last executing test programs: 6m30.203743296s ago: executing program 3 (id=9447): sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000066c0)=[{{&(0x7f00000019c0)={0xa, 0x0, 0x0, @mcast1}, 0x1c, 0x0}}], 0x1, 0x5efe) r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @loopback={0xff00000000000000}, 0x10000}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 6m29.974055074s ago: executing program 3 (id=9449): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x25dfdbff, {0x60, 0x0, 0x0, r2, {0x0, 0x3}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x3b9aca00}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}]}}]}, 0x48}}, 0x44040) 6m29.172458848s ago: executing program 3 (id=9453): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r0, r1, 0x5}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@map=r0, 0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 6m28.945829687s ago: executing program 3 (id=9455): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @empty}, 0x10) setsockopt$inet_tcp_buf(r0, 0x6, 0xd, &(0x7f00000000c0)='vn', 0x2) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000100)) 6m27.103913986s ago: executing program 0 (id=9457): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r0, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="f7", 0x6d47}], 0x1}, 0x0) 6m23.834685428s ago: executing program 3 (id=9459): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400ffd9b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, &(0x7f0000000040)=""/73}, 0x20) 6m17.540992987s ago: executing program 0 (id=9463): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000040000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000838500000071000000850000005000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffcd8, 0x0, 0x0, 0x0, 0xfffffff7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_newaddr={0x18, 0x14, 0x503, 0x800100, 0x25dfdbff, {0x2, 0x18, 0x56, 0xff}}, 0x18}, 0x1, 0x0, 0x0, 0xc090}, 0x48006) 6m15.332889887s ago: executing program 3 (id=9464): unshare(0x4a000200) syz_emit_ethernet(0x46, &(0x7f0000000000)={@multicast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, '\x00', 0x10, 0x3a, 0xff, @local, @loopback, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x2d, 0x6, 0x999, 0x5932}}}}}}, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x50, 0x0, &(0x7f0000000000)="ff", 0x0, 0x36, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) 6m14.717360213s ago: executing program 1 (id=9465): r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=@newqdisc={0x8c, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1f}, {0x4}}, @qdisc_kind_options=@q_hhf={{0x8}, {0x2c, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0xfffffff7}, @TCA_HHF_RESET_TIMEOUT={0x8, 0x4, 0x4}, @TCA_HHF_QUANTUM={0x8, 0x2, 0x1}, @TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x39}, @TCA_HHF_NON_HH_WEIGHT={0x8, 0x7, 0xfffffff9}]}}, @qdisc_kind_options=@q_hhf={{0x8}, {0x1c, 0x2, [@TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0x2}, @TCA_HHF_EVICT_TIMEOUT={0x6a, 0x6, 0x68}, @TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0x5}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x0) 6m11.885750937s ago: executing program 0 (id=9467): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0x13) ioctl$TUNSETGROUP(r0, 0x400454ce, 0x0) 6m9.434680795s ago: executing program 1 (id=9470): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00", 0x2) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @empty}], 0x1c) sendto$inet6(r0, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 6m7.24361454s ago: executing program 4 (id=9471): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x1, 0x10, 0x25dfdbff, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_INC_SCI={0x5, 0xf}]}}}]}, 0x3c}}, 0x0) 6m6.181490062s ago: executing program 0 (id=9472): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'macvlan1\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="4400000011002901800000000000000007000000", @ANYRES32=r1, @ANYBLOB="00000000000000001c001a800800028004000500080000003e"], 0x44}}, 0x0) 6m3.578820974s ago: executing program 1 (id=9474): r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140)=[@in6={0xa, 0x4e24, 0x4, @loopback}, @in={0x2, 0x4e24, @loopback}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x19}}], 0x3c) sendmsg$inet(r0, &(0x7f0000000500)={&(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000180)='2', 0x1}], 0x1}, 0xc001) sendto$inet6(r0, &(0x7f0000000040)='\x00', 0x1, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x1c) 6m2.631027126s ago: executing program 0 (id=9475): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) connect$ax25(r1, &(0x7f0000000040)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x8}, [@default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x47) 6m1.923884701s ago: executing program 4 (id=9476): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x3c, r1, 0x917, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @udp=r2}]}, 0x3c}, 0x1, 0x620b}, 0x0) 5m59.609157418s ago: executing program 1 (id=9478): r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r1, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000007c0)=@newchain={0x24, 0x64, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}}, 0x0) 5m57.208772421s ago: executing program 32 (id=9464): unshare(0x4a000200) syz_emit_ethernet(0x46, &(0x7f0000000000)={@multicast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, '\x00', 0x10, 0x3a, 0xff, @local, @loopback, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x2d, 0x6, 0x999, 0x5932}}}}}}, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x50, 0x0, &(0x7f0000000000)="ff", 0x0, 0x36, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) 5m56.828592294s ago: executing program 0 (id=9479): r0 = socket(0x10, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES64=r0], 0x40}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) ppoll(&(0x7f00000004c0)=[{0xffffffffffffffff, 0x9000}, {r1, 0x10}], 0x2, 0x0, 0x0, 0x0) 5m56.175913607s ago: executing program 4 (id=9482): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x6, 0x4, 0xfff, 0x9, 0x0, 0xffffffffffffffff, 0x7}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x2000}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000080850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f00000021c0)={r2, 0x0, 0x0}, 0x10) 5m52.422263181s ago: executing program 2 (id=9483): recvmmsg$unix(0xffffffffffffffff, &(0x7f00000049c0)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000500)=""/124, 0x7c}], 0x1}}], 0x1, 0x2000, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff024}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000001c00), 0x400000000000159, 0x40840) 5m52.214809s ago: executing program 1 (id=9484): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000800000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='contention_end\x00', r0}, 0x10) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000000)="240000001a005f0214f9f407000904008100000000030000000000000800040006020000", 0x24) 5m48.535755138s ago: executing program 4 (id=9485): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="b800000019000100ffffffff00000000e000000200000000000000000000000000000000000000010000000000000000001a0000000400000a"], 0xb8}, 0x1, 0x0, 0x0, 0x40}, 0x4000090) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x2b}, {0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffffb05776a7}}}, 0xb8}}, 0x0) 5m43.589294758s ago: executing program 1 (id=9486): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.empty_time\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0x10012, r0, 0x0) r1 = socket(0x11, 0x3, 0x5) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) 5m41.948955714s ago: executing program 2 (id=9487): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="12000000070000000400000002"], 0x48) socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000280)="aa", &(0x7f0000000400)=@udp=r1}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r0, &(0x7f0000000600), &(0x7f0000000340)=@udp=r1, 0x1}, 0x20) 5m39.287062511s ago: executing program 33 (id=9479): r0 = socket(0x10, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES64=r0], 0x40}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) ppoll(&(0x7f00000004c0)=[{0xffffffffffffffff, 0x9000}, {r1, 0x10}], 0x2, 0x0, 0x0, 0x0) 5m36.536873193s ago: executing program 4 (id=9489): r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x17}}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e22, 0x3, @empty}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000140), 0x4) 5m32.411401049s ago: executing program 2 (id=9490): sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x74) sendmmsg$unix(r0, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000001dc0)="bb", 0x1}], 0x1}}], 0x2, 0x0) 5m28.520041825s ago: executing program 4 (id=9491): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x10, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0xc, 0x2, {0x3, 0x4, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 5m24.883673104s ago: executing program 34 (id=9486): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.empty_time\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0x10012, r0, 0x0) r1 = socket(0x11, 0x3, 0x5) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) 5m23.775658595s ago: executing program 2 (id=9493): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x28, 0x14, 0x509, 0x0, 0x25dfdbfd, {0x2, 0x1f, 0xa, 0xcb, r2}, [@IFA_LOCAL={0x8, 0x2, @local}, @IFA_FLAGS={0x8, 0x8, 0x605}]}, 0x28}}, 0x4884) 5m10.477895811s ago: executing program 35 (id=9491): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x10, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0xc, 0x2, {0x3, 0x4, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 5m10.099042094s ago: executing program 2 (id=9495): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x1, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x4004010) 5m1.140840684s ago: executing program 2 (id=9496): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x1d8, 0x65, 0x20, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0xe}, {0x0, 0xb}}, [@filter_kind_options=@f_flow={{0x9}, {0x1a0, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x8065738cbab9bcb1}, @TCA_FLOW_EMATCHES={0x16c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x154, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x9c, 0x2, 0x0, 0x0, {{0x4, 0x0, 0x7}, "645809825d93df900fa8fae387fbed6313a639f20b0238ccdd4da9fde2f0be34e659ba729925eff5ebd76dec200e0c6b209649b549944fb335b53ad7e5b0f72af98dbb05ee1778a3e952122289a807cd7b48f87fa52a56b8fa1ed950478a7e526d5afbe8006f3724cd7d7553d2825013cfb6f6c75b881ba76a73fc329b963abb903b4ac42a8121e56f0f0797ef"}}, @TCF_EM_NBYTE={0x1c, 0x3, 0x0, 0x0, {{0x7, 0x2, 0x4}, {0x4, 0x9, 0x6, "ebe6c48aa90c9330f8"}}}, @TCF_EM_CONTAINER={0x7c, 0x3, 0x0, 0x0, {{0x4, 0x0, 0xb}, "d0fa3d16cd50d147bab4e8cc66b89a2f2ddd8d0b788aa8b69311701d1c85ab32acb6397660ea603b182034545dd0bd1327d2665d5a78a956ac2ec9921388b37854565074bc2cf7610bacd71b29b6291a2dbc80bf91fea392ac67adb245b0a25f26f1ee3e931815552be72cdd91"}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x1, 0x3, 0x81}, {0x10, 0xe, 0x6, 0xd4c}}}]}, @TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x4}]}, @TCA_FLOW_XOR={0x8, 0x7, 0xffffff7b}, @TCA_FLOW_PERTURB={0x8}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x7fff}, @TCA_FLOW_PERTURB={0x8, 0xc, 0x1}, @TCA_FLOW_RSHIFT={0x8, 0x4, 0x5}]}}, @TCA_RATE={0x6, 0x5, {0x8, 0x81}}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x80}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 4m45.250424729s ago: executing program 36 (id=9496): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x1d8, 0x65, 0x20, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0xe}, {0x0, 0xb}}, [@filter_kind_options=@f_flow={{0x9}, {0x1a0, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x8065738cbab9bcb1}, @TCA_FLOW_EMATCHES={0x16c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x154, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x9c, 0x2, 0x0, 0x0, {{0x4, 0x0, 0x7}, "645809825d93df900fa8fae387fbed6313a639f20b0238ccdd4da9fde2f0be34e659ba729925eff5ebd76dec200e0c6b209649b549944fb335b53ad7e5b0f72af98dbb05ee1778a3e952122289a807cd7b48f87fa52a56b8fa1ed950478a7e526d5afbe8006f3724cd7d7553d2825013cfb6f6c75b881ba76a73fc329b963abb903b4ac42a8121e56f0f0797ef"}}, @TCF_EM_NBYTE={0x1c, 0x3, 0x0, 0x0, {{0x7, 0x2, 0x4}, {0x4, 0x9, 0x6, "ebe6c48aa90c9330f8"}}}, @TCF_EM_CONTAINER={0x7c, 0x3, 0x0, 0x0, {{0x4, 0x0, 0xb}, "d0fa3d16cd50d147bab4e8cc66b89a2f2ddd8d0b788aa8b69311701d1c85ab32acb6397660ea603b182034545dd0bd1327d2665d5a78a956ac2ec9921388b37854565074bc2cf7610bacd71b29b6291a2dbc80bf91fea392ac67adb245b0a25f26f1ee3e931815552be72cdd91"}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x1, 0x3, 0x81}, {0x10, 0xe, 0x6, 0xd4c}}}]}, @TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x4}]}, @TCA_FLOW_XOR={0x8, 0x7, 0xffffff7b}, @TCA_FLOW_PERTURB={0x8}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x7fff}, @TCA_FLOW_PERTURB={0x8, 0xc, 0x1}, @TCA_FLOW_RSHIFT={0x8, 0x4, 0x5}]}}, @TCA_RATE={0x6, 0x5, {0x8, 0x81}}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x80}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 0s ago: executing program 7 (id=9492): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000004000900041122000b00000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000380), &(0x7f00000000c0), 0x2, r0}, 0x38) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000080)={0x0, &(0x7f0000000000)=""/56, &(0x7f00000001c0), &(0x7f00000000c0), 0x1, r0}, 0x38) kernel console output (not intermixed with test programs): 2.3726': attribute type 1 has an invalid length. [ 289.741774][T13841] openvswitch: netlink: Key type 251 is out of range max 32 [ 289.908938][T13849] netlink: 1284 bytes leftover after parsing attributes in process `syz.3.3742'. [ 290.039082][T13845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 290.342407][T13866] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3751'. [ 290.805878][T13888] openvswitch: netlink: Duplicate or invalid key (type 0). [ 290.870757][T13888] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 291.373130][T13917] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3775'. [ 291.448770][T13917] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 291.745642][T13931] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 291.986178][T13945] netlink: 'syz.0.3789': attribute type 15 has an invalid length. [ 292.009037][T13945] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3789'. [ 292.631358][T13940] bridge0: port 3(team0) entered disabled state [ 292.685870][T13959] netlink: 196 bytes leftover after parsing attributes in process `syz.4.3797'. [ 292.700229][T13959] tc_dump_action: action bad kind [ 292.882912][ T5914] syz1: Port: 1 Link DOWN [ 293.033829][T13976] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3803'. [ 293.412183][T13994] openvswitch: netlink: Actions may not be safe on all matching packets [ 293.637705][T14006] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3817'. [ 293.658527][T14009] netlink: 'syz.1.3816': attribute type 4 has an invalid length. [ 294.044645][T14025] netlink: 'syz.3.3825': attribute type 15 has an invalid length. [ 294.058917][T14018] xt_CT: No such helper "snmp_trap" [ 294.096981][T14025] netlink: 'syz.3.3825': attribute type 7 has an invalid length. [ 294.152841][T14025] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3825'. [ 295.229096][T14062] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 295.418913][T14071] netlink: 'syz.4.3847': attribute type 13 has an invalid length. [ 295.452750][T14071] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3847'. [ 295.523808][T14071] net veth1_virt_wifi virt_wifi0: refused to change device tx_queue_len [ 295.902976][T14091] netlink: 830 bytes leftover after parsing attributes in process `syz.2.3857'. [ 295.952235][T14093] netlink: 'syz.0.3858': attribute type 1 has an invalid length. [ 296.015077][T14097] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 296.327431][T14109] netlink: 'syz.3.3865': attribute type 1 has an invalid length. [ 296.462912][T14113] netlink: 'syz.1.3868': attribute type 4 has an invalid length. [ 296.581013][T14121] tipc: Trying to set illegal importance in message [ 296.969871][T14139] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 296.991586][T14141] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3882'. [ 297.483405][T14161] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3890'. [ 297.770389][T14174] netlink: 6032 bytes leftover after parsing attributes in process `syz.1.3898'. [ 297.795654][T14177] netlink: 