM_F_CREATE should be specified when creating new route [ 170.969649][ T9941] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 170.977211][ T9941] IPv6: NLM_F_CREATE should be set when creating new route [ 170.984546][ T9941] IPv6: NLM_F_CREATE should be set when creating new route [ 170.991853][ T9941] IPv6: NLM_F_CREATE should be set when creating new route [ 172.158634][T10009] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2023'. [ 172.228067][T10011] netlink: 'syz.3.2024': attribute type 32 has an invalid length. [ 172.457394][T10025] netlink: 108 bytes leftover after parsing attributes in process `syz.2.2032'. [ 172.482653][T10025] netlink: 108 bytes leftover after parsing attributes in process `syz.2.2032'. [ 172.637420][T10035] __nla_validate_parse: 1 callbacks suppressed [ 172.637439][T10035] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2035'. [ 172.671138][T10037] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (32767) [ 172.677184][T10035] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2035'. [ 172.726462][T10037] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 173.407690][T10081] C: renamed from lo [ 173.452999][T10085] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 173.580190][T10093] SET target dimension over the limit! [ 174.466883][T10146] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2092'. [ 174.759471][T10160] : renamed from dummy0 (while UP) [ 175.081739][T10179] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2106'. [ 175.142250][T10179] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2106'. [ 175.515965][T10199] bridge0: port 3(ipvlan0) entered blocking state [ 175.555836][T10199] bridge0: port 3(ipvlan0) entered disabled state [ 175.581961][T10199] ipvlan0: entered allmulticast mode [ 175.589009][T10199] veth0_vlan: entered allmulticast mode [ 175.604143][T10199] ipvlan0: left allmulticast mode [ 175.610875][T10199] veth0_vlan: left allmulticast mode [ 176.002439][T10228] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2132'. [ 176.037373][T10230] x_tables: duplicate underflow at hook 4 [ 176.145943][T10238] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2135'. [ 176.417153][T10252] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2141'. [ 176.634429][T10268] netlink: 'syz.3.2149': attribute type 8 has an invalid length. [ 176.797170][T10274] netlink: 'syz.4.2151': attribute type 7 has an invalid length. [ 177.057322][T10286] xt_recent: Unsupported userspace flags (00000042) [ 177.573703][T10307] Cannot find del_set index 17 as target [ 177.778025][T10317] netlink: 'syz.3.2171': attribute type 10 has an invalid length. [ 177.906661][T10317] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 178.098410][T10333] gre1: entered promiscuous mode [ 178.103433][T10333] gre1: entered allmulticast mode [ 178.215128][T10341] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2183'. [ 178.456827][T10355] nftables ruleset with unbound chain [ 178.523770][T10358] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (8) [ 178.739799][T10369] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 179.168829][T10398] netlink: 'syz.2.2211': attribute type 1 has an invalid length. [ 179.176818][T10398] netlink: 'syz.2.2211': attribute type 2 has an invalid length. [ 179.257251][T10402] SET target dimension over the limit! [ 179.494549][T10420] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 179.601184][T10426] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 179.623025][T10426] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 179.663654][T10427] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2227'. [ 179.706044][T10427] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2227'. [ 180.231032][T10466] netlink: 'syz.3.2246': attribute type 1 has an invalid length. [ 180.263815][T10466] netlink: 244 bytes leftover after parsing attributes in process `syz.3.2246'. [ 180.353460][T10475] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2249'. [ 180.505473][T10483] netlink: 'syz.0.2254': attribute type 5 has an invalid length. [ 180.528160][T10483] netlink: 140 bytes leftover after parsing attributes in process `syz.0.2254'. [ 180.629628][T10491] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2257'. [ 180.757275][T10499] netlink: 'syz.2.2262': attribute type 10 has an invalid length. [ 180.811425][T10499] team0: Device hsr_slave_0 failed to register rx_handler [ 180.846210][T10507] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2266'. [ 180.966471][T10514] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2271'. [ 180.982911][T10515] netlink: 'syz.0.2267': attribute type 4 has an invalid length. [ 181.093584][T10519] netlink: 'syz.1.2272': attribute type 16 has an invalid length. [ 181.268188][T10529] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 181.287469][T10529] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 181.303092][T10533] netlink: 300 bytes leftover after parsing attributes in process `syz.3.2279'. [ 182.030926][T10579] ipt_REJECT: ECHOREPLY no longer supported. [ 182.127952][T10583] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 182.657115][T10612] validate_nla: 2 callbacks suppressed [ 182.657136][T10612] netlink: 'syz.1.2318': attribute type 1 has an invalid length. [ 182.950396][T10630] netlink: 'syz.2.2328': attribute type 10 has an invalid length. [ 182.984495][T10630] team0: Device veth0_macvtap failed to register rx_handler [ 183.081774][T10639] xt_ecn: cannot match TCP bits for non-tcp packets [ 183.176464][T10646] openvswitch: netlink: Actions may not be safe on all matching packets [ 183.309938][T10654] netlink: 'syz.2.2339': attribute type 3 has an invalid length. [ 183.342221][T10654] __nla_validate_parse: 3 callbacks suppressed [ 183.342241][T10654] netlink: 201372 bytes leftover after parsing attributes in process `syz.2.2339'. [ 183.469234][T10664] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2343'. [ 183.934631][T10694] x_tables: duplicate underflow at hook 1 [ 184.055659][T10701] ieee802154 phy0 wpan0: encryption failed: -22 [ 184.181373][T10709] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2366'. [ 184.716817][T10744] netlink: 'syz.2.2382': attribute type 8 has an invalid length. [ 184.732637][T10745] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2383'. [ 184.741890][T10744] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 184.963263][T10759] netlink: 'syz.0.2390': attribute type 11 has an invalid length. [ 185.105321][T10761] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2391'. [ 185.485239][T10790] netlink: 'syz.4.2405': attribute type 10 has an invalid length. [ 185.537862][T10790] batman_adv: batadv0: Adding interface: wlan0 [ 185.544085][T10790] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 185.637995][T10790] batman_adv: batadv0: Interface activated: wlan0 [ 186.238312][T10836] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2428'. [ 186.335814][T10843] netlink: 'syz.1.2431': attribute type 3 has an invalid length. [ 186.353760][T10843] netlink: 'syz.1.2431': attribute type 3 has an invalid length. [ 186.373710][T10843] netlink: 'syz.1.2431': attribute type 3 has an invalid length. [ 186.383307][T10843] netlink: 'syz.1.2431': attribute type 3 has an invalid length. [ 186.408498][T10847] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2433'. [ 186.763285][T10868] netlink: 404 bytes leftover after parsing attributes in process `syz.1.2444'. [ 186.795624][T10868] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2444'. [ 186.833440][T10868] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2444'. [ 187.097539][T10880] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 187.696730][T10900] validate_nla: 45 callbacks suppressed [ 187.696758][T10900] netlink: 'syz.0.2460': attribute type 3 has an invalid length. [ 187.963761][T10910] gtp0: entered promiscuous mode [ 187.985265][T10910] gtp0: entered allmulticast mode [ 188.246290][T10924] dvmrp0: entered allmulticast mode [ 188.262623][T10928] ieee802154 phy0 wpan0: encryption failed: -22 [ 188.896726][T10968] __nla_validate_parse: 1 callbacks suppressed [ 188.896750][T10968] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2493'. [ 189.580585][T11010] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2515'. [ 189.945274][T11034] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2527'. [ 190.030168][T11039] delete_channel: no stack [ 190.343868][T11057] netlink: 'syz.0.2538': attribute type 1 has an invalid length. [ 190.536451][T11071] openvswitch: netlink: Message has 736 unknown bytes. [ 190.736298][T11086] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2551'. [ 190.911927][T11098] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2556'. [ 190.931195][T11099] xt_l2tp: missing protocol rule (udp|l2tpip) [ 191.246302][T11119] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2568'. [ 191.373653][T11125] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2570'. [ 192.168807][T11175] netlink: 'syz.3.2598': attribute type 2 has an invalid length. [ 192.194958][T11175] netlink: 'syz.3.2598': attribute type 1 has an invalid length. [ 192.376233][T11190] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2601'. [ 192.547449][T11202] xt_CT: You must specify a L4 protocol and not use inversions on it [ 192.969108][T11232] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 193.021219][T11234] netlink: 'syz.2.2624': attribute type 1 has an invalid length. [ 193.056674][T11234] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2624'. [ 193.246427][T11248] warning: `syz.3.2632' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 193.314277][T11250] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 193.382455][T11254] xt_TCPMSS: Only works on TCP SYN packets [ 193.519516][T11263] netlink: 'syz.4.2640': attribute type 1 has an invalid length. [ 193.693064][T11276] TCP: TCP_TX_DELAY enabled [ 193.934364][T11288] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2653'. [ 194.240708][T11311] openvswitch: netlink: Flow key attr not present in new flow. [ 194.248580][T11312] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2664'. [ 194.270431][T11312] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2664'. [ 194.307733][T11312] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2664'. [ 194.418268][T11318] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 194.617405][T11330] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2674'. [ 194.685942][T11335] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2675'. [ 194.865010][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.873338][T11346] netlink: 108 bytes leftover after parsing attributes in process `syz.3.2681'. [ 194.927467][T11346] netlink: 108 bytes leftover after parsing attributes in process `syz.3.2681'. [ 194.936553][T11346] netlink: 108 bytes leftover after parsing attributes in process `syz.3.2681'. [ 194.946313][T11351] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2683'. [ 195.390366][T11380] netlink: 'syz.1.2697': attribute type 6 has an invalid length. [ 195.513274][T11385] netlink: 'syz.0.2701': attribute type 4 has an invalid length. [ 195.543899][T11386] tc_dump_action: action bad kind [ 196.709436][T11467] netlink: 'syz.2.2741': attribute type 8 has an invalid length. [ 197.172251][T11492] ipt_REJECT: TCP_RESET invalid for non-tcp [ 197.364482][T11506] netlink: 'syz.4.2761': attribute type 9 has an invalid length. [ 197.503152][T11516] ip6t_srh: unknown srh invflags A757 [ 197.884583][T11536] ip6gre1: entered allmulticast mode [ 198.046386][T11549] ieee802154 phy1 wpan1: encryption failed: -22 [ 198.383767][T11569] netlink: 'syz.1.2792': attribute type 2 has an invalid length. [ 198.408194][T11569] netlink: 'syz.1.2792': attribute type 1 has an invalid length. [ 198.720842][T11590] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 198.973278][T11605] netlink: 'syz.2.2810': attribute type 2 has an invalid length. [ 198.988509][T11605] __nla_validate_parse: 5 callbacks suppressed [ 198.988526][T11605] netlink: 244 bytes leftover after parsing attributes in process `syz.2.2810'. [ 199.143819][T11615] netlink: zone id is out of range [ 199.182147][T11615] netlink: del zone limit has 4 unknown bytes [ 199.520310][T11642] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 199.771220][T11658] netlink: ct family unspecified [ 199.809695][T11658] openvswitch: netlink: Actions may not be safe on all matching packets [ 200.167803][T11684] netlink: 'syz.3.2849': attribute type 12 has an invalid length. [ 200.192070][T11684] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (255) [ 200.341494][T11693] netlink: 'syz.2.2853': attribute type 1 has an invalid length. [ 200.351244][T11693] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2853'. [ 200.473857][T11700] netlink: 'syz.3.2859': attribute type 4 has an invalid length. [ 201.875046][T11796] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2904'. [ 201.903276][T11798] netlink: 'syz.4.2906': attribute type 1 has an invalid length. [ 201.948564][T11798] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2906'. [ 203.018205][T11870] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551585) [ 203.060532][T11870] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647 [ 203.071761][T11875] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 203.715515][T11915] x_tables: ip6_tables: REDIRECT target: used from hooks INPUT, but only usable from PREROUTING/OUTPUT [ 203.778669][T11918] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2965'. [ 203.852905][T11921] netlink: 196 bytes leftover after parsing attributes in process `syz.1.2966'. [ 203.895758][T11921] netlink: 196 bytes leftover after parsing attributes in process `syz.1.2966'. [ 203.924548][T11921] netlink: 19 bytes leftover after parsing attributes in process `syz.1.2966'. [ 204.577242][T11966] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2990'. [ 204.628947][T11973] netlink: 'syz.4.2991': attribute type 1 has an invalid length. [ 204.644771][T11973] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2991'. [ 204.695890][T11973] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2991'. [ 204.877426][T11989] netlink: 116 bytes leftover after parsing attributes in process `syz.3.2999'. [ 205.362680][T12016] netlink: 'syz.3.3013': attribute type 7 has an invalid length. [ 205.457527][T12020] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3015'. [ 205.661232][T12034] [H: renamed from veth0_vlan (while UP) [ 205.821212][T12039] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3025'. [ 205.894945][T12039] netlink: 43 bytes leftover after parsing attributes in process `syz.2.3025'. [ 205.930754][T12039] netlink: 'syz.2.3025': attribute