last executing test programs: 43.384558305s ago: executing program 2 (id=11649): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="02"], 0x10) socket$l2tp6(0xa, 0x2, 0x73) 43.264397826s ago: executing program 2 (id=11652): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_int(r0, 0x11a, 0x2, &(0x7f0000000100)=0x304, 0x4) 43.004500608s ago: executing program 2 (id=11657): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, 0x0) 33.456033182s ago: executing program 4 (id=11793): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x1c, r2, 0x1, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x4000000) 33.300926734s ago: executing program 4 (id=11797): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000ac0)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="02"], 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) 33.088581231s ago: executing program 4 (id=11801): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x2, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) 33.083523044s ago: executing program 2 (id=11657): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, 0x0) 32.560628522s ago: executing program 4 (id=11808): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000005700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f00000059c0)={0x0, 0x0, &(0x7f0000005980)={&(0x7f0000005740)={0x28, r1, 0x105, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20008804) 19.423395556s ago: executing program 2 (id=11657): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, 0x0) 18.764980665s ago: executing program 4 (id=11808): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000005700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f00000059c0)={0x0, 0x0, &(0x7f0000005980)={&(0x7f0000005740)={0x28, r1, 0x105, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20008804) 6.314421935s ago: executing program 2 (id=11657): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, 0x0) 5.14867953s ago: executing program 4 (id=11808): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000005700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f00000059c0)={0x0, 0x0, &(0x7f0000005980)={&(0x7f0000005740)={0x28, r1, 0x105, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20008804) 2.348510998s ago: executing program 3 (id=12143): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x788b1fda, 0x2}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x44080) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffe0, 0xa}, {0x1, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x55}, 0x4000) 1.327028617s ago: executing program 3 (id=12146): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x439, 0x80000000, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40080d5}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000ac0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000380)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7000fcdbdf252100000008000300", @ANYRES32=r2, @ANYBLOB="24002d8005000100020000000500040001004000080002"], 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) 1.072250905s ago: executing program 3 (id=12149): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x20) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 884.710902ms ago: executing program 1 (id=12151): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d00)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x54}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)={0x38, 0x7, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040}, 0x0) 883.22384ms ago: executing program 0 (id=12152): r0 = socket$inet(0x2, 0x3, 0x1) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x7fffffff, 0x0, 0x2}, {0xfffffffffffffffe, 0xffffffffffffffff}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in6=@private1, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x4000}]}]}, 0xfc}}, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000002c0)='veth1_virt_wifi\x00', 0x10) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x2, 0x4000, @rand_addr=0x64010101}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000300)='\b\x00', 0x2}], 0x1, 0x0, 0x0, 0xe0000000}, 0x810) 830.396651ms ago: executing program 0 (id=12153): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(0xffffffffffffffff, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t', 0x5) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000580)={r2, 0x7ff, 0x4, 0xfffffffd, 0x2, 0x5}, 0x14) 826.225901ms ago: executing program 1 (id=12154): accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0xc0800) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) 696.617519ms ago: executing program 0 (id=12155): bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0xfffffffffffffdec) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) 696.369161ms ago: executing program 1 (id=12156): socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000340)={0x1, 0x6d}, 0x8) sendmmsg$inet6(r0, &(0x7f0000001140)=[{{&(0x7f0000000040)={0xa, 0x4e21, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x4004000) 661.869323ms ago: executing program 3 (id=12157): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000080)={0x3, 0x8200, 0x5, 0x10001}, &(0x7f00000000c0)=0x10) 641.976325ms ago: executing program 1 (id=12158): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r1, &(0x7f0000000200)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) 500.558506ms ago: executing program 3 (id=12159): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 478.579436ms ago: executing program 1 (id=12160): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r0) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r0) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)={0x14, r1, 0x831, 0x70bd2c, 0x25dfdbfd}, 0x14}}, 0x90) 425.337995ms ago: executing program 0 (id=12161): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, 0x0, &(0x7f00000000c0)) 324.634919ms ago: executing program 1 (id=12162): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000280)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9232f328db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052", 0x33}, {&(0x7f0000000680)="2a637c1b8b3894", 0x7}], 0x2) 323.139357ms ago: executing program 0 (id=12163): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x8411}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x0) ioctl$TUNSETVNETLE(r0, 0x400454dc, 0x0) 84.193711ms ago: executing program 3 (id=12164): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x1, 0x81, 0xc}}}}]}, 0x44}}, 0x44080) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001fc0)=@newqdisc={0x30, 0x24, 0xd0f, 0x70bd25, 0x0, {0x60, 0x0, 0x0, r2, {}, {0x0, 0xa}, {0x0, 0x10}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x55}, 0x4000) 0s ago: executing program 0 (id=12165): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x34, r1, 0x1, 0x1, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x6}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x40800) kernel console output (not intermixed with test programs): ize 8 (kernel) != (user) 16 [ 363.451687][T19627] netlink: 165 bytes leftover after parsing attributes in process `syz.3.6506'. [ 363.669962][T19639] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 363.946432][T19652] openvswitch: netlink: VXLAN extension message has 12 unknown bytes. [ 364.432286][T19680] netlink: 'syz.2.6532': attribute type 3 has an invalid length. [ 364.570119][T19687] netlink: 13 bytes leftover after parsing attributes in process `syz.4.6535'. [ 365.228248][T19732] sctp: [Deprecated]: syz.1.6557 (pid 19732) Use of int in maxseg socket option. [ 365.228248][T19732] Use struct sctp_assoc_value instead [ 365.389678][T19740] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6559'. [ 365.420188][T19740] tipc: Enabling of bearer rejected, failed to enable media [ 365.755224][T19765] netlink: 'syz.0.6573': attribute type 1 has an invalid length. [ 366.004444][ T51] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 366.011355][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 366.320092][T19785] team0 (unregistering): Port device geneve0 removed [ 366.596333][T19807] netlink: 'syz.2.6591': attribute type 2 has an invalid length. [ 366.916923][T19831] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6603'. [ 366.952021][T19831] bridge_slave_1: default FDB implementation only supports local addresses [ 367.684316][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 367.713114][T19883] netlink: 'syz.0.6625': attribute type 1 has an invalid length. [ 369.122652][T19971] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6670'. [ 369.147860][T19971] netlink: 'syz.2.6670': attribute type 5 has an invalid length. [ 369.167455][T19971] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6670'. [ 369.461315][T19988] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6678'. [ 369.947143][T20010] : entered promiscuous mode [ 370.314954][T20038] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6700'. [ 371.173572][T20090] pimreg: entered allmulticast mode [ 371.203164][T20090] pimreg: left allmulticast mode [ 371.433771][T20107] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6737'. [ 371.598036][T20118] netlink: 'syz.2.6743': attribute type 23 has an invalid length. [ 371.959838][T20138] netlink: 'syz.2.6751': attribute type 25 has an invalid length. [ 372.476764][T20173] netlink: 'syz.4.6768': attribute type 1 has an invalid length. [ 372.499070][T20167] netlink: 'syz.4.6768': attribute type 1 has an invalid length. [ 372.724321][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 372.724342][ T5851] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 372.876913][T20196] netlink: 288 bytes leftover after parsing attributes in process `syz.4.6778'. [ 373.802554][T20253] netlink: 'syz.3.6809': attribute type 1 has an invalid length. [ 374.022788][T20267] tipc: Enabling of bearer rejected, media not registered [ 374.632559][T20300] : entered promiscuous mode [ 375.099270][T20327] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6844'. [ 375.356995][T20343] netlink: 'syz.0.6849': attribute type 32 has an invalid length. [ 375.405572][T20343] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6849'. [ 375.445792][T20343] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 375.470007][T20350] netlink: 'syz.4.6852': attribute type 62 has an invalid length. [ 375.704545][T20366] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6858'. [ 376.064143][T20388] tipc: Enabling of bearer rejected, failed to enable media [ 376.668027][T20425] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6885'. [ 376.688510][T20425] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6885'. [ 376.722962][T20425] netlink: 'syz.1.6885': attribute type 14 has an invalid length. [ 377.367994][ T5851] Bluetooth: hci2: command 0x0406 tx timeout [ 377.926266][T20492] IPVS: ip_vs_edit_dest(): server weight less than zero [ 378.452133][T20523] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6931'. [ 378.557153][T20529] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6933'. [ 378.574688][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.575950][T20529] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6933'. [ 378.583727][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.697841][T20531] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 378.800522][T20538] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6938'. [ 378.811399][T20538] netlink: 43 bytes leftover after parsing attributes in process `syz.4.6938'. [ 378.839825][T20538] netlink: 'syz.4.6938': attribute type 5 has an invalid length. [ 378.852429][T20538] netlink: 43 bytes leftover after parsing attributes in process `syz.4.6938'. [ 378.984410][T20549] netlink: 'syz.4.6942': attribute type 27 has an invalid length. [ 379.110818][T20555] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 379.150277][T20557] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 380.427219][T20642] __nla_validate_parse: 3 callbacks suppressed [ 380.427237][T20642] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6989'. [ 380.909171][T20671] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7003'. [ 381.753657][T20719] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7025'. [ 381.782134][T20719] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7025'. [ 381.798761][T20719] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7025'. [ 381.847581][T20719] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7025'. [ 382.201879][T20745] netlink: 108 bytes leftover after parsing attributes in process `syz.0.7038'. [ 382.390807][T20755] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7043'. [ 382.453031][T20755] netlink: 'syz.1.7043': attribute type 3 has an invalid length. [ 382.462876][T20757] tipc: Enabled bearer , priority 10 [ 382.632266][T20764] netlink: 'syz.0.7047': attribute type 1 has an invalid length. [ 382.670603][T20764] netlink: 184 bytes leftover after parsing attributes in process `syz.0.7047'. [ 382.681714][T20764] netlink: 'syz.0.7047': attribute type 1 has an invalid length. [ 382.798326][T20773] tipc: Invalid UDP bearer configuration [ 382.798384][T20773] tipc: Enabling of bearer rejected, failed to enable media [ 383.335497][T20803] tipc: Enabling of bearer rejected, failed to enable media [ 383.412495][T20807] atomic_op ffff888056507998 conn xmit_atomic 0000000000000000 [ 383.604359][T20819] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 384.097332][T20849] netlink: 'syz.1.7091': attribute type 11 has an invalid length. [ 384.292819][T20863] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7096'. [ 384.503257][T20875] netlink: 'syz.1.7101': attribute type 1 has an invalid length. [ 384.527461][T20875] netlink: 'syz.1.7101': attribute type 1 has an invalid length. [ 385.919443][T20956] __nla_validate_parse: 2 callbacks suppressed [ 385.919461][T20956] netlink: 48 bytes leftover after parsing attributes in process `syz.0.7139'. [ 386.570903][T20998] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7159'. [ 386.589235][T20998] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7159'. [ 386.601000][T20998] netlink: 'syz.0.7159': attribute type 12 has an invalid length. [ 386.613535][T20998] netlink: 'syz.0.7159': attribute type 11 has an invalid length. [ 387.423765][T21046] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7183'. [ 388.403117][T21100] netlink: 'syz.0.7198': attribute type 29 has an invalid length. [ 388.488141][T21105] x_tables: ip_tables: udp match: only valid for protocol 17 [ 388.789666][T21120] macvtap1: entered allmulticast mode [ 388.817500][T21120] veth0_macvtap: entered allmulticast mode [ 388.870169][T21129] rdma_op ffff88807be369f0 conn xmit_rdma 0000000000000000 [ 389.080684][T21142] netlink: 'syz.1.7217': attribute type 1 has an invalid length. [ 389.114525][T21142] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7217'. [ 389.587237][T21170] netlink: 'syz.4.7228': attribute type 1 has an invalid length. [ 389.610582][T21170] netlink: 244 bytes leftover after parsing attributes in process `syz.4.7228'. [ 389.650005][T21174] netlink: 'syz.1.7229': attribute type 29 has an invalid length. [ 390.125546][T21202] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7238'. [ 390.327867][T21217] netlink: 104 bytes leftover after parsing attributes in process `syz.2.7245'. [ 391.103981][T21257] netlink: 'syz.2.7262': attribute type 1 has an invalid length. [ 391.116768][T21257] netlink: 224 bytes leftover after parsing attributes in process `syz.2.7262'. [ 391.393867][T21273] netlink: 168 bytes leftover after parsing attributes in process `syz.3.7269'. [ 391.997940][T21310] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7285'. [ 