last executing test programs: 42.891979138s ago: executing program 0 (id=9510): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x20, r1, 0x1, 0x2, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY_SEQ={0x4}]}, 0x20}}, 0x0) 42.662945769s ago: executing program 0 (id=9515): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002100010000000000000000000a0000000000000000000000050019"], 0x24}}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="900000002000", 0x6, 0x0, 0x0, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000000)='.', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 42.493492797s ago: executing program 0 (id=9519): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4, 0x5}}, @TCA_STAB={0x22, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}]}, 0x58}}, 0x0) 42.335964752s ago: executing program 0 (id=9524): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xe, &(0x7f0000000580)=0x8, 0x4) 42.18540464s ago: executing program 0 (id=9529): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000280)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f00000000c0)={'a', ' *:* ', 'wm\x00'}, 0x9) 42.042629952s ago: executing program 0 (id=9534): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r2, 0x1, 0x70bd2d, 0x0, {{0x8}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) 26.985014544s ago: executing program 32 (id=9534): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r2, 0x1, 0x70bd2d, 0x0, {{0x8}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) 5.397215024s ago: executing program 4 (id=10391): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)={0x30, r1, 0x921, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_SETUP={0x8, 0x70, [@NL80211_MESH_SETUP_USERSPACE_MPM={0x4}]}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x30}}, 0x800) 5.248506373s ago: executing program 4 (id=10395): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x1c, 0x26, 0x200, 0x70bd28, 0x25dfdbfd, {0x16}, [@typed={0x8, 0x142, 0x0, 0x0, @uid}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24841}, 0x4040) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000", @ANYRES16=r1, @ANYBLOB="050000000000000000000200000008000300", @ANYRES32=r2, @ANYBLOB="2d000e0080000000ffffffffffff08021100000008021100000000000000000000000000640000002503000000000000080026006c09"], 0x80}}, 0x0) 5.056609477s ago: executing program 4 (id=10399): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) 4.893554361s ago: executing program 4 (id=10404): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001880)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="0200000002"], 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001880)=ANY=[], 0x10) 4.714901777s ago: executing program 4 (id=10409): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000180), 0x4) 4.418597457s ago: executing program 4 (id=10416): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)={0x20, r0, 0x1, 0x0, 0x0, {0x1e}, [@ETHTOOL_A_PAUSE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x20}}, 0x0) 3.492354484s ago: executing program 2 (id=10428): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f00000013c0), r0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f00000028c0)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x8001}, {{0x0, 0x0, 0x0}, 0x9}], 0x3, 0x2000, 0x0) recvmmsg(r0, &(0x7f00000049c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001580)=""/152, 0x98}, {&(0x7f00000000c0)=""/66, 0x42}], 0x3}, 0x2}], 0x1, 0x100, 0x0) 3.086571325s ago: executing program 2 (id=10433): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r1, 0x0, {0x0, 0xff, 0x4}, 0x2}, 0x18) sendmsg$can_j1939(r2, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) 1.775156495s ago: executing program 1 (id=10438): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={0x64, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xffff639c}]}, 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3800000002011d04000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001"], 0x38}}, 0x14) 1.605914961s ago: executing program 1 (id=10441): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f00000003c0)=0xf1e, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) sendmsg$can_raw(r1, &(0x7f0000000440)={&(0x7f0000000780)={0x1d, r2}, 0x10, &(0x7f0000000200)={&(0x7f0000000000)=@can={{0x0, 0x1, 0x1}, 0x1, 0x0, 0x0, 0x0, "9a70c642f9b46da8"}, 0x10}, 0x1, 0x0, 0x0, 0x10}, 0x4000054) 1.376362876s ago: executing program 1 (id=10443): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)={@val={0x1c, 0xf5}, @void, @mpls={[{}], @llc={@snap={0xa8, 0xab, '=', "14ecaa", 0x60, "2f4d20b5ab9811c4a0"}}}}, 0x19) 1.335188667s ago: executing program 3 (id=10444): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x6d}, 0x2c) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@rand_addr=0xac1414aa, 0x4e23, 0x10000, 0x1cb, 0x12d5e, 0x12d58}}, 0x44) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e20, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x2000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) 1.162620626s ago: executing program 3 (id=10445): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000140), 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x11a, 0x4, 0x0, 0x0) 1.148138245s ago: executing program 2 (id=10446): r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x240c8004, &(0x7f0000000280)={0xa, 0xe20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x4}}}, 0x1c) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000340)="d80000001c0081044e81f782db44b904021d0802010000000500f0a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x20004800) setsockopt$inet6_udp_int(r0, 0x88, 0x1, &(0x7f0000000080), 0x4) 917.136163ms ago: executing program 3 (id=10448): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000040000000000000a20000000000a03000000000000000000070000000900010073797a30000000005c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021200011800e000100636f6e6e6c696d69740000000c00028008000140fffffff73c0000000c0a01010000000000000000070000000900020073797a3100000000090001007379"], 0xe0}, 0x1, 0x0, 0x0, 0x1}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="77ba00000000000000001f000000080001000000000008000300", @ANYRES32=r2], 0x48}}, 0x0) 800.899095ms ago: executing program 2 (id=10449): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000000000003900000008000300", @ANYRES32=r3, @ANYBLOB="18005a8014000180040005"], 0x34}, 0x1, 0x0, 0x0, 0x2048080}, 0x0) 747.825399ms ago: executing program 5 (id=10450): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@op={0x18, 0x117, 0x3, 0xbe084adba71ec664}], 0x18}], 0x1, 0x0) 652.329242ms ago: executing program 5 (id=10451): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000018c0)={{r0, 0xffffffffffffffff}, &(0x7f0000001840), &(0x7f00000006c0)='%-010d \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r1, 0xffffffffffffffff}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000008000000b7080000000000007b8af8ff00000000b7080000000039007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r3, 0x0, 0xe, 0x0, &(0x7f0000000000)="40f0538ef047b21fb60068305500", 0x0, 0x1200, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 491.633437ms ago: executing program 5 (id=10452): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x1c, 0x26, 0x200, 0x70bd28, 0x25dfdc00, {0x16}, [@typed={0x8, 0x142, 0x0, 0x0, @u32=0x1a}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24841}, 0x4040) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000", @ANYRES16=r1, @ANYBLOB="050000000000000000000200000008000300", @ANYRES32=r2, @ANYBLOB="2d000e0080000000ffffffffffff08021100000008021100000000000000000000000000640000002503000000000000080026006c09"], 0x80}}, 0x0) 491.116353ms ago: executing program 1 (id=10453): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r0, &(0x7f0000000540)=[{&(0x7f0000000580)='\x00!', 0x2}], 0x1, 0x7, 0xffffffff) 484.565182ms ago: executing program 3 (id=10454): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r0, 0x0, 0x62, 0xfe, &(0x7f0000000140)="cb74445b7d4c0b24676c6c71ae37efcedaf40242309766deb4e793f90000000000000000dbc856cbc664650634231454ca2d8034c4ca29e0d99c3b6615e91835a600c08f989af45438a54981be310aad92ae545b1c961e5f3762a51fe4c736edec6f", &(0x7f0000000440)=""/254, 0x0, 0x0, 0xff, 0x194, &(0x7f0000000980)="ffc4438e5c3081d0e133e812196ec0ed923733aa8b5aba32c8650e7a66d6136853773dfbc6226be13039e230d511f1ac50cc7811aac0400e4c833fedf842ae2918e6fddb550729246fcf4c0a01bc64989ea3985fb362751a83991bd56e761379caa64f6148893ff25f38d5cd6dd695bbf9ca709a9960e0e6b054d5e2239bcb7c0fb2ac66dc4c8f534e439ff20ccaf0d48a98c19c92a3b437a699350f49606d21a403f8c112c46fea5486bf367a854b0f6c1e563b656e4794f6793a08bb3656c391643f6df71d0255054368a938d38503d064da82d5dbf395ad47ed3932669168d324ed0f6de8360d499042ddc7d02b6c0772128257702bfe6d0971f00fea85da062cdc", &(0x7f00000007c0)="4c87fe555ceb79157b1e507ff4d3cc053321e42ae89f596427188b4877ab8f1776c0685784f1174c6401ecc1dd6e2a77bc79238f87ad9215a92ff203a30099e77c543e702b4a4438d358616381745f24f74e585498af129c4b173b242f445b08135f7fa40eb7ba78160ff4f0c80e1b324d0c234cb7f43a3ff9e9535dc16000c797113a039f4508a09144090000009f38a90a24f173b3e68377e4272950a80cfcd3aa6850e917bc7e57370060f5e6db941d67fc98a1e98103830b821657438325578d2af822dd4fc13ea7a7eef8d9be4e715aec8fd6cadc41c8da5ce9da2b9e1559d92a1936fc2b3a00000000000000000072200e10ba6269b634f10f7098c65ba67ba65c0e2687637e131fb8d5ba6c12c09c8356853c434a44ff0878e496dcf9a4f5ca02c293279948f37ebb28843f92c87c057a3b410e04418557d5deda7ddd3bd1d384d64ec980187e8b64a0696571a49e847db79349c9b3c3fab5f1f977bde4d802d9026ae0c11744eb1525c5195fd215d7a432497f35c2f2cfcd2b6336b26dfef0cb968c910ea2af5cdd4d58cc08535d5514", 0x2, 0x0, 0x10000}, 0x24) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="38000000210a011d29ca1e668192a400020000000c00034000000000000000000900020073797a320000000009000100"], 0x38}}, 0x0) 431.177621ms ago: executing program 2 (id=10455): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x44, r2, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) 346.362703ms ago: executing program 3 (id=10456): ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'sit0\x00', 0x0, 0x8000, 0x700, 0x2, 0x2, {{0x9, 0x4, 0x0, 0x2f, 0x24, 0x67, 0x0, 0x3c, 0x29, 0x0, @local, @rand_addr=0x64010100, {[@timestamp_prespec={0x44, 0xc, 0x3f, 0x3, 0x0, [{@multicast1, 0xe3}]}, @noop]}}}}}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448ca, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000140)=ANY=[], 0xc) 232.17953ms ago: executing program 5 (id=10457): r0 = socket$kcm(0x21, 0x2, 0x2) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=[{0x18, 0x110, 0x1, 'p'}], 0x18}, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0xffff, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200008c0) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x300, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001"], 0x18}, 0x0) 231.419444ms ago: executing program 2 (id=10458): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb010018"], &(0x7f00000001c0)=""/257, 0x2a, 0x101, 0x6, 0x0, 0x0, @void, @value}, 0x28) write$cgroup_devices(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='b 1223'], 0xa) 152.119302ms ago: executing program 3 (id=10459): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000003000)={0x2}, 0x2) sendmsg$sock(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) shutdown(r0, 0x1) 127.880722ms ago: executing program 5 (id=10460): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='westwood\x00', 0x9) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) 101.798766ms ago: executing program 1 (id=10461): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x11, 0x4, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x2, 0x4, 0x1, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1100000004000000040000000c"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r1}, &(0x7f0000000840), &(0x7f0000000880)=r0}, 0x20) 29.727516ms ago: executing program 5 (id=10462): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000240)={'wpan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000380), r0) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000800)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000500)={0x30, r2, 0x1, 0x3, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_DEVKEY={0xc, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x4}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x30}}, 0x10) 0s ago: executing program 1 (id=10463): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) kernel console output (not intermixed with test programs): ] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1929'. [ 171.460432][ T9915] xt_SECMARK: invalid mode: 0 [ 171.522746][ T9920] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1944'. [ 171.537378][ T9921] netlink: 'syz.3.1945': attribute type 12 has an invalid length. [ 172.059815][ T9945] xt_l2tp: v2 doesn't support IP mode [ 172.751721][ T9985] netdevsim netdevsim1: Direct firmware load for  failed with error -2 [ 172.775188][ T9985] netdevsim netdevsim1: Falling back to sysfs fallback for:  [ 173.053419][ T9999] netlink: 220 bytes leftover after parsing attributes in process `syz.0.1983'. [ 173.263074][T10009] lo: left promiscuous mode [ 173.309012][T10009] tunl0: left promiscuous mode [ 173.330295][T10009] gre0: left promiscuous mode [ 173.380415][T10009] gretap0: left promiscuous mode [ 173.389045][T10009] erspan0: left promiscuous mode [ 173.397982][T10009] ip_vti0: left promiscuous mode [ 173.432308][T10009] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 173.663835][T10009] syz.0.1987 (10009) used greatest stack depth: 18584 bytes left [ 173.696474][T10026] sctp: [Deprecated]: syz.4.1995 (pid 10026) Use of int in max_burst socket option. [ 173.696474][T10026] Use struct sctp_assoc_value instead [ 173.724180][T10027] bridge0: port 3(gretap0) entered blocking state [ 173.754575][T10027] bridge0: port 3(gretap0) entered disabled state [ 173.758256][T10031] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1997'. [ 173.761158][T10027] gretap0: entered allmulticast mode [ 173.808674][T10027] gretap0: entered promiscuous mode [ 173.817834][T10027] bridge0: port 3(gretap0) entered blocking state [ 173.824568][T10027] bridge0: port 3(gretap0) entered forwarding state [ 173.853810][T10031] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1997'. [ 173.884326][T10031] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check. [ 173.954911][T10037] xt_hashlimit: invalid interval [ 173.961277][T10035] netlink: 'syz.2.2001': attribute type 21 has an invalid length. [ 174.102293][T10043] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2003'. [ 174.477247][T10063] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2012'. [ 174.563189][T10066] netlink: 'syz.4.2014': attribute type 15 has an invalid length. [ 174.598359][T10066] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2014'. [ 174.671222][T10073] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.168326][T10099] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 175.835448][T10129] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2042'. [ 176.068796][ T837] IPVS: starting estimator thread 0... [ 176.107885][T10147] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2050'. [ 176.191919][T10147] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2050'. [ 176.193914][T10146] IPVS: using max 38 ests per chain, 91200 per kthread [ 176.250967][T10147] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2050'. [ 176.268552][T10158] ip6t_rpfilter: unknown options [ 176.283847][T10147] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2050'. [ 176.714176][T10179] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-xor(2) [ 176.963505][T10187] Cannot find del_set index 4 as target [ 177.032921][T10190] netlink: 'syz.3.2066': attribute type 5 has an invalid length. [ 177.626154][T10224] netlink: 'syz.1.2082': attribute type 32 has an invalid length. [ 178.135662][T10252] dvmrp0: entered allmulticast mode [ 178.419432][T10266] netdevsim netdevsim1: Firmware load for '..' refused, path contains '..' component [ 179.238002][T10312] __nla_validate_parse: 53 callbacks suppressed [ 179.238021][T10312] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2124'. [ 179.822109][T10341] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2137'. [ 180.106473][T10354] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2143'. [ 180.734958][T10392] delete_channel: no stack [ 180.835247][T10395] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2161'. [ 181.052120][T10406] openvswitch: netlink: Missing key (keys=40, expected=80) [ 181.133194][T10411] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (32767) [ 181.160562][T10411] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 181.330276][T10420] netlink: 'syz.3.2172': attribute type 10 has an invalid length. [ 181.358710][T10420] veth0_vlan: entered allmulticast mode [ 181.428516][T10420] veth0_vlan: left promiscuous mode [ 181.474659][T10420] veth0_vlan: entered promiscuous mode [ 181.518472][T10420] team0: Device veth0_vlan failed to register rx_handler [ 181.592626][T10432] SET target dimension over the limit! [ 181.687274][T10438] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2182'. [ 