type 6 has an invalid length. [ 205.978512][T12039] netlink: 'syz.2.3025': attribute type 5 has an invalid length. [ 206.007325][T12039] netlink: 43 bytes leftover after parsing attributes in process `syz.2.3025'. [ 206.129810][T12054] Cannot find del_set index 3 as target [ 206.133669][T12056] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3032'. [ 206.447239][T12074] netlink: 'syz.1.3042': attribute type 24 has an invalid length. [ 206.572311][T12080] xt_CT: You must specify a L4 protocol and not use inversions on it [ 206.626073][T12084] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3049'. [ 206.681655][T12084] gretap1: entered promiscuous mode [ 206.717116][T12084] gretap1: entered allmulticast mode [ 206.742974][T12090] netlink: 'syz.4.3051': attribute type 11 has an invalid length. [ 207.179513][ T5839] Bluetooth: hci0: command 0x080f tx timeout [ 207.185634][ T5849] Bluetooth: hci1: command 0x0406 tx timeout [ 207.307789][T12126] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 207.677803][T12150] netlink: 'syz.3.3080': attribute type 16 has an invalid length. [ 207.716819][T12153] netlink: 'syz.0.3081': attribute type 13 has an invalid length. [ 207.721758][T12150] netlink: 'syz.3.3080': attribute type 3 has an invalid length. [ 207.790906][T12153] netlink: 'syz.0.3081': attribute type 58 has an invalid length. [ 207.953169][T12168] x_tables: duplicate entry at hook 3 [ 208.436641][T12200] x_tables: ip6_tables: MASQUERADE target: used from hooks INPUT, but only usable from POSTROUTING [ 208.454516][T12202] xt_CONNSECMARK: invalid mode: 0 [ 208.571939][T12208] : renamed from vlan0 (while UP) [ 211.095156][T12367] __nla_validate_parse: 10 callbacks suppressed [ 211.095184][T12367] netlink: 1284 bytes leftover after parsing attributes in process `syz.3.3180'. [ 211.116603][T12369] netlink: 'syz.0.3182': attribute type 2 has an invalid length. [ 211.780655][T12414] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3203'. [ 212.299686][ T5849] Bluetooth: hci3: command 0x0406 tx timeout [ 212.305775][ T5849] Bluetooth: hci2: command 0x0406 tx timeout [ 212.629570][T12473] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3231'. [ 212.657135][T12473] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3231'. [ 212.789980][T12482] netlink: 'syz.1.3236': attribute type 1 has an invalid length. [ 212.842518][T12482] netlink: 232 bytes leftover after parsing attributes in process `syz.1.3236'. [ 213.148443][T12504] xfrm1: entered allmulticast mode [ 213.309598][T12518] x_tables: duplicate entry at hook 2 [ 213.402763][T12521] pimreg: entered allmulticast mode [ 213.423891][T12524] netlink: 596 bytes leftover after parsing attributes in process `syz.0.3258'. [ 213.479762][T12529] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 213.579419][T12534] openvswitch: netlink: Actions may not be safe on all matching packets [ 213.919184][T12557] openvswitch: netlink: IP tunnel dst address not specified [ 214.048110][T12563] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3278'. [ 214.082713][T12563] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3278'. [ 215.199919][T12627] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3308'. [ 215.232279][T12628] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 215.264694][T12630] netlink: 'syz.1.3310': attribute type 2 has an invalid length. [ 215.346222][T12634] netlink: 192 bytes leftover after parsing attributes in process `syz.4.3312'. [ 215.544813][T12643] netlink: 'syz.0.3316': attribute type 6 has an invalid length. [ 216.034353][T12676] veth3: entered allmulticast mode [ 216.830713][T12741] unsupported nlmsg_type 40 [ 216.861013][T12737] netlink: 'syz.3.3361': attribute type 1 has an invalid length. [ 216.894842][T12737] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3361'. [ 217.446301][T12765] netlink: 'syz.1.3378': attribute type 1 has an invalid length. [ 217.477688][T12765] netlink: 220 bytes leftover after parsing attributes in process `syz.1.3378'. [ 217.495049][T12767] netlink: 'syz.4.3380': attribute type 2 has an invalid length. [ 217.524711][T12773] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3377'. [ 217.533931][T12772] xt_HMARK: proto mask must be zero with L3 mode [ 217.540592][T12767] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3380'. [ 217.559092][T12773] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 217.862691][T12794] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3390'. [ 218.034925][T12804] netlink: 'syz.3.3395': attribute type 3 has an invalid length. [ 218.044996][T12803] netlink: 10 bytes leftover after parsing attributes in process `syz.0.3396'. [ 218.750602][T12856] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3422'. [ 218.875991][T12868] netlink: 'syz.3.3428': attribute type 1 has an invalid length. [ 218.897120][T12868] netlink: 244 bytes leftover after parsing attributes in process `syz.3.3428'. [ 218.957957][T12870] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 219.559361][T12914] xt_addrtype: ipv6 does not support BROADCAST matching [ 219.726798][T12927] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 219.850419][T12938] sctp: [Deprecated]: syz.2.3462 (pid 12938) Use of struct sctp_assoc_value in delayed_ack socket option. [ 219.850419][T12938] Use struct sctp_sack_info instead [ 220.017333][T12945] netlink: 'syz.3.3466': attribute type 1 has an invalid length. [ 220.036124][T12945] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3466'. [ 220.093182][T12945] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3466'. [ 220.280881][T12964] netdevsim netdevsim3 : renamed from netdevsim0 (while UP) [ 220.455503][T12977] xt_bpf: check failed: parse error [ 220.479908][T12978] netlink: 'syz.2.3481': attribute type 8 has an invalid length. [ 220.633890][T12990] x_tables: unsorted entry at hook 3 [ 220.769762][T12999] netlink: 'syz.4.3492': attribute type 4 has an invalid length. [ 221.042740][T13020] netlink: 'syz.2.3503': attribute type 10 has an invalid length. [ 221.056336][T13020] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 221.257935][T13032] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 221.450985][T13046] (unnamed net_device) (uninitialized): peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 221.541207][T13046] bond4: entered promiscuous mode [ 221.546491][T13046] bond4: entered allmulticast mode [ 221.553448][T13046] 8021q: adding VLAN 0 to HW filter on device bond4 [ 221.624106][T13055] netlink: 'syz.1.3520': attribute type 4 has an invalid length. [ 221.951745][T13075] netlink: 'syz.4.3530': attribute type 1 has an invalid length. [ 221.963388][T13075] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3530'. [ 221.974804][T13079] ip6t_srh: unknown srh invflags 5F00 [ 222.531249][T13116] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3551'. [ 222.774016][T13134] xt_hashlimit: max too large, truncated to 1048576 [ 222.975695][T13147] netlink: 'syz.3.3565': attribute type 21 has an invalid length. [ 223.181475][T13163] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 223.505610][T13185] openvswitch: netlink: Actions may not be safe on all matching packets [ 224.377522][T13243] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3606'. [ 224.475851][T13248] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3608'. [ 224.833499][T13274] netlink: 144 bytes leftover after parsing attributes in process `syz.0.3622'. [ 224.879788][T13279] netlink: 'syz.4.3624': attribute type 1 has an invalid length. [ 224.897105][T13279] netlink: 220 bytes leftover after parsing attributes in process `syz.4.3624'. [ 225.171956][T13296] xt_bpf: check failed: parse error [ 225.305729][T13306] openvswitch: netlink: ct_state flags 0000ee01 unsupported [ 225.382491][T13310] netlink: 'syz.4.3639': attribute type 1 has an invalid length. [ 225.622735][T13328] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3647'. [ 226.064627][T13358] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3664'. [ 226.271261][T13374] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3671'. [ 226.883588][T13418] openvswitch: netlink: Actions may not be safe on all matching packets [ 227.075328][T13433] netlink: 164 bytes leftover after parsing attributes in process `syz.3.3700'. [ 227.217235][T13438] Illegal XDP return value 2693492846 on prog (id 319) dev N/A, expect packet loss! [ 227.463247][T13454] xt_socket: unknown flags 0x2 [ 227.869346][T13472] pimreg: left allmulticast mode [ 228.159219][T13476] netlink: 'syz.3.3722': attribute type 1 has an invalid length. [ 228.173044][T13474] netlink: 'syz.0.3721': attribute type 1 has an invalid length. [ 228.442812][T13464] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 228.570524][T13501] SET target dimension over the limit! [ 228.977141][T13528] netlink: 'syz.2.3748': attribute type 12 has an invalid length. [ 229.131656][T13541] ip6t_REJECT: ECHOREPLY is not supported [ 229.564075][T13572] netlink: 'syz.3.3770': attribute type 11 has an invalid length. [ 229.657625][ T5852] Bluetooth: hci0: command 0x080f tx timeout [ 229.956803][T13595] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 230.354768][T13617] xt_hashlimit: overflow, try lower: 1125899906842624/8 [ 230.355749][T13616] netlink: 668 bytes leftover after parsing attributes in process `syz.2.3792'. [ 230.406624][T13616] netlink: 668 bytes leftover after parsing attributes in process `syz.2.3792'. [ 230.644635][T13628] set match dimension is over the limit! [ 230.823443][T13639] netdevsim netdevsim0: Direct firmware load for . [ 230.823443][T13639] failed with error -2 [ 230.866630][T13639] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 230.866630][T13639] [ 230.954950][T13650] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 231.186296][T13668] lo: entered promiscuous mode [ 231.195960][T13668] netlink: 'syz.2.3817': attribute type 2 has an invalid length. [ 231.206206][T13668] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 231.262888][T13672] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3819'. [ 231.289483][T13672] geneve2: entered promiscuous mode [ 231.682587][T13699] netlink: 'syz.4.3832': attribute type 7 has an invalid length. [ 231.813326][T13708] netlink: 'syz.1.3834': attribute type 11 has an invalid length. [ 231.852484][T13708] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3834'. [ 231.953929][T13715] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3839'. [ 232.200292][T13733] netlink: 'syz.0.3845': attribute type 12 has an invalid length. [ 232.239069][T13733] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3845'. [ 232.585743][T13759] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3858'. [ 232.593390][T13762] netlink: 'syz.4.3862': attribute type 10 has an invalid length. [ 232.622634][T13764] netlink: 'syz.0.3859': attribute type 1 has an invalid length. [ 232.657124][T13764] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.3859'. [ 232.771395][T13771] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3865'. [ 232.798015][T13774] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3866'. [ 233.156579][T13798] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3878'. [ 233.239803][T13805] netlink: 'syz.0.3882': attribute type 21 has an invalid length. [ 233.269385][T13805] netlink: 'syz.0.3882': attribute type 6 has an invalid length. [ 233.309449][T13805] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3882'. [ 233.446268][T13818] xt_policy: neither incoming nor outgoing policy selected [ 233.527436][T13824] IPv6: Can't replace route, no match found [ 233.549574][T13826] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (222) [ 233.713070][T13837] syz.1.3897 uses old SIOCAX25GETINFO [ 233.868850][T13847] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3901'. [ 233.961033][T13854] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3905'. [ 233.982261][T13854] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3905'. [ 234.439006][T13886] xt_TCPMSS: Only works on TCP SYN packets [ 235.178754][T13939] SET target dimension over the limit! [ 235.815157][T13986] netlink: 'syz.2.3972': attribute type 64 has an invalid length. [ 236.435650][T14030] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 236.532278][T14039] openvswitch: netlink: Tunnel attr 303 out of range max 16 [ 236.652912][T14046] netlink: 'syz.3.3998': attribute type 1 has an invalid length. [ 236.685594][T14050] raw_sendmsg: syz.1.3997 forgot to set AF_INET. Fix it! [ 236.745356][T14056] netlink: 'syz.4.4000': attribute type 1 has an invalid length. [ 236.974919][T14070] xt_recent: hitcount (4294967295) is larger than allowed maximum (65535) [ 237.092340][T14076] netlink: 'syz.3.4011': attribute type 21 has an invalid length. [ 237.419974][T14102] delete_channel: no stack [ 237.567526][T14112] __nla_validate_parse: 7 callbacks suppressed [ 237.567546][T14112] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4025'. [ 237.976584][T14141] xt_TCPMSS: Only works on TCP SYN packets [ 238.068817][T14149] ieee802154 phy1 wpan1: encryption failed: -22 [ 238.176542][T14155] xt_l2tp: missing protocol rule (udp|l2tpip) [ 238.478365][T14177] xt_CT: You must specify a L4 protocol and not use inversions on it [ 238.744844][T14197] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4069'. [ 238.872131][T14203] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4073'. [ 239.034039][T14213] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4078'. [ 239.520713][T14245] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4092'. [ 239.551021][T14245] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4092'. [ 239.801718][T14265] netlink: 'syz.0.4101': attribute type 1 has an invalid length. [ 239.839686][T14267] ipt_REJECT: TCP_RESET invalid for non-tcp [ 240.167098][T14288] netlink: 'syz.0.4112': attribute type 1 has an invalid length. [ 240.174883][T14288] netlink: 228 bytes leftover after parsing attributes in process `syz.0.4112'. [ 240.228322][T14292] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4114'. [ 240.357348][T14300] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 240.643992][T14322] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4130'. [ 241.655013][T14395] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4162'. [ 242.010598][T14395] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 242.026507][T14418] Unsupported ieee802154 address type: 0 [ 242.039419][T14395] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 242.067772][T14395] bond0 (unregistering): (slave macvlan0): Releasing backup interface [ 242.090077][T14395] veth1_vlan: left allmulticast mode [ 242.104130][T14395] bond0 (unregistering): Released all slaves [ 242.204329][T14424] : entered promiscuous