last executing test programs: 2m40.393290837s ago: executing program 2 (id=3916): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x630, 0x1b8, 0x0, 0x428, 0x0, 0x0, 0x560, 0x560, 0x560, 0x560, 0x560, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x8}}}, {{@ipv6={@mcast1, @local, [], [], 'xfrm0\x00', 'ip6tnl0\x00', {}, {}, 0x6, 0x0, 0x6, 0x72}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00', {}, {0xff}}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@frag={{0x30}, {[0x4, 0x2280], 0x4, 0x2}}, @common=@inet=@socket1={{0x28, 'socket\x00', 0x3}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}, {0x0, 0x0, 0x0, [0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xf8, 0x138, 0x0, {}, [@common=@eui64={{0x28}}, @inet=@rpfilter={{0x28}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x690) 2m40.232816028s ago: executing program 2 (id=3921): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e22, @local}], 0x1) 2m40.095275944s ago: executing program 2 (id=3924): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r0, 0x11, 0xa, &(0x7f0000000000)=0x10000, 0x4) 2m39.850401118s ago: executing program 2 (id=3931): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="30000000001401"], 0x30}}, 0x0) 2m39.777004694s ago: executing program 2 (id=3934): pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mmap$xdp(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000002, 0x13, r0, 0x0) 2m39.626371898s ago: executing program 2 (id=3938): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000006e00)={&(0x7f0000006c40)={0x14, 0x25, 0x1, 0x70bd27, 0x25dfdbfe, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4000094}, 0x8000) 2m29.954377683s ago: executing program 0 (id=4213): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x3, 0x3}}]}}}]}, 0x40}}, 0x0) 2m29.691370251s ago: executing program 0 (id=4222): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000080)="48000000150081fb7059ae08060c04000a1a1011000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x0) 2m29.534386339s ago: executing program 0 (id=4226): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x401, 0x70bd25, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x60000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa}]}, 0x40}}, 0x0) 2m29.381870733s ago: executing program 0 (id=4230): r0 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$inet6_int(r0, 0x29, 0x7, 0x0, &(0x7f0000000040)) 2m29.226448343s ago: executing program 0 (id=4233): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$int_in(r0, 0x5452, 0x0) 2m29.154548631s ago: executing program 0 (id=4237): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x14, 0x25, 0x1, 0xfffffffd, 0x0, {0x5, 0x2}}, 0x14}}, 0x0) 2m24.586414164s ago: executing program 32 (id=3938): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000006e00)={&(0x7f0000006c40)={0x14, 0x25, 0x1, 0x70bd27, 0x25dfdbfe, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4000094}, 0x8000) 2m14.103963378s ago: executing program 33 (id=4237): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x14, 0x25, 0x1, 0xfffffffd, 0x0, {0x5, 0x2}}, 0x14}}, 0x0) 44.139236645s ago: executing program 1 (id=6900): r0 = socket(0x11, 0x800000003, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d40)=@newqdisc={0x90, 0x24, 0xf0b, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x60, 0x2, {{0x2, [], 0x0, [0x4, 0x2], [0x0, 0x4]}, [@TCA_MQPRIO_MODE={0x6, 0x4}]}}}]}, 0x90}}, 0x0) 43.966208831s ago: executing program 1 (id=6904): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'gre0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x421, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_DPORT={0x6}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x856}]}}}]}, 0x40}}, 0x0) 43.8868374s ago: executing program 1 (id=6907): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000200001032abd7000ffdbdf250a0000000000000800000000080018004e214e24"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) 43.699715293s ago: executing program 1 (id=6914): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3000002, 0x52, r0, 0xffffe000) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r1, 0x84, 0x82, &(0x7f0000000080)=""/4076, &(0x7f00000010c0)=0xfec) 43.607626473s ago: executing program 1 (id=6917): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f0000000280)="ca", &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000007c0)={r0, &(0x7f0000000740)="8a0d", &(0x7f00000006c0)=""/46}, 0x20) 43.485506677s ago: executing program 1 (id=6921): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000240)='pmap_register\x00', r1, 0x0, 0xf69}, 0x18) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400448c0}, 0x0) 28.458428129s ago: executing program 34 (id=6921): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000240)='pmap_register\x00', r1, 0x0, 0xf69}, 0x18) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400448c0}, 0x0) 1.815253164s ago: executing program 7 (id=8041): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={r2, 0x9}, 0x8) 1.080352629s ago: executing program 6 (id=8053): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x43, 0x0, 0x0, 0x3}, 0x10) bind$tipc(r0, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000000140)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x43, 0x1}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x24004000}, 0x800) 1.003463877s ago: executing program 5 (id=8056): bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) 958.096116ms ago: executing program 3 (id=8057): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private0, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0x0, 0xffffffff]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000080)={{0xa, 0x4e20, 0x3, @empty, 0x9}, {0xa, 0x4e20, 0x4, @mcast1, 0x80000001}, 0x1, {[0x1, 0x5, 0x0, 0x8, 0xffff, 0xfffffffe, 0xffff, 0x9]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0x0, 0x0, 0x9]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x0, 0x0, @remote}, {0xa, 0x4e22, 0xfffffffd, @mcast1}}, 0x5c) 950.347816ms ago: executing program 4 (id=8058): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000840)={@val={0x8, 0x800}, @val={0x6, 0x0, 0x6, 0x0, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0xfc0, 0x66, 0x0, 0xb, 0x6c, 0x0, @rand_addr=0x64010102, @broadcast}, "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"}}, 0xfce) 896.678363ms ago: executing program 6 (id=8059): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d40)=@newqdisc={0x3a8, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x378, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x20000000, 0x0, 0x1c}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x64, 0x2, 0x3, 0x17, 0xd, 0x8, 0x1}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x2}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "a2a88faa7ec665a571a9ad3d1f9512e3c591df4a4554c6c2e2cc6cb4d9aee4579684743ad4888f1522a47ddaff3d4f9450d288e8559bc4f795aa0d1bc74d926038adb808cba6e90535b2eb8ba3e8ff927207d17a86b10d604e77a459df67e7f0c842d463ca5977b7e2eb55fbb9881d15633717817c735da52a1da7d64bb22e58550d8ee20883e41ec2f119a6a6364d68900c1cce4a3b3225a9ce9e1e00b444e9e7bcd10e1dec202ce7786aa7cf10d4dd6bbcee586d7903a6239ff90b49cd7fddb0c67ddab326cdb2d0fa48a783f691be9ebaa1243b21afd04a372650aa7eb46a2675cc67ae12d3b99c9acb4d9fb7c78081d269b443affd86eededd4867311221"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0xfffffffc}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x3a8}}, 0x0) 850.052813ms ago: executing program 7 (id=8060): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r0, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000003100)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x400122a0, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000440)=""/219, 0xdb}], 0x1}, 0x40000000) 849.329578ms ago: executing program 5 (id=8061): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f00000002c0)={@mcast2, @ipv4={'\x00', '\xff\xff', @multicast1}, @dev={0xfe, 0x80, '\x00', 0x36}, 0x4, 0x6, 0x0, 0x100, 0x4, 0x20000, r2}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000800)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2, @private0, 0x1, 0x6, 0x0, 0x100, 0x6, 0x180107, r2}) 759.453671ms ago: executing program 5 (id=8062): write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000), 0xffffff6a) r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000000)={r2, 0xffff, 0x3}, 0x8) 746.793976ms ago: executing program 3 (id=8063): r0 = socket$kcm(0x10, 0x2, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, &(0x7f00000005c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r2, 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x320, &(0x7f0000000180)=[{&(0x7f0000000340)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f1400000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec001210000140090c0c00bdad446b9bbc7a46e39882a5dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1, 0x0, 0x0, 0xff0f0000}, 0x0) 697.297724ms ago: executing program 4 (id=8064): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x0, 0x0, 0x0, 0x6f, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000780)=[{0x3, 0x4, 0x1, 0x7}, {0x1, 0x2, 0xc, 0x3}], 0x10, 0x80000000}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) shutdown(r0, 0x0) recvmsg$unix(r0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x20}, 0x0) syz_open_procfs$namespace(r1, 0x0) 679.621903ms ago: executing program 7 (id=8065): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x2000003c, &(0x7f0000000280)}) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r1, &(0x7f0000000040)=ANY=[], 0x6) 640.115017ms ago: executing program 5 (id=8066): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x194, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0xb}}, [@filter_kind_options=@f_flower={{0xb}, {0x54, 0x2, [@TCA_FLOWER_KEY_CVLAN_ID={0x6, 0x4d, 0xfa7}, @TCA_FLOWER_KEY_ETH_DST={0xa}, @TCA_FLOWER_KEY_ICMPV4_CODE_MASK={0x5}, @TCA_FLOWER_KEY_ARP_SIP_MASK={0x8, 0x3a, 0xffffffff}, @TCA_FLOWER_KEY_IPV6_SRC_MASK={0x14, 0xf, [0xff000000, 0x0, 0xffffffff, 0xffffff00]}, @TCA_FLOWER_KEY_UDP_DST_MASK={0x6}, @TCA_FLOWER_KEY_ICMPV6_TYPE={0x5}, @TCA_FLOWER_KEY_MPLS_LABEL={0x8, 0x46, 0xa1}]}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x100, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x3}, @TCA_BPF_ACT={0xec, 0x1, [@m_ctinfo={0xe8, 0x19, 0x0, 0x0, {{0xb}, {0x4}, {0xb9, 0x6, "ed5c1eb99390e7d0a8730c2f4ad7eab8a255351b763e5585c30ef05596ff09fd3ea6975074d4baa7805a08bfdd7f7fa2634cbcdbba1c88eea89d70023a7b9d8d2a94daf79fa1e5bffdc60fbea174f1aa7372acb7f356da638e68d8cc0dfa35b1ef1879e8526f439300c841829ae601a7811d02b21fcc5aaa7951b03466f8a1800a4b912630d3eb9f282786ef340f4e3cb08280f71f4ee2941ec13001a2c7884372e6ba0fb2f0aaa4766f88f4e7f768d299cf02a379"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}]}, 0x194}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newlink={0x34, 0x10, 0x403, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40800}, [@IFLA_ADDRESS={0xa, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @IFLA_TARGET_NETNSID={0x8}]}, 0x34}, 0x1, 0xba01, 0x0, 0x400c002}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 587.586323ms ago: executing program 6 (id=8067): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000000)='inet_sock_set_state\x00', r0, 0x0, 0x3}, 0x18) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r1, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4) sendmmsg(r1, &(0x7f00000007c0)=[{{&(0x7f0000000380)=@in={0x2, 0x4e24, @local}, 0x80, &(0x7f0000000140)=[{&(0x7f00000004c0)='&', 0x1}], 0x1}}], 0xf00, 0x2c000011) 573.818908ms ago: executing program 4 (id=8068): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4000800) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)=@generic={0x0, 0x0, 0x8}, 0x18) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r0, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) 524.340013ms ago: executing program 3 (id=8069): openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000005c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="21012cbd7000000000001400000008000300", @ANYRES32=r2, @ANYBLOB="0600360000"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x0) 479.8666ms ago: executing program 4 (id=8070): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r3, r1, 0x25, 0x8, @void}, 0x10) 475.549695ms ago: executing program 7 (id=8071): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'md5\x00'}, 0x58) r1 = accept(r0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_GET(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000001080)=ANY=[], 0x1a0}, 0x1, 0x0, 0x0, 0x4000000}, 0x8004) accept4(r1, &(0x7f0000001040)=@in6, 0x0, 0x80000) 406.677343ms ago: executing program 4 (id=8072): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x1, 0xcf54) 397.88728ms ago: executing program 6 (id=8073): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f00000025c0)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)='P', 0x1}], 0x1}}, {{&(0x7f0000000100)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000002400)=[{&(0x7f0000000140)='i', 0x1}], 0x1}}], 0x2, 0x0) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000280)={0x0, 0x4}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x5}, &(0x7f0000000240)=0x8) 360.321887ms ago: executing program 5 (id=8074): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{r0, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f00000003c0)='%pI4 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1, 0xffffffffffffffff}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000ffff0b867b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r3, 0x0, 0xe, 0x48000000, &(0x7f0000000300)="40f0538ef047b21fb60068305500", 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 319.603681ms ago: executing program 7 (id=8075): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x11000) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 318.782752ms ago: executing program 3 (id=8076): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000040)={r2, 0x561b}, &(0x7f0000000080)=0x8) 242.153556ms ago: executing program 4 (id=8077): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000040)=0x8000, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) readv(r0, &(0x7f0000000440)=[{&(0x7f00000006c0)=""/212, 0xd4}], 0x1) 241.543141ms ago: executing program 3 (id=8078): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x1c}}, 0x0) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r2, 0x1}, 0x14}}, 0x0) 175.570408ms ago: executing program 6 (id=8079): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x50, r1, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5, 0x37, 0x13b6d97d41cdaec4}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}, @IEEE802154_ATTR_SHORT_ADDR={0x6}]}, 0x50}, 0x4, 0x700000000000000}, 0x0) 174.678501ms ago: executing program 7 (id=8080): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x83, &(0x7f0000000000)={r2, 0x2}, 0x8) 66.14432ms ago: executing program 3 (id=8081): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000580)=0x108e75, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0xfffd, 0x8000000, @loopback, 0x3}, 0x1c) recvmmsg(r0, &(0x7f0000002000)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x10000, 0x0) 58.158258ms ago: executing program 5 (id=8082): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x80000, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0xb, 0xb}, {0xd, 0x5}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0xb, 0x3, 0xa7, 0x101, 0xd8d6, 0x4001}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8021}, 0x4008000) 0s ago: executing program 6 (id=8083): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$kcm(0x2, 0x1, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x4a, &(0x7f0000000040), 0x4) kernel console output (not intermixed with test programs): : Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.571373][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.581410][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.630093][ T5898] veth0_macvtap: entered promiscuous mode [ 82.651692][ T5898] veth1_macvtap: entered promiscuous mode [ 82.664510][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.673071][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.728203][ T1114] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.738305][ T1114] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.790757][ T5892] veth0_vlan: entered promiscuous mode [ 82.876119][ T5898] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.911938][ T5898] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.964573][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.967640][ T5892] veth1_vlan: entered promiscuous mode [ 82.986592][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.002558][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.013565][ T5839] Bluetooth: hci0: command tx timeout [ 83.020473][ T5839] Bluetooth: hci1: command tx timeout [ 83.029111][ T5889] Bluetooth: hci2: command tx timeout [ 83.045962][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.054799][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.126316][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.165895][ T5839] Bluetooth: hci4: command tx timeout [ 83.171335][ T5839] Bluetooth: hci3: command tx timeout [ 83.238161][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.269540][ T5892] veth0_macvtap: entered promiscuous mode [ 83.276170][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.348841][ T5892] veth1_macvtap: entered promiscuous mode [ 83.457540][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.479628][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.547035][ T5892] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.618942][ T5892] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.672130][ T3487] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.713531][ T3487] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.746206][ T3487] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.775188][ T3487] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.800734][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.824419][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.140756][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.185998][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.248610][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.258640][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.709411][ T6188] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x5 [ 86.763837][ T6190] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 86.806498][ T43] cfg80211: failed to load regulatory.db [ 89.807769][ T6348] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 93.667586][ T6548] ip_tunnel: non-ECT from 2.0.0.0 with TOS=0x3 [ 96.565910][ T6700] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 96.656937][ T6704] ICMPv6: NA: 00:00:00:00:00:00 advertised our address fe80::aa on syz_tun! [ 111.997853][ T7518] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 122.754128][ T8064] can: request_module (can-proto-0) failed. [ 128.014610][ T8354] IPv6: addrconf: prefix option has invalid lifetime [ 130.124242][ T8470] netlink: 666 bytes leftover after parsing attributes in process `syz.2.1225'. [ 131.537410][ T8548] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1264'. [ 131.626010][ T8548] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1264'. [ 131.718450][ T8558] xt_ecn: cannot match TCP bits for non-tcp packets [ 132.182902][ T8583] netlink: 'syz.0.1281': attribute type 10 has an invalid length. [ 132.201764][ T8584] netlink: 'syz.3.1280': attribute type 1 has an invalid length. [ 132.215469][ T8584] netlink: 'syz.3.1280': attribute type 3 has an invalid length. [ 132.251035][ T8584] netlink: 'syz.3.1280': attribute type 235 has an invalid length. [ 132.298727][ T8583] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 132.396176][ T8591] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 132.403585][ T8591] IPv6: NLM_F_CREATE should be set when creating new route [ 132.447399][ T8595] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1286'. [ 132.479514][ T8595] 8021q: VLANs not supported on gre0 [ 132.502043][ T8599] syz.3.1289 uses obsolete (PF_INET,SOCK_PACKET) [ 132.755652][ T8610] netlink: 'syz.1.1293': attribute type 1 has an invalid length. [ 132.779055][ T8613] warning: `syz.4.1294' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 132.849542][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.856235][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.862317][ T8616] netlink: 'syz.3.1296': attribute type 5 has an invalid length. [ 132.931746][ T8620] vlan0: entered promiscuous mode [ 132.955781][ T8620] vlan0: entered allmulticast mode [ 132.981356][ T8620] veth0_vlan: entered allmulticast mode [ 133.885659][ T8672] xt_cgroup: invalid path, errno=-2 [ 134.148270][ T8683] xt_CT: You must specify a L4 protocol and not use inversions on it [ 134.235714][ T8690] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1329'. [ 134.388182][ T8698] mac80211_hwsim hwsim11 ÿ: renamed from wlan1 (while UP) [ 134.632112][ T8710] netlink: 'syz.1.1339': attribute type 7 has an invalid length. [ 134.844420][ T8721] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1345'. [ 135.404596][ T8748] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1358'. [ 135.788074][ T8769] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1367'. [ 135.947356][ T8777] netlink: 244 bytes leftover after parsing attributes in process `syz.4.1370'. [ 136.373117][ T8794] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 136.498605][ T8795] bond1: Unable to set peer notification delay as MII monitoring is disabled [ 136.520147][ T8795] bond1 (unregistering): Released all slaves [ 136.977581][ T8823] ieee802154 phy0 wpan0: encryption failed: -22 [ 137.261411][ T8840] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1402'. [ 137.271817][ T8839] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1401'. [ 137.710390][ T8860] netlink: 'syz.1.1412': attribute type 2 has an invalid length. [ 137.731236][ T8860] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1412'. [ 138.154101][ T8886] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1424'. [ 138.223789][ T8886] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1424'. [ 138.260939][ T8892] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1427'. [ 138.419826][ T8899] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1430'. [ 138.680645][ T8912] netlink: 'syz.3.1437': attribute type 10 has an invalid length. [ 138.776068][ T8919] ieee802154 phy0 wpan0: encryption failed: -22 [ 139.077012][ T8934] unsupported nlmsg_type 40 [ 139.418119][ T8950] x_tables: duplicate underflow at hook 3 [ 140.458929][ T9007] xt_nat: multiple ranges no longer supported [ 140.654697][ T9018] netlink: 808 bytes leftover after parsing attributes in process `syz.0.1490'. [ 140.851842][ T9030] x_tables: unsorted entry at hook 2 [ 141.004802][ T9038] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1498'. [ 141.525451][ T9067] netlink: 'syz.0.1510': attribute type 1 has an invalid length. [ 141.554269][ T9067] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1510'. [ 141.744250][ T9076] netlink: 'syz.2.1517': attribute type 9 has an invalid length. [ 141.785460][ T9079] netlink: 'syz.0.1518': attribute type 1 has an invalid length. [ 141.794527][ T9080] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1519'. [ 141.825171][ T9079] netlink: 'syz.0.1518': attribute type 1 has an invalid length. [ 141.990421][ T9087] netlink: 300 bytes leftover after parsing attributes in process `syz.0.1524'. [ 142.317516][ T9102] netlink: 'syz.0.1530': attribute type 1 has an invalid length. [ 142.815141][ T9129] netlink: 'syz.0.1543': attribute type 1 has an invalid length. [ 142.822914][ T9129] netlink: 220 bytes leftover after parsing attributes in process `syz.0.1543'. [ 142.962841][ T9138] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 143.046950][ T9142] netlink: 696 bytes leftover after parsing attributes in process `syz.4.1550'. [ 143.090423][ T9146] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1552'. [ 143.713276][ T9172] netlink: 11 bytes leftover after parsing attributes in process `syz.2.1567'. [ 143.755636][ T9172] netlink: 11 bytes leftover after parsing attributes in process `syz.2.1567'. [ 144.019462][ T9188] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 144.097807][ T9190] netlink: 'syz.1.1574': attribute type 3 has an invalid length. [ 144.115130][ T9188] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 144.123034][ T9188] gretap1: entered promiscuous mode [ 144.133990][ T9188] gretap1: entered allmulticast mode [ 145.496871][ T9254] bond1: option arp_all_targets: invalid value (18446744073709551613) [ 145.542016][ T9254] bond1 (unregistering): Released all slaves [ 145.556346][ T9270] netlink: 'syz.0.1612': attribute type 1 has an invalid length. [ 145.565225][ T5889] Bluetooth: hci4: command 0x0405 tx timeout [ 145.919407][ T9288] SET target dimension over the limit! [ 146.844224][ T9341] __nla_validate_parse: 5 callbacks suppressed [ 146.844242][ T9341] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1646'. [ 147.435119][ T9369] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1660'. [ 147.451657][ T9372] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1663'. [ 147.678724][ T9381] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1668'. [ 147.928777][ T9398] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1675'. [ 148.181592][ T9411] ip6t_srh: unknown srh match flags 5F28 [ 149.080338][ T9440] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 149.442745][ T9458] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 149.518479][ T9450] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.526730][ T9450] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.731577][ T9450] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 149.753842][ T9450] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 149.967943][ T9450] gretap1: left promiscuous mode [ 149.973679][ T9450] gretap1: left allmulticast mode [ 149.981836][ T61] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.045301][ T61] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.054228][ T61] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.096784][ T61] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.155411][ T9480] xt_hashlimit: max too large, truncated to 1048576 [ 150.383813][ T9496] IPv6: NLM_F_CREATE should be specified when creating new route [ 150.614728][ T9506] netlink: 'syz.4.1728': attribute type 1 has an invalid length. [ 150.825568][ T9519] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 151.065200][ T9531] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1740'. [ 151.455317][ T9553] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1751'. [ 151.585443][ T9562] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1755'. [ 151.696497][ T9566] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1757'. [ 152.667664][ T9620] netlink: 596 bytes leftover after parsing attributes in process `syz.3.1784'. [ 152.927635][ T9635] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1791'. [ 153.153165][ T9647] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 153.350725][ T9659] nft_compat: unsupported protocol 0 [ 153.526328][ T9668] netlink: 'syz.4.1807': attribute type 1 has an invalid length. [ 153.534101][ T9668] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1807'. [ 153.581174][ T9668] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1807'. [ 154.138696][ T9702] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1825'. [ 154.327141][ T9713] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1830'. [ 154.362065][ T9715] netlink: 220 bytes leftover after parsing attributes in process `syz.3.1831'. [ 155.018537][ T9751] openvswitch: netlink: Actions may not be safe on all matching packets [ 155.438138][ T9729] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 155.499078][ T9776] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1859'. [ 155.583987][ T9781] netlink: 'syz.3.1860': attribute type 11 has an invalid length. [ 156.686758][ T5839] Bluetooth: hci0: command 0x0401 tx timeout [ 156.691608][ T9842] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 156.735117][ T90] IPVS: starting estimator thread 0... [ 156.776330][ T9848] openvswitch: netlink: Missing valid actions attribute. [ 156.783421][ T9848] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 156.855216][ T9846] IPVS: using max 32 ests per chain, 76800 per kthread [ 157.279526][ T9873] : renamed from bridge_slave_0 (while UP) [ 157.458105][ T9884] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1909'. [ 157.988526][ T9910] netlink: 'syz.1.1923': attribute type 1 has an invalid length. [ 158.007361][ T9910] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1923'. [ 158.025342][ T9910] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1923'. [ 158.520501][ T9940] netlink: 'syz.4.1936': attribute type 1 has an invalid length. [ 158.556611][ T9940] netlink: 'syz.4.1936': attribute type 11 has an invalid length. [ 158.572860][ T9940] netlink: 220 bytes leftover after parsing attributes in process `syz.4.1936'. [ 158.829938][ T9961] netlink: 'syz.0.1947': attribute type 13 has an invalid length. [ 159.045151][ T9971] netlink: 'syz.4.1952': attribute type 16 has an invalid length. [ 159.067570][ T9971] netlink: 'syz.4.1952': attribute type 17 has an invalid length. [ 159.075837][ T9973] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1953'. [ 159.173265][ T9971] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 159.316715][ T9985] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 159.373233][ T9987] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1960'. [ 159.605124][ T9997] netlink: 'syz.4.1965': attribute type 1 has an invalid length. [ 159.612902][ T9997] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1965'. [ 160.137794][T10019] bond1: entered promiscuous mode [ 160.742572][T10064] netlink: 404 bytes leftover after parsing attributes in process `syz.0.1999'. [ 160.745946][T10066] openvswitch: netlink: IP tunnel dst address not specified [ 160.775495][T10064] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1999'. [ 160.791156][T10064] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1999'. [ 160.815090][T10064] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1999'. [ 160.937000][T10070] ieee802154 phy0 wpan0: encryption failed: -22 [ 161.866370][T10117] netlink: 'syz.1.2022': attribute type 11 has an invalid length. [ 162.097176][T10129] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 162.131810][T10130] xt_CT: You must specify a L4 protocol and not use inversions on it [ 162.402479][T10146] openvswitch: netlink: Tunnel attr 20 out of range max 16 [ 162.714374][T10160] netlink: 'syz.3.2042': attribute type 1 has an invalid length. [ 162.751482][T10163] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 163.028815][T10180] __nla_validate_parse: 4 callbacks suppressed [ 163.028834][T10180] netlink: 108 bytes leftover after parsing attributes in process `syz.2.2053'. [ 163.214243][T10188] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 163.913340][T10227] sctp: [Deprecated]: syz.0.2075 (pid 10227) Use of int in maxseg socket option. [ 163.913340][T10227] Use struct sctp_assoc_value instead [ 163.961957][T10231] netlink: 'syz.1.2077': attribute type 1 has an invalid length. [ 163.970461][T10231] netlink: 'syz.1.2077': attribute type 1 has an invalid length. [ 163.976412][T10222] bond1: Unable to set up delay as MII monitoring is disabled [ 164.067947][T10222] bond1 (unregistering): Released all slaves [ 164.651576][T10267] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2096'. [ 165.026750][T10286] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 165.126837][T10291] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 165.229477][T10297] Cannot find add_set index 0 as target [ 165.295947][T10299] netlink: 'syz.4.2111': attribute type 28 has an invalid length. [ 165.325402][T10299] netlink: 'syz.4.2111': attribute type 3 has an invalid length. [ 165.333748][T10299] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2111'. [ 165.482103][T10310] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2117'. [ 165.566504][T10313] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 165.633376][T10317] bond2: invalid ARP target 0.0.0.0 specified for addition [ 165.642031][T10317] bond2: option arp_ip_target: invalid value (0) [ 165.668161][T10317] bond2 (unregistering): Released all slaves [ 165.687316][T10320] netlink: 'syz.1.2122': attribute type 10 has an invalid length. [ 165.737213][T10320] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2122'. [ 165.781802][T10320] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 165.791723][T10320] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 165.801897][T10326] tipc: Can't bind to reserved service type 2 [ 165.837157][T10320] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 166.150411][T10346] xt_TCPMSS: Only works on TCP SYN packets [ 166.163428][T10336] bond2: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 166.243657][T10336] bond2 (unregistering): Released all slaves [ 166.272947][T10352] Cannot find map_set index 33 as target [ 166.338655][T10343] netlink: 'syz.3.2134': attribute type 12 has an invalid length. [ 166.883689][T10381] gre1: entered promiscuous mode [ 166.958678][T10381] gre1: entered allmulticast mode [ 167.011048][T10391] Cannot find add_set index 0 as target [ 167.131125][T10399] netlink: 'syz.3.2161': attribute type 1 has an invalid length. [ 167.162529][T10399] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2161'. [ 167.527433][T10418] netlink: 'syz.3.2170': attribute type 33 has an invalid length. [ 167.539733][T10418] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2170'. [ 167.655101][T10426] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2174'. [ 167.803602][T10432] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2177'. [ 167.818617][T10432] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2177'. [ 168.135655][T10453] netlink: 'syz.0.2187': attribute type 2 has an invalid length. [ 168.164600][T10453] netlink: 244 bytes leftover after parsing attributes in process `syz.0.2187'. [ 168.933327][T10492] netlink: 'syz.4.2207': attribute type 21 has an invalid length. [ 168.986161][T10492] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2207'. [ 169.677961][T10532] netlink: 'syz.4.2225': attribute type 2 has an invalid length. [ 170.112728][T10552] netlink: 'syz.2.2236': attribute type 3 has an invalid length. [ 170.134884][T10552] netlink: 'syz.2.2236': attribute type 1 has an invalid length. [ 170.197653][T10557] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2240'. [ 170.206865][T10558] netlink: 'syz.0.2238': attribute type 11 has an invalid length. [ 170.226358][T10558] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2238'. [ 170.235602][T10557] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2240'. [ 170.620953][T10574] bond1: option resend_igmp: invalid value (32767) [ 170.645284][T10574] bond1: option resend_igmp: allowed values 0 - 255 [ 170.669880][T10574] bond1 (unregistering): Released all slaves [ 170.901695][T10596] netlink: 'syz.1.2255': attribute type 3 has an invalid length. [ 