'syz.2.3899': attribute type 2 has an invalid length. [ 298.023377][T14187] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3904'. [ 298.063425][T14187] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3904'. [ 298.495312][T14205] netlink: 'syz.2.3915': attribute type 8 has an invalid length. [ 298.645272][T14209] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3916'. [ 298.700083][T14209] netlink: 7 bytes leftover after parsing attributes in process `syz.4.3916'. [ 299.315461][T14238] netlink: 'syz.3.3930': attribute type 4 has an invalid length. [ 299.778706][ T5914] IPVS: starting estimator thread 0... [ 299.872848][T14264] netlink: 'syz.0.3942': attribute type 21 has an invalid length. [ 299.902900][T14260] IPVS: using max 27 ests per chain, 64800 per kthread [ 299.923249][T14264] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3942'. [ 300.099188][T14272] syz.4.3946 uses old SIOCAX25GETINFO [ 300.252391][T14277] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3950'. [ 300.295570][T14277] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3950'. [ 300.305480][T14282] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 300.428461][T14284] Cannot find set identified by id 2 to match [ 300.658109][T14296] netlink: 116 bytes leftover after parsing attributes in process `syz.3.3958'. [ 300.923887][T14304] netlink: del zone limit has 4 unknown bytes [ 301.001569][T14308] netlink: 'syz.1.3963': attribute type 3 has an invalid length. [ 301.231831][T14318] netlink: 'syz.2.3969': attribute type 2 has an invalid length. [ 301.249319][T14318] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3969'. [ 301.527430][T14329] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 301.613099][T14332] xt_l2tp: v2 doesn't support IP mode [ 301.666212][T14334] xt_TPROXY: Can be used only with -p tcp or -p udp [ 302.161733][T14357] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3988'. [ 302.185630][T14357] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3988'. [ 302.233765][T14358] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3989'. [ 303.210157][T14395] netlink: 'syz.1.4007': attribute type 22 has an invalid length. [ 303.247195][T14397] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 303.272846][T14397] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 303.308678][T14401] netlink: 830 bytes leftover after parsing attributes in process `syz.0.4010'. [ 303.964251][T14422] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 304.261815][T14430] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4024'. [ 304.329012][T14432] IPVS: length: 163 != 8 [ 304.628089][T14449] No such timeout policy "syz0" [ 305.273157][T14480] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 305.348887][T14485] netlink: 'syz.4.4048': attribute type 11 has an invalid length. [ 305.373570][T14485] __nla_validate_parse: 2 callbacks suppressed [ 305.373589][T14485] netlink: 140 bytes leftover after parsing attributes in process `syz.4.4048'. [ 305.656797][T14496] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4055'. [ 306.283726][T14517] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4065'. [ 306.323137][T14521] xt_CT: You must specify a L4 protocol and not use inversions on it [ 307.049097][T14552] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4083'. [ 307.090502][T14555] openvswitch: netlink: Tunnel attr 227 out of range max 16 [ 307.720751][T14579] warn_alloc: 1 callbacks suppressed [ 307.720770][T14579] syz.4.4096: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 307.756326][T14579] CPU: 0 UID: 0 PID: 14579 Comm: syz.4.4096 Not tainted 6.16.0-rc5-syzkaller-01461-g511ad4c26446 #0 PREEMPT(full) [ 307.756357][T14579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 307.756370][T14579] Call Trace: [ 307.756388][T14579] [ 307.756398][T14579] dump_stack_lvl+0x189/0x250 [ 307.756433][T14579] ? __pfx_dump_stack_lvl+0x10/0x10 [ 307.756460][T14579] ? __pfx__printk+0x10/0x10 [ 307.756489][T14579] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 307.756518][T14579] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 307.756548][T14579] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 307.756579][T14579] warn_alloc+0x214/0x310 [ 307.756607][T14579] ? stack_depot_save_flags+0x429/0x900 [ 307.756642][T14579] ? __pfx_warn_alloc+0x10/0x10 [ 307.756672][T14579] ? kasan_save_track+0x4f/0x80 [ 307.756695][T14579] ? xskq_create+0x56/0x170 [ 307.756719][T14579] ? xsk_init_queue+0xb0/0x110 [ 307.756741][T14579] ? xsk_setsockopt+0x4dc/0x8d0 [ 307.756762][T14579] ? do_sock_setsockopt+0x25a/0x3e0 [ 307.756792][T14579] ? __x64_sys_setsockopt+0x18b/0x220 [ 307.756821][T14579] ? do_syscall_64+0xfa/0x3b0 [ 307.756847][T14579] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.756877][T14579] __vmalloc_node_range_noprof+0x125/0x12f0 [ 307.756938][T14579] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 307.756972][T14579] ? __kasan_kmalloc+0x93/0xb0 [ 307.757000][T14579] vmalloc_user_noprof+0xad/0xf0 [ 307.757027][T14579] ? xskq_create+0xbf/0x170 [ 307.757054][T14579] xskq_create+0xbf/0x170 [ 307.757084][T14579] xsk_init_queue+0xb0/0x110 [ 307.757113][T14579] xsk_setsockopt+0x4dc/0x8d0 [ 307.757142][T14579] ? __pfx_xsk_setsockopt+0x10/0x10 [ 307.757166][T14579] ? __pfx_aa_sk_perm+0x10/0x10 [ 307.757192][T14579] ? __lock_acquire+0xab9/0xd20 [ 307.757220][T14579] ? aa_sock_opt_perm+0x74/0x110 [ 307.757253][T14579] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 307.757284][T14579] ? __pfx_xsk_setsockopt+0x10/0x10 [ 307.757309][T14579] do_sock_setsockopt+0x25a/0x3e0 [ 307.757345][T14579] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 307.757389][T14579] ? __fget_files+0x2a/0x420 [ 307.757427][T14579] __x64_sys_setsockopt+0x18b/0x220 [ 307.757467][T14579] do_syscall_64+0xfa/0x3b0 [ 307.757494][T14579] ? lockdep_hardirqs_on+0x9c/0x150 [ 307.757520][T14579] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.757541][T14579] ? clear_bhb_loop+0x60/0xb0 [ 307.757567][T14579] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.757587][T14579] RIP: 0033:0x7f3b2cd8e929 [ 307.757609][T14579] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 307.757626][T14579] RSP: 002b:00007f3b2dbff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 307.757649][T14579] RAX: ffffffffffffffda RBX: 00007f3b2cfb5fa0 RCX: 00007f3b2cd8e929 [ 307.757664][T14579] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 307.757677][T14579] RBP: 00007f3b2ce10ca1 R08: 0000000000000004 R09: 0000000000000000 [ 307.757689][T14579] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 307.757702][T14579] R13: 0000000000000000 R14: 00007f3b2cfb5fa0 R15: 00007ffd81e5e148 [ 307.757736][T14579] [ 307.757745][T14579] Mem-Info: [ 308.107723][T14585] netlink: 134820 bytes leftover after parsing attributes in process `syz.1.4099'. [ 308.108792][T14579] active_anon:5592 inactive_anon:0 isolated_anon:0 [ 308.108792][T14579] active_file:1226 inactive_file:39911 isolated_file:0 [ 308.108792][T14579] unevictable:768 dirty:210 writeback:0 [ 308.108792][T14579] slab_reclaimable:10469 slab_unreclaimable:100721 [ 308.108792][T14579] mapped:29193 shmem:1367 pagetables:1238 [ 308.108792][T14579] sec_pagetables:0 bounce:0 [ 308.108792][T14579] kernel_misc_reclaimable:0 [ 308.108792][T14579] free:1330037 free_pcp:13837 free_cma:0 [ 308.225815][T14579] Node 0 active_anon:22368kB inactive_anon:0kB active_file:4904kB inactive_file:159440kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116872kB dirty:840kB writeback:0kB shmem:3932kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11932kB pagetables:4528kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 308.292758][T14579] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:124kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 308.363945][T14579] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 308.444697][T14579] lowmem_reserve[]: 0 2498 2499 2499 2499 [ 308.462076][T14579] Node 0 DMA32 free:1406776kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:22416kB inactive_anon:0kB active_file:4904kB inactive_file:157856kB unevictable:1536kB writepending:840kB present:3129332kB managed:2558260kB mlocked:0kB bounce:0kB free_pcp:31876kB local_pcp:13164kB free_cma:0kB [ 308.633020][T14579] lowmem_reserve[]: 0 0 1 1 1 [ 308.657164][T14579] Node 0 Normal free:0kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:52kB inactive_anon:0kB active_file:0kB inactive_file:1584kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 308.756303][T14579] lowmem_reserve[]: 0 0 0 0 0 [ 308.786631][T14579] Node 1 Normal free:3897688kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:20336kB local_pcp:5736kB free_cma:0kB [ 308.860766][T14579] lowmem_reserve[]: 0 0 0 0 0 [ 308.917415][T14579] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 308.943164][T14579] Node 0 DMA32: 1581*4kB (UM) 1063*8kB (UME) 763*16kB (UME) 337*32kB (UME) 263*64kB (UME) 132*128kB (UME) 62*256kB (UM) 31*512kB (UM) 26*1024kB (UME) 3*2048kB (UM) 310*4096kB (UM) = 1405820kB [ 308.971946][T14579] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 309.056485][T14579] Node 1 Normal: 210*4kB (UE) 38*8kB (UME) 42*16kB (UME) 68*32kB (UME) 25*64kB (UME) 5*128kB (UME) 3*256kB (UM) 3*512kB (UM) 2*1024kB (UM) 0*2048kB 949*4096kB (UM) = 3897688kB [ 309.139239][T14579] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 309.198490][T14579] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 309.252784][T14579] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 309.262397][T14579] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 309.345510][T14579] 42501 total pagecache pages [ 309.350253][T14579] 0 pages in swap cache [ 309.386544][T14579] Free swap = 124996kB [ 309.390765][T14579] Total swap = 124996kB [ 309.422696][T14579] 2097051 pages RAM [ 309.435185][T14579] 0 pages HighMem/MovableOnly [ 309.450655][T14579] 425444 pages reserved [ 309.462378][T14579] 0 pages cma reserved [ 309.613763][T14634] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4119'. [ 309.637921][T14634] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 309.703176][T14636] netlink: 'syz.4.4120': attribute type 2 has an invalid length. [ 309.710985][T14636] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 310.022432][T14647] delete_channel: no stack [ 310.134667][T14655] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4127'. [ 310.173815][T14655] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4127'. [ 310.317752][T14662] vti1: entered promiscuous mode [ 310.342747][T14662] vti1: entered allmulticast mode [ 310.353202][T14664] netlink: 'syz.0.4131': attribute type 13 has an invalid length. [ 310.388999][T14664] netlink: 'syz.0.4131': attribute type 17 has an invalid length. [ 310.449050][T14664] gretap0: refused to change device tx_queue_len [ 310.468466][T14664] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 310.795105][T14681] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4137'. [ 311.096915][T14691] netlink: 'syz.4.4143': attribute type 21 has an invalid length. [ 311.481035][T14709] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4150'. [ 311.487399][T14710] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4151'. [ 311.533587][T14712] netlink: 'syz.2.4152': attribute type 10 has an invalid length. [ 311.583069][T14712] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4152'. [ 311.612289][T14712] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 311.663252][T14712] bridge0: port 4(batadv0) entered blocking state [ 311.698433][T14712] bridge0: port 4(batadv0) entered disabled state [ 311.720905][T14712] batadv0: entered allmulticast mode [ 311.758761][ T3456] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 311.768211][ T3456] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 311.768388][T14712] batadv0: entered promiscuous mode [ 311.846305][T14724] netlink: 180 bytes leftover after parsing attributes in process `syz.3.4157'. [ 312.124794][T14737] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4162'. [ 312.182760][T14737] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4162'. [ 312.452852][T14749] netlink: 'syz.2.4166': attribute type 9 has an invalid length. [ 312.724975][T14764] netlink: 80 bytes leftover after parsing attributes in process `syz.4.4174'. [ 312.782760][T14764] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4174'. [ 312.819194][T14764] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4174'. [ 313.558201][T14791] veth1: entered promiscuous mode [ 313.598486][T14791] A link change request failed with some changes committed already. Interface veth1 may have been left with an inconsistent configuration, please check. [ 313.677774][T14796] netlink: 'syz.1.4189': attribute type 4 has an invalid length. [ 313.899216][T14804] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 314.071622][T14812] xt_bpf: check failed: parse error [ 314.527400][T14819] xt_CT: No such helper "pptp" [ 315.495356][T14866] netlink: zone id is out of range [ 315.501314][T14866] netlink: zone id is out of range [ 315.517245][T14866] netlink: set zone limit has 4 unknown bytes [ 316.058121][T14889] netlink: 'syz.2.4233': attribute type 1 has an invalid length. [ 316.101727][T14889] __nla_validate_parse: 7 callbacks suppressed [ 316.101747][T14889] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4233'. [ 316.180482][T14889] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4233'. [ 316.193796][T14893] netlink: 248 bytes leftover after parsing attributes in process `syz.4.4234'. [ 316.619992][T14913] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4243'. [ 317.130198][T14935] Unsupported ieee802154 address type: 0 [ 317.279327][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.285744][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.376580][T14937] netlink: 'syz.3.4253': attribute type 4 has an invalid length. [ 317.955276][T14974] netlink: 'syz.1.4267': attribute type 2 has an invalid length. [ 317.995436][T14974] netlink: 'syz.1.4267': attribute type 1 has an invalid length. [ 318.042951][T14974] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4267'. [ 318.096284][T14978] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4270'. [ 319.178692][T15025] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 319.388690][T15033] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4293'. [ 319.501918][T15039] netlink: 'syz.4.4296': attribute type 3 has an invalid length. [ 320.138068][T15067] netlink: 'syz.4.4306': attribute type 1 has an invalid length. [ 320.205748][T15067] netlink: 228 bytes leftover after parsing attributes in process `syz.4.4306'. [ 320.516051][T15082] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (6) [ 320.631939][T15090] netlink: 'syz.2.4318': attribute type 2 has an invalid length. [ 320.693258][T15090] netlink: 119 bytes leftover after parsing attributes in process `syz.2.4318'. [ 321.541744][T15124] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4334'. [ 323.022309][T15192] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 323.298000][T15205] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4372'. [ 324.796822][T15273] netlink: 'syz.1.4407': attribute type 1 has an invalid length. [ 324.884467][T15280] netlink: 308 bytes leftover after parsing attributes in process `syz.3.4408'. [ 324.959060][T15280] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4408'. [ 325.007847][T15280] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 325.032894][T15284] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4413'. [ 325.583495][T15308] netlink: 'syz.2.4424': attribute type 12 has an invalid length. [ 325.591370][T15308] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4424'. [ 325.857874][T15318] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.4429'. [ 326.604045][T15351] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4442'. [ 326.645040][T15351] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4442'. [ 327.199415][T15381] netlink: 'syz.0.4455': attribute type 58 has an invalid length. [ 327.534588][T15395] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4460'. [ 327.665880][T15397] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4462'. [ 328.296130][T15425] vxcan1 speed is unknown, defaulting to 1000 [ 328.333969][T15425] vxcan1 speed is unknown, defaulting to 1000 [ 328.373707][T15425] vxcan1 speed is unknown, defaulting to 1000 [ 328.441228][T15428] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4474'. [ 328.787443][T15425] infiniband syz2: set active [ 328.792425][T15425] infiniband syz2: added vxcan1 [ 328.804186][ T5914] vxcan1 speed is unknown, defaulting to 1000 [ 328.889521][T15425] RDS/IB: syz2: added [ 328.894496][T15425] smc: adding ib device syz2 with port