181.715151][T10438] netlink: 'syz.2.2182': attribute type 3 has an invalid length. [ 181.933837][T10450] netlink: 'syz.4.2188': attribute type 24 has an invalid length. [ 182.348384][T10472] ÿ: renamed from dummy0 (while UP) [ 182.475596][T10478] ieee802154 phy0 wpan0: encryption failed: -22 [ 182.583593][T10484] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2205'. [ 182.678365][T10486] netlink: 'syz.4.2206': attribute type 7 has an invalid length. [ 182.762647][T10490] xt_recent: Unsupported userspace flags (00000042) [ 183.226578][T10514] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2220'. [ 183.277441][T10514] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2220'. [ 183.858292][T10546] gre1: entered promiscuous mode [ 183.868436][T10546] gre1: entered allmulticast mode [ 183.872963][T10551] Cannot find add_set index 0 as target [ 184.318166][T10577] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2251'. [ 184.539964][T10587] nftables ruleset with unbound chain [ 184.917592][T10607] netlink: 'syz.2.2265': attribute type 11 has an invalid length. [ 184.953209][T10607] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2265'. [ 185.024463][T10614] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2268'. [ 185.120145][T10620] netlink: 'syz.1.2271': attribute type 1 has an invalid length. [ 185.165225][T10620] netlink: 'syz.1.2271': attribute type 2 has an invalid length. [ 185.300584][T10628] netlink: 'syz.4.2276': attribute type 8 has an invalid length. [ 186.192971][T10680] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (8) [ 186.691150][T10705] IPv6: NLM_F_CREATE should be specified when creating new route [ 186.731064][T10709] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2314'. [ 186.740555][T10708] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2315'. [ 187.110514][T10727] netlink: 108 bytes leftover after parsing attributes in process `syz.4.2324'. [ 187.181163][T10732] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 187.202542][T10732] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 187.358704][T10743] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2332'. [ 187.720704][T10761] netlink: 204 bytes leftover after parsing attributes in process `syz.3.2341'. [ 187.744877][T10763] x_tables: unsorted underflow at hook 2 [ 187.845722][T10769] netlink: 'syz.1.2345': attribute type 1 has an invalid length. [ 187.864813][T10769] netlink: 244 bytes leftover after parsing attributes in process `syz.1.2345'. [ 187.901914][T10771] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2346'. [ 188.066827][T10779] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 188.610120][T10767] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 188.741459][T10816] netlink: 'syz.1.2368': attribute type 8 has an invalid length. [ 188.824171][T10822] ieee802154 phy0 wpan0: encryption failed: -22 [ 188.844953][T10824] netlink: 'syz.0.2372': attribute type 16 has an invalid length. [ 188.886553][T10824] netlink: 'syz.0.2372': attribute type 17 has an invalid length. [ 188.947531][T10828] netlink: 'syz.2.2374': attribute type 1 has an invalid length. [ 189.562688][T10858] netlink: 'syz.0.2389': attribute type 2 has an invalid length. [ 189.616815][T10858] __nla_validate_parse: 5 callbacks suppressed [ 189.616831][T10858] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2389'. [ 190.010129][T10882] xt_CT: You must specify a L4 protocol and not use inversions on it [ 190.477950][T10906] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.2413'. [ 191.127069][T10942] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2430'. [ 191.247565][T10950] netlink: 'syz.3.2435': attribute type 10 has an invalid length. [ 191.277083][T10950] batman_adv: batadv0: Adding interface: wlan0 [ 191.283274][T10950] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.383433][T10950] batman_adv: batadv0: Interface activated: wlan0 [ 191.484161][T10958] netlink: 'syz.0.2439': attribute type 11 has an invalid length. [ 191.610944][T10967] x_tables: duplicate underflow at hook 1 [ 191.624651][T10966] netlink: 'syz.1.2442': attribute type 1 has an invalid length. [ 191.632607][T10968] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2444'. [ 191.654087][T10968] netlink: 'syz.3.2444': attribute type 1 has an invalid length. [ 191.681651][T10968] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2444'. [ 191.898053][T10981] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2449'. [ 191.900651][T10982] openvswitch: netlink: Actions may not be safe on all matching packets [ 191.910517][T10980] team0: Device veth0_macvtap failed to register rx_handler [ 191.994556][T10986] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 192.247584][T10998] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2458'. [ 192.634323][T11018] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2469'. [ 193.013524][T11030] validate_nla: 6 callbacks suppressed [ 193.013545][T11030] netlink: 'syz.4.2475': attribute type 8 has an invalid length. [ 193.095519][T11030] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 194.298140][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.306137][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.564021][T11096] netlink: 64985 bytes leftover after parsing attributes in process `syz.1.2508'. [ 194.763799][T11108] Cannot find add_set index 1 as target [ 195.371808][T11142] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2532'. [ 195.586321][T11154] SET target dimension over the limit! [ 195.910992][T11170] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.978067][T11174] net veth1_virt_wifi : renamed from virt_wifi0 [ 196.115329][T11182] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2552'. [ 196.188105][T11187] warning: `syz.2.2554' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 196.461856][T11203] netlink: 'syz.2.2559': attribute type 3 has an invalid length. [ 197.347058][T11256] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2587'. [ 197.476856][T11261] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2588'. [ 197.772926][T11280] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2597'. [ 198.568375][T11327] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2621'. [ 199.092519][T11359] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2637'. [ 199.862172][T11406] netlink: 'syz.2.2661': attribute type 1 has an invalid length. [ 199.945346][T11409] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2662'. [ 200.039276][T11416] netlink: 'syz.2.2665': attribute type 1 has an invalid length. [ 200.566229][T11444] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 200.642034][T11444] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 200.682494][T11453] delete_channel: no stack [ 200.910354][T11465] geneve2: entered promiscuous mode [ 200.939927][T11465] geneve2: entered allmulticast mode [ 200.956507][T11467] netlink: 'syz.1.2691': attribute type 32 has an invalid length. [ 201.558237][T11503] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2708'. [ 201.597128][T11503] tc_dump_action: action bad kind [ 201.667783][T11509] TCP: TCP_TX_DELAY enabled [ 201.908199][T11525] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2719'. [ 201.933814][T11525] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2719'. [ 201.943488][T11525] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2719'. [ 202.069733][T11533] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 202.298922][T11545] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2730'. [ 202.506441][T11558] openvswitch: netlink: Flow actions attr not present in new flow. [ 202.892733][T11579] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2747'. [ 202.971400][T11583] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2750'. [ 203.421871][T11610] netlink: 'syz.4.2762': attribute type 7 has an invalid length. [ 203.644923][T11626] ipt_REJECT: TCP_RESET invalid for non-tcp [ 203.772281][T11632] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2774'. [ 203.818879][T11632] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2774'. [ 204.053309][T11650] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 204.733131][T11688] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 204.745948][T11686] No such timeout policy "syz0" [ 205.528713][T11724] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2818'. [ 205.790326][T11734] ieee802154 phy0 wpan0: encryption failed: -22 [ 206.166620][T11756] bond0: entered allmulticast mode [ 206.180175][T11756] bond_slave_0: entered allmulticast mode [ 206.213883][T11756] bond_slave_1: entered allmulticast mode [ 206.380469][T11772] ï‰Oܼ: renamed from hsr0 (while UP) [ 206.405949][T11772] ï‰Oܼ: entered promiscuous mode [ 206.425948][T11772] A link change request failed with some changes committed already. Interface ï‰Oܼ may have been left with an inconsistent configuration, please check. [ 206.616750][ T55] Bluetooth: hci1: command 0x0406 tx timeout [ 206.679458][T11787] x_tables: duplicate underflow at hook 2 [ 208.046561][T11864] netlink: 'syz.4.2889': attribute type 4 has an invalid length. [ 208.378485][T11884] __nla_validate_parse: 2 callbacks suppressed [ 208.378504][T11884] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2899'. [ 208.799979][T11906] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 209.346546][T11938] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2926'. [ 209.586484][T11948] netlink: 'syz.2.2931': attribute type 1 has an invalid length. [ 209.599337][T11956] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2935'. [ 209.637652][T11948] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2931'. [ 209.812839][T11965] x_tables: ip6_tables: REDIRECT target: used from hooks INPUT, but only usable from PREROUTING/OUTPUT [ 209.835661][T11968] syz.3.2939 uses old SIOCAX25GETINFO [ 209.928689][T11970] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2942'. [ 210.009573][T11977] netlink: 'syz.2.2945': attribute type 21 has an invalid length. [ 210.277628][T11990] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2952'. [ 210.969953][T12033] netdevsim netdevsim1 netdevsim1: Unsupported IPsec algorithm [ 211.617957][T12071] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 211.733895][ T5152] Bluetooth: hci2: command 0x0406 tx timeout [ 211.740001][ T5152] Bluetooth: hci3: command 0x0406 tx timeout [ 211.863954][T12084] IPv6: sit1: Disabled Multicast RS [ 211.883335][T12084] sit1: entered allmulticast mode [ 212.118922][T12098] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3006'. [ 212.156878][T12098] netlink: 43 bytes leftover after parsing attributes in process `syz.0.3006'. [ 212.183809][T12098] netlink: 'syz.0.3006': attribute type 6 has an invalid length. [ 212.210520][T12098] netlink: 'syz.0.3006': attribute type 5 has an invalid length. [ 212.243739][T12098] netlink: 43 bytes leftover after parsing attributes in process `syz.0.3006'. [ 212.491888][T12116] netlink: 'syz.0.3015': attribute type 1 has an invalid length. [ 212.513790][T12116] netlink: 'syz.0.3015': attribute type 11 has an invalid length. [ 212.541498][T12116] netlink: 220 bytes leftover after parsing attributes in process `syz.0.3015'. [ 212.889360][T12141] netlink: 'syz.0.3028': attribute type 24 has an invalid length. [ 214.090140][T12210] netlink: 'syz.1.3062': attribute type 2 has an invalid length. [ 214.121609][T12210] netlink: 'syz.1.3062': attribute type 6 has an invalid length. [ 214.514535][T12237] ªªªªªª: renamed from vlan0 (while UP) [ 214.637839][T12243] __nla_validate_parse: 1 callbacks suppressed [ 214.637859][T12243] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3077'. [ 214.753327][T12249] netlink: 'syz.3.3082': attribute type 11 has an invalid length. [ 214.822087][T12249] netlink: 228 bytes leftover after parsing attributes in process `syz.3.3082'. [ 215.014930][T12264] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3087'. [ 215.040091][T12264] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3087'. [ 215.140839][T12264] gretap1: entered promiscuous mode [ 215.177412][T12264] gretap1: entered allmulticast mode [ 215.493451][T12294] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3095'. [ 215.515924][T12293] netlink: 'syz.1.3097': attribute type 13 has an invalid length. [ 215.564371][T12294] netlink: 244 bytes leftover after parsing attributes in process `syz.4.3095'. [ 215.602001][T12293] netlink: 'syz.1.3097': attribute type 58 has an invalid length. [ 215.646769][T12293] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3097'. [ 216.217961][T12335] xt_CT: You must specify a L4 protocol and not use inversions on it [ 216.337046][T12341] netlink: 80 bytes leftover after parsing attributes in process `syz.4.3117'. [ 216.662365][T12360] netlink: 'syz.3.3125': attribute type 16 has an invalid length. [ 216.713256][T12360] netlink: 'syz.3.3125': attribute type 3 has an invalid length. [ 216.758850][T12360] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3125'. [ 216.793821][T12365] netlink: 'syz.1.3127': attribute type 49 has an invalid length. [ 216.856954][T12371] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 217.209821][T12391] 8021q: VLANs not supported on lo [ 217.573869][T12414] netlink: 1284 bytes leftover after parsing attributes in process `syz.3.3146'. [ 218.424702][T12463] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 218.724950][T12479] netlink: 'syz.2.3176': attribute type 2 has an invalid length. [ 219.682156][T12533] __nla_validate_parse: 1 callbacks suppressed [ 219.682175][T12533] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3203'. [ 219.724153][T12533] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3203'. [ 219.907790][T12545] x_tables: duplicate entry at hook 2 [ 219.955983][T12547] pimreg: entered allmulticast mode [ 220.292213][T12565] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3217'. [ 220.334624][T12565] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3217'. [ 220.426502][T12573] netlink: 10 bytes leftover after parsing attributes in process `syz.3.3223'. [ 220.738751][T12592] x_tables: unsorted entry at hook 2 [ 220.901609][T12600] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3235'. [ 220.944615][T12600] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3235'. [ 221.014122][T12605] netlink: 'syz.1.3239': attribute type 1 has an invalid length. [ 221.033693][T12605] netlink: 232 bytes leftover after parsing attributes in process `syz.1.3239'. [ 221.457611][T12631] xt_CT: You must specify a L4 protocol and not use inversions on it [ 221.699912][T12646] xfrm1: entered allmulticast mode [ 221.823778][T12653] netlink: 168 bytes leftover after parsing attributes in process `syz.2.3261'. [ 221.893966][T12656] netlink: 192 bytes leftover after parsing attributes in process `syz.0.3263'. [ 222.819957][T12709] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 223.385956][T12726] netlink: 'syz.2.3297': attribute type 6 has an invalid length. [ 223.763753][T12744] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 223.805355][T12746] netlink: 'syz.3.3309': attribute type 1 has an invalid length. [ 224.320619][T12781] unsupported nlmsg_type 40 [ 224.498289][T12789] xt_socket: unknown flags 0x50 [ 224.973841][T12820] __nla_validate_parse: 3 callbacks suppressed [ 224.973860][T12820] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3345'. [ 225.233223][T12830] No such timeout policy "syz0" [ 225.346345][T12840] netlink: 'syz.3.3355': attribute type 10 has an invalid length. [ 225.392805][T12840] hsr0: entered promiscuous mode [ 225.407335][T12842] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3356'. [ 225.427084][T12840] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 225.472943][T12840] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 225.513029][T12840] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 225.563349][T12852] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 225.623954][T12854] xt_addrtype: ipv6 does not support BROADCAST matching [ 225.843839][T12866] netlink: 'syz.1.3367': attribute type 21 has an invalid length. [ 225.881549][T12866] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3367'. [ 225.920689][T12866] netlink: 'syz.1.3367': attribute type 5 has an invalid length. [ 225.953693][T12866] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3367'. [ 226.047041][T12876] netlink: 'syz.4.3373': attribute type 1 has an invalid length. [ 226.107200][T12880] netlink: 'syz.2.3375': attribute type 26 has an invalid length. [ 226.325592][T12894] netlink: 'syz.1.3381': attribute type 4 has an invalid length. [ 226.378266][T12897] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3382'. [ 226.406051][T12897] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 226.438074][T12899] sctp: [Deprecated]: syz.4.3384 (pid 12899) Use of struct sctp_assoc_value in delayed_ack socket option. [ 226.438074][T12899] Use struct sctp_sack_info instead [ 226.467932][T12901] bond0: (slave gre0): Error: Device can not be enslaved while up [ 226.541808][T12905] netlink: 'syz.3.3386': attribute type 1 has an invalid length. [ 226.591521][T12905] netlink: 244 bytes leftover after