170.939132][T10596] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2255'. [ 171.004234][T10602] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2257'. [ 171.252465][T10571] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 171.258636][T10571] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 171.435190][T10571] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 171.441138][T10571] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 171.557510][T10571] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 171.557705][T10629] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 171.563449][T10571] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 171.570715][T10629] IPv6: NLM_F_CREATE should be set when creating new route [ 171.626359][T10571] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 171.632313][T10571] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 171.640697][T10631] x_tables: duplicate entry at hook 2 [ 171.725104][T10634] IPv6: NLM_F_CREATE should be specified when creating new route [ 171.739414][T10571] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 171.768868][T10571] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 172.470760][T10668] bond1: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 172.507041][T10668] bond1 (unregistering): Released all slaves [ 172.779566][T10687] netlink: 'syz.2.2289': attribute type 1 has an invalid length. [ 172.801748][T10687] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2289'. [ 173.147279][T10710] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2297'. [ 173.437320][T10722] ipt_rpfilter: unknown options [ 174.164042][T10765] netlink: 'syz.1.2320': attribute type 11 has an invalid length. [ 174.381171][T10778] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 175.495305][T10843] sctp: [Deprecated]: syz.4.2352 (pid 10843) Use of struct sctp_assoc_value in delayed_ack socket option. [ 175.495305][T10843] Use struct sctp_sack_info instead [ 175.515718][T10842] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 175.523006][T10839] geneve2: entered promiscuous mode [ 175.557778][T10839] geneve2: entered allmulticast mode [ 175.588483][ T12] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 175.609910][ T12] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 175.668214][ T12] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 175.714335][ T12] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 175.917691][T10857] bond0: entered promiscuous mode [ 175.922767][T10857] bond_slave_0: entered promiscuous mode [ 175.976054][T10857] bond_slave_1: entered promiscuous mode [ 176.511091][T10894] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 176.878452][T10913] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2381'. [ 176.938970][T10920] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 177.355251][T10941] openvswitch: netlink: Tunnel attr 10 has unexpected len 0 expected 2 [ 179.007288][ T5839] Bluetooth: hci0: command tx timeout [ 179.095035][T11040] ieee802154 phy0 wpan0: encryption failed: -22 [ 179.179742][T11042] netlink: 196 bytes leftover after parsing attributes in process `syz.1.2434'. [ 179.233394][T11042] netlink: 196 bytes leftover after parsing attributes in process `syz.1.2434'. [ 179.266201][T11042] netlink: 19 bytes leftover after parsing attributes in process `syz.1.2434'. [ 179.308657][T11050] xt_ecn: cannot match TCP bits for non-tcp packets [ 179.981713][T11088] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2457'. [ 180.162354][T11098] netlink: 4660 bytes leftover after parsing attributes in process `syz.3.2461'. [ 180.212185][T11098] openvswitch: netlink: Flow key attr not present in new flow. [ 180.770874][T11135] syz.3.2479 uses old SIOCAX25GETINFO [ 180.975988][T11142] netlink: 'syz.4.2482': attribute type 10 has an invalid length. [ 180.982149][T11146] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2484'. [ 181.008884][T11146] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2484'. [ 181.187839][T11154] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2487'. [ 181.198368][T11154] netlink: 43 bytes leftover after parsing attributes in process `syz.3.2487'. [ 181.219440][T11154] netlink: 'syz.3.2487': attribute type 6 has an invalid length. [ 181.228109][T11154] netlink: 'syz.3.2487': attribute type 5 has an invalid length. [ 181.601243][T11175] xt_TPROXY: Can be used only with -p tcp or -p udp [ 182.889960][T11249] lo: entered promiscuous mode [ 182.911709][T11249] tunl0: entered promiscuous mode [ 182.938187][T11249] gre0: entered promiscuous mode [ 182.996480][T11249] gretap0: entered promiscuous mode [ 183.012841][T11249] erspan0: entered promiscuous mode [ 183.037728][T11249] ip_vti0: entered promiscuous mode [ 183.469393][T11282] netlink: 'syz.1.2551': attribute type 1 has an invalid length. [ 183.475454][T11280] delete_channel: no stack [ 183.480316][T11282] netlink: 'syz.1.2551': attribute type 2 has an invalid length. [ 184.134870][T11318] Cannot find set identified by id 65534 to match [ 184.247397][T11324] __nla_validate_parse: 1 callbacks suppressed [ 184.247415][T11324] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2572'. [ 184.680614][T11350] netlink: 5 bytes leftover after parsing attributes in process `syz.0.2584'. [ 184.903607][T11361] ip6gre1: entered allmulticast mode [ 185.309119][T11382] netlink: 244 bytes leftover after parsing attributes in process `syz.1.2600'. [ 185.997792][T11421] netlink: 'syz.2.2617': attribute type 1 has an invalid length. [ 186.292108][T11438] netlink: 'syz.2.2630': attribute type 1 has an invalid length. [ 186.313614][T11438] netlink: 'syz.2.2630': attribute type 1 has an invalid length. [ 186.356745][T11442] Unsupported ieee802154 address type: 0 [ 186.903584][T11472] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2645'. [ 187.015207][T11478] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 187.162220][T11485] netlink: 'syz.2.2652': attribute type 1 has an invalid length. [ 187.192594][T11485] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2652'. [ 187.477604][T11504] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2661'. [ 187.845130][T11524] netlink: 'syz.1.2671': attribute type 8 has an invalid length. [ 188.322814][T11554] netlink: 'syz.4.2686': attribute type 13 has an invalid length. [ 188.430963][T11556] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2688'. [ 188.462853][T11554] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 188.579646][T11564] netlink: 'syz.3.2690': attribute type 24 has an invalid length. [ 188.999077][T11587] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 189.140335][T11594] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2705'. [ 189.162494][T11594] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2705'. [ 189.263470][T11600] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 189.780700][T11630] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2719'. [ 189.792660][T11629] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2718'. [ 190.055246][T11642] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2725'. [ 190.113376][T11644] netlink: 'syz.3.2728': attribute type 11 has an invalid length. [ 190.132113][T11644] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2728'. [ 190.204584][T11650] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not filter [ 190.428657][T11660] netlink: 'syz.1.2735': attribute type 1 has an invalid length. [ 190.469093][T11660] netlink: 220 bytes leftover after parsing attributes in process `syz.1.2735'. [ 190.557316][T11666] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 190.748413][T11675] netlink: 'syz.2.2743': attribute type 10 has an invalid length. [ 190.793385][T11675] veth0_virt_wifi: entered allmulticast mode [ 190.822887][T11675] team0: Port device veth0_virt_wifi added [ 191.218275][T11700] netlink: 'syz.2.2754': attribute type 8 has an invalid length. [ 191.293134][T11704] : entered promiscuous mode [ 191.363871][T11708] SET target dimension over the limit! [ 191.430695][T11714] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2763'. [ 191.644333][T11725] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2768'. [ 191.685064][T11728] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2767'. [ 191.702972][T11729] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2769'. [ 192.146743][T11751] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 192.349638][T11763] netlink: 'syz.1.2786': attribute type 5 has an invalid length. [ 192.724619][T11784] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2796'. [ 193.285096][T11816] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 194.300892][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.307420][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.336294][T11876] netlink: 'syz.2.2841': attribute type 1 has an invalid length. [ 194.604009][T11890] netlink: 'syz.4.2847': attribute type 4 has an invalid length. [ 194.863677][T11902] __nla_validate_parse: 3 callbacks suppressed [ 194.863696][T11902] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2854'. [ 194.885312][T11902] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 194.934870][T11908] netlink: 'syz.2.2856': attribute type 1 has an invalid length. [ 195.328856][T11930] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2867'. [ 195.530569][T11940] netlink: 'syz.4.2872': attribute type 1 has an invalid length. [ 195.562916][T11940] netlink: 228 bytes leftover after parsing attributes in process `syz.4.2872'. [ 195.590093][T11942] netlink: 'syz.0.2873': attribute type 1 has an invalid length. [ 195.600430][T11942] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2873'. [ 195.631389][T11946] netlink: 'syz.1.2875': attribute type 24 has an invalid length. [ 195.778678][T11951] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2877'. [ 195.897249][T11954] netlink: 'syz.2.2880': attribute type 10 has an invalid length. [ 196.227763][T11974] netlink: 'syz.2.2889': attribute type 1 has an invalid length. [ 196.912680][T12013] netlink: 'syz.0.2908': attribute type 2 has an invalid length. [ 196.936795][T12013] netlink: 'syz.0.2908': attribute type 1 has an invalid length. [ 197.944507][T12073] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2939'. [ 197.987138][T12073] netlink: 92 bytes leftover after parsing attributes in process `syz.2.2939'. [ 198.620945][T12114] netlink: zone id is out of range [ 198.634150][T12114] netlink: zone id is out of range [ 198.659776][T12111] bond1: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 198.675198][T12114] netlink: zone id is out of range [ 198.687804][T12114] netlink: zone id is out of range [ 198.712390][T12111] bond1 (unregistering): Released all slaves [ 199.369802][T12150] bridge1: entered promiscuous mode [ 199.389905][T12150] bridge1: entered allmulticast mode [ 200.035161][T12189] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2994'. [ 200.068953][T12193] netlink: 'syz.2.2995': attribute type 16 has an invalid length. [ 200.095032][T12193] netlink: 'syz.2.2995': attribute type 3 has an invalid length. [ 200.113225][T12193] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2995'. [ 200.299137][T12202] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2999'. [ 200.430003][T12212] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3005'. [ 200.495464][T12212] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3005'. [ 200.696487][T12224] netlink: 'syz.1.3011': attribute type 11 has an invalid length. [ 200.704342][T12224] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3011'. [ 200.776646][T12230] netlink: 'syz.0.3014': attribute type 1 has an invalid length. [ 200.784412][T12230] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3014'. [ 201.002534][T12243] xt_hashlimit: invalid interval [ 201.090036][T12250] ip6t_srh: unknown srh match flags 4000 [ 201.479175][T12270] wlan1 speed is unknown, defaulting to 1000 [ 201.505422][T12270] wlan1 speed is unknown, defaulting to 1000 [ 201.513752][T12270] wlan1 speed is unknown, defaulting to 1000 [ 201.549761][T12270] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 201.612927][T12270] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 201.695273][T12270] wlan1 speed is unknown, defaulting to 1000 [ 201.718323][T12270] wlan1 speed is unknown, defaulting to 1000 [ 201.770544][T12270] wlan1 speed is unknown, defaulting to 1000 [ 201.819608][T12270] wlan1 speed is unknown, defaulting to 1000 [ 201.858339][T12270] wlan1 speed is unknown, defaulting to 1000 [ 202.078961][T12302] netlink: 'syz.4.3050': attribute type 1 has an invalid length. [ 202.108951][T12302] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3050'. [ 202.485694][T12323] xt_NFQUEUE: number of total queues is 0 [ 202.691738][T12335] ip6erspan0: entered promiscuous mode [ 202.727962][T12335] ip6erspan0: entered allmulticast mode [ 202.906841][T12347] SET target dimension over the limit! [ 203.184609][T12364] netlink: 'syz.4.3080': attribute type 1 has an invalid length. [ 203.192665][T12365] netlink: 'syz.3.3079': attribute type 11 has an invalid length. [ 203.203705][T12364] netlink: 'syz.4.3080': attribute type 11 has an invalid length. [ 203.223281][T12364] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3080'. [ 203.694888][T12388] lo: left promiscuous mode [ 203.708355][T12388] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 203.926642][T12403] netlink: 'syz.3.3099': attribute type 3 has an invalid length. [ 203.944675][T12403] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3099'. [ 204.145177][T12416] xt_CT: You must specify a L4 protocol and not use inversions on it [ 204.538216][T12436] netlink: 'syz.2.3116': attribute type 2 has an invalid length. [ 204.881524][T12450] xt_SECMARK: invalid mode: 9 [ 204.885006][T12451] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 204.958064][T12456] netlink: 'syz.4.3124': attribute type 1 has an invalid length. [ 204.977104][T12456] netlink: 'syz.4.3124': attribute type 1 has an invalid length. [ 205.395427][T12477] __nla_validate_parse: 2 callbacks suppressed [ 205.395445][T12477] netlink: 1196 bytes leftover after parsing attributes in process `syz.3.3133'. [ 205.768908][T12494] netlink: 'syz.0.3143': attribute type 9 has an invalid length. [ 205.815169][T12494] netlink: 'syz.0.3143': attribute type 6 has an invalid length. [ 206.037035][T12510] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3151'. [ 206.062800][T12514] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3154'. [ 206.073445][T12514] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3154'. [ 206.231575][T12520] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3159'. [ 206.628443][T12544] tc_dump_action: action bad kind [ 206.673574][T12550] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3171'. [ 206.751107][T12552] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3173'. [ 206.934714][T12562] netlink: 108 bytes leftover after parsing attributes in process `syz.1.3177'. [ 207.075159][T12572] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3182'. [ 207.168979][T12578] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3183'. [ 207.658762][T12607] validate_nla: 3 callbacks suppressed [ 207.658780][T12607] netlink: 'syz.4.3199': attribute type 1 has an invalid length. [ 207.707296][T12607] netlink: 'syz.4.3199': attribute type 1 has an invalid length. [ 207.770482][T12612] siw: device registration error -23 [ 208.049091][T12630] xt_hashlimit: size too large, truncated to 1048576 [ 209.116654][T12691] IPVS: sync thread started: state = BACKUP, mcast_ifn = tunl0, syncid = 4, id = 0 [ 209.686685][T12723] hsr0 speed is unknown, defaulting to 1000 [ 209.692687][T12723] hsr0 speed is unknown, defaulting to 1000 [ 209.785964][T12723] hsr0 speed is unknown, defaulting to 1000 [ 209.848557][T12733] netlink: 'syz.1.3262': attribute type 12 has an invalid length. [ 209.869234][T12723] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 209.998946][T12723] hsr0 speed is unknown, defaulting to 1000 [ 210.020866][T12723] hsr0 speed is unknown, defaulting to 1000 [ 210.037574][T12723] hsr0 speed is unknown, defaulting to 1000 [ 210.056218][T12723] hsr0 speed is unknown, defaulting to 1000 [ 210.081739][T12746] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 210.110602][T12723] hsr0 speed is unknown, defaulting to 1000 [ 210.382533][T12762] netlink: 'syz.4.3273': attribute type 2 has an invalid length. [ 210.435597][T12762] netlink: 'syz.4.3273': attribute type 1 has an invalid length. [ 210.521647][T12768] __nla_validate_parse: 9 callbacks suppressed [ 210.521666][T12768] netlink: 144 bytes leftover after parsing attributes in process `syz.3.3278'. [ 210.730959][T12782] netlink: 'syz.1.3283': attribute type 1 has an invalid length. [ 212.017302][T12851] netlink: 'syz.1.3318': attribute type 33 has an invalid length. [ 212.225172][T12862] netlink: 'syz.0.3323': attribute type 3 has an invalid length. [ 212.349453][T12871] openvswitch: netlink: IP tunnel dst address not specified [ 212.367384][T12870] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3327'. [ 212.647710][T12883] netlink: 'syz.1.3334': attribute type 1 has an invalid length. [ 212.862998][T12893] xt_TCPMSS: Only works on TCP SYN packets [ 213.107575][T12907] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 213.340838][T12922] lo speed is unknown, defaulting to 1000 [ 213.357182][T12917] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 213.375258][T12923] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 213.395230][T12922] lo speed is unknown, defaulting to 1000 [ 213.401991][T12922] lo speed is unknown, defaulting to 1000 [ 213.744827][T12922] infiniband syz0: set active [ 213.750354][T12922] infiniband