last executing test programs: 56.582731033s ago: executing program 0 (id=11875): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000001c0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@can={{0x4, 0x0, 0x0, 0x1}, 0x6, 0x0, 0x0, 0x0, "a7a278571758745d"}, 0x10}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 47.072729628s ago: executing program 0 (id=11875): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000001c0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@can={{0x4, 0x0, 0x0, 0x1}, 0x6, 0x0, 0x0, 0x0, "a7a278571758745d"}, 0x10}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 39.147973453s ago: executing program 0 (id=11875): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000001c0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@can={{0x4, 0x0, 0x0, 0x1}, 0x6, 0x0, 0x0, 0x0, "a7a278571758745d"}, 0x10}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 29.082494246s ago: executing program 0 (id=11875): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000001c0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@can={{0x4, 0x0, 0x0, 0x1}, 0x6, 0x0, 0x0, 0x0, "a7a278571758745d"}, 0x10}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 16.807213149s ago: executing program 0 (id=11875): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000001c0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@can={{0x4, 0x0, 0x0, 0x1}, 0x6, 0x0, 0x0, 0x0, "a7a278571758745d"}, 0x10}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 12.380328331s ago: executing program 2 (id=12787): r0 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r0, 0x10001) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1}) 12.158089593s ago: executing program 2 (id=12791): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0x220104, 0xe2a4, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00'}, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000000580), 0x2000cc0, r0}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x18, &(0x7f0000000080)={0x0, &(0x7f0000000040)=""/30, &(0x7f0000000240), &(0x7f0000000280), 0x1, r0}, 0x38) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb6000) 10.638581789s ago: executing program 2 (id=12802): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000c80), 0xffffffffffffffff) r2 = socket(0x2a, 0x2, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000380)={0x34, r1, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000810}, 0x4804) 10.287743343s ago: executing program 2 (id=12806): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x2, 0x2, 0x0, @void, @value}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 10.090623913s ago: executing program 2 (id=12810): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22}, {0x2, 0x0, @local}, {0x2, 0x0, @broadcast}, 0x200, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x5}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFBR(r0, 0x890c, &(0x7f0000000000)=@generic={0x0, 0x2}) 9.771204204s ago: executing program 2 (id=12813): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x80000) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) sendmmsg$unix(r1, &(0x7f0000003dc0)=[{{&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x9802}}, {{&(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x299, 0xfdef) 6.495773734s ago: executing program 0 (id=11875): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000001c0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@can={{0x4, 0x0, 0x0, 0x1}, 0x6, 0x0, 0x0, 0x0, "a7a278571758745d"}, 0x10}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 3.273624977s ago: executing program 1 (id=12857): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r0) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r0) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)={0x1c, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) 3.148882115s ago: executing program 1 (id=12858): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) socket$xdp(0x2c, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[], 0x1c}}, 0x24000044) sendmsg$kcm(r0, &(0x7f0000000b00)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x6}, 0x80, &(0x7f0000000100), 0x79}, 0x0) 2.929547057s ago: executing program 1 (id=12861): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x4e2a, @empty}, 0x10) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @rand_addr=0x64010100}, 0x10) 2.359455289s ago: executing program 1 (id=12863): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005345c0f63cdc2e82818254950ee03568b8809a1f04c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab66c1aae9314d7381fcfeb970bea672010000000000000043144648a07a975bd89dc398712376610faa54f12495b4659be8673086f6f3543205d4bc4ce05b8b961103673dff7f158052e62bfbdcddde6985f3f1ac5d9a94cc53207899762a07282a1914452d11858e795a3ca30a101af5574f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5ed44039aab46419496362e54cfad05b4004ac71a003d7b85d07191bed4e5a8908263722d4146f7ed569985439baa355cf3d8731f5e7a237bc06d035a8d601f21746d880819f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c5b9f87d988c9fbd2b9d9b4e2d71753b1549fa734f0b2e5fcf9549804cddad721971637f9c9730a9cc384eed30345979db9c93e1c52f42cad0a4d4f9436d3f39b0ed09c395dc6e970366087a8e4daeeb1b017006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f710c490ecd085d2811a7555c53030000007f00000000bfa6478eb96b079c277e2910b7ccdc3d672ed34aa65278c549e2abb549ad954884289130bc71cee2b7de62bf48129ae1af052a2d46a6165eb0954dac7265f1f425735acf6377793946b3229e861d8ea49806b3b533345d36ecef9df700000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c000000aaae37f044bcadeb0f6846582b7653665aa336db9f0384d3c7ddf79c2e0000000000000000000000000000000000000000000000e154aa0d3e41986a668ee1e5ef93a8ceac75f44aae95e26742f895f287111f8ee86f7e3ffb63cfb0e345cf7fc63dd2b0d30977899c6f03640040af4db71f7452bfc79a05118d8bb42b63b195771e42f9942ec626bd4b5461b74324012164e8"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000640)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="02"], 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) 2.20166833s ago: executing program 1 (id=12865): sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x1, 0x0, 0x8, 0x9, 0x0, 0x20000, 0x0, [@sadb_address={0x5, 0x6, 0x33, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private2}}, @sadb_sa={0x2, 0x1, 0x4d4, 0x6, 0x2, 0xbb, 0x3, 0x80000001}]}, 0x48}, 0x1, 0x7}, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r2, @ANYBLOB="08002600851600000a00180000000000000000001c005a801800018014"], 0x4c}}, 0x0) 2.144309267s ago: executing program 3 (id=12866): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c03000017"], 0x34c}, 0x1, 0x0, 0x0, 0x1}, 0x4040000) 1.841120753s ago: executing program 1 (id=12869): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000080)="4b97", 0x2}], 0x1}}], 0x1, 0x24008804) sendmmsg$alg(r1, &(0x7f0000000380)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4010}], 0x1, 0x10) 1.385892894s ago: executing program 3 (id=12870): r0 = socket$kcm(0xa, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffeffff, @void, @value}, 0x94) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000a00)=@generic={0xa, "8ab77fa26849ff26650042e2dacd00005efe0000000100ad6f9fa9f3d7145e15dd9d6d2e19c211220940ad5def53b911ba5b9da13641f9826d7012a749f54b901ee80ea6132ca6e88c776553e1833052ca376304313c4b37780136a4b83857040000000000000000000000000000002000000000000000000000000070ed"}, 0x80, 0x0}, 0x4020800) 1.379871174s ago: executing program 4 (id=12871): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f00000005c0)='cgroup.freeze\x00', 0x275a, 0x0) sendfile(r0, r2, 0x0, 0xffffffff002) 1.161325336s ago: executing program 4 (id=12872): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x5c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @random="1338f9b3fbeb"}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x4000, 0x2, 0x0, 0x0, {0x7ff, 0xb2, 0x0, 0x8, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x8, 0x9, 0x6}}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x5c}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x5, [{0x2, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x33) 1.150569709s ago: executing program 3 (id=12873): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x14, r2, 0x2ac6d477bcf2db69, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x801}, 0x4004880) 981.030126ms ago: executing program 3 (id=12874): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000002400)=ANY=[@ANYBLOB="000086dd000311000400000000006eec00be10a42f01fe8000000000000000000000000000aaff02000000000000000000000000000133"], 0x10da) 643.338752ms ago: executing program 3 (id=12875): writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000000)="480000001500190a20ffff7fff", 0xd}], 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) socket$packet(0x11, 0x2, 0x300) 455.28538ms ago: executing program 4 (id=12876): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x12, 0x1, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r0, &(0x7f00000001c0), &(0x7f0000000280)=@udp=r1}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r0, &(0x7f0000000640)="b4", &(0x7f0000000180)=@udp=r1}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000780)={r0, &(0x7f0000000380), 0x0}, 0x20) 382.954931ms ago: executing program 4 (id=12877): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001480)={0x80, r1, 0x1, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x8, 0xcd, [0xe, 0x41]}, @NL80211_ATTR_FRAME={0x5b, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x6}, @broadcast, @broadcast, @initial, {0x7, 0x6}}, 0x2, @default, 0x20, @void, @void, @val={0x3, 0x1, 0xb1}, @val={0x4, 0x6, {0x4, 0x3, 0x40d, 0x6}}, @val={0x6, 0x2, 0x9}, @val={0x5, 0x3, {0x92, 0x7f, 0x4}}, @val={0x25, 0x3, {0x0, 0x88, 0x4}}, @val={0x2a, 0x1, {0x1}}, @val={0x3c, 0x4, {0x1, 0x2, 0x68, 0xb3}}, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0x1, 0x1, 0xffffffffffffffff, 0x1, 0x1, 0x2, 0x8}}, @void}}]}, 0x80}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 134.461413ms ago: executing program 3 (id=12878): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x80, r1, 0x5, 0x0, 0x3, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x4b, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @val, @void, @val={0x4, 0x6, {0x3, 0x7, 0x7f, 0xfc}}, @void, @void, @val={0x25, 0x3, {0x0, 0x34, 0x4}}, @val={0x2a, 0x1, {0x1}}, @void, @void, @void, @val={0x71, 0x7, {0x0, 0x0, 0x0, 0x0, 0x1, 0x6, 0x8}}, @val={0x76, 0x6, {0x9, 0x2, 0xff7f, 0xe9}}}}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x9}]}, 0x80}}, 0x0) 69.545812ms ago: executing program 4 (id=12879): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x303, 0x3a}, "c4d65ab71f5ef2fe", "9e8ecc7bb5352776725e104757e7dc25c6519a85ef828f711330ff2bb17b5508", "dc5db43f"}, 0x38) 0s ago: executing program 4 (id=12880): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0xc37c}, 0x18) unshare(0x24060400) r1 = socket$can_j1939(0x1d, 0x2, 0x7) readv(r1, 0x0, 0x0) kernel console output (not intermixed with test programs): er , priority 10 [ 499.981655][T22984] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 500.032179][T22988] __nla_validate_parse: 4 callbacks suppressed [ 500.032201][T22988] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7945'. [ 500.372474][T23005] netlink: 'syz.0.7952': attribute type 1 has an invalid length. [ 500.399925][T23005] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 500.713404][T23020] sctp: [Deprecated]: syz.3.7961 (pid 23020) Use of int in max_burst socket option deprecated. [ 500.713404][T23020] Use struct sctp_assoc_value instead [ 500.734409][ T5888] tipc: Node number set to 2130706433 [ 500.990027][T23031] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 501.446303][T23048] tipc: Started in network mode [ 501.451487][T23048] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 501.462423][T23048] tipc: Enabling of bearer rejected, failed to enable media [ 501.543200][T23052] tipc: Enabling of bearer rejected, failed to enable media [ 501.718678][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.180547][T23132] siw: device registration error -23 [ 503.445201][T23147] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8023'. [ 504.188599][T23182] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8040'. [ 504.357919][T23190] netlink: 'syz.2.8043': attribute type 3 has an invalid length. [ 504.944967][T23224] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8056'. [ 505.854919][T23265] tipc: Enabling of bearer rejected, failed to enable media [ 506.143969][T23275] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8083'. [ 506.183652][T23275] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 506.325946][T23281] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8086'. [ 506.534430][T23292] netlink: 'syz.4.8091': attribute type 3 has an invalid length. [ 506.750089][T23303] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 506.831790][T23308] geneve0: entered allmulticast mode [ 506.875177][T23312] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8101'. [ 507.067993][T23322] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8106'. [ 507.154423][ T5852] Bluetooth: hci3: command 0x0406 tx timeout [ 507.670069][T23351] netlink: 'syz.1.8120': attribute type 3 has an invalid length. [ 507.702394][T23351] netlink: 'syz.1.8120': attribute type 1 has an invalid length. [ 507.731589][T23351] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.8120'. [ 509.764548][T23428] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8156'. [ 509.786122][T23428] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8156'. [ 510.402611][T23451] nbd: must specify a device to reconfigure [ 510.510727][T23453] sch_tbf: burst 1 is lower than device ip6tnl0 mtu (1452) ! [ 511.985643][T23524] netlink: 'syz.2.8200': attribute type 3 has an invalid length. [ 512.002131][T23527] netlink: 'syz.0.8201': attribute type 1 has an invalid length. [ 512.168487][T23531] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.8202'. [ 512.681886][T23554] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8213'. [ 512.895499][T23566] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8217'. [ 512.933035][T23566] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8217'. [ 513.209150][T23578] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8223'. [ 513.416304][T23584] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8226'. [ 513.476282][T23578] vlan2: entered allmulticast mode [ 513.645766][T23593] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8231'. [ 516.854366][T23742] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8299'. [ 517.203952][T23759] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8306'. [ 517.584967][T23773] team0: No ports can be present during mode change [ 517.884813][T23781] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.059905][T23792] netlink: 203516 bytes leftover after parsing attributes in process `syz.3.8323'. [ 518.082137][T23792] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 518.100858][T23792] openvswitch: netlink: Duplicate key (type 0). [ 518.107294][T23781] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.201080][T23781] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.228180][T23796] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8325'. [ 518.241733][T23798] tap0: tun_chr_ioctl cmd 2148553947 [ 518.550965][T23796] team0 (unregistering): Port device team_slave_0 removed [ 518.563255][T23796] team0 (unregistering): Port device team_slave_1 removed [ 518.585584][T23796] team0 (unregistering): Port device bridge5 removed [ 518.669453][T23781] netdevsim netdevsim0 netdevsim0 (unregistering): left allmulticast mode [ 518.701145][T23781] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.737644][T23809] netlink: 6 bytes leftover after parsing attributes in process `syz.2.8330'. [ 518.914886][T23781] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.976825][T23781] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.017356][T23818] tun0: tun_chr_ioctl cmd 1074025681 [ 519.039152][T23820] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 519.050349][T23781] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.137013][T23781] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.967750][T23859] netlink: ct family unspecified [ 519.984571][T23859] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 520.005487][T23860] geneve4: entered allmulticast mode [ 520.674380][T23885] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8366'. [ 521.250029][T23897] mac80211_hwsim hwsim8 wlan1: entered promiscuous mode [ 521.438801][T23915] netlink: 'syz.1.8379': attribute type 1 has an invalid length. [ 521.464208][T23915] netlink: 180 bytes leftover after parsing