mode [ 242.371275][T14434] netlink: 'syz.1.4182': attribute type 23 has an invalid length. [ 242.610076][T14451] netlink: 'syz.0.4189': attribute type 23 has an invalid length. [ 243.000466][T14475] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 243.085365][T14484] __nla_validate_parse: 4 callbacks suppressed [ 243.085384][T14484] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4206'. [ 243.155710][T14484] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 243.176648][T14484] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 243.197711][T14484] gretap1: entered promiscuous mode [ 243.203429][T14484] gretap1: entered allmulticast mode [ 243.549461][T14514] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4221'. [ 243.897617][T14537] netlink: 88 bytes leftover after parsing attributes in process `syz.4.4232'. [ 244.009969][T14545] netlink: 'syz.3.4236': attribute type 7 has an invalid length. [ 244.406160][T14575] Cannot find set identified by id 752 to match [ 244.721307][T14597] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4261'. [ 244.767117][T14600] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4263'. [ 244.874537][T14605] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4267'. [ 245.169109][T14628] Unsupported ieee802154 address type: 0 [ 245.275923][T14635] netlink: 'syz.0.4282': attribute type 30 has an invalid length. [ 245.305111][T14635] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 245.347104][T14635] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 245.693469][T14661] bond2: entered allmulticast mode [ 245.725574][T14661] 8021q: adding VLAN 0 to HW filter on device bond2 [ 245.807683][T14675] netlink: 596 bytes leftover after parsing attributes in process `syz.3.4299'. [ 245.959658][T14681] netlink: 'syz.4.4302': attribute type 3 has an invalid length. [ 245.987313][T14681] netlink: 'syz.4.4302': attribute type 1 has an invalid length. [ 246.077100][T14689] netlink: 45 bytes leftover after parsing attributes in process `syz.2.4306'. [ 246.581716][T14726] xt_CT: No such helper "syz1" [ 246.819584][T14741] sock: sock_timestamping_bind_phc: sock not bind to device [ 247.392020][T14785] netlink: 'syz.4.4350': attribute type 2 has an invalid length. [ 247.434692][T14790] netlink: 'syz.0.4353': attribute type 1 has an invalid length. [ 247.448180][T14790] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4353'. [ 247.684602][T14806] sctp: [Deprecated]: syz.1.4361 (pid 14806) Use of int in maxseg socket option. [ 247.684602][T14806] Use struct sctp_assoc_value instead [ 247.840181][T14815] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4365'. [ 248.150530][T14838] xt_l2tp: invalid flags combination: c [ 249.074851][T14884] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 249.170027][T14888] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 249.364639][T14906] xt_time: unknown flags 0x4 [ 249.569654][T14920] netlink: 'syz.0.4418': attribute type 24 has an invalid length. [ 249.950510][T14946] netlink: 'syz.3.4431': attribute type 7 has an invalid length. [ 249.977376][T14946] netlink: 'syz.3.4431': attribute type 8 has an invalid length. [ 250.000552][T14948] netlink: 248 bytes leftover after parsing attributes in process `syz.0.4433'. [ 250.023035][T14950] netlink: 'syz.2.4432': attribute type 10 has an invalid length. [ 250.116781][T14956] xt_l2tp: v2 doesn't support IP mode [ 250.905622][T15002] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4453'. [ 250.942420][T15006] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4454'. [ 251.457824][T15035] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4467'. [ 251.854392][T15057] netlink: 'syz.2.4476': attribute type 10 has an invalid length. [ 251.902066][T15057] team0: Device veth1_macvtap failed to register rx_handler [ 252.085681][T15071] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4481'. [ 252.439800][T15096] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4491'. [ 252.717613][T15117] netlink: 6 bytes leftover after parsing attributes in process `syz.4.4500'. [ 252.743425][T15117] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 253.001749][T15131] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$ULvyآDUDw}z [ 253.119766][T15133] xt_CT: You must specify a L4 protocol and not use inversions on it [ 253.129903][T15142] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4511'. [ 253.427116][T15152] netlink: 'syz.4.4514': attribute type 21 has an invalid length. [ 253.868308][T15184] netlink: 256 bytes leftover after parsing attributes in process `syz.4.4527'. [ 253.955837][T15186] netlink: 256 bytes leftover after parsing attributes in process `syz.2.4528'. [ 253.990651][T15190] netlink: 'syz.0.4529': attribute type 1 has an invalid length. [ 254.161717][T15198] netlink: 'syz.3.4533': attribute type 24 has an invalid length. [ 254.528664][T15225] x_tables: unsorted underflow at hook 4 [ 254.856873][T15248] netlink: 'syz.4.4553': attribute type 75 has an invalid length. [ 256.007302][T15319] bond0: entered allmulticast mode [ 256.023642][T15319] bond_slave_1: entered allmulticast mode [ 256.206737][T15332] __nla_validate_parse: 1 callbacks suppressed [ 256.206758][T15332] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4587'. [ 256.307633][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.455387][T15343] bond1: entered promiscuous mode [ 256.467043][T15343] bond1: entered allmulticast mode [ 256.477475][T15343] 8021q: adding VLAN 0 to HW filter on device bond1 [ 256.621213][T15350] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4596'. [ 256.766063][T15362] tc_dump_action: action bad kind [ 257.007165][T15375] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4606'. [ 257.382269][T15399] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4614'. [ 257.411124][T15401] netlink: 'syz.3.4616': attribute type 10 has an invalid length. [ 257.432548][T15399] (unnamed net_device) (uninitialized): option use_carrier: invalid value (4) [ 257.621358][T15409] bond0: entered promiscuous mode [ 257.664735][T15409] bond0: entered allmulticast mode [ 257.684769][T15409] 8021q: adding VLAN 0 to HW filter on device bond0 [ 257.735110][T15401] team0: Cannot enslave team device to itself [ 257.866811][T15427] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 258.072756][T15440] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 258.185682][T15449] netlink: 'syz.3.4634': attribute type 21 has an invalid length. [ 258.241254][T15449] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4634'. [ 259.009783][T15505] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4657'. [ 259.396320][T15530] netlink: 4388 bytes leftover after parsing attributes in process `syz.0.4667'. [ 259.994901][T15570] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4684'. [ 260.469646][T15605] netlink: 'syz.4.4703': attribute type 1 has an invalid length. [ 260.782321][T15627] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 260.942853][T15636] netlink: 'syz.3.4717': attribute type 1 has an invalid length. [ 260.971703][T15636] netlink: 'syz.3.4717': attribute type 2 has an invalid length. [ 260.996232][T15636] netlink: 'syz.3.4717': attribute type 1 has an invalid length. [ 261.092378][T15643] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4719'. [ 261.537261][T15673] netlink: 808 bytes leftover after parsing attributes in process `syz.1.4730'. [ 261.684213][T15685] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4736'. [ 262.095899][T15711] netlink: 'syz.0.4750': attribute type 32 has an invalid length. [ 262.162112][T15713] xt_CT: No such helper "pptp" [ 262.291915][T15724] nft_compat: unsupported protocol 0 [ 262.353089][T15728] netlink: 'syz.1.4756': attribute type 1 has an invalid length. [ 262.407030][T15728] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4756'. [ 262.416140][T15728] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4756'. [ 263.097970][T15776] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551614) [ 263.136171][T15776] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 263.489455][T15801] netlink: 'syz.0.4791': attribute type 4 has an invalid length. [ 264.075464][T15838] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4809'. [ 265.105346][T15896] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4835'. [ 266.171812][T15954] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4865'. [ 266.198387][T15954] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4865'. [ 266.215547][T15958] netlink: 'syz.0.4868': attribute type 1 has an invalid length. [ 266.215589][T15954] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4865'. [ 266.239925][T15961] set match dimension is over the limit! [ 266.253247][T15958] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4868'. [ 266.641596][T15985] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 267.133039][T16014] delete_channel: no stack [ 267.207423][T16021] xt_limit: Overflow, try lower: 2147483649/128 [ 267.564325][T16040] netlink: 'syz.4.4903': attribute type 11 has an invalid length. [ 267.606139][T16040] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4903'. [ 268.463641][T16094] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 268.931980][T16126] netlink: 'syz.3.4942': attribute type 1 has an invalid length. [ 269.076879][T16138] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 269.316025][T16152] netlink: 'syz.0.4954': attribute type 33 has an invalid length. [ 269.326322][T16150] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 269.361952][T16155] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4957'. [ 269.411649][T16155] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4957'. [ 269.692612][T16179] do_dccp_setsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 269.710801][T16180] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4967'. [ 270.146374][T16209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 270.159185][T16210] netlink: 'syz.3.4981': attribute type 1 has an invalid length. [ 270.212451][T16210] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4981'. [ 270.228035][T16209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.253223][T16209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 270.256989][T16210] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4981'. [ 270.296500][T16209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.317485][T16209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 270.353962][T16209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.380280][T16209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 270.395585][T16209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.447182][T16209] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 270.455473][T16209] batadv_slave_0: entered promiscuous mode [ 270.487236][T16209] batadv_slave_0: entered allmulticast mode [ 270.645698][T16236] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4993'. [ 270.763721][T16242] netlink: 'syz.2.4996': attribute type 3 has an invalid length. [ 270.794350][T16242] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4996'. [ 270.914322][T16250] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4999'. [ 270.955580][T16253] netlink: 'syz.3.4998': attribute type 11 has an invalid length. [ 270.996310][T16256] x_tables: unsorted underflow at hook 1 [ 270.997347][T16253] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4998'. [ 271.367454][T16278] openvswitch: netlink: Message has -1 unknown bytes. [ 271.385712][T16280] xt_TPROXY: Can be used only with -p tcp or -p udp [ 271.709237][T16301] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 272.566413][T16359] netlink: 'syz.2.5051': attribute type 21 has an invalid length. [ 272.774711][T16373] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 272.792955][T16373] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 272.862013][T16379] netlink: 'syz.0.5059': attribute type 10 has an invalid length. [ 272.941705][T16379] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 272.952676][T16379] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 273.209379][T16401] netlink: 'syz.3.5068': attribute type 8 has an invalid length. [ 273.464491][T16420] tunl0: entered promiscuous mode [ 273.474430][T16420] netlink: 'syz.3.5079': attribute type 3 has an invalid length. [ 273.483240][T16420] __nla_validate_parse: 2 callbacks suppressed [ 273.483257][T16420] netlink: 9 bytes leftover after parsing attributes in process `syz.3.5079'. [ 273.501824][T16417] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 273.911107][T16447] x_tables: duplicate underflow at hook 3 [ 273.996204][T16453] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 274.003492][T16453] IPv6: NLM_F_CREATE should be set when creating new route [ 274.155109][T16463] xt_l2tp: invalid flags combination: 4 [ 274.394135][T16479] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5108'. [ 274.733405][T16498] netlink: zone id is out of range [ 274.755097][T16467] infiniband syz1: set active [ 274.756068][T16499] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5118'. [ 274.765884][T16467] infiniband syz1: added ipvlan1 [ 274.779910][T16498] netlink: zone id is out of range [ 274.791426][T16498] netlink: zone id is out of range [ 274.811149][T16498] netlink: zone id is out of range [ 274.849886][T16467] RDS/IB: syz1: added [ 274.854854][T16467] smc: adding ib device syz1 with port count 1 [ 274.887716][T16467] smc: ib device syz1 port 1 has pnetid [ 274.988676][T16509] tipc: Trying to set illegal importance in message [ 275.105473][T16515] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5125'. [ 275.437263][T16534] delete_channel: no stack [ 276.617556][T16598] geneve2: entered promiscuous mode [ 276.647004][T16598] geneve2: entered allmulticast mode [ 276.690557][T16602] netlink: 'syz.0.5167': attribute type 2 has an invalid length. [ 276.849225][T16612] netlink: 'syz.0.5172': attribute type 1 has an invalid length. [ 277.227371][T16630] (unnamed net_device) (uninitialized): down delay (33554432) is not a multiple of miimon (640), value rounded to 33553920 ms [ 277.472247][T16647] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5190'. [ 277.484127][T16647] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5190'. [ 277.531590][T16649] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5189'. [ 277.577385][T16649] tc_dump_action: action bad kind [ 277.603562][T16655] openvswitch: netlink: Actions may not be safe on all matching packets [ 278.332637][T16693] netlink: 'syz.0.5212': attribute type 2 has an invalid length. [ 278.350796][T16693] netlink: 244 bytes leftover after parsing attributes in process `syz.0.5212'. [ 278.438568][T16700] openvswitch: netlink: Actions