syz0: added lo [ 213.769540][ T5876] lo speed is unknown, defaulting to 1000 [ 213.812041][T12922] RDS/IB: syz0: added [ 213.816881][T12922] smc: adding ib device syz0 with port count 1 [ 213.823368][T12922] smc: ib device syz0 port 1 has no pnetid [ 213.837422][T12944] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 213.876271][T12922] lo speed is unknown, defaulting to 1000 [ 213.884188][ T5876] lo speed is unknown, defaulting to 1000 [ 213.981348][T12948] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3366'. [ 214.034796][T12954] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3369'. [ 214.087491][T12954] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3369'. [ 214.125612][T12954] netlink: 31 bytes leftover after parsing attributes in process `syz.1.3369'. [ 214.152612][T12954] netlink: 'syz.1.3369': attribute type 3 has an invalid length. [ 214.215037][T12954] netlink: 'syz.1.3369': attribute type 2 has an invalid length. [ 214.238517][T12954] netlink: 31 bytes leftover after parsing attributes in process `syz.1.3369'. [ 214.245499][T12962] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3374'. [ 214.657168][T12922] lo speed is unknown, defaulting to 1000 [ 214.943158][T12994] SET target dimension over the limit! [ 215.177781][T13002] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3393'. [ 215.314846][T12922] lo speed is unknown, defaulting to 1000 [ 215.502983][T13018] netlink: 'syz.2.3401': attribute type 1 has an invalid length. [ 215.812373][T13036] netlink: 516 bytes leftover after parsing attributes in process `syz.3.3410'. [ 215.964589][T12922] lo speed is unknown, defaulting to 1000 [ 216.564510][T13075] netlink: 'syz.1.3429': attribute type 24 has an invalid length. [ 216.621919][T13077] netlink: 'syz.2.3431': attribute type 11 has an invalid length. [ 216.651086][T13077] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3431'. [ 216.678039][T12922] lo speed is unknown, defaulting to 1000 [ 217.673790][T13133] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3456'. [ 217.701578][T13133] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3456'. [ 217.747806][T13137] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3458'. [ 218.138848][T13158] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3469'. [ 218.216125][T13163] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3471'. [ 218.285975][T13163] tc_dump_action: action bad kind [ 218.418971][T13172] netlink: 'syz.4.3476': attribute type 21 has an invalid length. [ 219.107171][T13203] bond1: entered promiscuous mode [ 219.151786][T13203] bond1: entered allmulticast mode [ 219.185216][T13203] 8021q: adding VLAN 0 to HW filter on device bond1 [ 219.777227][T13253] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 220.055697][T13269] bridge3: the hash_elasticity option has been deprecated and is always 16 [ 220.217723][T13277] tunl0: entered promiscuous mode [ 220.265090][T13277] netlink: 'syz.1.3526': attribute type 3 has an invalid length. [ 220.272932][T13277] netlink: 9 bytes leftover after parsing attributes in process `syz.1.3526'. [ 220.485928][T13293] ip6t_REJECT: ECHOREPLY is not supported [ 220.767542][T13308] netlink: 6 bytes leftover after parsing attributes in process `syz.2.3541'. [ 220.836533][T13308] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 220.874216][T13311] netlink: 'syz.4.3543': attribute type 11 has an invalid length. [ 220.887301][T13311] netlink: 'syz.4.3543': attribute type 4 has an invalid length. [ 220.925062][T13311] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3543'. [ 221.220833][T13329] netlink: 64985 bytes leftover after parsing attributes in process `syz.0.3553'. [ 221.423617][T13341] netlink: 'syz.3.3557': attribute type 10 has an invalid length. [ 221.625148][T13354] netlink: 'syz.0.3565': attribute type 1 has an invalid length. [ 221.644021][T13354] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3565'. [ 221.672178][T13354] netlink: 'syz.0.3565': attribute type 1 has an invalid length. [ 221.815273][T13365] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 221.843091][T13369] IPVS: Unknown mcast interface: netpci0 [ 222.159728][T13385] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3580'. [ 222.347852][T13397] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3586'. [ 222.395072][T13397] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3586'. [ 222.598092][T13409] netlink: 'syz.0.3591': attribute type 15 has an invalid length. [ 222.615285][T13409] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3591'. [ 223.070162][T13437] netlink: zone id is out of range [ 223.075471][T13437] netlink: zone id is out of range [ 223.080587][T13437] netlink: zone id is out of range [ 223.444068][T13437] netlink: set zone limit has 8 unknown bytes [ 223.577312][T13461] Cannot find del_set index 49151 as target [ 224.049590][T13486] netlink: 'syz.0.3632': attribute type 2 has an invalid length. [ 224.152536][T13494] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3634'. [ 224.818535][T13530] netlink: 232 bytes leftover after parsing attributes in process `syz.3.3652'. [ 225.103201][T13548] netlink: 'syz.4.3661': attribute type 7 has an invalid length. [ 225.372265][T13563] delete_channel: no stack [ 225.582703][T13576] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 225.884152][T13592] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3683'. [ 225.916268][T13592] netlink: 'syz.4.3683': attribute type 8 has an invalid length. [ 226.364564][T13622] xt_connbytes: Forcing CT accounting to be enabled [ 226.437961][T13624] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 226.621198][T13628] bond2: option min_links: invalid value (18446744073709551614) [ 226.669560][T13628] bond2: option min_links: allowed values 0 - 2147483647 [ 226.700185][T13628] bond2 (unregistering): Released all slaves [ 226.827721][T13647] netlink: 'syz.4.3710': attribute type 21 has an invalid length. [ 226.851203][T13647] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3710'. [ 226.999982][T13653] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3713'. [ 227.023778][T13655] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3714'. [ 227.040148][T13655] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3714'. [ 227.064967][T13655] netlink: 31 bytes leftover after parsing attributes in process `syz.4.3714'. [ 227.075559][T13655] netlink: 'syz.4.3714': attribute type 2 has an invalid length. [ 227.096468][T13655] netlink: 31 bytes leftover after parsing attributes in process `syz.4.3714'. [ 227.179721][T13663] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 227.465952][T13685] netlink: 'syz.2.3726': attribute type 1 has an invalid length. [ 227.485706][T13685] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3726'. [ 228.151252][T13728] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3748'. [ 228.828220][T13770] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 228.872025][T13773] rdma_rxe: rxe_newlink: failed to add ipvlan1 [ 229.147762][T13791] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 229.555281][T13815] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3789'. [ 230.113512][T13851] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 230.733175][T13890] netlink: 'syz.1.3828': attribute type 2 has an invalid length. [ 230.751714][T13890] netlink: 'syz.1.3828': attribute type 8 has an invalid length. [ 230.775131][T13890] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3828'. [ 230.982592][T13906] netlink: 'syz.1.3835': attribute type 10 has an invalid length. [ 231.014994][T13906] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 231.056651][T13906] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 231.141776][T13914] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 231.354858][T13924] xt_TCPMSS: Only works on TCP SYN packets [ 231.536956][T13934] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 231.549944][T13934] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 231.561603][T13934] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 232.637660][T14002] bond1: peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 232.651524][T14002] bond1: entered promiscuous mode [ 232.656751][T14002] bond1: entered allmulticast mode [ 232.672578][T14002] 8021q: adding VLAN 0 to HW filter on device bond1 [ 232.720624][T14006] __nla_validate_parse: 1 callbacks suppressed [ 232.720643][T14006] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3886'. [ 232.948379][T14025] netlink: 'syz.4.3891': attribute type 1 has an invalid length. [ 232.967398][T14026] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 233.703059][T14072] xt_TPROXY: Can be used only with -p tcp or -p udp [ 234.181139][T14103] Unsupported ieee802154 address type: 0 [ 234.316361][T14111] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3933'. [ 234.685381][T14132] xt_cgroup: path and classid specified [ 234.889253][T14145] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3952'. [ 234.918958][T14145] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3952'. [ 235.224605][T14164] lo: entered promiscuous mode [ 235.270018][T14164] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 235.302991][T14169] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3964'. [ 235.854691][T14200] netlink: 'syz.0.3979': attribute type 1 has an invalid length. [ 236.000562][T14208] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.011698][T14208] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.285960][T14224] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 236.294339][T14226] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3992'. [ 236.749477][T14254] netlink: 'syz.4.4006': attribute type 1 has an invalid length. [ 236.766302][T14254] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4006'. [ 236.777033][T14254] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4006'. [ 237.223422][T14279] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4016'. [ 237.640644][T14305] netlink: 'syz.1.4030': attribute type 21 has an invalid length. [ 237.665119][T14305] netlink: 'syz.1.4030': attribute type 1 has an invalid length. [ 237.905812][T14324] xt_l2tp: invalid flags combination: 8 [ 238.130979][ T1114] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 238.142899][ T1114] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 238.155808][ T1114] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 238.191176][T14334] gtp0: entered promiscuous mode [ 238.225020][T14334] gtp0: entered allmulticast mode [ 238.243210][ T1114] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 238.606208][T14364] Cannot find add_set index 2 as target [ 238.908582][T14380] netlink: 5 bytes leftover after parsing attributes in process `syz.4.4066'. [ 239.208099][T14400] netlink: 'syz.1.4076': attribute type 1 has an invalid length. [ 239.230035][T14400] netlink: 228 bytes leftover after parsing attributes in process `syz.1.4076'. [ 239.260690][T14400] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4076'. [ 239.769672][T14430] bond1: option all_slaves_active: invalid value (222) [ 239.807372][T14430] bond1 (unregistering): Released all slaves [ 240.341781][T14470] netlink: 'syz.1.4109': attribute type 30 has an invalid length. [ 240.410272][T14474] netlink: 'syz.0.4112': attribute type 7 has an invalid length. [ 240.429543][T14470] bond1: option arp_missed_max: invalid value (0) [ 240.442865][T14470] bond1: option arp_missed_max: allowed values 1 - 255 [ 240.447941][T14478] netlink: 'syz.3.4113': attribute type 1 has an invalid length. [ 240.462728][T14478] netlink: 232 bytes leftover after parsing attributes in process `syz.3.4113'. [ 240.464040][T14470] bond1 (unregistering): Released all slaves [ 240.472939][T14478] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4113'. [ 241.017791][T14506] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 241.184441][T14516] netlink: 'syz.1.4134': attribute type 4 has an invalid length. [ 241.213601][T14519] dvmrp1: entered allmulticast mode [ 241.221214][T14522] netlink: 164 bytes leftover after parsing attributes in process `syz.0.4136'. [ 242.880403][T14615] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 243.421112][T14643] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4192'. [ 243.606357][T14657] netlink: 'syz.0.4198': attribute type 6 has an invalid length. [ 243.973817][T14678] netlink: 'syz.4.4209': attribute type 10 has an invalid length. [ 244.011044][T14678] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4209'. [ 244.068328][T14684] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4212'. [ 244.132890][T14688] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 244.243141][T14695] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4218'. [ 244.266032][T14695] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4218'. [ 244.367325][T14699] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4220'. [ 244.446327][T14706] netlink: 'syz.4.4223': attribute type 2 has an invalid length. [ 244.600945][T14713] x_tables: duplicate underflow at hook 2 [ 244.704159][T14717] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4229'. [ 244.739320][T14717] tc_dump_action: action bad kind [ 245.542979][T14771] netlink: 108 bytes leftover after parsing attributes in process `syz.1.4256'. [ 245.552239][T14771] netlink: 108 bytes leftover after parsing attributes in process `syz.1.4256'. [ 245.564065][T14771] netlink: 108 bytes leftover after parsing attributes in process `syz.1.4256'. [ 246.181848][T14808] 8021q: adding VLAN 0 to HW filter on device bond0 [ 246.681757][T14843] erspan0: entered promiscuous mode [ 246.695253][T14843] erspan0: entered allmulticast mode [ 246.930688][T14856] netlink: 80 bytes leftover after parsing attributes in process `syz.3.4293'. [ 247.037343][T14864] netlink: 'syz.3.4297': attribute type 3 has an invalid length. [ 247.078713][T14867] delete_channel: no stack [ 247.193357][T14873] netlink: 'syz.1.4303': attribute type 1 has an invalid length. [ 247.198782][T14874] bridge_slave_0: left allmulticast mode [ 247.201454][T14873] netlink: 'syz.1.4303': attribute type 3 has an invalid length. [ 247.207569][T14874] bridge_slave_0: left promiscuous mode [ 247.221150][T14874] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.231434][T14874] bridge_slave_1: left allmulticast mode [ 247.237299][T14874] bridge_slave_1: left promiscuous mode [ 247.243103][T14874] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.255300][T14874] bond0: (slave bond_slave_0): Releasing backup interface [ 247.266361][T14874] bond0: (slave bond_slave_1): Releasing backup interface [ 247.280232][T14874] team0: Port device team_slave_0 removed [ 247.289917][T14874] team0: Port device team_slave_1 removed [ 247.297253][T14874] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 247.304629][T14874] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 247.313339][T14874] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 247.320959][T14874] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 247.330435][T14874] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 247.346560][T14871] netlink: 'syz.4.4302': attribute type 4 has an invalid length. [ 247.581551][T14886] netlink: 'syz.1.4309': attribute type 1 has an invalid length. [ 248.091030][T14917] netlink: 'syz.4.4324': attribute type 11 has an invalid length. [ 248.396883][T14936] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 248.450877][ T43] lo speed is unknown, defaulting to 1000 [ 248.610685][T14949] netlink: 'syz.4.4340': attribute type 1 has an invalid length. [ 248.925566][T14970] netlink: 'syz.4.4348': attribute type 1 has an invalid length. [ 249.137057][T14982] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 249.283735][T14991] xt_hashlimit: overflow, rate too high: 0 [ 249.598753][T15009] xt_l2tp: v2 doesn't support IP mode [ 249.879919][ T5889] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 249.888714][ T5889] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 249.897205][ T5889] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 249.907621][ T5889] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 249.917845][ T5889] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 249.943219][ T5839] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 249.950714][ T5839] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 249.959671][ T5839] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 249.972464][ T5839] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 249.981179][ T5839] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 250.094774][T15020] wlan1 speed is unknown, defaulting to 1000 [ 250.116358][T15020] hsr0 speed is unknown, defaulting to 1000 [ 250.124678][T15020] lo speed is unknown, defaulting to 1000 [ 250.218973][T15038] wg1: entered promiscuous mode [ 250.223877][T15038] wg1: entered allmulticast mode [ 250.438372][T15048] ipt_REJECT: ECHOREPLY no longer supported. [ 250.774749][T15067] xt_ecn: cannot match TCP bits for non-tcp packets [ 250.783189][T15020] chnl_net:caif_netlink_parms(): no params data found [ 251.047328][T15020] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.054572][T15020] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.074991][T15020] bridge_slave_0: entered allmulticast mode [ 251.082814][T15020] bridge_slave_0: entered promiscuous mode [ 251.092355][T15020] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.106420][T15020] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.113692][T15020] bridge_slave_1: entered allmulticast mode [ 251.121719][T15020] bridge_slave_1: entered promiscuous mode [ 251.169009][T15085] ip6gre1: entered allmulticast mode [ 251.181000][T15020] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 