parsing attributes in process `syz.3.3386'. [ 226.979052][T12931] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 227.233527][T12946] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3407'. [ 227.490565][T12960] (unnamed net_device) (uninitialized): peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 227.558750][T12960] bond1: entered promiscuous mode [ 227.580435][T12960] bond1: entered allmulticast mode [ 227.587323][T12960] 8021q: adding VLAN 0 to HW filter on device bond1 [ 228.108075][T12998] netlink: 'syz.1.3432': attribute type 1 has an invalid length. [ 228.136846][T12999] ip6t_srh: unknown srh invflags 5F00 [ 228.147159][T12998] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3432'. [ 228.179520][T12998] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3432'. [ 228.333758][T13010] xt_cgroup: xt_cgroup: no path or classid specified [ 228.619299][T13027] netlink: 'syz.1.3445': attribute type 10 has an invalid length. [ 228.633392][T13029] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3446'. [ 228.667155][T13027] team0: Device ipvlan1 failed to register rx_handler [ 229.302856][T13070] netlink: 'syz.4.3466': attribute type 12 has an invalid length. [ 229.417922][T13078] xt_hashlimit: max too large, truncated to 1048576 [ 229.588016][T13092] netlink: 'syz.4.3478': attribute type 4 has an invalid length. [ 229.900013][T13102] 8021q: adding VLAN 0 to HW filter on device bond2 [ 230.039605][T13119] netlink: 'syz.4.3489': attribute type 1 has an invalid length. [ 230.063758][T13119] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3489'. [ 230.101132][T13122] openvswitch: netlink: Actions may not be safe on all matching packets [ 230.472286][T13142] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3503'. [ 230.494056][T13142] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3503'. [ 230.526691][T13147] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3504'. [ 230.558982][T13150] netlink: 'syz.0.3505': attribute type 1 has an invalid length. [ 230.584164][T13147] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3504'. [ 230.825658][T13164] netlink: zone id is out of range [ 230.831333][T13164] netlink: set zone limit has 8 unknown bytes [ 231.654585][T13212] Illegal XDP return value 105720636 on prog (id 293) dev N/A, expect packet loss! [ 231.839351][T13226] netlink: 'syz.3.3542': attribute type 1 has an invalid length. [ 231.848899][T13226] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3542'. [ 231.943841][T13231] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3546'. [ 232.570743][T13247] Cannot find del_set index 65531 as target [ 232.736162][T13250] netlink: 'syz.1.3553': attribute type 11 has an invalid length. [ 232.767822][T13250] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3553'. [ 233.103911][T13275] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 233.119533][T13279] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3569'. [ 233.388610][T13292] netlink: 'syz.2.3574': attribute type 1 has an invalid length. [ 233.403242][T13295] netlink: 'syz.1.3578': attribute type 2 has an invalid length. [ 233.426474][T13292] netlink: 220 bytes leftover after parsing attributes in process `syz.2.3574'. [ 233.861307][T13324] netlink: 'syz.2.3589': attribute type 1 has an invalid length. [ 234.108785][T13337] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 234.143950][T13337] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 234.789583][T13379] openvswitch: netlink: Actions may not be safe on all matching packets [ 235.365854][T13414] netlink: 'syz.4.3634': attribute type 1 has an invalid length. [ 236.233398][T13466] __nla_validate_parse: 2 callbacks suppressed [ 236.233417][T13466] netlink: 144 bytes leftover after parsing attributes in process `syz.0.3660'. [ 236.833719][T13501] xt_hashlimit: overflow, try lower: 1125899906842624/8 [ 236.934369][T13507] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 236.954607][T13509] netlink: 'syz.0.3682': attribute type 12 has an invalid length. [ 237.361563][T13536] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3696'. [ 237.491751][T13545] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 237.604824][T13549] netlink: 'syz.4.3702': attribute type 1 has an invalid length. [ 237.629838][T13549] netlink: 228 bytes leftover after parsing attributes in process `syz.4.3702'. [ 237.647625][T13552] netlink: 'syz.2.3704': attribute type 11 has an invalid length. [ 237.666265][T13552] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3704'. [ 237.909755][T13571] bond0: option ad_select: unable to set because the bond device is up [ 238.013103][T13523] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 238.422201][T13599] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 238.592760][T13609] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3730'. [ 238.613187][T13613] netlink: 'syz.3.3731': attribute type 21 has an invalid length. [ 238.625635][T13613] netlink: 'syz.3.3731': attribute type 1 has an invalid length. [ 238.668716][T13609] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3730'. [ 238.695339][T13609] netlink: 31 bytes leftover after parsing attributes in process `syz.4.3730'. [ 238.737174][T13609] netlink: 'syz.4.3730': attribute type 2 has an invalid length. [ 238.747244][T13619] lo: entered promiscuous mode [ 238.756790][T13619] netlink: 'syz.0.3734': attribute type 2 has an invalid length. [ 238.764692][T13609] netlink: 31 bytes leftover after parsing attributes in process `syz.4.3730'. [ 238.776529][T13619] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 238.918076][T13625] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3741'. [ 239.244398][T13651] netlink: 'syz.3.3751': attribute type 10 has an invalid length. [ 240.057926][T13679] netlink: 'syz.4.3765': attribute type 12 has an invalid length. [ 240.069455][T13679] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3765'. [ 240.175939][T13688] xt_policy: too many policy elements [ 240.495361][T13711] xt_TCPMSS: Only works on TCP SYN packets [ 241.367739][T13738] infiniband syz0: set active [ 241.372685][T13738] infiniband syz0: added bond_slave_1 [ 241.433419][T13738] RDS/IB: syz0: added [ 241.441047][T13738] smc: adding ib device syz0 with port count 1 [ 241.452198][T13738] smc: ib device syz0 port 1 has pnetid [ 241.489403][T13762] __nla_validate_parse: 3 callbacks suppressed [ 241.489420][T13762] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3807'. [ 241.612275][T13769] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3809'. [ 241.631997][T13769] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3809'. [ 241.643809][T13769] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3809'. [ 241.673883][T13769] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3809'. [ 241.690048][T13769] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3809'. [ 241.752356][T13776] xt_nat: multiple ranges no longer supported [ 242.277201][T13804] netlink: 'syz.1.3826': attribute type 21 has an invalid length. [ 242.333718][T13804] netlink: 'syz.1.3826': attribute type 6 has an invalid length. [ 242.353678][T13804] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3826'. [ 242.862552][T13834] bridge_slave_0: left allmulticast mode [ 242.895945][T13836] nftables ruleset with unbound set [ 242.901376][T13834] bridge_slave_0: left promiscuous mode [ 242.917302][T13834] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.991460][T13834] bridge_slave_1: left allmulticast mode [ 243.019090][T13834] bridge_slave_1: left promiscuous mode [ 243.034499][T13834] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.090460][T13834] bond0: (slave bond_slave_0): Releasing backup interface [ 243.134195][T13834] bond0: (slave bond_slave_1): Releasing backup interface [ 243.171568][T13834] team0: Port device team_slave_0 removed [ 243.193395][T13834] team0: Port device team_slave_1 removed [ 243.206471][T13834] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 243.230548][T13834] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 243.254257][T13834] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 243.285998][T13834] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 243.583554][T13868] ieee802154 phy1 wpan1: encryption failed: -22 [ 244.053103][T13889] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3871'. [ 244.389398][T13906] netlink: 'syz.2.3877': attribute type 64 has an invalid length. [ 244.433663][T13906] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3877'. [ 244.655942][T13920] openvswitch: netlink: Tunnel attr 303 out of range max 16 [ 244.896447][T13933] netlink: 'syz.4.3891': attribute type 1 has an invalid length. [ 245.056897][T13944] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 245.125015][T13938] smc: removing ib device syz0 [ 245.220242][T13950] raw_sendmsg: syz.2.3899 forgot to set AF_INET. Fix it! [ 245.239957][T13947] xt_recent: hitcount (4294967295) is larger than allowed maximum (65535) [ 245.257588][T13952] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3901'. [ 245.895440][T13952] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 245.920358][T13952] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 245.991575][T13952] bond0 (unregistering): Released all slaves [ 246.223889][T13985] delete_channel: no stack [ 246.312619][T13989] xt_CT: You must specify a L4 protocol and not use inversions on it [ 246.630981][T14007] xt_l2tp: missing protocol rule (udp|l2tpip) [ 246.848236][T14015] netlink: 'syz.4.3932': attribute type 3 has an invalid length. [ 247.754055][T14066] netlink: 'syz.2.3957': attribute type 12 has an invalid length. [ 247.770159][T14069] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3960'. [ 247.807773][T14066] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3957'. [ 248.177982][T14094] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3971'. [ 248.546097][T14120] Unsupported ieee802154 address type: 0 [ 248.684871][T14129] netlink: 'syz.2.3989': attribute type 1 has an invalid length. [ 248.789260][T14135] netlink: 'syz.4.3991': attribute type 1 has an invalid length. [ 248.809441][T14135] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3991'. [ 248.819339][T14137] netlink: 'syz.3.3990': attribute type 5 has an invalid length. [ 249.058949][T14152] netlink: 'syz.0.3999': attribute type 1 has an invalid length. [ 249.100083][T14152] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3999'. [ 249.135724][T14158] netlink: 'syz.3.4003': attribute type 11 has an invalid length. [ 249.149356][T14158] netlink: 'syz.3.4003': attribute type 11 has an invalid length. [ 249.171893][T14158] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4003'. [ 249.475612][T14179] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 249.701127][T14193] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4019'. [ 250.784773][T14265] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 250.988256][T14282] Cannot find set identified by id 752 to match [ 251.401675][T14310] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4077'. [ 251.861164][T14340] netlink: 'syz.1.4094': attribute type 7 has an invalid length. [ 252.280363][T14368] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4106'. [ 252.387174][T14374] netlink: 596 bytes leftover after parsing attributes in process `syz.1.4110'. [ 252.401935][T14376] netlink: 'syz.3.4111': attribute type 3 has an invalid length. [ 252.439271][T14376] netlink: 'syz.3.4111': attribute type 1 has an invalid length. [ 252.622722][T14389] sctp: [Deprecated]: syz.4.4116 (pid 14389) Use of int in max_burst socket option. [ 252.622722][T14389] Use struct sctp_assoc_value instead [ 252.846595][T14405] __nla_validate_parse: 2 callbacks suppressed [ 252.846621][T14405] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4125'. [ 253.023532][T14415] netlink: 'syz.3.4130': attribute type 1 has an invalid length. [ 253.049724][T14415] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4130'. [ 253.393312][T14441] sock: sock_timestamping_bind_phc: sock not bind to device [ 253.618465][T14457] netlink: 45 bytes leftover after parsing attributes in process `syz.0.4150'. [ 254.355803][T14505] netlink: 'syz.1.4174': attribute type 1 has an invalid length. [ 254.372137][T14505] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4174'. [ 254.673033][T14525] xt_l2tp: invalid flags combination: c [ 255.032274][T14547] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode [ 255.424700][T14572] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4208'. [ 255.698370][T14593] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4217'. [ 255.720381][T14593] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4217'. [ 255.738169][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.762347][T14599] netlink: 'syz.0.4222': attribute type 2 has an invalid length. [ 256.914833][T14661] netlink: 'syz.3.4250': attribute type 29 has an invalid length. [ 256.922780][T14661] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4250'. [ 257.218923][T14674] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4256'. [ 257.413786][T14687] xt_time: unknown flags 0x4 [ 257.920986][T14721] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4279'. [ 258.374172][T14753] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4295'. [ 258.707094][T14775] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$ûÌÌULÙvy¸ÚØ¢…D£øUDŒw˜}z [ 258.866067][T14785] xt_CT: You must specify a L4 protocol and not use inversions on it [ 259.070679][T14799] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4317'. [ 259.520634][T14834] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 259.934117][T14857] netlink: 'syz.3.4340': attribute type 24 has an invalid length. [ 260.725143][T14912] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4364'. [ 261.496186][T14961] netlink: 256 bytes leftover after parsing attributes in process `syz.4.4384'. [ 261.683446][T14972] netlink: 256 bytes leftover after parsing attributes in process `syz.4.4388'. [ 262.261575][T15012] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4404'. [ 262.347662][T15022] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4407'. [ 262.598134][T15036] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4413'. [ 262.895699][T15054] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 263.067127][T15065] tc_dump_action: action bad kind [ 263.650468][T15108] netlink: 'syz.4.4442': attribute type 1 has an invalid length. [ 263.916644][T15121] netlink: 'syz.0.4449': attribute type 21 has an invalid length. [ 263.948540][T15121] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4449'. [ 263.994202][T15129] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4452'. [ 264.018024][T15129] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 264.024595][T15131] xt_hashlimit: Unknown mode mask 115, kernel too old? [ 264.398030][T15156] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4467'. [ 264.413920][T15158] openvswitch: netlink: Tunnel attr 0 has unexpected len 16 expected 8 [ 264.895072][T15185] bond2: entered promiscuous mode [ 264.917788][T15185] bond2: entered allmulticast mode [ 264.934681][T15185] 8021q: adding VLAN 0 to HW filter on device bond2 [ 264.980302][T15198] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4486'. [ 264.999097][T15198] (unnamed net_device) (uninitialized): option use_carrier: invalid value (4) [ 265.461173][T15232] xt_hashlimit: overflow, rate too high: 0 [ 265.537961][T15235] tipc: Can't bind to reserved service type 1 [ 265.607417][T15239] bridge4: entered promiscuous mode [ 265.612667][T15239] bridge4: entered allmulticast mode [ 266.601927][T15297] netlink: 'syz.1.4534': attribute type 1 has an invalid length. [ 266.631047][T15297] lo speed is unknown, defaulting to 1000 [ 267.587098][T15367] netlink: 256 bytes leftover after parsing attributes in process `syz.1.4564'. [ 267.974560][T15396] netlink: 808 bytes leftover after parsing attributes in process `syz.2.4579'. [ 268.213761][T15410] netlink: 'syz.0.4587': attribute type 1 has an invalid length. [ 268.243993][T15414] nft_compat: unsupported protocol 0 [ 268.253642][T15410] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4587'. [ 268.274327][T15410] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4587'. [ 268.526019][T15435] netlink: 4388 bytes leftover after parsing attributes in process `syz.3.4597'. [ 268.563385][T15436] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4599'. [ 268.972127][T15462] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4611'. [ 269.228860][T15479] netlink: 'syz.4.4619': attribute type 1 has an invalid length. [ 269.242593][T15479] netlink: 'syz.4.4619': attribute type 2 has an invalid length. [ 269.263921][T15483] syz.3.4621: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 269.269385][T15479] netlink: 'syz.4.4619': attribute type 1 has an invalid length. [ 269.320940][T15483] CPU: 1 UID: 0 PID: 15483 Comm: syz.3.4621 Not tainted 6.14.0-syzkaller-13311-g69ae94725f4f #0 PREEMPT(full) [ 269.320969][T15483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 269.320983][T15483] Call Trace: [ 269.320991][T15483] [ 269.320998][T15483] dump_stack_lvl+0x241/0x360 [ 