may not be safe on all matching packets [ 279.204573][T16751] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5239'. [ 279.860425][T16800] netlink: 'syz.0.5264': attribute type 3 has an invalid length. [ 279.883939][T16800] netlink: 666 bytes leftover after parsing attributes in process `syz.0.5264'. [ 279.917536][T16803] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 280.225677][T16826] netlink: 'syz.4.5277': attribute type 28 has an invalid length. [ 280.287021][T16826] netlink: 'syz.4.5277': attribute type 3 has an invalid length. [ 280.294806][T16826] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5277'. [ 280.365468][T16835] netlink: 'syz.3.5283': attribute type 21 has an invalid length. [ 280.387259][T16835] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 281.443302][T16909] xt_TCPMSS: Only works on TCP SYN packets [ 281.647050][T16925] delete_channel: no stack [ 281.749581][T16932] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5331'. [ 281.767305][T16932] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (64) [ 281.872132][T16939] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5334'. [ 282.223732][T16963] netlink: 'syz.2.5346': attribute type 10 has an invalid length. [ 282.850389][T17006] lo: entered allmulticast mode [ 282.887790][T17006] tunl0: entered promiscuous mode [ 282.892886][T17006] tunl0: entered allmulticast mode [ 282.926482][T17006] gre0: entered promiscuous mode [ 282.936434][T17006] gre0: entered allmulticast mode [ 282.951085][T17006] gretap0: entered promiscuous mode [ 282.974159][T17006] gretap0: entered allmulticast mode [ 282.981856][T17006] erspan0: entered promiscuous mode [ 283.002279][T17006] erspan0: entered allmulticast mode [ 283.025313][T17006] ip_vti0: entered promiscuous mode [ 283.042804][T17006] ip_vti0: entered allmulticast mode [ 283.058753][T17006] ip6_vti0: entered promiscuous mode [ 283.064249][T17006] ip6_vti0: entered allmulticast mode [ 283.071195][T17006] sit0: entered promiscuous mode [ 283.076275][T17006] sit0: entered allmulticast mode [ 283.082301][T17006] ip6tnl0: entered promiscuous mode [ 283.088119][T17006] ip6tnl0: entered allmulticast mode [ 283.094086][T17006] ip6gre0: entered promiscuous mode [ 283.099852][T17006] ip6gre0: entered allmulticast mode [ 283.106245][T17006] syz_tun: entered promiscuous mode [ 283.112053][T17006] syz_tun: entered allmulticast mode [ 283.122078][T17006] ip6gretap0: entered promiscuous mode [ 283.128134][T17006] ip6gretap0: entered allmulticast mode [ 283.135024][T17006] bridge0: entered promiscuous mode [ 283.140614][T17006] bridge0: entered allmulticast mode [ 283.147360][T17006] vcan0: entered promiscuous mode [ 283.152500][T17006] vcan0: entered allmulticast mode [ 283.160936][T17006] team0: entered promiscuous mode [ 283.166180][T17006] C: entered promiscuous mode [ 283.171979][T17006] team_slave_1: entered promiscuous mode [ 283.178623][T17006] team0: entered allmulticast mode [ 283.183911][T17006] C: entered allmulticast mode [ 283.189647][T17006] team_slave_1: entered allmulticast mode [ 283.197892][T17006] : entered promiscuous mode [ 283.202759][T17006] : entered allmulticast mode [ 283.209075][T17006] nlmon0: entered promiscuous mode [ 283.214291][T17006] nlmon0: entered allmulticast mode [ 283.221243][T17006] caif0: entered promiscuous mode [ 283.228590][T17006] caif0: entered allmulticast mode [ 283.233859][T17006] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 284.193514][T17083] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.5404'. [ 284.745333][T17118] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5423'. [ 284.909637][T17131] netlink: 'syz.1.5430': attribute type 10 has an invalid length. [ 284.928135][T17131] bond0: (slave C): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 285.003592][T17136] netlink: zone id is out of range [ 285.012880][T17136] netlink: zone id is out of range [ 285.023006][T17136] netlink: zone id is out of range [ 285.041346][T17136] netlink: zone id is out of range [ 285.051482][T17136] netlink: zone id is out of range [ 285.070780][T17136] netlink: zone id is out of range [ 285.092049][T17136] netlink: zone id is out of range [ 285.107170][T17136] netlink: zone id is out of range [ 285.123009][T17136] netlink: zone id is out of range [ 285.289274][T17154] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5439'. [ 285.649785][T17176] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5453'. [ 285.699104][T17176] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5453'. [ 285.860207][T17194] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5460'. [ 286.098823][T17208] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5468'. [ 286.261365][T17219] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 286.304661][T17219] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 286.327462][T17219] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 286.492252][T17235] netlink: 1196 bytes leftover after parsing attributes in process `syz.3.5481'. [ 286.553431][T17240] xt_hashlimit: max too large, truncated to 1048576 [ 286.564816][T17241] tc_dump_action: action bad kind [ 287.034172][T17269] xt_TPROXY: Can be used only with -p tcp or -p udp [ 287.226745][T17284] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5504'. [ 287.256474][T17284] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-tlb(5) [ 287.572991][T17304] netlink: 'syz.2.5514': attribute type 21 has an invalid length. [ 287.594415][T17304] netlink: 156 bytes leftover after parsing attributes in process `syz.2.5514'. [ 287.647224][T17310] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5517'. [ 288.127195][T17343] netlink: 'syz.1.5531': attribute type 1 has an invalid length. [ 288.166046][T17345] netlink: 'syz.2.5534': attribute type 21 has an invalid length. [ 288.877372][T17395] netlink: 'syz.3.5559': attribute type 1 has an invalid length. [ 288.995808][T17402] delete_channel: no stack [ 289.511274][T17441] IPVS: length: 157 != 24 [ 289.672682][T17455] .: renamed from bond0 (while UP) [ 289.983296][T17475] __nla_validate_parse: 7 callbacks suppressed [ 289.983325][T17475] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5600'. [ 290.466611][T17508] netlink: 128 bytes leftover after parsing attributes in process `syz.2.5614'. [ 290.486764][T17508] netlink: 128 bytes leftover after parsing attributes in process `syz.2.5614'. [ 290.593786][T17515] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5616'. [ 290.718462][T17523] netlink: 'syz.1.5622': attribute type 33 has an invalid length. [ 290.897168][T17533] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5627'. [ 291.526973][T17579] netlink: 'syz.3.5649': attribute type 30 has an invalid length. [ 291.642459][T17586] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5653'. [ 292.455974][T17643] net_ratelimit: 396 callbacks suppressed [ 292.455996][T17643] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 292.824567][T17667] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 292.907535][T17673] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5696'. [ 293.013266][T17681] netlink: 'syz.0.5701': attribute type 1 has an invalid length. [ 293.021509][T17681] netlink: 244 bytes leftover after parsing attributes in process `syz.0.5701'. [ 293.132709][T17689] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 293.197799][T17694] : entered promiscuous mode [ 293.353984][ T5913] IPVS: starting estimator thread 0... [ 293.395553][T17707] Bluetooth: MGMT ver 1.23 [ 293.457200][T17705] IPVS: using max 29 ests per chain, 69600 per kthread [ 293.480206][T17711] netlink: 'syz.1.5713': attribute type 13 has an invalid length. [ 293.507943][T17711] veth0_macvtap: left promiscuous mode [ 293.517157][T17711] macvtap0: entered allmulticast mode [ 293.544725][T17711] macvtap0: refused to change device tx_queue_len [ 294.068672][T17751] batadv_slave_1: default FDB implementation only supports local addresses [ 294.730916][T17778] Bluetooth: MGMT ver 1.23 [ 295.283679][T17812] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5761'. [ 295.310548][T17814] tipc: Enabling of bearer rejected, failed to enable media [ 295.329804][T17808] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5761'. [ 295.418172][ T5852] Bluetooth: hci0: command 0x080f tx timeout [ 295.592926][T17834] netlink: 'syz.1.5772': attribute type 21 has an invalid length. [ 295.627333][T17834] netlink: 156 bytes leftover after parsing attributes in process `syz.1.5772'. [ 295.774230][T17846] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5779'. [ 295.942688][T17856] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5784'. [ 295.997876][T17860] tipc: Started in network mode [ 296.003003][T17860] tipc: Node identity ac14140f, cluster identity 4711 [ 296.018258][T17860] tipc: Enabling of bearer rejected, failed to enable media [ 296.298188][T17878] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 296.469894][T17888] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.5801'. [ 296.605717][T17899] netdevsim netdevsim0: Firmware load for './file0/../file0' refused, path contains '..' component [ 296.640925][T17902] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5808'. [ 296.830297][T17912] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5814'. [ 296.840148][T17912] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5814'. [ 296.933424][T17918] netlink: 'syz.3.5815': attribute type 2 has an invalid length. [ 297.168590][T17932] netlink: 'syz.2.5823': attribute type 4 has an invalid length. [ 297.180923][T17932] netlink: 17 bytes leftover after parsing attributes in process `syz.2.5823'. [ 297.546506][T17961] netlink: 'syz.1.5838': attribute type 11 has an invalid length. [ 297.799841][T17976] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 298.646423][T18034] netlink: 'syz.1.5873': attribute type 11 has an invalid length. [ 300.172381][T18130] Zero length message leads to an empty skb [ 301.041136][T18187] __nla_validate_parse: 4 callbacks suppressed [ 301.041155][T18187] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5946'. [ 301.242490][T18199] netlink: 104 bytes leftover after parsing attributes in process `syz.2.5953'. [ 301.473475][T18216] nbd: must specify at least one socket [ 301.520834][T18218] netlink: 'syz.4.5962': attribute type 7 has an invalid length. [ 301.548974][T18220] netlink: zone id is out of range [ 301.556733][T18220] netlink: zone id is out of range [ 301.579167][T18220] netlink: zone id is out of range [ 301.584338][T18220] netlink: zone id is out of range [ 301.597108][T18223] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5963'. [ 301.761365][T18232] tipc: Enabling of bearer rejected, failed to enable media [ 302.186319][T18258] netlink: 13 bytes leftover after parsing attributes in process `syz.4.5982'. [ 302.330447][T18270] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5987'. [ 302.341587][T18270] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5987'. [ 302.361438][T18271] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.5989'. [ 302.379714][T18274] IPVS: Error joining to the multicast group [ 302.457432][ T5846] Bluetooth: hci4: command 0x0405 tx timeout [ 302.618059][T18286] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5994'. [ 302.650805][T18290] netlink: 'syz.3.5998': attribute type 1 has an invalid length. [ 302.693592][T18290] netlink: 'syz.3.5998': attribute type 3 has an invalid length. [ 302.729200][T18290] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5998'. [ 302.745422][T18290] NCSI netlink: No device for ifindex 131080 [ 302.848203][T18303] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 303.024004][T18315] netlink: 'syz.1.6010': attribute type 18 has an invalid length. [ 303.071079][T18315] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 303.080641][T18315] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 303.090280][T18315] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 303.099628][T18315] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 304.154162][T18387] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6047'. [ 304.484707][T18407] atomic_op ffff88805df08998 conn xmit_atomic 0000000000000000 [ 304.541290][ T5846] Bluetooth: hci4: command 0x0405 tx timeout [ 304.820225][T18428] netlink: 'syz.0.6063': attribute type 1 has an invalid length. [ 305.130594][T18447] smc: ib device syz1 ibport 1 applied user defined pnetid SYZ0 [ 305.536113][T18468] tunl0: left promiscuous mode [ 305.656243][T18476] netlink: 'syz.2.6086': attribute type 11 has an invalid length. [ 305.670740][T18468] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.678860][T18468] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.930540][T18468] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 305.970629][T18468] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 306.106196][T18468] netdevsim netdevsim3 : unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.116205][T18468] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.126369][T18468] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.136779][T18468] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.211261][T18468] gtp0: left promiscuous mode [ 306.225226][T18468] gretap1: left promiscuous mode [ 306.257880][T18494] tipc: Enabling of bearer rejected, failed to enable media [ 306.353368][T18503] __nla_validate_parse: 8 callbacks suppressed [ 306.353388][T18503] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6101'. [ 307.314978][T18569] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6131'. [ 307.602863][T18589] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 308.241383][T18629] netlink: 'syz.4.6160': attribute type 2 has an invalid length. [ 308.417225][T18640] nbd: must specify a size in bytes for the device [ 308.678310][T18661] tipc: Enabling of bearer rejected, failed to enable media [ 308.699766][T18663] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6176'. [ 308.746514][T18663] netlink: 176 bytes leftover after parsing attributes in process `syz.4.6176'. [ 308.772676][T18663] netlink: 'syz.4.6176': attribute type 5 has an invalid length. [ 308.790198][T18666] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6177'. [ 309.042147][T18683] tipc: Started in network mode [ 309.075073][T18683] tipc: Node identity , cluster identity 4711 [ 309.090820][T18683] tipc: Failed to set node id, please configure manually [ 309.098775][T18683] tipc: Enabling of bearer rejected, failed to enable media [ 309.215790][T18694] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6191'. [ 309.289162][T18700] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6193'. [ 309.615909][T18718] netlink: 72 bytes leftover after parsing attributes in process `syz.3.6201'. [ 309.914291][T18737] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 310.170210][T18757] netlink: 72 bytes leftover after parsing attributes in process `syz.0.6220'. [ 310.180276][T18757] netlink: 72 bytes leftover after parsing attributes in process `syz.0.6220'. [ 310.425572][ T1124] tipc: Subscription rejected, illegal request [ 310.503182][T18776] netlink: 'syz.1.6230': attribute type 15 has an invalid length. [ 310.823034][T18795] Bluetooth: MGMT ver 1.23 [ 311.189049][T18823] netlink: 'syz.4.6251': attribute type 1 has an invalid length. [ 312.024453][T18878] __nla_validate_parse: 3 callbacks suppressed [ 312.024470][T18878] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6278'. [ 312.040769][T18878] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6278'. [ 312.061995][T18880] netlink: 'syz.2.6279': attribute type 1 has an invalid length. [ 312.070199][T18880] netlink: 204 bytes leftover after parsing attributes in process `syz.2.6279'. [ 312.777498][T18917] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6296'. [ 313.223070][T18950] netlink: 'syz.0.6311': attribute type 23 has an invalid length. [ 313.540378][T18967] tipc: Started in network mode [ 313.545311][T18967] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 313.570489][T18967] tipc: Enabling of bearer rejected, failed to enable media [ 313.704218][T18978] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6326'. [ 314.017749][T18989] netlink: 'syz.4.6331': attribute type 33 has an invalid length. [ 314.323693][T19003] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6338'. [ 314.664500][ T5998] IPVS: starting estimator thread 0... [ 314.757547][T19027] IPVS: using max 29 ests per chain, 69600 per kthread [ 314.837339][T19036] netlink: 'syz.3.6354': attribute type 3 has an invalid length. [ 315.106446][T19054] netlink: 'syz.1.6362': attribute type 23 has an invalid length. [ 315.334309][T19071] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6369'. [ 315.615331][T19086] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6378'. [ 315.719120][T19095] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6382'. [ 315.745692][T19092] delete_channel: no stack [ 315.956436][T19111] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6390'. [ 316.436682][T19146] sctp: [Deprecated]: syz.2.6407 (pid 19146) Use of struct sctp_assoc_value in delayed_ack socket option. [ 316.436682][T19146] Use struct sctp_sack_info instead [ 316.458744][T19146] sctp: [Deprecated]: syz.2.6407 (pid 19146) Use of struct sctp_assoc_value in delayed_ack socket option. [ 316.458744][T19146] Use struct sctp_sack_info instead [ 316.819920][T19170] macvlan2: entered promiscuous mode [ 316.835332][T19170] macvlan2: entered allmulticast mode [ 317.165414][T19194] __nla_validate_parse: 2 callbacks suppressed [ 317.165436][T19194] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6431'. [ 317.618600][T19221] netlink: 216 bytes leftover after parsing attributes in process `syz.2.6445'. [ 317.628045][T19221] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6445'. [ 318.220554][T19261] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6459'. [ 318.251776][T19261] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6459'. [ 318.344174][T19267] netlink: 148 bytes leftover after parsing attributes in process `syz.1.6462'. [ 318.561903][T19279] nbd: must specify an index to disconnect [ 319.444047][T19334] tipc: Started in network mode [ 319.456450][T19334] tipc: Node identity , cluster identity 4711 [ 319.474491][T19334] tipc: Failed to set node id, please configure manually [ 319.506795][T19334] tipc: Enabling of bearer rejected, failed to enable media [ 319.905501][ T30] audit: type=1107 audit(1744105122.213:3): pid=19362 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ً5%UA٠0ltݕ/ 6򊨊' [ 320.600773][T19412] netlink: 'syz.1.6533': attribute type 2 has an invalid length. [ 320.638879][T19412] netlink: 188 bytes leftover after parsing attributes in process `syz.1.6533'. [ 320.657701][T19418] tipc: Enabling of bearer rejected, media not registered [ 320.724747][T19422] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 321.913619][T19505] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6577'. [ 322.435925][T19541] netlink: 'syz.4.6595': attribute type 3 has an invalid length. [ 324.194335][T19661] tipc: Enabled bearer , priority 10 [ 324.637637][T19692] netlink: 11 bytes leftover after parsing attributes in process `syz.3.6669'. [ 325.036426][T19712] netlink: 'syz.0.6679': attribute type 3 has an invalid length. [ 325.303492][T19729] tipc: Enabling of bearer rejected, media not registered [ 325.313918][ T58] tipc: Node number set to 1 [ 325.462199][T19742] openvswitch: netlink: Key type 30 is not supported [ 326.783004][T19823] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 326.981167][T19839] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6735'. [ 327.008781][T19836] xt_socket: unknown flags 0x4 [ 327.027666][T19839] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6735'. [ 328.473607][T19928] netlink: 'syz.0.6771': attribute type 1 has an invalid length. [ 329.073932][T19956] syz.3.6787 (19956) used obsolete PPPIOCDETACH ioctl [ 329.190085][T19970] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6794'. [ 329.485956][T19985] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6800'. [ 329.515381][T19985] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6800'. [ 329.525489][T19986] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6801'. [ 329.535841][T19990] netlink: 'syz.1.6802': attribute type 13 has an invalid length. [ 329.602981][T19992] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 329.788116][T20004] netlink: 'syz.1.6810': attribute type 1 has an invalid length. [ 330.855807][T20072] netlink: 256 bytes leftover after parsing attributes in process `syz.3.6842'. [ 331.519589][T20108] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6859'. [ 332.025193][T20140] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6875'. [ 332.154575][T20147] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6879'. [ 332.402665][T20161] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6885'. [ 332.432791][T20161] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6885'. [ 332.442634][T20161] netlink: 'syz.1.6885': attribute type 12 has an invalid length. [ 332.486995][T20161] netlink: 'syz.1.6885': attribute type 11 has an invalid length. [ 332.857105][ T5852] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 332.857179][ T5846] Bluetooth: hci0: command 0x080f tx timeout [ 333.159517][T20207] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6908'. [ 333.496066][T20226] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6917'. [ 333.781646][T20244] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6926'. [ 334.961827][T20309] tipc: Started in network mode [ 334.969513][T20309] tipc: Node identity ffffffff, cluster identity 4711 [ 334.978304][T20309] tipc: Node number set to 4294967295 [ 335.179337][T20325] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6964'. [ 336.691807][T20423] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 336.901901][T20435] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7013'. [ 337.723068][T20491] netlink: 192 bytes leftover after parsing attributes in process `syz.1.7039'. [ 339.129232][T20583] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7085'. [ 339.170061][T20583] netlink: 272 bytes leftover after parsing attributes in process `syz.4.7085'. [ 339.191787][T20583] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7085'. [ 339.514936][T20608] smc: ib device syz1 ibport 1 erased user defined pnetid SYZ0 [ 341.115670][T20695] tipc: Enabling of bearer rejected, failed to enable media [ 341.534125][T20723] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7150'. [ 342.572485][T20775] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7175'. [ 343.227821][T20818] --map-set only usable from mangle table [ 343.403009][T20830] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7201'. [ 343.564700][T20840] netlink: 71 bytes leftover after parsing attributes in process `syz.4.7205'. [ 344.088419][T20875] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x9 [ 344.104470][T20877] netlink: 'syz.4.7224': attribute type 25 has an invalid length. [ 344.230940][T20886] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7227'. [ 344.267485][T20886] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7227'. [ 344.292528][T20886] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7227'. [ 344.562719][T20905] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7238'. [ 344.706500][T20915] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7242'. [ 345.059463][T20938] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7254'. [ 345.100852][T20938] gretap0: entered promiscuous mode [ 345.121290][T20938] gretap0: left promiscuous mode [ 345.180364][T20942] tipc: Enabling of bearer rejected, failed to enable media [ 346.118080][T20983] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7275'. [ 346.375064][T21004] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 347.130726][T21054] lo: entered allmulticast mode [ 347.153589][T21054] lo: left allmulticast mode [ 347.777701][T21091] __nla_validate_parse: 3 callbacks suppressed [ 347.777726][T21091] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7329'. [ 347.837584][T21091] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7329'. [ 348.032318][T21104] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7334'. [ 348.074869][T21108] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7337'. [ 348.205597][T21113] netlink: 44 bytes leftover after parsing attributes in process `syz.1.7340'. [ 348.227552][T21113] netlink: 43 bytes leftover after parsing attributes in process `syz.1.7340'. [ 348.257674][T21113] netlink: 'syz.1.7340': attribute type 5 has an invalid length. [ 348.265458][T21113] netlink: 43 bytes leftover after parsing attributes in process `syz.1.7340'. [ 349.430539][T21186] netlink: 277 bytes leftover after parsing attributes in process `syz.3.7376'. [ 350.494266][T21264] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7413'. [ 350.508288][T21264] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7413'. [ 350.925522][T21291] netlink: 'syz.2.7426': attribute type 3 has an invalid length. [ 351.262332][T21315] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 351.271899][T21315] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (1) [ 352.416714][T21382] netlink: 'syz.4.7469': attribute type 29 has an invalid length. [ 352.446832][T21382] netlink: 'syz.4.7469': attribute type 29 has an invalid length. [ 352.692813][T21400] NCSI netlink: No device for ifindex 0 [ 353.050194][T21429] Bluetooth: MGMT ver 1.23 [ 353.289477][T21443] __nla_validate_parse: 6 callbacks suppressed [ 353.289496][T21443] netlink: 80 bytes leftover after parsing attributes in process `syz.3.7499'. [ 353.606056][T21462] netlink: 'syz.3.7508': attribute type 4 has an invalid length. [ 353.626514][T21462] netlink: 'syz.3.7508': attribute type 4 has an invalid length. [ 354.650061][T21528] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7540'. [ 354.762181][T21535] netlink: 52 bytes leftover after parsing attributes in process `syz.3.7544'. [ 354.812930][T21539] sock: sock_timestamping_bind_phc: sock not bind to device [ 355.152673][T21557] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7553'. [ 355.195883][T21557] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.299489][T21557] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.376160][T21557] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.596200][T21557] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.624854][T21557] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.651139][T21557] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.683666][T21557] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.908968][T21586] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7565'. [ 356.546505][T21626] netlink: 192 bytes leftover after parsing attributes in process `syz.0.7586'. [ 356.685716][T21634] netlink: 'syz.4.7593': attribute type 4 has an invalid length. [ 356.717625][T21634] netlink: 17 bytes leftover after parsing attributes in process `syz.4.7593'. [ 356.930786][T21651] sock: sock_set_timeout: `syz.2.7601' (pid 21651) tries to set negative timeout [ 357.489193][T21680] vlan2: entered promiscuous mode [ 357.494337][T21680] bridge0: entered promiscuous mode [ 359.721488][T21823] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 359.730139][T21823] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 359.738642][T21823] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 359.746860][T21823] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 359.783686][T21822] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7682'. [ 359.819937][T21822] tipc: Invalid UDP bearer configuration [ 359.820011][T21822] tipc: Enabling of bearer rejected, failed to enable media [ 360.135867][T21848] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7696'. [ 360.241604][T21854] tipc: Enabling of bearer rejected, failed to enable media [ 361.148871][T21909] xt_CT: You must specify a L4 protocol and not use inversions on it [ 361.447867][T21930] vxcan1: entered allmulticast mode [ 361.948044][T21961] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7752'. [ 362.283306][T21983] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7762'. [ 362.283901][T21985] netlink: 'syz.2.7763': attribute type 29 has an invalid length. [ 362.591146][T22006] netlink: 'syz.2.7773': attribute type 29 has an invalid length. [ 362.614828][T22006] netlink: 'syz.2.7773': attribute type 29 has an invalid length. [ 363.161613][T22042] IPVS: ip_vs_add_dest(): server weight less than zero [ 363.302116][T22049] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 363.413366][T22057] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7798'. [ 363.450780][T22057] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7798'. [ 363.482008][T22062] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7800'. [ 363.497100][T22057] netlink: 'syz.0.7798': attribute type 7 has an invalid length. [ 363.543630][T22062] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7800'. [ 363.571139][T22062] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7800'. [ 363.593634][T22062] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7800'. [ 363.650827][T22062] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 363.698686][T22073] Bluetooth: MGMT ver 1.23 [ 364.249915][T22107] nbd: illegal input index 61504 [ 364.473658][T22121] IPVS: length: 8 != 1152 [ 364.925572][T22147] __nla_validate_parse: 