251.208646][T15020] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 251.341495][T15020] team0: Port device team_slave_0 added [ 251.351224][T15020] team0: Port device team_slave_1 added [ 251.460072][T15020] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 251.469574][T15020] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 251.496640][T15020] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 251.510876][T15020] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 251.522140][T15020] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 251.550162][T15020] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 251.717704][T15020] hsr_slave_0: entered promiscuous mode [ 251.741362][T15020] hsr_slave_1: entered promiscuous mode [ 251.754334][T15020] debugfs: 'hsr0' already exists in 'hsr' [ 251.763546][T15020] Cannot create hsr debugfs directory [ 252.045711][ T5839] Bluetooth: hci5: command tx timeout [ 252.241878][T15020] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 252.274528][T15020] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 252.326656][T15020] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 252.356773][T15020] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 252.393790][T15147] __nla_validate_parse: 6 callbacks suppressed [ 252.393808][T15147] netlink: 14436 bytes leftover after parsing attributes in process `syz.3.4434'. [ 252.414435][T15147] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 252.427156][T15151] netlink: 'syz.1.4433': attribute type 1 has an invalid length. [ 252.630317][T15020] 8021q: adding VLAN 0 to HW filter on device bond0 [ 252.671367][T15020] 8021q: adding VLAN 0 to HW filter on device team0 [ 252.715323][ T1114] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.722492][ T1114] bridge0: port 1(bridge_slave_0) entered forwarding state [ 252.758217][ T1114] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.765963][ T1114] bridge0: port 2(bridge_slave_1) entered forwarding state [ 252.774574][T15167] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4442'. [ 252.854373][T15020] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 252.885257][T15020] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 253.121708][T15183] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4447'. [ 253.232505][T15020] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 253.261171][T15192] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4451'. [ 253.496381][T15206] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4456'. [ 253.740171][T15020] veth0_vlan: entered promiscuous mode [ 253.771404][T15020] veth1_vlan: entered promiscuous mode [ 253.866347][T15020] veth0_macvtap: entered promiscuous mode [ 253.872957][T15226] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4464'. [ 253.889836][T15227] netlink: 'syz.1.4465': attribute type 1 has an invalid length. [ 253.903682][T15020] veth1_macvtap: entered promiscuous mode [ 253.941206][T15020] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 253.960048][T15020] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 253.982100][ T36] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.006534][ T36] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.021834][ T36] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.070628][ T36] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.125605][ T5839] Bluetooth: hci5: command tx timeout [ 254.162129][ T772] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 254.178048][ T772] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.225151][T15239] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4470'. [ 254.229625][ T772] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 254.242888][ T772] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 255.036916][T15283] netlink: 'syz.4.4491': attribute type 2 has an invalid length. [ 255.073384][T15283] netlink: 188 bytes leftover after parsing attributes in process `syz.4.4491'. [ 255.728873][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.027545][T15341] netlink: 'syz.1.4520': attribute type 2 has an invalid length. [ 256.137405][ T12] tipc: Subscription rejected, illegal request [ 256.204996][ T5839] Bluetooth: hci5: command tx timeout [ 256.316175][T15357] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 256.490463][T15368] xt_nfacct: accounting object `\$‚9ZúM#íü¾mUµ|±^cÁ\F9YⳈ«ÃÖ' does not exist [ 256.936960][T15388] bond1: (slave bond_slave_1): Device is not our slave [ 256.943931][T15388] bond1: option active_slave: invalid value (bond_slave_1) [ 256.958917][T15388] bond1 (unregistering): Released all slaves [ 257.206423][T15407] Driver unsupported XDP return value 0 on prog (id 329) dev N/A, expect packet loss! [ 257.355961][T15413] Bluetooth: MGMT ver 1.23 [ 257.702723][T15437] Bluetooth: MGMT ver 1.23 [ 257.833786][T15443] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4570'. [ 258.021938][T15453] team0: Device gtp0 is up. Set it down before adding it as a team port [ 258.287070][ T5839] Bluetooth: hci5: command tx timeout [ 258.391783][T15475] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 258.575994][T15483] tipc: Started in network mode [ 258.584762][T15483] tipc: Node identity e0000002, cluster identity 4711 [ 258.598037][T15483] tipc: Enabling of bearer rejected, failed to enable media [ 258.953937][T15505] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 259.028200][T15509] Bluetooth: MGMT ver 1.23 [ 259.789519][T15556] sch_tbf: peakrate 7 is lower than or equals to rate 2147483647 ! [ 259.941366][T15563] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.4629'. [ 260.192234][T15573] net veth1_virt_wifi .: renamed from virt_wifi0 [ 260.653953][ T5889] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 260.663050][ T5889] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 260.671390][ T5889] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 260.681140][ T5889] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 260.689011][ T5889] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 260.741463][T15595] wlan1 speed is unknown, defaulting to 1000 [ 260.750301][T15595] hsr0 speed is unknown, defaulting to 1000 [ 260.758211][T15595] lo speed is unknown, defaulting to 1000 [ 261.136878][T15618] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4656'. [ 261.308702][T15628] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4660'. [ 261.406031][T15634] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4664'. [ 261.877547][T15660] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4675'. [ 261.922596][T15656] vlan2: entered promiscuous mode [ 261.928379][T15656] bridge0: entered promiscuous mode [ 262.049855][T15595] chnl_net:caif_netlink_parms(): no params data found [ 262.515931][T15595] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.523294][T15595] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.554214][T15595] bridge_slave_0: entered allmulticast mode [ 262.580339][T15595] bridge_slave_0: entered promiscuous mode [ 262.614508][T15595] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.650938][T15595] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.670334][T15595] bridge_slave_1: entered allmulticast mode [ 262.693524][T15595] bridge_slave_1: entered promiscuous mode [ 262.765184][ T5889] Bluetooth: hci6: command tx timeout [ 262.889357][T15595] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 262.939543][T15595] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 262.955359][T15712] netlink: 'syz.3.4700': attribute type 7 has an invalid length. [ 263.070489][T15716] nbd: must specify an index to disconnect [ 263.087592][T15595] team0: Port device team_slave_0 added [ 263.104706][T15595] team0: Port device team_slave_1 added [ 263.208448][T15595] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 263.243489][T15595] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 263.315007][T15595] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 263.357743][T15595] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 263.372604][T15595] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 263.447359][T15595] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 263.573869][T15595] hsr_slave_0: entered promiscuous mode [ 263.603236][T15595] hsr_slave_1: entered promiscuous mode [ 263.616571][T15595] debugfs: 'hsr0' already exists in 'hsr' [ 263.627967][T15595] Cannot create hsr debugfs directory [ 264.199791][T15595] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 264.230634][T15595] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 264.252491][T15595] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 264.274705][T15595] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 264.629552][T15595] 8021q: adding VLAN 0 to HW filter on device bond0 [ 264.668773][T15595] 8021q: adding VLAN 0 to HW filter on device team0 [ 264.709312][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.716501][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 264.750993][ T1114] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.758216][ T1114] bridge0: port 2(bridge_slave_1) entered forwarding state [ 264.846906][ T5889] Bluetooth: hci6: command tx timeout [ 265.274431][T15595] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 265.824299][T15828] vlan2: entered allmulticast mode [ 265.831169][T15828] bridge_slave_0: entered allmulticast mode [ 265.968692][T15595] veth0_vlan: entered promiscuous mode [ 266.006677][T15595] veth1_vlan: entered promiscuous mode [ 266.111311][T15595] veth0_macvtap: entered promiscuous mode [ 266.136510][T15595] veth1_macvtap: entered promiscuous mode [ 266.195107][T15595] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 266.250743][T15595] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 266.293459][ T1114] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.329645][ T1114] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.359203][ T1114] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.375088][ T1114] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.620523][T15858] netlink: 'syz.5.4762': attribute type 1 has an invalid length. [ 266.635043][T15858] netlink: 'syz.5.4762': attribute type 3 has an invalid length. [ 266.643294][T15858] netlink: 224 bytes leftover after parsing attributes in process `syz.5.4762'. [ 266.660827][ T1114] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 266.698094][ T1114] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 266.822153][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 266.867605][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 266.931299][ T5889] Bluetooth: hci6: command tx timeout [ 266.939638][T15870] netlink: 'syz.3.4768': attribute type 1 has an invalid length. [ 267.004173][T15872] netlink: 165 bytes leftover after parsing attributes in process `syz.4.4769'. [ 267.085637][T15875] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4771'. [ 267.127337][T15875] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4771'. [ 267.389037][T15894] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4779'. [ 267.752739][T15915] netlink: 27 bytes leftover after parsing attributes in process `syz.1.4789'. [ 268.206967][T15937] netlink: 'syz.1.4800': attribute type 1 has an invalid length. [ 268.225283][T15937] netlink: 'syz.1.4800': attribute type 1 has an invalid length. [ 268.245085][T15937] netlink: 'syz.1.4800': attribute type 4 has an invalid length. [ 268.252853][T15937] netlink: 188 bytes leftover after parsing attributes in process `syz.1.4800'. [ 268.278673][T15937] NCSI netlink: No device for ifindex 830110067 [ 268.288524][T15943] nbd: socks must be embedded in a SOCK_ITEM attr [ 269.006580][ T5889] Bluetooth: hci6: command tx timeout [ 269.301687][T15995] netlink: 'syz.3.4827': attribute type 32 has an invalid length. [ 269.309735][T15995] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4827'. [ 269.380820][T15995] bond2: option coupled_control: invalid value (52) [ 269.397949][T15995] bond2 (unregistering): Released all slaves [ 270.639104][T16056] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4854'. [ 270.653302][T16056] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4854'. [ 270.788271][T16060] netlink: 'syz.1.4856': attribute type 18 has an invalid length. [ 270.854742][ T36] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 270.854853][T16060] Zero length message leads to an empty skb [ 270.882882][ T36] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 270.913326][ T36] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 270.958746][ T36] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 271.316135][T16090] xt_time: unknown flags 0xf4 [ 271.655845][T16108] netlink: 11 bytes leftover after parsing attributes in process `syz.5.4876'. [ 271.712336][T16107] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 271.712442][T16114] netlink: 44 bytes leftover after parsing attributes in process `syz.6.4879'. [ 272.241401][T16140] netlink: 216 bytes leftover after parsing attributes in process `syz.3.4893'. [ 272.260976][T16140] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4893'. [ 272.376940][T16148] sctp: [Deprecated]: syz.5.4897 (pid 16148) Use of struct sctp_assoc_value in delayed_ack socket option. [ 272.376940][T16148] Use struct sctp_sack_info instead [ 272.428038][T16148] sctp: [Deprecated]: syz.5.4897 (pid 16148) Use of struct sctp_assoc_value in delayed_ack socket option. [ 272.428038][T16148] Use struct sctp_sack_info instead [ 273.109392][T16189] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.4915'. [ 273.310087][T16201] netlink: 96 bytes leftover after parsing attributes in process `syz.3.4919'. [ 273.354138][T16201] vlan2: entered allmulticast mode [ 273.373420][T16201] gretap0: entered allmulticast mode [ 273.791525][T16227] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4933'. [ 273.829600][T16230] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4935'. [ 273.857773][T16232] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4936'. [ 273.996461][T16238] netlink: 'syz.4.4939': attribute type 10 has an invalid length. [ 274.031481][T16238] bridge0: port 3(team0) entered blocking state [ 274.053591][T16238] bridge0: port 3(team0) entered disabled state [ 274.069382][T16238] team0: entered allmulticast mode [ 274.086791][T16238] team_slave_0: entered allmulticast mode [ 274.111076][T16238] team_slave_1: entered allmulticast mode [ 274.120487][T16238] team0: entered promiscuous mode [ 274.127608][T16238] team_slave_0: entered promiscuous mode [ 274.133663][T16238] team_slave_1: entered promiscuous mode [ 274.142630][T16238] bridge0: port 3(team0) entered blocking state [ 274.149078][T16238] bridge0: port 3(team0) entered forwarding state [ 274.170626][T16247] netlink: 100 bytes leftover after parsing attributes in process `syz.6.4943'. [ 274.356614][T16255] netlink: 'syz.6.4946': attribute type 3 has an invalid length. [ 275.416059][T16309] ieee802154 phy1 wpan1: encryption failed: -22 [ 275.547041][T16319] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 276.591346][T16370] netlink: 'syz.1.5001': attribute type 1 has an invalid length. [ 276.609136][T16370] netlink: 'syz.1.5001': attribute type 3 has an invalid length. [ 276.628156][T16370] NCSI netlink: No device for ifindex 131080 [ 276.732856][T16377] netlink: 'syz.1.5006': attribute type 3 has an invalid length. [ 276.951360][T16389] xt_l2tp: v2 tid > 0xffff: 1114244 [ 277.054223][T16395] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 277.142342][T16400] __nla_validate_parse: 4 callbacks suppressed [ 277.142360][T16400] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5017'. [ 277.608942][T16427] netlink: 'syz.1.5030': attribute type 3 has an invalid length. [ 278.486467][T16478] tipc: Enabling of bearer rejected, failed to enable media [ 278.563392][T16483] netlink: 'syz.3.5057': attribute type 1 has an invalid length. [ 278.574061][T16483] netlink: 'syz.3.5057': attribute type 2 has an invalid length. [ 278.745014][T16491] netlink: 104 bytes leftover after parsing attributes in process `syz.1.5061'. [ 280.457832][ T9] IPVS: starting estimator thread 0... [ 280.565376][T16594] IPVS: using max 31 ests per chain, 74400 per kthread [ 280.640237][T16603] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5116'. [ 281.080459][T16620] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.251405][T16620] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.401696][T16620] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.528030][T16620] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.750918][ T36] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.762630][T16660] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5144'. [ 281.792688][ T36] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.859136][ T1114] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.912327][ T3487] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.191225][T16684] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5155'. [ 282.415511][T16696] netlink: 100 bytes leftover after parsing attributes in process `syz.4.5161'. [ 282.776305][ T5876] IPVS: starting estimator thread 0... [ 282.888025][T16719] IPVS: using max 31 ests per chain, 74400 per kthread [ 283.219975][T16745] netlink: 'syz.3.5183': attribute type 10 has an invalid length. [ 283.231794][T16745] team0: Device ipvlan1 failed to register rx_handler [ 283.675357][T16764] tipc: Started in network mode [ 283.680269][T16764] tipc: Node identity fe800000000000000000000000000014, cluster identity 4711 [ 283.702869][T16764] tipc: Enabled bearer , priority 10 [ 283.819190][T16774] netlink: 32 bytes leftover after parsing attributes in process `syz.6.5198'. [ 