269.321042][T15483] ? __pfx_dump_stack_lvl+0x10/0x10 [ 269.321066][T15483] ? __pfx__printk+0x10/0x10 [ 269.321088][T15483] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 269.321115][T15483] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 269.321137][T15483] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 269.321163][T15483] warn_alloc+0x27c/0x410 [ 269.321183][T15483] ? __vmalloc_node_range_noprof+0x108/0x1390 [ 269.321200][T15483] ? __pfx_warn_alloc+0x10/0x10 [ 269.321224][T15483] ? kasan_save_track+0x3f/0x80 [ 269.321241][T15483] ? __kasan_kmalloc+0x9d/0xb0 [ 269.321262][T15483] ? xsk_setsockopt+0x449/0x840 [ 269.321277][T15483] ? do_sock_setsockopt+0x3b1/0x710 [ 269.321292][T15483] ? __x64_sys_setsockopt+0x1ee/0x280 [ 269.321307][T15483] ? do_syscall_64+0xf3/0x230 [ 269.321326][T15483] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.321352][T15483] __vmalloc_node_range_noprof+0x128/0x1390 [ 269.321399][T15483] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 269.321421][T15483] ? __kasan_kmalloc+0x9d/0xb0 [ 269.321446][T15483] vmalloc_user_noprof+0x74/0x80 [ 269.321463][T15483] ? xskq_create+0xb6/0x170 [ 269.321479][T15483] xskq_create+0xb6/0x170 [ 269.321498][T15483] xsk_init_queue+0xa1/0x100 [ 269.321519][T15483] xsk_setsockopt+0x449/0x840 [ 269.321538][T15483] ? __pfx_xsk_setsockopt+0x10/0x10 [ 269.321552][T15483] ? __lock_acquire+0xad5/0xd80 [ 269.321569][T15483] ? __pfx_aa_sk_perm+0x10/0x10 [ 269.321595][T15483] ? aa_sock_opt_perm+0x79/0x120 [ 269.321620][T15483] ? __pfx_xsk_setsockopt+0x10/0x10 [ 269.321633][T15483] do_sock_setsockopt+0x3b1/0x710 [ 269.321651][T15483] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 269.321662][T15483] ? __fget_files+0x2a/0x420 [ 269.321677][T15483] ? __fget_files+0x39d/0x420 [ 269.321687][T15483] ? __fget_files+0x2a/0x420 [ 269.321705][T15483] __x64_sys_setsockopt+0x1ee/0x280 [ 269.321723][T15483] do_syscall_64+0xf3/0x230 [ 269.321738][T15483] ? clear_bhb_loop+0x45/0xa0 [ 269.321753][T15483] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.321765][T15483] RIP: 0033:0x7f0de3f8d169 [ 269.321783][T15483] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 269.321794][T15483] RSP: 002b:00007f0de4eb5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 269.321809][T15483] RAX: ffffffffffffffda RBX: 00007f0de41a5fa0 RCX: 00007f0de3f8d169 [ 269.321819][T15483] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 269.321828][T15483] RBP: 00007f0de400e2a0 R08: 0000000000000004 R09: 0000000000000000 [ 269.321836][T15483] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 269.321844][T15483] R13: 0000000000000000 R14: 00007f0de41a5fa0 R15: 00007ffd82a5ee48 [ 269.321866][T15483] [ 269.321876][T15483] Mem-Info: [ 269.630448][T15483] active_anon:4614 inactive_anon:0 isolated_anon:0 [ 269.630448][T15483] active_file:1360 inactive_file:38403 isolated_file:0 [ 269.630448][T15483] unevictable:768 dirty:277 writeback:0 [ 269.630448][T15483] slab_reclaimable:10289 slab_unreclaimable:99864 [ 269.630448][T15483] mapped:28417 shmem:1402 pagetables:957 [ 269.630448][T15483] sec_pagetables:0 bounce:0 [ 269.630448][T15483] kernel_misc_reclaimable:0 [ 269.630448][T15483] free:1342776 free_pcp:768 free_cma:0 [ 269.680350][T15483] Node 0 active_anon:18456kB inactive_anon:0kB active_file:5440kB inactive_file:153536kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:113568kB dirty:1104kB writeback:0kB shmem:4072kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10792kB pagetables:3628kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 269.719462][T15483] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:80kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 269.750783][T15483] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 269.779388][T15483] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 269.785340][T15483] Node 0 DMA32 free:1453544kB boost:0kB min:34152kB low:42688kB high:51224kB reserved_highatomic:0KB active_anon:18448kB inactive_anon:0kB active_file:5440kB inactive_file:153444kB unevictable:1536kB writepending:1104kB present:3129332kB managed:2547252kB mlocked:0kB bounce:0kB free_pcp:1612kB local_pcp:836kB free_cma:0kB [ 269.872676][T15483] lowmem_reserve[]: 0 0 0 0 0 [ 269.904633][T15483] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:92kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 269.943831][T15483] lowmem_reserve[]: 0 0 0 0 0 [ 269.977295][T15483] Node 1 Normal free:3904720kB boost:0kB min:55748kB low:69684kB high:83620kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 270.019643][T15483] lowmem_reserve[]: 0 0 0 0 0 [ 270.026791][T15483] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 270.055235][T15515] netlink: 'syz.0.4637': attribute type 11 has an invalid length. [ 270.064870][T15515] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4637'. [ 270.153681][T15483] Node 0 DMA32: 336*4kB (UM) 130*8kB (UM) 186*16kB (UME) 470*32kB (UME) 1041*64kB (UME) 822*128kB (UME) 504*256kB (UM) 304*512kB (UME) 138*1024kB (UM) 16*2048kB (UME) 196*4096kB (UM) = 1453808kB [ 270.186868][T15483] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 270.210254][T15483] Node 1 Normal: 238*4kB (UME) 53*8kB (UME) 41*16kB (UME) 199*32kB (UME) 96*64kB (UME) 28*128kB (UME) 20*256kB (UME) 9*512kB (UME) 2*1024kB (UM) 6*2048kB (UE) 943*4096kB (M) = 3904720kB [ 270.232340][T15483] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 270.242927][T15483] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 270.252887][T15483] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 270.262827][T15483] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 270.282117][T15525] xt_ecn: cannot match TCP bits for non-tcp packets [ 270.311046][T15483] 41169 total pagecache pages [ 270.329341][T15483] 0 pages in swap cache [ 270.344691][T15483] Free swap = 124996kB [ 270.348894][T15483] Total swap = 124996kB [ 270.361770][T15483] 2097051 pages RAM [ 270.384247][T15483] 0 pages HighMem/MovableOnly [ 270.388957][T15483] 428580 pages reserved [ 270.399160][T15483] 0 pages cma reserved [ 271.139158][T15577] xt_CT: No such helper "pptp" [ 271.599074][T15618] netlink: set zone limit has 8 unknown bytes [ 271.933145][T15642] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4699'. [ 271.974033][T15642] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4699'. [ 271.983025][T15642] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4699'. [ 272.383823][T15676] lo: left promiscuous mode [ 272.831231][T15709] set match dimension is over the limit! [ 273.078027][T15727] delete_channel: no stack [ 273.206046][T15737] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4744'. [ 273.519697][T15755] netlink: 'syz.3.4754': attribute type 11 has an invalid length. [ 273.543731][T15755] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4754'. [ 273.751633][T15769] netlink: 'syz.2.4761': attribute type 1 has an invalid length. [ 273.773654][T15769] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4761'. [ 273.857403][T15773] netlink: 'syz.0.4763': attribute type 1 has an invalid length. [ 274.254880][T15778] infiniband syz1: set down [ 274.259441][T15778] infiniband syz1: added ipvlan1 [ 274.308268][T15778] RDS/IB: syz1: added [ 274.313112][T15778] smc: adding ib device syz1 with port count 1 [ 274.319508][T15778] smc: ib device syz1 port 1 has pnetid [ 274.583607][T15801] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 276.059953][T15870] netlink: 'syz.4.4800': attribute type 10 has an invalid length. [ 276.076205][T15870] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.083963][T15870] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.146180][T15870] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.153407][T15870] bridge0: port 2(bridge_slave_1) entered forwarding state [ 276.160965][T15870] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.168159][T15870] bridge0: port 1(bridge_slave_0) entered forwarding state [ 276.197541][T15870] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 276.510368][T15891] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4812'. [ 277.004777][T15920] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4826'. [ 277.131861][T15927] netlink: 'syz.2.4829': attribute type 11 has an invalid length. [ 277.162065][T15927] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4829'. [ 277.258615][T15937] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 277.478995][T15953] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4842'. [ 277.503776][T15953] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4842'. [ 277.626010][T15963] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4847'. [ 278.142265][T16001] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 278.536040][T16031] x_tables: unsorted underflow at hook 1 [ 278.759578][T16044] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4886'. [ 278.805349][T16044] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4886'. [ 278.874967][T16052] siw: device registration error -23 [ 279.099591][T16067] netlink: 'syz.0.4898': attribute type 3 has an invalid length. [ 279.136076][T16072] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 279.143672][T16067] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.4898'. [ 279.291547][T16082] openvswitch: netlink: Message has -1 unknown bytes. [ 279.312457][T16084] netlink: 'syz.1.4906': attribute type 10 has an invalid length. [ 279.342248][T16084] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 279.367323][T16084] batadv0: entered allmulticast mode [ 279.374413][T16084] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 279.422693][T16092] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4911'. [ 279.432139][T16086] xt_TPROXY: Can be used only with -p tcp or -p udp [ 279.770493][T16113] xt_l2tp: invalid flags combination: 4 [ 280.089817][T16136] netlink: 'syz.3.4933': attribute type 21 has an invalid length. [ 280.933221][T16197] tunl0: entered promiscuous mode [ 280.966855][T16197] netlink: 'syz.0.4963': attribute type 3 has an invalid length. [ 281.407603][T16232] delete_channel: no stack [ 282.118326][T16278] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 282.125892][T16278] IPv6: NLM_F_CREATE should be set when creating new route [ 282.360302][T16296] __nla_validate_parse: 3 callbacks suppressed [ 282.360322][T16296] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5000'. [ 282.661621][T16314] (unnamed net_device) (uninitialized): down delay (33554432) is not a multiple of miimon (640), value rounded to 33553920 ms [ 282.700876][T16316] netlink: 'syz.2.5012': attribute type 2 has an invalid length. [ 282.879077][T16328] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5019'. [ 282.944326][T16333] netlink: 'syz.3.5017': attribute type 27 has an invalid length. [ 283.003726][T16331] geneve2: entered promiscuous mode [ 283.020308][T16331] geneve2: entered allmulticast mode [ 283.303951][T16358] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5028'. [ 283.333822][T16358] tc_dump_action: action bad kind [ 283.896664][T16397] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5044'. [ 283.957826][T16397] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5044'. [ 283.973735][T16403] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5048'. [ 284.223981][T16420] lo speed is unknown, defaulting to 1000 [ 284.241952][T16420] lo speed is unknown, defaulting to 1000 [ 284.264457][T16420] lo speed is unknown, defaulting to 1000 [ 284.274141][T16422] netlink: 'syz.3.5055': attribute type 2 has an invalid length. [ 284.281894][T16422] netlink: 244 bytes leftover after parsing attributes in process `syz.3.5055'. [ 284.995608][T16463] netlink: 'syz.2.5070': attribute type 2 has an invalid length. [ 285.102679][T16469] openvswitch: netlink: Flow key attr not present in new flow. [ 285.114654][T16420] infiniband syz0: set active [ 285.119377][T16420] infiniband syz0: added lo [ 285.131070][ T10] lo speed is unknown, defaulting to 1000 [ 285.312494][T16482] netlink: 'syz.2.5080': attribute type 1 has an invalid length. [ 285.360481][T16420] RDS/IB: syz0: added [ 285.401653][T16420] smc: adding ib device syz0 with port count 1 [ 285.428401][T16420] smc: ib device syz0 port 1 has pnetid [ 285.450708][ T5925] lo speed is unknown, defaulting to 1000 [ 285.459619][T16420] lo speed is unknown, defaulting to 1000 [ 285.994883][T16519] dvmrp0: entered allmulticast mode [ 286.181249][T16420] lo speed is unknown, defaulting to 1000 [ 286.476295][T16550] openvswitch: netlink: Key 22 has unexpected len 2 expected 4 [ 286.742974][T16565] netlink: 'syz.2.5115': attribute type 28 has an invalid length. [ 286.783762][T16565] netlink: 'syz.2.5115': attribute type 3 has an invalid length. [ 286.793799][T16565] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5115'. [ 286.875586][T16420] lo speed is unknown, defaulting to 1000 [ 287.553035][T16420] lo speed is unknown, defaulting to 1000 [ 287.902390][T16627] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5146'. [ 288.112678][T16420] lo speed is unknown, defaulting to 1000 [ 289.427110][T16723] xt_TCPMSS: Only works on TCP SYN packets [ 289.743812][T16744] netlink: 'syz.3.5204': attribute type 10 has an invalid length. [ 290.400684][T16791] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5227'. [ 290.516909][T16796] ipt_rpfilter: unknown options [ 290.752333][T16813] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 290.790751][T16813] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 290.811636][T16813] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 291.512673][T16867] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5264'. [ 291.530927][T16867] netlink: 152 bytes leftover after parsing attributes in process `syz.0.5264'. [ 291.577560][T16867] netlink: 152 bytes leftover after parsing attributes in process `syz.0.5264'. [ 291.819811][T16888] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5273'. [ 291.841266][T16888] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5273'. [ 292.410963][T16930] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 292.616746][T16944] netlink: 'syz.2.5302': attribute type 11 has an invalid length. [ 292.634661][T16944] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5302'. [ 292.759605][T16954] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5306'. [ 292.794957][T16956] openvswitch: netlink: Missing key (keys=40, expected=100) [ 293.063269][T16972] xt_TPROXY: Can be used only with -p tcp or -p udp [ 293.065253][T16974] xt_l2tp: unknown flags: 18 [ 293.332835][T16990] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5324'. [ 293.356525][T16990] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5324'. [ 293.389396][T16990] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 293.724103][T17020] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5338'. [ 293.833813][T17028] netlink: 'syz.2.5343': attribute type 1 has an invalid length. [ 293.854782][T17028] netlink: 'syz.2.5343': attribute type 1 has an invalid length. [ 293.893103][T17028] netlink: 'syz.2.5343': attribute type 1 has an invalid length. [ 293.913338][T17028] netlink: 'syz.2.5343': attribute type 2 has an invalid length. [ 293.954331][T17028] netlink: 76 bytes leftover after parsing attributes in process `syz.2.5343'. [ 293.962628][T17038] xt_hashlimit: max too large, truncated to 1048576 [ 294.126365][T17048] netlink: 'syz.1.5353': attribute type 11 has an invalid length. [ 294.194758][T17052] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5355'. [ 294.535444][ T10] IPVS: starting estimator thread 0... [ 294.602449][T17083] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5370'. [ 294.623677][T17081] IPVS: using max 30 ests per chain, 72000 per kthread [ 295.162494][T17125] delete_channel: no stack [ 295.228352][T17129] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5392'. [ 295.356834][T17137] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5396'. [ 295.372891][T17139] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5398'. [ 295.672703][T17157] netlink: 'syz.2.5405': attribute type 1 has an invalid length. [ 295.682209][T17159] IPVS: length: 157 != 24 [ 295.970614][T17179] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5417'. [ 296.121325][T17190] netlink: 'syz.2.5423': attribute type 11 has an invalid length. [ 296.682238][T17234] netlink: 'syz.2.5440': attribute type 12 has an invalid length. [ 297.324251][T17276] netlink: 'syz.0.5458': attribute type 30 has an invalid length. [ 297.719199][T17301] netlink: 'syz.4.5470': attribute type 21 has an invalid length. [ 297.870173][T17313] xt_TCPMSS: Only works on TCP SYN packets [ 298.795577][T17383] __nla_validate_parse: 10 callbacks suppressed [ 298.795596][T17383] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5510'. [ 298.822309][T17383] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5510'. [ 298.860585][T17383] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5510'. [ 299.017980][T17396] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 299.185417][T17407] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5523'. [ 299.211864][T17411] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 299.401855][T17423] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5532'. [ 