392.242213][T21322] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7294'. [ 392.649219][T21346] netem: change failed [ 392.732310][T21350] bridge4: entered promiscuous mode [ 392.750953][T21350] bridge4: entered allmulticast mode [ 392.950909][T21365] netlink: 'syz.2.7311': attribute type 83 has an invalid length. [ 393.093530][T21372] netlink: 'syz.2.7315': attribute type 2 has an invalid length. [ 393.289676][T21382] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7321'. [ 393.833446][T21416] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7336'. [ 394.229955][T21438] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7346'. [ 394.264258][T21438] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7346'. [ 394.277135][T21439] netlink: 'syz.1.7347': attribute type 58 has an invalid length. [ 394.308421][T21439] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7347'. [ 394.804884][T21459] block nbd0: server does not support multiple connections per device. [ 394.827622][T21459] block nbd0: shutting down sockets [ 395.160613][T21483] vxcan1: tx address claim with dest, not broadcast [ 395.231297][T21488] netlink: 'syz.2.7367': attribute type 1 has an invalid length. [ 395.260324][T21488] netlink: 'syz.2.7367': attribute type 3 has an invalid length. [ 395.284479][T21488] netlink: 216 bytes leftover after parsing attributes in process `syz.2.7367'. [ 395.293662][T21488] NCSI netlink: No device for ifindex 813332851 [ 396.011239][T21533] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 396.284371][T21547] __nla_validate_parse: 1 callbacks suppressed [ 396.284392][T21547] netlink: 100 bytes leftover after parsing attributes in process `syz.4.7396'. [ 396.876055][T21585] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7413'. [ 396.929870][T21585] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 396.950542][T21585] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 397.250877][T21605] sctp: [Deprecated]: syz.4.7422 (pid 21605) Use of struct sctp_assoc_value in delayed_ack socket option. [ 397.250877][T21605] Use struct sctp_sack_info instead [ 398.003455][T21653] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.7446'. [ 398.221133][T21669] sch_tbf: burst 0 is lower than device lo mtu (81) ! [ 398.486176][T21686] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7463'. [ 398.507778][T21690] netlink: 2 bytes leftover after parsing attributes in process `syz.0.7465'. [ 398.534295][T21686] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7463'. [ 398.725518][T21699] netlink: 104 bytes leftover after parsing attributes in process `syz.2.7469'. [ 398.777030][T21701] netlink: 104 bytes leftover after parsing attributes in process `syz.0.7470'. [ 399.035084][T21716] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7477'. [ 399.130213][T21723] netlink: 64 bytes leftover after parsing attributes in process `syz.0.7481'. [ 400.011172][T21776] bond0: entered promiscuous mode [ 400.024936][T21776] bond_slave_0: entered promiscuous mode [ 400.030915][T21776] bond_slave_1: entered promiscuous mode [ 400.053088][T21776] bond0: left promiscuous mode [ 400.061452][T21776] bond_slave_0: left promiscuous mode [ 400.068969][T21776] bond_slave_1: left promiscuous mode [ 402.663006][T21923] netem: change failed [ 402.727517][T21928] __nla_validate_parse: 5 callbacks suppressed [ 402.727535][T21928] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7570'. [ 403.425349][T21966] netlink: 'syz.3.7585': attribute type 9 has an invalid length. [ 403.442498][T21966] netlink: 212260 bytes leftover after parsing attributes in process `syz.3.7585'. [ 403.483866][T21969] netlink: 'syz.4.7586': attribute type 1 has an invalid length. [ 403.492436][T21969] netlink: 172 bytes leftover after parsing attributes in process `syz.4.7586'. [ 403.522346][T21969] netlink: 'syz.4.7586': attribute type 1 has an invalid length. [ 403.960743][T21997] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 404.426135][T22026] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7613'. [ 405.243277][T22071] netem: unknown loss type 0 [ 405.252443][T22071] netem: change failed [ 405.686137][T22092] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7644'. [ 406.352945][T22132] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7662'. [ 406.406112][T22132] C: entered promiscuous mode [ 406.411108][T22132] team_slave_1: entered promiscuous mode [ 406.778278][T22160] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7675'. [ 406.794632][T22160] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7675'. [ 406.821669][T22160] netlink: 'syz.1.7675': attribute type 1 has an invalid length. [ 406.831466][T22160] nbd: error processing sock list [ 407.409087][T22200] netlink: 'syz.1.7693': attribute type 1 has an invalid length. [ 407.419410][T22200] netlink: 'syz.1.7693': attribute type 4 has an invalid length. [ 407.428379][T22200] netlink: 188 bytes leftover after parsing attributes in process `syz.1.7693'. [ 407.438245][T22200] NCSI netlink: No device for ifindex 458760 [ 408.420701][T22256] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7719'. [ 408.493664][T22264] netlink: 76 bytes leftover after parsing attributes in process `syz.1.7723'. [ 408.732183][T22279] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7731'. [ 408.853930][T22286] netlink: 168 bytes leftover after parsing attributes in process `syz.3.7734'. [ 409.094684][T22305] openvswitch: netlink: IPv4 tunnel dst address is zero [ 409.112366][T22304] veth0: entered promiscuous mode [ 409.123415][T22302] veth0: left promiscuous mode [ 409.427171][T22326] vlan4: entered promiscuous mode [ 409.432528][T22326] bridge0: entered promiscuous mode [ 409.439151][T22326] vlan4: entered allmulticast mode [ 409.445896][T22326] bridge0: entered allmulticast mode [ 409.513659][T22332] netem: incorrect gi model size [ 409.521544][T22332] netem: change failed [ 409.651548][T22336] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.809727][T22349] netlink: 'syz.0.7761': attribute type 1 has an invalid length. [ 409.819839][T22349] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7761'. [ 409.842590][T22351] netlink: 188 bytes leftover after parsing attributes in process `syz.4.7763'. [ 410.063647][T22361] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7766'. [ 410.529793][T22381] netlink: 'syz.1.7778': attribute type 1 has an invalid length. [ 410.817254][T22394] netlink: 'syz.1.7783': attribute type 39 has an invalid length. [ 410.903992][T22396] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7784'. [ 411.271320][T22413] netlink: 'syz.2.7793': attribute type 1 has an invalid length. [ 411.408514][T22426] netlink: 'syz.1.7796': attribute type 1 has an invalid length. [ 411.426717][T22426] netlink: 'syz.1.7796': attribute type 4 has an invalid length. [ 411.435202][T22426] netlink: 192 bytes leftover after parsing attributes in process `syz.1.7796'. [ 412.408506][T22469] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7818'. [ 412.713492][T22486] netlink: 'syz.0.7825': attribute type 83 has an invalid length. [ 413.284882][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 414.239241][T22583] __nla_validate_parse: 5 callbacks suppressed [ 414.239261][T22583] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7870'. [ 414.409436][T22589] netlink: 232 bytes leftover after parsing attributes in process `syz.1.7872'. [ 415.863172][T22670] netlink: 104 bytes leftover after parsing attributes in process `syz.1.7909'. [ 416.323412][T22703] netlink: 'syz.1.7923': attribute type 3 has an invalid length. [ 416.343683][T22703] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 416.798309][T22726] bridge0: port 1(bridge_slave_0) entered disabled state [ 416.818272][ T4399] bridge0: port 1(bridge_slave_0) entered blocking state [ 416.825523][ T4399] bridge0: port 1(bridge_slave_0) entered listening state [ 416.884859][T22728] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7934'. [ 418.024847][T22792] veth0: entered promiscuous mode [ 418.038431][T22793] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7963'. [ 418.042087][T22791] veth0: left promiscuous mode [ 418.059028][T22793] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7963'. [ 418.101830][T22793] bridge0: port 1(vlan2) entered blocking state [ 418.135195][T22793] bridge0: port 1(vlan2) entered disabled state [ 418.167839][T22793] vlan2: entered allmulticast mode [ 418.173037][T22793] bridge0: entered allmulticast mode [ 418.214187][T22804] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7968'. [ 418.237899][T22793] vlan2: left allmulticast mode [ 418.242802][T22793] bridge0: left allmulticast mode [ 418.472265][T22815] vlan1: entered promiscuous mode [ 418.480449][T22815] bridge0: entered promiscuous mode [ 418.624875][T22824] netlink: 'syz.4.7977': attribute type 83 has an invalid length. [ 418.919341][T22844] netlink: 'syz.2.7987': attribute type 29 has an invalid length. [ 418.940355][T22844] netlink: 'syz.2.7987': attribute type 29 has an invalid length. [ 418.952493][T22844] netlink: 'syz.2.7987': attribute type 29 has an invalid length. [ 418.971540][T22844] netlink: 'syz.2.7987': attribute type 29 has an invalid length. [ 419.119610][T22855] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7992'. [ 419.185097][T22855] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7992'. [ 419.290311][T22862] netem: incorrect ge model size [ 419.318884][T22862] netem: change failed [ 419.483870][T22875] netlink: 'syz.3.8003': attribute type 2 has an invalid length. [ 419.492219][T22875] netlink: 84 bytes leftover after parsing attributes in process `syz.3.8003'. [ 420.820013][T22960] netlink: 'syz.1.8040': attribute type 1 has an invalid length. [ 420.835890][T22960] netlink: 212 bytes leftover after parsing attributes in process `syz.1.8040'. [ 420.847400][T22960] netlink: 'syz.1.8040': attribute type 1 has an invalid length. [ 421.490190][T22999] netlink: 'syz.0.8059': attribute type 10 has an invalid length. [ 421.585560][T23003] netlink: 'syz.3.8061': attribute type 8 has an invalid length. [ 422.120317][T23039] vlan4: entered promiscuous mode [ 422.135292][T23039] vlan4: entered allmulticast mode [ 422.145947][T23039] bridge0: entered allmulticast mode [ 422.179246][T23043] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8077'. [ 422.858822][T23087] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8097'. [ 422.872123][T23085] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8096'. [ 423.118935][T23100] netlink: 'syz.3.8104': attribute type 1 has an invalid length. [ 423.138041][T23102] netlink: 104 bytes leftover after parsing attributes in process `syz.0.8103'. [ 423.147311][T23100] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8104'. [ 423.338628][T23110] netlink: 64 bytes leftover after parsing attributes in process `syz.0.8107'. [ 424.135778][T23161] netlink: 71 bytes leftover after parsing attributes in process `syz.0.8131'. [ 424.812020][T23201] tap0: tun_chr_ioctl cmd 1074025672 [ 424.820153][T23201] tap0: ignored: set checksum disabled [ 424.949634][T23208] team0: No ports can be present during mode change [ 425.300699][T23232] bridge_slave_0: entered promiscuous mode [ 425.313878][T23232] bridge_slave_0: entered allmulticast mode [ 425.998069][T23277] netlink: 236 bytes leftover after parsing attributes in process `syz.1.8176'. [ 426.234992][T23285] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.8183'. [ 426.722990][T23295] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8188'. [ 427.238793][T23314] netlink: 212296 bytes leftover after parsing attributes in process `syz.4.8197'. [ 427.445562][T23326] netlink: 'syz.4.8202': attribute type 5 has an invalid length. [ 427.497158][T23329] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8204'. [ 427.510218][T23330] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 427.558540][T23329] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8204'. [ 428.179431][T23372] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8224'. [ 428.951703][T23416] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8244'. [ 428.981186][T23416] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8244'. [ 429.004348][T23416] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8244'. [ 429.344182][T23440] openvswitch: netlink: IP tunnel dst address not specified [ 429.980230][ T1103] bond0: (slave netdevsim0): link status definitely down, disabling slave [ 430.461037][T23503] tipc: Started in network mode [ 430.476822][T23503] tipc: Node identity ac14140f, cluster identity 4711 [ 430.486706][T23503] tipc: New replicast peer: 255.255.255.255 [ 430.493420][T23503] tipc: Enabled bearer , priority 10 [ 430.947250][T23533] tun0: tun_chr_ioctl cmd 1074025675 [ 430.969509][T23533] tun0: persist disabled [ 430.978330][T23538] veth0: entered promiscuous mode [ 430.993817][T23538] veth0: left promiscuous mode [ 431.008663][T23541] __nla_validate_parse: 4 callbacks suppressed [ 431.008679][T23541] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8299'. [ 431.253141][T23551] netlink: 'syz.0.8304': attribute type 9 has an invalid length. [ 431.603393][T23570] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8313'. [ 431.605198][ T5935] tipc: Node number set to 2886997007 [ 431.802418][T23580] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.8318'. [ 431.901769][T23586] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8321'. [ 432.326010][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 435.233240][T23781] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8393'. [ 435.788081][T23809] netlink: 71 bytes leftover after parsing attributes in process `syz.4.8404'. [ 436.343464][T23833] bond5: entered promiscuous mode [ 436.384167][T23833] bond5: entered allmulticast mode [ 436.410122][T23833] 8021q: adding VLAN 0 to HW filter on device bond5 [ 437.221192][T23833] bond5 (unregistering): Released all slaves [ 437.259797][T23860] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8423'. [ 437.431487][T23879] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.8440'. [ 437.562642][T23884] netlink: 108 bytes leftover after parsing attributes in process `syz.0.8431'. [ 437.600163][T23884] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8431'. [ 437.820945][T23902] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8437'. [ 437.861308][T23902] netlink: 'syz.0.8437': attribute type 3 has an invalid length. [ 437.894819][T23905] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8438'. [ 438.453351][T23938] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 438.985367][T23969] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8464'. [ 439.191541][T23977] macvtap1: entered promiscuous mode [ 439.201473][T23977] vlan0: entered promiscuous mode [ 439.236661][T23977] macvtap1: entered allmulticast mode [ 439.247275][T23977] vlan0: entered allmulticast mode [ 439.259956][T23977] : entered allmulticast mode [ 439.318325][T23977] vlan0: left allmulticast mode [ 439.333531][T23977] : left allmulticast mode [ 439.350204][T23977] vlan0: left promiscuous mode [ 439.409760][T23990] team0: No ports can be present during mode change [ 439.763764][T24010] tap0: tun_chr_ioctl cmd 1074025676 [ 439.779963][T24010] tap0: owner set to 0 [ 439.823934][T24017] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8486'. [ 439.934136][T24023] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8489'. [ 440.008615][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.016534][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.281281][T24044] tipc: Enabled bearer , priority 10 [ 440.484842][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 440.508107][T24057] vxcan1: tx address claim with dlc 0 [ 441.036076][T24090] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8519'. [ 