284.023701][T16785] netlink: 'syz.1.5203': attribute type 25 has an invalid length. [ 284.391017][T16809] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5215'. [ 284.780230][T16831] netlink: 44 bytes leftover after parsing attributes in process `syz.6.5225'. [ 284.793222][T16831] netlink: 43 bytes leftover after parsing attributes in process `syz.6.5225'. [ 284.803122][T16831] netlink: 'syz.6.5225': attribute type 5 has an invalid length. [ 284.815853][ T9] tipc: Node number set to 4269801492 [ 284.822761][T16831] netlink: 43 bytes leftover after parsing attributes in process `syz.6.5225'. [ 285.117265][T16845] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5233'. [ 285.142235][T16851] xt_bpf: check failed: parse error [ 285.300416][T16858] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5239'. [ 285.638976][ T30] audit: type=1800 audit(1760340781.449:2): pid=16879 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.5249" name="memory.events" dev="tmpfs" ino=866 res=0 errno=0 [ 285.722499][ T30] audit: type=1804 audit(1760340781.469:3): pid=16879 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.5249" name="/newroot/169/memory.events" dev="tmpfs" ino=866 res=1 errno=0 [ 286.125033][ T5889] Bluetooth: hci6: command tx timeout [ 286.283380][T16912] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5265'. [ 286.433475][T16918] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 286.590045][T16926] netlink: 'syz.1.5272': attribute type 142 has an invalid length. [ 287.191301][T16952] bridge0: port 3(team0) entered disabled state [ 287.197832][T16952] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.205520][T16952] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.257720][T16952] team0: left allmulticast mode [ 287.288022][T16952] team_slave_0: left allmulticast mode [ 287.303508][T16952] team_slave_1: left allmulticast mode [ 287.315353][T16952] team0: left promiscuous mode [ 287.320655][T16952] team_slave_0: left promiscuous mode [ 287.334128][T16952] team_slave_1: left promiscuous mode [ 287.340626][T16952] bridge0: port 3(team0) entered disabled state [ 287.448793][T16952] bridge_slave_0: left allmulticast mode [ 287.454725][T16952] bridge_slave_0: left promiscuous mode [ 287.461353][T16952] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.496368][T16952] bridge_slave_1: left allmulticast mode [ 287.502060][T16952] bridge_slave_1: left promiscuous mode [ 287.510544][T16952] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.542023][T16952] bond0: (slave bond_slave_0): Releasing backup interface [ 287.562100][T16952] bond0: (slave bond_slave_1): Releasing backup interface [ 287.589897][T16952] team0: Port device team_slave_0 removed [ 287.624349][T16952] team0: Port device team_slave_1 removed [ 287.651349][T16952] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 287.675051][T16952] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 287.694254][T16952] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 287.733273][T16952] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 287.760249][T16952] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 287.791113][ T6019] lo speed is unknown, defaulting to 1000 [ 287.797128][T16959] __nla_validate_parse: 1 callbacks suppressed [ 287.797142][T16959] netlink: 96 bytes leftover after parsing attributes in process `syz.6.5290'. [ 287.812711][ T6019] syz0: Port: 1 Link DOWN [ 287.837660][ T43] lo speed is unknown, defaulting to 1000 [ 288.191531][T17002] netlink: 'syz.6.5311': attribute type 1 has an invalid length. [ 288.574320][T17023] netlink: 'syz.1.5318': attribute type 1 has an invalid length. [ 289.108352][T17053] vlan1: entered promiscuous mode [ 289.120513][T17053] bridge0: entered promiscuous mode [ 290.097044][T17105] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5358'. [ 290.145462][T17109] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5359'. [ 291.445302][T17168] netlink: 'syz.6.5389': attribute type 1 has an invalid length. [ 291.453080][T17168] netlink: 184 bytes leftover after parsing attributes in process `syz.6.5389'. [ 291.495319][T17168] netlink: 40 bytes leftover after parsing attributes in process `syz.6.5389'. [ 291.983041][T17193] xt_socket: unknown flags 0x50 [ 292.354107][ T5976] IPVS: starting estimator thread 0... [ 292.485002][T17213] IPVS: using max 31 ests per chain, 74400 per kthread [ 293.264506][T17263] veth5: entered allmulticast mode [ 293.353351][T17270] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5437'. [ 293.963568][T17297] netlink: 'syz.5.5452': attribute type 29 has an invalid length. [ 293.991021][T17301] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5451'. [ 294.667167][T17328] IPVS: length: 8 != 1152 [ 294.814143][T17336] netlink: 256 bytes leftover after parsing attributes in process `syz.5.5468'. [ 294.869585][T17336] netlink: 'syz.5.5468': attribute type 9 has an invalid length. [ 295.211215][T17354] netlink: 'syz.6.5477': attribute type 11 has an invalid length. [ 295.747077][T17384] netlink: 'syz.3.5492': attribute type 10 has an invalid length. [ 295.931242][T17395] tipc: Enabled bearer , priority 10 [ 296.209325][T17411] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5505'. [ 296.300116][T17418] rdma_op ffff888076c619f0 conn xmit_rdma 0000000000000000 [ 296.769446][T17441] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 296.801965][T17441] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 296.930524][T17454] netlink: 40 bytes leftover after parsing attributes in process `syz.6.5527'. [ 296.985563][T17454] netlink: 40 bytes leftover after parsing attributes in process `syz.6.5527'. [ 297.018369][T17457] xt_l2tp: unknown flags: 10 [ 297.274253][T17471] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5535'. [ 297.987835][T17513] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5555'. [ 298.289186][T17530] Cannot find add_set index 0 as target [ 298.346409][T17535] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5565'. [ 298.580822][T17549] netlink: 'syz.4.5572': attribute type 29 has an invalid length. [ 298.617736][T17549] netlink: 'syz.4.5572': attribute type 29 has an invalid length. [ 299.113477][T17577] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 299.235778][T17585] netlink: 'syz.5.5590': attribute type 29 has an invalid length. [ 299.734357][T17613] netlink: 'syz.1.5604': attribute type 33 has an invalid length. [ 300.023003][T17628] netlink: 312 bytes leftover after parsing attributes in process `syz.5.5611'. [ 300.053140][T17634] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5613'. [ 300.374457][T17650] netlink: 'syz.3.5622': attribute type 1 has an invalid length. [ 300.694501][T17669] netlink: 277 bytes leftover after parsing attributes in process `syz.3.5631'. [ 300.784668][T17674] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5633'. [ 300.899087][T17679] tunl0: left promiscuous mode [ 301.082555][T17679] erspan0: left promiscuous mode [ 301.088416][T17679] erspan0: left allmulticast mode [ 301.379120][T17679] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.386866][T17679] bridge0: port 1() entered disabled state [ 301.462333][T17679] bond0: left promiscuous mode [ 301.468769][T17679] bond_slave_0: left promiscuous mode [ 301.474604][T17679] bond_slave_1: left promiscuous mode [ 301.672512][T17679] : left allmulticast mode [ 301.678748][T17679] : left promiscuous mode [ 301.683594][T17679] bridge0: port 1() entered disabled state [ 301.747221][T17679] bridge_slave_1: left allmulticast mode [ 301.753187][T17679] bridge_slave_1: left promiscuous mode [ 301.759518][T17679] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.777910][T17679] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 301.810532][T17701] pim6reg: entered allmulticast mode [ 301.927019][T17709] veth1_macvtap: left promiscuous mode [ 301.932534][T17709] macsec0: entered promiscuous mode [ 301.951846][T17709] macsec0: entered allmulticast mode [ 301.970325][T17711] sock: sock_set_timeout: `syz.3.5650' (pid 17711) tries to set negative timeout [ 301.992511][T17709] veth1_macvtap: entered promiscuous mode [ 301.999140][T17709] veth1_macvtap: entered allmulticast mode [ 302.014434][T17709] macsec0: left promiscuous mode [ 302.025115][T17709] macsec0: left allmulticast mode [ 302.030170][T17709] veth1_macvtap: left allmulticast mode [ 302.560542][T17746] netlink: 256 bytes leftover after parsing attributes in process `syz.6.5666'. [ 302.898002][T17760] netlink: 'syz.4.5674': attribute type 3 has an invalid length. [ 303.384796][T17789] xt_limit: Overflow, try lower: 604147548/4200216962 [ 303.391816][T17793] bridge0: port 3(ipvlan2) entered blocking state [ 303.392003][T17793] bridge0: port 3(ipvlan2) entered disabled state [ 303.392171][T17793] ipvlan2: entered allmulticast mode [ 303.392187][T17793] bridge0: entered allmulticast mode [ 303.406916][T17793] ipvlan2: left allmulticast mode [ 303.406939][T17793] bridge0: left allmulticast mode [ 303.473081][T17796] team0: Port device geneve3 added [ 303.553050][ T12] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20003 - 0 [ 303.578049][ T12] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20003 - 0 [ 303.611120][ T12] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20003 - 0 [ 303.626665][ T12] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20003 - 0 [ 304.129483][T17834] wlan1 speed is unknown, defaulting to 1000 [ 304.612581][T17863] netlink: 'syz.4.5725': attribute type 1 has an invalid length. [ 304.756303][T17869] tipc: Enabling not permitted [ 304.771876][T17869] tipc: Enabling of bearer rejected, failed to enable media [ 305.871199][T17932] netlink: 'syz.4.5759': attribute type 1 has an invalid length. [ 305.888485][T17932] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5759'. [ 305.898437][T17932] block nbd1: not configured, cannot reconfigure [ 306.473160][T17973] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5776'. [ 307.965068][T18061] tipc: Enabling of bearer rejected, media not registered [ 308.957692][T18115] sctp: [Deprecated]: syz.4.5843 (pid 18115) Use of int in maxseg socket option. [ 308.957692][T18115] Use struct sctp_assoc_value instead [ 309.158377][T18126] netlink: 204 bytes leftover after parsing attributes in process `syz.4.5850'. [ 310.688596][T18218] xt_l2tp: missing protocol rule (udp|l2tpip) [ 310.800894][T18225] netlink: 'syz.4.5898': attribute type 1 has an invalid length. [ 312.269387][T18313] netlink: 'syz.3.5942': attribute type 2 has an invalid length. [ 312.860614][T18351] pimreg: entered allmulticast mode [ 313.654681][T18393] netlink: 'syz.3.5981': attribute type 23 has an invalid length. [ 314.318925][T18418] xt_CT: No such helper "snmp" [ 314.371636][T18427] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5996'. [ 314.538411][T18431] Bluetooth: MGMT ver 1.23 [ 314.683764][T18439] netlink: 'syz.4.6002': attribute type 1 has an invalid length. [ 314.712182][T18439] netlink: 204 bytes leftover after parsing attributes in process `syz.4.6002'. [ 315.223182][T18469] netlink: 'syz.3.6017': attribute type 27 has an invalid length. [ 315.350403][T18475] netlink: 'syz.1.6020': attribute type 6 has an invalid length. [ 315.382180][T18475] netlink: 'syz.1.6020': attribute type 6 has an invalid length. [ 316.198488][T18530] netlink: 56 bytes leftover after parsing attributes in process `syz.5.6047'. [ 316.303706][T18516] team0 (unregistering): Port device geneve3 removed [ 316.325897][ T36] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 20003 - 0 [ 316.386421][ T36] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 20003 - 0 [ 316.431440][ T36] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 20003 - 0 [ 316.454992][ T36] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 20003 - 0 [ 317.039111][T18566] syz.3.6064 (18566) used greatest stack depth: 17736 bytes left [ 317.179485][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.311686][T18585] IPVS: Error connecting to the multicast addr [ 317.625367][T18603] netlink: 'syz.3.6083': attribute type 1 has an invalid length. [ 317.633159][T18603] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6083'. [ 317.714142][T18609] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.6086'. [ 318.014455][T18626] netlink: 'syz.6.6095': attribute type 1 has an invalid length. [ 318.053547][T18626] netlink: 232 bytes leftover after parsing attributes in process `syz.6.6095'. [ 318.080733][T18626] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6095'. [ 318.735784][T18664] raw_sendmsg: syz.6.6112 forgot to set AF_INET. Fix it! [ 318.928017][T18675] netlink: 104 bytes leftover after parsing attributes in process `syz.4.6117'. [ 318.983388][T18678] tipc: Enabling of bearer rejected, failed to enable media [ 321.684365][T18832] netlink: 'syz.1.6195': attribute type 11 has an invalid length. [ 322.634787][T18893] netlink: 2 bytes leftover after parsing attributes in process `syz.5.6224'. [ 323.096767][T18918] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 323.590792][T18945] netlink: 'syz.1.6245': attribute type 3 has an invalid length. [ 324.201796][T18981] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6261'. [ 324.356593][T18988] netlink: 168 bytes leftover after parsing attributes in process `syz.1.6264'. [ 324.552423][T19001] netlink: 'syz.4.6270': attribute type 4 has an invalid length. [ 324.569178][T19003] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6271'. [ 324.591336][T19001] netlink: 17 bytes leftover after parsing attributes in process `syz.4.6270'. [ 325.627263][T19060] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6291'. [ 325.656758][T19060] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6291'. [ 326.535762][T19104] netlink: 'syz.1.6310': attribute type 2 has an invalid length. [ 326.865792][T19125] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6321'. [ 327.171299][T19141] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6329'. [ 327.696845][T19165] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 327.798081][T19173] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6343'. [ 328.089137][T19190] Bluetooth: hci0: invalid length 39, exp 2 for type 19 [ 328.126000][T19192] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6352'. [ 328.266684][T19200] netlink: 'syz.5.6355': attribute type 14 has an invalid length. [ 328.298277][T19204] netlink: 56 bytes leftover after parsing attributes in process `syz.4.6354'. [ 328.719591][T19225] netlink: 36 bytes leftover after parsing attributes in process `syz.5.6365'. [ 329.094732][T19240] netlink: 232 bytes leftover after parsing attributes in process `syz.4.6372'. [ 329.227337][T19246] sch_fq: defrate 0 ignored. [ 329.309175][T19252] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6378'. [ 329.349354][T19252] netlink: 'syz.6.6378': attribute type 30 has an invalid length. [ 329.377715][T19252] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6378'. [ 330.132989][T19298] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6399'. [ 332.066481][T19416] netlink: 64 bytes leftover after parsing attributes in process `syz.6.6454'. [ 332.239108][T19425] block nbd0: Unsupported socket: should be TCP or UNIX. [ 332.586623][T19447] netlink: 10 bytes leftover after parsing attributes in process `syz.6.6466'. [ 332.761625][T19459] netlink: 'syz.6.6474': attribute type 9 has an invalid length. [ 332.791011][T19459] netlink: 'syz.6.6474': attribute type 7 has an invalid length. [ 332.809295][T19459] netlink: 'syz.6.6474': attribute type 8 has an invalid length. [ 333.496339][T19501] Bluetooth: hci0: invalid length 39, exp 2 for type 26 [ 334.103608][T19543] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6516'. [ 334.391918][T19560] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6523'. [ 334.718519][T19577] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6530'. [ 334.746866][T19577] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6530'. [ 334.756728][T19577] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6530'. [ 334.927896][T19588] netlink: 100 bytes leftover after parsing attributes in process `syz.5.6537'. [ 335.188407][T19608] netlink: 'syz.1.6545': attribute type 1 has an invalid length. [ 335.204391][T19608] netlink: 'syz.1.6545': attribute type 4 has an invalid length. [ 335.222932][T19608] netlink: 192 bytes leftover after parsing attributes in process `syz.1.6545'. [ 336.203983][T19665] tipc: Failed to obtain node identity [ 336.219711][T19665] tipc: Enabling of bearer rejected, failed to enable media [ 336.420564][T19675] wlan1 speed is unknown, defaulting to 1000 [ 336.492021][T19681] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6576'. [ 336.584072][T19675] hsr0 speed is unknown, defaulting to 1000 [ 336.622881][T19675] lo speed is unknown, defaulting to 1000 [ 336.791107][T19692] netlink: 'syz.3.6580': attribute type 1 has an invalid length. [ 336.835008][T19692] netlink: 172 bytes leftover after parsing attributes in process `syz.3.6580'. [ 337.123614][T19708] netem: change failed [ 337.308663][T19714] netlink: 'syz.6.6589': attribute type 6 has an invalid length. [ 337.677858][T19728] netlink: 'syz.4.6573': attribute type 13 has an invalid length. [ 337.886352][T19728] gretap0: refused to change device tx_queue_len [ 337.908608][T19728] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 337.951826][ T5871] lo speed is unknown, defaulting to 1000 [ 337.968759][ T5871] syz0: Port: 1 Link ACTIVE [ 338.011451][ T5871] lo speed is unknown, defaulting to 1000 [ 338.671166][T19776] netlink: 'syz.5.6609': attribute type 11 has an invalid length. [ 339.549200][T19825] tipc: Started in network mode [ 339.554273][T19825] tipc: Node identity ac14140f, cluster identity 4711 [ 