count 1 [ 328.900988][T15425] smc: ib device syz2 port 1 has pnetid [ 328.930812][ T10] vxcan1 speed is unknown, defaulting to 1000 [ 328.967826][T15425] vxcan1 speed is unknown, defaulting to 1000 [ 329.280736][T15451] xt_HMARK: proto mask must be zero with L3 mode [ 329.399587][T15455] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 329.955461][T15425] vxcan1 speed is unknown, defaulting to 1000 [ 330.088432][T15482] netlink: 'syz.1.4495': attribute type 1 has an invalid length. [ 330.118840][T15482] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4495'. [ 330.203209][T15486] xt_time: unknown flags 0x4 [ 330.927190][T15425] vxcan1 speed is unknown, defaulting to 1000 [ 330.982909][T15518] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4508'. [ 331.091483][T15521] netlink: 5 bytes leftover after parsing attributes in process `syz.1.4510'. [ 331.627407][T15540] netlink: 9 bytes leftover after parsing attributes in process `syz.1.4516'. [ 331.693030][T15540] gretap0: entered promiscuous mode [ 331.991337][T15425] vxcan1 speed is unknown, defaulting to 1000 [ 332.039645][T15555] xt_CT: You must specify a L4 protocol and not use inversions on it [ 332.754975][T15425] vxcan1 speed is unknown, defaulting to 1000 [ 332.824101][T15585] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 333.062001][T15592] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 333.083486][T15592] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 333.122985][T15595] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4542'. [ 333.203897][T15414] infiniband syz!: set down [ 333.208465][T15414] infiniband syz!: added team_slave_0 [ 333.254679][T15414] syz!: rxe_create_cq: returned err = -12 [ 333.260525][T15414] infiniband syz!: Couldn't create ib_mad CQ [ 333.296808][T15414] infiniband syz!: Couldn't open port 1 [ 333.395952][T15414] RDS/IB: syz!: added [ 333.400049][T15414] smc: adding ib device syz! with port count 1 [ 333.432902][T15414] smc: ib device syz! port 1 has pnetid [ 333.475032][T15602] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4546'. [ 333.517971][T15602] A link change request failed with some changes committed already. Interface veth1_to_batadv may have been left with an inconsistent configuration, please check. [ 333.819694][T15615] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4552'. [ 334.083648][T15623] netlink: 'syz.0.4555': attribute type 1 has an invalid length. [ 334.121310][T15623] netlink: 'syz.0.4555': attribute type 1 has an invalid length. [ 334.185930][T15628] netlink: 5 bytes leftover after parsing attributes in process `syz.3.4557'. [ 334.777567][T15650] RDS: rds_bind could not find a transport for fc02::1, load rds_tcp or rds_rdma? [ 335.079185][T15668] netlink: 'syz.1.4572': attribute type 1 has an invalid length. [ 335.141482][T15668] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4572'. [ 335.308867][T15677] x_tables: unsorted underflow at hook 3 [ 335.613530][T15689] xt_CT: You must specify a L4 protocol and not use inversions on it [ 336.268885][T15719] netlink: 256 bytes leftover after parsing attributes in process `syz.3.4596'. [ 336.608726][T15734] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4601'. [ 336.622564][T15734] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4601'. [ 336.663033][T15734] netlink: 31 bytes leftover after parsing attributes in process `syz.1.4601'. [ 336.666218][T15738] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4603'. [ 336.684525][T15734] netlink: 'syz.1.4601': attribute type 3 has an invalid length. [ 336.692554][T15734] netlink: 'syz.1.4601': attribute type 2 has an invalid length. [ 336.723607][T15734] netlink: 31 bytes leftover after parsing attributes in process `syz.1.4601'. [ 336.762811][T15734] netlink: 'syz.1.4601': attribute type 2 has an invalid length. [ 337.150936][T15754] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 338.136249][T15798] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4635'. [ 338.663592][T15827] netlink: 'syz.0.4646': attribute type 9 has an invalid length. [ 338.692921][T15827] netlink: 'syz.0.4646': attribute type 7 has an invalid length. [ 338.726932][T15827] netlink: 'syz.0.4646': attribute type 8 has an invalid length. [ 339.832877][ T5851] Bluetooth: hci4: command 0x0406 tx timeout [ 341.483244][T15967] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4717'. [ 341.589445][T15973] netlink: 'syz.3.4720': attribute type 10 has an invalid length. [ 341.622827][T15973] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4720'. [ 341.670390][T15976] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4721'. [ 341.708507][T15973] team0: Port device geneve0 added [ 342.017124][T15992] netlink: 176 bytes leftover after parsing attributes in process `syz.2.4728'. [ 342.113214][T15995] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4732'. [ 342.122434][T15995] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4732'. [ 342.174399][T15995] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4732'. [ 342.219425][T16001] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4733'. [ 342.323090][T16001] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4733'. [ 342.525539][T16016] netlink: 'syz.3.4740': attribute type 13 has an invalid length. [ 343.084164][T16039] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4751'. [ 343.177996][T16046] xt_ecn: cannot match TCP bits for non-tcp packets [ 343.549551][T16016] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.557370][T16016] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.573679][T16057] netlink: 'syz.4.4760': attribute type 49 has an invalid length. [ 344.573797][T16016] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 344.641438][T16016] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 344.906529][T16016] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 345.523784][T16041] vxcan1 speed is unknown, defaulting to 1000 [ 345.530130][T16078] lo: entered promiscuous mode [ 345.543298][T16078] tunl0: entered promiscuous mode [ 345.548491][T16041] syz2: Port: 1 Link DOWN [ 345.566073][T16078] gre0: entered promiscuous mode [ 345.587746][T16078] erspan0: entered promiscuous mode [ 345.620320][T16078] ip_vti0: entered promiscuous mode [ 345.635950][T16078] ip6_vti0: entered promiscuous mode [ 345.646791][T16078] sit0: entered promiscuous mode [ 345.655728][T16078] ip6tnl0: entered promiscuous mode [ 345.670768][T16078] ip6gre0: entered promiscuous mode [ 345.683575][T16078] syz_tun: entered promiscuous mode [ 345.704318][T16078] ip6gretap0: entered promiscuous mode [ 345.719294][T16078] bridge0: entered promiscuous mode [ 345.725717][T16078] vcan0: entered promiscuous mode [ 345.731293][T16078] team0: entered promiscuous mode [ 345.739469][T16078] team_slave_0: entered promiscuous mode [ 345.746053][T16078] team_slave_1: entered promiscuous mode [ 345.766721][T16078] dummy0: left allmulticast mode [ 345.780874][T16078] nlmon0: entered promiscuous mode [ 345.805396][T16078] caif0: entered promiscuous mode [ 345.822822][T16078] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 345.874058][ T36] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.913895][ T36] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.949418][ T36] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.014569][T16041] vxcan1 speed is unknown, defaulting to 1000 [ 346.020742][ T36] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.353937][T16146] netlink: 'syz.1.4799': attribute type 4 has an invalid length. [ 346.395692][T16146] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4799'. [ 346.979261][T16177] netlink: 'syz.4.4813': attribute type 3 has an invalid length. [ 347.035239][T16179] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4814'. [ 347.349618][T16199] : left promiscuous mode [ 347.503407][T16206] xt_TCPMSS: Only works on TCP SYN packets [ 347.631197][T16214] xt_CT: You must specify a L4 protocol and not use inversions on it [ 347.751849][T16218] netlink: 'syz.2.4832': attribute type 15 has an invalid length. [ 348.687989][T16270] netlink: 'syz.3.4857': attribute type 1 has an invalid length. [ 348.718918][T16274] netlink: 'syz.2.4860': attribute type 1 has an invalid length. [ 348.747507][T16274] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4860'. [ 349.069980][T16288] netlink: 'syz.0.4867': attribute type 20 has an invalid length. [ 349.139562][T16292] netlink: 'syz.4.4870': attribute type 11 has an invalid length. [ 349.177012][T16294] netlink: zone id is out of range [ 349.182187][T16294] netlink: zone id is out of range [ 349.190522][T16292] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4870'. [ 349.350979][T16294] netlink: set zone limit has 4 unknown bytes [ 349.717010][T16321] netlink: 232 bytes leftover after parsing attributes in process `syz.1.4883'. [ 349.924825][T16332] xt_CT: You must specify a L4 protocol and not use inversions on it [ 349.990203][T16336] IPv6: sit1: Disabled Multicast RS [ 350.530038][T16366] RDS: rds_bind could not find a transport for 2001::2, load rds_tcp or rds_rdma? [ 350.873802][T16382] netlink: 'syz.2.4914': attribute type 1 has an invalid length. [ 350.881590][T16382] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 351.296055][T16399] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4922'. [ 351.302209][T16398] xt_CT: You must specify a L4 protocol and not use inversions on it [ 351.332909][T16399] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4922'. [ 351.486590][T16406] netlink: 'syz.2.4926': attribute type 21 has an invalid length. [ 351.519318][T16406] netlink: 156 bytes leftover after parsing attributes in process `syz.2.4926'. [ 351.664071][T16413] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4928'. [ 351.946873][T16425] openvswitch: netlink: IP tunnel dst address not specified [ 352.402906][T16451] netlink: 'syz.0.4947': attribute type 3 has an invalid length. [ 353.022871][T16488] delete_channel: no stack [ 353.067111][T16489] netlink: 'syz.3.4966': attribute type 1 has an invalid length. [ 353.108029][T16489] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4966'. [ 353.316815][T16502] siw: device registration error -23 [ 353.499264][T16513] netlink: 'syz.2.4977': attribute type 7 has an invalid length. [ 353.527725][T16513] netlink: 'syz.2.4977': attribute type 3 has an invalid length. [ 353.551276][T16513] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4977'. [ 353.562822][T16516] netlink: 324 bytes leftover after parsing attributes in process `syz.0.4979'. [ 353.766053][T16524] netlink: 'syz.0.4983': attribute type 30 has an invalid length. [ 353.930822][T16534] (unnamed net_device) (uninitialized): option lacp_active: invalid value (18) [ 354.122930][T16546] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4994'. [ 354.341177][T16559] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5002'. [ 354.542421][T16571] C: renamed from team_slave_0 (while UP) [ 354.659613][T16575] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5008'. [ 354.672199][T16575] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5008'. [ 354.694022][T16571] netlink: 'syz.0.5006': attribute type 1 has an invalid length. [ 354.701814][T16571] netlink: 152 bytes leftover after parsing attributes in process `syz.0.5006'. [ 354.739659][T16571] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 354.876590][T16581] xt_NFQUEUE: number of total queues is 0 [ 355.232900][T16593] syz_tun: entered promiscuous mode [ 355.241221][T16593] syz_tun: entered allmulticast mode [ 355.265915][T16596] netlink: 'syz.0.5016': attribute type 8 has an invalid length. [ 355.477387][T16609] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5023'. [ 355.522921][T16609] netlink: 'syz.4.5023': attribute type 5 has an invalid length. [ 356.999023][T16674] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5049'. [ 357.472764][T16693] netlink: 'syz.1.5057': attribute type 15 has an invalid length. [ 358.243216][T16724] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5069'. [ 359.170124][T16772] netlink: 'syz.1.5081': attribute type 13 has an invalid length. [ 359.499396][T16772] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.506953][T16772] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.535393][T16785] openvswitch: netlink: Tunnel attr 226 out of range max 16 [ 359.835827][T16772] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 359.863739][T16772] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 360.210175][T16752] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.221841][T16752] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 256 - 0 [ 360.241001][T16752] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.259266][T16796] set match dimension is over the limit! [ 360.273018][T16752] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 256 - 0 [ 360.313021][T16752] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.342301][T16752] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 256 - 0 [ 360.372909][T16799] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5091'. [ 360.375601][T16752] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.448288][T16752] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 256 - 0 [ 360.481938][T16803] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5093'. [ 360.638055][T16809] xt_CONNSECMARK: invalid mode: 254 [ 360.789822][T16816] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 360.823514][T16819] netlink: 'syz.3.5101': attribute type 1 has an invalid length. [ 360.853901][T16819] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5101'. [ 361.030979][T16827] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5105'. [ 361.155970][T16829] ip6gre2: entered promiscuous mode [ 361.379374][T16839] siw: device registration error -23 [ 362.121679][T16873] bridge3: entered promiscuous mode [ 362.215595][T16873] bridge3: entered allmulticast mode [ 362.378144][T16886] netlink: 'syz.2.5133': attribute type 1 has an invalid length. [ 362.607700][T16896] netlink: 'syz.2.5139': attribute type 1 has an invalid length. [ 362.611063][T16899] xt_TPROXY: Can be used only with -p tcp or -p udp [ 362.644318][T16896] netlink: 'syz.2.5139': attribute type 2 has an invalid length. [ 362.692963][T16896] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5139'. [ 362.789842][T16905] openvswitch: netlink: Key 6 has unexpected len 4 expected 2 [ 362.973612][T16913] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5147'. [ 363.726542][T16935] xt_TCPMSS: Only works on TCP SYN packets [ 363.757718][T16939] netlink: 'syz.0.5160': attribute type 21 has an invalid length. [ 363.771567][T16939] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5160'. [ 363.927805][T16941] xt_connbytes: Forcing CT accounting to be enabled [ 363.952878][T16941] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 363.989265][T16941] xt_bpf: check failed: parse error [ 364.133228][T16950] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 364.362152][T16964] xt_l2tp: wrong L2TP version: 0 [ 364.802939][T16984] netlink: 'syz.0.5182': attribute type 2 has an invalid length. [ 364.832707][T16984] netlink: 'syz.0.5182': attribute type 1 has an invalid length. [ 365.180769][T17010] netlink: 'syz.1.5191': attribute type 1 has an invalid length. [ 365.280705][T17014] ieee802154 phy1 wpan1: encryption failed: -22 [ 365.564891][T17028] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5204'. [ 365.705877][T17034] netlink: 104 bytes leftover after parsing attributes in process `syz.0.5209'. [ 366.202124][T17068] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 366.209759][T17068] IPv6: NLM_F_CREATE should be set when creating new route [ 366.217156][T17068] IPv6: NLM_F_CREATE should be set when creating new route [ 366.856762][T17094] netlink: 56 bytes leftover after parsing attributes in process `syz.4.5232'. [ 366.910367][T17099] xt_TCPMSS: Only works on TCP SYN packets [ 367.130590][T17111] netlink: 'syz.2.5240': attribute type 9 has an invalid length. [ 367.181293][T17114] netlink: 'syz.0.5241': attribute type 2 has an invalid length. [ 367.568820][T17139] xt_TCPMSS: Only works on TCP SYN packets [ 367.578297][T17138] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5253'. [ 367.598557][T17138] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5253'. [ 367.727228][T17147] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5257'. [ 367.940207][T17153] netlink: 'syz.3.5260': attribute type 8 has an invalid length. [ 368.087321][T17161] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 368.112811][T17161] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 368.137565][T17161] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 