attributes in process `syz.1.8379'. [ 521.948309][T23942] netlink: 'syz.0.8392': attribute type 12 has an invalid length. [ 521.964187][T23942] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8392'. [ 522.002931][T23942] netlink: 'syz.0.8392': attribute type 12 has an invalid length. [ 522.448500][T23962] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 523.101036][T23982] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8412'. [ 523.320059][T23996] netlink: 44 bytes leftover after parsing attributes in process `syz.2.8419'. [ 523.468075][T23999] vxcan0: tx address claim with different name [ 523.494734][T24002] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8422'. [ 523.618198][T24006] bond0: entered promiscuous mode [ 523.623322][T24006] bond_slave_0: entered promiscuous mode [ 523.656126][T24006] bond_slave_1: entered promiscuous mode [ 523.662920][T24010] netlink: 104 bytes leftover after parsing attributes in process `syz.0.8426'. [ 523.675058][T24006] bond0: left promiscuous mode [ 523.690569][T24006] bond_slave_0: left promiscuous mode [ 523.705779][T24006] bond_slave_1: left promiscuous mode [ 524.153933][T24035] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 524.951547][T24063] sctp: [Deprecated]: syz.1.8446 (pid 24063) Use of int in maxseg socket option. [ 524.951547][T24063] Use struct sctp_assoc_value instead [ 525.202863][T24080] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8455'. [ 525.423604][T24090] netlink: 32 bytes leftover after parsing attributes in process `syz.3.8460'. [ 525.470023][T24090] netlink: 32 bytes leftover after parsing attributes in process `syz.3.8460'. [ 525.604385][T24096] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 525.741719][T24098] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8464'. [ 525.841497][T24098] bond4: entered promiscuous mode [ 525.847309][T24098] 8021q: adding VLAN 0 to HW filter on device bond4 [ 526.133432][T24113] xt_CT: No such helper "snmp" [ 526.187102][T24098] bond4 (unregistering): Released all slaves [ 526.797206][T24146] netlink: 'syz.0.8485': attribute type 9 has an invalid length. [ 526.822525][T24146] netlink: 200108 bytes leftover after parsing attributes in process `syz.0.8485'. [ 526.875081][T24146] openvswitch: netlink: Message has 5 unknown bytes. [ 527.035357][T24161] macsec0: entered promiscuous mode [ 527.040834][T24161] mac80211_hwsim hwsim7 wlan0: entered promiscuous mode [ 527.049225][T24161] macsec0: entered allmulticast mode [ 527.072308][T24161] mac80211_hwsim hwsim7 wlan0: entered allmulticast mode [ 527.743054][T24191] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8506'. [ 528.499519][T24223] netlink: 136 bytes leftover after parsing attributes in process `syz.1.8521'. [ 528.514446][T24223] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 529.117717][T24254] netlink: 'syz.0.8534': attribute type 2 has an invalid length. [ 529.408429][T24266] tipc: Enabling of bearer rejected, failed to enable media [ 529.939981][T24289] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8551'. [ 529.977839][T24289] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8551'. [ 530.233052][T24302] macsec1: entered promiscuous mode [ 530.241993][T24302] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 530.250808][T24302] macsec1: entered allmulticast mode [ 530.264165][T24302] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 530.285251][T24304] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8555'. [ 530.555678][T24317] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8563'. [ 530.632302][T24321] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 530.658475][T24323] netlink: 'syz.4.8565': attribute type 11 has an invalid length. [ 530.852619][T24325] 8021q: adding VLAN 0 to HW filter on device bond6 [ 530.895027][T24325] bond0: (slave bond6): Enslaving as an active interface with a down link [ 530.962986][T24337] netlink: 'syz.2.8571': attribute type 2 has an invalid length. [ 532.585462][T24387] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8594'. [ 532.610714][T24388] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8593'. [ 532.960960][T24404] bond0: (slave bond6): Error -95 calling ndo_bpf [ 533.121388][T24404] 8021q: adding VLAN 0 to HW filter on device bond0 [ 533.142863][T24404] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 533.165764][T15885] bond0: (slave bond_slave_0): link status definitely down, disabling slave [ 533.184719][T15885] bond0: (slave bond_slave_1): link status definitely down, disabling slave [ 533.207014][T15885] bond0: now running without any active interface! [ 533.888131][T24443] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8618'. [ 533.933141][T24443] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8618'. [ 533.990555][T24448] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8620'. [ 534.106442][T24448] bond2: entered promiscuous mode [ 534.136936][T24448] 8021q: adding VLAN 0 to HW filter on device bond2 [ 534.263485][T24448] bond2 (unregistering): Released all slaves [ 536.032522][T24492] wireguard0: entered promiscuous mode [ 536.055325][T24492] wireguard0: entered allmulticast mode [ 536.168478][T24496] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.8637'. [ 537.268385][T24539] bridge0: port 3(ipvlan2) entered blocking state [ 537.285937][T24539] bridge0: port 3(ipvlan2) entered disabled state [ 537.292660][T24539] ipvlan2: entered allmulticast mode [ 537.312973][T24539] bridge0: entered allmulticast mode [ 537.334689][T24539] ipvlan2: left allmulticast mode [ 537.341686][T24539] bridge0: left allmulticast mode [ 537.597306][T24549] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8661'. [ 537.608449][T24549] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8661'. [ 538.671962][T24588] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8677'. [ 538.706759][T24582] xt_CT: No such helper "snmp" [ 539.685672][T24620] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8691'. [ 541.271550][T24673] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8717'. [ 541.739269][T24688] 8021q: adding VLAN 0 to HW filter on device bond0 [ 541.758103][T24688] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 542.305391][T24717] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8738'. [ 542.329785][T24717] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8738'. [ 542.836876][T24743] netlink: 'syz.0.8750': attribute type 2 has an invalid length. [ 542.857193][T24743] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8750'. [ 542.905021][T24747] netlink: 'syz.3.8752': attribute type 4 has an invalid length. [ 542.912822][T24747] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8752'. [ 543.152185][T24758] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8757'. [ 543.537737][T24778] netlink: 'syz.3.8766': attribute type 1 has an invalid length. [ 543.584219][T24778] netlink: 180 bytes leftover after parsing attributes in process `syz.3.8766'. [ 543.683032][T24782] netlink: 'syz.2.8767': attribute type 4 has an invalid length. [ 543.955414][T24788] 8021q: adding VLAN 0 to HW filter on device bond2 [ 544.116947][T24797] netlink: 124 bytes leftover after parsing attributes in process `syz.0.8773'. [ 546.089033][T24861] openvswitch: netlink: VXLAN extension message has 2 unknown bytes. [ 546.386543][T24876] macvtap1: entered promiscuous mode [ 546.391924][T24876] hsr0: entered promiscuous mode [ 546.425596][T24876] hsr0: left promiscuous mode [ 546.940393][T24899] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.8822'. [ 547.045897][T24902] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8823'. [ 547.066367][T24902] netem: change failed [ 547.079316][T24907] netlink: 104 bytes leftover after parsing attributes in process `syz.1.8825'. [ 547.471364][T24922] wireguard0: entered promiscuous mode [ 547.480310][T24922] wireguard0: entered allmulticast mode [ 548.515928][T24963] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8852'. [ 548.690437][T24973] netlink: 'syz.0.8856': attribute type 1 has an invalid length. [ 548.716788][T24973] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 548.734898][T24975] netlink: 22 bytes leftover after parsing attributes in process `syz.1.8857'. [ 548.859962][T24981] netlink: 'syz.4.8860': attribute type 4 has an invalid length. [ 549.246403][T24997] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8868'. [ 549.421795][T25006] netlink: 'syz.2.8874': attribute type 1 has an invalid length. [ 549.444162][T25006] netlink: 172 bytes leftover after parsing attributes in process `syz.2.8874'. [ 549.955365][T25023] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.8881'. [ 550.484615][T25038] bridge: RTM_NEWNEIGH with invalid state 0x0 [ 551.104954][T25062] sctp: [Deprecated]: syz.3.8899 (pid 25062) Use of struct sctp_assoc_value in delayed_ack socket option. [ 551.104954][T25062] Use struct sctp_sack_info instead [ 551.845273][T25094] netlink: 11 bytes leftover after parsing attributes in process `syz.1.8913'. [ 552.869422][T25143] netlink: 52 bytes leftover after parsing attributes in process `syz.2.8934'. [ 553.770864][T25179] delete_channel: no stack [ 554.104101][T25193] netem: incorrect ge model size [ 554.112297][T25193] netem: change failed [ 554.147522][T25197] bridge_slave_0: default FDB implementation only supports local addresses [ 554.299947][T25204] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8960'. [ 554.552809][T25204] team0 (unregistering): Port device team_slave_0 removed [ 554.570732][T25204] team0 (unregistering): Port device team_slave_1 removed [ 554.863116][T25224] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8969'. [ 555.081172][T25226] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8971'. [ 555.249260][T25237] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8977'. [ 555.275740][T25237] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8977'. [ 556.095549][T25268] netlink: 44 bytes leftover after parsing attributes in process `syz.3.8989'. [ 556.401720][T25272] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8991'. [ 556.533748][T25277] bond0: Device is already in use. [ 557.513678][T25322] netlink: 160 bytes leftover after parsing attributes in process `syz.3.9013'. [ 557.583290][T25324] batadv_slave_1: entered promiscuous mode [ 557.605337][T25324] batadv_slave_1: left promiscuous mode [ 557.682872][T25328] 8021q: adding VLAN 0 to HW filter on device bond3 [ 557.693277][T25328] bond0: (slave bond3): Enslaving as an active interface with an up link [ 558.280526][T25359] openvswitch: netlink: IPv4 tunnel dst address is zero [ 558.765625][T25381] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9043'. [ 560.453337][T25426] netlink: 'syz.1.9060': attribute type 4 has an invalid length. [ 560.478787][T25426] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9060'. [ 560.801907][T25444] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9068'. [ 560.988531][T25454] netlink: 'syz.2.9073': attribute type 1 has an invalid length. [ 560.998969][T25454] netlink: 16166 bytes leftover after parsing attributes in process `syz.2.9073'. [ 561.501471][T25475] blkio.reset_stats is deprecated [ 561.972332][T25498] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9093'. [ 562.237022][T25511] Bluetooth: hci3: Opcode 0x0401 failed: -4 [ 563.097903][T25541] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9115'. [ 563.107961][T25541] netlink: 'syz.3.9115': attribute type 9 has an invalid length. [ 563.127564][T25541] macvlan5: entered allmulticast mode [ 563.133281][T25541] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 563.160524][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.478329][T25557] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 564.079538][T25584] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9134'. [ 564.274440][ T5852] Bluetooth: hci3: command 0x0406 tx timeout [ 564.304215][T25589] gtp1: entered promiscuous mode [ 564.309271][T25589] gtp1: entered allmulticast mode [ 565.084977][T25626] tap0: tun_chr_ioctl cmd 1074025677 [ 565.090562][T25626] tap0: linktype set to 825 [ 565.436460][T25640] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 565.709127][T25650] netlink: 'syz.4.9163': attribute type 2 has an invalid length. [ 566.555624][T25688] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9182'. [ 566.582404][T25688] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 566.869337][T25696] pimreg: entered allmulticast mode [ 566.902326][T25695] pimreg: left allmulticast mode [ 567.502505][T25731] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9202'. [ 567.521003][T25731] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 567.562418][T25731] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 568.492693][T25777] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 569.198245][T25817] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9237'. [ 569.393762][T25824] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9240'. [ 569.517338][T25830] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9243'. [ 569.544448][T25830] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9243'. [ 570.341063][T25863] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9256'. [ 570.597944][T25872] nr0: tun_chr_ioctl cmd 2147767521 [ 570.626521][T25874] netlink: 84 bytes leftover after parsing attributes in process `syz.4.9263'. [ 570.637806][T25874] netem: invalid attributes len -16 [ 570.643140][T25874] netem: change failed [ 571.659616][T25916] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9280'. [ 572.294262][T25941] block nbd1: server does not support multiple connections per device. [ 572.321736][T25941] block nbd1: shutting down sockets [ 573.410610][T26000] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9320'. [ 573.429775][T26000] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 573.761658][T26014] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 573.836279][T26017] netlink: 'syz.4.9327': attribute type 1 has an invalid length. [ 573.870838][T26017] netlink: 232 bytes leftover after parsing attributes in process `syz.4.9327'. [ 573.884697][T26017] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9327'. [ 574.348755][T26041] __nla_validate_parse: 1 callbacks suppressed [ 574.348778][T26041] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9339'. [ 574.402173][T26041] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9339'. [ 574.485618][ T1343] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 574.532370][ T1343] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 574.540542][ T9786] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 575.174250][ T9786] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 575.397486][ T9786] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 575.752116][T26103] netlink: 'syz.4.9368': attribute type 5 has an invalid length. [ 576.955074][T26161] syzkaller0: tun_chr_ioctl cmd 2148553947 [ 577.101369][T26167] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9397'. [ 577.941339][T26204] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9414'. [ 578.434203][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 579.907112][T26273] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 579.970796][T26272] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 581.059607][T26326] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 581.151333][T26332] netlink: 'syz.2.9472': attribute type 9 has an invalid length. [ 581.189845][T26332] netlink: 212260 bytes leftover after parsing attributes in process `syz.2.9472'. [ 581.990204][T26360] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9485'. [ 582.174981][T26367] (unnamed net_device) (uninitialized): ARP target 9.0.0.0 is already present [ 582.192317][T26367] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (9) [ 583.052562][T26409] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9509'. [ 583.101814][T26409] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 583.314551][T26421] mac80211_hwsim hwsim7 wlan0: left allmulticast mode [ 583.334154][T26421] mac80211_hwsim hwsim7 wlan0: left promiscuous mode [ 583.374928][T26423] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9515'. [ 583.457879][T26426] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9515'. [ 583.802016][T26440] netlink: 'syz.1.9523': attribute type 1 has an invalid length. [ 583.834334][T26440] netlink: 244 bytes leftover after parsing attributes in process `syz.1.9523'. [ 584.068327][T26451] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9528'. [ 584.268278][T26460] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.9533'. [ 584.274667][T26459] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9532'. [ 