339.578692][T19825] tipc: New replicast peer: 255.255.255.255 [ 339.591360][T19825] tipc: Enabled bearer , priority 10 [ 339.618508][T19829] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6628'. [ 339.670579][T19832] netlink: 'syz.1.6630': attribute type 9 has an invalid length. [ 339.697300][T19832] netlink: 'syz.1.6630': attribute type 6 has an invalid length. [ 339.973320][T19852] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6639'. [ 340.028376][T19852] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6639'. [ 340.146074][T19859] block nbd0: Unsupported socket: should be TCP or UNIX. [ 340.184612][T19863] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6644'. [ 340.345093][T19872] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6645'. [ 340.380809][T19872] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6645'. [ 340.416910][T19872] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6645'. [ 340.528558][T19880] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6652'. [ 340.539317][T19880] netlink: 6 bytes leftover after parsing attributes in process `syz.1.6652'. [ 340.586530][ T5871] tipc: Node number set to 2886997007 [ 341.020286][T19904] netlink: 104 bytes leftover after parsing attributes in process `syz.6.6664'. [ 341.214712][T19920] team0: No ports can be present during mode change [ 341.275028][T19922] netlink: 'syz.3.6672': attribute type 1 has an invalid length. [ 341.305114][T19922] netlink: 'syz.3.6672': attribute type 1 has an invalid length. [ 341.504978][T19929] macvtap1: entered promiscuous mode [ 341.510382][T19929] vlan0: entered promiscuous mode [ 341.525595][T19929] macvtap1: entered allmulticast mode [ 341.531138][T19929] vlan0: entered allmulticast mode [ 341.537252][T19929] veth0_vlan: entered allmulticast mode [ 341.576497][T19944] netlink: 'syz.5.6682': attribute type 3 has an invalid length. [ 341.979484][T19966] netlink: 'syz.6.6693': attribute type 5 has an invalid length. [ 342.969914][T20026] ªªªªªª: renamed from vlan0 (while UP) [ 344.780616][T20123] __nla_validate_parse: 12 callbacks suppressed [ 344.780637][T20123] netlink: 68 bytes leftover after parsing attributes in process `syz.5.6763'. [ 345.591340][T20155] bond1 (unregistering): Released all slaves [ 346.120394][T20191] netlink: 'syz.3.6794': attribute type 1 has an invalid length. [ 347.028316][T20248] netlink: 'syz.5.6820': attribute type 5 has an invalid length. [ 347.575923][T20274] netlink: 64 bytes leftover after parsing attributes in process `syz.3.6833'. [ 348.413077][ T30] audit: type=1107 audit(1760340844.219:4): pid=20332 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 348.503223][T20336] netlink: 104 bytes leftover after parsing attributes in process `syz.5.6860'. [ 349.159158][T20369] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6877'. [ 349.199723][T20369] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6877'. [ 349.760979][T20406] netlink: 'syz.4.6894': attribute type 4 has an invalid length. [ 349.770438][T20408] netlink: 'syz.3.6895': attribute type 83 has an invalid length. [ 350.229856][T20437] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6907'. [ 350.263812][T20438] blkio.reset_stats is deprecated [ 351.095254][T20488] netlink: 'syz.4.6932': attribute type 2 has an invalid length. [ 351.115353][T20488] netlink: 84 bytes leftover after parsing attributes in process `syz.4.6932'. [ 351.320483][T20499] bond2: ARP target 1.0.0.0 is already present [ 351.332876][T20499] bond2: option arp_ip_target: invalid value (1) [ 351.345966][T20499] bond2 (unregistering): Released all slaves [ 352.178000][T20540] nbd0: detected capacity change from 0 to 127 [ 352.193868][ T5889] block nbd0: Receive control failed (result -32) [ 352.202428][ T5819] block nbd0: Send control failed (result -32) [ 352.226686][ T5819] block nbd0: Request send failed, requeueing [ 352.237243][ T57] block nbd0: Dead connection, failed to find a fallback [ 352.245532][ T57] block nbd0: shutting down sockets [ 352.251142][ T57] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 352.261557][ T57] Buffer I/O error on dev nbd0, logical block 0, async page read [ 352.269626][ T5819] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 352.279821][ T5819] Buffer I/O error on dev nbd0, logical block 1, async page read [ 352.288104][ T5819] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 352.297508][ T5819] Buffer I/O error on dev nbd0, logical block 2, async page read [ 352.305712][ T5819] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 352.315942][ T5819] Buffer I/O error on dev nbd0, logical block 3, async page read [ 352.324482][ T5819] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 352.333672][ T5819] Buffer I/O error on dev nbd0, logical block 0, async page read [ 352.345230][ T5819] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 352.354297][ T5819] Buffer I/O error on dev nbd0, logical block 1, async page read [ 352.362425][ T5819] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 352.395995][ T5819] Buffer I/O error on dev nbd0, logical block 2, async page read [ 352.409037][ T5819] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 352.418650][ T5819] Buffer I/O error on dev nbd0, logical block 3, async page read [ 352.445207][ T5819] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 352.454286][ T5819] Buffer I/O error on dev nbd0, logical block 0, async page read [ 352.482466][ T5819] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 352.499804][ T5819] Buffer I/O error on dev nbd0, logical block 1, async page read [ 352.510591][ T5819] ldm_validate_partition_table(): Disk read failed. [ 352.521314][ T5819] Dev nbd0: unable to read RDB block 0 [ 352.530873][ T5819] nbd0: unable to read partition table [ 352.547378][ T5819] ldm_validate_partition_table(): Disk read failed. [ 352.588442][ T5819] Dev nbd0: unable to read RDB block 0 [ 352.598045][ T5819] nbd0: unable to read partition table [ 353.117582][T20590] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6979'. [ 353.171441][T20593] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6981'. [ 353.191766][T20593] gtp0: entered promiscuous mode [ 353.196880][T20593] gtp0: entered allmulticast mode [ 353.298830][T20599] sctp: [Deprecated]: syz.6.6983 (pid 20599) Use of struct sctp_assoc_value in delayed_ack socket option. [ 353.298830][T20599] Use struct sctp_sack_info instead [ 353.515212][T20616] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6991'. [ 353.957365][T20645] netlink: 'syz.4.7002': attribute type 4 has an invalid length. [ 354.805472][T20707] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7032'. [ 354.858140][T20711] netlink: 108 bytes leftover after parsing attributes in process `syz.6.7034'. [ 355.386503][T20749] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7053'. [ 355.579328][T20762] Bluetooth: hci0: unsupported parameter 512 [ 355.598960][T20762] Bluetooth: hci0: invalid length 11, exp 2 for type 20 [ 355.809016][T20777] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7067'. [ 355.822750][T20780] netlink: 284 bytes leftover after parsing attributes in process `syz.4.7068'. [ 356.575015][T20831] netlink: 232 bytes leftover after parsing attributes in process `syz.5.7092'. [ 357.536638][T20887] veth1_macvtap: left promiscuous mode [ 357.717291][T20900] team_slave_0: mtu greater than device maximum [ 357.947678][T20909] netlink: 52 bytes leftover after parsing attributes in process `syz.5.7119'. [ 358.298621][T20923] Bluetooth: hci1: too big key_count value 32778 [ 359.177333][T20984] netlink: 'syz.5.7154': attribute type 18 has an invalid length. [ 359.360357][T20994] netlink: 'syz.4.7158': attribute type 33 has an invalid length. [ 359.433627][T20994] bond3: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 359.489482][T20994] bond3 (unregistering): Released all slaves [ 360.343375][T21061] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7190'. [ 360.375413][T21061] vlan2: entered allmulticast mode [ 360.380585][T21061] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 360.417563][T21067] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7193'. [ 360.734310][T21085] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 360.741707][T21085] IPv6: NLM_F_CREATE should be set when creating new route [ 360.748970][T21085] IPv6: NLM_F_CREATE should be set when creating new route [ 360.760327][T21085] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 361.260545][T21118] netlink: 81 bytes leftover after parsing attributes in process `syz.4.7218'. [ 361.623362][T21145] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7231'. [ 361.656331][T21145] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7231'. [ 362.082043][T21177] netlink: 44 bytes leftover after parsing attributes in process `syz.5.7247'. [ 362.239979][T21188] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7251'. [ 362.565080][T21210] netlink: 'syz.6.7261': attribute type 83 has an invalid length. [ 362.649944][T21215] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7263'. [ 363.099842][T21244] IPVS: persistence engine module ip_vs_pe_À not found [ 363.249718][T21256] netlink: 84 bytes leftover after parsing attributes in process `syz.3.7283'. [ 363.384293][T21265] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7287'. [ 364.163441][T21308] netlink: 104 bytes leftover after parsing attributes in process `syz.5.7306'. [ 364.305684][T21316] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci6/hci6:200/input5 [ 365.020044][T21362] netlink: 'syz.4.7330': attribute type 28 has an invalid length. [ 365.035076][T21362] netlink: 'syz.4.7330': attribute type 3 has an invalid length. [ 365.138495][T21368] Bluetooth: hci0: unsupported parameter 512 [ 365.144638][T21368] Bluetooth: hci0: unsupported parameter 57307 [ 365.157392][T21368] Bluetooth: hci0: invalid length 0, exp 2 for type 2 [ 365.745232][T21410] __nla_validate_parse: 6 callbacks suppressed [ 365.745251][T21410] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7351'. [ 366.116866][ T5839] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 366.120513][T21426] bridge1: entered promiscuous mode [ 366.135516][T21426] bridge1: entered allmulticast mode [ 366.145933][ T5839] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 366.155139][ T5839] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 366.168883][ T5839] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 366.180033][ T5839] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 366.278714][T21430] wlan1 speed is unknown, defaulting to 1000 [ 366.288602][T21430] hsr0 speed is unknown, defaulting to 1000 [ 366.296517][T21430] lo speed is unknown, defaulting to 1000 [ 366.479781][T21447] netlink: 232 bytes leftover after parsing attributes in process `syz.4.7366'. [ 366.726200][ T5889] block nbd1: Receive control failed (result -32) [ 366.984165][T21473] netlink: 64 bytes leftover after parsing attributes in process `syz.3.7378'. [ 367.250892][T21430] chnl_net:caif_netlink_parms(): no params data found [ 367.490643][T21430] bridge0: port 1(bridge_slave_0) entered blocking state [ 367.507995][T21430] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.516503][T21430] bridge_slave_0: entered allmulticast mode [ 367.524337][T21430] bridge_slave_0: entered promiscuous mode [ 367.536199][T21430] bridge0: port 2(bridge_slave_1) entered blocking state [ 367.555018][T21430] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.562379][T21430] bridge_slave_1: entered allmulticast mode [ 367.571507][T21430] bridge_slave_1: entered promiscuous mode [ 367.632192][T21430] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 367.661524][T21430] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 367.756215][T21430] team0: Port device team_slave_0 added [ 367.787450][T21430] team0: Port device team_slave_1 added [ 367.907035][T21430] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 367.914065][T21430] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 367.943498][T21430] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 367.968265][T21430] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 367.984208][T21430] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 368.017616][T21430] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 368.172530][T21430] hsr_slave_0: entered promiscuous mode [ 368.205152][ T5889] Bluetooth: hci7: command tx timeout [ 368.212927][T21430] hsr_slave_1: entered promiscuous mode [ 368.235849][T21430] debugfs: 'hsr0' already exists in 'hsr' [ 368.241626][T21430] Cannot create hsr debugfs directory [ 368.431339][T21553] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7414'. [ 368.610604][T21563] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7418'. [ 368.662287][T21563] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7418'. [ 368.819196][T21430] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 368.856488][T21430] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 368.907344][T21430] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 368.953524][T21430] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 369.134816][T21430] 8021q: adding VLAN 0 to HW filter on device bond0 [ 369.214062][T21430] 8021q: adding VLAN 0 to HW filter on device team0 [ 369.249686][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 369.256901][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 369.288190][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 369.295415][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 369.799475][T21430] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 369.900445][T21632] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7443'. [ 369.909905][T21631] veth0_to_team: entered promiscuous mode [ 369.926575][T21631] veth0_to_team: entered allmulticast mode [ 369.955143][T21634] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7445'. [ 370.051894][T21641] netlink: 52 bytes leftover after parsing attributes in process `syz.4.7446'. [ 370.200606][T21648] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7449'. [ 370.288478][ T5889] Bluetooth: hci7: command tx timeout [ 370.500123][T21430] veth0_vlan: entered promiscuous mode [ 370.538804][T21430] veth1_vlan: entered promiscuous mode [ 370.649828][T21430] veth0_macvtap: entered promiscuous mode [ 370.689178][T21430] veth1_macvtap: entered promiscuous mode [ 370.714633][T21430] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 370.726174][T21672] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 370.740691][T21430] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 370.774081][ T13] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.813104][ T13] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.846133][ T772] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.889827][ T772] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.910152][T21681] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7463'. [ 371.054692][T21688] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7468'. [ 371.078799][T21688] netlink: 2 bytes leftover after parsing attributes in process `syz.3.7468'. [ 371.123520][ T772] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 371.127396][T21693] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7469'. [ 371.143237][ T772] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 371.243564][ T772] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 371.260861][ T772] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 372.027257][T21742] netlink: 71 bytes leftover after parsing attributes in process `syz.4.7491'. [ 372.140213][T21747] netlink: 104 bytes leftover after parsing attributes in process `syz.3.7494'. [ 372.257617][T21753] Bluetooth: hci0: invalid length 39, exp 2 for type 23 [ 372.367940][ T5889] Bluetooth: hci7: command tx timeout [ 373.405308][T21826] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7532'. [ 373.444126][T21826] xfrm1: entered promiscuous mode [ 373.457372][T21826] xfrm1: entered allmulticast mode [ 373.469126][T21826] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7532'. [ 373.629656][T21837] netlink: 'syz.7.7538': attribute type 2 has an invalid length. [ 373.806440][T21847] veth0: entered promiscuous mode [ 373.831774][T21850] netlink: 32 bytes leftover after parsing attributes in process `syz.5.7544'. [ 373.853457][T21846] veth0: left promiscuous mode [ 374.369073][T21880] veth0: entered promiscuous mode [ 374.379759][T21878] veth0: left promiscuous mode [ 374.438998][T21884] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7560'. [ 374.450153][ T5889] Bluetooth: hci7: command tx timeout [ 374.883377][T21913] Bluetooth: hci0: invalid len left 70, exp >= 222 [ 375.125483][T21919] macvtap1: entered allmulticast mode [ 375.147552][T21919] veth0_macvtap: entered allmulticast mode [ 375.507099][T21939] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 376.213195][T21978] __nla_validate_parse: 1 callbacks suppressed [ 376.213216][T21978] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7605'. [ 376.837997][T22019] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7623'. [ 376.984588][T22029] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7629'. [ 377.036974][T22032] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7630'. [ 377.412382][T22045] netlink: 'syz.4.7636': attribute type 58 has an invalid length. [ 377.433134][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806748a000: rx timeout, send abort [ 377.443574][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88806748a000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 377.465306][T22045] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7636'. [ 