441.407732][ T5917] tipc: Node number set to 491716608 [ 441.459548][T24115] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 441.472699][T24115] macsec3: entered allmulticast mode [ 441.482464][T24115] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 442.747645][T24192] __nla_validate_parse: 4 callbacks suppressed [ 442.747666][T24192] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8566'. [ 442.975182][T24207] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8570'. [ 443.615832][T24237] tap0: tun_chr_ioctl cmd 1074025677 [ 443.621371][T24237] tap0: linktype set to 65534 [ 443.915663][T24256] netlink: 1036 bytes leftover after parsing attributes in process `syz.1.8594'. [ 443.934346][T24256] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 444.112054][T24268] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8599'. [ 444.294718][T24281] netlink: 'syz.1.8606': attribute type 64 has an invalid length. [ 444.315453][T24281] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8606'. [ 444.676558][T24304] netlink: 52 bytes leftover after parsing attributes in process `syz.2.8616'. [ 444.971690][T24315] siw: device registration error -23 [ 445.452344][T24348] netlink: 'syz.3.8637': attribute type 19 has an invalid length. [ 445.669669][T24361] netlink: 'syz.0.8642': attribute type 83 has an invalid length. [ 446.023453][T24381] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8650'. [ 446.893096][T24434] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8673'. [ 447.684126][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 447.691442][ C1] bridge0: topology change detected, propagating [ 447.720055][T24482] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 448.162002][T24509] veth0: entered promiscuous mode [ 448.174777][T24508] veth0: left promiscuous mode [ 448.629155][T24537] openvswitch: netlink: Multiple metadata blocks provided [ 449.446192][T24586] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8745'. [ 449.622649][T24600] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8751'. [ 449.679403][T24600] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8751'. [ 450.236653][T24625] sch_tbf: burst 4 is lower than device ip6tnl0 mtu (1452) ! [ 450.394834][T24630] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8766'. [ 450.418478][T24634] netlink: 'syz.1.8767': attribute type 4 has an invalid length. [ 450.448727][T24630] syz_tun: left allmulticast mode [ 450.453842][T24630] syz_tun: left promiscuous mode [ 450.484652][T24630] bridge0: port 3(syz_tun) entered disabled state [ 450.545395][T24630] bridge_slave_1: left allmulticast mode [ 450.551124][T24630] bridge_slave_1: left promiscuous mode [ 450.595052][T24630] bridge0: port 2(bridge_slave_1) entered disabled state [ 450.619385][T24630] bridge_slave_0: left allmulticast mode [ 450.625700][T24630] bridge_slave_0: left promiscuous mode [ 450.631524][T24630] bridge0: port 1(bridge_slave_0) entered disabled state [ 450.905034][T24649] raw_sendmsg: syz.3.8775 forgot to set AF_INET. Fix it! [ 451.433470][T24682] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8790'. [ 451.459999][T24682] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8790'. [ 451.949939][T24712] gtp1: entered promiscuous mode [ 451.976290][T24712] gtp1: entered allmulticast mode [ 452.409110][T24738] netlink: 'syz.1.8816': attribute type 1 has an invalid length. [ 452.422974][T24738] netlink: 140 bytes leftover after parsing attributes in process `syz.1.8816'. [ 452.432740][T24738] netlink: 'syz.1.8816': attribute type 1 has an invalid length. [ 452.630837][T24747] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8821'. [ 452.697360][T24747] bond0: entered promiscuous mode [ 452.711407][T24747] bond_slave_0: entered promiscuous mode [ 452.744691][T24747] bond_slave_1: entered promiscuous mode [ 452.754609][T24747] dummy0: entered promiscuous mode [ 452.782419][T24747] bond0: left promiscuous mode [ 452.792159][T24747] bond_slave_0: left promiscuous mode [ 452.803908][T24747] bond_slave_1: left promiscuous mode [ 452.817440][T24747] dummy0: left promiscuous mode [ 452.850299][T24753] lo: renamed from C (while UP) [ 452.865530][T24753] lo: entered allmulticast mode [ 453.601170][T24796] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8843'. [ 453.811237][ T30] audit: type=1804 audit(1751990173.447:5): pid=24806 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.8848" name="/newroot/1779/cgroup.controllers" dev="tmpfs" ino=8955 res=1 errno=0 [ 453.876464][T24811] netlink: 104 bytes leftover after parsing attributes in process `syz.4.8850'. [ 453.894772][ T30] audit: type=1800 audit(1751990173.477:6): pid=24806 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.8848" name="cgroup.controllers" dev="tmpfs" ino=8955 res=0 errno=0 [ 454.333428][T24838] gtp0: entered promiscuous mode [ 454.343256][T24838] gtp0: entered allmulticast mode [ 455.283074][T24884] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 455.915887][T24903] __nla_validate_parse: 1 callbacks suppressed [ 455.915909][T24903] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8890'. [ 456.275385][T24914] xt_CT: No such helper "snmp" [ 456.443537][T24930] netlink: 'syz.4.8901': attribute type 1 has an invalid length. [ 456.478462][T24930] netlink: 172 bytes leftover after parsing attributes in process `syz.4.8901'. [ 457.029578][T24966] netlink: 128 bytes leftover after parsing attributes in process `syz.1.8921'. [ 457.068695][T24966] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8921'. [ 457.479211][T24995] netlink: 104 bytes leftover after parsing attributes in process `syz.3.8935'. [ 458.613945][ T30] audit: type=1107 audit(1751990178.247:7): pid=25071 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 458.686717][T25078] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8974'. [ 458.816611][T25078] netlink: 'syz.1.8974': attribute type 1 has an invalid length. [ 458.828620][T25078] netlink: 'syz.1.8974': attribute type 2 has an invalid length. [ 458.849022][T25084] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8977'. [ 459.032483][T25094] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8981'. [ 459.406023][T25115] netem: change failed [ 459.696696][T25133] netlink: 108 bytes leftover after parsing attributes in process `syz.2.9001'. [ 459.873213][T25147] netlink: 'syz.1.9008': attribute type 9 has an invalid length. [ 459.899463][T25147] netlink: 211988 bytes leftover after parsing attributes in process `syz.1.9008'. [ 460.137282][T25161] veth0: entered promiscuous mode [ 460.169047][T25160] veth0: left promiscuous mode [ 461.002250][T25213] __nla_validate_parse: 2 callbacks suppressed [ 461.002272][T25213] netlink: 10 bytes leftover after parsing attributes in process `syz.0.9039'. [ 461.177647][T25220] macvtap1: entered promiscuous mode [ 461.183032][T25220] vlan0: entered promiscuous mode [ 461.211913][T25220] macvtap1: entered allmulticast mode [ 461.217751][T25220] vlan0: entered allmulticast mode [ 461.230336][T25220] veth0_vlan: entered allmulticast mode [ 461.677524][T25253] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9066'. [ 462.569820][T25275] openvswitch: netlink: VXLAN extension message has 3 unknown bytes. [ 463.150646][T25312] bridge_slave_0: invalid flags given to default FDB implementation [ 463.359749][T25327] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9090'. [ 463.383035][T25327] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9090'. [ 463.423138][T25327] gretap0: entered promiscuous mode [ 463.455939][T25327] gretap0: left promiscuous mode [ 463.940999][T25356] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9106'. [ 463.967963][T25357] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9103'. [ 463.994265][T25357] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9103'. [ 465.010235][T25426] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9137'. [ 465.052082][T25426] macsec0: entered promiscuous mode [ 465.688291][T25467] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9154'. [ 466.019060][T25489] openvswitch: netlink: VXLAN extension 173 out of range max 1 [ 466.129436][T25496] netlink: 'syz.1.9168': attribute type 1 has an invalid length. [ 466.147223][T25496] netlink: 172 bytes leftover after parsing attributes in process `syz.1.9168'. [ 466.147517][T25498] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9166'. [ 466.232080][T25500] team0: Mode changed to "loadbalance" [ 466.415830][T25512] netlink: 11562 bytes leftover after parsing attributes in process `syz.2.9178'. [ 466.649384][T25526] sctp: [Deprecated]: syz.4.9183 (pid 25526) Use of int in maxseg socket option. [ 466.649384][T25526] Use struct sctp_assoc_value instead [ 467.511782][T25582] netlink: 146840 bytes leftover after parsing attributes in process `syz.4.9209'. [ 467.843389][T25607] netlink: 232 bytes leftover after parsing attributes in process `syz.0.9219'. [ 467.972510][T25612] sch_fq: defrate 0 ignored. [ 468.220326][T25627] blkio.reset_stats is deprecated [ 468.466915][T25644] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9234'. [ 469.495611][T25697] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9260'. [ 469.853855][T25720] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.9271'. [ 471.226091][T25790] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 471.512456][T25807] tap0: tun_chr_ioctl cmd 1074025678 [ 471.534680][T25807] tap0: group set to 0 [ 471.920705][T25835] netlink: 152064 bytes leftover after parsing attributes in process `syz.1.9319'. [ 471.944866][T25838] netlink: 165 bytes leftover after parsing attributes in process `syz.2.9322'. [ 471.979445][T25835] netlink: zone id is out of range [ 471.991442][T25835] netlink: zone id is out of range [ 471.997054][T25835] netlink: zone id is out of range [ 472.002309][T25835] netlink: zone id is out of range [ 472.007706][T25835] netlink: zone id is out of range [ 472.012941][T25835] netlink: zone id is out of range [ 472.021652][T25835] netlink: zone id is out of range [ 472.051552][T25835] netlink: zone id is out of range [ 472.064827][T25835] netlink: zone id is out of range [ 472.136014][T25846] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9325'. [ 472.509358][T25872] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9337'. [ 473.163841][T25908] macvtap1: entered promiscuous mode [ 473.176887][T25908] vlan0: entered promiscuous mode [ 473.182530][T25908] macvtap1: entered allmulticast mode [ 473.201279][T25908] vlan0: entered allmulticast mode [ 473.208797][T25908] veth0_vlan: entered allmulticast mode [ 473.562776][T25935] netlink: 'syz.1.9362': attribute type 1 has an invalid length. [ 473.573841][T25935] netlink: 'syz.1.9362': attribute type 2 has an invalid length. [ 473.583079][T25935] netlink: 'syz.1.9362': attribute type 1 has an invalid length. [ 473.595314][T25935] netlink: 1156 bytes leftover after parsing attributes in process `syz.1.9362'. [ 474.103412][T25967] netlink: 72 bytes leftover after parsing attributes in process `syz.2.9375'. [ 474.399188][T25981] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9381'. [ 474.457032][T25985] netlink: 'syz.2.9383': attribute type 1 has an invalid length. [ 474.809019][T13997] wlan1: Trigger new scan to find an IBSS to join [ 474.818183][T26003] netlink: 165 bytes leftover after parsing attributes in process `syz.2.9390'. [ 475.662270][T26050] syz.0.9412: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 475.691788][T26050] CPU: 1 UID: 0 PID: 26050 Comm: syz.0.9412 Not tainted 6.16.0-rc4-syzkaller-00121-g80852774ba0a #0 PREEMPT(full) [ 475.691821][T26050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 475.691842][T26050] Call Trace: [ 475.691851][T26050] [ 475.691860][T26050] dump_stack_lvl+0x189/0x250 [ 475.691899][T26050] ? __pfx_dump_stack_lvl+0x10/0x10 [ 475.691925][T26050] ? __pfx__printk+0x10/0x10 [ 475.691954][T26050] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 475.691985][T26050] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 475.692015][T26050] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 475.692046][T26050] warn_alloc+0x214/0x310 [ 475.692071][T26050] ? stack_depot_save_flags+0x40/0x900 [ 475.692106][T26050] ? __pfx_warn_alloc+0x10/0x10 [ 475.692138][T26050] ? kasan_save_track+0x4f/0x80 [ 475.692162][T26050] ? xskq_create+0x56/0x170 [ 475.692191][T26050] ? xsk_init_queue+0xb0/0x110 [ 475.692217][T26050] ? xsk_setsockopt+0x43f/0x710 [ 475.692242][T26050] ? do_sock_setsockopt+0x25a/0x3e0 [ 475.692265][T26050] ? __x64_sys_setsockopt+0x18b/0x220 [ 475.692289][T26050] ? do_syscall_64+0xfa/0x3b0 [ 475.692308][T26050] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 475.692335][T26050] __vmalloc_node_range_noprof+0x125/0x12f0 [ 475.692394][T26050] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 475.692432][T26050] ? __kasan_kmalloc+0x93/0xb0 [ 475.692459][T26050] vmalloc_user_noprof+0xad/0xf0 [ 475.692487][T26050] ? xskq_create+0xbf/0x170 [ 475.692516][T26050] xskq_create+0xbf/0x170 [ 475.692544][T26050] xsk_init_queue+0xb0/0x110 [ 475.692569][T26050] xsk_setsockopt+0x43f/0x710 [ 475.692594][T26050] ? __pfx_xsk_setsockopt+0x10/0x10 [ 475.692615][T26050] ? __lock_acquire+0xab9/0xd20 [ 475.692640][T26050] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 475.692654][T26050] ? __pfx_xsk_setsockopt+0x10/0x10 [ 475.692677][T26050] do_sock_setsockopt+0x25a/0x3e0 [ 475.692699][T26050] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 475.692723][T26050] ? __fget_files+0x2a/0x420 [ 475.692752][T26050] __x64_sys_setsockopt+0x18b/0x220 [ 475.692777][T26050] do_syscall_64+0xfa/0x3b0 [ 475.692792][T26050] ? lockdep_hardirqs_on+0x9c/0x150 [ 475.692816][T26050] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 475.692831][T26050] ? clear_bhb_loop+0x60/0xb0 [ 475.692850][T26050] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 475.692872][T26050] RIP: 0033:0x7ff8a658e929 [ 475.692898][T26050] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 475.692912][T26050] RSP: 002b:00007ff8a74e4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 475.692932][T26050] RAX: ffffffffffffffda RBX: 00007ff8a67b5fa0 RCX: 00007ff8a658e929 [ 475.692944][T26050] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 475.692954][T26050] RBP: 00007ff8a6610b39 R08: 0000000000000004 R09: 0000000000000000 [ 475.692964][T26050] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 475.692974][T26050] R13: 0000000000000000 R14: 00007ff8a67b5fa0 R15: 00007ffe44ae61c8 [ 475.693000][T26050] [ 475.693621][T26050] Mem-Info: [ 475.916438][T26057] vxcan1: entered allmulticast mode [ 475.964686][T26050] active_anon:4471 inactive_anon:0 isolated_anon:0 [ 475.964686][T26050] active_file:1163 inactive_file:39977 isolated_file:0 [ 475.964686][T26050] unevictable:768 dirty:280 writeback:0 [ 475.964686][T26050] slab_reclaimable:11408 slab_unreclaimable:107635 [ 475.964686][T26050] mapped:28904 shmem:1383 pagetables:1454 [ 475.964686][T26050] sec_pagetables:0 bounce:0 [ 475.964686][T26050] kernel_misc_reclaimable:0 [ 475.964686][T26050] free:1321692 free_pcp:13250 free_cma:0 [ 476.063006][T26057] vxcan1: left allmulticast mode [ 476.091064][T26050] Node 0 active_anon:17884kB inactive_anon:0kB active_file:4652kB inactive_file:159712kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:115716kB dirty:1120kB writeback:0kB shmem:3996kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12040kB pagetables:5456kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 476.174974][T26050] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:160kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 476.248433][T26050] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 476.301287][T26050] lowmem_reserve[]: 0 2498 2500 2500 2500 [ 476.320025][T26050] Node 