last executing test programs: 3.595963145s ago: executing program 2 (id=12299): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x4, 0x2, 0x0, 0x2, 0x0, 0x84}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r0, 0x8b32, &(0x7f0000000040)) 3.328231639s ago: executing program 2 (id=12305): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x1e}}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x7fff, 0x6, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x18, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4, r1}, 0x38) 3.176458056s ago: executing program 2 (id=12310): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x1e, 0x8000, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000002c0)={r0, &(0x7f0000001c40), 0x20000000}, 0x20) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000080)={r0, &(0x7f0000000040), 0x0}, 0x20) 3.056586623s ago: executing program 2 (id=12314): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='pids.max\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f00000000c0), 0x12) 2.961826685s ago: executing program 2 (id=12317): unshare(0x68060200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x25, &(0x7f0000000000)='/proc/sys/net/ipv6\x00\x00\x00\x00\x00\x00\x00\x00\x80=\x00\x00\x00\x00\x00\x00\x00\x00\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 2.531089955s ago: executing program 2 (id=12327): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r2}, 0xc) 2.03355257s ago: executing program 1 (id=12340): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)={0x3c, r2, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x99e}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}]]}, 0x3c}}, 0x0) 1.796359647s ago: executing program 1 (id=12341): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @loopback, 0xd}, 0x1c) recvmmsg(r0, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000ac0)=""/116, 0x74}], 0x1}}], 0x1, 0x0, 0x0) 1.529638049s ago: executing program 0 (id=12344): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000440)={0x6, {{0x2, 0x0, @multicast2}}}, 0x90) getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x24b) 1.41699189s ago: executing program 4 (id=12346): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000240)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_INTERFACE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x1c, r1, 0x127, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x20000000) 1.361939126s ago: executing program 0 (id=12347): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x48, r0, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_MAX_SP={0x65, 0x2, 0x76}]}]}, 0x48}}, 0x0) 1.226405043s ago: executing program 4 (id=12348): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0) 1.22620472s ago: executing program 0 (id=12349): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000580)={'wg1\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100e8ffffff00000000230000002000018008000100", @ANYRES32=r2, @ANYBLOB="14000200776731"], 0x34}}, 0x0) 1.145415589s ago: executing program 0 (id=12350): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/189, 0xbd}], 0x1) 983.499887ms ago: executing program 0 (id=12352): r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000300)="ab", 0x1, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="83", 0x1}], 0x1, &(0x7f0000000200)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x41}}], 0x20, 0x40040}, 0x0) 982.965751ms ago: executing program 3 (id=12353): r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, &(0x7f0000000000), 0x10) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000140)=[{{0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x1}}, {{}, {0x0, 0x0, 0x1, 0x1}}], 0x10) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000000)=[{{0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x1}}], 0x8) 937.328463ms ago: executing program 1 (id=12354): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 832.204693ms ago: executing program 3 (id=12355): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x3f01) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) close(r1) 628.139004ms ago: executing program 3 (id=12356): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 524.197181ms ago: executing program 4 (id=12357): writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000340)="8a226ff432407a7f5fd09590d734f795e12e57ce9fed3f0300eb6368ed559a85603b0080", 0x24}], 0x2) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x2, 0x0, 0x0, 0xffffffff}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b36, &(0x7f0000000000)={'wlan0\x00'}) 460.425469ms ago: executing program 3 (id=12358): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001900)=@bridge_delneigh={0x28, 0x1e, 0x1, 0x0, 0x0, {}, [@NDA_LLADDR={0xa, 0xe}]}, 0x28}}, 0x0) 409.067362ms ago: executing program 1 (id=12359): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000000)=0x6, 0x4) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newlink={0x38, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp6=r1}]}}}]}, 0x38}, 0x1, 0xba01}, 0x0) 331.719348ms ago: executing program 4 (id=12360): syz_emit_ethernet(0x2a, &(0x7f0000000100)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x27}, @random="0005d70100fe", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @multicast, @remote, @dev, @remote}}}}, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) 308.715651ms ago: executing program 3 (id=12361): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x40, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xfffffffffffffca3, 0x2, [@TCA_FQ_CODEL_QUANTUM={0x8}]}}]}, 0x40}}, 0x0) 223.753814ms ago: executing program 1 (id=12362): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000bc0)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) 186.847625ms ago: executing program 4 (id=12363): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}], 0x1, 0x0) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e24, 0x2, @empty, 0x1}}}, &(0x7f0000000080)=0x84) 107.70565ms ago: executing program 0 (id=12364): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454c9, 0x1) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x400454dc, 0x9030a04b7f0000) 104.873574ms ago: executing program 1 (id=12365): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000240)={0x1f, 0x0, @any, 0xfffa}, 0xe) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000180)=0x6, 0x4) connect$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) 19.903354ms ago: executing program 4 (id=12366): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001e00)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@dellink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}}, 0x20}}, 0x20004010) 0s ago: executing program 3 (id=12367): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000140)={0x30, r1, 0x1, 0x0, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_FLAGS={0x8, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_ASSOCIATED={0x4}]}]}, 0x30}}, 0x0) kernel console output (not intermixed with test programs): rocess `syz.3.4500'. [ 221.672562][T14649] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4498'. [ 222.234948][T14686] xt_nat: multiple ranges no longer supported [ 222.869201][T14730] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4540'. [ 222.933305][T14736] ieee802154 phy1 wpan1: encryption failed: -22 [ 223.381965][T14762] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4556'. [ 223.401522][T14762] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4556'. [ 223.532818][T14771] netlink: 'syz.2.4560': attribute type 13 has an invalid length. [ 223.540780][T14771] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4560'. [ 223.599734][T14779] x_tables: duplicate entry at hook 1 [ 223.760826][T14787] netlink: 'syz.2.4568': attribute type 10 has an invalid length. [ 223.782084][T14787] macvlan0: entered promiscuous mode [ 223.787416][T14787] macvlan0: entered allmulticast mode [ 223.824518][T14787] veth1_vlan: entered allmulticast mode [ 223.864811][T14787] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 224.011018][T14801] netlink: 'syz.4.4574': attribute type 18 has an invalid length. [ 224.057476][T14805] openvswitch: netlink: Missing key (keys=40, expected=80) [ 224.186007][T14813] ieee802154 phy1 wpan1: encryption failed: -22 [ 224.245427][T14817] netlink: 'syz.1.4582': attribute type 1 has an invalid length. [ 224.522239][T14832] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4590'. [ 224.531250][T14832] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4590'. [ 224.724022][T14845] netlink: 'syz.0.4596': attribute type 4 has an invalid length. [ 224.739069][T14847] netlink: 'syz.3.4597': attribute type 7 has an invalid length. [ 224.758990][T14845] veth1_macvtap: left promiscuous mode [ 225.301664][T14887] netlink: 292 bytes leftover after parsing attributes in process `syz.1.4616'. [ 225.311451][T14887] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4616'. [ 225.592300][T14902] x_tables: unsorted underflow at hook 2 [ 225.709294][T14912] netlink: 'syz.0.4630': attribute type 1 has an invalid length. [ 226.228787][T14951] tipc: Can't bind to reserved service type 1 [ 226.261694][T14952] caif0: entered promiscuous mode [ 226.267683][T14952] caif0: entered allmulticast mode [ 226.359541][T14958] netlink: 'syz.0.4650': attribute type 3 has an invalid length. [ 226.826830][T14990] __nla_validate_parse: 1 callbacks suppressed [ 