584.282202][T26460] netlink: get zone limit has 8 unknown bytes [ 584.294891][T26459] batadv2: left allmulticast mode [ 584.310691][T26459] batadv2: left promiscuous mode [ 584.321096][T26459] bridge0: port 4(batadv2) entered disabled state [ 584.339993][T26459] team0: left allmulticast mode [ 584.360116][T26459] team_slave_0: left allmulticast mode [ 584.371724][T26459] team_slave_1: left allmulticast mode [ 584.384182][T26459] team0: left promiscuous mode [ 584.393590][T26459] team_slave_0: left promiscuous mode [ 584.413062][T26459] team_slave_1: left promiscuous mode [ 584.430133][T26459] bridge0: port 3(team0) entered disabled state [ 584.475536][T26459] bridge_slave_1: left allmulticast mode [ 584.492500][T26459] bridge_slave_1: left promiscuous mode [ 584.503762][T26470] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9538'. [ 584.523345][T26459] bridge0: port 2(bridge_slave_1) entered disabled state [ 584.593354][T26459] bridge_slave_0: left promiscuous mode [ 584.609199][T26459] bridge0: port 1(bridge_slave_0) entered disabled state [ 585.005146][T26489] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 585.331864][T26504] sit0: entered promiscuous mode [ 585.378058][T26504] netlink: 'syz.0.9552': attribute type 1 has an invalid length. [ 586.194215][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 586.866448][T26583] __nla_validate_parse: 2 callbacks suppressed [ 586.866468][T26583] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9584'. [ 587.537742][T26617] sctp: [Deprecated]: syz.4.9600 (pid 26617) Use of int in max_burst socket option deprecated. [ 587.537742][T26617] Use struct sctp_assoc_value instead [ 587.745129][T26626] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9604'. [ 587.891396][T26634] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9608'. [ 587.917442][T26634] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9608'. [ 588.156926][T26649] tun0: tun_chr_ioctl cmd 1074025677 [ 588.169090][T26649] tun0: linktype set to 778 [ 589.123118][T26685] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9629'. [ 591.051589][T26747] netlink: 'syz.0.9658': attribute type 1 has an invalid length. [ 591.078572][T26747] netlink: 'syz.0.9658': attribute type 4 has an invalid length. [ 591.095305][T26747] netlink: 188 bytes leftover after parsing attributes in process `syz.0.9658'. [ 591.106282][T26747] NCSI netlink: No device for ifindex 458760 [ 591.307688][T26757] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 591.544413][T26764] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9666'. [ 591.652873][T26774] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9671'. [ 591.677700][T26774] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 591.899376][T26789] netlink: 27 bytes leftover after parsing attributes in process `syz.3.9677'. [ 592.139078][T26802] netlink: 52 bytes leftover after parsing attributes in process `syz.0.9683'. [ 592.519042][T26817] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9690'. [ 592.965242][T26824] tipc: Cannot configure node identity twice [ 593.682239][T26853] tap0: tun_chr_ioctl cmd 1074025677 [ 593.696774][T26853] tap0: linktype set to 804 [ 594.113098][T26873] openvswitch: netlink: Multiple metadata blocks provided [ 594.290072][T26884] sctp: [Deprecated]: syz.2.9719 (pid 26884) Use of struct sctp_assoc_value in delayed_ack socket option. [ 594.290072][T26884] Use struct sctp_sack_info instead [ 594.362246][T26888] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 594.544655][T26898] netlink: 27 bytes leftover after parsing attributes in process `syz.0.9727'. [ 595.153929][T26921] netlink: 'syz.3.9737': attribute type 1 has an invalid length. [ 595.522446][T26938] tun0: tun_chr_ioctl cmd 1074812117 [ 596.755595][T26974] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9759'. [ 596.792823][T26974] netlink: 32 bytes leftover after parsing attributes in process `syz.1.9759'. [ 596.958066][T26979] vlan4: entered promiscuous mode [ 597.039181][T26979] bond0: entered promiscuous mode [ 597.074302][T26979] bond_slave_0: entered promiscuous mode [ 597.118421][T26979] bond_slave_1: entered promiscuous mode [ 597.146886][T26979] vlan4: entered allmulticast mode [ 597.209852][T26985] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9764'. [ 597.255260][T26979] bond0: entered allmulticast mode [ 597.260781][T26979] bond_slave_0: entered allmulticast mode [ 597.278411][T26979] bond_slave_1: entered allmulticast mode [ 597.645520][T26998] netlink: 124 bytes leftover after parsing attributes in process `syz.2.9766'. [ 598.024163][T27012] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9774'. [ 598.276443][T27027] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9779'. [ 598.528318][T27034] netlink: 10 bytes leftover after parsing attributes in process `syz.4.9783'. [ 599.561101][T27089] netlink: 80 bytes leftover after parsing attributes in process `syz.3.9810'. [ 599.937069][T27106] netlink: 52 bytes leftover after parsing attributes in process `syz.3.9817'. [ 600.540471][T27136] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9830'. [ 601.554219][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 601.824759][T27193] netlink: 300 bytes leftover after parsing attributes in process `syz.1.9856'. [ 602.660991][T27226] sch_tbf: burst 0 is lower than device veth0_to_team mtu (1514) ! [ 603.440042][T27255] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 604.114275][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 604.592389][T27306] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9911'. [ 605.106345][T27341] tun0: tun_chr_ioctl cmd 1074812118 [ 605.133146][T27340] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9923'. [ 605.434559][T27356] netlink: 'syz.1.9931': attribute type 1 has an invalid length. [ 605.894919][T27373] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9940'. [ 606.446751][T27403] netlink: 356 bytes leftover after parsing attributes in process `syz.2.9954'. [ 607.673845][T27465] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 607.906522][T27475] netlink: 52 bytes leftover after parsing attributes in process `syz.2.9985'. [ 608.150904][T27481] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9988'. [ 609.845341][T27557] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 611.120617][T27622] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10051'. [ 611.384857][T27633] vcan1: entered allmulticast mode [ 611.633755][T27639] Bluetooth: hci1: Opcode 0x080f failed: -4 [ 611.727939][T27643] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10060'. [ 611.748963][T27643] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10060'. [ 611.776167][T27643] netlink: 'syz.2.10060': attribute type 18 has an invalid length. [ 612.124988][T27661] sctp: [Deprecated]: syz.2.10068 (pid 27661) Use of int in max_burst socket option. [ 612.124988][T27661] Use struct sctp_assoc_value instead [ 612.362647][T27671] gtp0: entered promiscuous mode [ 612.370580][T27671] gtp0: entered allmulticast mode [ 612.741879][T27688] netlink: 22 bytes leftover after parsing attributes in process `syz.4.10080'. [ 613.549538][T27711] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10090'. [ 613.634427][ T5852] Bluetooth: hci1: command 0x0406 tx timeout [ 614.350090][T27752] netlink: 'syz.0.10108': attribute type 25 has an invalid length. [ 614.385954][T27752] netlink: 'syz.0.10108': attribute type 7 has an invalid length. [ 614.946162][T27784] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10125'. [ 614.960776][T27784] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10125'. [ 615.890594][T27831] netlink: 'syz.3.10147': attribute type 5 has an invalid length. [ 616.673058][T27862] vcan1: entered allmulticast mode [ 616.786634][T27868] netlink: 'syz.3.10165': attribute type 1 has an invalid length. [ 616.818783][T27868] netlink: 'syz.3.10165': attribute type 10 has an invalid length. [ 616.845337][T27868] netlink: 236 bytes leftover after parsing attributes in process `syz.3.10165'. [ 617.279674][ T30] audit: type=1804 audit(1749096063.799:7): pid=27884 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.10172" name="/newroot/2072/cgroup.controllers" dev="tmpfs" ino=10408 res=1 errno=0 [ 617.319909][T27880] xt_CT: No such helper "snmp" [ 617.344069][ T30] audit: type=1800 audit(1749096063.799:8): pid=27884 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.10172" name="cgroup.controllers" dev="tmpfs" ino=10408 res=0 errno=0 [ 617.414050][ T30] audit: type=1800 audit(1749096063.829:9): pid=27884 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.10172" name="cgroup.controllers" dev="tmpfs" ino=10408 res=0 errno=0 [ 617.761823][T27910] netlink: 244 bytes leftover after parsing attributes in process `syz.4.10183'. [ 617.838742][T27912] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 618.092260][T27922] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10189'. [ 618.095407][T27914] netlink: 'syz.0.10185': attribute type 1 has an invalid length. [ 618.124152][T27914] nbd: error processing sock list [ 618.129864][T27914] block nbd1: shutting down sockets [ 618.789873][T27961] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10205'. [ 618.887112][T27964] netlink: 'syz.0.10207': attribute type 58 has an invalid length. [ 618.898863][T27964] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10207'. [ 619.699825][T28004] C: renamed from team_slave_0 [ 619.722256][T28004] netlink: 'syz.1.10226': attribute type 4 has an invalid length. [ 619.739618][T28004] netlink: 152 bytes leftover after parsing attributes in process `syz.1.10226'. [ 619.749467][T28004] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 620.059978][T28022] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10234'. [ 620.272309][T28031] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10238'. [ 620.774191][T28050] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10245'. [ 620.802570][T28050] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10245'. [ 622.225418][T28122] dummy0 speed is unknown, defaulting to 1000 [ 622.240627][T28122] dummy0 speed is unknown, defaulting to 1000 [ 622.260925][T28122] dummy0 speed is unknown, defaulting to 1000 [ 622.315071][T28122] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 622.389342][T28122] dummy0 speed is unknown, defaulting to 1000 [ 622.437821][T28122] dummy0 speed is unknown, defaulting to 1000 [ 622.450349][T28122] dummy0 speed is unknown, defaulting to 1000 [ 622.461866][T28122] dummy0 speed is unknown, defaulting to 1000 [ 622.471078][T28122] dummy0 speed is unknown, defaulting to 1000 [ 623.135658][T28158] netlink: 'syz.2.10294': attribute type 9 has an invalid length. [ 623.179609][T28158] netlink: 211988 bytes leftover after parsing attributes in process `syz.2.10294'. [ 623.423601][T28168] vlan2: entered promiscuous mode [ 623.433877][T28168] gretap0: entered promiscuous mode [ 623.787090][T28187] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10308'. [ 624.093452][T28206] netlink: 277 bytes leftover after parsing attributes in process `syz.3.10316'. [ 624.466348][T28222] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.10324'. [ 625.416532][T28266] netlink: 36 bytes leftover after parsing attributes in process `syz.1.10339'. [ 625.438467][T28267] netlink: 'syz.0.10341': attribute type 10 has an invalid length. [ 625.461836][T28267] dummy0: entered promiscuous mode [ 625.468594][T28267] dummy0: entered allmulticast mode [ 626.305962][T28293] netlink: 'syz.4.10352': attribute type 2 has an invalid length. [ 626.438062][T28301] netlink: 104 bytes leftover after parsing attributes in process `syz.4.10357'. [ 627.263583][T28350] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10377'. [ 628.738165][T28425] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10412'. [ 630.028622][T28491] veth0_to_bridge: entered promiscuous mode [ 630.039604][T28490] veth0_to_bridge: left promiscuous mode [ 630.120299][T28497] netlink: 'syz.4.10441': attribute type 8 has an invalid length. [ 631.207910][T28537] tap0: tun_chr_ioctl cmd 1074025678 [ 631.219301][T28537] tap0: group set to 0 [ 631.824446][T28566] batadv_slave_1: entered promiscuous mode [ 631.877758][T28570] netlink: 'syz.2.10473': attribute type 1 has an invalid length. [ 631.943343][T28572] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10475'. [ 632.274218][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 632.276826][T28589] netlink: 87 bytes leftover after parsing attributes in process `syz.1.10483'. [ 632.344902][T28591] bridge: RTM_NEWNEIGH with unconfigured vlan 1 on bridge0 [ 632.775004][T28615] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10493'. [ 633.422315][T28640] ipvlan3: entered promiscuous mode [ 633.433160][T28640] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 634.112864][T28674] netlink: 'syz.1.10521': attribute type 1 has an invalid length. [ 634.132221][T28674] netlink: 224 bytes leftover after parsing attributes in process `syz.1.10521'. [ 634.609539][T28702] netlink: 256 bytes leftover after parsing attributes in process `syz.0.10534'. [ 634.917927][T28717] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10539'. [ 635.272423][T28732] netlink: 'syz.4.10547': attribute type 3 has an invalid length. [ 635.288155][T28732] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10547'. [ 635.313208][T28736] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 635.322429][T28736] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 635.331321][T28736] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 635.340168][T28736] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 635.390156][T28735] tap0: tun_chr_ioctl cmd 1074025677 [ 635.425375][T28735] tap0: linktype set to 773 [ 635.548986][T28745] netlink: 64 bytes leftover after parsing attributes in process `syz.4.10554'. [ 635.735781][T28755] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10557'. [ 635.744751][T28757] openvswitch: netlink: Multiple metadata blocks provided [ 636.174484][T28774] netlink: 428 bytes leftover after parsing attributes in process `syz.3.10564'. [ 636.183719][T28774] netlink: 32 bytes leftover after parsing attributes in process `syz.3.10564'. [ 637.030630][T28814] netlink: 84 bytes leftover after parsing attributes in process `syz.3.10583'. [ 637.050207][T28814] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10583'. [ 638.743768][T28872] netlink: 'syz.3.10609': attribute type 1 has an invalid length. [ 639.062014][T28888] openvswitch: netlink: Tunnel attr 2 has unexpected len 0 expected 4 [ 639.928123][T28920] netlink: 'syz.2.10632': attribute type 5 has an invalid length. [ 640.634532][T28944] tap0: tun_chr_ioctl cmd 1074025677 [ 640.661297][T28944] tap0: linktype set to 773 [ 642.184306][T29002] netlink: 'syz.2.10670': attribute type 4 has an invalid length. [ 642.399327][T29017] SET target dimension over the limit! [ 642.778630][T29038] __nla_validate_parse: 1 callbacks suppressed [ 642.778651][T29038] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10686'. [ 642.997284][T29040] block nbd1: server does not support multiple connections per device. [ 643.017497][T29040] block nbd1: shutting down sockets [ 643.236060][T29056] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10695'. [ 643.497280][T29068] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.10701'. [ 643.964705][T29094] macvlan0: entered promiscuous mode [ 643.978336][T29094] netlink: 'syz.0.10713': attribute type 1 has an invalid length. [ 643.991678][T29094] netlink: 'syz.0.10713': attribute type 2 has an invalid length. [ 645.225100][T29150] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10739'. [ 645.784806][T29177] netlink: 'syz.3.10752': attribute type 1 has an invalid length. [ 645.793441][T29177] netlink: 244 bytes leftover after parsing attributes in process `syz.3.10752'. [ 646.355788][T29197] netlink: 'syz.1.10760': attribute type 83 has an invalid length. [ 646.966930][T29221] sctp: [Deprecated]: syz.4.10772 (pid 29221) Use of int in max_burst socket option. [ 646.966930][T29221] Use struct sctp_assoc_value instead [ 647.661869][T29261] netlink: 40 bytes leftover after parsing attributes in process `syz.1.10791'. [ 648.051156][T29281] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10801'. [ 648.060817][T29281] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10801'. [ 648.592393][T29309] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10815'. [ 648.649382][T29311] netlink: 'syz.3.10817': attribute type 1 has an invalid length. [ 648.674294][T29311] netlink: 'syz.3.10817': attribute type 4 has an invalid length. [ 648.682306][T29311] netlink: 188 bytes leftover after parsing attributes in process `syz.3.10817'. [ 