368.271026][T17174] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5271'. [ 368.429337][T17181] bond0: (slave rose0): Enslaving as an active interface with an up link [ 368.677418][T17193] netlink: 'syz.1.5281': attribute type 25 has an invalid length. [ 369.546002][T17229] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5298'. [ 370.036081][T17260] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 370.570250][T17295] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5333'. [ 370.762793][T17305] netlink: 'syz.3.5336': attribute type 1 has an invalid length. [ 370.791033][T17305] netlink: 'syz.3.5336': attribute type 1 has an invalid length. [ 371.134898][T17327] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5346'. [ 371.331823][T17340] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5352'. [ 371.713114][T17363] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5362'. [ 371.892852][T17371] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 371.902091][T17374] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5367'. [ 372.090464][T17383] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5371'. [ 372.137622][T17385] netlink: 'syz.4.5372': attribute type 1 has an invalid length. [ 372.146863][T17385] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5372'. [ 372.166576][T17385] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5372'. [ 372.912284][T17431] xt_TCPMSS: Only works on TCP SYN packets [ 373.000842][T17435] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 373.029143][T17435] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 373.056879][T17439] dvmrp0: entered allmulticast mode [ 373.057978][T17435] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 373.811829][T17486] netlink: 'syz.4.5417': attribute type 5 has an invalid length. [ 373.984950][T17493] netlink: 'syz.1.5421': attribute type 1 has an invalid length. [ 374.298446][T17512] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 374.344694][T17512] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 374.505724][T17524] netlink: 'syz.0.5436': attribute type 1 has an invalid length. [ 374.551106][T17524] netlink: 120 bytes leftover after parsing attributes in process `syz.0.5436'. [ 374.752355][T17541] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5444'. [ 375.050016][T17554] netlink: 'syz.0.5449': attribute type 11 has an invalid length. [ 375.271125][T17565] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 375.398724][T17570] netlink: 'syz.4.5457': attribute type 21 has an invalid length. [ 375.406919][T17570] netlink: 128 bytes leftover after parsing attributes in process `syz.4.5457'. [ 375.424213][T17570] netlink: 'syz.4.5457': attribute type 5 has an invalid length. [ 375.452765][T17570] netlink: 'syz.4.5457': attribute type 6 has an invalid length. [ 375.460757][T17570] netlink: 3 bytes leftover after parsing attributes in process `syz.4.5457'. [ 375.516698][T17577] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5461'. [ 375.538362][T17577] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5461'. [ 375.560398][T17577] netlink: 128 bytes leftover after parsing attributes in process `syz.0.5461'. [ 376.221601][T17606] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5476'. [ 376.251520][T17606] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5476'. [ 376.554044][T17623] xt_limit: Overflow, try lower: 262144/524288 [ 376.739774][T17637] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5491'. [ 376.753661][T17637] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5491'. [ 377.556911][T17682] netlink: 'syz.3.5513': attribute type 6 has an invalid length. [ 377.783319][T17696] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 378.019546][T17709] netlink: 'syz.1.5527': attribute type 3 has an invalid length. [ 378.050800][T17709] netlink: 'syz.1.5527': attribute type 3 has an invalid length. [ 378.735071][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.821464][T17756] xt_CT: You must specify a L4 protocol and not use inversions on it [ 379.182765][T17778] netlink: 'syz.1.5561': attribute type 1 has an invalid length. [ 379.225837][T17781] netlink: 'syz.4.5563': attribute type 3 has an invalid length. [ 379.243095][T17782] netlink: 'syz.0.5562': attribute type 3 has an invalid length. [ 379.255115][T17781] netlink: 'syz.4.5563': attribute type 1 has an invalid length. [ 379.562948][T17801] netlink: 'syz.0.5573': attribute type 4 has an invalid length. [ 380.103484][T17831] __nla_validate_parse: 11 callbacks suppressed [ 380.103505][T17831] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5585'. [ 380.173148][T17831] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 380.322847][T17846] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5591'. [ 380.379543][T17846] xfrm1: entered promiscuous mode [ 380.410875][T17846] xfrm1: entered allmulticast mode [ 381.036081][T17883] ip6gretap1: entered promiscuous mode [ 381.047868][T17885] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5612'. [ 381.150788][T17888] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5613'. [ 381.618771][T17912] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5625'. [ 381.723209][T17915] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5626'. [ 381.860330][T17921] netlink: 'syz.3.5629': attribute type 21 has an invalid length. [ 381.871657][T17923] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5630'. [ 381.889214][T17921] netlink: 128 bytes leftover after parsing attributes in process `syz.3.5629'. [ 381.903033][T17925] sctp: [Deprecated]: syz.0.5631 (pid 17925) Use of struct sctp_assoc_value in delayed_ack socket option. [ 381.903033][T17925] Use struct sctp_sack_info instead [ 381.943387][T17921] netlink: 'syz.3.5629': attribute type 4 has an invalid length. [ 381.961503][T17921] netlink: 3 bytes leftover after parsing attributes in process `syz.3.5629'. [ 382.182778][T17939] netlink: 88 bytes leftover after parsing attributes in process `syz.4.5638'. [ 382.353245][T17945] xt_CT: You must specify a L4 protocol and not use inversions on it [ 382.405293][T17951] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 382.501456][T17957] xt_bpf: check failed: parse error [ 383.208400][T18000] ..@ÿ: renamed from bond_slave_0 [ 383.581568][T18024] bridge_slave_1: left allmulticast mode [ 383.602751][T18024] bridge_slave_1: left promiscuous mode [ 383.616562][T18024] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.695752][T18024] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 384.173023][T18058] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 384.289627][T18067] ipt_rpfilter: unknown options [ 384.709820][T18093] xt_TCPMSS: Only works on TCP SYN packets [ 384.839647][T18099] SET target dimension over the limit! [ 385.121707][T18114] xt_hashlimit: overflow, try lower: 6/0 [ 385.185809][T18111] xt_CT: No such helper "netbios-ns" [ 385.771366][T18148] xt_HMARK: spi-set and port-set can't be combined [ 385.830172][T18153] validate_nla: 1 callbacks suppressed [ 385.830193][T18153] netlink: 'syz.3.5742': attribute type 10 has an invalid length. [ 385.979280][T18162] netlink: 'syz.0.5746': attribute type 2 has an invalid length. [ 386.342255][T18182] __nla_validate_parse: 4 callbacks suppressed [ 386.342278][T18182] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5756'. [ 387.377816][T18238] xfrm1: entered allmulticast mode [ 387.389605][T18240] --map-set only usable from mangle table [ 388.320351][T18288] bridge_slave_0: left allmulticast mode [ 388.329281][T18288] bridge_slave_0: left promiscuous mode [ 388.346125][T18288] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.386520][T18288] bridge_slave_1: left allmulticast mode [ 388.392342][T18288] bridge_slave_1: left promiscuous mode [ 388.407990][T18288] bridge0: port 2(bridge_slave_1) entered disabled state [ 388.437572][T18288] team0: Port device team_slave_0 removed [ 388.449951][T18288] team0: Port device team_slave_1 removed [ 388.457746][T18288] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 388.477871][T18288] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 388.497896][T18288] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 388.520771][T18288] ip6erspan0: left allmulticast mode [ 388.537324][T18288] batadv1: left allmulticast mode [ 388.550663][T18288] bond2: left promiscuous mode [ 388.565557][T18288] bond2: left allmulticast mode [ 388.578106][T18288] bond3: left promiscuous mode [ 388.591882][T18288] bond3: left allmulticast mode [ 388.605830][T18288] vti0: left promiscuous mode [ 388.617946][T18288] vti1: left promiscuous mode [ 388.632183][T18288] vti1: left allmulticast mode [ 388.645596][T18288] xfrm1: left promiscuous mode [ 388.657156][T18288] xfrm1: left allmulticast mode [ 388.668985][T18288] ip6gretap1: left promiscuous mode [ 388.691963][T18292] ip6erspan0: entered allmulticast mode [ 389.034059][T18310] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5817'. [ 389.122798][T18312] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 389.461465][T18319] bridge0: port 3(gretap0) entered disabled state [ 389.524170][T18327] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5825'. [ 389.594269][T18331] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5827'. [ 389.759703][ T3565] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.782537][T18335] netlink: 244 bytes leftover after parsing attributes in process `syz.3.5828'. [ 389.799628][ T3565] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.832524][T18337] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5830'. [ 389.833704][ T3565] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.898534][ T3565] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.204486][T18349] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5836'. [ 390.608550][T18369] netlink: 'syz.4.5846': attribute type 21 has an invalid length. [ 390.655859][T18369] netlink: 128 bytes leftover after parsing attributes in process `syz.4.5846'. [ 390.704845][T18369] netlink: 'syz.4.5846': attribute type 4 has an invalid length. [ 390.742751][T18369] netlink: 'syz.4.5846': attribute type 5 has an invalid length. [ 390.750542][T18369] netlink: 3 bytes leftover after parsing attributes in process `syz.4.5846'. [ 391.145489][T18395] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5859'. [ 391.254201][T18398] netlink: 'syz.0.5860': attribute type 15 has an invalid length. [ 391.640128][T18411] wg1 speed is unknown, defaulting to 1000 [ 391.840324][T18423] __nla_validate_parse: 1 callbacks suppressed [ 391.840348][T18423] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5871'. [ 391.941682][T18411] vxcan1 speed is unknown, defaulting to 1000 [ 392.828202][T18453] netlink: 'syz.0.5887': attribute type 12 has an invalid length. [ 393.173321][T18470] netlink: 'syz.4.5896': attribute type 39 has an invalid length. [ 393.369830][T18476] ip6gre1: entered allmulticast mode [ 393.755574][T18495] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5908'. [ 393.802104][T18495] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5908'. [ 394.232266][T18516] delete_channel: no stack [ 394.459662][T18535] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5928'. [ 394.476096][T18532] delete_channel: no stack [ 395.031914][T18571] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5945'. [ 395.052801][T18571] netlink: 84 bytes leftover after parsing attributes in process `syz.4.5945'. [ 395.400116][T18590] bridge4: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 395.578235][T18599] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 395.605772][T18601] netlink: 'syz.0.5961': attribute type 6 has an invalid length. [ 396.232099][T18643] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5982'. [ 397.070734][T18679] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 397.158983][T18683] netlink: 'syz.3.6000': attribute type 1 has an invalid length. [ 397.167136][T18683] netlink: 'syz.3.6000': attribute type 1 has an invalid length. [ 397.421579][T18696] xt_TCPMSS: Only works on TCP SYN packets [ 397.976259][T18716] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6018'. [ 398.207494][T18724] xt_addrtype: ipv6 does not support BROADCAST matching [ 398.605009][T18743] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 398.691112][T18749] netlink: 'syz.4.6034': attribute type 1 has an invalid length. [ 399.007083][T18768] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6043'. [ 399.054764][T18771] netlink: 224 bytes leftover after parsing attributes in process `syz.3.6044'. [ 399.125190][T18775] SET target dimension over the limit! [ 399.189542][T18779] netlink: 'syz.2.6048': attribute type 3 has an invalid length. [ 399.209576][T18779] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.6048'. [ 399.232464][T18782] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6051'. [ 399.253493][T18782] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6051'. [ 399.422134][T18793] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 399.431238][T18795] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6057'. [ 399.605200][T18803] netlink: 316 bytes leftover after parsing attributes in process `syz.3.6060'. [ 399.648011][T18806] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6062'. [ 399.835385][T18815] batadv2: entered promiscuous mode [ 399.864602][T18818] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 399.935771][T18823] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6070'. [ 400.197179][T18837] netlink: 'syz.0.6077': attribute type 1 has an invalid length. [ 400.415692][T18851] sctp: [Deprecated]: syz.0.6084 (pid 18851) Use of int in max_burst socket option. [ 400.415692][T18851] Use struct sctp_assoc_value instead [ 400.564159][T18863] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 400.964239][T18880] netlink: 'syz.4.6097': attribute type 1 has an invalid length. [ 401.578273][T18910] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 403.293481][T19011] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 403.327891][T19011] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 403.392776][T19019] veth0_to_bond: entered allmulticast mode [ 403.536290][T19025] __nla_validate_parse: 10 callbacks suppressed [ 403.536312][T19025] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6161'. [ 404.086496][T19055] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 404.266646][T19065] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6179'. [ 406.466297][T19176] sctp: [Deprecated]: syz.4.6221 (pid 19176) Use of int in max_burst socket option. [ 406.466297][T19176] Use struct sctp_assoc_value instead [ 406.527672][T19180] pim6reg: entered allmulticast mode [ 406.545233][T19180] pim6reg: left allmulticast mode [ 407.016912][T19210] netlink: 'syz.3.6237': attribute type 1 has an invalid length. [ 408.220952][T19268] netlink: 216 bytes leftover after parsing attributes in process `syz.0.6265'. [ 408.246128][T19268] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6265'. [ 408.259987][T19268] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6265'. [ 408.733399][T19300] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20003 [ 408.889708][T19311] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6285'. [ 409.467107][T19340] macsec1: entered promiscuous mode [ 409.472468][T19340] macsec1: entered allmulticast mode [ 409.736788][T19355] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6305'. [ 410.027912][T19367] tipc: Enabling of bearer rejected, failed to enable media [ 410.054873][T19370] netlink: 'syz.1.6311': attribute type 2 has an invalid length. [ 410.492252][T19395] netlink: 'syz.0.6328': attribute type 1 has an invalid length. [ 410.633087][T19405] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 411.123303][T19426] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 412.602954][T19487] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6370'. [ 412.939937][T19508] Bluetooth: MGMT ver 1.23 [ 413.803121][T19561] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6404'. [ 414.479691][T19599] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6426'. [ 414.483041][T19604] netlink: 'syz.0.6424': attribute type 2 has an invalid length. [ 414.503747][T19605] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.6423'. [ 414.523335][T19604] netlink: 244 bytes leftover after parsing attributes in process `syz.0.6424'. [ 415.009304][T19635] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6439'. [ 415.154325][T19643] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.6444'. [ 416.694457][T19732] netlink: 6 bytes leftover after parsing attributes in process `syz.3.6488'. [ 416.888905][T19744] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6495'. [ 416.910421][T19744] IPVS: Error joining to