0 DMA32 free:1369224kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:17932kB inactive_anon:0kB active_file:4652kB inactive_file:158148kB unevictable:1536kB writepending:1120kB present:3129332kB managed:2558404kB mlocked:0kB bounce:0kB free_pcp:35324kB local_pcp:14876kB free_cma:0kB [ 476.371984][T26050] lowmem_reserve[]: 0 0 1 1 1 [ 476.390879][T26050] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:52kB inactive_anon:0kB active_file:0kB inactive_file:1564kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 476.448691][T26050] lowmem_reserve[]: 0 0 0 0 0 [ 476.453596][T26050] Node 1 Normal free:3902172kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:17600kB local_pcp:9792kB free_cma:0kB [ 476.525760][T26050] lowmem_reserve[]: 0 0 0 0 0 [ 476.538582][T26050] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 476.589102][T26050] Node 0 DMA32: 598*4kB (UME) 441*8kB (UM) 797*16kB (UME) 1278*32kB (U) 702*64kB (UME) 498*128kB (UME) 461*256kB (UME) 343*512kB (UM) 166*1024kB (UME) 16*2048kB (UM) 172*4096kB (UM) = 1369136kB [ 476.615630][T26050] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 476.630077][T26050] Node 1 Normal: 225*4kB (UME) 59*8kB (UME) 42*16kB (UME) 169*32kB (UME) 63*64kB (UME) 10*128kB (UME) 3*256kB (ME) 3*512kB (UM) 2*1024kB (ME) 1*2048kB (E) 948*4096kB (M) = 3902172kB [ 476.688838][T26050] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 476.699905][T26050] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 476.710045][T26050] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 476.775348][T26050] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 476.812502][T26050] 42519 total pagecache pages [ 476.820763][T26050] 0 pages in swap cache [ 476.825576][T26050] Free swap = 124996kB [ 476.832261][T26050] Total swap = 124996kB [ 476.838061][T26050] 2097051 pages RAM [ 476.842013][T26050] 0 pages HighMem/MovableOnly [ 476.846984][T26050] 425408 pages reserved [ 476.851170][T26050] 0 pages cma reserved [ 476.956426][T26100] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9436'. [ 476.978165][T26100] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9436'. [ 477.725881][T26145] netlink: 'syz.0.9458': attribute type 4 has an invalid length. [ 478.558287][T26183] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9474'. [ 479.301627][T26227] veth0: entered promiscuous mode [ 479.313155][T26225] veth0: left promiscuous mode [ 479.688591][T26248] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9504'. [ 479.845056][ T12] wlan1: Trigger new scan to find an IBSS to join [ 480.195419][T26276] netlink: 'syz.4.9516': attribute type 12 has an invalid length. [ 480.203304][T26276] netlink: 112 bytes leftover after parsing attributes in process `syz.4.9516'. [ 480.404928][T26287] netlink: 'syz.4.9521': attribute type 6 has an invalid length. [ 480.429113][T26289] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9522'. [ 480.480829][T26292] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9522'. [ 480.788512][ T1103] wlan1: Creating new IBSS network, BSSID 86:bc:a6:6b:6e:0d [ 481.102251][T26328] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9538'. [ 481.306567][T26338] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9543'. [ 481.434544][T26338] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9543'. [ 481.500348][T26344] erspan0: left allmulticast mode [ 481.596374][T26344] bridge0: port 2(bridge_slave_1) entered disabled state [ 481.603796][T26344] bridge0: port 1(bridge_slave_0) entered disabled state [ 481.649119][T26344] net_ratelimit: 219 callbacks suppressed [ 481.649134][T26344] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 481.970781][T26365] netlink: 1044 bytes leftover after parsing attributes in process `syz.3.9555'. [ 481.981553][T26368] netlink: 203516 bytes leftover after parsing attributes in process `syz.4.9554'. [ 481.998784][T26368] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 482.044179][T26368] openvswitch: netlink: Duplicate key (type 0). [ 482.778238][T26422] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9580'. [ 482.860607][T26426] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9582'. [ 482.894980][ T5851] Bluetooth: hci4: command 0x0406 tx timeout [ 482.906860][T26428] lo: left allmulticast mode [ 482.924692][T26428] tunl0: left promiscuous mode [ 482.969076][T26432] netlink: 'syz.0.9585': attribute type 83 has an invalid length. [ 483.048704][T26428] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 483.212831][T26442] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 483.642103][T26468] netlink: 248 bytes leftover after parsing attributes in process `syz.0.9602'. [ 484.181334][T26469] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 484.541292][T26503] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9618'. [ 484.764343][T26519] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9626'. [ 484.857976][T26517] gretap0: left promiscuous mode [ 484.976257][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 485.243274][T26517] bridge0: port 2(bridge_slave_1) entered disabled state [ 485.365447][T26517] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 485.641760][T26559] netlink: 'syz.2.9641': attribute type 4 has an invalid length. [ 485.686387][T26563] netlink: 'syz.4.9645': attribute type 4 has an invalid length. [ 485.860224][T26572] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9650'. [ 486.107438][T26583] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 486.433018][T26597] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9662'. [ 486.757113][T26610] netlink: 36 bytes leftover after parsing attributes in process `syz.3.9664'. [ 487.030620][T26623] __nla_validate_parse: 1 callbacks suppressed [ 487.030642][T26623] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9674'. [ 488.216175][T26690] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9703'. [ 488.873730][T26732] netlink: 'syz.1.9722': attribute type 10 has an invalid length. [ 488.924302][T26736] netlink: 'syz.1.9722': attribute type 10 has an invalid length. [ 488.941513][T26736] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9722'. [ 488.977625][T26732] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 488.990162][T26732] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 488.999986][T26736] batadv0: entered promiscuous mode [ 489.035643][T26736] batadv0: entered allmulticast mode [ 489.043754][T26736] bond0: (slave batadv0): Releasing backup interface [ 489.076067][T26736] bridge0: port 3(batadv0) entered blocking state [ 489.082672][T26736] bridge0: port 3(batadv0) entered disabled state [ 489.167010][T26746] bridge_slave_0: left allmulticast mode [ 489.253629][ T1165] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 489.263358][ T1165] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 489.471985][T26765] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9736'. [ 489.534140][ T13] tipc: Subscription rejected, illegal request [ 489.627416][T26765] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9736'. [ 489.990187][T26794] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9751'. [ 490.430047][T26820] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9763'. [ 490.772408][T26837] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9773'. [ 491.027829][T26855] netlink: 44 bytes leftover after parsing attributes in process `syz.3.9779'. [ 491.274490][T26873] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9789'. [ 491.660568][T26896] xfrm2: entered promiscuous mode [ 491.665980][T26896] xfrm2: entered allmulticast mode [ 492.102738][T26918] 8021q: adding VLAN 0 to HW filter on device bond3 [ 492.118715][T26918] bond0: (slave bond3): Enslaving as an active interface with an up link [ 492.232542][T26927] __nla_validate_parse: 3 callbacks suppressed [ 492.232559][T26927] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9813'. [ 492.533745][T26944] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9820'. [ 493.045566][T26963] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9830'. [ 493.070390][T26971] netlink: 104 bytes leftover after parsing attributes in process `syz.0.9834'. [ 493.415366][T26985] sctp: [Deprecated]: syz.4.9836 (pid 26985) Use of int in max_burst socket option deprecated. [ 493.415366][T26985] Use struct sctp_assoc_value instead [ 493.553183][T26997] netlink: 'syz.0.9844': attribute type 2 has an invalid length. [ 493.566433][T26997] netlink: 'syz.0.9844': attribute type 8 has an invalid length. [ 493.621115][T26997] netlink: 1148 bytes leftover after parsing attributes in process `syz.0.9844'. [ 493.973089][T27021] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9857'. [ 494.005328][T27021] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9857'. [ 494.346518][T27043] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9865'. [ 494.629499][T27061] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9870'. [ 495.024732][T27079] nbd0: detected capacity change from 0 to 127 [ 495.034525][ T51] block nbd0: Receive control failed (result -32) [ 495.349027][T27103] netlink: 'syz.2.9889': attribute type 5 has an invalid length. [ 496.575681][T27176] xt_bpf: check failed: parse error [ 496.591742][T27178] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9919'. [ 496.940273][T27199] netlink: 'syz.0.9927': attribute type 2 has an invalid length. [ 497.487056][T27234] netlink: 'syz.4.9944': attribute type 18 has an invalid length. [ 497.597912][T27242] IPv6: NLM_F_CREATE should be specified when creating new route [ 498.049866][T27270] netlink: 'syz.0.9960': attribute type 16 has an invalid length. [ 498.083425][T27270] netlink: 'syz.0.9960': attribute type 17 has an invalid length. [ 498.714738][T27307] dvmrp0: entered allmulticast mode [ 498.751821][T27307] dvmrp0: left allmulticast mode [ 498.907670][T27315] netlink: 'syz.3.9981': attribute type 2 has an invalid length. [ 498.949077][T27317] __nla_validate_parse: 2 callbacks suppressed [ 498.949095][T27317] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.9983'. [ 499.579482][T27355] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10001'. [ 499.612172][T27355] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10001'. [ 499.731668][T27365] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10008'. [ 500.919722][T27442] netlink: 'syz.4.10042': attribute type 4 has an invalid length. [ 500.966394][T27446] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.10044'. [ 501.149454][T27454] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10059'. [ 501.193740][T27454] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10059'. [ 501.316396][T27462] netlink: 'syz.3.10049': attribute type 16 has an invalid length. [ 501.344206][T27462] netlink: 'syz.3.10049': attribute type 17 has an invalid length. [ 501.384663][T27468] netlink: 'syz.2.10051': attribute type 2 has an invalid length. [ 501.393760][T27468] netlink: 'syz.2.10051': attribute type 8 has an invalid length. [ 501.422547][T27468] netlink: 1148 bytes leftover after parsing attributes in process `syz.2.10051'. [ 501.453012][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.555164][T27474] dvmrp0: entered allmulticast mode [ 501.579644][T27474] dvmrp0: left allmulticast mode [ 501.583136][T27477] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10055'. [ 501.603826][T27474] pimreg: left allmulticast mode [ 501.621374][T27477] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10055'. [ 502.962638][T27513] netlink: 'syz.3.10077': attribute type 11 has an invalid length. [ 503.863283][T27569] sctp: [Deprecated]: syz.0.10101 (pid 27569) Use of struct sctp_assoc_value in delayed_ack socket option. [ 503.863283][T27569] Use struct sctp_sack_info instead [ 504.066773][T27581] __nla_validate_parse: 2 callbacks suppressed [ 504.066792][T27581] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10107'. [ 504.098461][T27575] IPVS: persistence engine module ip_vs_pe_À not found [ 504.120075][T27584] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10109'. [ 504.300501][T27594] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10113'. [ 504.420325][T27599] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10115'. [ 504.829902][T27625] netlink: 'syz.3.10129': attribute type 10 has an invalid length. [ 504.846004][T27625] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 504.856869][T27625] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 504.909959][T27625] netlink: 'syz.3.10129': attribute type 10 has an invalid length. [ 504.962007][T27625] netlink: 40 bytes leftover after parsing attributes in process `syz.3.10129'. [ 504.986452][T27625] batadv0: entered promiscuous mode [ 505.000788][T27625] batadv0: entered allmulticast mode [ 505.041126][T27625] bond0: (slave batadv0): Releasing backup interface [ 505.082033][T27625] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 505.629698][T27671] netlink: 'syz.4.10151': attribute type 10 has an invalid length. [ 505.702402][T27671] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 505.716940][T27674] netlink: 'syz.4.10151': attribute type 10 has an invalid length. [ 505.737455][T27674] netlink: 40 bytes leftover after parsing attributes in process `syz.4.10151'. [ 505.814451][T27674] batadv0: entered promiscuous mode [ 505.835645][T27679] sctp: [Deprecated]: syz.3.10154 (pid 27679) Use of struct sctp_assoc_value in delayed_ack socket option. [ 505.835645][T27679] Use struct sctp_sack_info instead [ 505.880324][T27674] batadv0: entered allmulticast mode [ 505.936941][T27674] bridge0: port 1(batadv0) entered blocking state [ 505.943654][T27674] bridge0: port 1(batadv0) entered disabled state [ 505.996339][T27690] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 506.155017][T27696] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10161'. [ 506.237612][ T4399] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 506.247067][ T4399] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 506.554615][T27721] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10169'. [ 506.592770][T27721] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10169'. [ 506.703332][T27728] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10176'. [ 506.734181][T27733] netlink: 'syz.2.10174': attribute type 10 has an invalid length. [ 506.753708][T27733] netlink: 'syz.2.10174': attribute type 10 has an invalid length. [ 506.865255][T27738] netlink: 'syz.4.10177': attribute type 83 has an invalid length. [ 509.396800][T27879] netlink: 'syz.2.10242': attribute type 83 has an invalid length. [ 509.561978][T27889] openvswitch: netlink: IP tunnel TTL not specified. [ 509.568452][T27888] __nla_validate_parse: 9 callbacks suppressed [ 509.568473][T27888] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10246'. [ 510.008459][T27915] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10259'. [ 510.538347][T27949] openvswitch: netlink: IPv4 tun info is not correct [ 510.572867][T27950] bond0: (slave dummy0): Releasing backup interface [ 510.692793][T27956] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10278'. [ 511.809032][T28010] (unnamed net_device) (uninitialized): ARP target 1.0.0.0 is already present [ 511.831164][T28010] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (1) [ 512.378541][T28039] 8021q: adding VLAN 0 to HW filter on device bond4 [ 512.387747][T28039] bond0: (slave bond4): Enslaving as an active interface with an up link [ 513.015804][T28076] unknown channel width for channel at 909000KHz? [ 513.798104][T28113] syz.4.10344 (28113) used greatest stack depth: 17992 bytes left [ 515.045782][T28195] netlink: 44 bytes leftover after parsing attributes in process `syz.3.10380'. [ 515.145630][T28200] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10384'. [ 