299.627872][T17440] xt_cgroup: invalid path, errno=-2 [ 300.875815][T17509] Bluetooth: MGMT ver 1.23 [ 301.365994][T17544] netlink: 96 bytes leftover after parsing attributes in process `syz.4.5588'. [ 301.433146][T17544] vlan2: entered allmulticast mode [ 301.448558][T17544] gretap0: entered allmulticast mode [ 301.691611][T17568] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5595'. [ 301.719021][T17561] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5595'. [ 302.340105][T17607] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5618'. [ 302.382572][T17607] netlink: 5 bytes leftover after parsing attributes in process `syz.2.5618'. [ 303.211330][T17655] tipc: Enabling of bearer rejected, failed to enable media [ 303.768113][T17692] netlink: 'syz.1.5657': attribute type 21 has an invalid length. [ 303.806125][T17692] __nla_validate_parse: 3 callbacks suppressed [ 303.806143][T17692] netlink: 156 bytes leftover after parsing attributes in process `syz.1.5657'. [ 303.828061][T17696] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 304.082243][T17714] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5670'. [ 304.143946][T17718] netdevsim netdevsim2: Firmware load for './file0/../file0' refused, path contains '..' component [ 304.205884][T17720] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5672'. [ 304.348476][T17731] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 304.577259][T17744] netlink: 'syz.3.5684': attribute type 11 has an invalid length. [ 305.409022][T17796] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:17 to non-existent VLAN 1280 [ 305.464800][T17800] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5712'. [ 305.499254][T17800] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5712'. [ 305.511160][T17800] netlink: 'syz.4.5712': attribute type 13 has an invalid length. [ 305.847300][T17828] Zero length message leads to an empty skb [ 307.170010][T17916] netlink: 104 bytes leftover after parsing attributes in process `syz.0.5769'. [ 307.573413][T17936] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5779'. [ 307.654022][T17941] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5781'. [ 308.494559][T17993] netlink: 'syz.0.5805': attribute type 142 has an invalid length. [ 308.619218][ T55] Bluetooth: hci4: command 0x0405 tx timeout [ 308.646667][T18001] netlink: 92 bytes leftover after parsing attributes in process `syz.1.5812'. [ 308.714313][T18006] netlink: 13 bytes leftover after parsing attributes in process `syz.4.5811'. [ 308.980243][T18025] IPVS: Error joining to the multicast group [ 309.001013][T18027] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 309.322677][T18048] nbd: must specify at least one socket [ 309.560938][T18063] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5841'. [ 309.765511][T18076] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5847'. [ 309.821240][T18079] tipc: Started in network mode [ 309.842869][T18079] tipc: Node identity e0000002, cluster identity 4711 [ 309.852754][T18079] tipc: Enabling of bearer rejected, failed to enable media [ 310.384709][T18120] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.5870'. [ 310.758555][T18147] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5882'. [ 310.955746][T18159] atomic_op ffff88807f089198 conn xmit_atomic 0000000000000000 [ 311.113639][T18172] netlink: 'syz.1.5894': attribute type 18 has an invalid length. [ 311.159349][T18172] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 311.168536][T18172] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 311.177377][T18172] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 311.186153][T18172] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 311.658845][T18204] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5909'. [ 311.695076][T18204] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5909'. [ 311.856169][T18216] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5916'. [ 311.879403][T18213] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5915'. [ 311.963792][T18221] netlink: 9 bytes leftover after parsing attributes in process `syz.0.5919'. [ 312.002406][T18221] 0·: renamed from hsr_slave_1 (while UP) [ 312.023984][T18221] 0·: entered allmulticast mode [ 312.037042][T18221] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 312.190803][T18236] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5925'. [ 313.059151][T18297] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 313.345642][T18315] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 313.574699][T18329] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 314.469399][T18383] tipc: Enabling of bearer rejected, failed to enable media [ 314.579883][T18391] __nla_validate_parse: 5 callbacks suppressed [ 314.579902][T18391] netlink: 312 bytes leftover after parsing attributes in process `syz.2.6000'. [ 315.227357][T18437] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6024'. [ 315.427273][T18447] netlink: 56 bytes leftover after parsing attributes in process `syz.0.6027'. [ 315.464021][T18447] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6027'. [ 315.598997][T18452] netlink: 72 bytes leftover after parsing attributes in process `syz.3.6030'. [ 315.632426][T18452] netlink: 72 bytes leftover after parsing attributes in process `syz.3.6030'. [ 315.762275][T18460] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6034'. [ 316.799421][T18523] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6062'. [ 316.845749][T18523] netlink: 176 bytes leftover after parsing attributes in process `syz.1.6062'. [ 316.855821][T18523] netlink: 'syz.1.6062': attribute type 5 has an invalid length. [ 317.040401][ T1152] tipc: Subscription rejected, illegal request [ 317.327823][T18556] netlink: 'syz.1.6080': attribute type 1 has an invalid length. [ 317.525641][T18571] siw: device registration error -23 [ 317.702401][T18586] netlink: 288 bytes leftover after parsing attributes in process `syz.1.6095'. [ 317.822223][ T55] Bluetooth: hci4: link tx timeout [ 317.829456][ T55] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 318.146936][T18614] netlink: 'syz.1.6107': attribute type 1 has an invalid length. [ 318.695500][T18650] netlink: 'syz.3.6126': attribute type 15 has an invalid length. [ 319.906357][ T5918] Bluetooth: hci4: command 0x0405 tx timeout [ 320.311781][T18750] lo: MTU too low for tipc bearer [ 320.329711][T18750] tipc: Enabling of bearer rejected, failed to enable media [ 320.341056][T18753] __nla_validate_parse: 4 callbacks suppressed [ 320.341073][T18753] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6177'. [ 320.383804][T18753] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6177'. [ 320.490220][T18760] netlink: 'syz.0.6180': attribute type 142 has an invalid length. [ 320.775594][T18778] netlink: 'syz.2.6189': attribute type 23 has an invalid length. [ 320.928541][T18790] nbd: couldn't find device at index 65536 [ 321.113041][T18801] netlink: 'syz.4.6200': attribute type 10 has an invalid length. [ 321.134321][T18801] bridge0: port 3(team0) entered blocking state [ 321.140718][T18801] bridge0: port 3(team0) entered disabled state [ 321.166427][T18801] team0: entered allmulticast mode [ 321.179713][T18801] team_slave_0: entered allmulticast mode [ 321.189844][T18801] team_slave_1: entered allmulticast mode [ 321.213033][T18801] team0: entered promiscuous mode [ 321.228827][T18801] team_slave_0: entered promiscuous mode [ 321.244044][T18801] team_slave_1: entered promiscuous mode [ 321.252672][T18801] bridge0: port 3(team0) entered blocking state [ 321.259150][T18801] bridge0: port 3(team0) entered forwarding state [ 321.480499][T18824] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6212'. [ 322.031124][T18859] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 3, id = 0 [ 322.041911][T18857] IPVS: stopping backup sync thread 18859 ... [ 322.347547][T18877] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 323.143240][T18936] netlink: 216 bytes leftover after parsing attributes in process `syz.4.6263'. [ 323.180780][T18936] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6263'. [ 323.242940][T18941] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6267'. [ 323.285234][T18940] delete_channel: no stack [ 323.366128][T18949] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6269'. [ 323.694638][T18967] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6279'. [ 323.703805][T18967] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6279'. [ 324.111461][T18989] veth3: entered allmulticast mode [ 324.532478][T19017] nbd: must specify an index to disconnect [ 324.705490][T19032] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6305'. [ 325.882373][T19110] __nla_validate_parse: 2 callbacks suppressed [ 325.882393][T19110] netlink: 148 bytes leftover after parsing attributes in process `syz.2.6341'. [ 325.940120][T19115] (unnamed net_device) (uninitialized): (slave batadv_slave_0): Device is not bonding slave [ 325.956157][T19115] (unnamed net_device) (uninitialized): option active_slave: invalid value (batadv_slave_0) [ 327.216926][T19197] netlink: 504 bytes leftover after parsing attributes in process `syz.3.6385'. [ 327.820391][T19236] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6404'. [ 328.151666][T19250] netlink: 100 bytes leftover after parsing attributes in process `syz.1.6410'. [ 328.368239][T19264] tipc: Enabling of bearer rejected, media not registered [ 328.582916][T19279] netlink: 'syz.4.6422': attribute type 3 has an invalid length. [ 328.861201][T19287] tipc: Started in network mode [ 328.903486][T19287] tipc: Node identity , cluster identity 4711 [ 328.925961][T19287] tipc: Failed to set node id, please configure manually [ 328.947362][T19287] tipc: Enabling of bearer rejected, failed to enable media [ 330.855605][T19397] netlink: 'syz.4.6480': attribute type 3 has an invalid length. [ 331.224704][T19426] netlink: 11 bytes leftover after parsing attributes in process `syz.2.6488'. [ 331.361332][T19434] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 332.020497][T19479] openvswitch: netlink: Key type 30 is not supported [ 332.480563][T19508] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6528'. [ 334.578297][T19636] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6586'. [ 334.617784][T19636] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6586'. [ 334.946777][T19664] Bluetooth: MGMT ver 1.23 [ 335.289451][T19684] IPVS: ip_vs_edit_dest(): server weight less than zero [ 335.632386][T19702] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.6617'. [ 335.824689][T19711] Bluetooth: MGMT ver 1.23 [ 335.912119][T19716] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6621'. [ 336.030225][T19725] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6628'. [ 336.577691][T19759] gretap0: entered promiscuous mode [ 336.583360][T19759] macsec1: entered promiscuous mode [ 336.606826][T19759] gretap0: left promiscuous mode [ 336.666082][T19756] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 337.066137][T19789] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6660'. [ 337.085460][T19790] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6659'. [ 337.380117][T19804] syz.0.6667 (19804) used obsolete PPPIOCDETACH ioctl [ 337.587882][T19816] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6673'. [ 337.617245][T19816] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6673'. [ 337.787297][T19834] pimreg: entered allmulticast mode [ 338.521694][T19884] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6707'. [ 339.363277][T19930] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6730'. [ 339.399231][T19934] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6732'. [ 339.490268][T19938] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6735'. [ 339.648805][T19947] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6739'. [ 340.004769][T19969] netlink: 176 bytes leftover after parsing attributes in process `syz.0.6748'. [ 340.405454][T19997] tipc: Cannot configure node identity twice [ 342.575017][T20148] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 342.650995][ T837] IPVS: starting estimator thread 0... [ 342.755100][T20154] IPVS: using max 34 ests per chain, 81600 per kthread [ 342.776519][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.222790][T20188] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check. [ 343.575763][ T5918] Bluetooth: hci4: command 0x0405 tx timeout [ 343.768470][T20218] __nla_validate_parse: 3 callbacks suppressed [ 343.768490][T20218] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6869'. [ 343.814033][T20218] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6869'. [ 344.289041][T20252] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6886'. [ 344.992628][T20291] netlink: 'syz.3.6904': attribute type 2 has an invalid length. [ 345.278927][T20309] netlink: 'syz.2.6912': attribute type 2 has an invalid length. [ 345.525640][T20325] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6920'. [ 345.859792][T20346] netlink: 192 bytes leftover after parsing attributes in process `syz.0.6930'. [ 346.021132][T20354] netlink: 'syz.1.6934': attribute type 1 has an invalid length. [ 346.044909][T20354] netlink: 236 bytes leftover after parsing attributes in process `syz.1.6934'. [ 346.104221][T20358] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6936'. [ 346.470578][T20375] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 347.522571][T20442] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6975'. [ 347.564550][T20447] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6979'. [ 348.441862][T20491] netlink: 256 bytes leftover after parsing attributes in process `syz.3.7000'. [ 348.471977][T20491] netlink: 'syz.3.7000': attribute type 9 has an invalid length. [ 349.354694][T20543] --map-set only usable from mangle table [ 349.414431][ T5918] Bluetooth: hci4: command 0x0405 tx timeout [ 349.684747][T20566] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7037'. [ 350.547344][T20617] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7062'. [ 350.637278][T20621] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x9 [ 351.059509][T20650] netlink: 71 bytes leftover after parsing attributes in process `syz.1.7079'. [ 351.472429][T20677] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7092'. [ 351.548392][T20679] xt_CT: No such helper "pptp" [ 351.629752][T20685] tipc: Enabling of bearer rejected, failed to enable media [ 351.658804][T20688] netlink: 'syz.4.7097': attribute type 25 has an invalid length. [ 351.975612][ T5918] Bluetooth: hci4: command 0x0405 tx timeout [ 352.177580][T20724] pim6reg527: entered allmulticast mode [ 352.278932][T20730] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7118'. [ 352.316671][T20730] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7118'. [ 352.353679][T20730] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7118'. [ 352.471657][T20741] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7123'. [ 352.767333][T20763] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7134'. [ 352.807457][T20765] netlink: 100 bytes leftover after parsing attributes in process `syz.2.7135'. [ 353.719055][T20823] lo: entered allmulticast mode [ 353.730960][T20823] lo: left allmulticast mode [ 354.193145][T20856] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 354.762825][T20896] __nla_validate_parse: 8 callbacks suppressed [ 354.762845][T20896] netlink: 44 bytes leftover after parsing attributes in process `syz.3.7198'. [ 354.830249][T20896] netlink: 43 bytes leftover after parsing attributes in process `syz.3.7198'. [ 354.872900][T20896] netlink: 'syz.3.7198': attribute type 6 has an invalid length. [ 354.888512][T20896] netlink: 'syz.3.7198': attribute type 5 has an invalid length. [ 354.897556][T20896] netlink: 43 bytes leftover after parsing attributes in process `syz.3.7198'. [ 355.121802][T20910] 8021q: adding VLAN 0 to HW filter on device bond0 [ 355.747125][T20949] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7223'. [ 355.774476][T20949] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7223'. [ 355.932081][T20963] netlink: 277 bytes leftover after parsing attributes in process `syz.1.7230'. [ 356.189542][T20981] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7239'. [ 356.442877][T20991] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7243'. [ 358.053111][T21091] netlink: 'syz.0.7292': attribute type 2 has an invalid length. [ 358.425821][T21117] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7302'. [ 358.455395][T21117] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7302'. [ 358.483095][T21117] netlink: 'syz.2.7302': attribute type 20 has an invalid length. [ 358.526554][T21120] team0: Device vti0 is of different type [ 358.719989][T21134] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 358.754944][T21134] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (1) [ 359.258851][T21171] NCSI netlink: No device for ifindex 0 [ 359.456254][T21185] netlink: 'syz.2.7336': attribute type 1 has an invalid length. [ 359.479719][T21185] netlink: 'syz.2.7336': attribute type 1 has an invalid length. [ 359.620732][T21196] vxcan1: MTU too low for tipc bearer [ 359.630555][T21196] tipc: Enabling of bearer rejected, failed to enable media [ 360.105920][T21223] __nla_validate_parse: 7 callbacks suppressed [ 360.105940][T21223] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7356'. [ 360.225836][T21235] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7361'. [ 360.525797][T21253] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7370'. [ 360.950350][T21280] netlink: 'syz.2.7384': attribute type 29 has an invalid length. [ 361.299255][T21304] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7393'. [ 361.331895][T21304] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7393'. [ 361.372051][T21304] netlink: 'syz.2.7393': attribute type 5 has an invalid length. [ 361.821053][T21336] netlink: 71 bytes leftover after parsing attributes in process `syz.2.7411'. [ 363.309073][T21426] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7453'. [ 363.342612][T21426] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.408486][T21426] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.487969][T21426] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.558644][T21426] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.715461][T21426] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.768461][T21426] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.795632][T21426] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.824082][T21426] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.016357][T21503] vlan1: entered promiscuous mode [ 365.021444][T21503] bridge0: entered promiscuous mode [ 365.034233][T21504] netlink: 192 bytes leftover after parsing attributes in process `syz.4.7489'. [ 366.803956][T21613] netlink: 'syz.0.7542': attribute type 1 has an invalid length. [ 367.547726][T21655] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7562'. [ 367.737669][T21663] xt_CT: You must specify a L4 protocol and not use inversions on it [ 367.951564][T21684] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 368.427579][T21715] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7587'. [ 368.470631][T21717] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 368.867626][T21744] tipc: Enabling of bearer rejected, failed to enable media [ 368.977514][T21750] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.7604'. [ 368.988851][T21750] netlink: zone id is out of range [ 369.000400][T21750] netlink: get zone limit has 8 unknown bytes [ 369.058734][T21752] netlink: 'syz.0.7605': attribute type 29 has an invalid length. [ 369.116441][T21758] netlink: 'syz.0.7605': attribute type 29 has an invalid length. [ 369.438861][T21779] vxcan1: entered allmulticast mode [ 369.627336][T21791] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7624'. [ 369.667806][T21791] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7624'. [ 369.684661][T21791] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7624'. [ 369.712598][T21791] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7624'. [ 369.756284][T21791] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7624'. [ 369.798280][T21791] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7624'. [ 369.834057][T21791] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7624'. [ 370.740469][T21861] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 371.765615][T21924] nbd: illegal input index 61504 [ 371.902081][T21936] veth1_macvtap: left promiscuous mode [ 371.911130][T21936] macsec0: entered allmulticast mode [ 371.932518][T21936] veth1_macvtap: entered promiscuous mode [ 371.942502][T21936] veth1_macvtap: entered allmulticast mode [ 371.951203][T21936] macsec0: left allmulticast mode [ 371.976642][T21936] veth1_macvtap: left allmulticast mode [ 372.573910][T21980] __nla_validate_parse: 71 callbacks suppressed [ 372.573930][T21980] netlink: 212404 bytes leftover after parsing attributes in process `syz.4.7712'. [ 372.637452][T21977] IPVS: Scheduler module ip_vs_sip not found [ 372.773990][T21989] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7717'. [ 372.954764][T21999] veth1_macvtap: left promiscuous mode [ 372.994444][T21999] macsec0: entered promiscuous mode [ 373.027563][T22001] veth1_macvtap: entered promiscuous mode [ 373.039453][T22001] macsec0: left promiscuous mode [ 373.314195][T22018] netlink: 'syz.4.7729': attribute type 1 has an invalid length. [ 373.334209][T22018] netlink: 'syz.4.7729': attribute type 3 has an invalid length. [ 373.341981][T22018] netlink: 224 bytes leftover after parsing attributes in process `syz.4.7729'. [ 373.449873][T22024] rdma_op ffff888046f111f0 conn xmit_rdma 0000000000000000 [ 373.599167][T22030] IPVS: Error connecting to the multicast addr [ 374.450750][T22081] sit2: entered promiscuous mode [ 374.464360][T22081] sit2: entered allmulticast mode [ 374.938136][T22114] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7777'. [ 374.958341][T22116] netlink: 76 bytes leftover after parsing attributes in process `syz.1.7778'. [ 374.969910][T22116] nbd: illegal input index -8454144 [ 375.497110][T22153] sctp: [Deprecated]: syz.2.7796 (pid 22153) Use of int in maxseg socket option. [ 375.497110][T22153] Use struct sctp_assoc_value instead [ 376.635131][T22221] netlink: 'syz.3.7821': attribute type 1 has an invalid length. [ 376.643172][T22221] lo speed is unknown, defaulting to 1000 [ 376.655673][T22218] netlink: 'syz.3.7821': attribute type 1 has an invalid length. [ 376.820472][T22230] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 376.840960][T22230] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 377.897702][T22287] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7854'. [ 377.919721][T22287] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7854'. [ 377.930314][T22291] netlink: 96 bytes leftover after parsing attributes in process `syz.2.7856'. [ 378.935839][T22352] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.7882'. [ 378.960837][T22346] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.7882'. [ 379.199163][T22366] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7892'. [ 379.221250][T22367] netlink: 'syz.0.7893': attribute type 62 has an invalid length. [ 380.094715][T22425] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7921'. [ 380.120878][T22425] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7921'. [ 380.145893][T22431] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7923'. [ 380.162318][T22431] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7923'. [ 381.297994][T22502] pimreg3: entered allmulticast mode [ 381.879628][T22540] pim6reg: entered allmulticast mode [ 382.840761][T22604] pim6reg: left allmulticast mode [ 383.473461][T22649] netlink: 'syz.1.8021': attribute type 10 has an invalid length. [ 383.560875][T22649] mac80211_hwsim hwsim10 wlan1: entered allmulticast mode [ 383.570226][T22649] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 383.596950][T22647] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 384.629988][T22705] Bluetooth: MGMT ver 1.23 [ 384.729158][T22709] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 384.765503][T22709] team0: Device ipvlan2 is already an upper device of the team interface [ 384.876676][T22718] __nla_validate_parse: 9 callbacks suppressed [ 384.876698][T22718] netlink: 44 bytes leftover after parsing attributes in process `syz.2.8054'. [ 384.904752][T22718] netlink: 43 bytes leftover after parsing attributes in process `syz.2.8054'. [ 384.914602][T22718] netlink: 'syz.2.8054': attribute type 5 has an invalid length. [ 384.941610][T22718] netlink: 43 bytes leftover after parsing attributes in process `syz.2.8054'. [ 385.023179][T22725] netlink: 'syz.0.8057': attribute type 1 has an invalid length. [ 385.214892][T22737] x_tables: ip_tables: udp match: only valid for protocol 17 [ 385.539872][T22761] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8075'. [ 385.564116][T22761] netlink: 'syz.0.8075': attribute type 3 has an invalid length. [ 385.717847][T22768] netlink: 'syz.0.8078': attribute type 1 has an invalid length. [ 385.752277][T22768] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8078'. [ 385.972099][T22781] netlink: 'syz.3.8084': attribute type 3 has an invalid length. [ 386.921266][T22842] netlink: 44 bytes leftover after parsing attributes in process `syz.0.8114'. [ 387.402642][T22874] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8130'. [ 387.592094][T22886] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8135'. [ 387.601694][T22886] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8135'. [ 388.028938][T22914] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.8148'. [ 390.258841][T23040] tipc: Invalid UDP bearer configuration [ 390.258897][T23040] tipc: Enabling of bearer rejected, failed to enable media [ 390.450990][ T5918] Bluetooth: hci4: link tx timeout [ 390.456263][ T5918] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 390.711786][T23068] __nla_validate_parse: 3 callbacks suppressed [ 390.711805][T23068] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8225'. [ 390.968957][T23086] team0: Device bond0 is already an upper device of the team interface [ 391.871026][T23141] lo speed is unknown, defaulting to 1000 [ 392.163323][T23141] lo speed is unknown, defaulting to 1000 [ 392.534028][ T5918] Bluetooth: hci4: command 0x0405 tx timeout [ 392.725728][T23186] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8281'. [ 392.962969][T23197] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8286'. [ 393.203916][T23209] netlink: 'syz.0.8292': attribute type 7 has an invalid length. [ 393.964599][T23239] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8307'. [ 394.274517][T23258] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8315'. [ 394.330416][T23258] macsec0: entered promiscuous mode [ 394.457784][ T55] Bluetooth: hci2: command 0x0406 tx timeout [ 394.509086][T23270] netlink: 11562 bytes leftover after parsing attributes in process `syz.4.8321'. [ 394.749326][T23283] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8330'. [ 395.602828][T23337] veth1_to_team: Caught tx_queue_len zero misconfig [ 396.092086][T23363] tipc: Started in network mode [ 396.104788][T23363] tipc: Node identity ac14140f, cluster identity 4711 [ 396.112273][T23363] tipc: New replicast peer: 255.255.255.255 [ 396.121151][T23363] tipc: Enabled bearer , priority 10 [ 396.333096][T23379] netlink: 'syz.3.8374': attribute type 1 has an invalid length. [ 396.343783][T23379] netlink: 'syz.3.8374': attribute type 4 has an invalid length. [ 396.351573][T23379] netlink: 192 bytes leftover after parsing attributes in process `syz.3.8374'. [ 396.528853][T23387] bridge0: port 3(team0) entered disabled state [ 396.535588][T23387] bridge0: port 2(bridge_slave_1) entered disabled state [ 396.542917][T23387] bridge0: port 1(bridge_slave_0) entered disabled state [ 396.568964][T23387] bond0: (slave bridge0): Releasing backup interface [ 396.624675][T23392] netlink: 64 bytes leftover after parsing attributes in process `syz.3.8379'. [ 396.728048][T23397] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8383'. [ 396.972916][T23410] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8389'. [ 397.235697][ T10] tipc: Node number set to 2886997007 [ 398.186905][T23491] netlink: 576 bytes leftover after parsing attributes in process `syz.3.8426'. [ 398.193372][T23494] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 398.908609][T23538] netlink: 165 bytes leftover after parsing attributes in process `syz.4.8448'. [ 399.009822][T23540] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8447'. [ 399.167532][T23550] netlink: 'syz.4.8451': attribute type 3 has an invalid length. [ 399.440827][T23566] netlink: 64 bytes leftover after parsing attributes in process `syz.1.8460'. [ 399.859748][T23596] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8475'. [ 400.001737][T23602] gtp0: entered promiscuous mode [ 400.012513][T23602] gtp0: entered allmulticast mode [ 400.033763][T23605] netem: change failed [ 400.242440][T23617] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8485'. [ 400.725537][T23649] hsr_slave_0: left promiscuous mode [ 400.749847][T23649] hsr_slave_1: left promiscuous mode [ 401.614477][T23706] __nla_validate_parse: 3 callbacks suppressed [ 401.614496][T23706] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8527'. [ 404.452278][T23880] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8604'. [ 404.522255][T23880] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8604'. [ 404.841529][T23899] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8614'. [ 405.000270][T23905] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8616'. [ 405.161052][T23912] netlink: 104 bytes leftover after parsing attributes in process `syz.1.8621'. [ 405.896618][T23950] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8638'. [ 406.133239][T23969] netlink: 36 bytes leftover after parsing attributes in process `syz.4.8647'. [ 406.914011][T23994] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8660'. [ 407.819443][T24041] netlink: 43 bytes leftover after parsing attributes in process `syz.3.8681'. [ 408.322507][T24069] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8694'. [ 408.369924][T24074] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8694'. [ 408.397518][T24069] xfrm1: entered promiscuous mode [ 408.402605][T24069] xfrm1: entered allmulticast mode [ 408.706638][T24092] netlink: 232 bytes leftover after parsing attributes in process `syz.1.8705'. [ 408.950085][T24108] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8713'. [ 409.294942][T24126] vxcan1: tx address claim with dlc 0 [ 409.753200][ T2984] tipc: Subscription rejected, illegal request [ 410.016216][T24180] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8745'. [ 410.122040][T24187] trusted_key: syz.2.8748 sent an empty control message without MSG_MORE. [ 410.883348][T24232] netlink: 68 bytes leftover after parsing attributes in process `syz.2.8769'. [ 411.097560][T24244] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8773'. [ 411.683318][T24284] netlink: 56 bytes leftover after parsing attributes in process `syz.3.8792'. [ 412.561524][T24334] __nla_validate_parse: 1 callbacks suppressed [ 412.561543][T24334] netlink: 64 bytes leftover after parsing attributes in process `syz.4.8814'. [ 412.984780][T24360] netlink: 44 bytes leftover after parsing attributes in process `syz.3.8826'. [ 413.259848][T24371] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8831'. [ 413.578014][T24392] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 413.619678][T24392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 413.748147][T24396] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 413.805980][T24396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 413.871489][T24396] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 413.908183][T24396] macsec0: entered allmulticast mode [ 413.927775][T24396] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 414.016330][T24396] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 414.033411][T24396] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 414.106520][T24400] bridge: RTM_NEWNEIGH with invalid state 0x4 [ 414.236355][T24408] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8850'. [ 414.412039][T24420] netlink: 'syz.4.8856': attribute type 5 has an invalid length. [ 414.462778][T24424] sctp: [Deprecated]: syz.0.8855 (pid 24424) Use of int in maxseg socket option. [ 414.462778][T24424] Use struct sctp_assoc_value instead [ 414.776127][ T55] block nbd1: Receive control failed (result -32) [ 415.083176][T24463] netlink: 104 bytes leftover after parsing attributes in process `syz.0.8874'. [ 415.357222][T24480] netlink: 'syz.0.8882': attribute type 5 has an invalid length. [ 415.420136][T24482] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8883'. [ 415.440543][T24482] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8883'. [ 416.304980][T24536] netlink: 'syz.1.8909': attribute type 1 has an invalid length. [ 416.322975][T24536] netlink: 'syz.1.8909': attribute type 4 has an invalid length. [ 416.356392][T24536] netlink: 188 bytes leftover after parsing attributes in process `syz.1.8909'. [ 416.378696][T24536] NCSI netlink: No device for ifindex 458760 [ 416.645757][T24559] tap0: tun_chr_ioctl cmd 1074025677 [ 416.652610][T24559] tap0: linktype set to 65534 [ 417.011785][T24585] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 417.231408][T24591] xt_CT: No such helper "pptp" [ 417.293951][T24602] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8938'. [ 417.316624][T24602] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8938'. [ 417.336966][T24605] vlan0: entered allmulticast mode [ 417.344446][T24605] batadv0: entered allmulticast mode [ 417.552075][T24615] netlink: 'syz.3.8944': attribute type 1 has an invalid length. [ 417.579830][T24615] netlink: 'syz.3.8944': attribute type 2 has an invalid length. [ 417.719096][T24624] __nla_validate_parse: 1 callbacks suppressed [ 417.719116][T24624] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8949'. [ 417.850973][T24632] netlink: 176 bytes leftover after parsing attributes in process `syz.4.8952'. [ 