the multicast group [ 417.073841][T19755] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6497'. [ 417.086961][T19752] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6498'. [ 417.101204][T19755] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6497'. [ 417.122108][T19752] openvswitch: netlink: nsh attribute has 5276 unknown bytes. [ 417.162693][T19752] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 417.178233][T19755] netlink: 'syz.4.6497': attribute type 18 has an invalid length. [ 417.355311][ T51] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 418.214000][T19810] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 419.579205][T19878] __nla_validate_parse: 3 callbacks suppressed [ 419.579226][T19878] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6551'. [ 419.634847][T19884] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.6550'. [ 420.035098][T19909] netlink: 184 bytes leftover after parsing attributes in process `syz.0.6565'. [ 420.053354][T19909] netlink: 184 bytes leftover after parsing attributes in process `syz.0.6565'. [ 420.081994][T19909] netlink: 184 bytes leftover after parsing attributes in process `syz.0.6565'. [ 420.112157][T19909] netlink: 184 bytes leftover after parsing attributes in process `syz.0.6565'. [ 420.148662][T19909] netlink: 184 bytes leftover after parsing attributes in process `syz.0.6565'. [ 420.165903][T19909] netlink: 184 bytes leftover after parsing attributes in process `syz.0.6565'. [ 420.179315][T19909] netlink: 184 bytes leftover after parsing attributes in process `syz.0.6565'. [ 420.197055][T19909] netlink: 184 bytes leftover after parsing attributes in process `syz.0.6565'. [ 420.593226][T19933] netlink: 'syz.2.6577': attribute type 83 has an invalid length. [ 421.142074][T19966] nbd: must specify at least one socket [ 421.335236][T19981] Bluetooth: MGMT ver 1.23 [ 422.056353][T16041] IPVS: starting estimator thread 0... [ 422.154000][T20026] IPVS: using max 27 ests per chain, 64800 per kthread [ 422.349628][T20044] lo: entered allmulticast mode [ 422.355192][T20044] lo: left allmulticast mode [ 424.377962][T20150] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 424.688071][T20168] bond0: option mode: unable to set because the bond device has slaves [ 424.939015][T20180] wg1 speed is unknown, defaulting to 1000 [ 425.176955][T20193] __nla_validate_parse: 15 callbacks suppressed [ 425.176978][T20193] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6701'. [ 425.430416][T20204] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 425.493008][T20180] vxcan1 speed is unknown, defaulting to 1000 [ 425.623241][T20213] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6711'. [ 425.644463][T20216] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6712'. [ 426.047475][T20231] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6718'. [ 426.056698][T20230] netlink: 236 bytes leftover after parsing attributes in process `syz.1.6719'. [ 426.073361][T20231] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6718'. [ 426.082493][T20231] Zero length message leads to an empty skb [ 426.093477][T20230] netlink: 1 bytes leftover after parsing attributes in process `syz.1.6719'. [ 426.480882][T20241] netlink: 'syz.1.6723': attribute type 1 has an invalid length. [ 427.182422][T20270] netlink: 'syz.4.6738': attribute type 3 has an invalid length. [ 427.777446][T20300] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 428.103468][T20315] netlink: 124 bytes leftover after parsing attributes in process `syz.2.6759'. [ 428.392485][T20336] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6769'. [ 428.863189][T20365] Bluetooth: MGMT ver 1.23 [ 429.025544][T20375] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6786'. [ 429.053037][T20375] openvswitch: netlink: nsh attribute has 65520 unknown bytes. [ 429.060680][T20375] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 429.692292][T20408] netlink: 'syz.2.6803': attribute type 2 has an invalid length. [ 430.031897][T20419] netlink: 'syz.3.6808': attribute type 2 has an invalid length. [ 430.091946][T20422] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 430.107943][T20419] k›*·]‘: entered promiscuous mode [ 430.279420][T20431] __nla_validate_parse: 2 callbacks suppressed [ 430.279441][T20431] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6814'. [ 430.420227][T20438] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6818'. [ 431.070882][T20476] netlink: 184 bytes leftover after parsing attributes in process `syz.0.6835'. [ 431.094052][T20476] netlink: 184 bytes leftover after parsing attributes in process `syz.0.6835'. [ 431.487227][T20499] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6847'. [ 431.592536][T20503] nbd: must specify a size in bytes for the device [ 431.956142][T20520] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 432.013967][T20520] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6856'. [ 432.041055][T20520] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6856'. [ 432.221779][T20530] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 432.411336][T20536] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6864'. [ 432.579710][T20542] netlink: 'syz.0.6867': attribute type 30 has an invalid length. [ 433.650863][T20599] tipc: Enabling of bearer rejected, failed to enable media [ 433.847632][T20612] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6901'. [ 433.877928][T20612] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 433.888823][T20612] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 434.422925][T20646] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6915'. [ 435.344772][T20683] tipc: Started in network mode [ 435.349703][T20683] tipc: Node identity ff020000000000000000000000000001, cluster identity 4711 [ 435.386568][T20683] tipc: Enabling of bearer rejected, failed to enable media [ 435.536937][T20686] 8021q: adding VLAN 0 to HW filter on device bond3 [ 435.599474][T20686] bond3: entered promiscuous mode [ 435.613735][T20686] bond3: entered allmulticast mode [ 435.658362][T20686] team0: Port device bond3 added [ 435.974059][T20707] __nla_validate_parse: 2 callbacks suppressed [ 435.974088][T20707] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6943'. [ 437.059585][T20747] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6961'. [ 438.677747][T20826] netlink: 'syz.2.6998': attribute type 5 has an invalid length. [ 438.794537][ T5862] Bluetooth: hci2: command 0x0406 tx timeout [ 438.801045][ T51] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 438.817920][T20834] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7000'. [ 439.682715][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 440.159185][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.780839][T20937] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.7047'. [ 440.788981][T20939] netlink: 'syz.3.7049': attribute type 5 has an invalid length. [ 440.926069][T20946] netlink: 'syz.4.7052': attribute type 16 has an invalid length. [ 440.935223][T20946] netlink: 'syz.4.7052': attribute type 3 has an invalid length. [ 440.947357][T20946] netlink: 64066 bytes leftover after parsing attributes in process `syz.4.7052'. [ 441.134616][T20958] netlink: 260 bytes leftover after parsing attributes in process `syz.2.7058'. [ 441.278512][T20968] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7062'. [ 441.354890][T20972] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7064'. [ 441.364178][T20972] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7064'. [ 441.386781][T20973] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7065'. [ 441.395530][T20972] netlink: 'syz.0.7064': attribute type 5 has an invalid length. [ 441.406039][T20970] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7065'. [ 441.665610][T20989] netlink: 104 bytes leftover after parsing attributes in process `syz.2.7073'. [ 441.680078][T20988] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7072'. [ 441.860153][T20996] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7076'. [ 441.881657][T20997] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7077'. [ 441.903546][T20996] IPVS: Error connecting to the multicast addr [ 441.910687][T20997] netlink: 'syz.2.7077': attribute type 5 has an invalid length. [ 442.680056][T21039] netlink: 'syz.3.7096': attribute type 1 has an invalid length. [ 442.706388][T21039] NCSI netlink: No device for ifindex 0 [ 443.277416][T21066] netlink: 'syz.1.7109': attribute type 2 has an invalid length. [ 443.790881][T21090] netlink: 'syz.0.7117': attribute type 4 has an invalid length. [ 446.693251][T21253] __nla_validate_parse: 10 callbacks suppressed [ 446.693273][T21253] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7194'. [ 446.740893][T21253] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7194'. [ 446.880717][T21265] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7198'. [ 446.896907][T21265] openvswitch: netlink: nsh attribute has 2338 unknown bytes. [ 446.907518][T21265] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 447.568486][T21301] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7217'. [ 447.638691][T21305] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7219'. [ 447.866867][T21316] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7223'. [ 447.897186][T21316] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7223'. [ 447.927445][T21317] bridge0: port 3(gretap0) entered blocking state [ 447.934010][T21316] netlink: 'syz.2.7223': attribute type 13 has an invalid length. [ 447.934034][T21316] netlink: 'syz.2.7223': attribute type 11 has an invalid length. [ 447.949882][T21317] bridge0: port 3(gretap0) entered forwarding state [ 447.975478][T21317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 448.016158][T21317] 8021q: adding VLAN 0 to HW filter on device team0 [ 448.040512][T21317] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 448.219005][T21329] netlink: 112 bytes leftover after parsing attributes in process `syz.3.7230'. [ 448.304085][T21332] vlan2: entered promiscuous mode [ 448.323285][T21332] gretap0: entered promiscuous mode [ 448.536549][T21345] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 449.103736][T21377] netlink: 'syz.1.7253': attribute type 1 has an invalid length. [ 449.111536][T21377] netlink: 236 bytes leftover after parsing attributes in process `syz.1.7253'. [ 449.144993][T21377] NCSI netlink: No device for ifindex 813332851 [ 449.260808][T21385] netlink: zone id is out of range [ 449.291918][T21385] netlink: zone id is out of range [ 449.312878][T21385] netlink: zone id is out of range [ 449.318172][T21385] netlink: zone id is out of range [ 449.373252][T21385] netlink: zone id is out of range [ 449.378565][T21385] netlink: zone id is out of range [ 449.748996][T21414] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7271'. [ 449.890097][ T13] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 449.927458][ T13] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 449.948087][ T13] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 449.978534][ T13] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 450.293527][T21442] tipc: Started in network mode [ 450.312811][T21442] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 450.320446][T21442] tipc: Enabled bearer , priority 14 [ 451.313740][T16041] tipc: Node number set to 10136234 [ 452.549547][T21550] netlink: 'syz.4.7337': attribute type 27 has an invalid length. [ 452.917352][T21564] team0: left allmulticast mode [ 452.929859][T21564] team_slave_0: left allmulticast mode [ 452.962128][T21564] team_slave_1: left allmulticast mode [ 452.975483][T21564] dummy0: left allmulticast mode [ 452.988038][T21564] bond3: left allmulticast mode [ 453.004473][T21564] team0: left promiscuous mode [ 453.012735][T21564] team_slave_0: left promiscuous mode [ 453.040416][T21564] team_slave_1: left promiscuous mode [ 453.059000][T21564] dummy0: left promiscuous mode [ 453.068372][T21564] bond3: left promiscuous mode [ 453.087232][T21564] bridge0: port 3(team0) entered disabled state [ 453.151036][T21564] team0: Port device dummy0 removed [ 453.167601][T21564] batadv0: left allmulticast mode [ 453.192324][T21564] batadv0: left promiscuous mode [ 453.213296][T21564] bridge0: port 4(batadv0) entered disabled state [ 453.259945][T21564] bridge_slave_0: left allmulticast mode [ 453.265843][T21564] bridge_slave_0: left promiscuous mode [ 453.271733][T21564] bridge0: port 1(bridge_slave_0) entered disabled state [ 453.291156][T21564] bridge_slave_1: left allmulticast mode [ 453.314197][T21564] bridge_slave_1: left promiscuous mode [ 453.322876][T21564] bridge0: port 2(bridge_slave_1) entered disabled state [ 453.377334][T21564] bond0: (slave bond_slave_0): Releasing backup interface [ 453.419819][T21584] __nla_validate_parse: 5 callbacks suppressed [ 453.419839][T21584] netlink: 240 bytes leftover after parsing attributes in process `syz.1.7353'. [ 453.440336][T21564] bond0: (slave bond_slave_1): Releasing backup interface [ 453.454266][T21564] team0: Port device team_slave_0 removed [ 453.464248][T21564] team0: Port device team_slave_1 removed [ 453.471513][T21564] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 453.490578][T21564] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 453.504589][T21564] net_ratelimit: 7 callbacks suppressed [ 453.504610][T21564] A link change request failed with some changes committed already. Interface veth2 may have been left with an inconsistent configuration, please check. [ 453.574728][T21582] bridge0: port 3(macvlan2) entered blocking state [ 453.581567][T21582] bridge0: port 3(macvlan2) entered disabled state [ 453.595220][T21582] macvlan2: entered allmulticast mode [ 453.607569][T21582] bridge0: entered allmulticast mode [ 453.616056][T21582] macvlan2: left allmulticast mode [ 453.621219][T21582] bridge0: left allmulticast mode [ 454.011715][T21612] netlink: 'syz.1.7367': attribute type 8 has an invalid length. [ 454.042784][T21612] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7367'. [ 454.147630][T21618] netlink: 96 bytes leftover after parsing attributes in process `syz.0.7370'. [ 454.189061][T21618] vlan0: entered allmulticast mode [ 454.475829][T21634] netlink: 204 bytes leftover after parsing attributes in process `syz.2.7378'. [ 454.503222][T21634] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7378'. [ 454.710464][T21645] tipc: Started in network mode [ 454.732815][T21645] tipc: Node identity fffffff7, cluster identity 4711 [ 454.752892][T21645] tipc: Node number set to 4294967287 [ 454.772504][T21652] tipc: Enabling of bearer rejected, failed to enable media [ 455.113207][T21670] netlink: 'syz.2.7396': attribute type 29 has an invalid length. [ 455.453651][T21691] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7407'. [ 456.000196][ T24] IPVS: starting estimator thread 0... [ 456.042469][T21722] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7420'. [ 456.099415][T21721] IPVS: using max 27 ests per chain, 64800 per kthread [ 456.526870][T21745] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7430'. [ 456.923590][T21770] x_tables: ip_tables: HMARK.0 target: invalid size 64 (kernel) != (user) 72 [ 456.943775][T21772] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7444'. [ 457.649271][T21813] smc: ib device syz2 ibport 1 applied user defined pnetid SYZ2 [ 457.841313][T21824] bridge0: entered promiscuous mode [ 457.847750][T21824] macsec1: entered promiscuous mode [ 457.857080][T21824] bridge0: port 2(macsec1) entered blocking state [ 457.866985][T21824] bridge0: port 2(macsec1) entered disabled state [ 457.881997][T21824] macsec1: entered allmulticast mode [ 457.890859][T21824] bridge0: entered allmulticast mode [ 457.914203][T21824] macsec1: left allmulticast mode [ 457.920701][T21824] bridge0: left allmulticast mode [ 457.936837][T21824] bridge0: left promiscuous mode [ 458.027603][T21830] IPv6: syztnl1: Disabled Multicast RS [ 458.462086][T21857] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.7481'. [ 459.231877][T21895] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7498'. [ 459.243025][T21895] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7498'. [ 459.702049][T21920] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7509'. [ 459.830494][T21926] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7513'. [ 461.086422][T21985] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7540'. [ 461.678021][T22017] netlink: 24960 bytes leftover after parsing attributes in process `syz.1.7555'. [ 461.700161][T22020] netlink: 68 bytes leftover after parsing attributes in process `syz.0.7557'. [ 462.106306][T22042] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7568'. [ 