515.341531][T28209] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10390'. [ 516.124502][T28252] netlink: 176 bytes leftover after parsing attributes in process `syz.1.10407'. [ 516.161945][T28252] netlink: 176 bytes leftover after parsing attributes in process `syz.1.10407'. [ 516.372758][T28266] netlink: 'syz.3.10412': attribute type 1 has an invalid length. [ 516.409171][T28266] netlink: 172 bytes leftover after parsing attributes in process `syz.3.10412'. [ 516.516719][T28271] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10416'. [ 516.894455][T28293] bond0: (slave bond3): Error -95 calling ndo_bpf [ 516.942654][T28297] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10437'. [ 516.947620][T28293] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 517.687784][T28325] netlink: 176 bytes leftover after parsing attributes in process `syz.4.10440'. [ 517.720301][T28325] netlink: 176 bytes leftover after parsing attributes in process `syz.4.10440'. [ 518.012919][T28342] netlink: 'syz.1.10447': attribute type 1 has an invalid length. [ 518.089217][T28345] netlink: 'syz.2.10448': attribute type 11 has an invalid length. [ 518.202293][T28354] netlink: 'syz.4.10453': attribute type 6 has an invalid length. [ 518.225039][T28358] block nbd1: Unsupported socket: shutdown callout must be supported. [ 518.390692][T28366] sch_tbf: burst 8 is lower than device ip6tnl0 mtu (65485) ! [ 518.780506][T28384] xt_CT: No such helper "snmp" [ 518.790730][T28392] openvswitch: netlink: Multiple metadata blocks provided [ 519.852244][T28458] netlink: 'syz.1.10499': attribute type 11 has an invalid length. [ 520.149114][T28475] __nla_validate_parse: 6 callbacks suppressed [ 520.149133][T28475] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10506'. [ 520.512851][T28498] netlink: 36 bytes leftover after parsing attributes in process `syz.0.10517'. [ 520.779371][T28513] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10522'. [ 520.959444][T28525] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10530'. [ 520.967517][T28524] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10539'. [ 521.103280][T28532] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10544'. [ 522.035441][T28589] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10558'. [ 522.329638][T28600] netlink: 'syz.1.10566': attribute type 1 has an invalid length. [ 522.351379][T28600] netlink: 172 bytes leftover after parsing attributes in process `syz.1.10566'. [ 522.558737][T28611] netlink: 84 bytes leftover after parsing attributes in process `syz.0.10570'. [ 522.648906][T28619] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10574'. [ 524.663843][T28715] veth0: entered promiscuous mode [ 524.690512][T28711] veth0: left promiscuous mode [ 525.549299][T28774] __nla_validate_parse: 7 callbacks suppressed [ 525.549318][T28774] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10634'. [ 525.872650][T28795] netlink: 52 bytes leftover after parsing attributes in process `syz.2.10642'. [ 526.589373][T28821] netlink: 40 bytes leftover after parsing attributes in process `syz.4.10655'. [ 527.004424][T28840] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10663'. [ 527.192898][T28850] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10666'. [ 527.271685][T28856] openvswitch: netlink: Multiple metadata blocks provided [ 527.742162][T28885] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10682'. [ 528.150137][T28901] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10688'. [ 528.257554][T28905] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 528.264492][T28905] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 528.293481][T28905] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 528.300019][T28905] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 528.363403][T28905] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 528.370886][T28905] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 528.395948][T28905] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 528.402468][T28905] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 528.431979][T28905] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 530.062919][T29002] netlink: 'syz.3.10732': attribute type 5 has an invalid length. [ 530.102708][T29005] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 530.283328][T29014] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10740'. [ 530.412399][T29014] macvtap2: entered promiscuous mode [ 530.425635][T29014] macvtap2: entered allmulticast mode [ 530.674515][T29038] ip6gre1: entered allmulticast mode [ 530.782490][T29043] bond0: (slave bond4): Error -95 calling ndo_bpf [ 531.371395][T29077] netlink: 576 bytes leftover after parsing attributes in process `syz.1.10767'. [ 532.447014][T29125] netlink: 'syz.2.10788': attribute type 1 has an invalid length. [ 533.333529][T29173] sctp: [Deprecated]: syz.2.10808 (pid 29173) Use of struct sctp_assoc_value in delayed_ack socket option. [ 533.333529][T29173] Use struct sctp_sack_info instead [ 533.648008][T29193] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10815'. [ 533.792496][T29204] netlink: 'syz.4.10819': attribute type 28 has an invalid length. [ 533.811778][T29204] netlink: 'syz.4.10819': attribute type 3 has an invalid length. [ 533.820970][T29204] netlink: 132 bytes leftover after parsing attributes in process `syz.4.10819'. [ 534.822884][T29241] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10836'. [ 535.207966][T29263] netlink: 14 bytes leftover after parsing attributes in process `syz.4.10848'. [ 535.342986][T29263] bond0 (unregistering): Released all slaves [ 535.494461][T29280] netlink: 52 bytes leftover after parsing attributes in process `syz.1.10855'. [ 535.702584][T29294] netlink: 'syz.1.10860': attribute type 11 has an invalid length. [ 536.185601][T29322] sch_fq: defrate 0 ignored. [ 536.210224][T29321] netlink: 60 bytes leftover after parsing attributes in process `syz.1.10872'. [ 536.253025][T29324] netlink: 'syz.0.10873': attribute type 1 has an invalid length. [ 537.432385][T29383] netlink: 48 bytes leftover after parsing attributes in process `syz.2.10909'. [ 537.496849][T29382] vlan3: entered promiscuous mode [ 537.518693][T29382] vlan3: entered allmulticast mode [ 537.538029][T29382] bridge0: entered allmulticast mode [ 537.643877][T29392] sch_fq: defrate 0 ignored. [ 537.863495][T29404] net_ratelimit: 69 callbacks suppressed [ 537.863514][T29404] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 538.013616][T29410] netlink: 'syz.3.10914': attribute type 11 has an invalid length. [ 538.204620][T29419] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10919'. [ 538.728585][T29452] netlink: 60 bytes leftover after parsing attributes in process `syz.0.10931'. [ 538.806201][ T4399] wlan1: Trigger new scan to find an IBSS to join [ 539.298033][T29487] netlink: 48 bytes leftover after parsing attributes in process `syz.4.10948'. [ 539.475062][T29498] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10953'. [ 539.986893][T29525] Bluetooth: MGMT ver 1.23 [ 540.102686][T29531] netlink: 'syz.3.10966': attribute type 21 has an invalid length. [ 540.137451][T29531] netlink: 128 bytes leftover after parsing attributes in process `syz.3.10966'. [ 540.154645][T29537] netlink: 'syz.3.10966': attribute type 21 has an invalid length. [ 540.185952][T29537] netlink: 128 bytes leftover after parsing attributes in process `syz.3.10966'. [ 540.216130][T29531] netlink: 'syz.3.10966': attribute type 4 has an invalid length. [ 540.229657][T29531] netlink: 'syz.3.10966': attribute type 5 has an invalid length. [ 540.258780][T29531] netlink: 3 bytes leftover after parsing attributes in process `syz.3.10966'. [ 540.296516][T29537] netlink: 'syz.3.10966': attribute type 4 has an invalid length. [ 540.304634][T29537] netlink: 'syz.3.10966': attribute type 5 has an invalid length. [ 540.312628][T29537] netlink: 3 bytes leftover after parsing attributes in process `syz.3.10966'. [ 540.484112][T29550] netlink: 160 bytes leftover after parsing attributes in process `syz.4.10975'. [ 541.648124][T29615] netlink: 'syz.1.11005': attribute type 4 has an invalid length. [ 541.775996][T29621] netlink: 'syz.0.11008': attribute type 21 has an invalid length. [ 541.798862][T29621] netlink: 'syz.0.11008': attribute type 4 has an invalid length. [ 541.811010][T29621] netlink: 'syz.0.11008': attribute type 5 has an invalid length. [ 541.822204][T29621] netlink: 'syz.0.11008': attribute type 21 has an invalid length. [ 541.830898][T29621] netlink: 'syz.0.11008': attribute type 4 has an invalid length. [ 541.851178][ T1103] wlan1: Trigger new scan to find an IBSS to join [ 541.871446][T29621] netlink: 'syz.0.11008': attribute type 5 has an invalid length. [ 542.101134][T29634] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 542.288809][T29649] netlink: 'syz.1.11020': attribute type 4 has an invalid length. [ 542.633490][T29665] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 542.815865][T13997] wlan1: Trigger new scan to find an IBSS to join [ 542.878260][T29679] __nla_validate_parse: 6 callbacks suppressed [ 542.878283][T29679] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11033'. [ 543.216154][T29697] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11043'. [ 543.290492][T29701] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11047'. [ 543.904371][T29732] netlink: 'syz.1.11060': attribute type 1 has an invalid length. [ 543.940696][T29732] netlink: 'syz.1.11060': attribute type 10 has an invalid length. [ 543.969143][T29732] netlink: 136 bytes leftover after parsing attributes in process `syz.1.11060'. [ 544.084836][T29736] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 544.247503][T29739] IPVS: nq: UDP 224.0.0.2:20004 - no destination available [ 544.767040][T29764] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11075'. [ 544.803354][T29765] pim6reg1: entered promiscuous mode [ 544.812039][ T1165] wlan1: Trigger new scan to find an IBSS to join [ 544.813524][T29765] pim6reg1: entered allmulticast mode [ 544.877790][T29767] syzkaller1: entered promiscuous mode [ 544.883418][T29767] syzkaller1: entered allmulticast mode [ 544.968604][T29771] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11079'. [ 545.004692][T29771] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11079'. [ 545.259781][T29781] netlink: 17 bytes leftover after parsing attributes in process `syz.2.11084'. [ 545.495586][T29791] netlink: 36 bytes leftover after parsing attributes in process `syz.4.11089'. [ 545.695330][T29799] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 545.897849][ T12] wlan1: Creating new IBSS network, BSSID 56:09:e8:9c:02:23 [ 546.328973][T29831] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11108'. [ 546.893609][T13997] wlan1: Trigger new scan to find an IBSS to join [ 547.142768][T29883] openvswitch: netlink: IPv4 tun info is not correct [ 547.409298][T29895] IPVS: wrr: UDP 224.0.0.2:20004 - no destination available [ 547.843497][ T1165] wlan1: Creating new IBSS network, BSSID 56:4f:7a:b4:58:2a [ 547.866714][T29918] syzkaller1: entered promiscuous mode [ 547.913010][T29918] syzkaller1: entered allmulticast mode [ 548.420141][T29953] __nla_validate_parse: 2 callbacks suppressed [ 548.420163][T29953] netlink: 40 bytes leftover after parsing attributes in process `syz.4.11166'. [ 548.673032][T29968] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11172'. [ 548.979196][T29985] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11178'. [ 548.990125][T29985] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11178'. [ 549.003245][T29985] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11178'. [ 549.017421][T29985] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11178'. [ 549.155605][T29993] netlink: 348 bytes leftover after parsing attributes in process `syz.3.11182'. [ 549.248483][T29997] sock: sock_set_timeout: `syz.3.11184' (pid 29997) tries to set negative timeout [ 549.392273][T30005] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.11189'. [ 549.819491][T30029] tipc: Enabling of bearer rejected, failed to enable media [ 550.654582][ T5851] Bluetooth: hci4: command 0x0406 tx timeout [ 550.699212][T30075] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.749781][T30079] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 550.833639][T30075] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.006290][T30075] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.106648][T30075] bond0: (slave netdevsim0): Releasing backup interface [ 551.122617][T30075] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.340703][T30075] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.405652][T30075] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.437440][T30075] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.488465][T30075] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 552.048580][T30143] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11247'. [ 552.159409][T30146] xt_CT: You must specify a L4 protocol and not use inversions on it [ 552.288850][T30157] validate_nla: 1 callbacks suppressed [ 552.288869][T30157] netlink: 'syz.0.11253': attribute type 9 has an invalid length. [ 552.356925][T30157] netlink: 'syz.0.11253': attribute type 9 has an invalid length. [ 552.392249][T30160] team0: Device xfrm1 is up. Set it down before adding it as a team port [ 552.671651][T30174] openvswitch: netlink: VXLAN extension 1 has unexpected len 0 expected 4 [ 552.746523][T30181] netlink: 'syz.1.11263': attribute type 17 has an invalid length. [ 552.767090][T30181] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11263'. [ 553.485792][T30211] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 555.367070][T30270] __nla_validate_parse: 3 callbacks suppressed [ 555.367091][T30270] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.11298'. [ 557.124644][ T5851] Bluetooth: hci4: command 0x0406 tx timeout [ 557.590363][T30387] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11351'. [ 557.922797][T30406] netlink: 830 bytes leftover after parsing attributes in process `syz.2.11360'. [ 559.196264][T30474] sctp: [Deprecated]: syz.4.11388 (pid 30474) Use of struct sctp_assoc_value in delayed_ack socket option. [ 559.196264][T30474] Use struct sctp_sack_info instead [ 559.345534][T30481] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11392'. [ 559.368004][T30481] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11392'. [ 560.282166][T30519] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11408'. [ 560.323764][T30523] xt_hashlimit: size too large, truncated to 1048576 [ 560.616448][T30536] netlink: 14560 bytes leftover after parsing attributes in process `syz.1.11415'. [ 560.673027][T30538] netlink: 'syz.2.11416': attribute type 1 has an invalid length. [ 560.690415][T30538] netlink: 136 bytes leftover after parsing attributes in process `syz.2.11416'. [ 560.710966][T30538] netlink: 'syz.2.11416': attribute type 2 has an invalid length. [ 560.723362][T30538] netlink: 'syz.2.11416': attribute type 1 has an invalid length. [ 561.273635][T30573] netlink: 'syz.1.11433': attribute type 29 has an invalid length. [ 561.283786][T30573] netlink: 'syz.1.11433': attribute type 29 has an invalid length. [ 561.743211][T30596] netlink: 17 bytes leftover after parsing attributes in process `syz.1.11454'. [ 562.152848][T30616] netlink: 36 bytes leftover after parsing attributes in process `syz.0.11455'. [ 562.811136][T30653] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11469'. [ 562.891075][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.065590][T30656] openvswitch: netlink: IPv4 tun info is not correct [ 563.555425][T30677] syzkaller1: entered promiscuous mode [ 563.561464][T30677] syzkaller1: