last executing test programs: 52.157372683s ago: executing program 4 (id=3257): getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000001080)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e24, @remote}]}, 0x0) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='nr0\x00', 0x10) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f00000022c0)={0x0, 0x0, &(0x7f0000002280)={&(0x7f00000001c0)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x8010}, 0x0) sendmmsg$inet(r0, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)='\f', 0x1}], 0x1, 0x0, 0x0, 0x2000000}}], 0xfdef, 0x0) 52.02489627s ago: executing program 4 (id=3259): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000640)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="02"], 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) 51.849733398s ago: executing program 4 (id=3262): socket$kcm(0x21, 0x2, 0xa) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2a500}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MLD_VERSION={0x5, 0x2c, 0x2}, @IFLA_BR_AGEING_TIME={0x8, 0x4, 0x80000000}]}}}]}, 0x44}}, 0x0) 51.207426659s ago: executing program 4 (id=3272): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='westwood\x00', 0x9) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)='h7x', 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000840)="b1f56ee29c433328d3b2a83bd97e37007087acae7568", 0x16}], 0x1}}], 0x2, 0xc0) 49.621140666s ago: executing program 1 (id=3283): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000280)="db", 0x1}], 0x1}, 0x41) recvmsg(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) recvmsg(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x2) sendmsg$inet(r1, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000380)="fb", 0x1}], 0x1, &(0x7f0000000c80)=ANY=[@ANYBLOB='X'], 0x58}, 0x8080) 49.27963144s ago: executing program 1 (id=3285): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x2, 0x2, 0x0, @void, @value}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 49.085498115s ago: executing program 1 (id=3288): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x12, 0x1, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r0, &(0x7f00000001c0), &(0x7f0000000280)=@udp=r1}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r0, &(0x7f0000000640)="b4", &(0x7f0000000180)=@udp=r1}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000780)={r0, &(0x7f0000000380), 0x0}, 0x20) 47.247366854s ago: executing program 1 (id=3301): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000, @void, @value}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYBLOB='c 75:*\tmm'], 0x3d) 31.615166094s ago: executing program 4 (id=3272): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='westwood\x00', 0x9) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)='h7x', 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000840)="b1f56ee29c433328d3b2a83bd97e37007087acae7568", 0x16}], 0x1}}], 0x2, 0xc0) 31.139661258s ago: executing program 1 (id=3301): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000, @void, @value}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYBLOB='c 75:*\tmm'], 0x3d) 15.350617996s ago: executing program 4 (id=3272): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='westwood\x00', 0x9) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)='h7x', 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000840)="b1f56ee29c433328d3b2a83bd97e37007087acae7568", 0x16}], 0x1}}], 0x2, 0xc0) 14.383733543s ago: executing program 1 (id=3301): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000, @void, @value}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYBLOB='c 75:*\tmm'], 0x3d) 2.355297255s ago: executing program 0 (id=3692): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x4000) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000080)=ANY=[@ANYBLOB="7365637572697479000000e8ffffffffffffff0000000000000000000000000004000000000000"], 0x68) 2.123436726s ago: executing program 2 (id=3694): pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f00000017c0)="a2", 0x1}], 0x1, 0xc) close(r1) socket$key(0xf, 0x3, 0x2) splice(r0, 0x0, r1, 0x0, 0x10500, 0x0) 1.97601002s ago: executing program 2 (id=3696): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x3, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={r2, 0x1}, 0x8) 979.965929ms ago: executing program 2 (id=3701): r0 = socket(0x10, 0x80002, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x8, 0x70bd25, 0x25ffdbfc, {0x0, 0x0, 0x0, 0x0, 0x10, 0x40482}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_HELLO_TIME={0x8, 0x2, 0x6}, @IFLA_BR_MAX_AGE={0x8, 0x3, 0x1d}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 956.012434ms ago: executing program 3 (id=3702): r0 = epoll_create1(0x0) r1 = epoll_create(0xf253e97) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000280)) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000000)={0x2}) 914.223653ms ago: executing program 0 (id=3703): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000030000000400010005"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000008000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r1}, 0x10) 757.616479ms ago: executing program 3 (id=3704): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000600)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPATH(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x28, r0, 0xc05, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x8c0}, 0x44004) 707.634622ms ago: executing program 2 (id=3705): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f00000000c0)=[{0x1, 0x81, 0xa2, 0x8}, {0x6, 0x7f, 0xd, 0x4f4}]}) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r1, &(0x7f0000000040)=ANY=[], 0x6) 669.342889ms ago: executing program 0 (id=3706): r0 = socket$inet6(0xa, 0x5, 0x0) listen(r0, 0x50) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000000)="480000001400190d09004beafc0d8c560a8447608004000000000000000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r1) 552.34247ms ago: executing program 2 (id=3707): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f00000002c0), r0) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r0) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)={0x1c, r1, 0x829, 0x4070bd2d, 0x25dfdbfe, {0x1e}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000c000}, 0x40240c4) 530.586904ms ago: executing program 3 (id=3708): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000640)=[{&(0x7f0000001680)='*c', 0x2}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2000005, 0x10012, r0, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, 0x0, &(0x7f0000000040)) 512.706632ms ago: executing program 0 (id=3709): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x11, 0x4, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x3f, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1d}, 0x50) 335.377979ms ago: executing program 2 (id=3710): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000040)=""/17, 0x11}], 0x1) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 334.536377ms ago: executing program 3 (id=3711): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r0) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r0) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000003b80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0100000000f7ffffffff1b0000000800010001"], 0x1c}}, 0x0) 225.690331ms ago: executing program 0 (id=3712): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000080)=0x4) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000300)="00214717a70700000000030600710a5e31163ceb9d0471200000000500000000000000ffff0342844d50e7182ce0ab6d00000846df930d0ab9cc127d0dc450de49c204a803166580ac899c081cb49f1930e7d07fbdf3", 0x56}], 0x1, 0x8, 0x1) 179.440071ms ago: executing program 3 (id=3713): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x2, 0x0, 0x0, @void, @value}, 0x10) socket$l2tp6(0xa, 0x2, 0x73) 77.966961ms ago: executing program 3 (id=3714): r0 = socket(0x2b, 0x80801, 0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002bbd700000000000010000000c0002000c000000000000001c0007800c00018008000100", @ANYRES32=r3, @ANYBLOB="0c00018008000100", @ANYRES32=r0], 0x3c}, 0x1, 0x0, 0x0, 0x20000014}, 0x0) 0s ago: executing program 0 (id=3715): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000180), 0x1, 0x0, 0xf}, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000ff0)={&(0x7f0000000580)=@canfd={{0x1}, 0xf6, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0x48}, 0xee, 0x0, 0x0, 0x40041}, 0x0) kernel console output (not intermixed with test programs): 7] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.273864][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.319326][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.326556][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.342770][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.349916][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.437910][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.462623][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.510625][ T3513] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.517916][ T3513] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.552338][ T3513] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.559649][ T3513] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.642755][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.724259][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.731641][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.745398][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.752732][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.795045][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.844542][ T5835] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 89.884503][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.019332][ T5843] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 90.196659][ T5834] veth0_vlan: entered promiscuous mode [ 90.262710][ T5834] veth1_vlan: entered promiscuous mode [ 90.319959][ T5845] Bluetooth: hci0: command tx timeout [ 90.388595][ T5834] veth0_macvtap: entered promiscuous mode [ 90.401874][ T5845] Bluetooth: hci2: command tx timeout [ 90.401939][ T5852] Bluetooth: hci1: command tx timeout [ 90.463864][ T5834] veth1_macvtap: entered promiscuous mode [ 90.477566][ T5852] Bluetooth: hci4: command tx timeout [ 90.478215][ T5845] Bluetooth: hci3: command tx timeout [ 90.553061][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.583560][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.634367][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.667579][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.744029][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.752266][ T3008] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.804426][ T3008] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.825361][ T5837] veth0_vlan: entered promiscuous mode [ 90.837507][ T3008] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.851323][ T3008] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.917588][ T5837] veth1_vlan: entered promiscuous mode [ 90.993058][ T5836] veth0_vlan: entered promiscuous mode [ 91.018226][ T5843] veth0_vlan: entered promiscuous mode [ 91.043479][ T5835] veth0_vlan: entered promiscuous mode [ 91.082093][ T5843] veth1_vlan: entered promiscuous mode [ 91.098190][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.107216][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.108728][ T5836] veth1_vlan: entered promiscuous mode [ 91.168711][ T5835] veth1_vlan: entered promiscuous mode [ 91.206156][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.214059][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.238334][ T5837] veth0_macvtap: entered promiscuous mode [ 91.270237][ T5837] veth1_macvtap: entered promiscuous mode [ 91.292640][ T5843] veth0_macvtap: entered promiscuous mode [ 91.301536][ T5836] veth0_macvtap: entered promiscuous mode [ 91.336605][ T5834] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 91.354130][ T5836] veth1_macvtap: entered promiscuous mode [ 91.390586][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.402154][ T5835] veth0_macvtap: entered promiscuous mode [ 91.413002][ T5843] veth1_macvtap: entered promiscuous mode [ 91.429435][ T5835] veth1_macvtap: entered promiscuous mode [ 91.444206][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.515262][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.528154][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.556782][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.569548][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.578575][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.600643][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.632871][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.650879][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.663752][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.687358][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.715880][ T774] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.840732][ T774] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.851610][ T774] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.875145][ T5964] warning: `syz.0.7' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 91.888482][ T774] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.899810][ T774] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.971605][ T774] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.982875][ T774] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.035469][ T59] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.076685][ T59] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.090698][ T59] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.116663][ T3008] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.124989][ T3008] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.160967][ T10] cfg80211: failed to load regulatory.db [ 92.161080][ T59] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.203084][ T59] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.258468][ T774] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.277407][ T774] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.293946][ T3008] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.315441][ T3008] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.389371][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.399316][ T5845] Bluetooth: hci0: command tx timeout [ 92.405549][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.476356][ T5845] Bluetooth: hci1: command tx timeout [ 92.476548][ T5852] Bluetooth: hci2: command tx timeout [ 92.543283][ T774] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.554027][ T774] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.565143][ T5852] Bluetooth: hci3: command tx timeout [ 92.565152][ T5845] Bluetooth: hci4: command tx timeout [ 92.644855][ T3513] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.653193][ T3513] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.781058][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.805487][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.915229][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.943240][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.970366][ T5981] Illegal XDP return value 4294967274 on prog (id 2) dev N/A, expect packet loss! [ 93.340257][ T5988] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5'. [ 93.743464][ T5999] nbd: must specify at least one socket [ 94.290993][ T6017] rdma_op ffff8880249f41f0 conn xmit_rdma 0000000000000000 [ 94.606813][ T6025] Bluetooth: MGMT ver 1.23 [ 94.702873][ T6030] netlink: 'syz.3.30': attribute type 12 has an invalid length. [ 94.740781][ T6030] netlink: 9472 bytes leftover after parsing attributes in process `syz.3.30'. [ 95.919379][ T6075] Bluetooth: MGMT ver 1.23 [ 97.510854][ T6122] netlink: 12 bytes leftover after parsing attributes in process `syz.4.71'. [ 97.546331][ T6122] smc: net device bond0 applied user defined pnetid SYZ [ 99.070763][ T6180] netlink: 79 bytes leftover after parsing attributes in process `syz.4.98'. [ 99.189145][ T6184] netlink: 8 bytes leftover after parsing attributes in process `syz.1.100'. [ 99.206386][ T6184] openvswitch: netlink: nsh attribute has 5276 unknown bytes. [ 99.214115][ T6184] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 99.578380][ T6194] netlink: 8 bytes leftover after parsing attributes in process `syz.2.105'. [ 99.832103][ T6201] netlink: 8 bytes leftover after parsing attributes in process `syz.3.109'. [ 99.882069][ T6201] netlink: 12 bytes leftover after parsing attributes in process `syz.3.109'. [ 100.049468][ T6206] netlink: 4 bytes leftover after parsing attributes in process `syz.0.111'. [ 100.124714][ T6209] netlink: 20 bytes leftover after parsing attributes in process `syz.2.112'. [ 100.975127][ T6236] netlink: 'syz.3.124': attribute type 1 has an invalid length. [ 101.004193][ T6236] netlink: 236 bytes leftover after parsing attributes in process `syz.3.124'. [ 101.639126][ T6258] netlink: 4 bytes leftover after parsing attributes in process `syz.0.135'. [ 101.902188][ T6263] netlink: 4 bytes leftover after parsing attributes in process `syz.3.137'. [ 102.727460][ T6297] tipc: Enabling of bearer rejected, media not registered [ 104.024616][ T6343] netlink: 'syz.0.174': attribute type 5 has an invalid length. [ 104.055995][ T6343] netlink: 'syz.0.174': attribute type 6 has an invalid length. [ 104.587830][ T6359] IPVS: Error joining to the multicast group [ 104.883829][ T6368] sctp: [Deprecated]: syz.4.187 (pid 6368) Use of int in max_burst socket option. [ 104.883829][ T6368] Use struct sctp_assoc_value instead [ 105.665812][ T6398] netlink: 'syz.4.199': attribute type 30 has an invalid length. [ 105.891340][ T6407] netlink: 'syz.0.204': attribute type 16 has an invalid length. [ 105.925862][ T6407] netlink: 'syz.0.204': attribute type 3 has an invalid length. [ 105.967037][ T6407] __nla_validate_parse: 4 callbacks suppressed [ 105.967056][ T6407] netlink: 64066 bytes leftover after parsing attributes in process `syz.0.204'. [ 106.186781][ T6416] netlink: 12 bytes leftover after parsing attributes in process `syz.0.209'. [ 106.320660][ T6421] netlink: 4 bytes leftover after parsing attributes in process `syz.3.211'. [ 106.676624][ T6438] netlink: 60 bytes leftover after parsing attributes in process `syz.3.217'. [ 106.762707][ T6431] netlink: 60 bytes leftover after parsing attributes in process `syz.3.217'. [ 107.595068][ T6469] vlan2: entered allmulticast mode [ 108.502723][ T6509] netlink: 'syz.0.253': attribute type 12 has an invalid length. [ 108.577201][ T6509] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.253'. [ 109.590921][ T6547] netlink: 72 bytes leftover after parsing attributes in process `syz.4.271'. [ 109.691263][ T6543] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.711742][ T6547] netlink: 'syz.4.271': attribute type 4 has an invalid length. [ 109.829725][ T6543] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.042363][ T6543] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.262148][ T6543] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.516548][ T6574] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 110.636129][ T36] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.756792][ T774] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.821685][ T774] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.926741][ T774] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.986000][ T6592] netlink: 4 bytes leftover after parsing attributes in process `syz.2.292'. [ 111.318874][ T6606] netlink: 'syz.2.298': attribute type 10 has an invalid length. [ 111.421874][ T6611] netlink: 'syz.2.298': attribute type 10 has an invalid length. [ 111.447042][ T6606] batman_adv: batadv0: Adding interface: team0 [ 111.461462][ T6611] netlink: 2 bytes leftover after parsing attributes in process `syz.2.298'. [ 111.504209][ T6606] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.539879][ T6616] netlink: 8 bytes leftover after parsing attributes in process `syz.4.301'. [ 111.602128][ T6606] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 111.650628][ T6608] dvmrp1: entered allmulticast mode [ 111.656943][ T6612] dvmrp1: left allmulticast mode [ 111.693889][ T6611] team0: entered promiscuous mode [ 111.702779][ T6611] team_slave_0: entered promiscuous mode [ 111.721627][ T6611] team_slave_1: entered promiscuous mode [ 111.734108][ T6611] 8021q: adding VLAN 0 to HW filter on device team0 [ 111.743285][ T6611] batman_adv: batadv0: Interface activated: team0 [ 111.754060][ T6611] batman_adv: batadv0: Interface deactivated: team0 [ 111.763125][ T6611] batman_adv: batadv0: Removing interface: team0 [ 111.777172][ T6611] bridge0: port 3(team0) entered blocking state [ 111.784028][ T6611] bridge0: port 3(team0) entered disabled state [ 111.800972][ T6611] team0: entered allmulticast mode [ 111.807142][ T6611] team_slave_0: entered allmulticast mode [ 111.813161][ T6611] team_slave_1: entered allmulticast mode [ 111.833507][ T6611] bridge0: port 3(team0) entered blocking state [ 111.840327][ T6611] bridge0: port 3(team0) entered forwarding state [ 111.859839][ T6616] bridge0: port 3(macvlan2) entered blocking state [ 111.870913][ T6616] bridge0: port 3(macvlan2) entered disabled state [ 111.931033][ T6616] macvlan2: entered allmulticast mode [ 111.943295][ T6616] bridge0: entered allmulticast mode [ 111.952270][ T6616] macvlan2: left allmulticast mode [ 111.967189][ T6616] bridge0: left allmulticast mode [ 112.355777][ T6639] tipc: Started in network mode [ 112.391736][ T6639] tipc: Node identity -, cluster identity 4711 [ 112.421035][ T6639] tipc: Enabling of bearer rejected, failed to enable media [ 112.465548][ T6643] netlink: 4 bytes leftover after parsing attributes in process `syz.2.314'. [ 113.489785][ T6682] team0: Device gtp0 is of different type [ 113.783606][ T6689] netlink: 28 bytes leftover after parsing attributes in process `syz.1.333'. [ 113.827571][ T6689] netlink: 28 bytes leftover after parsing attributes in process `syz.1.333'. [ 113.924495][ T6689] gretap0: entered promiscuous mode [ 113.950634][ T6689] gretap0: left promiscuous mode [ 114.052158][ T6670] DRBG: could not allocate digest TFM handle: hmac(sha512) [ 115.522998][ T6750] netlink: 'syz.1.361': attribute type 2 has an invalid length. [ 115.902152][ T6758] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.041535][ T6758] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.218565][ T6758] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.351654][ T6778] netlink: 52 bytes leftover after parsing attributes in process `syz.4.373'. [ 116.397184][ T6778] netlink: 'syz.4.373': attribute type 1 has an invalid length. [ 116.438442][ T6758] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.728243][ T774] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.754958][ T774] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.832082][ T1110] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.891538][ T1110] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.311038][ T6804] netlink: 12 bytes leftover after parsing attributes in process `syz.0.387'. [ 117.555888][ T5945] IPVS: starting estimator thread 0... [ 117.655811][ T6815] IPVS: using max 25 ests per chain, 60000 per kthread [ 118.096561][ T6835] netlink: 'syz.0.401': attribute type 1 has an invalid length. [ 118.104311][ T6835] netlink: 'syz.0.401': attribute type 2 has an invalid length. [ 118.266150][ T6842] dummy0: entered promiscuous mode [ 118.305359][ T6841] dummy0: left promiscuous mode [ 120.419176][ T6926] netlink: 11 bytes leftover after parsing attributes in process `syz.2.443'. [ 121.334072][ T6963] netlink: 8 bytes leftover after parsing attributes in process `syz.2.461'. [ 121.345045][ T6963] Zero length message leads to an empty skb [ 122.163115][ T6985] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.265067][ T6992] tipc: Started in network mode [ 122.288276][ T6992] tipc: Node identity 68a, cluster identity 3 [ 122.302775][ T6992] tipc: Node number set to 1674 [ 122.434457][ T6985] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.493470][ T7000] netlink: 204 bytes leftover after parsing attributes in process `syz.3.477'. [ 122.638389][ T6985] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.780177][ T7006] sctp: [Deprecated]: syz.4.479 (pid 7006) Use of int in max_burst socket option deprecated. [ 122.780177][ T7006] Use struct sctp_assoc_value instead [ 122.947873][ T6985] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.014151][ T7020] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.485'. [ 123.023765][ T7020] netlink: zone id is out of range [ 123.033858][ T7020] netlink: zone id is out of range [ 123.040179][ T7020] netlink: zone id is out of range [ 123.045413][ T7020] netlink: zone id is out of range [ 123.057254][ T7020] netlink: zone id is out of range [ 123.062421][ T7020] netlink: zone id is out of range [ 123.072177][ T7020] netlink: zone id is out of range [ 123.085875][ T7020] netlink: zone id is out of range [ 123.103964][ T7020] netlink: zone id is out of range [ 123.111355][ T7020] netlink: zone id is out of range [ 123.132344][ T1110] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.173000][ T1110] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.222421][ T1110] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.281784][ T3513] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.433588][ T7030] Bluetooth: MGMT ver 1.23 [ 123.954548][ T7046] netlink: 'syz.3.498': attribute type 1 has an invalid length. [ 124.629962][ T7071] netlink: 'syz.4.508': attribute type 3 has an invalid length. [ 124.876644][ T5852] Bluetooth: hci4: command tx timeout [ 125.399615][ T7103] netlink: 8 bytes leftover after parsing attributes in process `syz.4.523'. [ 125.438708][ T7103] netlink: 4 bytes leftover after parsing attributes in process `syz.4.523'. [ 125.756399][ T7111] tipc: Can't bind to reserved service type 0 [ 126.796536][ T7154] netlink: 8 bytes leftover after parsing attributes in process `syz.2.546'. [ 126.857157][ T7154] netlink: 'syz.2.546': attribute type 12 has an invalid length. [ 126.999311][ T7164] tipc: Enabling of bearer rejected, failed to enable media [ 127.391825][ T7176] netlink: 40 bytes leftover after parsing attributes in process `syz.3.558'. [ 127.635995][ T7186] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.704676][ T7186] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.056629][ T7191] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.064012][ T7191] bridge0: port 1(bridge_slave_0) entered forwarding state [ 128.130709][ T7191] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.138024][ T7191] bridge0: port 2(bridge_slave_1) entered forwarding state [ 128.306770][ T7211] nbd: socks must be embedded in a SOCK_ITEM attr [ 129.156599][ T7247] sch_tbf: burst 1 is lower than device ip6tnl0 mtu (1452) ! [ 129.817621][ T7275] netlink: 4 bytes leftover after parsing attributes in process `syz.3.606'. [ 130.674827][ T7306] netlink: 8 bytes leftover after parsing attributes in process `syz.0.624'. [ 130.736020][ T7306] netlink: 12 bytes leftover after parsing attributes in process `syz.0.624'. [ 131.122052][ T7325] tipc: Enabling of bearer rejected, failed to enable media [ 131.190487][ T5945] IPVS: starting estimator thread 0... [ 131.305686][ T7330] IPVS: using max 27 ests per chain, 64800 per kthread [ 131.842029][ T7356] syz.3.647 uses obsolete (PF_INET,SOCK_PACKET) [ 132.466241][ T7378] tipc: Started in network mode [ 132.477390][ T7378] tipc: Node identity ff020000000000000000000000000001, cluster identity 4711 [ 132.488277][ T7378] tipc: Enabling of bearer rejected, failed to enable media [ 133.124797][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.134027][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.371249][ T7411] netlink: 8 bytes leftover after parsing attributes in process `syz.3.673'. [ 133.381301][ T7411] netlink: 16 bytes leftover after parsing attributes in process `syz.3.673'. [ 133.410914][ T7413] netlink: 'syz.4.675': attribute type 2 has an invalid length. [ 134.763788][ T7459] ip6tnl1: entered promiscuous mode [ 134.780335][ T7459] ip6tnl1: entered allmulticast mode [ 134.864751][ T7459] team0: Device ip6tnl1 is of different type [ 135.583586][ T7486] netlink: 16 bytes leftover after parsing attributes in process `syz.1.713'. [ 136.060741][ T7504] netlink: 'syz.4.718': attribute type 5 has an invalid length. [ 136.245373][ T7512] netlink: 4 bytes leftover after parsing attributes in process `syz.0.723'. [ 136.345946][ T7515] netlink: 56 bytes leftover after parsing attributes in process `syz.4.724'. [ 136.605145][ T7526] netlink: 20 bytes leftover after parsing attributes in process `syz.3.730'. [ 136.799760][ T7533] netlink: 8 bytes leftover after parsing attributes in process `syz.0.733'. [ 137.691362][ T7572] netlink: 'syz.4.751': attribute type 21 has an invalid length. [ 137.769622][ T7572] netlink: 132 bytes leftover after parsing attributes in process `syz.4.751'. [ 137.786796][ T7573] netlink: 12 bytes leftover after parsing attributes in process `syz.0.752'. [ 138.077687][ T7584] netlink: 10 bytes leftover after parsing attributes in process `syz.1.758'. [ 138.758064][ T7614] netlink: 'syz.4.772': attribute type 23 has an invalid length. [ 139.403666][ T5852] Bluetooth: hci4: link tx timeout [ 139.409301][ T5852] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 139.865954][ T7649] netlink: 'syz.4.788': attribute type 2 has an invalid length. [ 139.981400][ T5845] Bluetooth: hci4: link tx timeout [ 139.988944][ T5845] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 139.997935][ T5845] Bluetooth: hci4: link tx timeout [ 140.003111][ T5845] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 140.444507][ T7669] netlink: 20 bytes leftover after parsing attributes in process `syz.4.798'. [ 140.837546][ T7686] netlink: 104 bytes leftover after parsing attributes in process `syz.1.806'. [ 141.259106][ T7703] netlink: 4 bytes leftover after parsing attributes in process `syz.2.814'. [ 141.441706][ T5845] Bluetooth: hci4: command 0x0406 tx timeout [ 141.504480][ T7712] net_ratelimit: 11 callbacks suppressed [ 141.504502][ T7712] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 142.144874][ T7734] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 142.716090][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.054450][ T7762] netlink: 8 bytes leftover after parsing attributes in process `syz.1.841'. [ 143.117532][ T7762] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 143.146098][ T7762] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 143.463989][ T7782] netlink: 'syz.4.851': attribute type 12 has an invalid length. [ 143.504298][ T7782] netlink: 9472 bytes leftover after parsing attributes in process `syz.4.851'. [ 144.408976][ T7814] tipc: Enabled bearer , priority 10 [ 144.806898][ T7832] netlink: 'syz.0.872': attribute type 29 has an invalid length. [ 145.536813][ T1212] tipc: Node number set to 4278321153 [ 145.777851][ T7867] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 146.755898][ T7900] netlink: 'syz.2.905': attribute type 3 has an invalid length. [ 147.245935][ T7920] netlink: 'syz.1.915': attribute type 1 has an invalid length. [ 147.253650][ T7920] netlink: 236 bytes leftover after parsing attributes in process `syz.1.915'. [ 147.285752][ T7920] NCSI netlink: No device for ifindex 813332851 [ 147.871167][ T7946] netlink: 4 bytes leftover after parsing attributes in process `syz.1.929'. [ 147.930377][ T7949] netlink: 388 bytes leftover after parsing attributes in process `syz.4.930'. [ 148.139751][ T7956] netlink: 8 bytes leftover after parsing attributes in process `syz.4.934'. [ 148.224669][ T7950] netlink: 76 bytes leftover after parsing attributes in process `syz.0.931'. [ 149.146199][ T7988] netlink: 56 bytes leftover after parsing attributes