377.936132][T22064] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.944858][T22064] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.468169][T22096] veth0: entered promiscuous mode [ 378.485096][T22096] veth0: left promiscuous mode [ 378.610548][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.629336][T22107] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7666'. [ 378.791016][T22116] Bluetooth: hci0: unsupported parameter 1024 [ 378.814987][T22116] Bluetooth: hci0: invalid length 11, exp 2 for type 13 [ 379.575359][T22159] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7691'. [ 379.588751][T22165] netlink: 'syz.4.7694': attribute type 21 has an invalid length. [ 379.617859][T22165] netlink: 128 bytes leftover after parsing attributes in process `syz.4.7694'. [ 379.645217][T22165] netlink: 'syz.4.7694': attribute type 4 has an invalid length. [ 379.667978][T22165] netlink: 'syz.4.7694': attribute type 5 has an invalid length. [ 379.680779][T22169] netlink: 'syz.4.7694': attribute type 21 has an invalid length. [ 379.688729][T22165] netlink: 3 bytes leftover after parsing attributes in process `syz.4.7694'. [ 379.698630][T22169] netlink: 128 bytes leftover after parsing attributes in process `syz.4.7694'. [ 379.708216][T22169] netlink: 'syz.4.7694': attribute type 4 has an invalid length. [ 379.730706][T22169] netlink: 'syz.4.7694': attribute type 5 has an invalid length. [ 379.805115][ T5839] Bluetooth: hci7: command tx timeout [ 380.467829][T22216] block nbd2: Unsupported socket: should be TCP or UNIX. [ 380.685616][ T5839] Bluetooth: hci5: command 0x0406 tx timeout [ 380.948652][T22245] tipc: Enabling of bearer rejected, already enabled [ 381.049792][T22249] netlink: 'syz.7.7734': attribute type 21 has an invalid length. [ 381.350825][T22266] vxlan0: entered promiscuous mode [ 381.356747][T22266] vxlan0: entered allmulticast mode [ 381.369416][ T772] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 381.400001][ T772] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 381.432840][ T772] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 381.446199][ T772] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 381.610706][T22276] netlink: 'syz.4.7746': attribute type 10 has an invalid length. [ 381.985880][T22289] __nla_validate_parse: 7 callbacks suppressed [ 381.985899][T22289] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7751'. [ 382.215382][T22299] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.223173][T22299] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.457338][T22316] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7765'. [ 383.809260][T22400] netlink: 64 bytes leftover after parsing attributes in process `syz.7.7803'. [ 383.916740][T22405] team0: Cannot enslave team device to itself [ 384.792262][T22464] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 385.981468][T22544] tap0: tun_chr_ioctl cmd 1074025678 [ 385.987223][T22544] tap0: group set to 0 [ 386.188943][T22556] netlink: 176 bytes leftover after parsing attributes in process `syz.5.7873'. [ 386.202752][T22556] ip6gretap0: entered promiscuous mode [ 386.212341][T22556] netlink: 176 bytes leftover after parsing attributes in process `syz.5.7873'. [ 386.577953][T22581] netlink: 52 bytes leftover after parsing attributes in process `syz.5.7885'. [ 386.963196][T22609] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7898'. [ 387.230043][T22627] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7906'. [ 387.265011][T22627] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7906'. [ 387.273972][T22627] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7906'. [ 387.943539][T22673] netlink: 100 bytes leftover after parsing attributes in process `syz.5.7927'. [ 388.264320][T22694] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7936'. [ 388.274504][T22694] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7936'. [ 388.488962][T22703] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7941'. [ 388.617432][T22706] dvmrp0: entered allmulticast mode [ 388.640925][T22706] dvmrp0: left allmulticast mode [ 388.808506][T22710] block nbd2: server does not support multiple connections per device. [ 388.828121][T22710] block nbd2: shutting down sockets [ 389.071332][T22724] sock: sock_set_timeout: `syz.4.7953' (pid 22724) tries to set negative timeout [ 389.577840][T22754] netlink: 27 bytes leftover after parsing attributes in process `syz.4.7967'. [ 390.203700][T22781] syzkaller1: entered promiscuous mode [ 390.224124][T22781] syzkaller1: entered allmulticast mode [ 390.254067][T22795] tipc: Started in network mode [ 390.259880][T22795] tipc: Node identity fffffffa, cluster identity 4711 [ 390.273343][T22795] tipc: Node number set to 4294967290 [ 390.317023][T22797] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7984'. [ 390.344566][T22797] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7984'. [ 390.784773][T22827] mac80211_hwsim hwsim23 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 391.718033][T22887] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 4032 [ 391.771050][T22894] netlink: 'syz.5.8028': attribute type 12 has an invalid length. [ 391.779215][T22894] netlink: 'syz.5.8028': attribute type 29 has an invalid length. [ 391.787262][T22894] netlink: 'syz.5.8028': attribute type 2 has an invalid length. [ 391.795434][T22894] netlink: 'syz.5.8028': attribute type 3 has an invalid length. [ 392.383344][ T6021] IPVS: starting estimator thread 0... [ 392.383446][T22923] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 392.487526][T22928] IPVS: using max 30 ests per chain, 72000 per kthread [ 392.862169][T22944] __nla_validate_parse: 5 callbacks suppressed [ 392.862189][T22944] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8051'. [ 392.885830][T22944] netlink: 'syz.5.8051': attribute type 1 has an invalid length. [ 392.893792][T22944] netlink: 'syz.5.8051': attribute type 2 has an invalid length. [ 392.931150][ T3487] wlan1: Trigger new scan to find an IBSS to join [ 393.119036][T22957] syzkaller1: entered promiscuous mode [ 393.124615][T22957] syzkaller1: entered allmulticast mode [ 393.616095][T22984] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8069'. [ 393.970723][ T31] INFO: task syz.0.4237:14734 blocked for more than 143 seconds. [ 393.978935][ T31] Not tainted syzkaller #0 [ 393.983994][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 394.001817][ T31] task:syz.0.4237 state:D stack:27272 pid:14734 tgid:14733 ppid:5885 task_flags:0x400040 flags:0x00080002 [ 394.018883][ T31] Call Trace: [ 394.022276][ T31] [ 394.025500][ T31] __schedule+0x1798/0x4cc0 [ 394.030348][ T31] ? __lock_acquire+0xab9/0xd20 [ 394.036984][ T31] ? __lock_acquire+0xab9/0xd20 [ 394.057019][ T31] ? __pfx___schedule+0x10/0x10 [ 394.062013][ T31] ? schedule+0x91/0x360 [ 394.074600][ T31] schedule+0x165/0x360 [ 394.079249][ T31] schedule_preempt_disabled+0x13/0x30 [ 394.084963][ T31] __mutex_lock+0x7e6/0x1350 [ 394.089650][ T31] ? __mutex_lock+0x5bb/0x1350 [ 394.096222][ T31] ? nfsd_nl_version_get_doit+0x16e/0xb60 [ 394.102040][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 394.107626][ T31] ? __nlmsg_put+0xef/0x1b0 [ 394.112182][ T31] ? genlmsg_put+0x137/0x2e0 [ 394.116913][ T31] nfsd_nl_version_get_doit+0x16e/0xb60 [ 394.122535][ T31] ? __local_bh_enable_ip+0x12d/0x1c0 [ 394.130097][ T31] ? __pfx_nfsd_nl_version_get_doit+0x10/0x10 [ 394.136407][ T31] genl_family_rcv_msg_doit+0x212/0x300 [ 394.141957][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 394.148248][ T31] genl_rcv_msg+0x60e/0x790 [ 394.152784][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 394.157925][ T31] ? __pfx_nfsd_nl_version_get_doit+0x10/0x10 [ 394.163996][ T31] ? __asan_memcpy+0x40/0x70 [ 394.168853][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 394.174252][ T31] netlink_rcv_skb+0x205/0x470 [ 394.179085][ T31] ? __lock_acquire+0xab9/0xd20 [ 394.183947][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 394.189046][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 394.195228][ T31] ? down_read+0x1ad/0x2e0 [ 394.199748][ T31] genl_rcv+0x28/0x40 [ 394.203740][ T31] netlink_unicast+0x82f/0x9e0 [ 394.208754][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 394.214060][ T31] ? netlink_sendmsg+0x642/0xb30 [ 394.219169][ T31] ? skb_put+0x11b/0x210 [ 394.223419][ T31] netlink_sendmsg+0x805/0xb30 [ 394.228266][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 394.233554][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 394.239897][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 394.245277][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 394.250574][ T31] __sock_sendmsg+0x21c/0x270 [ 394.255412][ T31] ____sys_sendmsg+0x505/0x830 [ 394.260194][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 394.265789][ T31] ? import_iovec+0x74/0xa0 [ 394.270292][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 394.275095][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 394.280326][ T31] ? __fget_files+0x2a/0x420 [ 394.285039][ T31] ? __fget_files+0x3a0/0x420 [ 394.289735][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 394.294681][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 394.300456][ T31] ? do_syscall_64+0xbe/0xfa0 [ 394.305212][ T31] do_syscall_64+0xfa/0xfa0 [ 394.309726][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 394.315037][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.321115][ T31] ? clear_bhb_loop+0x60/0xb0 [ 394.326083][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.331973][ T31] RIP: 0033:0x7f73c038eec9 [ 394.336484][ T31] RSP: 002b:00007f73c124c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 394.345125][ T31] RAX: ffffffffffffffda RBX: 00007f73c05e5fa0 RCX: 00007f73c038eec9 [ 394.353135][ T31] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 394.361341][ T31] RBP: 00007f73c0411f91 R08: 0000000000000000 R09: 0000000000000000 [ 394.369339][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 394.377472][ T31] R13: 00007f73c05e6038 R14: 00007f73c05e5fa0 R15: 00007fff69f2ffb8 [ 394.385655][ T31] [ 394.388745][ T31] [ 394.388745][ T31] Showing all locks held in the system: [ 394.398952][ T31] 1 lock held by khungtaskd/31: [ 394.403835][ T31] #0: ffffffff8e13d320 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 394.413807][ T31] 2 locks held by getty/5586: [ 394.418716][ T31] #0: ffff8880330380a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 394.428502][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 394.438880][ T31] 2 locks held by syz.2.3938/14120: [ 394.444167][ T31] #0: ffffffff8f545410 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 394.453273][ T31] #1: ffffffff8e426868 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1690 [ 394.463834][ T31] 2 locks held by syz.0.4237/14734: [ 394.469241][ T31] #0: ffffffff8f545410 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 394.477739][ T31] #1: ffffffff8e426868 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_version_get_doit+0x16e/0xb60 [ 394.487887][ T31] 2 locks held by syz.1.6921/20463: [ 394.493071][ T31] #0: ffffffff8f545410 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 394.501376][ T31] #1: ffffffff8e426868 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1690 [ 394.511749][ T31] 2 locks held by syz.5.8082/23012: [ 394.517033][ T31] #0: ffffffff8f4df908 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x71c/0xb70 [ 394.526548][ T31] #1: ffffffff8e142db8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730 [ 394.537686][ T31] 1 lock held by syz.5.8082/23015: [ 394.542793][ T31] #0: ffffffff8f4df908 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x71c/0xb70 [ 394.552249][ T31] [ 394.554586][ T31] ============================================= [ 394.554586][ T31] [ 394.570293][ T31] NMI backtrace for cpu 1 [ 394.570322][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 394.570343][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 394.570355][ T31] Call Trace: [ 394.570363][ T31] [ 394.570371][ T31] dump_stack_lvl+0x189/0x250 [ 394.570399][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 394.570419][ T31] ? __pfx__printk+0x10/0x10 [ 394.570449][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 394.570482][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 394.570512][ T31] ? __pfx__printk+0x10/0x10 [ 394.570535][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 394.570564][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 394.570596][ T31] watchdog+0xf60/0xfa0 [ 394.570619][ T31] ? watchdog+0x1e2/0xfa0 [ 394.570641][ T31] kthread+0x711/0x8a0 [ 394.570668][ T31] ? __pfx_watchdog+0x10/0x10 [ 394.570686][ T31] ? __pfx_kthread+0x10/0x10 [ 394.570712][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 394.570733][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 394.570753][ T31] ? __pfx_kthread+0x10/0x10 [ 394.570780][ T31] ret_from_fork+0x4bc/0x870 [ 394.570802][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 394.570830][ T31] ? __switch_to_asm+0x39/0x70 [ 394.570857][ T31] ? __switch_to_asm+0x33/0x70 [ 394.570876][ T31] ? __pfx_kthread+0x10/0x10 [ 394.570900][ T31] ret_from_fork_asm+0x1a/0x30 [ 394.570936][ T31] [ 394.570943][ T31] Sending NMI from CPU 1 to CPUs 0: [ 394.717835][ C0] NMI backtrace for cpu 0 [ 394.717853][ C0] CPU: 0 UID: 0 PID: 5893 Comm: kworker/0:3 Not tainted syzkaller #0 PREEMPT(full) [ 394.717872][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 394.717883][ C0] Workqueue: events free_obj_work [ 394.717908][ C0] RIP: 0010:arch_stack_walk+0x0/0x150 [ 394.717931][ C0] Code: 16 8e 48 89 de 5b 41 5e 41 5f 5d e9 8a 17 e4 09 cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <66> 0f 1f 00 55 48 89 e5 41 57 41 56 41 54 53 48 83 ec 68 49 89 cf [ 394.717945][ C0] RSP: 0018:ffffc900041975f8 EFLAGS: 00000246 [ 394.717960][ C0] RAX: ffffc90004197620 RBX: 1ffff92000832ec0 RCX: 0000000000000000 [ 394.717973][ C0] RDX: ffff88803011bc80 RSI: ffffc90004197620 RDI: ffffffff81abbce0 [ 394.717985][ C0] RBP: ffffc900041976a0 R08: dffffc0000000000 R09: 0000000000000000 [ 394.717997][ C0] R10: ffffc900041976b0 R11: fffffbfff1f3c1ef R12: ffffea00011a29c0 [ 394.718009][ C0] R13: 0000000000000000 R14: dffffc0000000000 R15: ffffc900041976b0 [ 394.718033][ C0] FS: 0000000000000000(0000) GS:ffff888125d0f000(0000) knlGS:0000000000000000 [ 394.718047][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 394.718058][ C0] CR2: 00007fc530bb4198 CR3: 000000004a254000 CR4: 00000000003526f0 [ 394.718073][ C0] Call Trace: [ 394.718080][ C0] [ 394.718086][ C0] stack_trace_save+0x9c/0xe0 [ 394.718108][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 394.718130][ C0] ? stack_depot_save_flags+0x40/0x860 [ 394.718154][ C0] kasan_save_track+0x3e/0x80 [ 394.718201][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 394.718221][ C0] ? free_obj_work+0x377/0x4a0 [ 394.718239][ C0] __kasan_save_free_info+0x46/0x50 [ 394.718258][ C0] __kasan_slab_free+0x5c/0x80 [ 394.718281][ C0] kmem_cache_free+0x19b/0x690 [ 394.718308][ C0] free_obj_work+0x377/0x4a0 [ 394.718329][ C0] ? __pfx_free_obj_work+0x10/0x10 [ 394.718349][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 394.718367][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 394.718384][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 394.718402][ C0] process_scheduled_works+0xae1/0x17b0 [ 394.718433][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 394.718459][ C0] worker_thread+0x8a0/0xda0 [ 394.718478][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 394.718500][ C0] ? __kthread_parkme+0x7b/0x200 [ 394.718523][ C0] kthread+0x711/0x8a0 [ 394.718546][ C0] ? __pfx_worker_thread+0x10/0x10 [ 394.718563][ C0] ? __pfx_kthread+0x10/0x10 [ 394.718585][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 394.718602][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 394.718619][ C0] ? __pfx_kthread+0x10/0x10 [ 394.718641][ C0] ret_from_fork+0x4bc/0x870 [ 394.718658][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 394.718678][ C0] ? __switch_to_asm+0x39/0x70 [ 394.718696][ C0] ? __switch_to_asm+0x33/0x70 [ 394.718714][ C0] ? __pfx_kthread+0x10/0x10 [ 394.718735][ C0] ret_from_fork_asm+0x1a/0x30 [ 394.718763][ C0] [ 394.719118][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 395.012882][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 395.021993][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 395.032047][ T31] Call Trace: [ 395.035319][ T31] [ 395.038241][ T31] dump_stack_lvl+0x99/0x250 [ 395.042824][ T31] ? __asan_memcpy+0x40/0x70 [ 395.047407][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 395.052594][ T31] ? __pfx__printk+0x10/0x10 [ 395.057181][ T31] vpanic+0x237/0x6d0 [ 395.061163][ T31] ? __pfx_vpanic+0x10/0x10 [ 395.065661][ T31] ? preempt_schedule_common+0x83/0xd0 [ 395.071118][ T31] panic+0xb9/0xc0 [ 395.074834][ T31] ? __pfx_panic+0x10/0x10 [ 395.079252][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 395.084626][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 395.090780][ T31] watchdog+0xf9f/0xfa0 [ 395.094936][ T31] ? watchdog+0x1e2/0xfa0 [ 395.099271][ T31] kthread+0x711/0x8a0 [ 395.103340][ T31] ? __pfx_watchdog+0x10/0x10 [ 395.108009][ T31] ? __pfx_kthread+0x10/0x10 [ 395.112593][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 395.117787][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 395.122977][ T31] ? __pfx_kthread+0x10/0x10 [ 395.127571][ T31] ret_from_fork+0x4bc/0x870 [ 395.132161][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 395.137269][ T31] ? __switch_to_asm+0x39/0x70 [ 395.142024][ T31] ? __switch_to_asm+0x33/0x70 [ 395.146779][ T31] ? __pfx_kthread+0x10/0x10 [ 395.151363][ T31] ret_from_fork_asm+0x1a/0x30 [ 395.156134][ T31] [ 395.159401][ T31] Kernel Offset: disabled [ 395.163710][ T31] Rebooting in 86400 seconds..