26 callbacks suppressed [ 364.925594][T22147] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7840'. [ 365.284628][T22166] tipc: Started in network mode [ 365.299077][T22166] tipc: Node identity 40582d000000000008, cluster identity 4711 [ 365.774365][T22199] netlink: 161716 bytes leftover after parsing attributes in process `syz.2.7866'. [ 365.904065][T22207] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7871'. [ 365.952734][T22207] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7871'. [ 365.966052][T22211] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7871'. [ 365.981764][T22211] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7871'. [ 366.016033][T22214] netlink: 212404 bytes leftover after parsing attributes in process `syz.4.7874'. [ 366.378706][T22236] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7884'. [ 366.650559][T22254] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7893'. [ 366.761907][T22261] rdma_op ffff8880309479f0 conn xmit_rdma 0000000000000000 [ 366.780683][T22262] netlink: 'syz.0.7897': attribute type 1 has an invalid length. [ 366.807162][T22262] netlink: 'syz.0.7897': attribute type 3 has an invalid length. [ 366.834427][T22262] netlink: 224 bytes leftover after parsing attributes in process `syz.0.7897'. [ 368.395862][T22367] tipc: Enabling of bearer rejected, failed to enable media [ 368.545155][T22378] sit1: entered promiscuous mode [ 368.556240][T22378] sit1: entered allmulticast mode [ 368.970275][T22404] netlink: 'syz.4.7963': attribute type 1 has an invalid length. [ 368.992228][T22400] netlink: 'syz.4.7963': attribute type 1 has an invalid length. [ 369.084681][T22409] nbd: illegal input index -8454144 [ 369.926622][T22458] sctp: [Deprecated]: syz.1.7987 (pid 22458) Use of int in maxseg socket option. [ 369.926622][T22458] Use struct sctp_assoc_value instead [ 370.349615][T22482] __nla_validate_parse: 4 callbacks suppressed [ 370.349634][T22482] netlink: 96 bytes leftover after parsing attributes in process `syz.0.7998'. [ 370.799231][ T5998] IPVS: starting estimator thread 0... [ 370.911763][T22510] IPVS: using max 31 ests per chain, 74400 per kthread [ 371.068360][T22525] netlink: 'syz.0.8020': attribute type 1 has an invalid length. [ 371.083810][T22526] netlink: 810 bytes leftover after parsing attributes in process `syz.4.8018'. [ 371.337436][T22541] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.8026'. [ 371.358892][T22538] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.8026'. [ 372.073607][T22584] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8049'. [ 372.113557][T22584] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8049'. [ 372.396129][T22602] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 372.417492][T22602] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 372.636079][T22619] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8065'. [ 372.649171][T22619] netlink: 'syz.2.8065': attribute type 30 has an invalid length. [ 372.665098][T22619] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8065'. [ 372.722501][T22622] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8066'. [ 373.001794][T22634] sit0: left allmulticast mode [ 373.038800][T22634] netlink: 'syz.2.8072': attribute type 1 has an invalid length. [ 373.068845][T22634] netlink: 1 bytes leftover after parsing attributes in process `syz.2.8072'. [ 374.833241][T22740] pimreg3: entered allmulticast mode [ 375.172341][T22759] IPVS: Error connecting to the multicast addr [ 376.042944][T22817] __nla_validate_parse: 2 callbacks suppressed [ 376.042964][T22817] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8155'. [ 376.233620][T22827] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8161'. [ 376.982134][T22875] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8185'. [ 376.995638][T22875] netlink: 'syz.3.8185': attribute type 3 has an invalid length. [ 377.033191][T22882] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8187'. [ 377.193047][T22888] netlink: 44 bytes leftover after parsing attributes in process `syz.1.8191'. [ 377.223235][T22888] netlink: 43 bytes leftover after parsing attributes in process `syz.1.8191'. [ 377.266421][T22888] netlink: 'syz.1.8191': attribute type 5 has an invalid length. [ 377.274906][T22888] netlink: 43 bytes leftover after parsing attributes in process `syz.1.8191'. [ 378.516887][T22950] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8221'. [ 378.582592][T22950] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8221'. [ 378.602449][T22950] netlink: 'syz.2.8221': attribute type 14 has an invalid length. [ 378.612245][T22950] netlink: 'syz.2.8221': attribute type 13 has an invalid length. [ 378.754878][T22966] x_tables: ip_tables: udp match: only valid for protocol 17 [ 379.059415][T22986] netlink: 104 bytes leftover after parsing attributes in process `syz.2.8238'. [ 379.655949][T23021] nbd: must specify a device to reconfigure [ 381.475999][T23108] sctp: [Deprecated]: syz.4.8296 (pid 23108) Use of int in max_burst socket option deprecated. [ 381.475999][T23108] Use struct sctp_assoc_value instead [ 381.864607][ T30] audit: type=1800 audit(1744105184.173:4): pid=23132 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.8307" name="memory.events" dev="tmpfs" ino=8273 res=0 errno=0 [ 381.893803][ T30] audit: type=1804 audit(1744105184.173:5): pid=23132 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.8307" name="/newroot/1649/memory.events" dev="tmpfs" ino=8273 res=1 errno=0 [ 382.023374][T23139] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8309'. [ 382.202670][T23148] tipc: Invalid UDP bearer configuration [ 382.202724][T23148] tipc: Enabling of bearer rejected, failed to enable media [ 382.404304][T23162] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8322'. [ 382.432522][T23162] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8322'. [ 382.605087][T23178] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8328'. [ 383.844991][T23262] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8368'. [ 384.821544][T23324] pim6reg: entered allmulticast mode [ 384.859720][T23324] pim6reg: left allmulticast mode [ 386.364799][T23428] netlink: 11562 bytes leftover after parsing attributes in process `syz.1.8447'. [ 386.636685][T23445] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8454'. [ 386.764223][T23450] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8460'. [ 386.764723][T23455] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8459'. [ 387.821035][T23519] netlink: 44 bytes leftover after parsing attributes in process `syz.4.8489'. [ 388.023437][T23530] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8494'. [ 388.692587][T23575] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8514'. [ 388.696513][T23576] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8513'. [ 388.794319][T23580] netlink: 'syz.1.8516': attribute type 1 has an invalid length. [ 388.809194][T23580] netlink: 'syz.1.8516': attribute type 4 has an invalid length. [ 388.820836][T23580] netlink: 192 bytes leftover after parsing attributes in process `syz.1.8516'. [ 389.025213][T23592] netlink: 64 bytes leftover after parsing attributes in process `syz.1.8523'. [ 389.121698][T23597] ip6gre1: entered allmulticast mode [ 389.368398][T23604] netlink: 576 bytes leftover after parsing attributes in process `syz.3.8528'. [ 390.974391][T23686] tipc: New replicast peer: 255.255.255.255 [ 390.995274][T23686] tipc: Enabled bearer , priority 10 [ 391.276156][T23674] infiniband syz!: set down [ 391.305619][T23674] infiniband syz!: added team_slave_0 [ 391.411935][T23710] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.419816][T23710] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.450910][T23674] RDS/IB: syz!: added [ 391.454997][T23674] smc: adding ib device syz! with port count 1 [ 391.484809][T23674] smc: ib device syz! port 1 has pnetid [ 391.964615][T23737] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 392.098547][T23743] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8589'. [ 392.108310][ T58] tipc: Node number set to 2886997007 [ 392.157448][T23745] netlink: 'syz.2.8590': attribute type 5 has an invalid length. [ 392.192311][T23745] netlink: 'syz.2.8590': attribute type 5 has an invalid length. [ 392.242280][T23747] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 392.418327][T23755] netlink: 292 bytes leftover after parsing attributes in process `syz.2.8595'. [ 393.026663][T23788] netlink: 64 bytes leftover after parsing attributes in process `syz.1.8610'. [ 393.533465][T23811] netlink: 72 bytes leftover after parsing attributes in process `syz.2.8618'. [ 393.549450][T23810] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8620'. [ 393.881748][T23823] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8626'. [ 393.915436][T23823] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8626'. [ 395.302569][T23886] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8654'. [ 395.848418][T23912] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8665'. [ 396.088417][T23922] netem: unknown loss type 0 [ 396.095010][T23922] netem: change failed [ 396.826826][T23970] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8694'. [ 396.854840][T23972] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8696'. [ 396.889731][T23972] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8696'. [ 398.395010][T24056] __nla_validate_parse: 1 callbacks suppressed [ 398.395034][T24056] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8735'. [ 399.079481][T24100] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8755'. [ 399.087073][T24098] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8754'. [ 399.265027][T24107] netlink: 224 bytes leftover after parsing attributes in process `syz.1.8758'. [ 399.278123][T24108] team0: No ports can be present during mode change [ 399.587524][T24128] netlink: 'syz.3.8768': attribute type 1 has an invalid length. [ 399.612103][T24128] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8768'. [ 400.506483][T24178] netlink: 108 bytes leftover after parsing attributes in process `syz.0.8789'. [ 400.516746][T24178] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8789'. [ 401.082252][T24197] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8797'. [ 401.756366][T24237] netlink: 48 bytes leftover after parsing attributes in process `syz.0.8816'. [ 401.832986][T24242] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8818'. [ 401.940204][T24246] xfrm1: entered promiscuous mode [ 401.945490][T24246] xfrm1: entered allmulticast mode [ 402.932843][T24289] vxcan1: tx address claim with dlc 0 [ 403.242947][T24307] netlink: 'syz.4.8847': attribute type 2 has an invalid length. [ 403.482407][T24325] __nla_validate_parse: 6 callbacks suppressed [ 403.482427][T24325] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8854'. [ 403.503978][T24321] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.8855'. [ 403.916061][T24354] netlink: 'syz.0.8870': attribute type 25 has an invalid length. [ 403.924270][T24354] netlink: 'syz.0.8870': attribute type 7 has an invalid length. [ 404.233011][T24377] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 404.651726][T24400] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8890'. [ 404.684371][T24400] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 404.711506][T24400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 404.740007][T24400] vlan2: entered allmulticast mode [ 404.758946][T24400] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 405.044702][T24423] netlink: 68 bytes leftover after parsing attributes in process `syz.4.8901'. [ 405.132610][T24433] netlink: 68 bytes leftover after parsing attributes in process `syz.3.8904'. [ 405.447811][T24448] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8913'. [ 405.449570][T24446] netlink: 44 bytes leftover after parsing attributes in process `syz.1.8912'. [ 405.942255][T24469] sctp: [Deprecated]: syz.3.8923 (pid 24469) Use of int in maxseg socket option. [ 405.942255][T24469] Use struct sctp_assoc_value instead [ 406.080164][T24477] netlink: 'syz.3.8927': attribute type 5 has an invalid length. [ 406.113705][T24480] netlink: 64 bytes leftover after parsing attributes in process `syz.4.8928'. [ 406.201427][T24486] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8930'. [ 406.450422][T24501] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8937'. [ 409.603565][T24669] __nla_validate_parse: 5 callbacks suppressed [ 409.603584][T24669] netlink: 104 bytes leftover after parsing attributes in process `syz.3.9014'. [ 409.650288][T24674] netlink: 1036 bytes leftover after parsing attributes in process `syz.0.9017'. [ 409.705452][T24674] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 409.915681][T24684] netlink: 80 bytes leftover after parsing attributes in process `syz.0.9021'. [ 410.433032][T24720] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9038'. [ 410.433944][T24722] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 411.115298][T24761] netlink: 104 bytes leftover after parsing attributes in process `syz.3.9059'. [ 411.664894][T24797] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9078'. [ 411.699129][T24797] netlink: 'syz.4.9078': attribute type 1 has an invalid length. [ 411.735160][T24797] netlink: 'syz.4.9078': attribute type 2 has an invalid length. [ 411.899559][T24811] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9084'. [ 411.923212][T24811] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9084'. [ 412.164451][T24827] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9090'. [ 412.479163][T24846] pimreg: entered allmulticast mode [ 412.518031][T24844] pimreg: left allmulticast mode [ 412.615316][T24851] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 413.157622][T24892] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9124'. [ 413.594118][T24917] xt_bpf: check failed: parse error [ 413.872397][T24922] vlan3: entered allmulticast mode [ 413.892052][T24922] batadv0: entered allmulticast mode [ 413.976209][T24925] netlink: 'syz.0.9139': attribute type 4 has an invalid length. [ 414.321603][T24954] veth1_vlan: entered allmulticast mode [ 414.328801][T24954] macvlan0: left promiscuous mode [ 414.334139][T24954] macvlan0: left allmulticast mode [ 414.344114][T24954] veth1_vlan: left allmulticast mode [ 414.628249][T24968] tipc: Started in network mode [ 414.640214][T24968] tipc: Node identity ac14140f, cluster identity 4711 [ 414.677477][T24968] tipc: New replicast peer: 255.255.255.255 [ 414.737525][T24968] tipc: Enabled bearer , priority 10 [ 414.774505][T24979] __nla_validate_parse: 5 callbacks suppressed [ 414.774527][T24979] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9163'. [ 