in process `syz.1.948'. [ 150.488317][ T8023] gretap0: entered promiscuous mode [ 150.493908][ T8023] vlan2: entered promiscuous mode [ 151.026446][ T8033] netlink: 12 bytes leftover after parsing attributes in process `syz.1.970'. [ 151.040644][ T8035] netlink: 165 bytes leftover after parsing attributes in process `syz.2.971'. [ 151.992152][ T8061] sit0: entered promiscuous mode [ 152.030272][ T8061] netlink: 'syz.3.983': attribute type 1 has an invalid length. [ 152.110823][ T8061] netlink: 1 bytes leftover after parsing attributes in process `syz.3.983'. [ 152.940574][ T8091] netlink: 'syz.1.996': attribute type 3 has an invalid length. [ 152.984942][ T8091] netlink: 'syz.1.996': attribute type 3 has an invalid length. [ 155.773291][ T8171] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1034'. [ 156.646093][ T8199] bond0: entered promiscuous mode [ 156.669162][ T8199] bond_slave_0: entered promiscuous mode [ 156.710562][ T8199] bond_slave_1: entered promiscuous mode [ 156.738849][ T8199] batadv_slave_0: entered promiscuous mode [ 156.776617][ T8199] hsr1: entered promiscuous mode [ 157.707545][ T8224] netpci0: tun_chr_ioctl cmd 1074025681 [ 158.305950][ T8242] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1065'. [ 158.569834][ T8249] netlink: 'syz.0.1069': attribute type 1 has an invalid length. [ 158.602840][ T8252] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1068'. [ 158.610346][ T8249] netlink: 'syz.0.1069': attribute type 2 has an invalid length. [ 158.662208][ T8254] netlink: 'syz.0.1069': attribute type 1 has an invalid length. [ 158.676285][ T8254] netlink: 'syz.0.1069': attribute type 2 has an invalid length. [ 159.401381][ T8279] C: renamed from team_slave_0 (while UP) [ 159.441651][ T8279] netlink: 'syz.1.1082': attribute type 8 has an invalid length. [ 159.463320][ T8279] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 159.697030][ T8287] openvswitch: netlink: IP tunnel TTL not specified. [ 160.706486][ T8321] netlink: 356 bytes leftover after parsing attributes in process `syz.3.1103'. [ 160.751899][ T8322] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 161.840956][ T8359] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1121'. [ 162.850610][ T8396] tap0: tun_chr_ioctl cmd 1074025677 [ 162.864426][ T8396] tap0: linktype set to 825 [ 163.218364][ T8406] netlink: 'syz.2.1141': attribute type 21 has an invalid length. [ 163.244191][ T8406] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1141'. [ 163.261757][ T8406] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1141'. [ 163.378686][ T8410] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1143'. [ 163.469115][ T8410] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1143'. [ 163.507224][ T8410] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1143'. [ 163.545717][ T8410] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1143'. [ 163.554763][ T8410] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1143'. [ 163.615150][ T8410] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1143'. [ 163.630037][ T8410] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1143'. [ 163.747871][ T8418] wg2: entered promiscuous mode [ 163.776691][ T8418] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 165.989142][ T8485] tap0: tun_chr_ioctl cmd 1074025677 [ 166.004992][ T8485] tap0: linktype set to 823 [ 167.255848][ T8520] __nla_validate_parse: 47 callbacks suppressed [ 167.255873][ T8520] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1195'. [ 167.366222][ T8520] nbd: couldn't find a device at index 65546 [ 167.716060][ T1212] syz_tun: tun_net_xmit 106 [ 168.016768][ T1212] syz_tun: tun_net_xmit 106 [ 169.082771][ T8576] blkio.reset_stats is deprecated [ 170.208221][ T8605] IPv6: addrconf: prefix option has invalid lifetime [ 170.347878][ T8607] netlink: 'syz.0.1238': attribute type 1 has an invalid length. [ 170.653159][ T8617] netlink: 'syz.0.1243': attribute type 1 has an invalid length. [ 170.966618][ T8627] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1248'. [ 170.998493][ T8626] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1247'. [ 171.531182][ T8641] syz_tun: tun_net_xmit 42 [ 172.197542][ T8663] netlink: 'syz.4.1264': attribute type 4 has an invalid length. [ 172.206485][ T8663] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.1264'. [ 172.555674][ C0] syz_tun: tun_net_xmit 42 [ 173.017190][ T8683] syz_tun: tun_net_xmit 1510 [ 173.043750][ T8683] syz_tun: tun_net_xmit 75 [ 173.515706][ T8700] syz_tun: tun_net_xmit 62 [ 173.595701][ C0] syz_tun: tun_net_xmit 42 [ 173.790080][ T8707] netlink: ct family unspecified [ 173.795113][ T8707] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 174.055776][ T8716] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1290'. [ 174.457284][ T8727] macvtap1: entered allmulticast mode [ 174.464297][ T8727] veth0_macvtap: entered allmulticast mode [ 174.889188][ T8741] netlink: 22 bytes leftover after parsing attributes in process `syz.4.1302'. [ 176.604650][ T8786] netlink: 71 bytes leftover after parsing attributes in process `syz.0.1321'. [ 177.108956][ T8799] tap0: tun_chr_ioctl cmd 2147767507 [ 178.984114][ T8858] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1355'. [ 179.648158][ T8877] netpci0: tun_chr_ioctl cmd 1074025672 [ 179.669125][ T8877] netpci0: ignored: set checksum disabled [ 179.985251][ T8879] sctp: [Deprecated]: syz.4.1365 (pid 8879) Use of struct sctp_assoc_value in delayed_ack socket option. [ 179.985251][ T8879] Use struct sctp_sack_info instead [ 181.147031][ T8574] Set syz1 is full, maxelem 65536 reached [ 181.687228][ T8924] xt_CT: You must specify a L4 protocol and not use inversions on it [ 181.875745][ T8933] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1390'. [ 182.330546][ T8953] vcan1: entered allmulticast mode [ 184.282405][ T9018] netlink: 'syz.2.1431': attribute type 5 has an invalid length. [ 185.259876][ T9050] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1445'. [ 185.317343][ T9050] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1445'. [ 186.906810][ T9108] tap0: tun_chr_ioctl cmd 1074025677 [ 186.937387][ T9108] tap0: linktype set to 1 [ 187.577787][ T9132] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1482'. [ 187.587778][ T9132] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1482'. [ 187.741851][ T9136] netlink: 71 bytes leftover after parsing attributes in process `syz.3.1484'. [ 188.097774][ T9148] netlink: 'syz.3.1490': attribute type 12 has an invalid length. [ 188.124251][ T9148] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1490'. [ 188.155092][ T9152] netlink: 'syz.3.1490': attribute type 12 has an invalid length. [ 188.159996][ T3513] wlan1: Trigger new scan to find an IBSS to join [ 188.732821][ T9173] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 189.029946][ T9186] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1507'. [ 189.160458][ T9186] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1507'. [ 189.205477][ T9190] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1510'. [ 189.245845][ T9190] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1510'. [ 189.776150][ T9216] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1519'. [ 190.782850][ T9249] team0: Device gtp0 is of different type [ 191.094231][ T9263] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1543'. [ 191.417270][ T9276] geneve2: entered allmulticast mode [ 191.998174][ T5845] Bluetooth: hci4: command 0x0406 tx timeout [ 192.664512][ T9320] __nla_validate_parse: 2 callbacks suppressed [ 192.664536][ T9320] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1568'. [ 193.032496][ T9328] sch_fq: defrate 0 ignored. [ 193.088556][ T9334] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 193.201137][ T3513] wlan1: Trigger new scan to find an IBSS to join [ 194.360253][ T3008] wlan1: Creating new IBSS network, BSSID 46:eb:f9:1e:d2:ec [ 194.492364][ T9379] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1598'. [ 194.523894][ T9379] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1598'. [ 194.536106][ T9379] netlink: 'syz.1.1598': attribute type 18 has an invalid length. [ 194.566728][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.809775][ T9388] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1603'. [ 194.891532][ T9387] macsec0: entered promiscuous mode [ 194.910670][ T9387] macsec1: entered allmulticast mode [ 194.918522][ T9387] macsec0: entered allmulticast mode [ 194.924205][ T9387] veth1_macvtap: entered allmulticast mode [ 196.726517][ T9454] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1631'. [ 197.503621][ T9468] block nbd0: server does not support multiple connections per device. [ 197.547111][ T9468] block nbd0: shutting down sockets [ 198.381377][ T9500] openvswitch: netlink: IPv4 tunnel dst address is zero [ 199.337619][ T9529] veth0: entered promiscuous mode [ 199.369465][ T9529] veth0: left promiscuous mode [ 199.677343][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.681528][ T9542] pim6reg: entered allmulticast mode [ 199.731225][ T9543] pim6reg: left allmulticast mode [ 201.218876][ T9577] xt_hashlimit: size too large, truncated to 1048576 [ 201.456065][ T9556] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 202.255136][ T9603] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.404835][ T9603] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.551016][ T9603] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.697043][ T9603] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.761245][ T9621] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1706'. [ 203.062036][ T59] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.143456][ T1110] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.204140][ T59] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.256420][ T9641] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1715'. [ 203.289691][ T1110] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.128978][ T9667] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1727'. [ 204.150066][ T9667] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1727'. [ 204.200883][ T9672] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1728'. [ 204.914408][ T9692] netlink: 'syz.0.1738': attribute type 1 has an invalid length. [ 206.112013][ T9725] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1754'. [ 206.882284][ T5850] Bluetooth: hci2: command 0x0406 tx timeout [ 206.885944][ T5851] Bluetooth: hci3: command 0x0406 tx timeout [ 206.889276][ T5850] Bluetooth: hci1: command 0x0406 tx timeout [ 206.958984][ T9748] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1764'. [ 207.407871][ T9757] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1767'. [ 208.323950][ T9790] netem: incorrect ge model size [ 208.347418][ T9790] netem: change failed [ 208.506981][ T9796] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1785'. [ 209.145858][ T9817] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1793'. [ 209.185264][ T9817] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 209.549408][ T9830] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1797'. [ 209.997712][ T9847] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1804'. [ 210.322643][ T9853] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1807'. [ 210.520029][ T9859] tap0: tun_chr_ioctl cmd 1074025677 [ 210.545923][ T9859] tap0: linktype set to 780 [ 211.333346][ T9886] tun0: tun_chr_ioctl cmd 1074025675 [ 211.349049][ T9886] tun0: persist disabled [ 212.035197][ T9925] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1841'. [ 212.085399][ T9927] netlink: 'syz.0.1842': attribute type 5 has an invalid length. [ 212.262795][ T9933] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1845'. [ 212.407074][ T9939] sit0: left promiscuous mode [ 212.588133][ T9939] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 213.553073][ T9968] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 213.562298][ T9967] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1860'. [ 213.571027][ T9968] syzkaller0: linktype set to 774 [ 214.015871][ T9995] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1872'. [ 214.036015][ T9995] netem: invalid attributes len -16 [ 214.046096][ T9995] netem: change failed [ 214.779140][T10031] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1890'. [ 215.310705][T10053] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1900'. [ 215.611513][T10061] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1903'. [ 215.879619][T10072] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1909'. [ 215.944445][T10074] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1910'. [ 215.957924][T10072] netlink: 'syz.4.1909': attribute type 2 has an invalid length. [ 216.195011][T10086] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1915'. [ 216.255852][T10086] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1915'. [ 216.462587][T10099] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1922'. [ 217.141396][T10131] bond_slave_0: entered promiscuous mode [ 217.147394][T10131] bond_slave_1: entered promiscuous mode [ 217.163112][T10131] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 217.174433][T10131] bond_slave_0: left promiscuous mode [ 217.180046][T10131] bond_slave_1: left promiscuous mode [ 217.571071][T10152] netlink: 'syz.0.1947': attribute type 1 has an invalid length. [ 217.819143][T10164] netlink: 'syz.1.1954': attribute type 1 has an invalid length. [ 219.134619][T10213] __nla_validate_parse: 4 callbacks suppressed [ 219.134639][T10213] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1976'. [ 219.160320][T10213] vlan2: entered allmulticast mode [ 219.165777][T10213] veth1: entered allmulticast mode [ 219.580820][T10232] netlink: 'syz.1.1985': attribute type 11 has an invalid length. [ 220.123088][T10262] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1998'. [ 220.807030][T10296] ipvlan2: entered promiscuous mode [ 220.980642][T10301] bridge_slave_0: left allmulticast mode [ 220.997725][T10301] bridge_slave_0: left promiscuous mode [ 221.003756][T10301] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.028810][T10301] bridge_slave_1: left allmulticast mode [ 221.035412][T10301] bridge_slave_1: left promiscuous mode [ 221.051665][T10301] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.084105][T10301] bond0: (slave bond_slave_0): Releasing backup interface [ 221.115406][T10301] bond0: (slave bond_slave_1): Releasing backup interface [ 221.148244][T10301] team0: Port device team_slave_0 removed [ 221.183893][T10301] team0: Port device team_slave_1 removed [ 221.191907][T10301] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 221.202831][T10301] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 221.228130][T10301] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 221.236623][T10301] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 222.169885][T10361] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2046'. [ 222.402403][T10372] netlink: 136 bytes leftover after parsing attributes in process `syz.3.2051'. [ 222.440078][T10372] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 222.461085][T10376] netlink: 'syz.4.2053': attribute type 4 has an invalid length. [ 222.496489][T10377] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2052'. [ 222.608536][T10381] bond0: entered promiscuous mode [ 222.647183][T10381] batadv_slave_0: entered promiscuous mode [ 222.676839][T10381] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 222.689795][T10381] Cannot create hsr debugfs directory [ 222.704447][T10381] hsr1: entered promiscuous mode [ 223.388655][T10421] vxcan1: entered allmulticast mode [ 223.404612][T10421] vxcan1: left allmulticast mode [ 224.162052][T10455] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.430983][ T3513] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 224.949955][T10490] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 224.986816][T10490] macsec2: entered promiscuous mode [ 224.992321][T10490] macsec2: entered allmulticast mode [ 225.025791][T10490] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 225.474217][T10510] delete_channel: no stack [ 226.521367][T10554] 8021q: adding VLAN 0 to HW filter on device bond1 [ 226.538328][T10554] bond0: (slave bond1): Enslaving as an active interface with an up link [ 227.012747][ T5835] cgroup: fork rejected by pids controller in /syz2 [ 227.400860][ T3513] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.525001][ T3513] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.586781][ T3513] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.697926][ T3513] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.043067][ T3513] team0: left allmulticast mode [ 228.049427][ T3513] team_slave_0: left allmulticast mode [ 228.055139][ T3513] team_slave_1: left allmulticast mode [ 228.086195][ T3513] bridge0: port 3(team0) entered disabled state [ 228.114131][ T3513] bridge_slave_1: left promiscuous mode [ 228.134642][ T3513] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.163405][ T3513] bridge_slave_0: left allmulticast mode [ 228.185817][ T3513] bridge_slave_0: left promiscuous mode [ 228.191687][ T3513] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.487240][ T5852] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 228.505334][ T5852] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 228.513829][ T5852] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 228.523224][ T5852] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 228.531791][ T5852] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 229.029252][ T3513] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 229.044411][ T3513] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 229.066720][ T3513] bond0 (unregistering): Released all slaves [ 229.087554][ T3513] bond1 (unregistering): Released all slaves [ 229.104999][T10610] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2160'. [ 229.188503][ T3513] tipc: Disabling bearer [ 229.208983][ T3513] tipc: Left network mode [ 229.370022][T10633] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2167'. [ 229.393626][T10636] openvswitch: netlink: Message has 4 unknown bytes. [ 229.596863][ T1212] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.654255][T10645] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2172'. [ 229.925882][ T1212] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.944473][ T3513] hsr_slave_0: left promiscuous mode [ 229.971128][ T3513] hsr_slave_1: left promiscuous mode [ 229.997525][ T3513] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 230.016245][ T3513] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 230.042002][ T3513] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 230.066203][ T3513] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 230.128037][ T3513] veth1_macvtap: left promiscuous mode [ 230.134018][ T3513] veth0_macvtap: left promiscuous mode [ 230.146532][ T3513] veth1_vlan: left promiscuous mode [ 230.156408][ T3513] veth0_vlan: left promiscuous mode [ 230.264290][T10662] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2180'. [ 230.562433][ T5156] Bluetooth: hci1: command tx timeout [ 230.945425][ T3513] team_slave_1 (unregistering): left promiscuous mode [ 230.958024][ T3513] team0 (unregistering): Port device team_slave_1 removed [ 231.011231][ T3513] team_slave_0 (unregistering): left promiscuous mode [ 231.020877][ T3513] team0 (unregistering): Port device team_slave_0 removed [ 232.063613][T10611] chnl_net:caif_netlink_parms(): no params data found [ 232.192569][ T2983] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 232.225714][ T2983] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 232.380491][T10684] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2190'. [ 232.429549][ T2983] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 232.494738][ T2983] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 232.637121][ T5156] Bluetooth: hci1: command tx timeout [ 232.717436][T10697] netlink: 'syz.0.2194': attribute type 7 has an invalid length. [ 232.818941][T10611] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.841993][T10611] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.879532][T10611] bridge_slave_0: entered allmulticast mode [ 232.899012][T10611] bridge_slave_0: entered promiscuous mode [ 232.930139][T10611] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.932343][T10702] netlink: 203516 bytes leftover after parsing attributes in process `syz.0.2197'. [ 232.939878][ T3513] IPVS: stop unused estimator thread 0... [ 232.962933][T10611] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.969212][T10702] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 232.999749][T10702] openvswitch: netlink: Duplicate key (type 0). [ 233.005090][T10611] bridge_slave_1: entered allmulticast mode [ 233.028534][T10611] bridge_slave_1: entered promiscuous mode [ 233.256324][T10611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 233.280663][T10611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 233.910510][T10719] netlink: 'syz.3.2204': attribute type 1 has an invalid length. [ 233.941725][T10719] netlink: 180 bytes leftover after parsing attributes in process `syz.3.2204'. [ 233.953945][T10611] team0: Port device team_slave_0 added [ 234.083868][T10611] team0: Port device team_slave_1 added [ 234.337883][T10611] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 234.345150][T10611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.453339][T10611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 234.509026][T10611] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 234.526031][T10611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.608477][T10611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 234.716041][ T5156] Bluetooth: hci1: command tx timeout [ 234.759882][T10611] hsr_slave_0: entered promiscuous mode [ 234.767862][T10611] hsr_slave_1: entered promiscuous mode [ 234.787122][T10611] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 234.795007][T10611] Cannot create hsr debugfs directory [ 235.344901][T10756] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 235.593237][T10769] netlink: 'syz.3.2227': attribute type 5 has an invalid length. [ 235.849568][T10611] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 235.883357][T10611] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 235.919561][T10611] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 235.956659][T10611] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 236.104972][T10795] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2237'. [ 236.163907][T10795] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 236.271654][T10611] 8021q: adding VLAN 0 to HW filter on device bond0 [ 236.345469][T10611] 8021q: adding VLAN 0 to HW filter on device team0 [ 236.374442][ T3008] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.381799][ T3008] bridge0: port 1(bridge_slave_0) entered forwarding state [ 236.427351][ T3513] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.434570][ T3513] bridge0: port 2(bridge_slave_1) entered forwarding state [ 236.494401][ T30] audit: type=1804 audit(1750422639.377:2): pid=10808 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2244" name="/newroot/448/cgroup.controllers" dev="tmpfs" ino=2271 res=1 errno=0 [ 236.583124][ T30] audit: type=1800 audit(1750422639.407:3): pid=10808 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2244" name="cgroup.controllers" dev="tmpfs" ino=2271 res=0 errno=0 [ 236.591196][T10611] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 236.797217][ T5156] Bluetooth: hci1: command tx timeout [ 236.804825][T10817] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2248'. [ 236.872440][T10822] netlink: 244 bytes leftover after parsing attributes in process `syz.4.2251'. [ 237.329888][T10611] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 237.444671][T10846] dummy0: entered allmulticast mode [ 237.604939][T10848] bridge_slave_0: left promiscuous mode [ 237.624434][T10848] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.638083][T10848] bridge_slave_1: left allmulticast mode [ 237.644932][T10848] bridge_slave_1: left promiscuous mode [ 237.651214][T10848] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.663448][T10848] bond0: (slave bond_slave_0): Releasing backup interface [ 237.690995][T10848] bond0: (slave bond_slave_1): Releasing backup interface [ 237.754651][T10848] team0: Port device team_slave_0 removed [ 237.800683][T10848] team0: Port device team_slave_1 removed [ 237.818496][T10848] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 237.827255][T10848] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 237.836956][T10848] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 237.844833][T10848] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 237.919017][T10611] veth0_vlan: entered promiscuous mode [ 238.000618][T10611] veth1_vlan: entered promiscuous mode [ 238.145171][T10611] veth0_macvtap: entered promiscuous mode [ 238.178863][T10611] veth1_macvtap: entered promiscuous mode [ 238.268659][T10611] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 238.301556][T10611] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 238.351249][ T1110] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.413640][ T1110] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.443536][ T1110] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.466792][ T1110] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.695796][ T1110] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 238.703670][ T1110] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 238.827866][T10878] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2274'. [ 238.847861][ T3513] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 238.864426][ T3513] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.510608][T10908] netlink: 'syz.4.2287': attribute type 1 has an invalid length. [ 239.516210][T10902] block nbd0: server does not support multiple connections per device. [ 239.523699][T10908] netlink: 'syz.4.2287': attribute type 2 has an invalid length. [ 239.546328][T10902] block nbd0: shutting down sockets [ 239.586790][T10908] netlink: 'syz.4.2287': attribute type 1 has an invalid length. [ 239.611677][T10908] netlink: 'syz.4.2287': attribute type 2 has an invalid length. [ 239.794595][T10921] netlink: 'syz.0.2293': attribute type 1 has an invalid length. [ 239.825440][T10921] netlink: 16166 bytes leftover after parsing attributes in process `syz.0.2293'. [ 239.885058][T10925] netlink: 'syz.1.2295': attribute type 1 has an invalid length. [ 239.933202][T10925] netlink: 'syz.1.2295': attribute type 4 has an invalid length. [ 239.966409][T10925] netlink: 188 bytes leftover after parsing attributes in process `syz.1.2295'. [ 240.051557][T10933] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2299'. [ 240.341914][T10948] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2305'. [ 241.176735][T10972] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2318'. [ 241.250938][T10976] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.2320'. [ 241.289660][T10978] sctp: [Deprecated]: syz.1.2316 (pid 10978) Use of int in maxseg socket option. [ 241.289660][T10978] Use struct sctp_assoc_value instead [ 241.314640][T10980] veth0: entered promiscuous mode [ 241.336151][T10980] veth0: left promiscuous mode [ 241.557302][T10990] netlink: 'syz.4.2326': attribute type 1 has an invalid length. [ 241.578712][T10990] netlink: 144 bytes leftover after parsing attributes in process `syz.4.2326'. [ 241.626420][T10990] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2326'. [ 241.781570][T10995] Cannot find add_set index 0 as target [ 241.887763][T10993] xt_CT: No such helper "pptp" [ 242.258885][T11012] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2335'. [ 242.306263][T11012] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2335'. [ 243.036405][T11037] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2346'. [ 243.304168][T11047] tipc: Started in network mode [ 243.325291][T11047] tipc: Node identity ff, cluster identity 4711 [ 243.347624][T11047] tipc: Enabling of bearer rejected, failed to enable media [ 243.787390][T11075] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2361'. [ 244.318880][T11095] wg2: entered promiscuous mode [ 244.530221][T11105] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 244.575453][T11105] team0: Port device batadv1 added [ 244.767109][T11113] block nbd0: server does not support multiple connections per device. [ 244.785215][T11113] block nbd0: shutting down sockets [ 245.923280][T11159] netlink: 232 bytes leftover after parsing attributes in process `syz.1.2404'. [ 245.944286][T11163] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2405'. [ 246.215830][T11174] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 246.234782][T11177] netlink: 277 bytes leftover after parsing attributes in process `syz.4.2411'. [ 246.426816][T11184] tap0: tun_chr_ioctl cmd 1074025677 [ 246.443905][T11184] tap0: linktype set to 769 [ 247.962863][T11246] openvswitch: netlink: Multiple metadata blocks provided [ 249.239953][T11301] netlink: 'syz.1.2469': attribute type 15 has an invalid length. [ 249.283475][T11308] bridge0: entered allmulticast mode [ 249.638976][T11321] netlink: 10 bytes leftover after parsing attributes in process `syz.4.2478'. [ 249.720234][T11327] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2480'. [ 250.246041][T11346] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2491'. [ 250.345230][T11352] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2493'. [ 250.717903][T11371] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2502'. [ 250.728178][T11373] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2503'. [ 252.012335][T11411] netlink: 'syz.2.2520': attribute type 5 has an invalid length. [ 253.516270][T11479] bond0: option miimon: invalid value (18446744073709551614) [ 253.524601][T11479] bond0: option miimon: allowed values 0 - 2147483647 [ 253.807878][T11491] pimreg: entered allmulticast mode [ 253.820404][T11490] pimreg: left allmulticast mode [ 255.284653][T11534] netlink: 'syz.3.2577': attribute type 1 has an invalid length. [ 255.325887][T11534] netlink: 'syz.3.2577': attribute type 2 has an invalid length. [ 255.731157][T11551] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2584'. [ 256.018749][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.150768][T11564] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2589'. [ 256.164838][T11564] nbd: socks must be embedded in a SOCK_ITEM attr [ 257.090688][T11595] sctp: [Deprecated]: syz.3.2603 (pid 11595) Use of struct sctp_assoc_value in delayed_ack socket option. [ 257.090688][T11595] Use struct sctp_sack_info instead [ 258.396807][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 258.964328][T11681] syzkaller0: tun_chr_ioctl cmd 1074812117 [ 259.048120][T11689] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2646'. [ 259.175085][T11695] netlink: 10 bytes leftover after parsing attributes in process `syz.4.2650'. [ 259.442652][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 259.563383][T11714] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2656'. [ 259.971377][T11718] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2659'. [ 259.996107][T11718] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2659'. [ 260.476816][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.726104][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.425677][T11784] netlink: 'syz.0.2689': attribute type 1 has an invalid length. [ 261.451806][T11784] nbd: error processing sock list [ 261.469075][T11784] block nbd0: shutting down sockets [ 261.519699][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.556437][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.855326][T11817] ip6gretap0: entered promiscuous mode [ 262.894442][T11817] ip6gretap0: left promiscuous mode [ 263.592847][T11849] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2716'. [ 