entered allmulticast mode [ 564.518032][T30730] siw: device registration error -23 [ 564.713824][T30743] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11515'. [ 564.905569][T30751] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.11519'. [ 565.140406][T30761] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 565.382017][T30778] netlink: 68 bytes leftover after parsing attributes in process `syz.4.11532'. [ 565.787623][T30802] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11542'. [ 566.305512][T30828] netlink: 'syz.3.11551': attribute type 11 has an invalid length. [ 566.359548][T30820] veth0: entered promiscuous mode [ 566.380763][T30819] veth0: left promiscuous mode [ 566.649933][T30841] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11559'. [ 566.836950][T30849] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11562'. [ 566.982651][T30854] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.11564'. [ 567.065341][T30861] openvswitch: netlink: VXLAN extension 1 has unexpected len 0 expected 4 [ 567.355518][T30878] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 567.586421][T30878] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 567.605812][T30878] gretap2: entered promiscuous mode [ 567.623015][T30878] gretap2: entered allmulticast mode [ 567.647651][T30892] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11579'. [ 568.119571][T30916] netlink: 'syz.0.11590': attribute type 1 has an invalid length. [ 568.202164][T30922] xt_hashlimit: size too large, truncated to 1048576 [ 568.248948][T30924] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11594'. [ 568.265244][T30924] netlink: 'syz.3.11594': attribute type 1 has an invalid length. [ 568.287284][T30926] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11592'. [ 568.287933][T30924] netlink: 'syz.3.11594': attribute type 2 has an invalid length. [ 568.599052][T30934] netlink: 'syz.4.11598': attribute type 39 has an invalid length. [ 568.930535][T30948] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.054733][T30948] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.186534][T30948] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.287449][T30948] netdevsim netdevsim4 ÿÿÿÿÿÿ (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.305930][T30963] syzkaller1: entered promiscuous mode [ 569.311909][T30963] syzkaller1: entered allmulticast mode [ 569.452483][T30948] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 569.557351][T30948] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 569.627188][T30948] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 569.709875][T30948] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 569.739173][T30986] syzkaller1: entered promiscuous mode [ 569.754161][T30986] syzkaller1: entered allmulticast mode [ 569.837694][T30994] sctp: [Deprecated]: syz.4.11624 (pid 30994) Use of struct sctp_assoc_value in delayed_ack socket option. [ 569.837694][T30994] Use struct sctp_sack_info instead [ 569.862402][T30994] sctp: [Deprecated]: syz.4.11624 (pid 30994) Use of struct sctp_assoc_value in delayed_ack socket option. [ 569.862402][T30994] Use struct sctp_sack_info instead [ 570.492845][T31029] netlink: 'syz.4.11642': attribute type 4 has an invalid length. [ 570.616318][T31037] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11644'. [ 571.066515][T31061] netlink: 'syz.0.11654': attribute type 17 has an invalid length. [ 571.203902][T13997] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.252136][T13997] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 571.372568][T13997] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.388602][T13997] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 571.496639][T13997] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.523232][T13997] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 571.557572][T31071] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11659'. [ 571.660012][T13997] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.689396][T13997] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 571.711902][T31073] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11660'. [ 571.803275][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 571.815858][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 571.824665][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 571.833380][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 571.843025][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 572.260814][T31094] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.11667'. [ 572.413693][T31102] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11670'. [ 572.728883][T13997] bond0 (unregistering): (slave bond3): Releasing backup interface [ 572.739442][T13997] bond0 (unregistering): Released all slaves [ 572.753841][T13997] bond1 (unregistering): Released all slaves [ 572.770993][T13997] bond2 (unregistering): Released all slaves [ 572.878608][T13997] bond3 (unregistering): Released all slaves [ 572.998514][T13997] : left promiscuous mode [ 573.031426][T31110] vxcan1: tx address claim with different name [ 573.165071][T13997] tipc: Disabling bearer [ 573.170980][T13997] tipc: Left network mode [ 573.713123][T31137] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11685'. [ 573.924174][ T51] Bluetooth: hci2: command tx timeout [ 574.241040][T13997] hsr_slave_0: left promiscuous mode [ 574.262290][T13997] hsr_slave_1: left promiscuous mode [ 574.316123][T13997] veth1_macvtap: left promiscuous mode [ 574.322909][T13997] veth0_macvtap: left promiscuous mode [ 574.344384][T13997] veth1_vlan: left promiscuous mode [ 574.354580][T13997] : left promiscuous mode [ 574.620422][T13997] pimreg3 (unregistering): left allmulticast mode [ 575.277310][T31074] chnl_net:caif_netlink_parms(): no params data found [ 575.541406][T31074] bridge0: port 1(bridge_slave_0) entered blocking state [ 575.563147][T31074] bridge0: port 1(bridge_slave_0) entered disabled state [ 575.570719][T31074] bridge_slave_0: entered allmulticast mode [ 575.578738][T31074] bridge_slave_0: entered promiscuous mode [ 575.597748][T31074] bridge0: port 2(bridge_slave_1) entered blocking state [ 575.624461][T31074] bridge0: port 2(bridge_slave_1) entered disabled state [ 575.641895][T31074] bridge_slave_1: entered allmulticast mode [ 575.657965][T31074] bridge_slave_1: entered promiscuous mode [ 575.743159][T31074] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 575.767973][T31074] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 575.848870][T31199] netlink: 'syz.3.11711': attribute type 4 has an invalid length. [ 575.906770][ T13] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 575.970033][T31074] team0: Port device team_slave_0 added [ 575.994523][T13997] IPVS: stop unused estimator thread 0... [ 576.004161][ T51] Bluetooth: hci2: command tx timeout [ 576.019265][T31074] team0: Port device team_slave_1 added [ 576.107664][T31074] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 576.124987][T31074] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 576.151473][T31074] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 576.196458][T31074] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 576.203487][T31074] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 576.250932][T31074] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 576.421220][T31074] hsr_slave_0: entered promiscuous mode [ 576.448960][T31074] hsr_slave_1: entered promiscuous mode [ 577.035469][T31232] syzkaller1: entered promiscuous mode [ 577.045131][T31232] syzkaller1: entered allmulticast mode [ 577.213114][T31248] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5 [ 577.530834][T31074] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 577.576695][T31074] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 577.601274][T31074] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 577.629932][T31074] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 577.853016][T31074] 8021q: adding VLAN 0 to HW filter on device bond0 [ 577.895131][T31074] 8021q: adding VLAN 0 to HW filter on device team0 [ 577.913615][T31272] sctp: [Deprecated]: syz.0.11739 (pid 31272) Use of struct sctp_assoc_value in delayed_ack socket option. [ 577.913615][T31272] Use struct sctp_sack_info instead [ 577.939666][T13997] bridge0: port 1(bridge_slave_0) entered blocking state [ 577.946867][T13997] bridge0: port 1(bridge_slave_0) entered forwarding state [ 577.963789][T13997] bridge0: port 2(bridge_slave_1) entered blocking state [ 577.971015][T13997] bridge0: port 2(bridge_slave_1) entered forwarding state [ 578.085521][ T51] Bluetooth: hci2: command tx timeout [ 578.552968][T31074] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 578.873867][T31074] veth0_vlan: entered promiscuous mode [ 578.910276][T31074] veth1_vlan: entered promiscuous mode [ 579.030251][T31074] veth0_macvtap: entered promiscuous mode [ 579.053973][T31074] veth1_macvtap: entered promiscuous mode [ 579.083318][T31074] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 579.178448][T31074] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 579.300449][T31074] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 579.340470][T31074] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 579.375980][T31074] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 579.403990][T31074] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 579.463348][T31337] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11764'. [ 579.475557][T31337] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11764'. [ 579.757930][T13997] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 579.782898][T13997] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 579.879242][ T1103] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 579.920536][ T1103] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 580.165977][ T51] Bluetooth: hci2: command tx timeout [ 580.382609][T31378] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.11782'. [ 580.797748][T31402] netlink: 'syz.1.11795': attribute type 1 has an invalid length. [ 581.251649][ T4399] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 581.753695][ T4399] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 581.943154][ T4399] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.084827][ T12] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 582.144773][ T4399] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.163648][ T5851] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 582.184345][ T5851] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 582.192416][ T5851] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 582.201281][ T5851] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 582.209772][ T5851] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 582.455934][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 582.465543][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 582.473408][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 582.481993][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 582.490522][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 582.716769][T31462] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11819'. [ 582.731496][ T4399] bridge_slave_1: left allmulticast mode [ 582.747000][ T4399] bridge_slave_1: left promiscuous mode [ 582.754452][ T4399] bridge0: port 2(bridge_slave_1) entered disabled state [ 582.851240][ T4399] bridge_slave_0: left allmulticast mode [ 582.860083][ T4399] bridge_slave_0: left promiscuous mode [ 582.878993][ T4399] bridge0: port 1(bridge_slave_0) entered disabled state [ 583.550312][ T4399] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 583.564480][ T4399] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 583.579554][ T4399] bond0 (unregistering): Released all slaves [ 583.783457][T31488] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11830'. [ 583.811308][T31488] netlink: 'syz.3.11830': attribute type 7 has an invalid length. [ 583.824168][T31488] netlink: 'syz.3.11830': attribute type 8 has an invalid length. [ 583.832010][T31488] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11830'. [ 584.249325][ T5851] Bluetooth: hci2: command tx timeout [ 584.439811][T31515] syzkaller1: entered promiscuous mode [ 584.465234][T31515] syzkaller1: entered allmulticast mode [ 584.574711][ T5851] Bluetooth: hci4: command tx timeout [ 584.608927][T31445] chnl_net:caif_netlink_parms(): no params data found [ 584.658390][T31521] netlink: 9 bytes leftover after parsing attributes in process `syz.3.11843'. [ 584.710072][T31519] netlink: 5 bytes leftover after parsing attributes in process `syz.3.11843'. [ 584.729075][ T4399] hsr_slave_0: left promiscuous mode [ 584.738481][ T4399] hsr_slave_1: left promiscuous mode [ 584.745100][ T4399] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 584.752562][ T4399] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 584.774592][ T4399] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 584.782359][ T4399] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 584.827864][ T4399] veth1_macvtap: left promiscuous mode [ 584.833480][ T4399] veth0_macvtap: left promiscuous mode [ 584.846780][ T4399] veth1_vlan: left promiscuous mode [ 584.852155][ T4399] veth0_vlan: left promiscuous mode [ 585.327693][ T4399] team0 (unregistering): Port device team_slave_1 removed [ 585.369756][ T4399] team0 (unregistering): Port device team_slave_0 removed [ 585.745028][T31521] gretap0: entered promiscuous mode [ 585.750535][T31519] 0ªX¹¦D: renamed from gretap0 [ 585.762884][T31519] 0ªX¹¦D: left promiscuous mode [ 585.773977][T31519] 0ªX¹¦D: entered allmulticast mode [ 585.792118][T31519] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 585.892099][T31445] bridge0: port 1(bridge_slave_0) entered blocking state [ 585.912224][T31445] bridge0: port 1(bridge_slave_0) entered disabled state [ 585.923204][T31445] bridge_slave_0: entered allmulticast mode [ 585.931169][T31445] bridge_slave_0: entered promiscuous mode [ 585.948373][T31445] bridge0: port 2(bridge_slave_1) entered blocking state [ 585.956525][T31445] bridge0: port 2(bridge_slave_1) entered disabled state [ 585.963818][T31445] bridge_slave_1: entered allmulticast mode [ 585.983381][T31445] bridge_slave_1: entered promiscuous mode [ 586.115623][T31445] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 586.161789][T31445] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 586.324186][ T5851] Bluetooth: hci2: command tx timeout [ 586.366190][T31445] team0: Port device team_slave_0 added [ 586.377714][T31445] team0: Port device team_slave_1 added [ 586.506025][T31445] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 586.513031][T31445] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 586.542260][T31445] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 586.563781][T31445] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 586.571096][T31445] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 586.611766][T31445] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 586.626015][T31450] chnl_net:caif_netlink_parms(): no params data found [ 586.644196][ T5851] Bluetooth: hci4: command tx timeout [ 586.878769][T31445] hsr_slave_0: entered promiscuous mode [ 586.897091][T31445] hsr_slave_1: entered promiscuous mode [ 586.924395][T31570] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11861'. [ 587.053372][ T4399] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.182289][T31450] bridge0: port 1(bridge_slave_0) entered blocking state [ 587.192718][T31450] bridge0: port 1(bridge_slave_0) entered disabled state [ 587.213325][T31450] bridge_slave_0: entered allmulticast mode [ 587.221205][T31450] bridge_slave_0: entered promiscuous mode [ 587.250313][T31450] bridge0: port 