226.826850][T14990] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4665'. [ 226.851239][T14989] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4666'. [ 227.368249][T15025] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551615) [ 227.417251][T15025] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647 [ 227.813134][T15054] netlink: 'syz.3.4699': attribute type 9 has an invalid length. [ 227.858271][T15054] macvlan1: entered promiscuous mode [ 228.061154][T15066] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4704'. [ 228.071121][T15066] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4704'. [ 228.085403][T15066] bridge4: entered promiscuous mode [ 228.090704][T15066] bridge4: entered allmulticast mode [ 228.286191][T15076] bond5: entered promiscuous mode [ 228.291366][T15076] bond5: entered allmulticast mode [ 228.297313][T15076] 8021q: adding VLAN 0 to HW filter on device bond5 [ 228.693821][T15097] xt_hashlimit: size too large, truncated to 1048576 [ 228.721100][T15097] xt_hashlimit: max too large, truncated to 1048576 [ 228.774772][T15097] xt_hashlimit: overflow, try lower: 0/0 [ 228.920390][T15108] netlink: 'syz.3.4723': attribute type 21 has an invalid length. [ 228.935821][T15108] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4723'. [ 229.012067][T15116] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4728'. [ 229.072485][T15116] (unnamed net_device) (uninitialized): option lacp_active: invalid value (5) [ 229.607467][T15161] netlink: 2 bytes leftover after parsing attributes in process `syz.1.4750'. [ 230.016748][T15179] ebt_among: wrong size: 2080 against expected 2280, rounded to 2280 [ 230.267694][T15190] netlink: 'syz.2.4764': attribute type 1 has an invalid length. [ 230.276288][T15190] netlink: 'syz.2.4764': attribute type 2 has an invalid length. [ 230.469288][T15208] xt_hashlimit: size too large, truncated to 1048576 [ 230.501922][T15213] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4773'. [ 230.822731][T15231] 8021q: VLANs not supported on lo [ 231.499348][T15280] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4806'. [ 231.558783][T15280] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4806'. [ 231.898862][T15300] xt_TPROXY: Can be used only with -p tcp or -p udp [ 231.914018][T15306] netlink: 'syz.0.4820': attribute type 39 has an invalid length. [ 232.240578][T15326] __nla_validate_parse: 1 callbacks suppressed [ 232.240598][T15326] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4829'. [ 232.426082][T15339] IPVS: Unknown mcast interface: hsr0 [ 232.492322][T15343] openvswitch: netlink: Message has 5 unknown bytes. [ 233.573789][T15417] netlink: 'syz.1.4877': attribute type 1 has an invalid length. [ 233.581576][T15417] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4877'. [ 233.643252][T15423] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4876'. [ 233.688205][T15423] bridge_slave_1: left allmulticast mode [ 233.698307][T15423] bridge_slave_1: left promiscuous mode [ 233.716464][T15423] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.744582][T15427] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 233.756646][T15423] bridge_slave_0: left allmulticast mode [ 233.770673][T15423] bridge_slave_0: left promiscuous mode [ 233.776585][T15423] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.829765][T15423] bond0: (slave bridge0): Releasing backup interface [ 234.294679][T15462] netlink: 136 bytes leftover after parsing attributes in process `syz.2.4898'. [ 234.379347][T15466] netlink: 'syz.2.4900': attribute type 10 has an invalid length. [ 234.496111][T15466] batman_adv: batadv0: Adding interface: team0 [ 234.507922][T15466] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.590745][T15466] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 234.615329][T15473] xt_l2tp: wrong L2TP version: 0 [ 234.799508][T15483] netlink: 'syz.2.4907': attribute type 3 has an invalid length. [ 234.994172][T15490] netlink: 260 bytes leftover after parsing attributes in process `syz.4.4914'. [ 235.048635][T15496] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4911'. [ 235.211908][T15504] netlink: 'syz.4.4916': attribute type 11 has an invalid length. [ 235.231890][T15504] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4916'. [ 235.423486][T15518] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4926'. [ 235.765209][T15539] netlink: 'syz.2.4935': attribute type 3 has an invalid length. [ 236.174700][T15564] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 236.405902][T15582] ieee802154 phy1 wpan1: encryption failed: -22 [ 236.468730][T15586] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4958'. [ 236.647223][T15595] netlink: 'syz.1.4964': attribute type 11 has an invalid length. [ 236.655851][T15595] netlink: 'syz.1.4964': attribute type 5 has an invalid length. [ 236.668362][T15596] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4963'. [ 236.687968][T15598] netlink: 'syz.3.4965': attribute type 2 has an invalid length. [ 237.032359][T15617] geneve2: entered promiscuous mode [ 237.037619][T15617] geneve2: entered allmulticast mode [ 237.280021][T15635] netlink: 'syz.1.4984': attribute type 1 has an invalid length. [ 237.406143][T15646] netlink: 'syz.3.4988': attribute type 1 has an invalid length. [ 237.414667][T15646] netlink: 'syz.3.4988': attribute type 2 has an invalid length. [ 237.441975][T15646] netlink: 'syz.3.4988': attribute type 2 has an invalid length. [ 237.450046][T15646] netlink: 'syz.3.4988': attribute type 1 has an invalid length. [ 237.475960][T15646] __nla_validate_parse: 2 callbacks suppressed [ 237.475976][T15646] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4988'. [ 237.691107][T15660] xt_CT: You must specify a L4 protocol and not use inversions on it [ 237.984106][T15685] netlink: 'syz.2.5005': attribute type 1 has an invalid length. [ 238.061530][T15690] netlink: 'syz.1.5008': attribute type 3 has an invalid length. [ 238.069499][T15690] netlink: 666 bytes leftover after parsing attributes in process `syz.1.5008'. [ 238.094826][ T29] audit: type=1107 audit(1729609386.446:2): pid=15686 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 238.594159][T15720] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5025'. [ 238.734086][T15728] netlink: 'syz.3.5027': attribute type 10 has an invalid length. [ 238.753528][T15728] team0: Device ipvlan1 failed to register rx_handler [ 238.916640][T15740] netlink: 2 bytes leftover after parsing attributes in process `syz.2.5034'. [ 238.988734][T15740] veth1_vlan (unregistering): left allmulticast mode [ 239.055881][T15740] bond0: (slave macvlan0): Releasing backup interface [ 239.120940][T15753] openvswitch: netlink: EtherType 0 is less than min 600 [ 239.348167][T15765] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 239.358588][T15742] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5033'. [ 239.380561][T15742] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5033'. [ 239.636269][T15782] xt_CT: You must specify a L4 protocol and not use inversions on it [ 239.689922][T15786] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5055'. [ 239.965568][T15804] netlink: 830 bytes leftover after parsing attributes in process `syz.4.5064'. [ 240.029139][T15809] netlink: 72 bytes leftover after parsing attributes in process `syz.0.5067'. [ 240.091862][T15809] netlink: 92 bytes leftover after parsing attributes in process `syz.0.5067'. [ 240.229284][T15821] netlink: 'syz.0.5072': attribute type 39 has an invalid length. [ 240.275239][T15821] veth0_macvtap: left promiscuous mode [ 240.518703][T15839] xt_CT: You must specify a L4 protocol and not use inversions on it [ 240.643162][T15847] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-xor(2) [ 242.491486][T15968] __nla_validate_parse: 4 callbacks suppressed [ 242.491506][T15968] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5144'. [ 242.499858][T15974] Unknown options in mask 1f4 [ 242.511863][T15972] xt_hashlimit: overflow, try lower: 18446465897267724288/2047 [ 242.530457][T15968] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5144'. [ 242.848696][T15991] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5157'. [ 242.868095][T15991] netlink: 152 bytes leftover after parsing attributes in process `syz.4.5157'. [ 242.910834][T15991] netlink: 152 bytes leftover after parsing attributes in process `syz.4.5157'. [ 243.114483][T16008] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5162'. [ 243.192378][T16008] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5162'. [ 243.241351][T16008] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5162'. [ 243.288573][T16018] netlink: 'syz.4.5169': attribute type 1 has an invalid length. [ 243.304125][T16018] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 243.807140][T16050] netlink: 'syz.2.5185': attribute type 10 has an invalid length. [ 243.932019][T16050] geneve0: entered promiscuous mode [ 243.987408][T16050] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 244.584667][T16093] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5206'. [ 245.009878][T16118] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5221'. [ 245.684026][T16157] xt_CT: No such helper "snmp" [ 245.689519][T16163] netlink: 'syz.2.5238': attribute type 10 has an invalid length. [ 245.703492][T16163] bridge0: port 3(batadv0) entered blocking state [ 245.731240][T16163] bridge0: port 3(batadv0) entered disabled state [ 245.751537][T16163] batadv0: entered allmulticast mode [ 245.768757][T16167] ieee802154 phy1 wpan1: encryption failed: -22 [ 245.772767][T16163] batadv0: entered promiscuous mode [ 245.791101][T16163] bridge0: port 3(batadv0) entered blocking state [ 245.797664][T16163] bridge0: port 3(batadv0) entered forwarding state [ 246.037680][ T2544] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 246.047492][ T2544] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 246.158952][T16192] netlink: 'syz.2.5254': attribute type 7 has an invalid length. [ 246.542025][ T5242] Bluetooth: hci4: command 0x0406 tx timeout [ 246.645702][T16224] lo speed is unknown, defaulting to 1000 [ 246.663594][T16224] lo speed is unknown, defaulting to 1000 [ 246.672635][T16224] lo speed is unknown, defaulting to 1000 [ 246.682025][T16224] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 246.715095][T16224] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 246.866171][T16224] lo speed is unknown, defaulting to 1000 [ 246.883653][T16224] lo speed is unknown, defaulting to 1000 [ 246.892992][T16224] lo speed is unknown, defaulting to 1000 [ 246.899652][T16224] lo speed is unknown, defaulting to 1000 [ 246.923059][T16224] lo speed is unknown, defaulting to 1000 [ 247.589782][T16271] xt_NFQUEUE: number of total queues is 0 [ 247.689730][T16282] netlink: 'syz.1.5298': attribute type 33 has an invalid length. [ 248.364006][T16318] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 248.551845][T16329] __nla_validate_parse: 4 callbacks suppressed [ 248.551864][T16329] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5320'. [ 248.606646][T16335] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5322'. [ 248.667204][T16335] netlink: 1 bytes leftover after parsing attributes in process `syz.2.5322'. [ 248.679727][T16335] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5322'. [ 248.775108][T16341] netlink: 21 bytes leftover after parsing attributes in process `syz.0.5326'. [ 248.863740][T16345] netlink: 'syz.3.5328': attribute type 1 has an invalid length. [ 249.607474][T16393] do_dccp_setsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 249.631877][T16395] netlink: 'syz.1.5353': attribute type 32 has an invalid length. [ 249.968609][T16418] netlink: 'syz.1.5365': attribute type 10 has an invalid length. [ 249.991878][T16418] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5365'. [ 250.001428][T16418] bridge0: port 4(syz_tun) entered blocking state [ 250.022371][T16418] bridge0: port 4(syz_tun) entered disabled state [ 250.028986][T16418] syz_tun: entered allmulticast mode [ 250.085747][T16418] syz_tun: entered promiscuous mode [ 250.091416][T16418] bridge0: port 4(syz_tun) entered blocking state [ 250.097991][T16418] bridge0: port 4(syz_tun) entered forwarding state [ 250.496370][T16449] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5379'. [ 250.927773][T16481] netlink: 3 bytes leftover after parsing attributes in process `syz.2.5396'. [ 250.964457][T16483] netlink: 'syz.3.5397': attribute type 2 has an invalid length. [ 250.969476][T16481] 0ªX¹¦À: renamed from caif0 [ 251.071055][T16481] 0ªX¹¦À: left promiscuous mode [ 251.076151][T16481] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 251.113686][T16493] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5402'. [ 251.128194][T16493] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 251.184753][T16493] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 251.223540][T16493] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 251.271950][T16493] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 251.320852][T16504] netlink: 'syz.1.5406': attribute type 1 has an invalid length. [ 251.331562][T16504] netlink: 'syz.1.5406': attribute type 3 has an invalid length. [ 251.339593][T16504] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5406'. [ 251.505950][T16510] netlink: 'syz.3.5408': attribute type 6 has an invalid length. [ 251.516339][T16511] xt_TPROXY: Can be used only with -p tcp or -p udp [ 252.781322][T16596] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode broadcast(3) [ 253.496327][T16641] IPv6: NLM_F_REPLACE set, but no existing node found! [ 253.795876][T16661] netlink: 'syz.2.5485': attribute type 3 has an invalid length. [ 254.265247][T16678] __nla_validate_parse: 13 callbacks suppressed [ 254.265266][T16678] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5493'. [ 254.498405][T16687] netlink: 'syz.0.5496': attribute type 8 has an invalid length. [ 255.081862][T16721] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5512'. [ 255.642452][T16751] netlink: 'syz.3.5529': attribute type 16 has an invalid length. [ 255.654033][T16754] delete_channel: no stack [ 255.659314][T16751] netlink: 'syz.3.5529': attribute type 3 has an invalid length. [ 255.681861][T16751] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5529'. [ 255.817328][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.820315][T16764] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5534'. [ 256.079916][T16776] x_tables: unsorted underflow at hook 3 [ 256.468015][T16794] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.5550'. [ 256.664459][T16806] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5552'. [ 256.758300][T16813] sock: sock_timestamping_bind_phc: sock not bind to device [ 256.928268][T16820] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 257.048482][T16834] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5570'. [ 257.057621][T16834] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5570'. [ 257.186391][T16840] xt_l2tp: invalid flags combination: 0 [ 257.266971][T16848] netlink: 'syz.2.5576': attribute type 21 has an invalid length. [ 257.322074][T16848] netlink: 'syz.2.5576': attribute type 6 has an invalid length. [ 257.335551][T16848] netlink: 156 bytes leftover after parsing attributes in process `syz.2.5576'. [ 257.688959][T16879] netlink: 3 bytes leftover after parsing attributes in process `syz.2.5593'. [ 257.865230][T16885] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 258.126552][T16905] netlink: 'syz.2.5603': attribute type 23 has an invalid length. [ 258.164640][T16905] netlink: 'syz.2.5603': attribute type 11 has an invalid length. [ 258.329007][T16918] netlink: 'syz.3.5612': attribute type 1 has an invalid length. [ 258.517521][T16932] netlink: 'syz.2.5620': attribute type 1 has an invalid length. [ 258.525770][T16932] netlink: 'syz.2.5620': attribute type 2 has an invalid length. [ 258.716442][T16945] netlink: 'syz.1.5626': attribute type 2 has an invalid length. [ 259.517218][T17008] validate_nla: 1 callbacks suppressed [ 259.517244][T17008] netlink: 'syz.3.5657': attribute type 7 has an invalid length. [ 259.731875][T17019] __nla_validate_parse: 5 callbacks suppressed [ 259.731893][T17019] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5663'. [ 259.766626][T17019] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5663'. [ 259.768034][T17025] netlink: 'syz.0.5664': attribute type 13 has an invalid length. [ 259.789216][T17025] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5664'. [ 259.829076][T17025] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (6) [ 260.445088][T17073] netlink: 'syz.4.5687': attribute type 13 has an invalid length. [ 260.577004][T17078] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5688'. [ 260.596232][T17080] netlink: 5 bytes leftover after parsing attributes in process `syz.2.5689'. [ 260.618599][T17080] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 261.163618][T17118] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 261.716949][ T25] IPVS: starting estimator thread 0... [ 261.862088][T17159] IPVS: using max 18 ests per chain, 43200 per kthread [ 261.936757][T17176] ax25_connect(): syz.0.5737 uses autobind, please contact jreuter@yaina.de [ 262.634422][T17215] netlink: 'syz.0.5755': attribute type 21 has an invalid length. [ 262.650687][T17215] IPv6: NLM_F_CREATE should be specified when creating new route [ 262.650800][T17214] netlink: 256 bytes leftover after parsing attributes in process `syz.3.5756'. [ 262.938885][T17229] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5764'. [ 263.159340][T17245] netlink: 'syz.1.5771': attribute type 1 has an invalid length. [ 263.732673][T17247] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.740211][T17247] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.758482][T17247] infiniband syz1: set down [ 263.997524][T17247] bridge_slave_0: left allmulticast mode [ 264.010998][T17247] bridge_slave_0: left promiscuous mode [ 264.017114][T17247] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.046688][T17247] bridge_slave_1: left allmulticast mode [ 264.058028][T17247] bridge_slave_1: left promiscuous mode [ 264.064873][T17247] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.113288][T17247] bond0: (slave bond_slave_1): Releasing backup interface [ 264.153807][T17247] team0: Port device team_slave_0 removed [ 264.192715][T17247] team0: Port device team_slave_1 removed [ 264.203460][T17247] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 264.222782][T17247] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 264.239703][T17247] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 264.261118][T17247] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 264.453300][T17247] ipvlan1: left promiscuous mode [ 264.458644][T17247] ipvlan1: left allmulticast mode [ 264.481746][T17247] veth0_vlan: left allmulticast