263.596356][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.914185][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.636507][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.680864][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.757757][T11909] netlink: 'syz.3.2743': attribute type 1 has an invalid length. [ 265.833577][T11902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.900200][T11903] sctp: [Deprecated]: syz.0.2740 (pid 11903) Use of int in maxseg socket option. [ 265.900200][T11903] Use struct sctp_assoc_value instead [ 265.945302][T11915] netlink: 'syz.1.2744': attribute type 83 has an invalid length. [ 266.060139][T11917] block nbd0: Unsupported socket: shutdown callout must be supported. [ 266.856461][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 266.956152][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 266.989647][T11947] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2762'. [ 267.078963][T11947] bond1: entered promiscuous mode [ 267.098227][T11947] 8021q: adding VLAN 0 to HW filter on device bond1 [ 267.453064][T11947] bond1 (unregistering): Released all slaves [ 267.511214][T11956] pimreg: entered allmulticast mode [ 267.524903][T11958] bridge0: left allmulticast mode [ 267.531263][T11958] pimreg: left allmulticast mode [ 267.918819][ T5844] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.139403][T11979] IPVS: persistence engine module ip_vs_pe_ not found [ 268.327881][T11988] vxlan1: entered promiscuous mode [ 268.333075][T11988] vxlan1: entered allmulticast mode [ 268.341229][T11992] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.839786][T12013] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2792'. [ 268.956689][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 269.140353][T12027] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2798'. [ 269.174477][T12032] sock: sock_set_timeout: `syz.4.2802' (pid 12032) tries to set negative timeout [ 269.327232][T12035] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2803'. [ 269.442190][T12043] netlink: 'syz.2.2806': attribute type 15 has an invalid length. [ 269.885347][T12061] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2814'. [ 269.998618][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 270.006817][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 270.610588][T12098] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.036804][ T5844] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.063501][T12116] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.107471][ T5844] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.039963][ T5902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.116214][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.583612][ T3008] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 274.156898][ T5844] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.486629][T12263] 8021q: VLANs not supported on lo [ 275.198795][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 275.499182][T12304] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2923'. [ 275.540091][ T5902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 275.555899][ T5902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 275.585909][ T5902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 275.607085][ T5902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 275.624966][ T5902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 275.645475][ T5902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 275.666691][ T5902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 275.684505][ T5902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.017740][T12322] netlink: 'syz.0.2932': attribute type 10 has an invalid length. [ 276.072299][T12324] ipvlan2: entered promiscuous mode [ 276.086033][T12324] ipvlan2: entered allmulticast mode [ 276.242341][T12331] veth0_to_bridge: entered promiscuous mode [ 276.266363][T12335] netlink: 'syz.2.2938': attribute type 3 has an invalid length. [ 276.286212][T12330] veth0_to_bridge: left promiscuous mode [ 277.011718][T12374] sctp: [Deprecated]: syz.2.2957 (pid 12374) Use of int in maxseg socket option. [ 277.011718][T12374] Use struct sctp_assoc_value instead [ 277.699890][T12388] macvlan1: entered promiscuous mode [ 277.762330][T12388] ipvlan0: entered promiscuous mode [ 277.784104][T12388] ipvlan0: left promiscuous mode [ 277.798738][T12388] macvlan1: left promiscuous mode [ 279.070237][ T30] audit: type=1800 audit(1750422681.957:4): pid=12437 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2985" name="memory.events" dev="tmpfs" ino=2945 res=0 errno=0 [ 279.298769][T12449] syzkaller1: entered promiscuous mode [ 279.315996][T12449] syzkaller1: entered allmulticast mode [ 279.356355][ T5844] net_ratelimit: 250 callbacks suppressed [ 279.356376][ T5844] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 279.392798][T12457] netlink: 'syz.4.2994': attribute type 10 has an invalid length. [ 279.468031][T12457] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.489257][T12457] bridge_slave_1: left allmulticast mode [ 279.495197][T12457] bridge_slave_1: left promiscuous mode [ 279.518081][T12457] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.588020][T12457] bridge_slave_1: entered promiscuous mode [ 279.624916][T12457] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 280.397573][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 280.461186][T12492] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 280.543146][T12492] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 280.556514][T12495] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3012'. [ 280.591803][T12498] syzkaller1: entered promiscuous mode [ 280.600715][T12498] syzkaller1: entered allmulticast mode [ 281.436429][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 281.758181][T12555] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 281.791288][T12558] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3039'. [ 281.842590][ T5917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 282.330170][T12575] tipc: Cannot configure node identity twice [ 282.419005][ T5917] IPVS: starting estimator thread 0... [ 282.446243][T12578] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 282.484052][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 282.525757][T12585] IPVS: using max 24 ests per chain, 57600 per kthread [ 282.926535][T12606] netlink: 176 bytes leftover after parsing attributes in process `syz.3.3061'. [ 283.340756][T12619] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 283.348773][T12619] IPv6: NLM_F_CREATE should be set when creating new route [ 283.356321][T12619] IPv6: NLM_F_CREATE should be set when creating new route [ 283.521225][ T5844] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 283.892435][T12633] netlink: 'syz.1.3075': attribute type 3 has an invalid length. [ 284.079058][T12645] netlink: 27 bytes leftover after parsing attributes in process `syz.1.3079'. [ 284.525896][T12636] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3074'. [ 284.555979][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.564444][T12636] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3074'. [ 284.842889][T12670] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 284.859031][T12670] batadv_slave_0: entered promiscuous mode [ 284.876416][ T1212] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.964922][T12674] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3092'. [ 285.194233][T12683] trusted_key: syz.3.3096 sent an empty control message without MSG_MORE. [ 285.597230][ T5844] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.719895][T12701] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3104'. [ 285.774250][T12702] gtp0: entered promiscuous mode [ 285.818746][T12702] gtp0: entered allmulticast mode [ 286.078044][ T5844] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 286.604820][T12736] netlink: 'syz.3.3122': attribute type 23 has an invalid length. [ 286.622512][T12736] netlink: 244 bytes leftover after parsing attributes in process `syz.3.3122'. [ 286.636799][ T5844] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 286.862646][T12745] syz_tun: entered allmulticast mode [ 286.869178][T12745] syz_tun: left allmulticast mode [ 287.184075][T12760] tipc: Started in network mode [ 287.235845][T12760] tipc: Node identity ac14140f, cluster identity 4711 [ 287.254160][T12760] tipc: New replicast peer: 255.255.255.255 [ 287.269690][T12760] tipc: Enabled bearer , priority 10 [ 287.296132][T12757] netlink: 148 bytes leftover after parsing attributes in process `syz.2.3132'. [ 287.320918][T12757] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 287.676434][ T5844] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.933077][T12788] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3146'. [ 288.188681][T12798] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3151'. [ 288.297042][T12803] netlink: 'syz.4.3154': attribute type 1 has an invalid length. [ 288.341058][T12806] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 288.396025][ T5917] tipc: Node number set to 2886997007 [ 288.473983][T12803] bond2: entered promiscuous mode [ 288.485349][T12803] 8021q: adding VLAN 0 to HW filter on device bond2 [ 288.579707][T12811] 8021q: adding VLAN 0 to HW filter on device bond3 [ 288.598259][T12811] bond2: (slave bond3): making interface the new active one [ 288.605902][T12811] bond3: entered promiscuous mode [ 288.612300][T12811] bond2: (slave bond3): Enslaving as an active interface with an up link [ 288.718224][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 288.894064][ T5156] Bluetooth: hci1: link tx timeout [ 288.902203][ T5156] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 288.921808][T12833] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3165'. [ 288.931031][T12833] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3165'. [ 289.024047][T12838] netlink: 'syz.0.3167': attribute type 3 has an invalid length. [ 289.032608][T12838] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3167'. [ 289.119925][ T5917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.761778][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 290.313774][T12880] batadv_slave_1: entered promiscuous mode [ 290.334441][T12878] batadv_slave_1: left promiscuous mode [ 290.804289][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 290.955649][ T5852] Bluetooth: hci1: command 0x0406 tx timeout [ 291.054943][T12907] sctp: [Deprecated]: syz.0.3198 (pid 12907) Use of struct sctp_assoc_value in delayed_ack socket option. [ 291.054943][T12907] Use struct sctp_sack_info instead [ 291.847253][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 292.157809][ T5917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 292.170113][T12936] netlink: 'syz.3.3212': attribute type 13 has an invalid length. [ 292.207263][T12936] netlink: 24859 bytes leftover after parsing attributes in process `syz.3.3212'. [ 292.273285][T12940] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input5 [ 292.879794][ T5844] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.288290][T12974] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.467531][T12974] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.618445][T12974] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.633676][T12974] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.647271][T12974] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 294.957673][ T24] net_ratelimit: 2 callbacks suppressed [ 294.957696][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.196260][ T5917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.996358][ T5844] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.796888][T13032] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3250'. [ 297.036001][ T5844] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 297.556589][T13077] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3270'. [ 297.840213][ T3513] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.982897][ T3513] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.076226][ T5844] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.099392][T13089] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.241297][ T5917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.255006][ T3513] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.620016][T13099] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3280'. [ 298.639274][ T3513] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.972208][ T5852] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 298.992036][T13099] bond0 (unregistering): left promiscuous mode [ 299.009271][ T5852] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 299.024975][ T5852] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 299.033150][T13099] bond0 (unregistering): Released all slaves [ 299.048784][ T5852] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 299.076276][ T5852] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 299.116679][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 299.681416][ T3513] bridge_slave_0: left allmulticast mode [ 299.695384][ T3513] bridge_slave_0: left promiscuous mode [ 299.716487][ T3513] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.158021][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 300.800273][ T3513] bond0 (unregistering): left promiscuous mode [ 300.806991][ T3513] bond_slave_0: left promiscuous mode [ 300.812649][ T3513] bond_slave_1: left promiscuous mode [ 300.818372][ T3513] bridge_slave_1: left promiscuous mode [ 300.833090][ T3513] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 300.854692][ T3513] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 300.873382][ T3513] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 300.884711][ T3513] bond0 (unregistering): Released all slaves [ 300.916731][ T3513] bond1 (unregistering): Released all slaves [ 301.069329][ T3513] bond2 (unregistering): (slave bond3): Releasing backup interface [ 301.081636][ T3513] bond3 (unregistering): left promiscuous mode [ 301.089621][ T3513] bond2 (unregistering): Released all slaves [ 301.121720][ T5156] Bluetooth: hci3: command tx timeout [ 301.199833][ T5844] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 301.261020][ T3513] bond3 (unregistering): Released all slaves [ 301.286091][ T1212] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 301.392014][ T3513] tipc: Left network mode [ 301.660008][T13105] chnl_net:caif_netlink_parms(): no params data found [ 301.993707][ T3513] mac80211_hwsim hwsim6 wlan0 (unregistering): left allmulticast mode [ 302.236048][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 302.395738][ T30] audit: type=1804 audit(1750422705.277:5): pid=13162 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.3306" name="memory.events" dev="tmpfs" ino=3324 res=1 errno=0 [ 302.476631][ T30] audit: type=1800 audit(1750422705.277:6): pid=13162 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3306" name="memory.events" dev="tmpfs" ino=3324 res=0 errno=0 [ 302.514623][ T3513] batadv_slave_0: left promiscuous mode [ 302.557961][ T3513] hsr_slave_0: left promiscuous mode [ 302.583286][ T3513] hsr_slave_1: left promiscuous mode [ 302.593051][ T3513] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 302.601443][ T5852] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 302.613141][ T5852] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 302.621614][ T5852] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 302.629964][ T5852] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 302.645685][ T3513] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 302.654134][ T5852] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 302.854881][ T3513] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 302.876472][ T3513] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 302.936838][ T3513] macsec0: left allmulticast mode [ 302.941930][ T3513] veth1_macvtap: left allmulticast mode [ 302.956604][ T3513] veth1_macvtap: left promiscuous mode [ 302.962198][ T3513] veth0_macvtap: left promiscuous mode [ 303.195715][ T5156] Bluetooth: hci3: command tx timeout [ 303.275903][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 303.424375][T13180] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.3313'. [ 303.887813][ T3513] team0 (unregistering): Port device team_slave_1 removed [ 303.989569][ T3513] team0 (unregistering): Port device team_slave_0 removed [ 304.150764][T13184] netlink: 13 bytes leftover after parsing attributes in process `syz.3.3314'. [ 304.320780][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 304.329170][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 304.507917][ T36] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 304.609925][T13195] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3319'. [ 304.619347][T13195] netlink: 'syz.0.3319': attribute type 7 has an invalid length. [ 304.628001][T13195] netlink: 'syz.0.3319': attribute type 8 has an invalid length. [ 304.638562][T13195] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3319'. [ 304.702804][T13105] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.710375][T13105] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.715874][ T5156] Bluetooth: hci2: command tx timeout [ 304.721134][T13105] bridge_slave_0: entered allmulticast mode [ 304.730792][T13105] bridge_slave_0: entered promiscuous mode [ 304.782266][T13195] erspan0: entered promiscuous mode [ 304.798344][T13195] gretap0: entered promiscuous mode [ 304.806087][T13195] erspan0: left promiscuous mode [ 304.812781][T13195] gretap0: left promiscuous mode [ 304.830610][T13105] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.851597][T13105] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.863708][T13105] bridge_slave_1: entered allmulticast mode [ 304.875063][T13105] bridge_slave_1: entered promiscuous mode [ 305.218873][T13105] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 305.277974][ T5156] Bluetooth: hci3: command tx timeout [ 305.290264][T13105] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 305.366395][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.495949][T13105] team0: Port device team_slave_0 added [ 305.600846][T13105] team0: Port device team_slave_1 added [ 305.687795][T13105] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 305.697618][T13105] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 305.728069][T13105] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 305.762251][T13105] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 305.769472][T13105] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 305.795865][T13105] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 305.998563][T13105] hsr_slave_0: entered promiscuous mode [ 306.006738][T13105] hsr_slave_1: entered promiscuous mode [ 306.013918][T13105] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 306.022809][T13105] Cannot create hsr debugfs directory [ 306.051077][ T3513] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.138577][ T3513] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.315416][ T3513] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.397097][ T5844] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.493892][ T3513] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.623893][T13167] chnl_net:caif_netlink_parms(): no params data found [ 306.796396][ T5156] Bluetooth: hci2: command tx timeout [ 306.815278][T13249] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3339'. [ 307.336689][T13167] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.345084][T13167] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.355982][ T1212] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 307.361287][ T5156] Bluetooth: hci3: command tx timeout [ 307.386621][T13167] bridge_slave_0: entered allmulticast mode [ 307.410601][T13167] bridge_slave_0: entered promiscuous mode [ 307.436019][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 307.463819][T13167] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.473522][T13275] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3349'. [ 307.491423][T13167] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.500484][T13167] bridge_slave_1: entered allmulticast mode [ 307.518135][T13167] bridge_slave_1: entered promiscuous mode [ 307.529056][ T3513] bridge_slave_1: left allmulticast mode [ 307.540823][ T3513] bridge_slave_1: left promiscuous mode [ 307.553193][ T3513] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.567353][ T3513] bridge_slave_0: left allmulticast mode [ 307.583400][ T3513] bridge_slave_0: left promiscuous mode [ 307.595814][ T3513] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.065218][ T3513] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 308.088895][ T3513] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 308.110806][ T3513] bond0 (unregistering): (slave bond1): Releasing backup interface [ 308.123557][ T3513] bond0 (unregistering): Released all slaves [ 308.347892][ T3513] bond1 (unregistering): Released all slaves [ 308.371452][ T3513] bond2 (unregistering): Released all slaves [ 308.412220][T13282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.430540][T13282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.442424][T13282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.452466][T13282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.461780][T13282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.479879][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.554716][T13285] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3352'. [ 308.687775][ T3513] tipc: Disabling bearer [ 308.705717][ T3513] tipc: Left network mode [ 308.711212][T13167] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 308.724630][T13167] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 308.876325][ T5156] Bluetooth: hci2: command tx timeout [ 309.061113][T13167] team0: Port device team_slave_0 added [ 309.112180][T13167] team0: Port device team_slave_1 added [ 309.240261][T13167] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 309.251928][T13167] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 309.284942][T13167] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 309.334990][T13167] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 309.343137][T13167] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 309.385416][T13167] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 309.473507][ T3513] hsr_slave_0: left promiscuous mode [ 309.484183][ T3513] hsr_slave_1: left promiscuous mode [ 309.494875][ T3513] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 309.512134][ T3513] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 309.534089][ T3513] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 309.567906][ T3513] veth0_macvtap: left allmulticast mode [ 309.573835][ T3513] veth1_macvtap: left promiscuous mode [ 309.579662][ T3513] veth0_macvtap: left promiscuous mode [ 309.585986][ T3513] veth1_vlan: left promiscuous mode [ 309.591480][ T3513] veth0_vlan: left promiscuous mode [ 310.094293][T13326] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3369'. [ 310.407981][ T5917] net_ratelimit: 4 callbacks suppressed [ 310.408002][ T5917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 310.556092][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 310.960812][ T5156] Bluetooth: hci2: command tx timeout [ 311.288355][ T3513] team0 (unregistering): Port device team_slave_1 removed [ 311.335264][ T3513] team0 (unregistering): Port device C removed [ 311.602037][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.989250][T13105] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 312.057992][T13105] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 312.110152][T13167] hsr_slave_0: entered promiscuous mode [ 312.123847][T13167] hsr_slave_1: entered promiscuous mode [ 312.131558][T13167] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 312.145278][T13167] Cannot create hsr debugfs directory [ 312.163828][T13105] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 312.282743][T13105] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 312.447352][T13376] syz_tun: entered promiscuous mode [ 312.462203][T13376] syz_tun: left promiscuous mode [ 312.638657][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 312.783026][T13386] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3390'. [ 312.835378][T13386] netlink: 'syz.3.3390': attribute type 1 has an invalid length. [ 312.843573][T13386] netlink: 'syz.3.3390': attribute type 2 has an invalid length. [ 313.006227][T13105] 8021q: adding VLAN 0 to HW filter on device bond0 [ 313.128834][T13105] 8021q: adding VLAN 0 to HW filter on device team0 [ 313.180725][ T1110] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.187976][ T1110] bridge0: port 1(bridge_slave_0) entered forwarding state [ 313.257451][ T3513] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.264702][ T3513] bridge0: port 2(bridge_slave_1) entered forwarding state [ 313.436792][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.514129][T13167] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 313.558496][T13167] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 313.604137][T13167] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 313.623983][T13167] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 313.678648][ T5844] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.989256][T13167] 8021q: adding VLAN 0 to HW filter on device bond0 [ 314.066962][T13167] 8021q: adding VLAN 0 to HW filter on device team0 [ 314.111174][T13105] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 314.141922][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.149216][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 314.210920][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.218216][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 314.716380][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.014589][T13105] veth0_vlan: entered promiscuous mode [ 315.151923][T13105] veth1_vlan: entered promiscuous mode [ 315.255130][T13167] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 315.362006][T13167] veth0_vlan: entered promiscuous mode [ 315.369162][T13105] veth0_macvtap: entered promiscuous mode [ 315.381356][T13105] veth1_macvtap: entered promiscuous mode [ 315.414097][T13167] veth1_vlan: entered promiscuous mode [ 315.490254][T13105] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 315.540485][T13105] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 315.606912][ T2983] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.629426][ T1110] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.651052][ T1110] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.766766][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.824169][ T1110] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.852036][T13167] veth0_macvtap: entered promiscuous mode [ 315.950921][T13167] veth1_macvtap: entered promiscuous mode [ 316.000791][T13476] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 316.223391][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 316.257389][T13167] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 316.265014][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 316.289802][T13167] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 316.375187][ T3513] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.451344][ T3513] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.471230][T13481] syzkaller1: entered promiscuous mode [ 316.477601][ T5902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.478067][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 316.488182][T13481] syzkaller1: entered allmulticast mode [ 316.499879][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 316.516132][ T3513] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.531520][ T3513] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.738544][ T774] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 316.751813][ T774] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 316.796788][ T5844] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.876922][T13494] IPv6: NLM_F_CREATE should be specified when creating new route [ 316.932410][ T2983] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 316.961396][ T2983] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 317.220115][ T2983] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.437759][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.449342][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.458710][ T2983] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.687665][ T2983] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.845870][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.877962][ T2983] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.147493][ T2983] bridge_slave_1: left allmulticast mode [ 318.153221][ T2983] bridge_slave_1: left promiscuous mode [ 318.189531][ T2983] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.275875][ T2983] bridge_slave_0: left allmulticast mode [ 318.281586][ T2983] bridge_slave_0: left promiscuous mode [ 318.330082][ T2983] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.520989][ T5852] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 318.531680][ T5852] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 318.545298][ T5852] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 318.557502][ T5852] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 318.569012][ T5852] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 318.681727][T13528] netlink: 136784 bytes leftover after parsing attributes in process `syz.0.3443'. [ 318.707976][T13528] netlink: zone id is out of range [ 318.713980][T13528] netlink: zone id is out of range [ 318.725214][T13528] netlink: zone id is out of range [ 318.743164][T13528] netlink: zone id is out of range [ 318.751234][T13528] netlink: zone id is out of range [ 318.824128][ T5852] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 318.860727][ T5852] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 318.872399][ T5852] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 318.884537][ T5852] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 318.895122][ T5852] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 319.115275][ T2983] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 319.129131][ T2983] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 319.139553][ T2983] bond0 (unregistering): Released all slaves [ 319.762139][ T2983] hsr_slave_0: left promiscuous mode [ 319.785652][ T2983] hsr_slave_1: left promiscuous mode [ 319.792334][ T2983] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 319.800630][ T2983] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 319.810012][ T2983] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 319.819375][ T2983] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 319.863152][ T2983] veth1_macvtap: left promiscuous mode [ 319.869526][ T2983] veth0_macvtap: left promiscuous mode [ 319.875366][ T2983] veth1_vlan: left promiscuous mode [ 319.882184][ T2983] veth0_vlan: left promiscuous mode [ 319.887957][T13554] netlink: 596 bytes leftover after parsing attributes in process `syz.3.3452'. [ 320.645957][ T5852] Bluetooth: hci2: command tx timeout [ 320.669225][ T2983] team0 (unregistering): Port device team_slave_1 removed [ 320.755921][ T2983] team0 (unregistering): Port device team_slave_0 removed [ 320.956669][ T5852] Bluetooth: hci3: command tx timeout [ 320.962988][ T5844] net_ratelimit: 4060 callbacks suppressed [ 320.963008][ T5844] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.452208][T13550] netlink: 'syz.3.3452': attribute type 29 has an invalid length. [ 321.979828][T13561] IPVS: Scheduler module ip_vs_sip not found [ 321.997343][ T5844] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.110480][T13524] chnl_net:caif_netlink_parms(): no