649.263130][T29348] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10832'. [ 649.833624][T29373] netlink: 36 bytes leftover after parsing attributes in process `syz.0.10844'. [ 650.495275][T29408] mac80211_hwsim hwsim2 wlan0 (unregistering): left allmulticast mode [ 650.718366][T29418] netlink: 40 bytes leftover after parsing attributes in process `syz.0.10864'. [ 651.880366][T29461] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10884'. [ 651.903408][T29461] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10884'. [ 651.970095][T29461] gretap0: entered promiscuous mode [ 651.977132][T29461] batadv_slave_1: entered promiscuous mode [ 652.001877][T29461] hsr1: Slave B (batadv_slave_1) is not up; please bring it up to get a fully working HSR network [ 652.500009][T29494] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10899'. [ 653.118029][T29521] __nla_validate_parse: 3 callbacks suppressed [ 653.118053][T29521] netlink: 71 bytes leftover after parsing attributes in process `syz.0.10911'. [ 653.124517][T29523] sctp: [Deprecated]: syz.2.10912 (pid 29523) Use of int in maxseg socket option. [ 653.124517][T29523] Use struct sctp_assoc_value instead [ 654.188129][T29570] netlink: 47 bytes leftover after parsing attributes in process `syz.0.10934'. [ 654.603081][T29586] dummy0 speed is unknown, defaulting to 1000 [ 655.170376][T29605] smc: net device veth0 applied user defined pnetid SYZ2 [ 655.184122][T29611] netlink: 'syz.0.10952': attribute type 4 has an invalid length. [ 655.385817][T29617] bond0: (slave batadv0): Releasing backup interface [ 655.426078][T29617] bond0: (slave bond_slave_0): Releasing backup interface [ 655.467246][T29617] bond0: (slave bond_slave_1): Releasing backup interface [ 655.540386][T29617] team0: Port device C removed [ 655.582312][T29617] team0: Port device team_slave_1 removed [ 655.590233][T29617] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 655.599110][T29617] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 655.627418][T29617] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 655.640308][T29617] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 655.656305][T29617] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 655.668853][T29617] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 655.700281][T29617] team0: Port device geneve0 removed [ 655.726677][T29617] team0: Port device bond2 removed [ 655.739580][T29617] bond0: (slave bond3): Releasing backup interface [ 655.753445][ T9786] dummy0 speed is unknown, defaulting to 1000 [ 656.341740][T29661] netlink: 'syz.1.10976': attribute type 4 has an invalid length. [ 656.833888][T29682] netlink: 96 bytes leftover after parsing attributes in process `syz.2.10985'. [ 657.180348][T29692] netlink: del zone limit has 4 unknown bytes [ 657.519393][T29713] bridge_slave_0: left allmulticast mode [ 657.527092][T29713] bridge_slave_0: left promiscuous mode [ 657.541262][T29713] bridge0: port 1(bridge_slave_0) entered disabled state [ 657.561707][T29713] bridge_slave_1: left allmulticast mode [ 657.569735][T29713] bridge_slave_1: left promiscuous mode [ 657.580209][T29713] bridge0: port 2(bridge_slave_1) entered disabled state [ 657.595912][T29713] bond0: (slave bond_slave_0): Releasing backup interface [ 657.603846][T29713] bond_slave_0: left promiscuous mode [ 657.610680][T29713] bond_slave_0: left allmulticast mode [ 657.627842][T29713] bond0: (slave bond_slave_1): Releasing backup interface [ 657.642585][T29713] bond_slave_1: left promiscuous mode [ 657.648680][T29713] bond_slave_1: left allmulticast mode [ 657.660409][T29713] team0: Port device team_slave_0 removed [ 657.670607][T29713] team0: Port device team_slave_1 removed [ 657.677924][T29713] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 657.686945][T29713] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 657.702266][T29713] team0: Port device wlan1 removed [ 657.710727][T29717] netlink: 'syz.2.11000': attribute type 2 has an invalid length. [ 657.734920][ T9792] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 657.907914][ T9792] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 658.007308][T29727] tun0: tun_chr_ioctl cmd 1074025675 [ 658.012887][T29727] tun0: persist disabled [ 658.193353][T29736] netlink: 'syz.2.11008': attribute type 1 has an invalid length. [ 658.218620][T29736] netlink: 'syz.2.11008': attribute type 2 has an invalid length. [ 658.238617][T29736] netlink: 'syz.2.11008': attribute type 1 has an invalid length. [ 658.264027][T29736] netlink: 'syz.2.11008': attribute type 2 has an invalid length. [ 658.859851][T29768] dvmrp0: left allmulticast mode [ 659.128730][T29782] sctp: [Deprecated]: syz.3.11030 (pid 29782) Use of struct sctp_assoc_value in delayed_ack socket option. [ 659.128730][T29782] Use struct sctp_sack_info instead [ 660.262957][T29832] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11054'. [ 660.295624][T29832] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11054'. [ 660.752366][T29855] netlink: 'syz.2.11065': attribute type 1 has an invalid length. [ 660.790382][T29855] netlink: 172 bytes leftover after parsing attributes in process `syz.2.11065'. [ 660.895118][T29862] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11066'. [ 660.927387][T29865] wg2: entered promiscuous mode [ 660.944927][T29865] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 661.481428][T29897] netlink: 'syz.2.11083': attribute type 1 has an invalid length. [ 661.500773][T29897] netlink: 'syz.2.11083': attribute type 2 has an invalid length. [ 661.792194][T29911] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 661.966768][T29918] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11092'. [ 662.134897][T29926] bond0: (slave bond_slave_0): Releasing backup interface [ 662.189771][T29926] bond0: (slave bond_slave_1): Releasing backup interface [ 662.210927][T29926] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 662.230095][T29926] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 662.562634][T29938] netlink: del zone limit has 4 unknown bytes [ 663.205025][T29961] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.11110'. [ 663.227580][T29964] IPv6: NLM_F_CREATE should be specified when creating new route [ 663.412954][T29975] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11116'. [ 663.477253][T29977] netlink: 32 bytes leftover after parsing attributes in process `syz.2.11117'. [ 663.512438][T29977] netem: unknown loss type 13 [ 663.530410][T29977] netem: change failed [ 663.586837][T29984] netlink: 'syz.4.11120': attribute type 11 has an invalid length. [ 663.604744][T29982] netlink: 92 bytes leftover after parsing attributes in process `syz.3.11119'. [ 663.614116][T29984] netlink: 36 bytes leftover after parsing attributes in process `syz.4.11120'. [ 663.712056][T29989] netlink: 'syz.2.11123': attribute type 1 has an invalid length. [ 664.169348][T30014] netem: incorrect gi model size [ 664.178549][T30014] netem: change failed [ 664.601975][T30031] tap0: tun_chr_ioctl cmd 1074025677 [ 664.613034][T30031] tap0: linktype set to 1 [ 664.983465][T30043] block nbd1: Unsupported socket: shutdown callout must be supported. [ 665.287952][T30053] __nla_validate_parse: 1 callbacks suppressed [ 665.287975][T30053] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11151'. [ 666.035184][T30080] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 666.043674][T30080] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 666.052244][T30080] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 666.060821][T30080] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 666.204292][T30085] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 666.219192][T30085] syzkaller1: linktype set to 776 [ 666.225749][ T9792] IPVS: starting estimator thread 0... [ 666.316653][T30096] IPVS: using max 21 ests per chain, 50400 per kthread [ 667.339994][T30138] netlink: 32 bytes leftover after parsing attributes in process `syz.1.11187'. [ 667.720235][T30160] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11198'. [ 667.943394][T30172] sctp: [Deprecated]: syz.4.11203 (pid 30172) Use of struct sctp_assoc_value in delayed_ack socket option. [ 667.943394][T30172] Use struct sctp_sack_info instead [ 668.130593][T30178] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 668.160563][T30178] syzkaller1: linktype set to 776 [ 668.975199][T30215] netlink: 300 bytes leftover after parsing attributes in process `syz.0.11223'. [ 669.318497][T30225] netlink: 79 bytes leftover after parsing attributes in process `syz.3.11228'. [ 669.395297][T30228] netlink: 112 bytes leftover after parsing attributes in process `syz.0.11227'. [ 669.868534][T30245] tap1: tun_chr_ioctl cmd 1074025677 [ 669.874800][T30245] tap1: linktype set to 769 [ 669.963105][T30250] netlink: 'syz.0.11238': attribute type 21 has an invalid length. [ 670.018325][T30250] netlink: 128 bytes leftover after parsing attributes in process `syz.0.11238'. [ 670.062941][T30250] netlink: 3 bytes leftover after parsing attributes in process `syz.0.11238'. [ 670.116387][T30256] netlink: 'syz.1.11240': attribute type 83 has an invalid length. [ 674.192631][T30422] openvswitch: netlink: nsh attribute has 60236 unknown bytes. [ 674.221123][T30422] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 674.418093][T30430] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11319'. [ 674.843564][T30451] dvmrp0: tun_chr_ioctl cmd 1074025677 [ 674.853359][T30451] dvmrp0: linktype set to 270 [ 675.450299][T30484] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11341'. [ 675.931777][T30504] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11352'. [ 676.413011][T30520] netlink: 56 bytes leftover after parsing attributes in process `syz.2.11357'. [ 676.465643][T30520] tipc: Cannot configure node identity twice [ 677.560320][T30574] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11381'. [ 677.584789][T30560] xt_CT: No such helper "snmp" [ 677.985233][T30594] netlink: 'syz.4.11390': attribute type 11 has an invalid length. [ 678.007440][T30594] netlink: 44 bytes leftover after parsing attributes in process `syz.4.11390'. [ 678.163262][T30604] bridge_slave_0: invalid flags given to default FDB implementation [ 678.172659][T30602] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11394'. [ 679.441905][T30662] openvswitch: netlink: Multiple metadata blocks provided [ 679.934776][T30690] netlink: 48 bytes leftover after parsing attributes in process `syz.2.11435'. [ 680.073126][T30696] ip6gretap0: entered promiscuous mode [ 680.112662][T30696] ip6gretap0: left promiscuous mode [ 680.773075][T30730] sctp: [Deprecated]: syz.0.11454 (pid 30730) Use of struct sctp_assoc_value in delayed_ack socket option. [ 680.773075][T30730] Use struct sctp_sack_info instead [ 681.051041][T30743] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11460'. [ 681.250114][T30752] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11464'. [ 681.855502][T30780] netlink: 60 bytes leftover after parsing attributes in process `syz.3.11478'. [ 681.860627][T30778] block nbd1: server does not support multiple connections per device. [ 681.864899][T30780] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11478'. [ 681.873706][T30778] block nbd1: shutting down sockets [ 682.075276][T30787] sch_tbf: burst 0 is lower than device veth0_to_team mtu (1514) ! [ 682.300168][T30794] netlink: 32 bytes leftover after parsing attributes in process `syz.0.11484'. [ 682.444778][T30799] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11487'. [ 682.520685][T30804] netlink: 'syz.0.11489': attribute type 2 has an invalid length. [ 683.268916][T30837] netlink: 20 bytes leftover after parsing attributes in process `syz.2.11505'. [ 683.854809][T30866] netlink: 128 bytes leftover after parsing attributes in process `syz.1.11520'. [ 683.957473][T30871] syzkaller1: tun_chr_ioctl cmd 1074025680 [ 684.636210][T30892] openvswitch: netlink: VXLAN extension 2 out of range max 1 [ 684.730698][T30901] netlink: 52 bytes leftover after parsing attributes in process `syz.4.11535'. [ 686.379214][T30986] __nla_validate_parse: 2 callbacks suppressed [ 686.379235][T30986] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11572'. [ 686.562768][T30996] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 686.899152][T31012] netlink: 72 bytes leftover after parsing attributes in process `syz.2.11585'. [ 686.913144][T31011] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11583'. [ 687.533350][T31039] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11596'. [ 687.551224][T31039] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11596'. [ 688.427440][T31079] tap0: tun_chr_ioctl cmd 1074812118 [ 689.256269][T31126] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11633'. [ 689.330161][T31132] netlink: 724 bytes leftover after parsing attributes in process `syz.2.11635'. [ 689.345982][T31132] netlink: 83 bytes leftover after parsing attributes in process `syz.2.11635'. [ 690.110031][T31175] openvswitch: netlink: IP tunnel TTL not specified. [ 690.599512][T31201] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11667'. [ 690.863581][T31215] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11675'. [ 692.431922][T31295] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11708'. [ 693.289825][T31339] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11728'. [ 693.547931][T31352] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 694.949725][T31415] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 695.161754][T31427] netlink: 92 bytes leftover after parsing attributes in process `syz.3.11766'. [ 695.945308][T31466] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11784'. [ 696.274209][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 697.437844][T31535] netlink: 'syz.3.11817': attribute type 1 has an invalid length. [ 697.691360][T31550] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11823'. [ 697.789654][T31555] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11826'. [ 698.664693][T31600] netlink: 104 bytes leftover after parsing attributes in process `syz.2.11848'. [ 698.676359][T31602] netlink: 'syz.4.11849': attribute type 4 has an invalid length. [ 698.695068][T31602] netlink: 152 bytes leftover after parsing attributes in process `syz.4.11849'. [ 698.739974][T31602] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 698.963326][T31618] netlink: 16 bytes leftover after parsing attributes in process `syz.4.11854'. [ 698.975929][T31618] netlink: 16 bytes leftover after parsing attributes in process `syz.4.11854'. [ 699.027989][T31619] netlink: 'syz.3.11855': attribute type 1 has an invalid length. [ 699.080104][T31619] netlink: 'syz.3.11855': attribute type 10 has an invalid length. [ 699.128108][T31619] netlink: 236 bytes leftover after parsing attributes in process `syz.3.11855'. [ 699.716835][T23844] Bluetooth: hci3: command 0x0406 tx timeout [ 700.287232][T31663] sctp: [Deprecated]: syz.3.11876 (pid 31663) Use of struct sctp_assoc_value in delayed_ack socket option. [ 700.287232][T31663] Use struct sctp_sack_info instead [ 700.309860][T31664] sctp: [Deprecated]: syz.2.11877 (pid 31664) Use of struct sctp_assoc_value in delayed_ack socket option. [ 700.309860][T31664] Use struct sctp_sack_info instead [ 701.323747][ T5852] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 701.349797][ T5852] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 701.369038][ T5852] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 701.379962][ T5852] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 701.390606][ T5852] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 701.432894][T31705] netpci0: tun_chr_ioctl cmd 1074025672 [ 701.450171][T31705] netpci0: ignored: set checksum disabled [ 701.643697][T31701] dummy0 speed is unknown, defaulting to 1000 [ 702.202716][T31726] netlink: 36 bytes leftover after parsing attributes in process `syz.1.11904'. [ 702.261904][T31725] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11903'. [ 702.307395][T31701] chnl_net:caif_netlink_parms(): no params data found [ 702.523684][ T60] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 702.913248][ T60] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 702.947426][T31701] bridge0: port 1(bridge_slave_0) entered blocking state [ 702.974453][T31701] bridge0: port 1(bridge_slave_0) entered disabled state [ 702.990020][T31701] bridge_slave_0: entered allmulticast mode [ 702.999031][T31701] bridge_slave_0: entered promiscuous mode [ 703.046650][ T60] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 703.077453][T31701] bridge0: port 2(bridge_slave_1) entered blocking state [ 703.094418][T31701] bridge0: port 2(bridge_slave_1) entered disabled state [ 703.112139][T31701] bridge_slave_1: entered allmulticast mode [ 703.125685][T31701] bridge_slave_1: entered promiscuous mode [ 703.149399][ T60] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 703.363613][T31701] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 703.402587][T31701] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 703.475671][T23844] Bluetooth: hci0: command tx timeout [ 703.500133][T31776] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11926'. [ 703.612746][T31701] team0: Port device team_slave_0 added [ 703.667730][T31701] team0: Port device team_slave_1 added [ 703.867145][T31701] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 703.887836][T31701] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 703.957257][T31701] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 703.989828][T31799] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11937'. [ 704.026402][T31701] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 704.053563][T31701] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 704.146312][T31701] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 704.458934][ T60] tipc: Resetting bearer [ 704.931815][ T60] tipc: Disabling bearer [ 705.229896][T31837] netlink: 'syz.4.11954': attribute type 9 has an invalid length. [ 705.238761][T31837] netlink: 146708 bytes leftover after parsing attributes in process `syz.4.11954'. [ 705.535100][ T60] bond0 (unregistering): Released all slaves [ 705.552169][ T60] bond1 (unregistering): Released all slaves [ 705.559020][T23844] Bluetooth: hci0: command tx timeout [ 705.669739][ T60] bond2 (unregistering): Released all slaves [ 705.701300][T31701] hsr_slave_0: entered promiscuous mode [ 705.725627][T31701] hsr_slave_1: entered promiscuous mode [ 705.747802][T31701] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 705.770357][T31701] Cannot create hsr debugfs directory [ 705.799796][T31831] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 705.969920][ T60] tipc: Left network mode [ 706.512868][T31873] netlink: 60 bytes leftover after parsing attributes in process `syz.1.11969'. [ 706.824800][ T60] hsr_slave_0: left promiscuous mode [ 706.847821][ T60] hsr_slave_1: left promiscuous mode [ 707.639019][T23844] Bluetooth: hci0: command tx timeout [ 707.919015][T31893] netlink: 64 bytes leftover after parsing attributes in process `syz.2.11979'. [ 707.967463][T31893] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 708.014156][T31893] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 708.022937][T31893] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 708.064024][T31893] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 708.089756][T31893] netlink: 64 bytes leftover after parsing attributes in process `syz.2.11979'. [ 708.847514][T31701] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 708.945138][T31701] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 708.995432][T31701] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 709.062812][T31701] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 709.340368][T31701] 8021q: adding VLAN 0 to HW filter on device bond0 [ 709.383608][T31701] 8021q: adding VLAN 0 to HW filter on device team0 [ 709.401611][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 709.408961][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 709.460627][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 709.467902][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 709.580092][T31701] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 709.592474][T31701] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 709.714441][T23844] Bluetooth: hci0: command tx timeout [ 709.932255][T31963] netlink: 1041 bytes leftover after parsing attributes in process `syz.3.12009'. [ 710.006635][T31965] netlink: 'syz.3.12010': attribute type 6 has an invalid length. [ 710.017784][T31701] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 710.179721][T31701] veth0_vlan: entered promiscuous mode [ 710.273965][T31701] veth1_vlan: entered promiscuous mode [ 710.405832][T31701] veth0_macvtap: entered promiscuous mode [ 710.447224][T31701] veth1_macvtap: entered promiscuous mode [ 710.525901][T31701] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 710.598220][T31701] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 710.625978][T31701] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 710.644489][T31701] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 710.663433][T31701] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 710.686581][T31701] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 711.004977][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 711.012900][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 711.111090][ T1337] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 711.136670][ T1337] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 711.262187][T32012] netlink: 20 bytes leftover after parsing attributes in process `syz.4.12030'. [ 711.452392][T32021] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 712.225481][T32062] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12054'. [ 712.710144][T32078] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12061'. [ 712.750259][T32080] netlink: 48 bytes leftover after parsing attributes in process `syz.4.12063'. [ 712.773754][T32080] bridge_slave_0: entered allmulticast mode [ 712.895415][T32085] netlink: 104 bytes leftover after parsing attributes in process `syz.2.12065'. [ 713.399972][T32109] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12074'. [ 713.447214][ T5852] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 713.461104][ T5852] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 713.469998][ T5852] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 713.486601][ T5852] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 713.496399][ T5852] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 713.551999][T32110] dummy0 speed is unknown, defaulting to 1000 [ 714.027965][T32110] chnl_net:caif_netlink_parms(): no params data found [ 714.289293][T32149] netlink: 'syz.3.12091': attribute type 1 has an invalid length. [ 714.297785][T32149] netlink: 56 bytes leftover after parsing attributes in process `syz.3.12091'. [ 714.645922][T32161] netlink: 'syz.3.12097': attribute type 1 has an invalid length. [ 714.665009][T32110] bridge0: port 1(bridge_slave_0) entered blocking state [ 714.672335][T32110] bridge0: port 1(bridge_slave_0) entered disabled state [ 714.704695][T32110] bridge_slave_0: entered allmulticast mode [ 714.735102][T32110] bridge_slave_0: entered promiscuous mode [ 714.776169][T32110] bridge0: port 2(bridge_slave_1) entered blocking state [ 714.783456][T32110] bridge0: port 2(bridge_slave_1) entered disabled state [ 714.812393][T32110] bridge_slave_1: entered allmulticast mode [ 714.826328][T32110] bridge_slave_1: entered promiscuous mode [ 715.022405][T32110] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 715.072178][T32110] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 715.305370][T32110] team0: Port device team_slave_0 added [ 715.337268][T32110] team0: Port device team_slave_1 added [ 715.361296][T32192] Bluetooth: MGMT ver 1.23 [ 715.506750][T32110] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 715.526233][T32110] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 715.554433][ T5852] Bluetooth: hci0: command tx timeout [ 715.582963][T32110] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 715.602767][T32110] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 715.655247][T32110] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 715.682753][T32110] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 715.732765][T32207] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12117'. [ 715.840752][T32209] sctp: [Deprecated]: syz.4.12118 (pid 32209) Use of int in max_burst socket option. [ 715.840752][T32209] Use struct sctp_assoc_value instead [ 715.843364][T32110] hsr_slave_0: entered promiscuous mode [ 715.869454][T32110] hsr_slave_1: entered promiscuous mode [ 716.358556][T32110] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 716.374421][T32224] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12126'. [ 716.526715][T32110] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 716.673284][T32110] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 716.801174][T32110] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 717.004616][T32247] IPVS: ovf: UDP 224.0.0.2:20004 - no destination available [ 717.182457][T32110] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 717.217459][T32110] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 717.278905][T32110] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 717.358244][T32110] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 717.394617][T23844] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 717.533274][T32110] 8021q: adding VLAN 0 to HW filter on device bond0 [ 717.609010][T32110] 8021q: adding VLAN 0 to HW filter on device team0 [ 717.632912][ T1343] bridge0: port 1(bridge_slave_0) entered blocking state [ 717.640192][ T1343] bridge0: port 1(bridge_slave_0) entered forwarding state [ 717.646576][T23844] Bluetooth: hci0: command 0x041b tx timeout [ 717.686218][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 717.693432][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 718.344345][T32288] netlink: 20 bytes leftover after parsing attributes in process `syz.1.12152'. [ 718.421890][T32110] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 718.608570][T32110] veth0_vlan: entered promiscuous mode [ 718.651145][T32110] veth1_vlan: entered promiscuous mode [ 718.771395][T32110] veth0_macvtap: entered promiscuous mode [ 718.815505][T32110] veth1_macvtap: entered promiscuous mode [ 718.893145][T32110] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 718.981836][T32110] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 719.000476][T32110] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 719.020688][T32110] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 719.044385][T32110] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 719.053261][T32110] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 719.265414][ T1343] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 719.273282][ T1343] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 719.401180][ T1343] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 719.429316][ T1343] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 720.021177][T32338] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 720.928887][T32372] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12185'. [ 720.968956][T32372] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 721.005020][T32372] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (7) [ 721.135457][T32383] netlink: 36 bytes leftover after parsing attributes in process `syz.3.12189'. [ 721.688347][T32401] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 721.695705][T32401] IPv6: NLM_F_CREATE should be set when creating new route [ 721.702995][T32401] IPv6: NLM_F_CREATE should be set when creating new route [ 721.712623][ T5852] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 721.725447][ T5852] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 721.734224][ T5852] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 721.743765][ T5852] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 721.752623][ T5852] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 721.833316][T32405] dummy0 speed is unknown, defaulting to 1000 [ 722.243446][T32405] chnl_net:caif_netlink_parms(): no params data found [ 722.737700][T32405] bridge0: port 1(bridge_slave_0) entered blocking state [ 722.747814][T32405] bridge0: port 1(bridge_slave_0) entered disabled state [ 722.761324][T32405] bridge_slave_0: entered allmulticast mode [ 722.773263][T32450] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 722.773778][T32405] bridge_slave_0: entered promiscuous mode [ 722.842279][T32405] bridge0: port 2(bridge_slave_1) entered blocking state [ 722.872859][T32405] bridge0: port 2(bridge_slave_1) entered disabled state [ 722.894421][T32405] bridge_slave_1: entered allmulticast mode [ 722.902594][T32405] bridge_slave_1: entered promiscuous mode [ 723.033377][T32405] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 723.059857][T32405] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 723.140822][T32405] team0: Port device team_slave_0 added [ 723.160609][T32405] team0: Port device team_slave_1 added [ 723.273425][T32405] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 723.296879][T32405] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 723.346039][T32405] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 723.379372][T32405] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 723.396908][T32405] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 723.438988][T32405] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 723.579793][T32405] hsr_slave_0: entered promiscuous mode [ 723.593761][T32405] hsr_slave_1: entered promiscuous mode [ 723.603817][T32405] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 723.614559][T32405] Cannot create hsr debugfs directory [ 723.796812][T23844] Bluetooth: hci0: command tx timeout [ 724.086101][T32405] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 724.266311][T32405] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 724.393077][T32405] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 724.515436][ T9792] hid-generic 0005:0458:0A0B.0001: item fetching failed at offset 1/3 [ 724.529522][T32405] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 724.542163][ T9792] hid-generic 0005:0458:0A0B.0001: probe with driver hid-generic failed with error -22 [ 724.663431][T32523] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12250'. [ 724.673012][T32523] netlink: 'syz.4.12250': attribute type 30 has an invalid length. [ 724.691080][T32523] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 724.700128][T32523] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 724.708972][T32523] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 724.717835][T32523] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 724.973421][T32405] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 724.985170][T32405] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 725.008333][T32405] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 725.038947][T32405] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 725.361781][T32405] 8021q: adding VLAN 0 to HW filter on device bond0 [ 725.399999][T32405] 8021q: adding VLAN 0 to HW filter on device team0 [ 725.426629][T31879] bridge0: port 1(bridge_slave_0) entered blocking state [ 725.433943][T31879] bridge0: port 1(bridge_slave_0) entered forwarding state [ 725.509573][T31879] bridge0: port 2(bridge_slave_1) entered blocking state [ 725.516846][T31879] bridge0: port 2(bridge_slave_1) entered forwarding state [ 725.877071][T23844] Bluetooth: hci0: command tx timeout [ 725.980954][T32560] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12265'. [ 726.043827][T32560] tipc: Enabling of bearer rejected, failed to enable media [ 726.180210][T32405] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 726.304848][T32568] syzkaller1: entered promiscuous mode [ 726.310451][T32568] syzkaller1: entered allmulticast mode [ 726.358051][T32405] veth0_vlan: entered promiscuous mode [ 726.433526][T32405] veth1_vlan: entered promiscuous mode [ 726.539182][T32405] veth0_macvtap: entered promiscuous mode [ 726.599076][T32405] veth1_macvtap: entered promiscuous mode [ 726.638621][T32580] block nbd1: server does not support multiple connections per device. [ 726.651700][T32405] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 726.675935][T32580] block nbd1: shutting down sockets [ 726.688461][T32405] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 726.732813][T32405] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 726.764237][T32405] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 726.814506][T32405] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 726.823464][T32405] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 726.995351][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 727.130272][ T1337] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 727.164123][ T1337] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 727.243444][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 727.255777][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 727.788848][T32621] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12292'. [ 728.041829][T32627] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 