mode [ 264.552458][T17247] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.566712][T17247] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.575702][T17247] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.585151][T17247] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.661615][T17247] gretap2: left promiscuous mode [ 264.672098][T17247] gretap2: left allmulticast mode [ 264.687429][T17247] gretap3: left promiscuous mode [ 264.692796][T17247] gretap3: left allmulticast mode [ 264.708374][T17247] bridge4: left promiscuous mode [ 264.713526][T17247] bridge4: left allmulticast mode [ 264.747245][T17269] vcan0 speed is unknown, defaulting to 1000 [ 264.754017][T17269] vcan0 speed is unknown, defaulting to 1000 [ 264.875603][T17283] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5786'. [ 264.888162][T17284] netlink: 80 bytes leftover after parsing attributes in process `syz.2.5785'. [ 265.115617][T17298] netlink: 'syz.4.5795': attribute type 9 has an invalid length. [ 265.124950][T17298] netlink: 'syz.4.5795': attribute type 7 has an invalid length. [ 265.132931][T17298] netlink: 'syz.4.5795': attribute type 8 has an invalid length. [ 265.886509][T17353] netlink: 'syz.1.5820': attribute type 21 has an invalid length. [ 265.895032][T17353] netlink: 128 bytes leftover after parsing attributes in process `syz.1.5820'. [ 265.910299][T17353] netlink: 'syz.1.5820': attribute type 5 has an invalid length. [ 265.918240][T17353] netlink: 3 bytes leftover after parsing attributes in process `syz.1.5820'. [ 266.012782][T17361] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5825'. [ 266.013851][T17360] No such timeout policy "syz0" [ 266.128353][T17365] netlink: 'syz.4.5829': attribute type 5 has an invalid length. [ 266.275415][T17372] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5831'. [ 267.344348][T17437] netlink: 'syz.4.5863': attribute type 11 has an invalid length. [ 267.673405][T17458] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5873'. [ 268.234411][T17496] ieee802154 phy1 wpan1: encryption failed: -22 [ 268.342183][T17502] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5895'. [ 268.351980][T17504] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5898'. [ 268.578925][T17520] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 268.781545][T17534] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 269.275006][T17571] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5930'. [ 269.488565][T17585] x_tables: ip_tables: tcpmss match: only valid for protocol 6 [ 269.642032][T17595] netlink: 'syz.4.5942': attribute type 4 has an invalid length. [ 269.668518][T17598] xt_bpf: check failed: parse error [ 270.272125][T17634] nft_compat: unsupported protocol 0 [ 271.075027][T17688] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5986'. [ 271.098574][T17688] netlink: 'syz.1.5986': attribute type 1 has an invalid length. [ 271.253105][T17702] netlink: 'syz.4.5992': attribute type 48 has an invalid length. [ 271.337536][T17709] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5994'. [ 272.802338][T17794] netlink: 332 bytes leftover after parsing attributes in process `syz.4.6034'. [ 272.904802][T17801] netlink: 'syz.3.6041': attribute type 6 has an invalid length. [ 272.936489][T17801] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6041'. [ 273.176050][T17812] netlink: 'syz.3.6044': attribute type 8 has an invalid length. [ 273.195947][T17817] xt_connbytes: Forcing CT accounting to be enabled [ 273.599484][T17840] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6059'. [ 273.634713][T17842] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6058'. [ 273.867529][T17858] netlink: 'syz.0.6066': attribute type 11 has an invalid length. [ 274.161940][T17878] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6078'. [ 275.769528][T17983] netlink: 'syz.3.6131': attribute type 8 has an invalid length. [ 275.799033][T17987] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6130'. [ 276.461341][T18028] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6152'. [ 276.514632][T18030] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6150'. [ 276.861876][T18046] netlink: 52 bytes leftover after parsing attributes in process `syz.4.6162'. [ 276.994086][T18063] ip6gre1: entered allmulticast mode [ 277.113603][T18071] netlink: 'syz.1.6172': attribute type 10 has an invalid length. [ 277.120485][T18070] netlink: 260 bytes leftover after parsing attributes in process `syz.3.6171'. [ 277.208821][T18071] team0: Port device batadv0 removed [ 277.223518][T18071] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 277.233616][T18079] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6177'. [ 277.246914][T18071] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 277.309371][T18083] SET target dimension over the limit! [ 277.787119][T18112] netlink: 'syz.4.6192': attribute type 1 has an invalid length. [ 278.044075][T18123] netlink: 'syz.0.6198': attribute type 3 has an invalid length. [ 278.637015][T18162] netlink: 'syz.3.6215': attribute type 3 has an invalid length. [ 278.652878][T18160] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6218'. [ 278.804088][T18173] netlink: 'syz.3.6222': attribute type 16 has an invalid length. [ 278.831985][T18173] netlink: 'syz.3.6222': attribute type 17 has an invalid length. [ 278.839851][T18173] netlink: 3 bytes leftover after parsing attributes in process `syz.3.6222'. [ 279.480483][T18222] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 279.498857][T18222] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.688258][T18236] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 279.709576][T18232] netlink: 'syz.4.6252': attribute type 29 has an invalid length. [ 279.758287][T18232] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6252'. [ 280.221902][T18270] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6272'. [ 280.287776][T18270] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6272'. [ 280.492398][T18287] netlink: 'syz.4.6280': attribute type 1 has an invalid length. [ 281.349993][T18351] Cannot find add_set index 3 as target [ 281.740543][T18379] __nla_validate_parse: 4 callbacks suppressed [ 281.740562][T18379] netlink: 264 bytes leftover after parsing attributes in process `syz.3.6324'. [ 281.910265][T18389] raw_sendmsg: syz.4.6327 forgot to set AF_INET. Fix it! [ 282.359971][T18416] netlink: 'syz.3.6343': attribute type 10 has an invalid length. [ 282.450605][T18416] bond0: (slave wlan1): Releasing backup interface [ 282.593138][T18433] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6349'. [ 282.594904][T18432] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6352'. [ 282.660102][T18436] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6353'. [ 282.744486][T18441] netlink: 'syz.0.6356': attribute type 21 has an invalid length. [ 282.780952][T18445] netlink: 'syz.3.6357': attribute type 21 has an invalid length. [ 282.789487][T18445] IPv6: NLM_F_CREATE should be specified when creating new route [ 282.797827][T18445] IPv6: Can't replace route, no match found [ 282.945287][T18458] netlink: 'syz.4.6364': attribute type 5 has an invalid length. [ 283.005295][T18459] xfrm2: entered allmulticast mode [ 283.035145][T18463] netlink: 404 bytes leftover after parsing attributes in process `syz.4.6368'. [ 283.044333][T18463] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6368'. [ 283.053341][T18463] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6368'. [ 283.062431][T18463] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6368'. [ 283.091861][T18455] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6362'. [ 283.681247][T18508] ieee802154 phy1 wpan1: encryption failed: -90 [ 284.068214][T18535] netlink: 'syz.0.6400': attribute type 12 has an invalid length. [ 284.076526][T18535] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6400'. [ 285.629987][T18643] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 285.711855][T18643] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 285.761864][T18643] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 285.819056][T18643] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 285.848417][T18643] geneve4: entered promiscuous mode [ 285.854995][T18643] geneve4: entered allmulticast mode [ 285.959364][T18643] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 285.990518][T18643] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 286.007557][T18643] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 286.016745][T18643] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 287.294067][T18752] netlink: 'syz.0.6506': attribute type 10 has an invalid length. [ 287.330747][T18752] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 287.383002][T18752] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 287.415789][T18752] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 287.461089][T18757] netlink: 'syz.4.6508': attribute type 25 has an invalid length. [ 287.576424][T18768] bridge4: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 287.622361][T18775] __nla_validate_parse: 4 callbacks suppressed [ 287.622380][T18775] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6517'. [ 287.698599][T18775] netlink: 'syz.4.6517': attribute type 3 has an invalid length. [ 287.829672][T18785] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6522'. [ 287.846357][T18785] netlink: 88 bytes leftover after parsing attributes in process `syz.3.6522'. [ 287.980525][T18794] IPVS: set_ctl: invalid protocol: 44 0.0.0.0:20001 [ 288.002360][T18798] netlink: 'syz.1.6529': attribute type 5 has an invalid length. [ 288.496953][T18828] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6544'. [ 288.542846][T18828] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6544'. [ 288.552150][T18828] netlink: 'syz.3.6544': attribute type 2 has an invalid length. [ 288.687015][T18843] x_tables: duplicate underflow at hook 3 [ 288.919898][T18860] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (5) [ 289.080840][T18869] netlink: 'syz.4.6565': attribute type 32 has an invalid length. [ 289.485859][T18896] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6578'. [ 289.807666][T18917] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6588'. [ 289.829467][T18921] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6591'. [ 289.852824][T18922] xt_limit: Overflow, try lower: 65536/2147483648 [ 289.953501][T18924] openvswitch: netlink: EtherType 6 is less than min 600 [ 290.073969][T18938] ieee802154 phy1 wpan1: encryption failed: -22 [ 290.227227][T18947] xt_TCPMSS: Only works on TCP SYN packets [ 290.260603][T18949] netlink: 'syz.1.6603': attribute type 4 has an invalid length. [ 290.821863][T18991] netlink: 'syz.0.6624': attribute type 9 has an invalid length. [ 291.681236][T19044] netlink: 256 bytes leftover after parsing attributes in process `syz.2.6651'. [ 291.881665][T19056] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 292.283865][T19087] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6673'. [ 292.304003][T19087] netlink: 'syz.1.6673': attribute type 5 has an invalid length. [ 292.516817][T19103] netlink: 'syz.4.6681': attribute type 2 has an invalid length. [ 294.230609][T19224] __nla_validate_parse: 4 callbacks suppressed [ 294.230628][T19224] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6738'. [ 294.301981][T19224] netlink: 'syz.4.6738': attribute type 2 has an invalid length. [ 294.365870][T19232] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6743'. [ 294.750022][T19251] netlink: 'syz.0.6753': attribute type 1 has an invalid length. [ 294.815266][T19251] netlink: 'syz.0.6753': attribute type 1 has an invalid length. [ 295.041025][T19274] netlink: 'syz.3.6766': attribute type 10 has an invalid length. [ 295.056794][T19274] 8021q: adding VLAN 0 to HW filter on device team0 [ 295.065230][T19274] bond0: (slave team0): Enslaving as an active interface with an up link [ 295.140148][T19274] syz.3.6766 (19274) used greatest stack depth: 18096 bytes left [ 295.218931][T19280] pim6reg: entered allmulticast mode [ 295.428116][T19299] netlink: 144 bytes leftover after parsing attributes in process `syz.3.6777'. [ 295.472004][T19296] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 295.588518][T19310] netlink: 'syz.0.6781': attribute type 1 has an invalid length. [ 295.627045][T19312] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6783'. [ 295.667650][T19312] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6783'. [ 295.696061][T19312] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6783'. [ 295.705590][T19312] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6783'. [ 295.716342][T19312] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6783'. [ 295.751442][T19312] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6783'. [ 295.771157][T19312] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6783'. [ 296.519191][T19372] IPv6: sit1: Disabled Multicast RS [ 296.981304][T19405] netlink: 'syz.0.6830': attribute type 32 has an invalid length. [ 297.549100][T19448] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 297.795699][T19464] x_tables: ip6_tables: SNPT target: used from hooks PREROUTING, but only usable from INPUT/POSTROUTING [ 298.275874][T19496] IPv6: NLM_F_CREATE should be specified when creating new route [ 298.461837][T19508] netlink: 'syz.4.6880': attribute type 1 has an invalid length. [ 298.969801][T19547] batadv1: entered promiscuous mode [ 299.036952][T19551] (unnamed net_device) (uninitialized): down delay (2147483647) is not a multiple of miimon (100), value rounded to 2147483600 ms [ 299.050799][T19551] (unnamed net_device) (uninitialized): peer notification delay (2) is not a multiple of miimon (100), value rounded to 0 ms [ 299.281032][T19569] xt_socket: unknown flags 0x4 [ 299.301105][T19571] __nla_validate_parse: 83 callbacks suppressed [ 299.301124][T19571] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6909'. [ 299.764201][T19596] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 300.034586][T19609] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6930'. [ 300.110757][T19611] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6929'. [ 300.224495][T19620] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.6933'. [ 300.310246][T19626] netlink: 'syz.0.6938': attribute type 21 has an invalid length. [ 300.542241][T19639] delete_channel: no stack [ 301.279526][T19691] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 301.582784][T19714] netlink: 'syz.2.6981': attribute type 1 has an invalid length. [ 301.753355][T19726] netlink: 'syz.0.6985': attribute type 4 has an invalid length. [ 301.761293][T19726] netlink: 244 bytes leftover after parsing attributes in process `syz.0.6985'. [ 301.858934][T19733] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6989'. [ 301.944433][T19738] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 302.098883][T19745] netlink: 'syz.4.6995': attribute type 5 has an invalid length. [ 302.842006][T19789] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7016'. [ 302.856430][T19791] netlink: 308 bytes leftover after parsing attributes in process `syz.4.7018'. [ 303.088441][T19809] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7026'. [ 303.097949][T19809] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7026'. [ 303.383180][T19824] nbd: couldn't find a device at index 1073741824 [ 304.202153][T19872] Zero length message leads to an empty skb [ 304.402383][T19889] __nla_validate_parse: 3 callbacks suppressed [ 304.402404][T19889] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7065'. [ 305.308615][T19949] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7094'. [ 305.347550][T19958] IPVS: sync thread started: state = BACKUP, mcast_ifn = wg0, syncid = 4, id = 0 [ 305.382663][T19959] tipc: Started in network mode [ 305.387731][T19959] tipc: Node identity e6cb57c2a432, cluster identity 4711 [ 305.448642][T19959] tipc: Enabled bearer , priority 10 [ 305.928656][T19991] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7116'. [ 305.938889][T19993] rdma_op ffff8880325f09f0 conn xmit_rdma 0000000000000000 [ 306.101324][T20000] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 306.505342][T20028] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7134'. [ 306.552650][T20031] netlink: 200 bytes leftover after parsing attributes in process `syz.2.7133'. [ 306.585053][T17267] tipc: Node number set to 1123637186 [ 306.918323][T20055] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7146'. [ 306.940088][T20055] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7146'. [ 307.389622][T20079] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7155'. [ 307.434458][T20079] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7155'. [ 308.469822][T20143] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7190'. [ 308.483566][T20143] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 309.252460][T20193] Bluetooth: MGMT ver 1.23 [ 310.224291][T20249] __nla_validate_parse: 1 callbacks suppressed [ 310.224310][T20249] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7239'. [ 310.267237][T20249] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7239'. [ 310.290186][T20249] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7239'. [ 310.325487][T20249] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7239'. [ 310.354829][T20256] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7242'. [ 311.691232][T20323] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 311.850207][T20329] netlink: 276 bytes leftover after parsing attributes in process `syz.0.7278'. [ 312.411564][T20353] netlink: 'syz.1.7289': attribute type 3 has an invalid length. [ 313.278073][T20393] netlink: 'syz.4.7308': attribute type 1 has an invalid length. [ 313.299772][T20393] netlink: 'syz.4.7308': attribute type 2 has an invalid length. [ 313.357533][T20397] netlink: 'syz.2.7310': attribute type 4 has an invalid length. [ 313.495246][T20407] netlink: 'syz.0.7315': attribute type 29 has an invalid length. [ 313.506812][T20407] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7315'. [ 313.519336][T20407] netlink: 'syz.0.7315': attribute type 29 has an invalid length. [ 313.527816][T20407] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7315'. [ 313.819494][T20428] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7325'. [ 313.829754][T20428] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7325'. [ 313.839387][T20428] netlink: 'syz.2.7325': attribute type 20 has an invalid length. [ 314.838983][T20481] netlink: 'syz.2.7350': attribute type 6 has an invalid length. [ 314.864352][T20481] netlink: 'syz.2.7350': attribute type 7 has an invalid length. [ 314.881788][T20481] netlink: 'syz.2.7350': attribute type 8 has an invalid length. [ 315.091761][ T5242] Bluetooth: hci4: command 0x0406 tx timeout [ 315.788835][T20533] __nla_validate_parse: 1 