414.916164][T24985] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 414.941679][T24985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 415.163417][T24999] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9171'. [ 415.612388][T25026] netlink: 'syz.2.9182': attribute type 12 has an invalid length. [ 415.636314][T25026] netlink: 'syz.2.9182': attribute type 29 has an invalid length. [ 415.667694][T25026] netlink: 'syz.2.9182': attribute type 2 has an invalid length. [ 415.675728][T25026] netlink: 128 bytes leftover after parsing attributes in process `syz.2.9182'. [ 415.719462][ T30] audit: type=1107 audit(1744105218.033:6): pid=25032 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 415.839031][ T5886] tipc: Node number set to 2886997007 [ 416.176116][T25060] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9199'. [ 416.347660][T25069] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9203'. [ 416.621861][T25086] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9212'. [ 416.675877][T25089] netlink: 'syz.0.9213': attribute type 1 has an invalid length. [ 416.684532][T25089] netlink: 'syz.0.9213': attribute type 10 has an invalid length. [ 416.697780][T25089] netlink: 236 bytes leftover after parsing attributes in process `syz.0.9213'. [ 416.778848][T25094] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9216'. [ 417.016807][T25111] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9223'. [ 417.703312][T25157] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9242'. [ 419.470761][T25259] : renamed from bond0 (while UP) [ 419.785831][T25281] __nla_validate_parse: 3 callbacks suppressed [ 419.785851][T25281] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9300'. [ 420.107139][T25299] netlink: 'syz.3.9309': attribute type 1 has an invalid length. [ 420.127290][T25299] netlink: 224 bytes leftover after parsing attributes in process `syz.3.9309'. [ 420.920653][T25349] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9332'. [ 420.986775][T25349] gretap0: entered promiscuous mode [ 421.003809][T25349] macvtap0: entered promiscuous mode [ 421.014389][T25349] macvtap0: entered allmulticast mode [ 421.021766][T25349] gretap0: entered allmulticast mode [ 421.041264][T25359] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9339'. [ 421.060316][T25358] netlink: 'syz.2.9338': attribute type 2 has an invalid length. [ 421.516655][T25384] sctp: [Deprecated]: syz.3.9351 (pid 25384) Use of struct sctp_assoc_value in delayed_ack socket option. [ 421.516655][T25384] Use struct sctp_sack_info instead [ 422.242857][T25433] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9374'. [ 422.355186][T25441] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 422.364397][T25441] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 422.369173][T25443] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9375'. [ 422.373364][T25441] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 422.391647][T25441] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 422.411544][T25441] vxlan0: entered promiscuous mode [ 422.425927][T25441] vxlan0: entered allmulticast mode [ 423.384662][T25494] sctp: [Deprecated]: syz.0.9403 (pid 25494) Use of struct sctp_assoc_value in delayed_ack socket option. [ 423.384662][T25494] Use struct sctp_sack_info instead [ 424.041798][T25529] netlink: 71 bytes leftover after parsing attributes in process `syz.2.9420'. [ 424.168819][T25538] netlink: 'syz.1.9425': attribute type 2 has an invalid length. [ 424.885437][T25588] xt_CT: You must specify a L4 protocol and not use inversions on it [ 424.904597][T25587] netlink: 104 bytes leftover after parsing attributes in process `syz.3.9445'. [ 425.120583][T25598] veth0_to_hsr: entered promiscuous mode [ 425.140794][T25596] veth0_to_hsr: left promiscuous mode [ 426.372731][T25679] netlink: 104 bytes leftover after parsing attributes in process `syz.2.9489'. [ 426.834028][T25701] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9500'. [ 426.834368][T25699] bond0: left allmulticast mode [ 426.849460][T25701] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9500'. [ 426.876962][T25701] netlink: 'syz.1.9500': attribute type 1 has an invalid length. [ 426.898508][T25701] nbd: error processing sock list [ 427.518542][T25744] netlink: 76 bytes leftover after parsing attributes in process `syz.3.9519'. [ 428.167618][T25771] netlink: 'syz.4.9532': attribute type 29 has an invalid length. [ 428.182442][T25771] netlink: 'syz.4.9532': attribute type 29 has an invalid length. [ 428.253206][T25777] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9535'. [ 428.280464][T25777] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9535'. [ 428.280872][T25771] netlink: 'syz.4.9532': attribute type 29 has an invalid length. [ 428.454087][T25789] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 429.334201][T25842] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9565'. [ 429.357373][T25842] bridge_slave_1: left allmulticast mode [ 429.363077][T25842] bridge_slave_1: left promiscuous mode [ 429.385373][T25842] bridge0: port 2(bridge_slave_1) entered disabled state [ 429.411561][T25842] bridge_slave_0: left allmulticast mode [ 429.419614][T25842] bridge_slave_0: left promiscuous mode [ 429.425495][T25842] bridge0: port 1(bridge_slave_0) entered disabled state [ 429.622564][T25854] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 430.045810][T25877] vxcan1: tx address claim with dest, not broadcast [ 430.428222][T25898] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9592'. [ 431.009921][T25932] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9605'. [ 431.036281][T25932] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9605'. [ 431.179062][ T5852] Bluetooth: hci4: command 0x0405 tx timeout [ 432.078809][T26000] tun0: tun_chr_ioctl cmd 1074025675 [ 432.084809][T26000] tun0: persist disabled [ 433.400640][T26070] netlink: 10 bytes leftover after parsing attributes in process `syz.1.9668'. [ 433.604604][T26085] netlink: 56 bytes leftover after parsing attributes in process `syz.1.9676'. [ 434.469441][T26135] netlink: 'syz.0.9702': attribute type 11 has an invalid length. [ 434.613338][T26140] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9704'. [ 435.982926][T26215] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9736'. [ 436.027552][T26215] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9736'. [ 436.168164][T26221] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9739'. [ 436.351218][T26237] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9746'. [ 436.355023][T26238] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9748'. [ 436.406313][T26237] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9746'. [ 436.830265][T26267] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9761'. [ 438.929045][T26378] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9810'. [ 439.148226][T26378] hsr_slave_1 (unregistering): left promiscuous mode [ 439.166704][T26389] veth0: entered promiscuous mode [ 439.172664][T26389] veth0: left promiscuous mode [ 439.980607][T26436] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 440.578428][T26453] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9840'. [ 440.818018][T26461] tap0: tun_chr_ioctl cmd 2148553947 [ 441.674392][T26515] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9871'. [ 441.740266][T26515] gre0: entered allmulticast mode [ 442.494557][T26566] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9892'. [ 443.258839][T26616] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9913'. [ 443.291239][T26616] netlink: 21 bytes leftover after parsing attributes in process `syz.0.9913'. [ 443.484449][T26630] tipc: New replicast peer: 255.255.255.255 [ 443.496715][T26630] tipc: Enabled bearer , priority 10 [ 443.540682][T26630] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9923'. [ 443.579660][T26630] tipc: Disabling bearer [ 443.884792][T26653] netlink: 160 bytes leftover after parsing attributes in process `syz.4.9933'. [ 446.249468][T26805] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10004'. [ 446.302162][T26809] netlink: 188 bytes leftover after parsing attributes in process `syz.0.10007'. [ 447.227477][T26872] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10034'. [ 447.252854][T26872] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10034'. [ 447.730210][T26902] netlink: 96 bytes leftover after parsing attributes in process `syz.4.10047'. [ 449.034867][T26982] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10082'. [ 449.065724][T26982] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10082'. [ 449.256874][T26992] netlink: 232 bytes leftover after parsing attributes in process `syz.4.10085'. [ 449.670231][T27020] netlink: 'syz.0.10098': attribute type 5 has an invalid length. [ 449.992099][T27037] tap0: tun_chr_ioctl cmd 1074025672 [ 450.003629][T27037] tap0: ignored: set checksum disabled [ 450.138914][ T5852] Bluetooth: hci4: command 0x0405 tx timeout [ 450.216274][T27051] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 450.572055][T27070] sch_fq: defrate 0 ignored. [ 451.622843][T27106] tipc: New replicast peer: 255.255.255.255 [ 451.633615][T27106] tipc: Enabled bearer , priority 10 [ 452.747273][ T58] tipc: Node number set to 1213738240 [ 453.739332][T27240] netlink: 71 bytes leftover after parsing attributes in process `syz.1.10204'. [ 454.362906][T27276] netlink: 'syz.2.10222': attribute type 1 has an invalid length. [ 455.382622][T27337] netlink: 'syz.2.10250': attribute type 21 has an invalid length. [ 455.392997][T27337] netlink: 128 bytes leftover after parsing attributes in process `syz.2.10250'. [ 455.411890][T27337] netlink: 'syz.2.10250': attribute type 4 has an invalid length. [ 455.427255][T27337] netlink: 'syz.2.10250': attribute type 5 has an invalid length. [ 455.443185][T27337] netlink: 3 bytes leftover after parsing attributes in process `syz.2.10250'. [ 455.448243][T27342] netlink: 'syz.2.10250': attribute type 21 has an invalid length. [ 455.490379][T27342] netlink: 128 bytes leftover after parsing attributes in process `syz.2.10250'. [ 455.547259][T27342] netlink: 'syz.2.10250': attribute type 4 has an invalid length. [ 455.560030][T27342] netlink: 'syz.2.10250': attribute type 5 has an invalid length. [ 455.613618][T27342] netlink: 3 bytes leftover after parsing attributes in process `syz.2.10250'. [ 455.761251][T27356] netlink: 872 bytes leftover after parsing attributes in process `syz.2.10258'. [ 455.788784][T27360] netlink: 36 bytes leftover after parsing attributes in process `syz.3.10260'. [ 456.034185][T27372] sctp: [Deprecated]: syz.2.10265 (pid 27372) Use of struct sctp_assoc_value in delayed_ack socket option. [ 456.034185][T27372] Use struct sctp_sack_info instead [ 456.142520][T27378] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10269'. [ 456.355845][T27393] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10276'. [ 456.431013][T27399] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10279'. [ 456.742277][T27417] netem: incorrect gi model size [ 456.755233][T27417] netem: change failed [ 458.381474][T27520] netlink: 'syz.4.10333': attribute type 4 has an invalid length. [ 459.058664][T27558] __nla_validate_parse: 4 callbacks suppressed [ 459.058683][T27558] netlink: 88 bytes leftover after parsing attributes in process `syz.3.10348'. [ 459.084125][T27558] netem: invalid attributes len -24 [ 459.090404][T27558] netem: change failed [ 459.220950][T27567] netlink: 'syz.2.10355': attribute type 8 has an invalid length. [ 459.825092][T27606] bond2: entered promiscuous mode [ 459.831014][T27606] bond2: entered allmulticast mode [ 459.836627][T27606] 8021q: adding VLAN 0 to HW filter on device bond2 [ 460.104638][T27606] bond2 (unregistering): Released all slaves [ 460.420836][T27636] netlink: 1344 bytes leftover after parsing attributes in process `syz.4.10387'. [ 460.550257][T27643] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10390'. [ 460.796235][T27657] netlink: 84 bytes leftover after parsing attributes in process `syz.3.10394'. [ 461.558348][T27698] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10415'. [ 461.932352][T27722] netlink: 52 bytes leftover after parsing attributes in process `syz.0.10426'. [ 461.936270][T27724] netlink: 'syz.4.10428': attribute type 4 has an invalid length. [ 461.974135][T27722] netlink: 52 bytes leftover after parsing attributes in process `syz.0.10426'. [ 462.361300][T27748] netlink: 40 bytes leftover after parsing attributes in process `syz.4.10441'. [ 462.730710][T27769] netlink: 'syz.0.10450': attribute type 1 has an invalid length. [ 462.765655][T27769] netlink: 'syz.0.10450': attribute type 10 has an invalid length. [ 462.805648][T27769] netlink: 'syz.0.10450': attribute type 4 has an invalid length. [ 462.825008][T27769] netlink: 196 bytes leftover after parsing attributes in process `syz.0.10450'. [ 463.199855][T27787] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10460'. [ 463.219889][T27787] 8021q: VLANs not supported on tunl0 [ 463.248191][T27790] .: (slave bond_slave_0): Error -28 calling ndo_bpf [ 463.270066][T27791] netlink: 'syz.1.10458': attribute type 1 has an invalid length. [ 463.761508][T27790] . (unregistering): (slave bond_slave_0): Releasing backup interface [ 463.810503][T27790] . (unregistering): (slave bond_slave_1): Releasing backup interface [ 463.842158][T27790] . (unregistering): (slave batadv0): Releasing backup interface [ 463.872549][T27790] . (unregistering): Released all slaves [ 464.810622][T27866] unknown channel width for channel at 909000KHz? [ 464.830679][T27866] unknown channel width for channel at 909000KHz? [ 464.840806][T27866] unknown channel width for channel at 909000KHz? [ 464.935003][T27874] sctp: [Deprecated]: syz.0.10497 (pid 27874) Use of int in max_burst socket option. [ 464.935003][T27874] Use struct sctp_assoc_value instead [ 465.101462][T27882] __nla_validate_parse: 2 callbacks suppressed [ 465.101485][T27882] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10500'. [ 465.376703][T27896] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10507'. [ 466.711129][T27976] syzkaller1: entered promiscuous mode [ 466.738690][T27976] syzkaller1: entered allmulticast mode [ 466.863767][T27987] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10547'. [ 467.788327][T28039] netlink: 36 bytes leftover after parsing attributes in process `syz.2.10572'. [ 468.456114][T28083] sctp: [Deprecated]: syz.0.10592 (pid 28083) Use of struct sctp_assoc_value in delayed_ack socket option. [ 468.456114][T28083] Use struct sctp_sack_info instead [ 469.083176][T28112] sctp: [Deprecated]: syz.3.10606 (pid 28112) Use of struct sctp_assoc_value in delayed_ack socket