728.073340][T32627] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 728.251635][T32627] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 728.304541][T32627] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 728.438011][T32627] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 728.457659][T32627] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 728.562898][T32627] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 728.576695][T32627] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 728.673151][T32627] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 728.686057][T32627] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 728.707420][T32627] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 728.715867][T32627] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 728.732433][T32627] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 728.741196][T32627] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 728.760368][T32627] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 728.769222][T32627] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 728.999993][T32635] netlink: 84 bytes leftover after parsing attributes in process `syz.2.12300'. [ 729.528765][ T5852] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 729.538761][ T5852] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 729.550508][ T5852] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 729.560312][ T5852] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 729.570606][ T5852] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 729.670137][T32653] dummy0 speed is unknown, defaulting to 1000 [ 729.703164][T32658] xt_CT: No such helper "snmp" [ 730.016778][T32653] chnl_net:caif_netlink_parms(): no params data found [ 730.456422][T32653] bridge0: port 1(bridge_slave_0) entered blocking state [ 730.472314][T32653] bridge0: port 1(bridge_slave_0) entered disabled state [ 730.480215][T32653] bridge_slave_0: entered allmulticast mode [ 730.504585][T32653] bridge_slave_0: entered promiscuous mode [ 730.537724][T32653] bridge0: port 2(bridge_slave_1) entered blocking state [ 730.562625][T32653] bridge0: port 2(bridge_slave_1) entered disabled state [ 730.581372][T32653] bridge_slave_1: entered allmulticast mode [ 730.590461][T32653] bridge_slave_1: entered promiscuous mode [ 730.795248][T32653] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 730.837291][T32653] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 731.058996][T32653] team0: Port device team_slave_0 added [ 731.096756][T32653] team0: Port device team_slave_1 added [ 731.267582][T32653] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 731.284762][T32653] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 731.334961][T32653] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 731.351914][T32653] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 731.359263][T32653] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 731.390529][T32653] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 731.634944][T23844] Bluetooth: hci0: command tx timeout [ 731.673566][T32653] hsr_slave_0: entered promiscuous mode [ 731.692736][T32653] hsr_slave_1: entered promiscuous mode [ 731.699953][T32653] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 731.708491][T32653] Cannot create hsr debugfs directory [ 731.819993][T32728] dummy0 speed is unknown, defaulting to 1000 [ 732.080457][T32750] netlink: 'syz.2.12345': attribute type 4 has an invalid length. [ 732.246113][T32754] netlink: 72 bytes leftover after parsing attributes in process `syz.4.12347'. [ 732.598163][T32764] vlan3: entered promiscuous mode [ 732.623418][T32764] bond0: entered promiscuous mode [ 732.631649][T32764] bond_slave_0: entered promiscuous mode [ 732.637781][T32764] bond_slave_1: entered promiscuous mode [ 732.645570][T32764] bond0: (slave vlan3): Opening slave failed [ 732.807137][T32653] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 732.829434][ T300] syz.4.12353 (300) used greatest stack depth: 19976 bytes left [ 732.922881][ T304] syzkaller1: entered promiscuous mode [ 732.942528][ T304] syzkaller1: entered allmulticast mode [ 732.997501][T32653] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 733.127324][T32653] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 733.270401][T32653] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 733.666520][T32653] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 733.710025][T32653] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 733.717276][T23844] Bluetooth: hci0: command tx timeout [ 733.775351][T32653] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 733.798322][T32653] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 734.169078][T32653] 8021q: adding VLAN 0 to HW filter on device bond0 [ 734.231779][T32653] 8021q: adding VLAN 0 to HW filter on device team0 [ 734.270278][ T1002] bridge0: port 1(bridge_slave_0) entered blocking state [ 734.277537][ T1002] bridge0: port 1(bridge_slave_0) entered forwarding state [ 734.326658][ T1002] bridge0: port 2(bridge_slave_1) entered blocking state [ 734.333876][ T1002] bridge0: port 2(bridge_slave_1) entered forwarding state [ 734.920911][T32653] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 735.097616][T32653] veth0_vlan: entered promiscuous mode [ 735.163637][T32653] veth1_vlan: entered promiscuous mode [ 735.302344][T32653] veth0_macvtap: entered promiscuous mode [ 735.305553][ T390] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.12392'. [ 735.350770][T32653] veth1_macvtap: entered promiscuous mode [ 735.433589][ T396] netlink: 27 bytes leftover after parsing attributes in process `syz.3.12395'. [ 735.482565][T32653] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 735.586129][T32653] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 735.621246][T32653] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 735.631537][T32653] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 735.646057][T32653] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 735.658669][T32653] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 735.794996][T23844] Bluetooth: hci0: command tx timeout [ 735.859142][ T406] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12400'. [ 736.354904][ T1337] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 736.375677][ T1337] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 736.480733][ T1337] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 736.494100][ T1337] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 737.072191][ T440] syzkaller1: entered promiscuous mode [ 737.080791][ T440] syzkaller1: entered allmulticast mode [ 737.441664][ T453] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 737.573322][ T457] sctp: [Deprecated]: syz.3.12420 (pid 457) Use of struct sctp_assoc_value in delayed_ack socket option. [ 737.573322][ T457] Use struct sctp_sack_info instead [ 737.628166][ T458] syzkaller1: entered promiscuous mode [ 737.660516][ T458] syzkaller1: entered allmulticast mode [ 738.841639][ T483] tipc: Enabling of bearer rejected, failed to enable media [ 739.218453][ T5852] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 739.231263][ T5852] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 739.245413][ T5852] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 739.255622][ T5852] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 739.263581][ T5852] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 739.320242][ T494] dummy0 speed is unknown, defaulting to 1000 [ 739.902177][ T494] chnl_net:caif_netlink_parms(): no params data found [ 740.020122][ T532] sctp: [Deprecated]: syz.4.12451 (pid 532) Use of struct sctp_assoc_value in delayed_ack socket option. [ 740.020122][ T532] Use struct sctp_sack_info instead [ 740.133198][ T539] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12454'. [ 740.143226][ T539] netlink: 'syz.1.12454': attribute type 7 has an invalid length. [ 740.152643][ T539] netlink: 'syz.1.12454': attribute type 8 has an invalid length. [ 740.161144][ T539] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12454'. [ 740.222777][ T494] bridge0: port 1(bridge_slave_0) entered blocking state [ 740.230297][ T494] bridge0: port 1(bridge_slave_0) entered disabled state [ 740.239076][ T494] bridge_slave_0: entered allmulticast mode [ 740.258445][ T494] bridge_slave_0: entered promiscuous mode [ 740.267916][ T494] bridge0: port 2(bridge_slave_1) entered blocking state [ 740.278176][ T494] bridge0: port 2(bridge_slave_1) entered disabled state [ 740.287243][ T494] bridge_slave_1: entered allmulticast mode [ 740.326249][ T494] bridge_slave_1: entered promiscuous mode [ 740.415877][ T494] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 740.448575][ T494] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 740.513222][ T494] team0: Port device team_slave_0 added [ 740.528983][ T494] team0: Port device team_slave_1 added [ 740.705068][ T494] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 740.712401][ T494] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 740.753146][ T494] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 740.788534][ T555] sctp: [Deprecated]: syz.3.12460 (pid 555) Use of struct sctp_assoc_value in delayed_ack socket option. [ 740.788534][ T555] Use struct sctp_sack_info instead [ 740.826380][ T494] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 740.833407][ T494] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 740.884731][ T494] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 741.099532][ T494] hsr_slave_0: entered promiscuous mode [ 741.116618][ T494] hsr_slave_1: entered promiscuous mode [ 741.123336][ T494] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 741.136042][ T494] Cannot create hsr debugfs directory [ 741.314888][T23844] Bluetooth: hci0: command tx timeout [ 741.650814][ T494] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 741.871850][ T494] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 741.922758][ T589] dummy0 speed is unknown, defaulting to 1000 [ 742.079961][ T494] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 742.277125][ T494] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 742.500523][ T589] IPVS: You probably need to specify IP address on multicast interface. [ 742.511230][ T589] IPVS: Error connecting to the multicast addr [ 742.593239][ T494] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 742.622532][ T494] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 742.643064][ T494] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 742.679351][ T494] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 742.941620][ T494] 8021q: adding VLAN 0 to HW filter on device bond0 [ 743.029646][ T494] 8021q: adding VLAN 0 to HW filter on device team0 [ 743.049779][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 743.057136][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 743.159840][T31879] bridge0: port 2(bridge_slave_1) entered blocking state [ 743.167250][T31879] bridge0: port 2(bridge_slave_1) entered forwarding state [ 743.400791][T23844] Bluetooth: hci0: command tx timeout [ 744.050609][ T494] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 744.172100][ T494] veth0_vlan: entered promiscuous mode [ 744.202429][ T494] veth1_vlan: entered promiscuous mode [ 744.321198][ T494] veth0_macvtap: entered promiscuous mode [ 744.350001][ T494] veth1_macvtap: entered promiscuous mode [ 744.384185][ T494] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 744.400703][ T494] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 744.425493][ T494] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 744.436296][ T494] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 744.445612][ T494] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 744.461942][ T494] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 744.688299][ T1002] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 744.712854][ T1002] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 744.767849][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 744.776965][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 745.749224][ T701] dummy0 speed is unknown, defaulting to 1000 [ 746.165014][ T701] netlink: 'syz.3.12520': attribute type 6 has an invalid length. [ 746.815881][ T713] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12524'. [ 746.974353][ T718] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12527'. [ 747.471159][ T5852] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 747.489479][ T5852] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 747.501543][ T5852] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 747.510641][ T5852] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 747.518716][ T5852] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 747.739869][ T738] dummy0 speed is unknown, defaulting to 1000 [ 747.788275][ T751] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12539'. [ 748.283716][ T738] chnl_net:caif_netlink_parms(): no params data found [ 748.669320][ T738] bridge0: port 1(bridge_slave_0) entered blocking state [ 748.699336][ T738] bridge0: port 1(bridge_slave_0) entered disabled state [ 748.718729][ T738] bridge_slave_0: entered allmulticast mode [ 748.736886][ T738] bridge_slave_0: entered promiscuous mode [ 748.769402][ T738] bridge0: port 2(bridge_slave_1) entered blocking state [ 748.792767][ T738] bridge0: port 2(bridge_slave_1) entered disabled state [ 748.819342][ T738] bridge_slave_1: entered allmulticast mode [ 748.847930][ T738] bridge_slave_1: entered promiscuous mode [ 749.049419][ T738] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 749.120607][ T738] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 749.354870][ T738] team0: Port device team_slave_0 added [ 749.403401][ T738] team0: Port device team_slave_1 added [ 749.547169][ T809] tipc: New replicast peer: 255.255.255.255 [ 749.564119][ T5852] Bluetooth: hci0: command tx timeout [ 749.582845][ T809] tipc: Enabled bearer , priority 10 [ 749.804666][ T738] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 749.832857][ T738] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 749.876963][ T738] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 749.907283][ T738] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 749.925423][ T738] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 749.962511][ T738] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 749.966678][ T823] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 750.198681][ T738] hsr_slave_0: entered promiscuous mode [ 750.206966][ T738] hsr_slave_1: entered promiscuous mode [ 750.226905][ T738] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 750.240153][ T738] Cannot create hsr debugfs directory [ 750.562306][T29939] hid-generic 0005:16BF:0006.0002: unknown main item tag 0x0 [ 750.592038][T29939] hid-generic 0005:16BF:0006.0002: hidraw0: BLUETOOTH HID vc3.b8 Device [syz1] on aa:aa:aa:aa:aa:aa [ 750.664257][ T9790] tipc: Node number set to 4269801488 [ 750.803354][ T738] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 750.920781][ T738] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 751.057049][ T738] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 751.229753][ T738] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 751.652869][ T5852] Bluetooth: hci0: command tx timeout [ 751.810588][ T877] dummy0 speed is unknown, defaulting to 1000 [ 751.938586][ T887] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12580'. [ 751.973207][ T738] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 752.042940][ T738] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 752.244269][ T738] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 752.262794][ T738] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 752.566489][ T738] 8021q: adding VLAN 0 to HW filter on device bond0 [ 752.593711][ T738] 8021q: adding VLAN 0 to HW filter on device team0 [ 752.610991][ T870] bridge0: port 1(bridge_slave_0) entered blocking state [ 752.618293][ T870] bridge0: port 1(bridge_slave_0) entered forwarding state [ 752.729478][ T876] bridge0: port 2(bridge_slave_1) entered blocking state [ 752.736894][ T876] bridge0: port 2(bridge_slave_1) entered forwarding state [ 753.045567][ T931] netlink: 788 bytes leftover after parsing attributes in process `syz.1.12592'. [ 753.158859][ T927] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12593'. [ 753.469443][ T952] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input5 [ 753.579268][ T738] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 753.716370][ T5852] Bluetooth: hci0: command tx timeout [ 753.857249][ T738] veth0_vlan: entered promiscuous mode [ 753.901768][ T738] veth1_vlan: entered promiscuous mode [ 