462.530311][T22063] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7579'. [ 463.666616][T22119] netlink: 'syz.0.7604': attribute type 1 has an invalid length. [ 463.802401][T22127] ÿÿÿÿÿÿ²DœL‰ rejected, failed to enable media [ 464.459217][T22160] tipc: Enabling of bearer rejected, failed to enable media [ 465.236079][T22209] tipc: Started in network mode [ 465.248585][T22209] tipc: Node identity ac14140f, cluster identity 4711 [ 465.265843][T22209] tipc: New replicast peer: 255.255.255.83 [ 465.286073][T22209] tipc: Enabled bearer , priority 10 [ 465.679050][T22234] netlink: 209588 bytes leftover after parsing attributes in process `syz.1.7659'. [ 466.413447][T16041] tipc: Node number set to 2886997007 [ 467.057960][T22306] tipc: Started in network mode [ 467.069494][T22306] tipc: Node identity fec0ffffffffffff0000000000000001, cluster identity 4711 [ 467.089526][T22307] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7694'. [ 467.105222][T22306] tipc: Enabling of bearer rejected, failed to enable media [ 467.125953][T22307] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7694'. [ 467.186344][T22307] netlink: 'syz.2.7694': attribute type 13 has an invalid length. [ 467.739104][T22335] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7708'. [ 467.758566][T22335] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7708'. [ 467.792860][T22335] netlink: 'syz.1.7708': attribute type 18 has an invalid length. [ 468.115744][T22357] TCP: TCP_TX_DELAY enabled [ 468.760428][T22393] RDS: rds_bind could not find a transport for 100:806:aaaa:aaaa:aaaa::, load rds_tcp or rds_rdma? [ 468.805841][T22395] tipc: Enabling of bearer rejected, failed to enable media [ 468.823541][T22397] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7736'. [ 469.596779][T22440] Bluetooth: MGMT ver 1.23 [ 469.775310][T22449] netlink: 'syz.1.7763': attribute type 1 has an invalid length. [ 470.144855][T22471] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7771'. [ 470.257413][T22477] x_tables: ip_tables: udp match: only valid for protocol 17 [ 470.314986][T22481] bond0: Unable to set down delay as MII monitoring is disabled [ 470.503743][T22489] netlink: 100 bytes leftover after parsing attributes in process `syz.2.7782'. [ 470.688645][T22501] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7788'. [ 470.723640][T22501] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7788'. [ 470.753686][T22501] netlink: 'syz.1.7788': attribute type 18 has an invalid length. [ 470.967435][T22517] netlink: 'syz.1.7796': attribute type 15 has an invalid length. [ 471.562894][T22550] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7814'. [ 471.961420][T22578] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7824'. [ 472.654983][T22607] netlink: 312 bytes leftover after parsing attributes in process `syz.2.7837'. [ 474.637868][T22712] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7887'. [ 476.143969][T22792] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7926'. [ 476.180690][T22792] smc: net device bond0 applied user defined pnetid S [ 476.489635][T22808] dvmrp8: entered allmulticast mode [ 476.510642][T22810] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7935'. [ 476.538933][T22807] dvmrp8: left allmulticast mode [ 478.122643][T22888] bridge5: entered promiscuous mode [ 478.129650][T22888] bridge5: entered allmulticast mode [ 478.145806][T22888] team0: Port device bridge5 added [ 479.340465][T22953] syz.3.8006 (22953) used greatest stack depth: 17992 bytes left [ 479.389961][T22961] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 480.064951][T23000] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.8028'. [ 480.345213][T23018] netlink: 83 bytes leftover after parsing attributes in process `syz.1.8038'. [ 480.508174][T23026] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8041'. [ 480.552852][T23026] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8041'. [ 480.624332][T23033] netlink: 348 bytes leftover after parsing attributes in process `syz.2.8045'. [ 480.686850][T23035] netlink: 'syz.0.8046': attribute type 1 has an invalid length. [ 480.735638][T23035] netlink: 244 bytes leftover after parsing attributes in process `syz.0.8046'. [ 480.901308][T23049] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8051'. [ 481.007593][T23056] netlink: 216 bytes leftover after parsing attributes in process `syz.0.8057'. [ 481.321082][T23075] __nla_validate_parse: 2 callbacks suppressed [ 481.321102][T23075] netlink: 336 bytes leftover after parsing attributes in process `syz.3.8065'. [ 481.792443][T23095] : entered promiscuous mode [ 482.196083][T23115] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8085'. [ 482.229852][T23115] tipc: Enabled bearer , priority 18 [ 482.408626][T23127] sctp: [Deprecated]: syz.2.8091 (pid 23127) Use of int in max_burst socket option. [ 482.408626][T23127] Use struct sctp_assoc_value instead [ 482.421637][T23129] ieee802154 phy1 wpan1: encryption failed: -22 [ 483.983311][T23196] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8120'. [ 485.011037][T23255] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8147'. [ 485.347370][T23269] netlink: 504 bytes leftover after parsing attributes in process `syz.0.8154'. [ 485.467107][T23279] netlink: 52 bytes leftover after parsing attributes in process `syz.1.8159'. [ 485.634106][T23286] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8160'. [ 485.696924][T23286] netlink: 'syz.1.8160': attribute type 30 has an invalid length. [ 485.722668][T23286] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8160'. [ 487.352291][T23342] netlink: 'syz.0.8185': attribute type 2 has an invalid length. [ 487.395951][T23342] þ: entered promiscuous mode [ 488.501451][T23406] netlink: 'syz.0.8217': attribute type 1 has an invalid length. [ 488.715323][T23418] netlink: 34 bytes leftover after parsing attributes in process `syz.4.8222'. [ 488.743339][T23418] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8222'. [ 489.203241][T23443] netlink: 'syz.4.8235': attribute type 3 has an invalid length. [ 489.713880][T23477] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8251'. [ 489.723823][T23477] tipc: Invalid UDP bearer configuration [ 489.723885][T23477] tipc: Enabling of bearer rejected, failed to enable media [ 489.751463][T23479] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 490.942377][T23545] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8281'. [ 491.419580][T23573] netlink: 280 bytes leftover after parsing attributes in process `syz.1.8295'. [ 491.469229][T23578] netlink: 104 bytes leftover after parsing attributes in process `syz.4.8297'. [ 491.756188][T23593] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8305'. [ 491.787373][T23595] netlink: 'syz.3.8306': attribute type 4 has an invalid length. [ 491.823574][T23595] netlink: 'syz.3.8306': attribute type 4 has an invalid length. [ 491.965141][T23607] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8311'. [ 492.813870][T23648] bond0: entered promiscuous mode [ 492.853458][T23648] 8021q: adding VLAN 0 to HW filter on device bond0 [ 493.324009][T23678] netlink: 44 bytes leftover after parsing attributes in process `syz.2.8344'. [ 493.445055][T23682] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 493.781075][T23698] tipc: Enabled bearer , priority 10 [ 494.756929][T23756] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8381'. [ 494.819991][T23764] netlink: 72 bytes leftover after parsing attributes in process `syz.4.8385'. [ 494.893151][ T24] tipc: Node number set to 20905985 [ 495.326449][T23795] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8398'. [ 495.354808][T23795] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8398'. [ 495.397986][T23797] netlink: 'syz.2.8400': attribute type 3 has an invalid length. [ 495.482776][T23797] netlink: 'syz.2.8400': attribute type 1 has an invalid length. [ 495.516651][T23797] netlink: 192 bytes leftover after parsing attributes in process `syz.2.8400'. [ 495.529028][T23797] NCSI netlink: No device for ifindex 0 [ 496.595531][T23855] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8426'. [ 496.653162][T23855] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8426'. [ 496.662177][T23855] netlink: 'syz.2.8426': attribute type 19 has an invalid length. [ 497.028357][T23883] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8434'. [ 497.630787][T23897] netlink: 'syz.3.8445': attribute type 2 has an invalid length. [ 497.696006][T23901] netlink: 184 bytes leftover after parsing attributes in process `syz.1.8446'. [ 497.785798][T23904] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8449'. [ 499.225016][T23965] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 499.670389][T23991] netlink: 'syz.2.8492': attribute type 10 has an invalid length. [ 499.693767][T23991] batman_adv: batadv0: Adding interface: team0 [ 499.701459][T23991] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 499.736001][T23991] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 499.755273][T23998] netlink: 'syz.2.8492': attribute type 10 has an invalid length. [ 499.804307][T23998] __nla_validate_parse: 2 callbacks suppressed [ 499.804327][T23998] netlink: 2 bytes leftover after parsing attributes in process `syz.2.8492'. [ 499.852849][T23998] team0: entered promiscuous mode [ 499.858076][T23998] bond3: entered promiscuous mode [ 499.879596][T23998] 8021q: adding VLAN 0 to HW filter on device team0 [ 499.889416][T23998] batman_adv: batadv0: Interface activated: team0 [ 499.909291][T23998] batman_adv: batadv0: Interface deactivated: team0 [ 499.923072][T23998] batman_adv: batadv0: Removing interface: team0 [ 500.536083][T23994] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 501.061006][T23998] bridge0: port 1(team0) entered blocking state [ 501.068166][T23998] bridge0: port 1(team0) entered disabled state [ 501.079828][T23998] team0: entered allmulticast mode [ 501.085967][T23998] bond3: entered allmulticast mode [ 501.272022][T24021] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 501.316593][T24025] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 501.599530][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.359290][T24143] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8562'. [ 503.403193][T24143] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8562'. [ 503.452781][T24149] netlink: 'syz.1.8564': attribute type 2 has an invalid length. [ 503.815661][T24169] vxcan1: MTU too low for tipc bearer [ 503.821140][T24169] tipc: Enabling of bearer rejected, failed to enable media [ 503.846893][T24173] x_tables: ip6_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 504.544201][T24204] netlink: 44 bytes leftover after parsing attributes in process `syz.0.8590'. [ 504.733305][T24213] tipc: Enabling of bearer rejected, failed to enable media [ 505.061797][T24224] netlink: 17 bytes leftover after parsing attributes in process `syz.4.8600'. [ 505.425325][T24244] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8609'. [ 505.732221][T24263] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 506.071128][T24283] xt_socket: unknown flags 0xfc [ 506.229120][T24291] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8633'. [ 506.501038][T24305] sock: sock_set_timeout: `syz.2.8639' (pid 24305) tries to set negative timeout [ 506.755165][T24321] netlink: 48 bytes leftover after parsing attributes in process `syz.2.8645'. [ 507.726342][T24355] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8663'. [ 507.765167][T24355] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 507.806309][T24355] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 508.187219][T24365] netlink: 'syz.2.8667': attribute type 6 has an invalid length. [ 508.206864][T24365] netlink: 'syz.2.8667': attribute type 7 has an invalid length. [ 508.222635][T24365] netlink: 'syz.2.8667': attribute type 8 has an invalid length. [ 508.805801][T24389] netlink: 'syz.4.8678': attribute type 1 has an invalid length. [ 509.273864][T24412] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8688'. [ 510.639622][T24478] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8719'. [ 510.656016][T24479] tipc: Invalid UDP bearer configuration [ 510.656073][T24479] tipc: Enabling of bearer rejected, failed to enable media [ 510.818360][T24490] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8722'. [ 510.832302][T24488] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8724'. [ 510.851951][T24490] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8722'. [ 511.164044][T24508] netlink: 32 bytes leftover after parsing attributes in process `syz.3.8733'. [ 511.356970][T24522] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8738'. [ 511.625865][T24539] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8747'. [ 511.634991][T24539] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8747'. [ 511.811879][T24543] bond0: left promiscuous mode [ 512.010656][T24558] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8756'. [ 512.419843][T24576] dvmrp1: entered allmulticast mode [ 512.464569][T24576] dvmrp1: left allmulticast mode [ 512.576251][T24583] nbd: must specify a size in bytes for the device [ 512.930626][T24599] netlink: 'syz.3.8777': attribute type 10 has an invalid length. [ 512.983840][T24599] batman_adv: batadv0: Adding interface: team0 [ 512.985183][T24604] netlink: 'syz.3.8777': attribute type 10 has an invalid length. [ 513.005123][T24599] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 513.031666][T24604] netlink: 2 bytes leftover after parsing attributes in process `syz.3.8777'. [ 513.072246][T24599] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 513.126143][T24610] netlink: 'syz.4.8782': attribute type 1 has an invalid length. [ 513.134089][T24604] team0: entered promiscuous mode [ 513.134113][T24604] team_slave_0: entered promiscuous mode [ 513.134363][T24604] team_slave_1: entered promiscuous mode [ 513.134565][T24604] geneve0: entered promiscuous mode [ 513.169550][T24604] 8021q: adding VLAN 0 to HW filter on device team0 [ 513.197806][T24604] batman_adv: batadv0: Interface activated: team0 [ 513.230606][T24604] batman_adv: batadv0: Interface deactivated: team0 [ 513.246807][T24604] batman_adv: batadv0: Removing interface: team0 [ 513.262937][T24604] bridge0: port 3(team0) entered blocking state [ 513.283078][T24604] bridge0: port 3(team0) entered disabled state [ 513.299959][T24604] team0: entered allmulticast mode [ 513.316037][T24604] team_slave_0: entered allmulticast mode [ 513.327113][T24604] team_slave_1: entered allmulticast mode [ 513.336341][T24604] geneve0: entered allmulticast mode [ 513.342001][T24616] Bluetooth: MGMT ver 1.23 [ 514.265105][T24664] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 514.365221][T24671] xt_connbytes: Forcing CT accounting to be enabled [ 514.394524][T24671] set match dimension is over the limit! [ 516.747754][T24779] syz.2.8864 (24779) used obsolete PPPIOCDETACH ioctl [ 516.886032][T24787] netlink: 'syz.0.8868': attribute type 3 has an invalid length. [ 517.139189][T24802] __nla_validate_parse: 6 callbacks suppressed [ 517.139209][T24802] netlink: 252 bytes leftover after parsing attributes in process `syz.4.8876'. [ 517.163401][T24802] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8876'. [ 517.815307][T24843] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8895'. [ 518.488009][T24874] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8911'. [ 518.573959][T24877] tc_dump_action: action bad kind [ 518.958111][T24881] udevd[24881]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 519.006142][T24881] udevd[24881]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 519.507515][T24928] tipc: Enabling of bearer rejected, failed to enable media [ 519.932881][T24950] netlink: 'syz.0.8947': attribute type 1 has an invalid length. [ 519.940775][T24950] netlink: 204 bytes leftover after parsing attributes in process `syz.0.8947'. [ 519.975139][T24950] netlink: 'syz.0.8947': attribute type 1 has an invalid length. [ 520.968142][T25005] netlink: 76 bytes leftover after parsing attributes in process `syz.1.8973'. [ 520.981081][T25005] nbd: illegal input index 65508 [ 521.611566][T25044] gre0: left promiscuous mode [ 521.955205][T25066] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9002'. [ 523.589903][T25153] netlink: 14 bytes leftover after parsing attributes in process `syz.0.9048'. [ 523.627876][T25154] IPVS: Error connecting to the multicast addr [ 524.420982][T25193] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9065'. [ 524.495722][T25198] IPVS: sync thread started: state = BACKUP, mcast_ifn = wg0, syncid = 4, id = 0 [ 524.810192][T25214] IPVS: Error connecting to the multicast addr [ 525.112493][T25228] netlink: 