option. [ 469.083176][T28112] Use struct sctp_sack_info instead [ 469.104508][T28112] sctp: [Deprecated]: syz.3.10606 (pid 28112) Use of struct sctp_assoc_value in delayed_ack socket option. [ 469.104508][T28112] Use struct sctp_sack_info instead [ 469.289901][ T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 469.301583][ T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.410515][ T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 469.422730][ T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.566514][ T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 469.594189][ T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.780615][ T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 469.812502][ T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.115349][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805c8f6800: rx timeout, send abort [ 470.127547][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805c8f6800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 470.167600][ T5852] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 470.182822][ T5852] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 470.191952][ T5852] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 470.201702][ T5852] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 470.219870][ T13] bridge_slave_1: left allmulticast mode [ 470.226284][ T5852] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 470.288624][ T13] bridge_slave_1: left promiscuous mode [ 470.308945][T28149] netlink: 'syz.0.10621': attribute type 1 has an invalid length. [ 470.319601][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 470.375751][ T13] : left allmulticast mode [ 470.387668][ T13] : left promiscuous mode [ 470.401974][ T13] bridge0: port 1() entered disabled state [ 470.453440][ T5913] hid-generic 0005:16C0:5505.0001: unknown main item tag 0x0 [ 470.474579][ T5913] hid-generic 0005:16C0:5505.0001: unknown main item tag 0x0 [ 470.487972][ T5913] hid-generic 0005:16C0:5505.0001: unknown main item tag 0x0 [ 470.495591][ T5913] hid-generic 0005:16C0:5505.0001: unknown main item tag 0x0 [ 470.513484][ T5913] hid-generic 0005:16C0:5505.0001: unknown main item tag 0x0 [ 470.532212][ T5913] hid-generic 0005:16C0:5505.0001: unknown main item tag 0x0 [ 470.551014][ T5913] hid-generic 0005:16C0:5505.0001: unknown main item tag 0x3 [ 470.567330][ T5913] hid-generic 0005:16C0:5505.0001: unknown main item tag 0x1 [ 470.599122][ T5913] hid-generic 0005:16C0:5505.0001: hidraw0: BLUETOOTH HID v0.8b Device [syz0] on aa:aa:aa:aa:aa:aa [ 470.762270][T28169] netlink: 'syz.4.10627': attribute type 4 has an invalid length. [ 471.876615][T28190] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10633'. [ 471.941035][ T13] bond0 (unregistering): (slave 00FN): Releasing backup interface [ 471.952324][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 471.963456][ T13] bond_slave_1: left allmulticast mode [ 471.979790][ T13] bond0 (unregistering): Released all slaves [ 472.112578][ T13] bond1 (unregistering): Released all slaves [ 472.297467][ T5846] Bluetooth: hci1: command tx timeout [ 472.301828][T28198] netlink: 'syz.2.10635': attribute type 4 has an invalid length. [ 472.350085][ T13] : left promiscuous mode [ 472.461311][ T13] tipc: Disabling bearer [ 472.482539][ T13] tipc: Left network mode [ 472.836369][T28225] netlink: 9 bytes leftover after parsing attributes in process `syz.4.10644'. [ 472.891617][T28229] netlink: 5 bytes leftover after parsing attributes in process `syz.4.10644'. [ 472.939501][T28225] gretap0: entered promiscuous mode [ 473.049509][T28229] 0{X: renamed from gretap0 [ 473.071902][T28232] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 473.089841][T28229] 0{X: left promiscuous mode [ 473.094937][T28229] 0{X: entered allmulticast mode [ 473.143079][T28229] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 474.377739][ T5846] Bluetooth: hci1: command tx timeout [ 474.689135][T28292] macvlan2: entered promiscuous mode [ 474.717811][T28292] bridge0: entered promiscuous mode [ 474.771248][T28295] macvlan3: entered promiscuous mode [ 474.855709][T28141] chnl_net:caif_netlink_parms(): no params data found [ 475.457257][T28141] bridge0: port 1(bridge_slave_0) entered blocking state [ 475.474789][T28141] bridge0: port 1(bridge_slave_0) entered disabled state [ 475.498883][T28141] bridge_slave_0: entered allmulticast mode [ 475.544376][T28141] bridge_slave_0: entered promiscuous mode [ 475.572183][T28141] bridge0: port 2(bridge_slave_1) entered blocking state [ 475.597270][T28141] bridge0: port 2(bridge_slave_1) entered disabled state [ 475.618116][T28141] bridge_slave_1: entered allmulticast mode [ 475.648019][T28141] bridge_slave_1: entered promiscuous mode [ 475.928952][T28141] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 476.008651][T28141] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 476.068532][ T13] hsr_slave_0: left promiscuous mode [ 476.084158][ T13] hsr_slave_1: left promiscuous mode [ 476.095103][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 476.122311][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 476.132724][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 476.152054][ T13] [ 476.154434][ T13] ====================================================== [ 476.161476][ T13] WARNING: possible circular locking dependency detected SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 476.168528][ T13] 6.14.0-syzkaller-13311-g69ae94725f4f #0 Not tainted [ 476.175488][ T13] ------------------------------------------------------ [ 476.182704][ T13] kworker/u8:1/13 is trying to acquire lock: [ 476.188682][ T13] ffff888027b10768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_netdev_notifier_call+0x1b3/0x1430 [ 476.199327][ T13] [ 476.199327][ T13] but task is already holding lock: [ 476.206683][ T13] ffff88805ed14d30 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x5a1/0x2510 [ 476.218264][ T13] [ 476.218264][ T13] which lock already depends on the new lock. [ 476.218264][ T13] [ 476.228654][ T13] [ 476.228654][ T13] the existing dependency chain (in reverse order) is: [ 476.237661][ T13] [ 476.237661][ T13] -> #3 (&dev_instance_lock_key#3){+.+.}-{4:4}: [ 476.246093][ T13] lock_acquire+0x116/0x2f0 [ 476.251113][ T13] __mutex_lock+0x1a5/0x10c0 [ 476.256218][ T13] xsk_bind+0x2fd/0xfb0 [ 476.260880][ T13] __sys_bind+0x1de/0x290 [ 476.265750][ T13] __x64_sys_bind+0x7a/0x90 [ 476.270771][ T13] do_syscall_64+0xf3/0x230 [ 476.275784][ T13] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 476.282203][ T13] [ 476.282203][ T13] -> #2 (&xs->mutex){+.+.}-{4:4}: [ 476.289407][ T13] lock_acquire+0x116/0x2f0 [ 476.294421][ T13] __mutex_lock+0x1a5/0x10c0 [ 476.299614][ T13] xsk_diag_dump+0x5be/0x19d0 [ 476.304803][ T13] netlink_dump+0x678/0xeb0 [ 476.309847][ T13] __netlink_dump_start+0x5a2/0x790 [ 476.315607][ T13] xsk_diag_handler_dump+0x1de/0x270 [ 476.321410][ T13] sock_diag_rcv_msg+0x3dc/0x5f0 [ 476.326946][ T13] netlink_rcv_skb+0x208/0x480 [ 476.332224][ T13] netlink_unicast+0x7f8/0x9a0 [ 476.337511][ T13] netlink_sendmsg+0x8c3/0xcd0 [ 476.342816][ T13] __sock_sendmsg+0x221/0x270 [ 476.348020][ T13] sock_write_iter+0x2d9/0x3f0 [ 476.353357][ T13] do_iter_readv_writev+0x71f/0x9d0 [ 476.359084][ T13] vfs_writev+0x38d/0xbc0 [ 476.363942][ T13] do_writev+0x1b8/0x360 [ 476.368706][ T13] do_syscall_64+0xf3/0x230 [ 476.373725][ T13] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 476.380215][ T13] [ 476.380215][ T13] -> #1 (&net->xdp.lock){+.+.}-{4:4}: [ 476.387860][ T13] lock_acquire+0x116/0x2f0 [ 476.392877][ T13] __mutex_lock+0x1a5/0x10c0 [ 476.397992][ T13] xsk_notifier+0x8b/0x230 [ 476.402927][ T13] notifier_call_chain+0x1a5/0x3f0 [ 476.408720][ T13] unregister_netdevice_many_notify+0x1572/0x2510 [ 476.415644][ T13] unregister_netdevice_queue+0x383/0x400 [ 476.421892][ T13] _cfg80211_unregister_wdev+0x163/0x590 [ 476.428036][ T13] ieee80211_if_remove+0x25d/0x320 [ 476.433656][ T13] ieee80211_del_iface+0x19/0x30 [ 476.439187][ T13] cfg80211_remove_virtual_intf+0x23f/0x410 [ 476.445589][ T13] cfg80211_destroy_ifaces+0x132/0x1d0 [ 476.451560][ T13] cfg80211_destroy_iface_wk+0x21/0x30 [ 476.457543][ T13] process_scheduled_works+0xac3/0x18e0 [ 476.463612][ T13] worker_thread+0x870/0xd50 [ 476.468717][ T13] kthread+0x7b7/0x940 [ 476.473294][ T13] ret_from_fork+0x4b/0x80 [ 476.478216][ T13] ret_from_fork_asm+0x1a/0x30 [ 476.483485][ T13] [ 476.483485][ T13] -> #0 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 476.491211][ T13] validate_chain+0xa69/0x24e0 [ 476.496489][ T13] __lock_acquire+0xad5/0xd80 [ 476.501671][ T13] lock_acquire+0x116/0x2f0 [ 476.506678][ T13] __mutex_lock+0x1a5/0x10c0 [ 476.511788][ T13] cfg80211_netdev_notifier_call+0x1b3/0x1430 [ 476.518553][ T13] notifier_call_chain+0x1a5/0x3f0 [ 476.524178][ T13] __dev_close_many+0x15d/0x760 [ 476.529567][ T13] dev_close_many+0x250/0x4c0 [ 476.534783][ T13] unregister_netdevice_many_notify+0x628/0x2510 [ 476.541643][ T13] default_device_exit_batch+0x7ff/0x880 [ 476.547799][ T13] cleanup_net+0x8af/0xd60 [ 476.552728][ T13] process_scheduled_works+0xac3/0x18e0 [ 476.558799][ T13] worker_thread+0x870/0xd50 [ 476.563921][ T13] kthread+0x7b7/0x940 [ 476.568521][ T13] ret_from_fork+0x4b/0x80 [ 476.573459][ T13] ret_from_fork_asm+0x1a/0x30 [ 476.578828][ T13] [ 476.578828][ T13] other info that might help us debug this: [ 476.578828][ T13] [ 476.589046][ T13] Chain exists of: [ 476.589046][ T13] &rdev->wiphy.mtx --> &xs->mutex --> &dev_instance_lock_key#3 [ 476.589046][ T13] [ 476.602544][ T13] Possible unsafe locking scenario: [ 476.602544][ T13] [ 476.609998][ T13] CPU0 CPU1 [ 476.615359][ T13] ---- ---- [ 476.620712][ T13] lock(&dev_instance_lock_key#3); [ 476.625920][ T13] lock(&xs->mutex); [ 476.632433][ T13] lock(&dev_instance_lock_key#3); [ 476.640236][ T13] lock(&rdev->wiphy.mtx); [ 476.644736][ T13] [ 476.644736][ T13] *** DEADLOCK *** [ 476.644736][ T13] [ 476.652951][ T13] 5 locks held by kworker/u8:1/13: [ 476.658054][ T13] #0: ffff88801bef6148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 [ 476.669132][ T13] #1: ffffc90000127c60 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 [ 476.679693][ T13] #2: ffffffff900efe90 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0x17c/0xd60 [ 476.689130][ T13] #3: ffffffff900fc9c8 (rtnl_mutex){+.+.}-{4:4}, at: default_device_exit_batch+0xde/0x880 [ 476.699168][ T13] #4: ffff88805ed14d30 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x5a1/0x2510 [ 476.711267][ T13] [ 476.711267][ T13] stack backtrace: [ 476.717165][ T13] CPU: 0 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted 6.14.0-syzkaller-13311-g69ae94725f4f #0 PREEMPT(full) [ 476.717182][ T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 476.717203][ T13] Workqueue: netns cleanup_net [ 476.717233][ T13] Call Trace: [ 476.717242][ T13] [ 476.717251][ T13] dump_stack_lvl+0x241/0x360 [ 476.717287][ T13] ? __pfx_dump_stack_lvl+0x10/0x10 [ 476.717303][ T13] ? __pfx__printk+0x10/0x10 [ 476.717321][ T13] ? print_lock+0x171/0x1a0 [ 476.717344][ T13] print_circular_bug+0x2e1/0x300 [ 476.717362][ T13] check_noncircular+0x142/0x160 [ 476.717380][ T13] validate_chain+0xa69/0x24e0 [ 476.717398][ T13] ? __pfx_hlock_conflict+0x10/0x10 [ 476.717413][ T13] ? check_path+0x21/0x40 [ 476.717431][ T13] __lock_acquire+0xad5/0xd80 [ 476.717447][ T13] lock_acquire+0x116/0x2f0 [ 476.717459][ T13] ? cfg80211_netdev_notifier_call+0x1b3/0x1430 [ 476.717484][ T13] __mutex_lock+0x1a5/0x10c0 [ 476.717500][ T13] ? cfg80211_netdev_notifier_call+0x1b3/0x1430 [ 476.717518][ T13] ? validate_chain+0x8a7/0x24e0 [ 476.717535][ T13] ? cfg80211_netdev_notifier_call+0x1b3/0x1430 [ 476.717553][ T13] ? __pfx___mutex_lock+0x10/0x10 [ 476.717574][ T13] cfg80211_netdev_notifier_call+0x1b3/0x1430 [ 476.717594][ T13] ? __pfx_cfg80211_netdev_notifier_call+0x10/0x10 [ 476.717619][ T13] ? __lock_acquire+0xad5/0xd80 [ 476.717632][ T13] ? do_raw_spin_lock+0x151/0x370 [ 476.717657][ T13] ? inetdev_event+0x4fb/0x1740 [ 476.717672][ T13] ? igmp_netdev_event+0x7c/0x770 [ 476.717686][ T13] notifier_call_chain+0x1a5/0x3f0 [ 476.717704][ T13] __dev_close_many+0x15d/0x760 [ 476.717721][ T13] ? __mutex_lock+0x3a0/0x10c0 [ 476.717734][ T13] ? ret_from_fork+0x4b/0x80 [ 476.717748][ T13] ? __pfx___dev_close_many+0x10/0x10 [ 476.717767][ T13] dev_close_many+0x250/0x4c0 [ 476.717784][ T13] ? __pfx_dev_close_many+0x10/0x10 [ 476.717798][ T13] ? __lock_acquire+0xad5/0xd80 [ 476.717813][ T13] unregister_netdevice_many_notify+0x628/0x2510 [ 476.717831][ T13] ? lockdep_hardirqs_on+0x9d/0x150 [ 476.717846][ T13] ? __local_bh_enable_ip+0x168/0x200 [ 476.717859][ T13] ? batadv_tt_local_remove+0x119/0x230 [ 476.717872][ T13] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 476.717884][ T13] ? batadv_tt_local_remove+0x119/0x230 [ 476.717895][ T13] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 476.717914][ T13] ? unregister_netdevice_queue+0x2c4/0x400 [ 476.717930][ T13] ? batadv_meshif_destroy_netlink+0x1e6/0x270 [ 476.717948][ T13] default_device_exit_batch+0x7ff/0x880 [ 476.717969][ T13] ? __pfx_default_device_exit_batch+0x10/0x10 [ 476.717987][ T13] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 476.718005][ T13] ? cfg802154_pernet_exit+0xc3/0xe0 [ 476.718017][ T13] ? __pfx_default_device_exit_batch+0x10/0x10 [ 476.718035][ T13] cleanup_net+0x8af/0xd60 [ 476.718054][ T13] ? __pfx_cleanup_net+0x10/0x10 [ 476.718074][ T13] ? process_scheduled_works+0x9cb/0x18e0 [ 476.718088][ T13] process_scheduled_works+0xac3/0x18e0 [ 476.718113][ T13] ? __pfx_process_scheduled_works+0x10/0x10 [ 476.718129][ T13] ? assign_work+0x367/0x3d0 [ 476.718143][ T13] worker_thread+0x870/0xd50 [ 476.718163][ T13] ? __kthread_parkme+0x1a8/0x200 [ 476.718180][ T13] ? __pfx_worker_thread+0x10/0x10 [ 476.718193][ T13] kthread+0x7b7/0x940 [ 476.718210][ T13] ? __pfx_worker_thread+0x10/0x10 [ 476.718224][ T13] ? __pfx_kthread+0x10/0x10 [ 476.718238][ T13] ? __pfx_kthread+0x10/0x10 [ 476.718253][ T13] ? __pfx_kthread+0x10/0x10 [ 476.718267][ T13] ? __pfx_kthread+0x10/0x10 [ 476.718282][ T13] ? _raw_spin_unlock_irq+0x23/0x50 [ 476.718294][ T13] ? lockdep_hardirqs_on+0x9d/0x150 [ 476.718307][ T13] ? __pfx_kthread+0x10/0x10 [ 476.718322][ T13] ret_from_fork+0x4b/0x80 [ 476.718334][ T13] ? __pfx_kthread+0x10/0x10 [ 476.718349][ T13] ret_from_fork_asm+0x1a/0x30 [ 476.718367][ T13] [ 476.735760][ T5846] Bluetooth: hci1: command tx timeout [ 477.131319][ T13] veth1_macvtap: left promiscuous mode [ 477.151710][ T13] veth1_vlan: left promiscuous mode [ 477.171997][ T13] veth0_vlan: left promiscuous mode [ 477.371479][ T13] team0 (unregistering): Port device team_slave_1 removed [ 477.397368][ T13] team0 (unregistering): Port device team_slave_0 removed