753.908061][ T970] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12604'. [ 753.919426][ T970] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12604'. [ 753.961787][ T738] veth0_macvtap: entered promiscuous mode [ 754.014881][ T738] veth1_macvtap: entered promiscuous mode [ 754.081186][ T738] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 754.157902][ T738] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 754.192131][ T738] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 754.234066][ T738] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 754.242840][ T738] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 754.294156][ T738] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 754.862282][ T870] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 754.890164][ T870] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 755.081793][ T870] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 755.135094][ T870] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 755.219665][ T1014] syzkaller1: entered promiscuous mode [ 755.231628][ T1014] syzkaller1: entered allmulticast mode [ 757.161938][ T1043] netlink: 'syz.2.12632': attribute type 29 has an invalid length. [ 757.195121][ T1043] netlink: 'syz.2.12632': attribute type 29 has an invalid length. [ 757.222276][ T1043] netlink: 508 bytes leftover after parsing attributes in process `syz.2.12632'. [ 757.399213][ T1052] xt_CT: No such helper "snmp" [ 757.773714][T23844] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 757.784947][T23844] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 757.795692][T23844] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 757.810579][T23844] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 757.819335][T23844] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 757.881110][ T1071] dummy0 speed is unknown, defaulting to 1000 [ 758.190705][ T1087] xt_hashlimit: overflow, try lower: 18446744073709551615/7 [ 758.389522][ T1071] chnl_net:caif_netlink_parms(): no params data found [ 758.823741][ T1110] netlink: 20 bytes leftover after parsing attributes in process `syz.4.12648'. [ 758.825249][ T1071] bridge0: port 1(bridge_slave_0) entered blocking state [ 758.884109][ T1071] bridge0: port 1(bridge_slave_0) entered disabled state [ 758.911071][ T1071] bridge_slave_0: entered allmulticast mode [ 758.941855][ T1071] bridge_slave_0: entered promiscuous mode [ 758.958292][ T1071] bridge0: port 2(bridge_slave_1) entered blocking state [ 758.974158][ T1071] bridge0: port 2(bridge_slave_1) entered disabled state [ 758.983536][ T1071] bridge_slave_1: entered allmulticast mode [ 759.049769][ T1071] bridge_slave_1: entered promiscuous mode [ 759.207415][ T1071] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 759.243502][ T1071] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 759.392554][ T1071] team0: Port device team_slave_0 added [ 759.413412][ T1071] team0: Port device team_slave_1 added [ 759.519530][ T1071] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 759.531700][ T1071] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 759.569887][ T1137] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12663'. [ 759.586701][ T1071] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 759.601190][ T1071] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 759.611043][ T1071] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 759.639151][ T1071] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 759.720029][ T1071] hsr_slave_0: entered promiscuous mode [ 759.727622][ T1071] hsr_slave_1: entered promiscuous mode [ 759.746933][ T1071] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 759.764177][ T1071] Cannot create hsr debugfs directory [ 759.882904][ T5852] Bluetooth: hci0: command tx timeout [ 760.020921][ T1152] netlink: 'syz.3.12667': attribute type 11 has an invalid length. [ 760.182409][ T1155] netlink: 'syz.4.12670': attribute type 1 has an invalid length. [ 760.225861][ T1071] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 760.248545][ T1155] netlink: 'syz.4.12670': attribute type 10 has an invalid length. [ 760.270114][ T1155] netlink: 'syz.4.12670': attribute type 4 has an invalid length. [ 760.296529][ T1155] netlink: 136 bytes leftover after parsing attributes in process `syz.4.12670'. [ 760.379573][ T1071] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 760.539046][ T1071] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 760.710482][ T1071] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 760.896094][ T1183] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 761.122115][ T1071] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 761.147211][ T1071] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 761.171700][ T1193] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12682'. [ 761.203284][ T1071] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 761.241814][ T1071] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 761.972361][ T5852] Bluetooth: hci0: command tx timeout [ 764.038671][ T5852] Bluetooth: hci0: command tx timeout [ 764.556216][ T1071] 8021q: adding VLAN 0 to HW filter on device bond0 [ 764.564249][ T1237] batadv_slave_1: entered promiscuous mode [ 764.593819][ T1238] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12699'. [ 764.647767][ T1071] 8021q: adding VLAN 0 to HW filter on device team0 [ 764.693017][ T870] bridge0: port 1(bridge_slave_0) entered blocking state [ 764.700291][ T870] bridge0: port 1(bridge_slave_0) entered forwarding state [ 764.797004][ T870] bridge0: port 2(bridge_slave_1) entered blocking state [ 764.804347][ T870] bridge0: port 2(bridge_slave_1) entered forwarding state [ 765.329186][ T1260] syzkaller1: entered promiscuous mode [ 765.338682][ T1260] syzkaller1: entered allmulticast mode [ 765.666189][ T1071] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 765.936682][ T1071] veth0_vlan: entered promiscuous mode [ 765.982093][ T1071] veth1_vlan: entered promiscuous mode [ 766.084690][ T1071] veth0_macvtap: entered promiscuous mode [ 766.115912][ T5852] Bluetooth: hci0: command tx timeout [ 766.135980][ T1071] veth1_macvtap: entered promiscuous mode [ 766.164653][ T1071] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 766.192829][ T1297] syzkaller1: entered promiscuous mode [ 766.208425][ T1297] syzkaller1: entered allmulticast mode [ 766.531106][ T1071] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 766.563077][ T1071] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 766.614396][ T1071] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 766.623182][ T1071] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 766.643997][ T1071] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 767.222875][ T1317] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12731'. [ 767.300955][ T876] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 767.322255][ T876] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 767.419001][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 767.435957][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 768.081167][ T30] audit: type=1804 audit(1749096214.599:10): pid=1331 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.12738" name="/newroot/2540/memory.events" dev="tmpfs" ino=12772 res=1 errno=0 [ 768.157546][ T30] audit: type=1800 audit(1749096214.599:11): pid=1331 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.12738" name="memory.events" dev="tmpfs" ino=12772 res=0 errno=0 [ 769.241568][ T1342] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 769.284379][ T1342] tipc: Enabled bearer , priority 10 [ 769.374226][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 769.515224][ T1355] netlink: 408 bytes leftover after parsing attributes in process `syz.3.12747'. [ 769.542268][ T1355] netlink: 104 bytes leftover after parsing attributes in process `syz.3.12747'. [ 769.644087][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 769.995106][T23844] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 770.006356][T23844] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 770.018378][T23844] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 770.052813][T23844] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 770.060960][T23844] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 770.126210][ T1369] dummy0 speed is unknown, defaulting to 1000 [ 770.174133][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 770.541645][ T1369] chnl_net:caif_netlink_parms(): no params data found [ 771.007968][ T1369] bridge0: port 1(bridge_slave_0) entered blocking state [ 771.015447][ T1369] bridge0: port 1(bridge_slave_0) entered disabled state [ 771.022801][ T1369] bridge_slave_0: entered allmulticast mode [ 771.033818][ T1369] bridge_slave_0: entered promiscuous mode [ 771.043415][ T1369] bridge0: port 2(bridge_slave_1) entered blocking state [ 771.051679][ T1369] bridge0: port 2(bridge_slave_1) entered disabled state [ 771.059294][ T1369] bridge_slave_1: entered allmulticast mode [ 771.067664][ T1369] bridge_slave_1: entered promiscuous mode [ 771.220004][ T1369] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 771.234123][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 771.257844][ T1369] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 771.425778][ T1369] team0: Port device team_slave_0 added [ 771.452987][ T1369] team0: Port device team_slave_1 added [ 771.667535][ T1369] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 771.684116][ T1369] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 771.762632][ T1369] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 771.825933][ T1369] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 771.832970][ T1369] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 771.914211][ T1369] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 772.115835][ T5852] Bluetooth: hci0: command tx timeout [ 772.144900][ T1369] hsr_slave_0: entered promiscuous mode [ 772.151975][ T1369] hsr_slave_1: entered promiscuous mode [ 772.159245][ T1369] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 772.167137][ T1369] Cannot create hsr debugfs directory [ 772.250818][ T1452] netlink: 224 bytes leftover after parsing attributes in process `syz.2.12786'. [ 772.274073][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 772.809470][ T1469] netlink: 27 bytes leftover after parsing attributes in process `syz.4.12793'. [ 772.902870][ T1369] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 773.005992][ T1468] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 773.314119][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 773.369955][ T1369] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 773.566947][ T1369] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 773.776579][ T1369] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 774.053679][ T1495] netlink: 48 bytes leftover after parsing attributes in process `syz.1.12801'. [ 774.194591][ T5852] Bluetooth: hci0: command tx timeout [ 774.281371][ T1369] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 774.339078][ T1369] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 774.354947][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 774.409814][ T1369] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 774.488669][ T1369] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 775.047178][ T1369] 8021q: adding VLAN 0 to HW filter on device bond0 [ 775.109940][ T1369] 8021q: adding VLAN 0 to HW filter on device team0 [ 775.157060][ T1343] bridge0: port 1(bridge_slave_0) entered blocking state [ 775.164292][ T1343] bridge0: port 1(bridge_slave_0) entered forwarding state [ 775.232744][ T1343] bridge0: port 2(bridge_slave_1) entered blocking state [ 775.240034][ T1343] bridge0: port 2(bridge_slave_1) entered forwarding state [ 775.394185][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 775.400790][ T1369] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 775.529761][ T1525] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12815'. [ 776.053803][ T1369] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 776.080293][ T1542] veth0_to_bridge: entered promiscuous mode [ 776.108701][ T1541] veth0_to_bridge: left promiscuous mode [ 776.156571][ T1544] netlink: 24 bytes leftover after parsing attributes in process `syz.1.12823'. [ 776.210903][ T1544] netlink: 48 bytes leftover after parsing attributes in process `syz.1.12823'. [ 776.268787][ T1369] veth0_vlan: entered promiscuous mode [ 776.289484][ T5852] Bluetooth: hci0: command tx timeout [ 776.347164][ T1369] veth1_vlan: entered promiscuous mode [ 776.387898][T23844] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 776.398627][T23844] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 776.409859][T23844] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 776.427112][T23844] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 776.437911][T23844] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 776.444073][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 776.564157][ T1550] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.12825'. [ 776.564771][ T1369] veth0_macvtap: entered promiscuous mode [ 776.661793][ T1369] veth1_macvtap: entered promiscuous mode [ 776.691582][ T1547] dummy0 speed is unknown, defaulting to 1000 [ 776.764779][ T1369] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 776.884799][ T1369] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 776.923416][ T1369] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 776.934288][ T1369] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 776.943549][ T1369] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 776.954571][ T1369] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 776.976303][ T1561] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 776.983600][ T1561] IPv6: NLM_F_CREATE should be set when creating new route [ 776.990926][ T1561] IPv6: NLM_F_CREATE should be set when creating new route [ 777.474333][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 777.566425][ T876] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 777.584029][ T876] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 777.697766][ T873] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 777.728380][ T873] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 777.824833][ T1547] chnl_net:caif_netlink_parms(): no params data found [ 777.884871][ T1586] netlink: 32 bytes leftover after parsing attributes in process `syz.4.12838'. [ 777.939753][ T1586] netlink: 'syz.4.12838': attribute type 32 has an invalid length. [ 778.062512][ T1586] bond0: option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 778.258718][ T1588] dummy0 speed is unknown, defaulting to 1000 [ 778.323123][ T1547] bridge0: port 1(bridge_slave_0) entered blocking state [ 778.349126][ T1547] bridge0: port 1(bridge_slave_0) entered disabled state [ 778.370090][ T1547] bridge_slave_0: entered allmulticast mode [ 778.388569][ T1547] bridge_slave_0: entered promiscuous mode [ 778.435282][ T1547] bridge0: port 2(bridge_slave_1) entered blocking state [ 778.443111][ T1547] bridge0: port 2(bridge_slave_1) entered disabled state [ 778.454839][ T1547] bridge_slave_1: entered allmulticast mode [ 778.464475][ T1547] bridge_slave_1: entered promiscuous mode [ 778.514087][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 778.523001][ T5852] Bluetooth: hci3: command tx timeout [ 778.602226][ T1547] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 778.646787][ T1547] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 778.719872][ T1547] team0: Port device team_slave_0 added [ 778.774676][ T1547] team0: Port device team_slave_1 added [ 778.844804][ T1547] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 778.852043][ T1547] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 778.882848][ T1547] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 778.902532][ T1547] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 778.910424][ T1547] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 778.937810][ T1547] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 779.023207][ T1547] hsr_slave_0: entered promiscuous mode [ 779.031305][ T1547] hsr_slave_1: entered promiscuous mode [ 779.038397][ T1547] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 779.046171][ T1547] Cannot create hsr debugfs directory [ 779.298239][ T1547] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 779.308846][ T1547] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 779.393359][ T1547] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 779.404096][ T1547] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 779.469112][ T1547] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 