'syz.2.9081': attribute type 1 has an invalid length. [ 525.411632][T25249] netlink: 'syz.2.9091': attribute type 6 has an invalid length. [ 525.431734][T25249] netlink: 'syz.2.9091': attribute type 6 has an invalid length. [ 525.488554][T25253] tipc: Enabling of bearer <5dp:s> rejected, media not registered [ 525.780377][T25270] netlink: 332 bytes leftover after parsing attributes in process `syz.2.9100'. [ 525.793433][T25270] netlink: 104 bytes leftover after parsing attributes in process `syz.2.9100'. [ 525.809113][T25270] netlink: 32 bytes leftover after parsing attributes in process `syz.2.9100'. [ 525.837251][T25273] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9103'. [ 526.354307][T25299] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9115'. [ 527.214330][T25346] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 527.499633][T25360] netlink: 48 bytes leftover after parsing attributes in process `syz.1.9146'. [ 527.522878][T25360] netlink: 100 bytes leftover after parsing attributes in process `syz.1.9146'. [ 528.512182][T25408] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9169'. [ 528.612778][T25416] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9173'. [ 528.628022][T25416] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9173'. [ 528.729161][T25422] netlink: 272 bytes leftover after parsing attributes in process `syz.1.9176'. [ 528.832800][T25426] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9177'. [ 528.857714][T25426] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9177'. [ 528.960279][T25434] netlink: 'syz.1.9182': attribute type 11 has an invalid length. [ 529.022210][T25438] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9184'. [ 529.585415][T25466] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9198'. [ 530.932413][T25535] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9231'. [ 530.941640][T25535] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9231'. [ 530.951333][T25535] netlink: 'syz.4.9231': attribute type 12 has an invalid length. [ 530.973836][T25535] netlink: 'syz.4.9231': attribute type 11 has an invalid length. [ 532.083937][ T5851] Bluetooth: hci2: command 0x0406 tx timeout [ 532.399602][T25575] netlink: 'syz.3.9251': attribute type 178 has an invalid length. [ 532.489161][T25581] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9254'. [ 534.516808][T25698] tun0: tun_chr_ioctl cmd 1074025681 [ 535.937245][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 537.578762][T25779] __nla_validate_parse: 3 callbacks suppressed [ 537.578784][T25779] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9340'. [ 537.631002][T25779] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9340'. [ 537.682683][ T3428] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 537.729052][ T5962] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 537.737950][ T3428] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 538.237939][T25790] Bluetooth: hci1: Opcode 0x080f failed: -4 [ 538.642150][ T5962] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 538.713632][ T5962] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 540.313137][ T5851] Bluetooth: hci1: command 0x0406 tx timeout [ 542.140694][T25870] tap0: tun_chr_ioctl cmd 1074025680 [ 542.152759][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 545.861787][T25933] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9416'. [ 545.901918][T25933] netlink: 60 bytes leftover after parsing attributes in process `syz.4.9416'. [ 548.508856][T25976] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9436'. [ 549.067420][T25982] netlink: 'syz.0.9438': attribute type 10 has an invalid length. [ 549.089399][T25982] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9438'. [ 550.349112][T25976] team_slave_0: left promiscuous mode [ 550.370184][T25976] team0 (unregistering): Port device team_slave_0 removed [ 550.390981][T25976] team_slave_1: left promiscuous mode [ 550.432004][T25976] team0 (unregistering): Port device team_slave_1 removed [ 550.485633][T25976] team0 (unregistering): Port device bridge5 removed [ 550.580432][T25982] dummy0: entered promiscuous mode [ 550.600826][T25982] dummy0: entered allmulticast mode [ 550.617028][T25982] bridge0: port 2(dummy0) entered blocking state [ 550.639118][T25982] bridge0: port 2(dummy0) entered disabled state [ 550.669897][T25982] bridge0: port 2(dummy0) entered blocking state [ 550.676482][T25982] bridge0: port 2(dummy0) entered forwarding state [ 550.872727][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 561.242526][ C1] sched: DL replenish lagged too much [ 563.188515][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 567.530713][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 568.231468][T26051] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9465'. [ 569.199619][T26043] wg1 speed is unknown, defaulting to 1000 [ 599.113469][T26043] vxcan1 speed is unknown, defaulting to 1000 [ 599.572004][T26112] netlink: 104 bytes leftover after parsing attributes in process `syz.4.9485'. [ 600.158617][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 607.478216][ T51] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 607.537547][ T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 607.767387][ T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 607.791587][ T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 608.212242][ T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 611.145705][ T5862] Bluetooth: hci5: command tx timeout [ 613.498830][ T5862] Bluetooth: hci5: command tx timeout [ 614.690959][T26119] wg1 speed is unknown, defaulting to 1000 [ 615.618356][ T5862] Bluetooth: hci5: command tx timeout [ 617.825513][ T5862] Bluetooth: hci5: command tx timeout [ 624.672007][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 629.186048][T26124] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 629.284228][T26124] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 629.355907][T26124] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 629.471694][T26124] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 629.516870][T26124] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 632.283617][T26124] Bluetooth: hci4: command tx timeout [ 634.421136][T26124] Bluetooth: hci4: command tx timeout [ 636.576695][T26124] Bluetooth: hci4: command tx timeout [ 637.885660][ T5862] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 638.080871][ T5862] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 638.299012][ T5862] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 638.523809][ T5862] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 638.594162][ T5862] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 638.659306][T26124] Bluetooth: hci4: command tx timeout [ 641.145035][ T5862] Bluetooth: hci6: command tx timeout [ 643.283612][ T5862] Bluetooth: hci6: command tx timeout [ 645.375806][ T5862] Bluetooth: hci6: command tx timeout [ 647.466541][ T5862] Bluetooth: hci6: command tx timeout [ 648.817110][T26124] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 648.889295][T26124] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 648.911301][T26124] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 648.949648][T26124] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 648.971608][T26124] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 651.902122][ T5851] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 651.926190][ T5851] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 651.949768][ T5851] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 651.990964][ T5851] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 652.018248][ T5851] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 660.047520][T26172] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 660.071341][T26172] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 660.108574][T26172] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 660.146440][T26172] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 660.169251][T26172] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 668.612334][T26172] Bluetooth: hci8: command tx timeout [ 668.628541][ T5851] Bluetooth: hci7: command tx timeout [ 668.644782][T26124] Bluetooth: hci9: command tx timeout [ 670.562705][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 670.741752][T26172] Bluetooth: hci8: command tx timeout [ 670.757483][T26172] Bluetooth: hci9: command tx timeout [ 670.831911][T26172] Bluetooth: hci7: command tx timeout [ 671.561462][T26119] vxcan1 speed is unknown, defaulting to 1000 [ 672.883292][T26124] Bluetooth: hci7: command tx timeout [ 672.888770][T26124] Bluetooth: hci9: command tx timeout [ 672.897748][T26172] Bluetooth: hci8: command tx timeout [ 674.971931][T26124] Bluetooth: hci9: command tx timeout [ 674.994133][T26124] Bluetooth: hci8: command tx timeout [ 674.999596][T26124] Bluetooth: hci7: command tx timeout [ 678.285912][T26124] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 678.306240][T26124] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 678.325794][T26124] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 678.380253][T26124] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 678.477630][T26124] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 680.963291][T26124] Bluetooth: hci0: command tx timeout [ 683.072720][T26124] Bluetooth: hci0: command tx timeout [ 685.131291][T26124] Bluetooth: hci0: command tx timeout [ 686.060568][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.217127][T26124] Bluetooth: hci0: command tx timeout [ 688.570301][ T5851] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 688.676079][ T5851] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 688.891261][ T5851] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 688.917155][ T5851] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 688.986949][ T5851] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 691.612375][ T5851] Bluetooth: hci2: command tx timeout [ 693.741801][ T5851] Bluetooth: hci2: command tx timeout [ 695.853294][ T5851] Bluetooth: hci2: command tx timeout [ 697.947983][ T5851] Bluetooth: hci2: command tx timeout [ 700.932144][T26124] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 701.008570][T26124] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 701.030791][T26124] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 701.071938][T26124] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 701.094722][T26124] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 703.301492][T26124] Bluetooth: hci3: command tx timeout [ 705.462953][T26124] Bluetooth: hci3: command tx timeout [ 707.537938][T26124] Bluetooth: hci3: command tx timeout [ 709.189883][ T5851] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 709.216526][ T5851] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 709.261590][ T5851] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 709.288146][ T5851] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 709.311888][ T5851] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 709.653147][T26124] Bluetooth: hci3: command tx timeout [ 711.617723][T26124] Bluetooth: hci4: command tx timeout [ 713.712334][T26124] Bluetooth: hci4: command tx timeout [ 715.773400][T26124] Bluetooth: hci4: command tx timeout [ 717.953723][T26124] Bluetooth: hci4: command tx timeout [ 721.250031][ T5851] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 721.365080][ T5851] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 721.389414][ T5851] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 721.428021][ T5851] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 721.450425][ T5851] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 723.604754][T26124] Bluetooth: hci6: command tx timeout [ 725.687153][T26124] Bluetooth: hci6: command tx timeout [ 727.772023][T26124] Bluetooth: hci6: command tx timeout [ 729.966239][T26124] Bluetooth: hci6: command tx timeout [ 734.192266][ T5851] Bluetooth: hci5: command 0x0406 tx timeout [ 740.835054][ T5851] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 740.924385][ T5851] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 740.953847][ T5851] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 741.102365][ T5851] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 741.229612][ T5851] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 743.603730][ T5851] Bluetooth: hci7: command tx timeout [ 745.734250][ T5851] Bluetooth: hci7: command tx timeout [ 747.455903][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.154210][ T5851] Bluetooth: hci7: command tx timeout [ 750.289051][ T5851] Bluetooth: hci7: command tx timeout [ 752.965419][T26124] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 752.992227][T26124] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 753.061276][T26124] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 753.080594][T26124] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 753.100042][T26124] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 756.169977][ T5851] Bluetooth: hci0: command tx timeout [ 757.821374][T26172] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 757.845043][T26172] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 757.963663][T26172] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 757.971944][T26172] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 758.006041][T26172] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 758.248134][T26172] Bluetooth: hci0: command tx timeout [ 760.251020][T26172] Bluetooth: hci8: command tx timeout [ 760.327391][T26172] Bluetooth: hci0: command tx timeout [ 762.335495][T26172] Bluetooth: hci8: command tx timeout [ 762.498891][T26172] Bluetooth: hci0: command tx timeout [ 764.595314][ T5851] Bluetooth: hci8: command tx timeout [ 766.825660][ T5851] Bluetooth: hci8: command tx timeout [ 770.233559][T26172] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 770.258928][T26172] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 770.294810][T26172] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 770.319831][T26172] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 770.391959][T26172] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 772.655193][T26172] Bluetooth: hci9: command tx timeout [ 774.842600][T26172] Bluetooth: hci9: command tx timeout [ 776.891874][T26172] Bluetooth: hci9: command tx timeout [ 778.998308][T26172] Bluetooth: hci9: command tx timeout [ 781.760439][ T5851] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 781.844573][ T5851] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 781.868104][ T5851] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 781.891627][ T5851] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 782.287802][ T5851] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 784.983629][ T5851] Bluetooth: hci10: command tx timeout [ 787.138408][ T5851] Bluetooth: hci10: command tx timeout [ 789.290402][ T5851] Bluetooth: hci10: command tx timeout [ 791.374129][ T5851] Bluetooth: hci10: command tx timeout [ 808.758562][T26172] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 808.788845][T26172] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 808.792665][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 808.958669][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.109892][T26172] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 809.140395][T26172] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 809.312081][T26172] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 813.054342][T26172] Bluetooth: hci2: command tx timeout [ 815.219189][T26172] Bluetooth: hci2: command tx timeout [ 817.514566][ T5851] Bluetooth: hci2: command tx timeout [ 817.649029][ T5851] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 817.672334][ T5851] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 817.697521][ T5851] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 817.860629][ T5851] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 817.896643][ T5851] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 819.608257][ T5851] Bluetooth: hci2: command tx timeout [ 820.091825][ T5851] Bluetooth: hci3: command tx timeout [ 821.057569][T26206] wg1 speed is unknown, defaulting to 1000 [ 822.176575][ T5851] Bluetooth: hci3: command tx timeout [ 823.240149][T26172] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 823.280130][T26172] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 823.316916][T26172] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 823.339046][T26172] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 823.377282][T26172] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 824.244185][T26172] Bluetooth: hci3: command tx timeout [ 825.688148][T26172] Bluetooth: hci7: command tx timeout [ 826.330048][T26172] Bluetooth: hci3: command tx timeout [ 827.767272][T26172] Bluetooth: hci7: command tx timeout [ 829.858293][T26172] Bluetooth: hci7: command tx timeout [ 831.110871][ T5851] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 831.170748][ T5851] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 831.221276][ T5851] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 831.258107][ T5851] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 831.280145][ T5851] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 831.930757][T26172] Bluetooth: hci7: command tx timeout [ 833.763675][T26172] Bluetooth: hci11: command tx timeout [ 835.863664][ T5851] Bluetooth: hci11: command tx timeout [ 836.657728][ T5851] Bluetooth: hci4: command 0x0406 tx timeout [ 837.946115][ T5851] Bluetooth: hci11: command tx timeout [ 840.362186][T26172] Bluetooth: hci11: command tx timeout [ 847.031390][ T5851] Bluetooth: hci6: command 0x0406 tx timeout [ 852.818004][ T5851] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 852.838330][ T5851] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 852.857762][ T5851] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 852.880819][ T5851] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 852.920410][ T5851] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 855.365699][T26172] Bluetooth: hci12: command tx timeout [ 857.438169][T26172] Bluetooth: hci12: command tx timeout [ 859.536996][T26172] Bluetooth: hci12: command tx timeout [ 861.744265][T26172] Bluetooth: hci12: command tx timeout [ 864.761880][ T5851] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 864.785457][ T5851] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 864.811377][ T5851] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 864.839050][ T5851] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 864.861692][ T5851] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 869.620921][T26172] Bluetooth: hci13: command tx timeout [ 870.854215][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.763361][T26172] Bluetooth: hci13: command tx timeout [ 873.875852][T26172] Bluetooth: hci13: command tx timeout [ 875.337967][T26214] wg1 speed is unknown, defaulting to 1000 [ 875.933301][T26172] Bluetooth: hci13: command tx timeout [ 876.740546][ T5851] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 876.829341][ T5851] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 877.002180][ T5851] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 877.299357][ T5851] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 877.327005][ T5851] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 879.713676][ T5851] Bluetooth: hci0: command tx timeout [ 881.767878][ T5851] Bluetooth: hci0: command tx timeout [ 882.949179][T26206] vxcan1 speed is unknown, defaulting to 1000 [ 883.916878][ T5851] Bluetooth: hci0: command tx timeout [ 886.022759][ T5851] Bluetooth: hci0: command tx timeout [ 890.636737][T26172] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 890.704687][T26172] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 890.728764][T26172] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 890.751067][T26172] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 890.788846][T26172] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 899.148228][ T5851] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 899.259934][ T5851] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 899.293540][ T5851] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 899.406616][ T5851] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 899.501595][ T5851] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 900.483427][ T5851] Bluetooth: hci8: command tx timeout [ 902.515686][ T5851] Bluetooth: hci9: command tx timeout [ 902.564634][ T5851] Bluetooth: hci8: command tx timeout [ 904.665207][T26172] Bluetooth: hci8: command tx timeout [ 904.684197][T26172] Bluetooth: hci9: command tx timeout [ 906.746864][ T5851] Bluetooth: hci9: command tx timeout [ 906.766631][T26172] Bluetooth: hci8: command tx timeout [ 907.540699][T26303] wg1 speed is unknown, defaulting to 1000 [ 907.590564][T26214] vxcan1 speed is unknown, defaulting to 1000 [ 908.529246][T26328] wg1 speed is unknown, defaulting to 1000 [ 908.815577][ T5851] Bluetooth: hci9: command tx timeout [ 912.246880][T26310] wg1 speed is unknown, defaulting to 1000 [ 914.721826][T26297] wg1 speed is unknown, defaulting to 1000 [ 915.642101][T26172] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 915.666155][T26172] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 915.758374][ T3428] bridge0: port 2(dummy0) entered disabled state [ 915.861996][T26172] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 915.888390][T26172] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 915.946802][T26172] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 917.457130][ T3428] gretap0: left promiscuous mode [ 917.499010][ T3428] bridge0: port 3(gretap0) entered disabled state [ 918.418507][ T3428] bridge_slave_0: left allmulticast mode [ 918.565900][ T3428] bridge_slave_0: left promiscuous mode [ 918.605270][ T3428] bridge0: port 1(bridge_slave_0) entered disabled state [ 918.883684][ T5851] Bluetooth: hci2: command tx timeout [ 920.971302][ T5851] Bluetooth: hci2: command tx timeout [ 923.115074][ T5851] Bluetooth: hci2: command tx timeout [ 923.815463][T26124] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 923.939633][T26124] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 923.980636][T26124] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 924.059083][T26124] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 924.261089][T26124] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 925.213320][T26124] Bluetooth: hci2: command tx timeout [ 926.569867][ T5851] Bluetooth: hci3: command tx timeout [ 928.644482][T26124] Bluetooth: hci3: command tx timeout [ 930.743152][T26124] Bluetooth: hci3: command tx timeout [ 931.809576][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.817259][T26124] Bluetooth: hci3: command tx timeout [ 935.788546][T26124] Bluetooth: hci10: Opcode 0x0c03 failed: -110 [ 935.858976][T26124] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 935.887437][T26124] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 937.881840][T26362] Bluetooth: hci10: Opcode 0x0c03 failed: -110 [ 946.458254][ T5851] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 946.484750][ T5851] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 946.529150][ T5851] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 946.556287][ T5851] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 946.582185][ T5851] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 949.192003][T26172] Bluetooth: hci10: command tx timeout [ 949.293410][T26172] Bluetooth: hci7: command 0x0406 tx timeout [ 951.290807][ T5851] Bluetooth: hci10: command tx timeout [ 953.372093][T26124] Bluetooth: hci10: command tx timeout [ 953.409285][T26124] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 953.444618][T26124] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 953.511232][T26124] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 953.740749][T26124] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 953.822238][T26124] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 954.486878][T26124] Bluetooth: hci11: command 0x0406 tx timeout [ 955.459631][T26124] Bluetooth: hci10: command tx timeout [ 956.439383][T26124] Bluetooth: hci14: command tx timeout [ 957.239367][T26172] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 957.265967][T26172] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 957.429660][T26172] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 957.548414][T26172] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 957.576374][T26172] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 958.509528][T26172] Bluetooth: hci14: command tx timeout [ 959.915324][T26172] Bluetooth: hci15: command tx timeout [ 960.696684][T26172] Bluetooth: hci14: command tx timeout [ 962.035361][T26172] Bluetooth: hci15: command tx timeout [ 962.841075][T26172] Bluetooth: hci14: command tx timeout [ 964.098886][T26172] Bluetooth: hci15: command tx timeout [ 965.740697][T26124] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 965.799191][T26124] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 965.839209][T26124] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 965.885869][T26124] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 965.907469][T26124] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 966.174936][T26172] Bluetooth: hci15: command tx timeout [ 968.104480][T26172] Bluetooth: hci16: command tx timeout [ 970.485357][T26172] Bluetooth: hci16: command tx timeout [ 972.762378][T26172] Bluetooth: hci16: command tx timeout [ 974.822094][T26172] Bluetooth: hci16: command tx timeout [ 979.920796][T26124] Bluetooth: hci12: command 0x0406 tx timeout [ 981.628738][T26124] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 981.866005][T26124] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 981.900916][T26124] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 981.939034][T26124] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 981.960450][T26124] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 984.333283][T26124] Bluetooth: hci17: command tx timeout [ 986.431525][T26124] Bluetooth: hci17: command tx timeout [ 988.502651][T26124] Bluetooth: hci17: command tx timeout [ 990.592505][T26124] Bluetooth: hci17: command tx timeout [ 993.287490][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 996.093157][T26124] Bluetooth: hci13: command 0x0406 tx timeout [ 1000.325422][T26124] Bluetooth: hci0: command 0x0406 tx timeout [ 1004.260979][T26124] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 1004.280873][T26124] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 1004.300176][T26124] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 1004.321864][T26124] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 1004.340931][T26124] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 1006.600007][T26172] Bluetooth: hci18: command tx timeout [ 1008.642614][T26172] Bluetooth: hci18: command tx timeout [ 1010.721549][T26172] Bluetooth: hci18: command tx timeout [ 1012.802609][T26172] Bluetooth: hci18: command tx timeout [ 1020.863184][T26124] Bluetooth: hci8: command 0x0406 tx timeout [ 1023.169301][T26124] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 1023.328236][T26124] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 1023.412071][T26124] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 1023.446116][T26124] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 1023.464761][T26124] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 1025.788518][ T5851] Bluetooth: hci19: command tx timeout [ 1026.179583][ T5851] Bluetooth: hci20: unexpected cc 0x0c03 length: 249 > 1 [ 1026.277166][ T5851] Bluetooth: hci9: command 0x0406 tx timeout [ 1026.285899][T26124] Bluetooth: hci20: unexpected cc 0x1003 length: 249 > 9 [ 1026.286732][T26124] Bluetooth: hci20: unexpected cc 0x1001 length: 249 > 9 [ 1026.287839][T26124] Bluetooth: hci20: unexpected cc 0x0c23 length: 249 > 4 [ 1026.288977][T26124] Bluetooth: hci20: unexpected cc 0x0c38 length: 249 > 2 [ 1027.847074][T26406] Bluetooth: hci19: command tx timeout [ 1028.898114][T26406] Bluetooth: hci20: command tx timeout [ 1029.399561][ T5851] Bluetooth: hci21: unexpected cc 0x0c03 length: 249 > 1 [ 1029.438668][ T5851] Bluetooth: hci21: unexpected cc 0x1003 length: 249 > 9 [ 1029.489821][ T5851] Bluetooth: hci21: unexpected cc 0x1001 length: 249 > 9 [ 1029.574180][ T5851] Bluetooth: hci21: unexpected cc 0x0c23 length: 249 > 4 [ 1029.597075][ T5851] Bluetooth: hci21: unexpected cc 0x0c38 length: 249 > 2 [ 1029.937579][T26406] Bluetooth: hci19: command tx timeout [ 1030.975699][T26406] Bluetooth: hci20: command tx timeout [ 1031.949471][T26406] Bluetooth: hci21: command tx timeout [ 1032.028101][T26406] Bluetooth: hci19: command tx timeout [ 1033.049012][ T5851] Bluetooth: hci20: command tx timeout [ 1034.127158][ T5851] Bluetooth: hci21: command tx timeout [ 1035.127068][ T5851] Bluetooth: hci20: command tx timeout [ 1036.166766][ T5851] Bluetooth: hci21: command tx timeout [ 1038.257314][ T5851] Bluetooth: hci21: command tx timeout [ 1041.408979][T26406] Bluetooth: hci2: command 0x0406 tx timeout [ 1042.516140][T26124] Bluetooth: hci22: unexpected cc 0x0c03 length: 249 > 1 [ 1042.541385][T26124] Bluetooth: hci22: unexpected cc 0x1003 length: 249 > 9 [ 1042.567328][T26124] Bluetooth: hci22: unexpected cc 0x1001 length: 249 > 9 [ 1042.609637][T26124] Bluetooth: hci22: unexpected cc 0x0c23 length: 249 > 4 [ 1042.647622][T26124] Bluetooth: hci22: unexpected cc 0x0c38 length: 249 > 2 [ 1051.621612][ T5851] Bluetooth: hci3: command 0x0406 tx timeout [ 1052.823946][ T5851] Bluetooth: hci22: command tx timeout [ 1054.852966][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.995789][T26406] Bluetooth: hci22: command tx timeout [ 1057.143184][T26406] Bluetooth: hci22: command tx timeout [ 1059.217911][T26406] Bluetooth: hci22: command tx timeout [ 1066.740990][ T31] INFO: task kworker/u8:10:16754 blocked for more than 143 seconds. [ 1066.761270][ T31] Not tainted 6.16.0-rc5-syzkaller-01461-g511ad4c26446 #0 [ 1066.801163][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1066.837296][ T31] task:kworker/u8:10 state:D stack:24336 pid:16754 tgid:16754 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 1066.989648][ T31] Workqueue: events_unbound linkwatch_event [ 1067.190519][ T31] Call Trace: [ 1067.269924][ T31] [ 1067.511432][ T31] __schedule+0x16f5/0x4d00 [ 1067.526142][ T31] ? __lock_acquire+0xab9/0xd20 [ 1067.531157][ T31] ? schedule+0x165/0x360 [ 1067.713689][ T31] ? __pfx___schedule+0x10/0x10 [ 1067.718651][ T31] ? schedule+0x91/0x360 [ 1067.944617][ T31] schedule+0x165/0x360 [ 1067.948970][ T31] schedule_preempt_disabled+0x13/0x30 [ 1068.345545][ T31] __mutex_lock+0x724/0xe80 [ 1068.350146][ T31] ? __mutex_lock+0x51b/0xe80 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1068.716459][ T31] ? linkwatch_event+0xe/0x60 [ 1068.721239][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1069.196593][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1069.201884][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 1069.542160][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 1069.560955][ T31] linkwatch_event+0xe/0x60 [ 1069.746733][ T31] process_scheduled_works+0xae1/0x17b0 [ 1069.921393][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1069.997430][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 1070.099956][ T31] worker_thread+0x8a0/0xda0 [ 1070.256811][ T31] kthread+0x70e/0x8a0 [ 1070.260980][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1070.416503][ T31] ? __pfx_kthread+0x10/0x10 [ 1070.421184][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1070.779518][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1071.086778][ T31] ? __pfx_kthread+0x10/0x10 [ 1071.091471][ T31] ret_from_fork+0x3fc/0x770 [ 1071.272128][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1071.402530][ T31] ? __switch_to_asm+0x39/0x70 [ 1071.407379][ T31] ? __switch_to_asm+0x33/0x70 [ 1071.412185][ T31] ? __pfx_kthread+0x10/0x10 [ 1071.670362][ T31] ret_from_fork_asm+0x1a/0x30 [ 1071.779984][ T31] [ 1071.830569][ T31] INFO: task syz-executor:26206 blocked for more than 148 seconds. [ 1071.981549][ T31] Not tainted 6.16.0-rc5-syzkaller-01461-g511ad4c26446 #0 [ 1072.438438][ T5851] Bluetooth: hci10: command 0x0406 tx timeout [ 1073.215005][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1073.240712][ T31] task:syz-executor state:D stack:25272 pid:26206 tgid:26206 ppid:1 task_flags:0x400140 flags:0x00004006 [ 1073.462000][ T31] Call Trace: [ 1073.481455][ T31] [ 1073.607324][ T31] __schedule+0x16f5/0x4d00 [ 1073.611939][ T31] ? __lock_acquire+0xab9/0xd20 [ 1073.732776][ T31] ? schedule+0x165/0x360 [ 1073.737194][ T31] ? __pfx___schedule+0x10/0x10 [ 1073.742104][ T31] ? schedule+0x91/0x360 [ 1074.412251][ T31] schedule+0x165/0x360 [ 1074.576812][ T31] schedule_preempt_disabled+0x13/0x30 [ 1074.693837][ T31] __mutex_lock+0x724/0xe80 [ 1074.698433][ T31] ? __mutex_lock+0x51b/0xe80 [ 1075.292096][ T31] ? wg_netns_pre_exit+0x1c/0x1d0 [ 1076.097200][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1076.158925][ T31] ? net_generic+0x1e/0x240 [ 1076.176567][ T31] ? net_generic+0x1e/0x240 [ 1076.181147][ T31] wg_netns_pre_exit+0x1c/0x1d0 [ 1076.496309][ T31] ops_undo_list+0x187/0x990 [ 1076.501080][ T31] ? __pfx_ops_undo_list+0x10/0x10