417.880227][T24632] ip6gretap0: entered promiscuous mode [ 417.902175][T24632] netlink: 176 bytes leftover after parsing attributes in process `syz.4.8952'. [ 418.441619][T24668] xt_hashlimit: size too large, truncated to 1048576 [ 419.798493][T24749] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9006'. [ 420.121334][T24769] netlink: 64 bytes leftover after parsing attributes in process `syz.0.9015'. [ 420.192882][T24772] pimreg: left allmulticast mode [ 420.629660][T24797] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9029'. [ 420.637405][T24800] netlink: 10 bytes leftover after parsing attributes in process `syz.1.9032'. [ 420.750060][T24803] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 420.865962][T24810] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9037'. [ 421.240059][T24831] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9048'. [ 421.700995][T24851] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9057'. [ 422.009904][T24865] ipvlan2: entered allmulticast mode [ 423.217843][T24941] netlink: 'syz.1.9097': attribute type 1 has an invalid length. [ 423.226983][T24941] netlink: 'syz.1.9097': attribute type 10 has an invalid length. [ 423.236320][T24941] __nla_validate_parse: 4 callbacks suppressed [ 423.236335][T24941] netlink: 236 bytes leftover after parsing attributes in process `syz.1.9097'. [ 423.386044][T24953] sctp: [Deprecated]: syz.4.9104 (pid 24953) Use of int in max_burst socket option deprecated. [ 423.386044][T24953] Use struct sctp_assoc_value instead [ 423.590294][T24965] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9109'. [ 425.824433][T25068] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9157'. [ 426.027266][T25082] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9163'. [ 426.396564][T25104] netlink: 1044 bytes leftover after parsing attributes in process `syz.0.9173'. [ 426.478861][T25113] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 426.569892][T25113] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 426.728091][T25127] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9185'. [ 427.239837][T25156] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9197'. [ 427.296028][T25156] gretap0: entered promiscuous mode [ 427.307514][T25156] macvtap1: entered promiscuous mode [ 427.316281][T25156] macvtap1: entered allmulticast mode [ 427.335872][T25156] gretap0: entered allmulticast mode [ 427.345420][T25161] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9198'. [ 427.487957][T25170] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9203'. [ 427.587336][T25178] netlink: 'syz.0.9208': attribute type 2 has an invalid length. [ 427.691229][T25183] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 428.279168][T25226] netlink: 'syz.4.9228': attribute type 1 has an invalid length. [ 428.319386][T25226] netlink: 224 bytes leftover after parsing attributes in process `syz.4.9228'. [ 428.588836][T25249] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9238'. [ 428.627435][T25248] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9237'. [ 428.725695][T25254] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9242'. [ 429.284042][T25286] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9257'. [ 430.146516][T25325] xt_CT: You must specify a L4 protocol and not use inversions on it [ 430.309397][T25337] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9280'. [ 430.418478][T25341] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9282'. [ 430.626950][T25359] sctp: [Deprecated]: syz.2.9288 (pid 25359) Use of struct sctp_assoc_value in delayed_ack socket option. [ 430.626950][T25359] Use struct sctp_sack_info instead [ 430.901714][T25378] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9298'. [ 430.938415][T25381] sctp: [Deprecated]: syz.3.9301 (pid 25381) Use of struct sctp_assoc_value in delayed_ack socket option. [ 430.938415][T25381] Use struct sctp_sack_info instead [ 431.747395][T25426] netlink: 71 bytes leftover after parsing attributes in process `syz.3.9322'. [ 431.937422][T25437] netlink: 104 bytes leftover after parsing attributes in process `syz.0.9327'. [ 431.953390][T25441] bridge0: port 1(bridge_slave_0) entered blocking state [ 431.960679][T25441] bridge0: port 1(bridge_slave_0) entered forwarding state [ 432.462983][T25478] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 432.474320][T25478] batadv_slave_1: entered promiscuous mode [ 432.528640][T25475] netlink: 'syz.1.9344': attribute type 1 has an invalid length. [ 432.545654][T25475] nbd: error processing sock list [ 432.707936][T25491] 8021q: adding VLAN 0 to HW filter on device bond3 [ 432.717866][T25491] bond3: entered allmulticast mode [ 432.726109][T25491] bond0: (slave bond3): Enslaving as an active interface with an up link [ 433.052415][T25511] tap0: tun_chr_ioctl cmd 1074025676 [ 433.066749][T25511] tap0: owner set to 0 [ 433.609757][T25537] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 434.393292][T25583] netlink: 'syz.4.9395': attribute type 4 has an invalid length. [ 435.344507][T25639] vxcan1: tx address claim with dest, not broadcast [ 435.997064][T25677] 8021q: adding VLAN 0 to HW filter on device bond6 [ 436.007335][T25677] bond0: (slave bond6): Enslaving as an active interface with an up link [ 436.019880][T25682] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.029142][T25682] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.070110][T25686] bridge: RTM_NEWNEIGH with unconfigured vlan 1 on bridge_slave_0 [ 437.200953][T25754] __nla_validate_parse: 3 callbacks suppressed [ 437.200973][T25754] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9477'. [ 437.266041][T25754] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9477'. [ 437.295893][T25758] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9479'. [ 437.326076][T25758] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9479'. [ 437.416822][T25760] tun0: tun_chr_ioctl cmd 1074025675 [ 437.422173][T25760] tun0: persist disabled [ 437.995204][T25797] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9499'. [ 438.576956][T25834] netlink: 10 bytes leftover after parsing attributes in process `syz.0.9515'. [ 438.729503][T25842] netlink: 2 bytes leftover after parsing attributes in process `syz.0.9519'. [ 439.945619][T25895] macvlan2: entered promiscuous mode [ 441.737684][T26006] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9596'. [ 441.927096][T26014] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9599'. [ 441.941793][T26014] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9599'. [ 442.360633][T26039] __nla_validate_parse: 1 callbacks suppressed [ 442.360653][T26039] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9612'. [ 442.383362][T26039] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9612'. [ 442.639268][T26052] veth0_to_hsr: invalid flags given to default FDB implementation [ 442.811424][T26062] netlink: 'syz.1.9623': attribute type 11 has an invalid length. [ 442.839228][T26064] tipc: Enabling of bearer rejected, already enabled [ 443.391495][T26103] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9642'. [ 443.667877][T26116] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.678211][T26116] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 444.063340][T26141] vxcan1: tx address claim with different name [ 444.361505][T26160] veth0: entered promiscuous mode [ 444.380425][T26159] veth0: left promiscuous mode [ 444.705281][T26171] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9673'. [ 445.084438][T26193] veth0: entered promiscuous mode [ 445.102354][T26193] veth0: left promiscuous mode [ 445.531613][T26218] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 446.432921][ T1132] bond0: (slave wlan1): link status definitely down, disabling slave [ 446.442801][ T1132] bond0: (slave bond3): link status definitely down, disabling slave [ 447.667239][T26354] netlink: 'syz.2.9758': attribute type 18 has an invalid length. [ 447.888670][T26368] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9765'. [ 448.587614][T26411] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9786'. [ 448.860569][T26430] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9795'. [ 449.354453][T26463] netlink: 'syz.1.9812': attribute type 1 has an invalid length. [ 449.638358][T26481] netlink: 'syz.2.9820': attribute type 2 has an invalid length. [ 449.795661][T26495] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9827'. [ 449.804877][T26495] netlink: 21 bytes leftover after parsing attributes in process `syz.4.9827'. [ 449.946223][T26504] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9832'. [ 451.146175][T26572] tipc: New replicast peer: 255.255.255.255 [ 451.170506][T26572] tipc: Enabled bearer , priority 10 [ 451.202072][T26577] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9864'. [ 451.267471][T26577] tipc: Disabling bearer [ 451.487804][T26595] netlink: 160 bytes leftover after parsing attributes in process `syz.1.9874'. [ 451.590084][T26600] netlink: 'syz.2.9877': attribute type 28 has an invalid length. [ 451.611496][T26600] netlink: 'syz.2.9877': attribute type 3 has an invalid length. [ 451.624370][T26600] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9877'. [ 451.655405][T26604] netlink: 64 bytes leftover after parsing attributes in process `syz.1.9879'. [ 454.330615][T26772] veth0_to_hsr: entered promiscuous mode [ 454.354624][T26771] veth0_to_hsr: left promiscuous mode [ 454.561944][T26782] 8021q: adding VLAN 0 to HW filter on device bond5 [ 454.585370][T26782] bond0: (slave bond5): Enslaving as an active interface with a down link [ 454.740620][ T5152] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 454.752479][ T5152] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 454.766153][ T5152] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 454.795288][ T5152] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 454.803385][ T5152] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 454.926893][T26802] netlink: 'syz.4.9971': attribute type 1 has an invalid length. [ 454.969162][T26790] lo speed is unknown, defaulting to 1000 [ 455.472423][T26790] lo speed is unknown, defaulting to 1000 [ 455.524424][T26826] __nla_validate_parse: 2 callbacks suppressed [ 455.524444][T26826] netlink: 96 bytes leftover after parsing attributes in process `syz.2.9980'. [ 455.889000][T26837] netlink: 'syz.2.9986': attribute type 1 has an invalid length. [ 455.904126][ T5152] Bluetooth: hci4: command 0x0405 tx timeout [ 456.706710][T26790] chnl_net:caif_netlink_parms(): no params data found [ 456.854282][ T55] Bluetooth: hci5: command tx timeout [ 457.139073][T26790] bridge0: port 1(bridge_slave_0) entered blocking state [ 457.152177][T26790] bridge0: port 1(bridge_slave_0) entered disabled state [ 457.160977][T26790] bridge_slave_0: entered allmulticast mode [ 457.177557][T26790] bridge_slave_0: entered promiscuous mode [ 457.192225][T26790] bridge0: port 2(bridge_slave_1) entered blocking state [ 457.201437][T26790] bridge0: port 2(bridge_slave_1) entered disabled state [ 457.209050][T26790] bridge_slave_1: entered allmulticast mode [ 457.217112][T26790] bridge_slave_1: entered promiscuous mode [ 457.480086][T26790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 457.526124][T26790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 457.718597][T26790] team0: Port device team_slave_0 added [ 457.757675][T26790] team0: Port device team_slave_1 added [ 457.798330][T26899] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10012'. [ 457.823748][T26899] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10012'. [ 457.840770][T26903] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10014'. [ 457.851222][T26790] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 457.895484][T26790] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 457.974789][T26790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 458.002192][T26790] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 458.040577][T26790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 458.104090][T26790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 458.335779][T26925] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 458.377777][T26790] hsr_slave_0: entered promiscuous mode [ 458.391018][T26790] hsr_slave_1: entered promiscuous mode [ 458.401858][T26790] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 458.420735][T26790] Cannot create hsr debugfs directory [ 458.527418][T26934] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10029'. [ 458.794469][T26948] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10036'. [ 458.936579][ T55] Bluetooth: hci5: command tx timeout [ 458.945732][T26790] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 458.968780][T26790] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 458.981256][T26790] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 458.981749][T26960] netlink: 100 bytes leftover after parsing attributes in process `syz.1.10040'. [ 459.013080][T26790] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 459.199799][T26790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 459.227518][T26790] 8021q: adding VLAN 0 to HW filter on device team0 [ 459.282019][ T5985] bridge0: port 1(bridge_slave_0) entered blocking state [ 459.289322][ T5985] bridge0: port 1(bridge_slave_0) entered forwarding state [ 459.300743][ T5985] bridge0: port 2(bridge_slave_1) entered blocking state [ 459.307949][ T5985] bridge0: port 2(bridge_slave_1) entered forwarding state [ 459.373051][T26972] blkio.reset_stats is deprecated [ 459.682474][T26790] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 460.058513][T27009] sctp: [Deprecated]: syz.2.10058 (pid 27009) Use of struct sctp_assoc_value in delayed_ack socket option. [ 460.058513][T27009] Use struct sctp_sack_info instead [ 460.282645][T27018] netlink: 40 bytes leftover after parsing attributes in process `syz.4.10064'. [ 460.364792][T26790] veth0_vlan: entered promiscuous mode [ 460.386448][T26790] veth1_vlan: entered promiscuous mode [ 460.456860][T26790] veth0_macvtap: entered promiscuous mode [ 460.491009][T26790] veth1_macvtap: entered promiscuous mode [ 460.562233][T26790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 460.585796][T26790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 460.603155][T26790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 460.641662][T26790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 460.674592][T26790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 460.698157][T26790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 460.698203][T27030] xt_CT: No such helper "pptp" [ 460.715431][T26790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 460.750751][T26790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 460.776757][T26790] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 460.834457][T26790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 460.871767][T26790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 460.889015][T26790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 460.900926][T26790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 460.929988][T26790] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 460.981961][T26790] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.994172][T26790] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.021195][ T55] Bluetooth: hci5: command tx timeout [ 461.033122][T26790] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.056566][T26790] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.410687][T26790] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 461.427400][T26790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.451918][T27044] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 461.488273][T27044] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 461.592421][ T1152] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 461.627237][ T1152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 462.436960][T27114] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10102'. [ 463.097884][ T55] Bluetooth: hci5: command tx timeout [ 464.051992][T27188] netlink: 'syz.5.10138': attribute type 21 has an invalid length. [ 464.060503][T27188] netlink: 128 bytes leftover after parsing attributes in process `syz.5.10138'. [ 464.077845][T27188] netlink: 'syz.5.10138': attribute type 4 has an invalid length. [ 464.085898][T27188] netlink: 'syz.5.10138': attribute type 5 has an invalid length. [ 464.093933][T27188] netlink: 3 bytes leftover after parsing attributes in process `syz.5.10138'. [ 464.120484][T27192] netlink: 'syz.5.10138': attribute type 21 has an invalid length. [ 464.129287][T27192] netlink: 128 bytes leftover after parsing attributes in process `syz.5.10138'. [ 464.142082][T27192] netlink: 'syz.5.10138': attribute type 4 has an invalid length. [ 464.154171][T27192] netlink: 'syz.5.10138': attribute type 5 has an invalid length. [ 464.162192][T27192] netlink: 3 bytes leftover after parsing attributes in process `syz.5.10138'. [ 464.370207][T27202] netlink: 284 bytes leftover after parsing attributes in process `syz.4.10145'. [ 464.597944][T27215] sctp: [Deprecated]: syz.5.10150 (pid 27215) Use of struct