callbacks suppressed [ 315.788854][T20533] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7375'. [ 316.343579][T20565] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7391'. [ 316.759937][T20591] pim6reg: entered allmulticast mode [ 316.802288][T20591] pim6reg: left allmulticast mode [ 316.904359][T20601] tipc: Invalid UDP bearer configuration [ 316.904404][T20601] tipc: Enabling of bearer rejected, failed to enable media [ 317.032120][T20607] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 317.107627][T20612] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7416'. [ 317.257909][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.393790][T20628] netlink: 236 bytes leftover after parsing attributes in process `syz.0.7423'. [ 317.417590][T20628] NCSI netlink: No device for ifindex 458760 [ 317.473541][T20632] tipc: Started in network mode [ 317.485797][T20632] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 317.551096][T20632] tipc: Enabling of bearer rejected, failed to enable media [ 318.332521][T20671] validate_nla: 1 callbacks suppressed [ 318.332538][T20671] netlink: 'syz.1.7444': attribute type 2 has an invalid length. [ 318.507026][T20681] netlink: 'syz.2.7449': attribute type 5 has an invalid length. [ 318.677107][T20696] netlink: 165 bytes leftover after parsing attributes in process `syz.0.7453'. [ 318.793333][T20701] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7458'. [ 318.831521][T20701] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7458'. [ 319.059248][T20715] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7466'. [ 319.133176][T20724] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.7468'. [ 319.152124][T20719] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.7468'. [ 319.386309][T20737] netlink: 'syz.2.7476': attribute type 4 has an invalid length. [ 320.079502][T20775] tipc: Started in network mode [ 320.094026][T20775] tipc: Node identity e0000001, cluster identity 4711 [ 320.100986][T20775] tipc: Enabling of bearer rejected, failed to enable media [ 320.478532][T20791] A link change request failed with some changes committed already. Interface bond4 may have been left with an inconsistent configuration, please check. [ 320.969936][T20820] netlink: 'syz.2.7517': attribute type 30 has an invalid length. [ 321.467761][T20847] netlink: 'syz.3.7531': attribute type 3 has an invalid length. [ 321.501045][T20847] __nla_validate_parse: 2 callbacks suppressed [ 321.501063][T20847] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.7531'. [ 321.598978][T20859] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7535'. [ 321.613539][T20859] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7535'. [ 321.723241][T20865] netlink: 204 bytes leftover after parsing attributes in process `syz.3.7539'. [ 323.825126][T20987] veth1_macvtap: left promiscuous mode [ 323.854920][T20987] macsec0: entered promiscuous mode [ 323.860178][T20987] macsec0: entered allmulticast mode [ 324.112573][T21005] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7604'. [ 324.462753][T21031] netdevsim netdevsim0: Direct firmware load for /tun failed with error -2 [ 324.471596][T21031] netdevsim netdevsim0: Falling back to sysfs fallback for: /tun [ 324.889514][T21055] netlink: 'syz.1.7627': attribute type 3 has an invalid length. [ 325.337564][T21085] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7641'. [ 325.437782][T21092] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7644'. [ 325.477595][T21092] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7644'. [ 326.309924][T21136] vcan0 speed is unknown, defaulting to 1000 [ 326.457340][T21142] netlink: 'syz.3.7667': attribute type 11 has an invalid length. [ 326.541391][T21136] lo speed is unknown, defaulting to 1000 [ 327.419673][T21193] tipc: Enabling of bearer rejected, failed to enable media [ 327.777331][T21216] netlink: 'syz.4.7704': attribute type 1 has an invalid length. [ 327.921981][T21225] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7708'. [ 327.957447][T21225] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7708'. [ 327.977241][T21225] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7708'. [ 329.292872][T21313] netlink: 96 bytes leftover after parsing attributes in process `syz.2.7750'. [ 329.316358][T21313] netlink: 72 bytes leftover after parsing attributes in process `syz.2.7750'. [ 329.624712][T21343] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7762'. [ 329.634162][T21343] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7762'. [ 330.353901][T21392] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7786'. [ 330.402668][T21392] bridge0: entered allmulticast mode [ 330.434727][T21396] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7785'. [ 330.562586][T21405] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 330.599804][T21405] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 331.516503][T21450] tipc: Started in network mode [ 331.542042][T21450] tipc: Node identity ac141427, cluster identity 4711 [ 331.550286][T21450] tipc: Enabled bearer , priority 10 [ 331.588936][T21457] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7815'. [ 332.532902][T21517] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 332.542262][T21517] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 332.551378][T21517] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 332.560718][T21517] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 332.662783][ T5289] tipc: Node number set to 2886997031 [ 332.673111][T21525] mac80211_hwsim hwsim9 veth0_vlan: renamed from wlan1 (while UP) [ 333.966036][T21595] Bluetooth: MGMT ver 1.23 [ 334.629536][T21641] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 335.163694][T21678] netlink: 'syz.0.7920': attribute type 18 has an invalid length. [ 335.200392][T21678] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 335.209329][T21678] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 335.218526][T21678] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 336.191911][T21721] sctp: [Deprecated]: syz.3.7939 (pid 21721) Use of int in maxseg socket option. [ 336.191911][T21721] Use struct sctp_assoc_value instead [ 336.559350][T21733] netlink: 'syz.1.7944': attribute type 27 has an invalid length. [ 336.709487][T21738] netlink: 'syz.4.7948': attribute type 3 has an invalid length. [ 337.261503][T21773] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 337.281546][T21773] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 337.934103][T21820] __nla_validate_parse: 2 callbacks suppressed [ 337.934122][T21820] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7987'. [ 338.086662][T21826] tipc: Enabling of bearer rejected, failed to enable media [ 338.689406][T21864] tipc: Enabling of bearer rejected, failed to enable media [ 338.728271][T21868] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8012'. [ 338.849258][T21874] netlink: 52 bytes leftover after parsing attributes in process `syz.1.8015'. [ 338.868509][T21880] netlink: 'syz.0.8017': attribute type 10 has an invalid length. [ 338.946213][T21882] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8018'. [ 338.953918][T21880] 8021q: adding VLAN 0 to HW filter on device team0 [ 338.986431][T21880] bond0: (slave team0): Enslaving as an active interface with an up link [ 339.012039][T21886] netlink: 'syz.0.8017': attribute type 10 has an invalid length. [ 339.081288][T21886] bond0: (slave team0): Releasing backup interface [ 339.102860][T21886] bridge0: port 4(team0) entered blocking state [ 339.121989][T21886] bridge0: port 4(team0) entered disabled state [ 339.135898][T21886] team0: entered allmulticast mode [ 339.145928][T21886] team_slave_0: entered allmulticast mode [ 339.180551][T21886] team_slave_1: entered allmulticast mode [ 339.197010][T21886] team0: entered promiscuous mode [ 339.210102][T21886] team_slave_0: entered promiscuous mode [ 339.216929][T21886] team_slave_1: entered promiscuous mode [ 339.224030][T21893] tipc: New replicast peer: 100.1.1.1 [ 339.241932][T21893] tipc: Enabled bearer , priority 10 [ 340.131160][T21959] netlink: 'syz.1.8056': attribute type 1 has an invalid length. [ 340.308703][T21971] IPVS: Error connecting to the multicast addr [ 340.372095][T17269] tipc: Node number set to 1 [ 342.203021][T22072] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8109'. [ 342.903154][T22113] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8128'. [ 342.928773][T22115] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8129'. [ 343.532515][T22152] tc_dump_action: action bad kind [ 343.632764][T22156] dvmrp5: entered allmulticast mode [ 343.648561][T22159] dvmrp0: left allmulticast mode [ 343.671963][T22159] dvmrp5: left allmulticast mode [ 343.741014][T22163] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8152'. [ 344.729420][T22228] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8183'. [ 346.917242][T22383] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 1, id = 0 [ 347.068851][T22394] netlink: 'syz.3.8263': attribute type 8 has an invalid length. [ 347.320990][T22412] netlink: 'syz.3.8270': attribute type 5 has an invalid length. [ 348.927925][T22510] sit0: entered promiscuous mode [ 348.933981][T22510] netlink: 'syz.4.8317': attribute type 1 has an invalid length. [ 348.942192][T22510] netlink: 1 bytes leftover after parsing attributes in process `syz.4.8317'. [ 349.141329][ T5242] Bluetooth: hci4: command 0x0406 tx timeout [ 