779.492030][ T1547] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 779.554132][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 779.631685][ T1547] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 779.677861][ T1547] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 780.133684][ T1547] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 780.170292][ T1547] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 780.197294][ T1547] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 780.228614][ T1547] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 780.359518][T23844] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 780.369735][T23844] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 780.378070][T23844] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 780.387659][T23844] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 780.406135][T23844] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 780.473729][ T1547] 8021q: adding VLAN 0 to HW filter on device bond0 [ 780.518350][ T1547] 8021q: adding VLAN 0 to HW filter on device team0 [ 780.556057][ T1616] dummy0 speed is unknown, defaulting to 1000 [ 780.567981][ T876] bridge0: port 1(bridge_slave_0) entered blocking state [ 780.576573][ T876] bridge0: port 1(bridge_slave_0) entered forwarding state [ 780.594079][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 780.606047][ T5852] Bluetooth: hci3: command tx timeout [ 780.625818][ T876] bridge0: port 2(bridge_slave_1) entered blocking state [ 780.633063][ T876] bridge0: port 2(bridge_slave_1) entered forwarding state [ 781.592133][ T1616] chnl_net:caif_netlink_parms(): no params data found [ 781.634156][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 781.835672][ T1547] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 782.126481][ T1616] bridge0: port 1(bridge_slave_0) entered blocking state [ 782.146509][ T1616] bridge0: port 1(bridge_slave_0) entered disabled state [ 782.165221][ T1616] bridge_slave_0: entered allmulticast mode [ 782.173432][ T1616] bridge_slave_0: entered promiscuous mode [ 782.261153][ T1616] bridge0: port 2(bridge_slave_1) entered blocking state [ 782.269690][ T1616] bridge0: port 2(bridge_slave_1) entered disabled state [ 782.279294][ T1616] bridge_slave_1: entered allmulticast mode [ 782.288110][ T1616] bridge_slave_1: entered promiscuous mode [ 782.355076][ T1662] nbd: socks must be embedded in a SOCK_ITEM attr [ 782.363353][ T1662] block nbd1: shutting down sockets [ 782.447249][ T5852] Bluetooth: hci0: command tx timeout [ 782.452257][ T1616] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 782.492947][ T1616] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 782.550521][ T1547] veth0_vlan: entered promiscuous mode [ 782.663436][ T1616] team0: Port device team_slave_0 added [ 782.675416][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 782.683125][ T5852] Bluetooth: hci3: command tx timeout [ 782.723319][ T1672] netlink: 548 bytes leftover after parsing attributes in process `syz.3.12866'. [ 782.753614][ T1668] netlink: 'syz.3.12866': attribute type 29 has an invalid length. [ 782.781408][ T1616] team0: Port device team_slave_1 added [ 782.829976][ T1670] netlink: 'syz.3.12866': attribute type 29 has an invalid length. [ 782.924854][ T1547] veth1_vlan: entered promiscuous mode [ 782.936001][ T1616] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 782.943110][ T1616] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 782.973607][ T1616] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 783.025508][ T1616] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 783.032609][ T1616] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 783.064562][ T1616] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 783.101064][ T1547] veth0_macvtap: entered promiscuous mode [ 783.122133][ T1547] veth1_macvtap: entered promiscuous mode [ 783.255656][ T1616] hsr_slave_0: entered promiscuous mode [ 783.266070][ T1616] hsr_slave_1: entered promiscuous mode [ 783.272813][ T1616] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 783.280958][ T1616] Cannot create hsr debugfs directory [ 783.298963][ T1547] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 783.360867][ T1547] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 783.436354][ T1547] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 783.454066][ T1547] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 783.462926][ T1547] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 783.493975][ T1547] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 783.714183][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 784.035565][ T870] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 784.043664][ T870] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 784.119535][T23844] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 784.136563][T23844] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 784.145909][T23844] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 784.155470][T23844] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 784.167943][T23844] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 784.417474][ T1616] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 784.512403][T15885] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 784.525018][ T5852] Bluetooth: hci0: command tx timeout [ 784.534366][T15885] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 784.664770][ T1616] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 784.754212][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 784.764657][ T5852] Bluetooth: hci3: command tx timeout [ 784.767194][ T1687] dummy0 speed is unknown, defaulting to 1000 [ 784.839823][ T1616] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 785.336919][ T1616] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 785.794127][ C1] ------------[ cut here ]------------ [ 785.799949][ C1] refcount_t: addition on 0; use-after-free. [ 785.806495][ C1] WARNING: CPU: 1 PID: 1337 at lib/refcount.c:25 refcount_warn_saturate+0xfa/0x1d0 [ 785.816073][ C1] Modules linked in: [ 785.820028][ C1] CPU: 1 UID: 0 PID: 1337 Comm: kworker/u8:7 Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(full) [ 785.832187][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 785.842418][ C1] Workqueue: bat_events batadv_nc_worker [ 785.848223][ C1] RIP: 0010:refcount_warn_saturate+0xfa/0x1d0 [ 785.854463][ C1] Code: 00 00 e8 d9 72 00 fd 5b 41 5e e9 01 df a6 06 cc e8 cb 72 00 fd c6 05 67 23 cb 0a 01 90 48 c7 c7 80 19 e2 8b e8 17 5f c4 fc 90 <0f> 0b 90 90 eb d7 e8 ab 72 00 fd c6 05 48 23 cb 0a 01 90 48 c7 c7 [ 785.874339][ C1] RSP: 0018:ffffc90000a08828 EFLAGS: 00010246 [ 785.880453][ C1] RAX: 35e8ccd3444c4e00 RBX: 0000000000000002 RCX: ffff888027cd5a00 [ 785.888485][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 785.896601][ C1] RBP: ffffc90000a089b0 R08: 0000000000000003 R09: 0000000000000004 [ 785.904625][ C1] R10: dffffc0000000000 R11: fffffbfff1bfa66c R12: ffff888032ef4100 [ 785.912638][ C1] R13: dffffc0000000000 R14: ffff888032ef426c R15: ffff88804172a800 [ 785.920760][ C1] FS: 0000000000000000(0000) GS:ffff888125d66000(0000) knlGS:0000000000000000 [ 785.929812][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 785.936444][ C1] CR2: 00007ff3e6d7e2d8 CR3: 000000000df36000 CR4: 00000000003526f0 [ 785.944530][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 785.952584][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 785.960872][ C1] Call Trace: [ 785.964294][ C1] [ 785.967249][ C1] tipc_crypto_xmit+0x1820/0x22c0 [ 785.972390][ C1] ? __pfx_tipc_crypto_xmit+0x10/0x10 [ 785.977900][ C1] tipc_bearer_xmit_skb+0x245/0x400 [ 785.983109][ C1] ? tipc_bearer_xmit_skb+0xa9/0x400 [ 785.988421][ C1] ? __pfx_tipc_bearer_xmit_skb+0x10/0x10 [ 785.994348][ C1] tipc_disc_timeout+0x580/0x6d0 [ 785.999350][ C1] ? __pfx_tipc_disc_timeout+0x10/0x10 [ 786.005080][ C1] call_timer_fn+0x17e/0x5f0 [ 786.009716][ C1] ? __pfx_tipc_disc_timeout+0x10/0x10 [ 786.015230][ C1] ? call_timer_fn+0xbe/0x5f0 [ 786.019945][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 786.025135][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 786.030412][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 786.035731][ C1] ? __pfx_tipc_disc_timeout+0x10/0x10 [ 786.041231][ C1] __run_timer_base+0x61a/0x860 [ 786.046116][ C1] ? ktime_get+0x3e/0x1f0 [ 786.050500][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 786.055908][ C1] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 786.062156][ C1] run_timer_softirq+0xb7/0x180 [ 786.067026][ C1] handle_softirqs+0x286/0x870 [ 786.071794][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 786.076581][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 786.081956][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 786.087171][ C1] __irq_exit_rcu+0xca/0x1f0 [ 786.091765][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 786.096990][ C1] irq_exit_rcu+0x9/0x30 [ 786.101323][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 786.107103][ C1] [ 786.110055][ C1] [ 786.113156][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 786.119198][ C1] RIP: 0010:debug_smp_processor_id+0x0/0x20 [ 786.125128][ C1] Code: c7 c0 8b 1f 8e 4c 89 f6 e8 bd 4d 91 f9 e9 66 ff ff ff cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 48 c7 c7 a0 63 e2 8b 48 c7 c6 e0 63 e2 8b eb 1c 66 66 [ 786.145010][ C1] RSP: 0018:ffffc9000478f9f8 EFLAGS: 00000282 [ 786.151235][ C1] RAX: ffffffff8b315633 RBX: 0000000000000001 RCX: 0000000000000000 [ 786.159256][ C1] RDX: ffff888027cd5a00 RSI: 0000000000000001 RDI: 0000000000000000 [ 786.167301][ C1] RBP: ffff88807da858d8 R08: 0000000000000000 R09: ffffffff8b315602 [ 786.175438][ C1] R10: dffffc0000000000 R11: ffffffff8b315530 R12: dffffc0000000000 [ 786.183458][ C1] R13: ffffffff8b315602 R14: ffff888032a50d80 R15: 000000000000031b [ 786.191459][ C1] ? batadv_nc_worker+0xd2/0x610 [ 786.196423][ C1] ? __pfx_batadv_nc_worker+0x10/0x10 [ 786.201798][ C1] ? batadv_nc_worker+0xd2/0x610 [ 786.206838][ C1] ? batadv_nc_worker+0x103/0x610 [ 786.211871][ C1] ? batadv_nc_worker+0xd2/0x610 [ 786.216829][ C1] rcu_is_watching+0x15/0xb0 [ 786.221597][ C1] batadv_nc_worker+0x10c/0x610 [ 786.226648][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 786.232495][ C1] process_scheduled_works+0xae1/0x17b0 [ 786.238114][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 786.244124][ C1] worker_thread+0x8a0/0xda0 [ 786.248734][ C1] kthread+0x70e/0x8a0 [ 786.252806][ C1] ? __pfx_worker_thread+0x10/0x10 [ 786.257933][ C1] ? __pfx_kthread+0x10/0x10 [ 786.262533][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 786.267744][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 786.272953][ C1] ? __pfx_kthread+0x10/0x10 [ 786.277571][ C1] ret_from_fork+0x3fc/0x770 [ 786.282344][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 786.287521][ C1] ? __switch_to_asm+0x39/0x70 [ 786.292584][ C1] ? __switch_to_asm+0x33/0x70 [ 786.297382][ C1] ? __pfx_kthread+0x10/0x10 [ 786.301971][ C1] ret_from_fork_asm+0x1a/0x30 [ 786.306767][ C1] [ 786.309895][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 786.317186][ C1] CPU: 1 UID: 0 PID: 1337 Comm: kworker/u8:7 Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(full) [ 786.329432][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 786.339691][ C1] Workqueue: bat_events batadv_nc_worker [ 786.345411][ C1] Call Trace: [ 786.348800][ C1] [ 786.351653][ C1] dump_stack_lvl+0x99/0x250 [ 786.356265][ C1] ? __asan_memcpy+0x40/0x70 [ 786.360886][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 786.366098][ C1] ? __pfx__printk+0x10/0x10 [ 786.370720][ C1] panic+0x2db/0x790 [ 786.374649][ C1] ? __pfx_panic+0x10/0x10 [ 786.379080][ C1] ? show_trace_log_lvl+0x4fb/0x550 [ 786.384396][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 786.389378][ C1] __warn+0x31b/0x4b0 [ 786.393395][ C1] ? refcount_warn_saturate+0xfa/0x1d0 [ 786.398886][ C1] ? refcount_warn_saturate+0xfa/0x1d0 [ 786.404797][ C1] report_bug+0x2be/0x4f0 [ 786.409141][ C1] ? refcount_warn_saturate+0xfa/0x1d0 [ 786.414710][ C1] ? refcount_warn_saturate+0xfa/0x1d0 [ 786.420184][ C1] ? refcount_warn_saturate+0xfc/0x1d0 [ 786.425662][ C1] handle_bug+0x84/0x160 [ 786.429919][ C1] exc_invalid_op+0x1a/0x50 [ 786.434453][ C1] asm_exc_invalid_op+0x1a/0x20 [ 786.439339][ C1] RIP: 0010:refcount_warn_saturate+0xfa/0x1d0 [ 786.445513][ C1] Code: 00 00 e8 d9 72 00 fd 5b 41 5e e9 01 df a6 06 cc e8 cb 72 00 fd c6 05 67 23 cb 0a 01 90 48 c7 c7 80 19 e2 8b e8 17 5f c4 fc 90 <0f> 0b 90 90 eb d7 e8 ab 72 00 fd c6 05 48 23 cb 0a 01 90 48 c7 c7 [ 786.465244][ C1] RSP: 0018:ffffc90000a08828 EFLAGS: 00010246 [ 786.471684][ C1] RAX: 35e8ccd3444c4e00 RBX: 0000000000000002 RCX: ffff888027cd5a00 [ 786.479668][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 786.487652][ C1] RBP: ffffc90000a089b0 R08: 0000000000000003 R09: 0000000000000004 [ 786.495989][ C1] R10: dffffc0000000000 R11: fffffbfff1bfa66c R12: ffff888032ef4100 [ 786.504065][ C1] R13: dffffc0000000000 R14: ffff888032ef426c R15: ffff88804172a800 [ 786.512164][ C1] ? refcount_warn_saturate+0xf9/0x1d0 [ 786.517747][ C1] tipc_crypto_xmit+0x1820/0x22c0 [ 786.522825][ C1] ? __pfx_tipc_crypto_xmit+0x10/0x10 [ 786.528312][ C1] tipc_bearer_xmit_skb+0x245/0x400 [ 786.533532][ C1] ? tipc_bearer_xmit_skb+0xa9/0x400 [ 786.538832][ C1] ? __pfx_tipc_bearer_xmit_skb+0x10/0x10 [ 786.544699][ C1] tipc_disc_timeout+0x580/0x6d0 [ 786.549759][ C1] ? __pfx_tipc_disc_timeout+0x10/0x10 [ 786.555255][ C1] call_timer_fn+0x17e/0x5f0 [ 786.559863][ C1] ? __pfx_tipc_disc_timeout+0x10/0x10 [ 786.565333][ C1] ? call_timer_fn+0xbe/0x5f0 [ 786.570021][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 786.575154][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 786.580365][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 786.585669][ C1] ? __pfx_tipc_disc_timeout+0x10/0x10 [ 786.591140][ C1] __run_timer_base+0x61a/0x860 [ 786.596007][ C1] ? ktime_get+0x3e/0x1f0 [ 786.600385][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 786.605784][ C1] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 786.612081][ C1] run_timer_softirq+0xb7/0x180 [ 786.617054][ C1] handle_softirqs+0x286/0x870 [ 786.621839][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 786.626715][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 786.632194][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 786.637410][ C1] __irq_exit_rcu+0xca/0x1f0 [ 786.642105][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 786.647419][ C1] irq_exit_rcu+0x9/0x30 [ 786.651702][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 786.657369][ C1] [ 786.660316][ C1] [ 786.663258][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 786.669253][ C1] RIP: 0010:debug_smp_processor_id+0x0/0x20 [ 786.675178][ C1] Code: c7 c0 8b 1f 8e 4c 89 f6 e8 bd 4d 91 f9 e9 66 ff ff ff cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 48 c7 c7 a0 63 e2 8b 48 c7 c6 e0 63 e2 8b eb 1c 66 66 [ 786.695174][ C1] RSP: 0018:ffffc9000478f9f8 EFLAGS: 00000282 [ 786.701488][ C1] RAX: ffffffff8b315633 RBX: 0000000000000001 RCX: 0000000000000000 [ 786.709510][ C1] RDX: ffff888027cd5a00 RSI: 0000000000000001 RDI: 0000000000000000 [ 786.718142][ C1] RBP: ffff88807da858d8 R08: 0000000000000000 R09: ffffffff8b315602 [ 786.726247][ C1] R10: dffffc0000000000 R11: ffffffff8b315530 R12: dffffc0000000000 [ 786.734334][ C1] R13: ffffffff8b315602 R14: ffff888032a50d80 R15: 000000000000031b [ 786.742526][ C1] ? batadv_nc_worker+0xd2/0x610 [ 786.747500][ C1] ? __pfx_batadv_nc_worker+0x10/0x10 [ 786.752976][ C1] ? batadv_nc_worker+0xd2/0x610 [ 786.757941][ C1] ? batadv_nc_worker+0x103/0x610 [ 786.762997][ C1] ? batadv_nc_worker+0xd2/0x610 [ 786.767948][ C1] rcu_is_watching+0x15/0xb0 [ 786.772565][ C1] batadv_nc_worker+0x10c/0x610 [ 786.777427][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 786.783249][ C1] process_scheduled_works+0xae1/0x17b0 [ 786.788863][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 786.794891][ C1] worker_thread+0x8a0/0xda0 [ 786.799539][ C1] kthread+0x70e/0x8a0 [ 786.803809][ C1] ? __pfx_worker_thread+0x10/0x10 [ 786.808937][ C1] ? __pfx_kthread+0x10/0x10 [ 786.813538][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 786.818771][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 786.824082][ C1] ? __pfx_kthread+0x10/0x10 [ 786.828715][ C1] ret_from_fork+0x3fc/0x770 [ 786.833335][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 786.838475][ C1] ? __switch_to_asm+0x39/0x70 [ 786.843341][ C1] ? __switch_to_asm+0x33/0x70 [ 786.848205][ C1] ? __pfx_kthread+0x10/0x10 [ 786.852861][ C1] ret_from_fork_asm+0x1a/0x30 [ 786.857704][ C1] [ 786.861151][ C1] Kernel Offset: disabled [ 786.865564][ C1] Rebooting in 86400 seconds..