sctp_assoc_value in delayed_ack socket option. [ 464.597944][T27215] Use struct sctp_sack_info instead [ 465.570272][T27256] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10171'. [ 465.999182][T27278] netlink: 'syz.4.10180': attribute type 4 has an invalid length. [ 466.575290][T27311] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10196'. [ 466.771045][T27318] netlink: 88 bytes leftover after parsing attributes in process `syz.5.10200'. [ 466.783939][ T5925] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 466.795342][T27318] netem: invalid attributes len -24 [ 466.800589][T27318] netem: change failed [ 466.854957][ T5850] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 466.910524][ T5850] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 467.139174][ T5850] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 467.214795][ T5850] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 467.276282][ T5850] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 467.353965][ T5850] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 467.443780][ T5925] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 467.544647][ T837] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 467.605313][ T5925] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 467.897543][T27370] netlink: 48 bytes leftover after parsing attributes in process `syz.1.10225'. [ 467.926743][T27372] netlink: 'syz.2.10226': attribute type 4 has an invalid length. [ 468.537450][T27400] batman_adv: batadv0: Adding interface: gretap1 [ 468.544750][T27400] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 468.619249][T27406] netlink: 14 bytes leftover after parsing attributes in process `syz.2.10242'. [ 468.905350][T27406] bond0 (unregistering): Released all slaves [ 468.934961][T27418] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10249'. [ 471.927671][T27584] netlink: 'syz.2.10312': attribute type 1 has an invalid length. [ 471.972811][T27584] netlink: 'syz.2.10312': attribute type 10 has an invalid length. [ 472.012602][T27584] netlink: 'syz.2.10312': attribute type 4 has an invalid length. [ 472.044600][T27584] netlink: 196 bytes leftover after parsing attributes in process `syz.2.10312'. [ 472.799620][T27636] netlink: 'syz.5.10330': attribute type 4 has an invalid length. [ 474.396822][T27717] unknown channel width for channel at 909000KHz? [ 474.407591][T27717] unknown channel width for channel at 909000KHz? [ 474.437092][T27717] unknown channel width for channel at 909000KHz? [ 475.406812][T27768] sctp: [Deprecated]: syz.5.10380 (pid 27768) Use of struct sctp_assoc_value in delayed_ack socket option. [ 475.406812][T27768] Use struct sctp_sack_info instead [ 475.487337][T27772] sctp: [Deprecated]: syz.5.10380 (pid 27772) Use of struct sctp_assoc_value in delayed_ack socket option. [ 475.487337][T27772] Use struct sctp_sack_info instead [ 475.857637][T27788] syz.5.10387 (27788) used greatest stack depth: 17848 bytes left [ 476.017819][T27803] netlink: 36 bytes leftover after parsing attributes in process `syz.4.10395'. [ 476.071632][T27805] netlink: 'syz.5.10397': attribute type 4 has an invalid length. [ 476.860106][ T5985] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.049683][T27852] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10420'. [ 477.087457][ T5985] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.108371][T27849] bridge0: port 1(syz_tun) entered blocking state [ 477.133983][T27849] bridge0: port 1(syz_tun) entered disabled state [ 477.162117][T27849] syz_tun: entered allmulticast mode [ 477.186044][T27849] syz_tun: entered promiscuous mode [ 477.255453][ T5985] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.425789][ T5985] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.796340][ T5152] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 477.808156][ T5152] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 477.810109][T27879] netlink: 24 bytes leftover after parsing attributes in process `syz.5.10429'. [ 477.817191][ T5152] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 477.835141][ T5152] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 477.844508][ T5152] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 477.938938][T27885] netlink: 24 bytes leftover after parsing attributes in process `syz.5.10429'. [ 477.978482][T27875] lo speed is unknown, defaulting to 1000 [ 478.037179][ T10] IPVS: starting estimator thread 0... [ 478.044252][ T5985] team0: left allmulticast mode [ 478.064575][ T5985] team_slave_0: left allmulticast mode [ 478.075524][ T5985] team_slave_1: left allmulticast mode [ 478.111443][ T5985] team0: left promiscuous mode [ 478.124649][ T5985] team_slave_0: left promiscuous mode [ 478.133389][ T5985] team_slave_1: left promiscuous mode [ 478.134609][T27890] IPVS: using max 31 ests per chain, 74400 per kthread [ 478.150749][ T5985] bridge0: port 3(team0) entered disabled state [ 478.165893][ T5985] bridge_slave_1: left allmulticast mode [ 478.171688][ T5985] bridge_slave_1: left promiscuous mode [ 478.178212][ T5985] bridge0: port 2(bridge_slave_1) entered disabled state [ 478.189708][ T5985] bridge_slave_0: left allmulticast mode [ 478.200074][ T5985] bridge_slave_0: left promiscuous mode [ 478.207268][ T5985] bridge0: port 1(bridge_slave_0) entered disabled state [ 478.956715][ T5985] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 478.969868][ T5985] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 478.980465][ T5985] bond0 (unregistering): Released all slaves [ 478.993194][T27889] tipc: Started in network mode [ 478.998659][T27889] tipc: Node identity ac1414aa, cluster identity 4711 [ 479.008475][T27889] tipc: Enabled bearer , priority 10 [ 479.038406][T27875] lo speed is unknown, defaulting to 1000 [ 479.403273][ C0] vcan0: j1939_tp_rxtimer: 0xffff88801f714800: rx timeout, send abort [ 479.638354][T27918] af_packet: tpacket_rcv: packet too big, clamped from 39 to 4294967272. macoff=96 [ 479.688925][T27920] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10440'. [ 479.896694][ T5152] Bluetooth: hci3: command tx timeout [ 479.912560][ C0] vcan0: j1939_tp_rxtimer: 0xffff88801f714800: abort rx timeout. Force session deactivation [ 480.133876][ T6038] tipc: Node number set to 2886997162 [ 480.250580][T27944] netlink: 'syz.5.10447': attribute type 4 has an invalid length. [ 480.265369][T27942] netlink: 132 bytes leftover after parsing attributes in process `syz.2.10446'. [ 480.374092][T27949] netlink: 'syz.3.10448': attribute type 1 has an invalid length. [ 480.420890][T27949] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10448'. [ 480.776080][T27961] netlink: 36 bytes leftover after parsing attributes in process `syz.5.10452'. [ 481.006617][ T5985] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 481.054225][ T5985] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 481.091526][ T5985] [ 481.093895][ T5985] ====================================================== [ 481.100914][ T5985] WARNING: possible circular locking dependency detected [ 481.107954][ T5985] 6.14.0-syzkaller-13311-g69ae94725f4f #0 Not tainted [ 481.114720][ T5985] ------------------------------------------------------ [ 481.121746][ T5985] kworker/u8:8/5985 is trying to acquire lock: [ 481.127912][ T5985] ffff88814434e768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_netdev_notifier_call+0x1b3/0x1430 [ 481.138560][ T5985] [ 481.138560][ T5985] but task is already holding lock: [ 481.145935][ T5985] ffff88805e516d30 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x5a1/0x2510 [ 481.157591][ T5985] [ 481.157591][ T5985] which lock already depends on the new lock. [ 481.157591][ T5985] [ 481.167978][ T5985] [ 481.167978][ T5985] the existing dependency chain (in reverse order) is: [ 481.176973][ T5985] [ 481.176973][ T5985] -> #3 (&dev_instance_lock_key#3){+.+.}-{4:4}: [ 481.185390][ T5985] lock_acquire+0x116/0x2f0 [ 481.190402][ T5985] __mutex_lock+0x1a5/0x10c0 [ 481.195501][ T5985] xsk_bind+0x2fd/0xfb0 [ 481.200160][ T5985] __sys_bind+0x1de/0x290 [ 481.205005][ T5985] __x64_sys_bind+0x7a/0x90 [ 481.210014][ T5985] do_syscall_64+0xf3/0x230 [ 481.215020][ T5985] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.221419][ T5985] [ 481.221419][ T5985] -> #2 (&xs->mutex){+.+.}-{4:4}: [ 481.228616][ T5985] lock_acquire+0x116/0x2f0 [ 481.233720][ T5985] __mutex_lock+0x1a5/0x10c0 [ 481.238817][ T5985] xsk_diag_dump+0x5be/0x19d0 [ 481.244002][ T5985] netlink_dump+0x678/0xeb0 [ 481.249016][ T5985] __netlink_dump_start+0x5a2/0x790 [ 481.254720][ T5985] xsk_diag_handler_dump+0x1de/0x270 [ 481.260514][ T5985] sock_diag_rcv_msg+0x3dc/0x5f0 [ 481.265983][ T5985] netlink_rcv_skb+0x208/0x480 [ 481.271254][ T5985] netlink_unicast+0x7f8/0x9a0 [ 481.276526][ T5985] netlink_sendmsg+0x8c3/0xcd0 [ 481.281801][ T5985] __sock_sendmsg+0x221/0x270 [ 481.286987][ T5985] sock_write_iter+0x2d9/0x3f0 [ 481.292264][ T5985] do_iter_readv_writev+0x71f/0x9d0 [ 481.297975][ T5985] vfs_writev+0x38d/0xbc0 [ 481.302826][ T5985] do_writev+0x1b8/0x360 [ 481.307579][ T5985] do_syscall_64+0xf3/0x230 [ 481.312589][ T5985] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.319013][ T5985] [ 481.319013][ T5985] -> #1 (&net->xdp.lock){+.+.}-{4:4}: [ 481.326580][ T5985] lock_acquire+0x116/0x2f0 [ 481.331607][ T5985] __mutex_lock+0x1a5/0x10c0 [ 481.336709][ T5985] xsk_notifier+0x8b/0x230 [ 481.341632][ T5985] notifier_call_chain+0x1a5/0x3f0 [ 481.347254][ T5985] unregister_netdevice_many_notify+0x1572/0x2510 [ 481.354177][ T5985] unregister_netdevice_queue+0x383/0x400 [ 481.360398][ T5985] _cfg80211_unregister_wdev+0x163/0x590 [ 481.366539][ T5985] ieee80211_if_remove+0x25d/0x320 [ 481.372161][ T5985] ieee80211_del_iface+0x19/0x30 [ 481.377607][ T5985] cfg80211_remove_virtual_intf+0x23f/0x410 [ 481.384008][ T5985] genl_rcv_msg+0xb38/0xf00 [ 481.389015][ T5985] netlink_rcv_skb+0x208/0x480 [ 481.394287][ T5985] genl_rcv+0x28/0x40 [ 481.398772][ T5985] netlink_unicast+0x7f8/0x9a0 [ 481.404038][ T5985] netlink_sendmsg+0x8c3/0xcd0 [ 481.409310][ T5985] __sock_sendmsg+0x221/0x270 [ 481.414495][ T5985] ____sys_sendmsg+0x523/0x860 [ 481.419759][ T5985] __sys_sendmsg+0x271/0x360 [ 481.424849][ T5985] do_syscall_64+0xf3/0x230 [ 481.429858][ T5985] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.436273][ T5985] [ 481.436273][ T5985] -> #0 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 481.444009][ T5985] validate_chain+0xa69/0x24e0 [ 481.449289][ T5985] __lock_acquire+0xad5/0xd80 [ 481.454474][ T5985] lock_acquire+0x116/0x2f0 [ 481.459480][ T5985] __mutex_lock+0x1a5/0x10c0 [ 481.464577][ T5985] cfg80211_netdev_notifier_call+0x1b3/0x1430 [ 481.471153][ T5985] notifier_call_chain+0x1a5/0x3f0 [ 481.476773][ T5985] __dev_close_many+0x15d/0x760 [ 481.482149][ T5985] dev_close_many+0x250/0x4c0 [ 481.487357][ T5985] unregister_netdevice_many_notify+0x628/0x2510 [ 481.494198][ T5985] default_device_exit_batch+0x7ff/0x880 [ 481.500343][ T5985] cleanup_net+0x8af/0xd60 [ 481.505294][ T5985] process_scheduled_works+0xac3/0x18e0 [ 481.511354][ T5985] worker_thread+0x870/0xd50 [ 481.516468][ T5985] kthread+0x7b7/0x940 [ 481.521136][ T5985] ret_from_fork+0x4b/0x80 [ 481.526062][ T5985] ret_from_fork_asm+0x1a/0x30 [ 481.531335][ T5985] [ 481.531335][ T5985] other info that might help us debug this: [ 481.531335][ T5985] [ 481.541644][ T5985] Chain exists of: [ 481.541644][ T5985] &rdev->wiphy.mtx --> &xs->mutex --> &dev_instance_lock_key#3 [ 481.541644][ T5985] [ 481.555127][ T5985] Possible unsafe locking scenario: [ 481.555127][ T5985] [ 481.562558][ T5985] CPU0 CPU1 [ 481.567906][ T5985] ---- ---- [ 481.573275][ T5985] lock(&dev_instance_lock_key#3); [ 481.578470][ T5985] lock(&xs->mutex); [ 481.584973][ T5985] lock(&dev_instance_lock_key#3); [ 481.592684][ T5985] lock(&rdev->wiphy.mtx); [ 481.597183][ T5985] [ 481.597183][ T5985] *** DEADLOCK *** [ 481.597183][ T5985] [ 481.605308][ T5985] 5 locks held by kworker/u8:8/5985: [ 481.610583][ T5985] #0: ffff88801bef6148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 [ 481.621469][ T5985] #1: ffffc90003a6fc60 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 [ 481.631983][ T5985] #2: ffffffff900efe90 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0x17c/0xd60 [ 481.641384][ T5985] #3: ffffffff900fc9c8 (rtnl_mutex){+.+.}-{4:4}, at: default_device_exit_batch+0xde/0x880 [ 481.651383][ T5985] #4: ffff88805e516d30 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x5a1/0x2510 [ 481.663381][ T5985] [ 481.663381][ T5985] stack backtrace: [ 481.669272][ T5985] CPU: 0 UID: 0 PID: 5985 Comm: kworker/u8:8 Not tainted 6.14.0-syzkaller-13311-g69ae94725f4f #0 PREEMPT(full) [ 481.669290][ T5985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 481.669300][ T5985] Workqueue: netns cleanup_net [ 481.669320][ T5985] Call Trace: [ 481.669326][ T5985] [ 481.669332][ T5985] dump_stack_lvl+0x241/0x360 [ 481.669351][ T5985] ? __pfx_dump_stack_lvl+0x10/0x10 [ 481.669367][ T5985] ? __pfx__printk+0x10/0x10 [ 481.669385][ T5985] ? print_lock+0x171/0x1a0 [ 481.669400][ T5985] print_circular_bug+0x2e1/0x300 [ 481.669417][ T5985] check_noncircular+0x142/0x160 [ 481.669435][ T5985] validate_chain+0xa69/0x24e0 [ 481.669457][ T5985] __lock_acquire+0xad5/0xd80 [ 481.669473][ T5985] lock_acquire+0x116/0x2f0 [ 481.669484][ T5985] ? cfg80211_netdev_notifier_call+0x1b3/0x1430 [ 481.669506][ T5985] __mutex_lock+0x1a5/0x10c0 [ 481.669521][ T5985] ? cfg80211_netdev_notifier_call+0x1b3/0x1430 [ 481.669540][ T5985] ? validate_chain+0x8a7/0x24e0 [ 481.669553][ T5985] ? put_dec_trunc8+0x1fb/0x340 [ 481.669566][ T5985] ? cfg80211_netdev_notifier_call+0x1b3/0x1430 [ 481.669584][ T5985] ? __pfx___mutex_lock+0x10/0x10 [ 481.669605][ T5985] cfg80211_netdev_notifier_call+0x1b3/0x1430 [ 481.669625][ T5985] ? __pfx_cfg80211_netdev_notifier_call+0x10/0x10 [ 481.669645][ T5985] ? __lock_acquire+0xad5/0xd80 [ 481.669657][ T5985] ? do_raw_spin_lock+0x151/0x370 [ 481.669682][ T5985] ? inetdev_event+0x4fb/0x1740 [ 481.669696][ T5985] ? igmp_netdev_event+0x7c/0x770 [ 481.669710][ T5985] notifier_call_chain+0x1a5/0x3f0 [ 481.669727][ T5985] __dev_close_many+0x15d/0x760 [ 481.669743][ T5985] ? __mutex_lock+0x380/0x10c0 [ 481.669758][ T5985] ? __pfx___dev_close_many+0x10/0x10 [ 481.669776][ T5985] dev_close_many+0x250/0x4c0 [ 481.669793][ T5985] ? __pfx_dev_close_many+0x10/0x10 [ 481.669808][ T5985] ? __lock_acquire+0xad5/0xd80 [ 481.669822][ T5985] unregister_netdevice_many_notify+0x628/0x2510 [ 481.669839][ T5985] ? lockdep_hardirqs_on+0x9d/0x150 [ 481.669853][ T5985] ? __local_bh_enable_ip+0x168/0x200 [ 481.669866][ T5985] ? batadv_tt_local_remove+0x119/0x230 [ 481.669879][ T5985] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 481.669891][ T5985] ? batadv_tt_local_remove+0x119/0x230 [ 481.669902][ T5985] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 481.669922][ T5985] ? unregister_netdevice_queue+0x2c4/0x400 [ 481.669938][ T5985] ? batadv_meshif_destroy_netlink+0x1e6/0x270 [ 481.669956][ T5985] default_device_exit_batch+0x7ff/0x880 [ 481.669976][ T5985] ? __pfx_default_device_exit_batch+0x10/0x10 [ 481.669993][ T5985] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 481.670010][ T5985] ? cfg802154_pernet_exit+0xc3/0xe0 [ 481.670021][ T5985] ? __pfx_default_device_exit_batch+0x10/0x10 [ 481.670038][ T5985] cleanup_net+0x8af/0xd60 [ 481.670057][ T5985] ? __pfx_cleanup_net+0x10/0x10 [ 481.670076][ T5985] ? process_scheduled_works+0x9cb/0x18e0 [ 481.670090][ T5985] process_scheduled_works+0xac3/0x18e0 [ 481.670113][ T5985] ? __pfx_process_scheduled_works+0x10/0x10 [ 481.670129][ T5985] ? assign_work+0x367/0x3d0 [ 481.670143][ T5985] worker_thread+0x870/0xd50 [ 481.670169][ T5985] ? __kthread_parkme+0x1a8/0x200 [ 481.670184][ T5985] ? __pfx_worker_thread+0x10/0x10 [ 481.670198][ T5985] kthread+0x7b7/0x940 [ 481.670214][ T5985] ? __pfx_worker_thread+0x10/0x10 [ 481.670227][ T5985] ? __pfx_kthread+0x10/0x10 [ 481.670242][ T5985] ? __pfx_kthread+0x10/0x10 [ 481.670256][ T5985] ? __pfx_kthread+0x10/0x10 [ 481.670271][ T5985] ? __pfx_kthread+0x10/0x10 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 481.670286][ T5985] ? _raw_spin_unlock_irq+0x23/0x50 [ 481.670297][ T5985] ? lockdep_hardirqs_on+0x9d/0x150 [ 481.670311][ T5985] ? __pfx_kthread+0x10/0x10 [ 481.670326][ T5985] ret_from_fork+0x4b/0x80 [ 481.670339][ T5985] ? __pfx_kthread+0x10/0x10 [ 481.670354][ T5985] ret_from_fork_asm+0x1a/0x30 [ 481.670370][ T5985] [ 482.036960][ T5152] Bluetooth: hci3: command tx timeout [ 482.104336][ T5985] veth1_macvtap: left promiscuous mode [ 482.109982][ T5985] veth0_macvtap: left promiscuous mode [ 482.133774][ T5985] veth1_vlan: left promiscuous mode [ 482.139157][ T5985] veth0_vlan: left promiscuous mode [ 482.452245][ T5985] pim6reg (unregistering): left allmulticast mode [ 482.546703][ T5985] team0 (unregistering): Port device team_slave_1 removed [ 482.570150][ T5985] team0 (unregistering): Port device team_slave_0 removed [ 482.660752][ T5985] vxcan1 (unregistering): left allmulticast mode [ 482.780929][T27973] syz_tun (unregistering): left allmulticast mode [ 482.795752][T27973] syz_tun (unregistering): left promiscuous mode [ 482.802201][T27973] bridge0: port 1(syz_tun) entered disabled state