349.633397][T22559] vlan0: MTU too low for tipc bearer [ 349.638746][T22559] tipc: Enabling of bearer rejected, failed to enable media [ 350.230385][T22587] netlink: 'syz.2.8353': attribute type 15 has an invalid length. [ 350.819827][T22621] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8369'. [ 350.838203][T22621] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8369'. [ 350.966998][T22629] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 351.137677][T22639] tipc: Enabling of bearer rejected, failed to enable media [ 351.436190][T22659] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8386'. [ 351.456168][T22659] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8386'. [ 351.479248][T22659] netlink: 'syz.3.8386': attribute type 25 has an invalid length. [ 351.544791][T22667] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 351.723175][T22680] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8396'. [ 352.033060][T22700] netlink: 'syz.4.8406': attribute type 1 has an invalid length. [ 352.166128][T22706] netlink: 'syz.1.8409': attribute type 178 has an invalid length. [ 352.669221][T22741] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8427'. [ 352.778675][T22747] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8429'. [ 352.809883][T22747] netlink: 48 bytes leftover after parsing attributes in process `syz.3.8429'. [ 352.821507][T22747] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8429'. [ 352.847532][T22747] vlan2: entered allmulticast mode [ 352.856121][T22747] gretap0: entered allmulticast mode [ 353.260683][ T5242] Bluetooth: hci4: command 0x0406 tx timeout [ 354.767084][T22834] __nla_validate_parse: 1 callbacks suppressed [ 354.767103][T22834] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8468'. [ 355.021930][T22844] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8472'. [ 355.927210][T22899] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8500'. [ 356.390189][T22932] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8516'. [ 357.462475][T22999] veth1_macvtap: left promiscuous mode [ 357.468220][T22999] macsec0: entered promiscuous mode [ 357.474317][T22999] macsec0: entered allmulticast mode [ 358.384742][T22999] veth1_macvtap: entered promiscuous mode [ 358.390527][T22999] veth1_macvtap: entered allmulticast mode [ 358.402469][T22999] macsec0: left promiscuous mode [ 358.407596][T22999] macsec0: left allmulticast mode [ 358.414044][T22999] veth1_macvtap: left allmulticast mode [ 358.707902][T23031] ax25_connect(): syz.4.8563 uses autobind, please contact jreuter@yaina.de [ 359.148638][T23059] batadv0: entered promiscuous mode [ 359.198568][T23059] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 359.340173][T23070] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.8582'. [ 359.354285][T23069] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8583'. [ 359.487146][T23077] netlink: 'syz.4.8586': attribute type 10 has an invalid length. [ 359.526895][T23077] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 359.690524][T23088] tipc: Enabling of bearer rejected, failed to enable media [ 360.064809][T23114] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8603'. [ 360.207542][T23124] netlink: 'syz.0.8609': attribute type 29 has an invalid length. [ 360.234363][T23124] netlink: 'syz.0.8609': attribute type 29 has an invalid length. [ 360.823604][T23159] netlink: 'syz.1.8624': attribute type 4 has an invalid length. [ 361.849136][T23210] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 361.867603][T23210] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.882564][T23210] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 361.967446][T23210] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 361.990233][T23210] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.008804][T23210] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 362.125322][T23210] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 362.155930][T23210] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.191850][T23210] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 362.299474][T23210] bond0: (slave netdevsim0): Releasing backup interface [ 362.332891][T23230] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.8659'. [ 362.360211][T23227] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.8659'. [ 362.478490][T23210] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 362.498139][T23210] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 362.507287][T23210] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 362.555607][T23210] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 362.577990][T23210] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 362.594581][T23210] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 362.653274][T23210] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 362.689856][T23210] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 362.721813][T23210] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 362.749922][T23210] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 362.847597][T23210] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 362.856394][T23210] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 363.363652][T23294] sock: sock_timestamping_bind_phc: sock not bind to device [ 363.508736][T23302] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8695'. [ 363.519673][T23304] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8696'. [ 364.282612][T23345] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8715'. [ 364.316133][T23352] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 0, id = 0 [ 364.320042][T23351] IPVS: stopping master sync thread 23352 ... [ 364.661303][T23375] netlink: 'syz.1.8728': attribute type 2 has an invalid length. [ 365.054228][T23398] bridge7: entered promiscuous mode [ 365.070056][T23398] bridge7: entered allmulticast mode [ 365.099823][T23398] team0: Port device bridge7 added [ 365.591392][T23438] netlink: 'syz.4.8759': attribute type 2 has an invalid length. [ 365.992760][T23465] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.8771'. [ 366.553393][T23501] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8790'. [ 366.858522][T23518] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8799'. [ 367.015352][T23526] smc: net device ip6tnl0 applied user defined pnetid SYZ0 [ 367.023806][T23527] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8802'. [ 367.648645][T23554] RDS: rds_bind could not find a transport for 1400::, load rds_tcp or rds_rdma? [ 368.070805][T23582] tipc: Enabling of bearer rejected, failed to enable media [ 368.430153][T23604] No such timeout policy "syz0" [ 368.937087][T23642] netlink: 'syz.3.8855': attribute type 3 has an invalid length. [ 369.044896][T23646] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 369.079608][T23646] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8859'. [ 369.123921][T23646] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8859'. [ 369.241034][T23660] netlink: 'syz.3.8864': attribute type 27 has an invalid length. [ 370.124144][T23662] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 370.260386][T23724] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (128) [ 370.815270][T23754] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 371.168670][T23765] "syz.3.8913" (23765) uses obsolete ecb(arc4) skcipher [ 371.282958][T23787] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8924'. [ 372.719175][T23873] netlink: 'syz.4.8965': attribute type 2 has an invalid length. [ 373.544405][T23915] netlink: 'syz.2.8986': attribute type 1 has an invalid length. [ 375.068560][T24007] netlink: 'syz.2.9029': attribute type 24 has an invalid length. [ 375.613633][T24042] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9046'. [ 376.154663][T24081] IPVS: Error connecting to the multicast addr [ 376.996185][T24142] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9090'. [ 377.135585][T24149] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9095'. [ 377.493674][T24175] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9106'. [ 377.551075][T24177] netlink: 304 bytes leftover after parsing attributes in process `syz.1.9107'. [ 377.873926][T24198] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9116'. [ 378.125383][T24211] netlink: 'syz.4.9121': attribute type 2 has an invalid length. [ 378.151049][T24211] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9121'. [ 378.706676][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.816525][T24256] netlink: 'syz.2.9143': attribute type 10 has an invalid length. [ 378.849527][T24256] batman_adv: batadv0: Removing interface: team0 [ 378.887201][T24256] bridge0: port 4(team0) entered blocking state [ 378.907414][T24256] bridge0: port 4(team0) entered disabled state [ 378.931471][T24256] team0: entered allmulticast mode [ 378.945625][T24256] team_slave_0: entered allmulticast mode [ 378.972022][T24256] team_slave_1: entered allmulticast mode [ 378.982359][T24256] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 379.008948][T24256] team0: entered promiscuous mode [ 379.031805][T24256] team_slave_0: entered promiscuous mode [ 379.041064][T24256] team_slave_1: entered promiscuous mode [ 379.061574][T24256] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 381.503295][T24400] vxcan1: entered allmulticast mode [ 381.939759][T24428] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.9224'. [ 382.135260][T24440] netlink: 188 bytes