2(bridge_slave_1) entered blocking state [ 587.257701][T31450] bridge0: port 2(bridge_slave_1) entered disabled state [ 587.273586][T31450] bridge_slave_1: entered allmulticast mode [ 587.282345][T31450] bridge_slave_1: entered promiscuous mode [ 587.403083][ T4399] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.460874][ T4399] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.489254][T31450] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 587.531913][T31450] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 587.546864][ T4399] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.703637][T31450] team0: Port device team_slave_0 added [ 587.769334][T31450] team0: Port device team_slave_1 added [ 587.842926][T31450] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 587.866504][T31450] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 587.904810][T31450] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 587.917488][T31450] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 587.924913][T31450] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 587.951596][T31450] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 588.061174][T31607] netlink: 'syz.1.11875': attribute type 4 has an invalid length. [ 588.171986][T31610] netlink: 36 bytes leftover after parsing attributes in process `syz.1.11877'. [ 588.216035][ T4399] bridge0: port 1(batadv0) entered disabled state [ 588.404454][ T5851] Bluetooth: hci2: command tx timeout [ 588.473585][T31619] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.11881'. [ 588.727432][ T5851] Bluetooth: hci4: command tx timeout [ 588.828863][ T4399] bond1 (unregistering): Released all slaves [ 588.845001][ T4399] bond2 (unregistering): Released all slaves [ 588.890001][T31450] hsr_slave_0: entered promiscuous mode [ 588.897775][T31450] hsr_slave_1: entered promiscuous mode [ 588.918954][T31450] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 588.942198][T31450] Cannot create hsr debugfs directory [ 589.490580][T31642] netlink: 64 bytes leftover after parsing attributes in process `syz.1.11890'. [ 589.566440][T31445] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 589.601871][T31445] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 589.696014][T31445] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 589.747336][T31652] netlink: 'syz.1.11894': attribute type 1 has an invalid length. [ 589.771653][T31652] netlink: 172 bytes leftover after parsing attributes in process `syz.1.11894'. [ 589.829435][T31445] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 589.910909][T31659] openvswitch: netlink: IPv4 tun info is not correct [ 590.130044][T31671] netlink: 'syz.3.11900': attribute type 4 has an invalid length. [ 590.158853][ T4399] vlan0: left allmulticast mode [ 590.173582][ T4399] veth0_vlan: left allmulticast mode [ 590.182896][ T4399] vlan0: left promiscuous mode [ 590.192821][ T4399] veth1_vlan: left promiscuous mode [ 590.200478][ T4399] veth0_vlan: left promiscuous mode [ 590.494268][ T5851] Bluetooth: hci2: command tx timeout [ 590.575466][T31686] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11906'. [ 590.807477][ T5851] Bluetooth: hci4: command tx timeout [ 590.839739][T31693] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11909'. [ 591.607573][T31696] netlink: 'syz.3.11911': attribute type 4 has an invalid length. [ 591.708672][T31450] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 591.766170][T31445] 8021q: adding VLAN 0 to HW filter on device bond0 [ 591.787955][T31450] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 591.817782][T31450] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 591.848693][T31450] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 591.974657][T31445] 8021q: adding VLAN 0 to HW filter on device team0 [ 592.007932][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 592.015163][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 592.081406][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 592.088638][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 592.222953][ T4399] IPVS: stop unused estimator thread 0... [ 592.291654][T31445] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 592.379509][T31450] 8021q: adding VLAN 0 to HW filter on device bond0 [ 592.461288][T31450] 8021q: adding VLAN 0 to HW filter on device team0 [ 592.547885][ T4399] bridge0: port 1(bridge_slave_0) entered blocking state [ 592.555125][ T4399] bridge0: port 1(bridge_slave_0) entered forwarding state [ 592.558605][T31738] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.11925'. [ 592.600612][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 592.607833][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 592.867670][T31753] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.11929'. [ 592.881880][T31445] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 593.002222][T31445] veth0_vlan: entered promiscuous mode [ 593.020975][T31445] veth1_vlan: entered promiscuous mode [ 593.082162][T31445] veth0_macvtap: entered promiscuous mode [ 593.116316][T31445] veth1_macvtap: entered promiscuous mode [ 593.139102][T31762] syzkaller1: entered promiscuous mode [ 593.150956][T31762] syzkaller1: entered allmulticast mode [ 593.241331][T31445] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 593.252647][T31767] netlink: 'syz.3.11935': attribute type 39 has an invalid length. [ 593.316763][T31445] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 593.338352][T31445] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 593.350512][T31445] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 593.362009][T31445] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 593.381867][T31445] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 593.420253][T31450] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 593.656171][ T1036] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 593.686816][ T1036] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 593.768933][ T1036] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 593.794415][ T1036] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 594.006341][T31794] netlink: 27 bytes leftover after parsing attributes in process `syz.0.11946'. [ 594.222737][T31450] veth0_vlan: entered promiscuous mode [ 594.271821][T31450] veth1_vlan: entered promiscuous mode [ 594.327563][T31450] veth0_macvtap: entered promiscuous mode [ 594.362736][T31450] veth1_macvtap: entered promiscuous mode [ 594.420048][T31450] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 594.459910][T31450] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 594.489110][T31450] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.508043][T31450] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.526324][T31450] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.556062][T31450] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.692562][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 594.713550][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 594.817918][T13997] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 594.894429][ T1036] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 594.907669][ T1036] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 595.031655][T13997] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.517240][T13997] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.631204][T13997] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.696260][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 595.710174][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 595.721062][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 595.734903][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 595.747191][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 595.812330][T13997] bridge_slave_1: left allmulticast mode [ 595.834142][T13997] bridge_slave_1: left promiscuous mode [ 595.840003][T13997] bridge0: port 2(bridge_slave_1) entered disabled state [ 595.871613][T13997] bridge_slave_0: left allmulticast mode [ 595.878587][T13997] bridge_slave_0: left promiscuous mode [ 595.895339][T13997] bridge0: port 1(bridge_slave_0) entered disabled state [ 596.277512][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 596.293128][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 596.304960][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 596.332496][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 596.349416][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 596.369457][T13997] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 596.381226][T13997] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 596.393687][T13997] bond0 (unregistering): Released all slaves [ 596.829868][T31877] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.11977'. [ 597.382655][T31843] chnl_net:caif_netlink_parms(): no params data found [ 597.611609][T31905] syzkaller1: entered promiscuous mode [ 597.632688][T31905] syzkaller1: entered allmulticast mode [ 597.844673][ T5851] Bluetooth: hci2: command tx timeout [ 597.889856][T13997] hsr_slave_0: left promiscuous mode [ 597.908038][T13997] hsr_slave_1: left promiscuous mode [ 597.934642][T13997] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 597.952426][T13997] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 597.963403][T13997] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 597.972573][T13997] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 598.013133][T13997] veth1_macvtap: left promiscuous mode [ 598.024099][T13997] veth0_macvtap: left promiscuous mode [ 598.030393][T13997] veth1_vlan: left promiscuous mode [ 598.036776][T13997] veth0_vlan: left promiscuous mode [ 598.167250][T31931] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11999'. [ 598.406782][ T5851] Bluetooth: hci4: command tx timeout [ 598.560378][T13997] team0 (unregistering): Port device team_slave_1 removed [ 598.600132][T13997] team0 (unregistering): Port device team_slave_0 removed [ 598.967023][T31843] bridge0: port 1(bridge_slave_0) entered blocking state [ 598.979931][T31843] bridge0: port 1(bridge_slave_0) entered disabled state [ 598.990173][T31843] bridge_slave_0: entered allmulticast mode [ 599.006713][T31843] bridge_slave_0: entered promiscuous mode [ 599.061922][T31843] bridge0: port 2(bridge_slave_1) entered blocking state [ 599.083829][T31843] bridge0: port 2(bridge_slave_1) entered disabled state [ 599.117534][T31843] bridge_slave_1: entered allmulticast mode [ 599.127550][T31933] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12000'. [ 599.131908][T31843] bridge_slave_1: entered promiscuous mode [ 599.168796][T31933] netlink: 'syz.3.12000': attribute type 7 has an invalid length. [ 599.189410][T31933] netlink: 20 bytes leftover after parsing attributes in process `syz.3.12000'. [ 599.286712][T31843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 599.313458][T31843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 599.450427][T31843] team0: Port device team_slave_0 added [ 599.457106][T31940] syzkaller1: entered promiscuous mode [ 599.462624][T31940] syzkaller1: entered allmulticast mode [ 599.522517][T31946] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12016'. [ 599.538704][T31843] team0: Port device team_slave_1 added [ 599.592293][T31949] pimreg: entered allmulticast mode [ 599.646342][T31953] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12006'. [ 599.688600][T31843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 599.706275][T31843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 599.738656][T31843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 599.778038][T31843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 599.785239][T31843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 599.822818][T31843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 599.900876][T31954] syzkaller1: entered promiscuous mode [ 599.906967][T31954] syzkaller1: entered allmulticast mode [ 599.930415][ T5851] Bluetooth: hci2: command tx timeout [ 600.112397][T13997] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 600.181358][T31861] chnl_net:caif_netlink_parms(): no params data found [ 600.240720][T31843] hsr_slave_0: entered promiscuous mode [ 600.265282][T31843] hsr_slave_1: entered promiscuous mode [ 600.327387][T13997] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 600.494752][ T5851] Bluetooth: hci4: command tx timeout [ 600.507126][T13997] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 600.690031][T13997] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 600.733562][T31861] bridge0: port 1(bridge_slave_0) entered blocking state [ 600.742830][T31861] bridge0: port 1(bridge_slave_0) entered disabled state [ 600.753763][T31861] bridge_slave_0: entered allmulticast mode [ 600.762501][T31861] bridge_slave_0: entered promiscuous mode [ 600.795547][T31861] bridge0: port 2(bridge_slave_1) entered blocking state [ 600.802775][T31861] bridge0: port 2(bridge_slave_1) entered disabled state [ 600.818972][T31861] bridge_slave_1: entered allmulticast mode [ 600.841511][T31861] bridge_slave_1: entered promiscuous mode [ 601.079019][T32004] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12017'. [ 601.177822][T31861] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 601.217881][T31861] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 601.442788][T31861] team0: Port device team_slave_0 added [ 601.492873][T32020] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 601.506462][T13997] bridge_slave_1: left allmulticast mode [ 601.512167][T13997] bridge_slave_1: left promiscuous mode [ 601.518455][T13997] bridge0: port 2(bridge_slave_1) entered disabled state [ 601.531571][T13997] bridge_slave_0: left allmulticast mode [ 601.542583][T13997] bridge_slave_0: left promiscuous mode [ 601.548545][T13997] bridge0: port 1(bridge_slave_0) entered disabled state [ 601.643226][T32029] netlink: 'syz.1.12025': attribute type 11 has an invalid length. [ 601.898773][T13997] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 601.909966][T13997] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 601.922064][T13997] bond0 (unregistering): Released all slaves [ 601.944286][T31861] team0: Port device team_slave_1 added [ 602.016440][ T5851] Bluetooth: hci2: command tx timeout [ 602.163679][T31861] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 602.176615][T31861] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 602.204127][T31861] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 602.284691][T31861] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 602.291718][T31861] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 602.344470][T32040] netlink: 'syz.1.12031': attribute type 1 has an invalid length. [ 602.400613][T31861] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 602.460661][T32046] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12035'. [ 602.479394][T32046] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12035'. [ 602.564770][ T5851] Bluetooth: hci4: command tx timeout [ 602.676506][T31861] hsr_slave_0: entered promiscuous mode [ 602.695657][T31861] hsr_slave_1: entered promiscuous mode [ 602.716116][T31861] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 602.750691][T31861] Cannot create hsr debugfs directory [ 602.993483][T13997] hsr_slave_0: left promiscuous mode [ 603.001004][T13997] hsr_slave_1: left promiscuous mode [ 603.014730][T13997] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 603.022178][T13997] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 603.053494][T13997] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 603.064066][T13997] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 603.112478][T13997] veth1_macvtap: left promiscuous mode [ 603.126616][T13997] veth0_macvtap: left promiscuous mode [ 603.132287][T13997] veth1_vlan: left promiscuous mode [ 603.151528][T13997] veth0_vlan: left promiscuous mode [ 603.788356][T13997] team0 (unregistering): Port device team_slave_1 removed [ 603.832732][T13997] team0 (unregistering): Port device team_slave_0 removed [ 604.094822][ T5851] Bluetooth: hci2: command tx timeout [ 604.327569][T31843] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 604.378349][T31843] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 604.422829][T31843] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 604.530682][T31843] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 604.655622][ T5851] Bluetooth: hci4: command tx timeout [ 604.701668][T32107] netlink: 14528 bytes leftover after parsing attributes in process `syz.0.12057'. [ 605.013392][T31843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 605.081110][T31843] 8021q: adding VLAN 0 to HW filter on device team0 [ 605.095351][T31694] bridge0: port 1(bridge_slave_0) entered blocking state [ 605.102989][T31694] bridge0: port 1(bridge_slave_0) entered forwarding state [ 605.224344][T13997] bridge0: port 2(bridge_slave_1) entered blocking state [ 605.231583][T13997] bridge0: port 2(bridge_slave_1) entered forwarding state [ 605.287731][T31861] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 605.322380][T31861] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 605.385307][T31861] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 605.394725][ T5917] hid-generic 0005:0C45:1010.0001: item fetching failed at offset 0/1 [ 605.405547][ T5917] hid-generic 0005:0C45:1010.0001: probe with driver hid-generic failed with error -22 [ 605.432912][T31861] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 605.812480][T31861] 8021q: adding VLAN 0 to HW filter on device bond0 [ 605.824236][T32163] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12077'. [ 605.852417][T31861] 8021q: adding VLAN 0 to HW filter on device team0 [ 605.866557][T32163] netlink: 'syz.0.12077': attribute type 1 has an invalid length. [ 605.879923][T32163] netlink: 'syz.0.12077': attribute type 2 has an invalid length. [ 605.913665][T13997] bridge0: port 1(bridge_slave_0) entered blocking state [ 605.920882][T13997] bridge0: port 1(bridge_slave_0) entered forwarding state [ 605.943821][T13997] bridge0: port 2(bridge_slave_1) entered blocking state [ 605.951035][T13997] bridge0: port 2(bridge_slave_1) entered forwarding state [ 606.037392][T31843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 606.191415][T31843] veth0_vlan: entered promiscuous mode [ 606.220037][T31843] veth1_vlan: entered promiscuous mode [ 606.319682][T31843] veth0_macvtap: entered promiscuous mode [ 606.353551][T31843] veth1_macvtap: entered promiscuous mode [ 606.417648][T31843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 606.436823][T31843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 606.455381][T31843] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.464924][T31843] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.474121][T31843] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.482857][T31843] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.596467][T32187] netlink: 60 bytes leftover after parsing attributes in process `syz.3.12084'. [ 606.816369][T13997] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 606.846917][T31861] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 606.858569][T13997] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 606.972797][ T1103] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 606.997411][ T1103] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 607.802591][T32222] af_packet: tpacket_rcv: packet too big, clamped from 39 to 4294967272. macoff=96 [ 608.002437][T31861] veth0_vlan: entered promiscuous mode [ 608.079057][ T67] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.109536][T31861] veth1_vlan: entered promiscuous mode [ 608.171704][T31861] veth0_macvtap: entered promiscuous mode [ 608.182203][T31861] veth1_macvtap: entered promiscuous mode [ 608.202866][T31861] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 608.230244][ T67] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.256295][T31861] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 608.269063][T31861] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 608.278431][T31861] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 608.287593][T31861] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 608.296514][T31861] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 608.386770][ T1036] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 608.397047][ T1036] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 608.423672][T31694] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 608.431688][T31694] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 608.677002][ T67] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.846244][ T67] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 609.157323][ T67] bridge_slave_1: left allmulticast mode [ 609.163520][ T67] bridge_slave_1: left promiscuous mode [ 609.173113][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 609.174397][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 609.188262][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 609.198040][T32247] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.12111'. [ 609.201644][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 609.232062][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 609.240496][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 609.264787][ T67] bridge_slave_0: left allmulticast mode [ 609.270515][ T67] bridge_slave_0: left promiscuous mode [ 609.276416][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 609.876477][ T5851] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 609.891317][ T5851] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 609.893124][T32265] netlink: 260 bytes leftover after parsing attributes in process `syz.3.12116'. [ 609.906477][ T5851] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 609.917518][ T5851] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 609.936516][ T5851] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 609.985982][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 609.997294][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 610.010145][ T67] bond0 (unregistering): Released all slaves [ 610.048712][T32261] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12116'. [ 610.689282][T32290] netlink: 'syz.0.12127': attribute type 25 has an invalid length. [ 610.697914][T32290] netlink: 'syz.0.12127': attribute type 1 has an invalid length. [ 610.942999][T32297] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12130'. [ 610.952410][T32297] tipc: Enabling of bearer rejected, failed to enable media [ 611.288668][T32248] chnl_net:caif_netlink_parms(): no params data found [ 611.295752][ T51] Bluetooth: hci2: command tx timeout [ 611.600006][T32320] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 611.626334][ T67] hsr_slave_0: left promiscuous mode [ 611.649376][ T67] hsr_slave_1: left promiscuous mode [ 611.662791][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 611.681218][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 611.691298][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 611.700756][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 611.756788][ T67] veth1_macvtap: left promiscuous mode [ 611.769766][ T67] veth0_macvtap: left promiscuous mode [ 611.785657][ T67] veth1_vlan: left promiscuous mode [ 611.798241][ T67] veth0_vlan: left promiscuous mode [ 612.004532][ T51] Bluetooth: hci4: command tx timeout [ 612.308549][ T67] team0 (unregistering): Port device team_slave_1 removed [ 612.352158][ T67] team0 (unregistering): Port device team_slave_0 removed [ 612.939637][T32248] bridge0: port 1(bridge_slave_0) entered blocking state [ 612.956781][T32248] bridge0: port 1(bridge_slave_0) entered disabled state [ 612.965753][T32248] bridge_slave_0: entered allmulticast mode [ 612.973555][T32248] bridge_slave_0: entered promiscuous mode [ 612.984144][T32248] bridge0: port 2(bridge_slave_1) entered blocking state [ 612.991309][T32248] bridge0: port 2(bridge_slave_1) entered disabled state [ 612.999040][T32248] bridge_slave_1: entered allmulticast mode [ 613.007718][T32248] bridge_slave_1: entered promiscuous mode [ 613.014974][T32341] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12146'. [ 613.138871][T32248] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 613.175872][T32248] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 613.278395][T32248] team0: Port device team_slave_0 added [ 613.305938][T32248] team0: Port device team_slave_1 added [ 613.370121][ T51] Bluetooth: hci2: command tx timeout [ 613.532553][T32248] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 613.545386][T32248] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 613.576531][T32248] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 613.615326][T32248] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 613.622327][T32248] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 613.669557][T32248] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 613.808419][ T67] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.903520][ T67] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.995684][T32263] chnl_net:caif_netlink_parms(): no params data found [ 614.027211][T32248] hsr_slave_0: entered promiscuous mode [ 614.033790][T32248] hsr_slave_1: entered promiscuous mode [ 614.085816][ T51] Bluetooth: hci4: command tx timeout [ 614.126109][ T67] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 614.226301][T32387] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000035: 0000 [#1] SMP KASAN PTI [ 614.238263][T32387] KASAN: null-ptr-deref in range [0x00000000000001a8-0x00000000000001af] [ 614.246719][T32387] CPU: 1 UID: 0 PID: 32387 Comm: syz.3.12164 Not tainted 6.16.0-rc4-syzkaller-00121-g80852774ba0a #0 PREEMPT(full) [ 614.258896][T32387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 614.268973][T32387] RIP: 0010:htb_qlen_notify+0x31/0xc0 [ 614.274370][T32387] Code: 41 56 41 55 41 54 53 49 89 f6 49 89 ff 49 bc 00 00 00 00 00 fc ff df e8 cd 61 3e f8 49 8d 9e a8 01 00 00 49 89 dd 49 c1 ed 03 <43> 0f b6 44 25 00 84 c0 75 4d 8b 2b 31 ff 89 ee e8 ea 65 3e f8 85 [ 614.294005][T32387] RSP: 0018:ffffc900043ff090 EFLAGS: 00010206 [ 614.300089][T32387] RAX: ffffffff8981fcd3 RBX: 00000000000001a8 RCX: 0000000000080000 [ 614.308066][T32387] RDX: ffffc9000ee6a000 RSI: 000000000000032c RDI: 000000000000032d [ 614.316046][T32387] RBP: dffffc0000000000 R08: ffff88805afd9e00 R09: 0000000000000002 [ 614.324021][T32387] R10: 00000000ffffffff R11: ffffffff8981fcb0 R12: dffffc0000000000 [ 614.331995][T32387] R13: 0000000000000035 R14: 0000000000000000 R15: ffff88807e8d8000 [ 614.339977][T32387] FS: 00007fa800f376c0(0000) GS:ffff888125d1d000(0000) knlGS:0000000000000000 [ 614.348918][T32387] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 614.355507][T32387] CR2: 0000001b3101bff8 CR3: 00000000362d8000 CR4: 00000000003526f0 [ 614.363483][T32387] Call Trace: [ 614.366768][T32387] [ 614.369708][T32387] qdisc_tree_reduce_backlog+0x299/0x480 [ 614.375352][T32387] ? qdisc_tree_reduce_backlog+0x3c/0x480 [ 614.381074][T32387] pie_change+0x96d/0xca0 [ 614.385433][T32387] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 614.391339][T32387] ? lockdep_hardirqs_on+0x9c/0x150 [ 614.396552][T32387] ? __pfx_pie_change+0x10/0x10 [ 614.401406][T32387] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 614.407320][T32387] ? timer_init_key+0x171/0x2d0 [ 614.412184][T32387] ? __pfx_pie_init+0x10/0x10 [ 614.416866][T32387] pie_init+0x2a3/0x3f0 [ 614.421032][T32387] qdisc_create+0x7a9/0xea0 [ 614.425547][T32387] tc_modify_qdisc+0x1426/0x2010 [ 614.430496][T32387] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 614.435798][T32387] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 614.441096][T32387] rtnetlink_rcv_msg+0x77c/0xb70 [ 614.446043][T32387] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 614.451158][T32387] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 614.456643][T32387] netlink_rcv_skb+0x205/0x470 [ 614.461434][T32387] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 614.466924][T32387] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 614.472233][T32387] ? netlink_deliver_tap+0x2e/0x1b0 [ 614.477445][T32387] ? netlink_deliver_tap+0x2e/0x1b0 [ 614.482670][T32387] netlink_unicast+0x759/0x8e0 [ 614.487460][T32387] netlink_sendmsg+0x805/0xb30 [ 614.492249][T32387] ? __pfx_netlink_sendmsg+0x10/0x10 [ 614.497554][T32387] ? aa_sock_msg_perm+0x94/0x160 [ 614.502511][T32387] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 614.507800][T32387] ? __pfx_netlink_sendmsg+0x10/0x10 [ 614.513099][T32387] __sock_sendmsg+0x219/0x270 [ 614.517794][T32387] ____sys_sendmsg+0x505/0x830 [ 614.522572][T32387] ? __pfx_____sys_sendmsg+0x10/0x10 [ 614.527876][T32387] ? import_iovec+0x74/0xa0 [ 614.532401][T32387] ___sys_sendmsg+0x21f/0x2a0 [ 614.537101][T32387] ? __pfx____sys_sendmsg+0x10/0x10 [ 614.542362][T32387] ? __fget_files+0x2a/0x420 [ 614.546969][T32387] ? __fget_files+0x3a0/0x420 [ 614.551664][T32387] __x64_sys_sendmsg+0x19b/0x260 [ 614.556613][T32387] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 614.562084][T32387] ? do_user_addr_fault+0xc8a/0x1390 [ 614.567386][T32387] ? do_syscall_64+0xbe/0x3b0 [ 614.572080][T32387] do_syscall_64+0xfa/0x3b0 [ 614.576593][T32387] ? lockdep_hardirqs_on+0x9c/0x150 [ 614.581803][T32387] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 614.587880][T32387] ? clear_bhb_loop+0x60/0xb0 [ 614.592573][T32387] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 614.598488][T32387] RIP: 0033:0x7fa80018e929 [ 614.602922][T32387] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 614.622553][T32387] RSP: 002b:00007fa800f37038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 614.630985][T32387] RAX: ffffffffffffffda RBX: 00007fa8003b6080 RCX: 00007fa80018e929 [ 614.638966][T32387] RDX: 0000000000004000 RSI: 0000200000000280 RDI: 0000000000000003 [ 614.646937][T32387] RBP: 00007fa800210b39 R08: 0000000000000000 R09: 0000000000000000 [ 614.654908][T32387] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 614.662884][T32387] R13: 0000000000000001 R14: 00007fa8003b6080 R15: 00007ffc8f61bf08 [ 614.670877][T32387] [ 614.673917][T32387] Modules linked in: [ 614.677996][T32387] ---[ end trace 0000000000000000 ]--- [ 614.683495][T32387] RIP: 0010:htb_qlen_notify+0x31/0xc0 [ 614.688969][T32387] Code: 41 56 41 55 41 54 53 49 89 f6 49 89 ff 49 bc 00 00 00 00 00 fc ff df e8 cd 61 3e f8 49 8d 9e a8 01 00 00 49 89 dd 49 c1 ed 03 <43> 0f b6 44 25 00 84 c0 75 4d 8b 2b 31 ff 89 ee e8 ea 65 3e f8 85 [ 614.708663][T32387] RSP: 0018:ffffc900043ff090 EFLAGS: 00010206 [ 614.714804][T32387] RAX: ffffffff8981fcd3 RBX: 00000000000001a8 RCX: 0000000000080000 [ 614.722824][T32387] RDX: ffffc9000ee6a000 RSI: 000000000000032c RDI: 000000000000032d [ 614.730831][T32387] RBP: dffffc0000000000 R08: ffff88805afd9e00 R09: 0000000000000002 [ 614.738849][T32387] R10: 00000000ffffffff R11: ffffffff8981fcb0 R12: dffffc0000000000 [ 614.746869][T32387] R13: 0000000000000035 R14: 0000000000000000 R15: ffff88807e8d8000 [ 614.754870][T32387] FS: 00007fa800f376c0(0000) GS:ffff888125d1d000(0000) knlGS:0000000000000000 [ 614.763833][T32387] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 614.770448][T32387] CR2: 0000001b3101bff8 CR3: 00000000362d8000 CR4: 00000000003526f0 [ 614.778460][T32387] Kernel panic - not syncing: Fatal exception in interrupt [ 614.786267][T32387] Kernel Offset: disabled [ 614.790598][T32387] Rebooting in 86400 seconds..