params data found [ 322.279933][ T2983] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.343543][T13529] chnl_net:caif_netlink_parms(): no params data found [ 322.460719][ T2983] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.555908][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.715702][ T5852] Bluetooth: hci2: command tx timeout [ 322.757988][ T2983] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.916789][ T2983] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.036444][ T5852] Bluetooth: hci3: command tx timeout [ 323.042821][ T5844] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.065456][T13524] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.092809][T13524] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.114337][T13524] bridge_slave_0: entered allmulticast mode [ 323.131320][T13524] bridge_slave_0: entered promiscuous mode [ 323.139432][T13529] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.150559][T13529] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.158131][T13529] bridge_slave_0: entered allmulticast mode [ 323.167941][T13529] bridge_slave_0: entered promiscuous mode [ 323.180767][T13529] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.209143][T13529] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.216949][T13529] bridge_slave_1: entered allmulticast mode [ 323.225136][T13529] bridge_slave_1: entered promiscuous mode [ 323.234547][T13524] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.242840][T13524] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.265895][T13524] bridge_slave_1: entered allmulticast mode [ 323.280448][T13524] bridge_slave_1: entered promiscuous mode [ 323.453032][T13524] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 323.472610][T13529] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 323.509770][T13524] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 323.569167][T13529] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 323.632872][T13524] team0: Port device team_slave_0 added [ 323.761301][T13524] team0: Port device team_slave_1 added [ 323.940787][T13524] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 323.948423][T13524] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 323.977940][T13524] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 323.992838][T13622] pim6reg1: entered promiscuous mode [ 323.998474][T13622] pim6reg1: entered allmulticast mode [ 324.024375][T13529] team0: Port device team_slave_0 added [ 324.073961][T13630] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 324.092819][T13524] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 324.100183][T13524] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 324.146296][T13524] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 324.228192][ T2983] bridge_slave_1: left allmulticast mode [ 324.233902][ T2983] bridge_slave_1: left promiscuous mode [ 324.264070][ T2983] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.276275][ T2983] bridge_slave_0: left allmulticast mode [ 324.282063][ T2983] bridge_slave_0: left promiscuous mode [ 324.293887][ T2983] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.369146][T13640] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.3485'. [ 324.796344][ T5852] Bluetooth: hci2: command tx timeout [ 325.123122][ T5852] Bluetooth: hci3: command tx timeout [ 325.273351][ T2983] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 325.296797][ T2983] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 325.323578][ T2983] bond0 (unregistering): Released all slaves [ 325.398895][T13529] team0: Port device team_slave_1 added [ 325.511260][T13658] netlink: 'syz.0.3491': attribute type 21 has an invalid length. [ 325.643625][T13658] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3491'. [ 325.664445][T13524] hsr_slave_0: entered promiscuous mode [ 325.672384][T13524] hsr_slave_1: entered promiscuous mode [ 325.680002][T13524] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 325.687827][T13524] Cannot create hsr debugfs directory [ 325.717578][T13529] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 325.724726][T13529] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 325.751528][T13529] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 325.773998][T13662] netlink: 27 bytes leftover after parsing attributes in process `syz.0.3493'. [ 325.912078][T13529] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 325.919934][T13529] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 325.964853][T13529] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 326.078158][T13671] mac80211_hwsim hwsim14 wlan0: entered promiscuous mode [ 326.086016][T13671] macvtap1: entered allmulticast mode [ 326.091802][T13671] mac80211_hwsim hwsim14 wlan0: entered allmulticast mode [ 326.103994][T13671] mac80211_hwsim hwsim14 wlan0: left allmulticast mode [ 326.111405][T13671] mac80211_hwsim hwsim14 wlan0: left promiscuous mode [ 326.247252][ T2983] hsr_slave_0: left promiscuous mode [ 326.263871][ T2983] hsr_slave_1: left promiscuous mode [ 326.272693][ T2983] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 326.287945][ T2983] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 326.313444][ T2983] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 326.335626][ T2983] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 326.379002][ T2983] veth1_macvtap: left promiscuous mode [ 326.384690][ T2983] veth0_macvtap: left promiscuous mode [ 326.399669][ T2983] veth1_vlan: left promiscuous mode [ 326.405101][ T2983] veth0_vlan: left promiscuous mode [ 326.509423][T13685] vcan0: tx drop: invalid sa for name 0xfffffffffffffffc [ 326.889966][ T5156] Bluetooth: hci2: command tx timeout [ 327.195792][ T5156] Bluetooth: hci3: command tx timeout [ 327.234189][ T2983] team0 (unregistering): Port device team_slave_1 removed [ 327.297630][ T2983] team0 (unregistering): Port device team_slave_0 removed [ 327.989850][T13529] hsr_slave_0: entered promiscuous mode [ 327.996741][T13529] hsr_slave_1: entered promiscuous mode [ 328.002961][T13529] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 328.012414][T13529] Cannot create hsr debugfs directory [ 328.989064][T13733] veth0_to_bridge: entered promiscuous mode [ 329.010732][T13730] veth0_to_bridge: left promiscuous mode [ 329.019950][T13524] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 329.070803][T13524] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 329.089433][T13524] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 329.133593][T13735] syzkaller1: entered promiscuous mode [ 329.142046][T13735] syzkaller1: entered allmulticast mode [ 329.148588][T13524] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 329.300060][T13745] syzkaller1: left promiscuous mode [ 329.306195][T13745] syzkaller1: left allmulticast mode [ 329.622324][T13524] 8021q: adding VLAN 0 to HW filter on device bond0 [ 329.755206][T13524] 8021q: adding VLAN 0 to HW filter on device team0 [ 329.823776][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.831878][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 329.863159][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.870416][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 329.887579][T13755] netlink: 'syz.0.3534': attribute type 1 has an invalid length. [ 329.902960][T13529] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 329.916319][T13755] netlink: 'syz.0.3534': attribute type 4 has an invalid length. [ 329.924300][T13755] netlink: 192 bytes leftover after parsing attributes in process `syz.0.3534'. [ 329.982593][T13529] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 330.049031][T13529] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 330.113724][T13529] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 330.291018][T13772] netlink: 'syz.3.3538': attribute type 4 has an invalid length. [ 330.522616][T13529] 8021q: adding VLAN 0 to HW filter on device bond0 [ 330.590041][T13529] 8021q: adding VLAN 0 to HW filter on device team0 [ 330.641959][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.649205][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 330.698199][T13787] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3543'. [ 330.708682][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.715930][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 330.747896][T13524] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 330.989335][T13797] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3547'. [ 331.089061][T13801] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3548'. [ 331.511834][T13529] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 331.603991][T13524] veth0_vlan: entered promiscuous mode [ 331.645376][T13524] veth1_vlan: entered promiscuous mode [ 331.760944][T13529] veth0_vlan: entered promiscuous mode [ 331.836804][T13524] veth0_macvtap: entered promiscuous mode [ 331.865292][T13524] veth1_macvtap: entered promiscuous mode [ 331.889742][T13529] veth1_vlan: entered promiscuous mode [ 331.959916][T13524] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 332.068364][T13524] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 332.092984][T13529] veth0_macvtap: entered promiscuous mode [ 332.151442][ T1110] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.169409][T13529] veth1_macvtap: entered promiscuous mode [ 332.200030][ T1110] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.234695][ T2983] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.236393][T13840] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.3563'. [ 332.266888][ T2983] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.284871][T13839] unknown channel width for channel at 909000KHz? [ 332.293554][T13529] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 332.360119][T13529] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 332.401728][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.462412][ T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.490276][ T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.515240][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.538611][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 332.557084][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 332.692163][ T2983] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 332.739615][ T2983] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 332.751107][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 332.781324][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 332.890635][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 332.926596][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 333.508137][T13871] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3575'. [ 333.608606][ T36] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.167921][ T36] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.378908][ T36] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.571914][ T36] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.899795][ T36] bridge_slave_1: left allmulticast mode [ 334.913409][ T36] bridge_slave_1: left promiscuous mode [ 334.929871][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.973745][ T36] bridge_slave_0: left allmulticast mode [ 334.995163][ T36] bridge_slave_0: left promiscuous mode [ 335.012403][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.229692][ T5852] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 335.240049][ T5852] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 335.248462][ T5852] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 335.273570][ T5852] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 335.288354][ T5852] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 335.384555][ T5156] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 335.398728][ T5156] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 335.411199][ T5156] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 335.432866][ T5156] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 335.443932][ T5156] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 335.949422][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 335.969915][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 335.981325][ T36] bond0 (unregistering): Released all slaves [ 336.264810][T13940] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3593'. [ 336.598919][ T36] hsr_slave_0: left promiscuous mode [ 336.614358][ T36] hsr_slave_1: left promiscuous mode [ 336.621463][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 336.631994][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 336.645726][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 336.653445][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 336.700505][ T36] veth1_macvtap: left promiscuous mode [ 336.711185][ T36] veth0_macvtap: left promiscuous mode [ 336.719268][ T36] veth1_vlan: left promiscuous mode [ 336.724749][ T36] veth0_vlan: left promiscuous mode [ 336.941642][T13961] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3602'. [ 337.118623][T13963] sctp: [Deprecated]: syz.0.3603 (pid 13963) Use of struct sctp_assoc_value in delayed_ack socket option. [ 337.118623][T13963] Use struct sctp_sack_info instead [ 337.367633][ T5156] Bluetooth: hci2: command tx timeout [ 337.428542][ T36] team0 (unregistering): Port device team_slave_1 removed [ 337.475343][ T36] team0 (unregistering): Port device team_slave_0 removed [ 337.521576][ T5156] Bluetooth: hci3: command tx timeout [ 338.217380][T13913] chnl_net:caif_netlink_parms(): no params data found [ 338.265879][T13974] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3607'. [ 338.453265][T13988] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3610'. [ 338.612216][T13913] bridge0: port 1(bridge_slave_0) entered blocking state [ 338.635955][T13913] bridge0: port 1(bridge_slave_0) entered disabled state [ 338.652031][T13913] bridge_slave_0: entered allmulticast mode [ 338.675630][T13913] bridge_slave_0: entered promiscuous mode [ 338.732690][T13913] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.751235][T13913] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.760627][T13913] bridge_slave_1: entered allmulticast mode [ 338.773135][T13913] bridge_slave_1: entered promiscuous mode [ 338.784001][T13919] chnl_net:caif_netlink_parms(): no params data found [ 339.207588][T13913] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 339.300314][T13913] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 339.436812][ T5156] Bluetooth: hci2: command tx timeout [ 339.528938][T13913] team0: Port device team_slave_0 added [ 339.544552][T14026] netlink: 112 bytes leftover after parsing attributes in process `syz.0.3623'. [ 339.563271][T13913] team0: Port device team_slave_1 added [ 339.596922][ T5156] Bluetooth: hci3: command tx timeout [ 339.614576][T13919] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.631148][T13919] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.640552][T13919] bridge_slave_0: entered allmulticast mode [ 339.653780][T13919] bridge_slave_0: entered promiscuous mode [ 339.742917][T13913] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 339.769248][T13913] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 339.804939][T13913] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 339.817886][T13919] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.825570][T13919] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.833099][T13919] bridge_slave_1: entered allmulticast mode [ 339.843387][T13919] bridge_slave_1: entered promiscuous mode [ 339.884229][T13913] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 339.891483][T13913] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 339.943604][T13913] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 340.010859][T13919] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 340.053515][T14040] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 340.054431][ T44] IPVS: starting estimator thread 0... [ 340.118827][ T36] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.166143][T14044] IPVS: using max 35 ests per chain, 84000 per kthread [ 340.169041][T13919] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 340.283926][ T36] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.462429][T13913] hsr_slave_0: entered promiscuous mode [ 340.472347][T13913] hsr_slave_1: entered promiscuous mode [ 340.489746][T13913] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 340.513550][T13913] Cannot create hsr debugfs directory [ 340.578255][ T36] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.607690][T13919] team0: Port device team_slave_0 added [ 340.663896][T13919] team0: Port device team_slave_1 added [ 340.686692][T14055] tipc: Enabling of bearer rejected, failed to enable media [ 340.745246][ T36] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.959684][T13919] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 340.976542][T13919] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 341.023657][T13919] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 341.046700][T14069] netlink: 'syz.2.3641': attribute type 23 has an invalid length. [ 341.085857][T13919] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 341.092852][T13919] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 341.128766][T13919] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 341.359606][T13919] hsr_slave_0: entered promiscuous mode [ 341.367582][T13919] hsr_slave_1: entered promiscuous mode [ 341.375387][T13919] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 341.398780][T13919] Cannot create hsr debugfs directory [ 341.474806][T14082] syzkaller1: entered promiscuous mode [ 341.486073][T14082] syzkaller1: entered allmulticast mode [ 341.515863][ T5156] Bluetooth: hci2: command tx timeout [ 341.572804][T14089] tipc: Started in network mode [ 341.595940][T14089] tipc: Node identity 8, cluster identity 3 [ 341.601991][T14089] tipc: Node number set to 8 [ 341.645778][ T36] bridge_slave_1: left allmulticast mode [ 341.651488][ T36] bridge_slave_1: left promiscuous mode [ 341.666448][T14093] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3650'. [ 341.684318][T14093] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3650'. [ 341.686670][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.694493][ T5156] Bluetooth: hci3: command tx timeout [ 341.740368][ T36] bridge_slave_0: left allmulticast mode [ 341.750826][ T36] bridge_slave_0: left promiscuous mode [ 341.763613][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.272124][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 342.283872][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 342.294581][ T36] bond0 (unregistering): Released all slaves [ 342.633027][T14116] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 342.940774][ T36] hsr_slave_0: left promiscuous mode [ 342.965091][ T36] hsr_slave_1: left promiscuous mode [ 342.980310][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 343.022448][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 343.060334][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 343.068408][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 343.114300][ T36] veth1_macvtap: left promiscuous mode [ 343.136997][ T36] veth0_macvtap: left promiscuous mode [ 343.143508][ T36] veth1_vlan: left promiscuous mode [ 343.155686][ T36] veth0_vlan: left promiscuous mode [ 343.595847][ T5156] Bluetooth: hci2: command tx timeout [ 343.756601][ T5156] Bluetooth: hci3: command tx timeout [ 343.942370][ T36] team0 (unregistering): Port device team_slave_1 removed [ 343.990785][ T36] team0 (unregistering): Port device team_slave_0 removed [ 344.488558][T14133] kthread_run failed with err -4 [ 344.867063][T14159] C: renamed from team_slave_0 [ 344.909747][T14159] netlink: 'syz.3.3676': attribute type 4 has an invalid length. [ 344.928233][T14159] netlink: 'syz.3.3676': attribute type 2 has an invalid length. [ 344.970977][T14159] netlink: 140 bytes leftover after parsing attributes in process `syz.3.3676'. [ 344.980723][T14159] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 345.328239][T13919] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 345.354751][T13919] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 345.399723][T13919] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 345.442954][T13919] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 345.556991][T13913] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 345.581087][T13913] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 345.614048][T13913] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 345.639615][T13913] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 345.744903][T13919] 8021q: adding VLAN 0 to HW filter on device bond0 [ 345.816257][T13919] 8021q: adding VLAN 0 to HW filter on device team0 [ 345.851572][T13885] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.858783][T13885] bridge0: port 1(bridge_slave_0) entered forwarding state [ 345.892250][T13885] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.899490][T13885] bridge0: port 2(bridge_slave_1) entered forwarding state [ 346.008862][T13913] 8021q: adding VLAN 0 to HW filter on device bond0 [ 346.120519][T13913] 8021q: adding VLAN 0 to HW filter on device team0 [ 346.181770][T13887] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.189557][T13887] bridge0: port 1(bridge_slave_0) entered forwarding state [ 346.251150][T13887] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.258411][T13887] bridge0: port 2(bridge_slave_1) entered forwarding state [ 346.693209][T14220] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3695'. [ 346.792905][T13919] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 346.917769][T14227] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3697'. [ 346.929105][T14227] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3697'. [ 346.951057][T13919] veth0_vlan: entered promiscuous mode [ 347.035111][T13919] veth1_vlan: entered promiscuous mode [ 347.094338][T13913] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 347.228795][T13919] veth0_macvtap: entered promiscuous mode [ 347.252704][T13919] veth1_macvtap: entered promiscuous mode [ 347.315232][T13919] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 347.359762][T13919] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 347.426940][T13889] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.454203][ T2983] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.492781][ T2983] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.612569][ T2983] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.809464][T14243] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3701'. [ 347.827119][T14243] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3701'. [ 347.916627][T13883] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 347.940034][T13883] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 348.023776][ T36] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 348.041013][ T36] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 348.085717][ T774] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 348.093664][ T774] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 348.208491][ T2983] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 348.253809][ T2983] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 348.275104][T13913] veth0_vlan: entered promiscuous mode [ 348.348546][T13913] veth1_vlan: entered promiscuous mode [ 348.447315][T13913] veth0_macvtap: entered promiscuous mode [ 348.493712][T13913] veth1_macvtap: entered promiscuous mode [ 348.625032][T13913] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 348.671666][T13913] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 348.694161][T10183] ------------[ cut here ]------------ [ 348.700126][T10183] refcount_t: underflow; use-after-free. [ 348.707054][T10183] WARNING: CPU: 0 PID: 10183 at lib/refcount.c:28 refcount_warn_saturate+0x11a/0x1d0 [ 348.716631][T10183] Modules linked in: [ 348.720716][T10183] CPU: 0 UID: 0 PID: 10183 Comm: kbnepd bnep0 Not tainted 6.16.0-rc2-syzkaller-00591-g4f4040ea5d3e #0 PREEMPT(full) [ 348.733313][T10183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 348.743682][T10183] RIP: 0010:refcount_warn_saturate+0x11a/0x1d0 [ 348.750484][T10183] Code: 00 41 e2 8b e8 f7 92 c2 fc 90 0f 0b 90 90 eb d7 e8 3b e8 fe fc c6 05 95 a9 c9 0a 01 90 48 c7 c7 60 41 e2 8b e8 d7 92 c2 fc 90 <0f> 0b 90 90 eb b7 e8 1b e8 fe fc c6 05 72 a9 c9 0a 01 90 48 c7 c7 [ 348.770161][T10183] RSP: 0018:ffffc90002eb76a0 EFLAGS: 00010246 [ 348.776243][T10183] RAX: 47501674248fe200 RBX: 0000000000000003 RCX: ffff88802995da00 [ 348.784222][T10183] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 348.792202][T10183] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 348.800184][T10183] R10: dffffc0000000000 R11: fffffbfff1bfa9ec R12: dffffc0000000000 [ 348.808571][T10183] R13: ffff888059594060 R14: ffff888059594078 R15: ffffffff85f66530 [ 348.816647][T10183] FS: 0000000000000000(0000) GS:ffff888125c4f000(0000) knlGS:0000000000000000 [ 348.825597][T10183] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 348.832349][T10183] CR2: 0000555568fe15c8 CR3: 00000000791d8000 CR4: 00000000003526f0 [ 348.840338][T10183] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 348.848686][T10183] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 348.856840][T10183] Call Trace: [ 348.860200][T10183] [ 348.863211][T10183] klist_dec_and_del+0x3c7/0x3d0 [ 348.868165][T10183] ? __pfx_klist_children_put+0x10/0x10 [ 348.873707][T10183] klist_del+0xa6/0x110 [ 348.877876][T10183] device_del+0x280/0x8e0 [ 348.882201][T10183] ? _raw_spin_unlock_irq+0x2e/0x50 [ 348.887498][T10183] ? pm_runtime_set_memalloc_noio+0x1f4/0x260 [ 348.893659][T10183] ? __pfx_device_del+0x10/0x10 [ 348.898517][T10183] ? netdev_unregister_kobject+0x344/0x450 [ 348.904331][T10183] unregister_netdevice_many_notify+0x1d52/0x2320 [ 348.910921][T10183] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 348.917692][T10183] ? rcu_is_watching+0x15/0xb0 [ 348.922458][T10183] ? __mutex_lock+0xa6d/0xe80 [ 348.927141][T10183] ? __lock_acquire+0xab9/0xd20 [ 348.931985][T10183] ? __mutex_lock+0x51b/0xe80 [ 348.936767][T10183] unregister_netdevice_queue+0x33c/0x380 [ 348.942481][T10183] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 348.949085][T10183] ? rtnl_net_dev_lock+0x36/0x2f0 [ 348.954133][T10183] ? rtnl_net_dev_lock+0x2de/0x2f0 [ 348.959567][T10183] unregister_netdev+0x1f/0x60 [ 348.964326][T10183] bnep_session+0x294d/0x2b40 [ 348.969040][T10183] ? trace_sched_exit_tp+0x38/0x120 [ 348.974237][T10183] ? __lock_acquire+0xab9/0xd20 [ 348.979114][T10183] ? __pfx_bnep_session+0x10/0x10 [ 348.984143][T10183] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 348.990072][T10183] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 348.996442][T10183] ? __pfx_woken_wake_function+0x10/0x10 [ 349.002071][T10183] ? __kthread_parkme+0x7b/0x200 [ 349.007131][T10183] ? __kthread_parkme+0x1a1/0x200 [ 349.012153][T10183] kthread+0x70e/0x8a0 [ 349.016254][T10183] ? __pfx_bnep_session+0x10/0x10 [ 349.021283][T10183] ? __pfx_kthread+0x10/0x10 [ 349.025893][T10183] ? _raw_spin_unlock_irq+0x23/0x50 [ 349.031092][T10183] ? lockdep_hardirqs_on+0x9c/0x150 [ 349.036299][T10183] ? __pfx_kthread+0x10/0x10 [ 349.040895][T10183] ret_from_fork+0x3f9/0x770 [ 349.045503][T10183] ? __pfx_ret_from_fork+0x10/0x10 [ 349.050892][T10183] ? __switch_to_asm+0x39/0x70 [ 349.055943][T10183] ? __switch_to_asm+0x33/0x70 [ 349.060707][T10183] ? __pfx_kthread+0x10/0x10 [ 349.065292][T10183] ret_from_fork_asm+0x1a/0x30 [ 349.070083][T10183] [ 349.073106][T10183] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 349.080462][T10183] CPU: 0 UID: 0 PID: 10183 Comm: kbnepd bnep0 Not tainted 6.16.0-rc2-syzkaller-00591-g4f4040ea5d3e #0 PREEMPT(full) [ 349.092682][T10183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 349.102742][T10183] Call Trace: [ 349.106011][T10183] [ 349.108943][T10183] dump_stack_lvl+0x99/0x250 [ 349.113543][T10183] ? __asan_memcpy+0x40/0x70 [ 349.118126][T10183] ? __pfx_dump_stack_lvl+0x10/0x10 [ 349.123326][T10183] ? __pfx__printk+0x10/0x10 [ 349.127918][T10183] panic+0x2db/0x790 [ 349.131808][T10183] ? __pfx_panic+0x10/0x10 [ 349.136220][T10183] ? show_trace_log_lvl+0x4fb/0x550 [ 349.141419][T10183] ? ret_from_fork_asm+0x1a/0x30 [ 349.146358][T10183] __warn+0x31b/0x4b0 [ 349.150333][T10183] ? refcount_warn_saturate+0x11a/0x1d0 [ 349.155889][T10183] ? refcount_warn_saturate+0x11a/0x1d0 [ 349.161423][T10183] report_bug+0x2be/0x4f0 [ 349.165760][T10183] ? refcount_warn_saturate+0x11a/0x1d0 [ 349.171318][T10183] ? refcount_warn_saturate+0x11a/0x1d0 [ 349.176855][T10183] ? refcount_warn_saturate+0x11c/0x1d0 [ 349.182391][T10183] handle_bug+0x84/0x160 [ 349.186623][T10183] exc_invalid_op+0x1a/0x50 [ 349.191129][T10183] asm_exc_invalid_op+0x1a/0x20 [ 349.196006][T10183] RIP: 0010:refcount_warn_saturate+0x11a/0x1d0 [ 349.202151][T10183] Code: 00 41 e2 8b e8 f7 92 c2 fc 90 0f 0b 90 90 eb d7 e8 3b e8 fe fc c6 05 95 a9 c9 0a 01 90 48 c7 c7 60 41 e2 8b e8 d7 92 c2 fc 90 <0f> 0b 90 90 eb b7 e8 1b e8 fe fc c6 05 72 a9 c9 0a 01 90 48 c7 c7 [ 349.221870][T10183] RSP: 0018:ffffc90002eb76a0 EFLAGS: 00010246 [ 349.227966][T10183] RAX: 47501674248fe200 RBX: 0000000000000003 RCX: ffff88802995da00 [ 349.236146][T10183] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 349.244131][T10183] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 349.252113][T10183] R10: dffffc0000000000 R11: fffffbfff1bfa9ec R12: dffffc0000000000 [ 349.260163][T10183] R13: ffff888059594060 R14: ffff888059594078 R15: ffffffff85f66530 [ 349.268128][T10183] ? __pfx_klist_children_put+0x10/0x10 [ 349.273704][T10183] klist_dec_and_del+0x3c7/0x3d0 [ 349.278640][T10183] ? __pfx_klist_children_put+0x10/0x10 [ 349.284192][T10183] klist_del+0xa6/0x110 [ 349.288458][T10183] device_del+0x280/0x8e0 [ 349.292860][T10183] ? _raw_spin_unlock_irq+0x2e/0x50 [ 349.298239][T10183] ? pm_runtime_set_memalloc_noio+0x1f4/0x260 [ 349.304307][T10183] ? __pfx_device_del+0x10/0x10 [ 349.309147][T10183] ? netdev_unregister_kobject+0x344/0x450 [ 349.314973][T10183] unregister_netdevice_many_notify+0x1d52/0x2320 [ 349.321406][T10183] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 349.328285][T10183] ? rcu_is_watching+0x15/0xb0 [ 349.333134][T10183] ? __mutex_lock+0xa6d/0xe80 [ 349.337801][T10183] ? __lock_acquire+0xab9/0xd20 [ 349.342731][T10183] ? __mutex_lock+0x51b/0xe80 [ 349.347409][T10183] unregister_netdevice_queue+0x33c/0x380 [ 349.353124][T10183] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 349.359355][T10183] ? rtnl_net_dev_lock+0x36/0x2f0 [ 349.364385][T10183] ? rtnl_net_dev_lock+0x2de/0x2f0 [ 349.369487][T10183] unregister_netdev+0x1f/0x60 [ 349.374326][T10183] bnep_session+0x294d/0x2b40 [ 349.378997][T10183] ? trace_sched_exit_tp+0x38/0x120 [ 349.384309][T10183] ? __lock_acquire+0xab9/0xd20 [ 349.389165][T10183] ? __pfx_bnep_session+0x10/0x10 [ 349.394191][T10183] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 349.400080][T10183] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 349.406402][T10183] ? __pfx_woken_wake_function+0x10/0x10 [ 349.412106][T10183] ? __kthread_parkme+0x7b/0x200 [ 349.417049][T10183] ? __kthread_parkme+0x1a1/0x200 [ 349.422071][T10183] kthread+0x70e/0x8a0 [ 349.426141][T10183] ? __pfx_bnep_session+0x10/0x10 [ 349.431276][T10183] ? __pfx_kthread+0x10/0x10 [ 349.435874][T10183] ? _raw_spin_unlock_irq+0x23/0x50 [ 349.441158][T10183] ? lockdep_hardirqs_on+0x9c/0x150 [ 349.446728][T10183] ? __pfx_kthread+0x10/0x10 [ 349.451318][T10183] ret_from_fork+0x3f9/0x770 [ 349.456006][T10183] ? __pfx_ret_from_fork+0x10/0x10 [ 349.461115][T10183] ? __switch_to_asm+0x39/0x70 [ 349.465869][T10183] ? __switch_to_asm+0x33/0x70 [ 349.470722][T10183] ? __pfx_kthread+0x10/0x10 [ 349.475307][T10183] ret_from_fork_asm+0x1a/0x30 [ 349.480084][T10183] [ 350.627080][T10183] Shutting down cpus with NMI [ 350.632230][T10183] Kernel Offset: disabled [ 350.636646][T10183] Rebooting in 86400 seconds..