leftover after parsing attributes in process `syz.3.9229'. [ 382.161780][T24440] netlink: 48 bytes leftover after parsing attributes in process `syz.3.9229'. [ 382.170939][T24440] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9229'. [ 382.189300][T24442] netlink: 'syz.4.9231': attribute type 1 has an invalid length. [ 382.682951][T24473] netlink: 'syz.3.9245': attribute type 1 has an invalid length. [ 382.701012][T24473] netlink: 191416 bytes leftover after parsing attributes in process `syz.3.9245'. [ 382.720778][T24473] netlink: 'syz.3.9245': attribute type 2 has an invalid length. [ 383.361921][ T5316] IPVS: starting estimator thread 0... [ 383.467590][T24510] IPVS: using max 18 ests per chain, 43200 per kthread [ 383.932548][T24529] pim6reg: left allmulticast mode [ 384.292639][T24545] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9276'. [ 384.334712][T24547] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9279'. [ 384.399335][T24547] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9279'. [ 384.439976][T24547] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9279'. [ 384.606103][T24558] netlink: 'syz.0.9284': attribute type 33 has an invalid length. [ 384.636662][T24564] x_tables: ip_tables: udp match: only valid for protocol 17 [ 384.771617][T24570] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9289'. [ 384.896977][T24579] xfrm3: entered allmulticast mode [ 385.976320][T24640] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9323'. [ 386.429079][T24664] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_team, syncid = 0, id = 0 [ 387.510274][T24722] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9363'. [ 387.519537][T24722] netlink: 'syz.0.9363': attribute type 3 has an invalid length. [ 387.961610][T24749] netlink: 312 bytes leftover after parsing attributes in process `syz.3.9372'. [ 388.525315][T24786] can: request_module (can-proto-4) failed. [ 389.348942][T24841] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9409'. [ 391.460905][T24972] tipc: Enabling of bearer rejected, failed to enable media [ 392.376593][T25031] sctp: [Deprecated]: syz.4.9488 (pid 25031) Use of int in maxseg socket option. [ 392.376593][T25031] Use struct sctp_assoc_value instead [ 392.611596][T25047] lo: entered allmulticast mode [ 392.631037][T25047] lo: left allmulticast mode [ 392.637996][T25049] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9497'. [ 393.079185][T25082] netlink: 'syz.2.9513': attribute type 1 has an invalid length. [ 393.106721][T25082] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.9513'. [ 393.204573][T25085] netlink: 56 bytes leftover after parsing attributes in process `syz.0.9515'. [ 393.227442][T25085] netlink: 56 bytes leftover after parsing attributes in process `syz.0.9515'. [ 393.904522][T25130] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9533'. [ 393.921990][T25130] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9533'. [ 393.961499][T25130] netlink: 'syz.1.9533': attribute type 15 has an invalid length. [ 394.859913][T25185] nbd: must specify a size in bytes for the device [ 395.502672][T25233] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9583'. [ 395.796238][T25253] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9593'. [ 395.882123][T25261] macsec0: entered promiscuous mode [ 395.893235][T25261] veth1_macvtap: entered promiscuous mode [ 395.910258][T25261] macsec0: left promiscuous mode [ 395.922025][T25261] veth1_macvtap: left promiscuous mode [ 396.146604][T25278] nbd: illegal input index -1 [ 396.371140][T25292] vcan0 speed is unknown, defaulting to 1000 [ 396.698941][T25314] netlink: 'syz.3.9622': attribute type 4 has an invalid length. [ 396.708836][T25314] netlink: 17 bytes leftover after parsing attributes in process `syz.3.9622'. [ 396.723762][T25292] lo speed is unknown, defaulting to 1000 [ 397.433300][T25340] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9633'. [ 398.057640][T25381] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9653'. [ 398.200674][T25390] netlink: 'syz.4.9656': attribute type 6 has an invalid length. [ 398.476732][T25409] netlink: 'syz.3.9665': attribute type 64 has an invalid length. [ 398.488168][T25409] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9665'. [ 398.516051][T25409] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9665'. [ 398.582006][T25414] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9668'. [ 398.620561][T25414] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9668'. [ 399.238766][T25461] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9688'. [ 399.544400][T25481] netlink: 32 bytes leftover after parsing attributes in process `syz.1.9694'. [ 400.110196][T25517] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9710'. [ 400.233392][T25525] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9716'. [ 400.253154][T25525] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9716'. [ 400.294125][T25525] netlink: 'syz.3.9716': attribute type 25 has an invalid length. [ 401.495065][T25610] Bluetooth: MGMT ver 1.23 [ 403.470530][T25734] bond0: entered promiscuous mode [ 403.480523][T25734] bond_slave_0: entered promiscuous mode [ 403.490755][T25734] bond_slave_1: entered promiscuous mode [ 403.503637][T25734] batadv_slave_0: entered promiscuous mode [ 403.523044][T25732] bond0: left promiscuous mode [ 403.533624][T25732] bond_slave_0: left promiscuous mode [ 403.544545][T25732] bond_slave_1: left promiscuous mode [ 403.552216][T25732] batadv_slave_0: left promiscuous mode [ 403.891934][ T5242] Bluetooth: hci4: command 0x0406 tx timeout [ 404.331255][T25786] __nla_validate_parse: 1 callbacks suppressed [ 404.331274][T25786] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9840'. [ 404.332236][T25788] IPVS: stopping backup sync thread 22383 ... [ 404.355399][T25786] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9840'. [ 404.794258][T25819] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9853'. [ 404.978831][T25832] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9862'. [ 405.146338][T25841] netlink: 96 bytes leftover after parsing attributes in process `syz.2.9866'. [ 405.677749][T25878] netlink: 32 bytes leftover after parsing attributes in process `syz.4.9883'. [ 405.700120][T25878] netlink: 32 bytes leftover after parsing attributes in process `syz.4.9883'. [ 405.804261][T25889] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 405.816467][T25886] netlink: 'syz.3.9888': attribute type 4 has an invalid length. [ 405.825981][T25887] mac80211_hwsim hwsim10 wlan0: left promiscuous mode [ 406.096357][T25908] netlink: 'syz.3.9898': attribute type 1 has an invalid length. [ 406.601446][T25942] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9915'. [ 407.725851][T26007] netlink: 32 bytes leftover after parsing attributes in process `syz.2.9944'. [ 407.804641][T26010] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9946'. [ 407.973253][T26016] netlink: 'syz.3.9949': attribute type 13 has an invalid length. [ 409.023761][T26069] pim6reg: entered allmulticast mode [ 409.047206][T26069] pim6reg: left allmulticast mode [ 409.383177][T26093] __nla_validate_parse: 3 callbacks suppressed [ 409.383196][T26093] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9986'. [ 409.421860][T26093] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9986'. [ 409.579341][T26099] TCP: TCP_TX_DELAY enabled [ 409.610683][T26104] netlink: 56 bytes leftover after parsing attributes in process `syz.4.9991'. [ 410.350518][T26146] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10010'. [ 410.596560][T26158] netlink: 68 bytes leftover after parsing attributes in process `syz.2.10016'. [ 410.626682][T26158] nbd: couldn't find a device at index 0 [ 410.766742][T26169] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10021'. [ 410.781377][T26169] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10021'. [ 410.802273][T26169] netlink: 'syz.0.10021': attribute type 11 has an invalid length. [ 411.179937][T26194] netlink: 40 bytes leftover after parsing attributes in process `syz.0.10034'. [ 411.242743][T26196] netlink: 'syz.2.10036': attribute type 3 has an invalid length. [ 411.252381][T26196] netlink: 666 bytes leftover after parsing attributes in process `syz.2.10036'. [ 411.388757][T26208] netlink: 'syz.2.10039': attribute type 8 has an invalid length. [ 411.709010][T26222] netlink: 'syz.1.10048': attribute type 3 has an invalid length. [ 412.089983][T26245] netlink: 256 bytes leftover after parsing attributes in process `syz.3.10058'. [ 412.123631][T26245] netlink: 'syz.3.10058': attribute type 9 has an invalid length. [ 414.594103][T26404] __nla_validate_parse: 5 callbacks suppressed [ 414.594122][T26404] netlink: 92 bytes leftover after parsing attributes in process `syz.3.10130'. [ 415.400920][T26460] netlink: 6084 bytes leftover after parsing attributes in process `syz.3.10157'. [ 415.439773][T26460] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10157'. [ 415.480551][T26460] netlink: 6084 bytes leftover after parsing attributes in process `syz.3.10157'. [ 415.735069][T26476] bridge0: port 1(ip6gretap0) entered blocking state [ 415.742418][T26476] bridge0: port 1(ip6gretap0) entered disabled state [ 415.758681][T26476] ip6gretap0: entered allmulticast mode [ 415.765881][T26476] ip6gretap0: entered promiscuous mode [ 415.978250][T26497] (unnamed net_device) (uninitialized): (slave team0): Device is not bonding slave [ 415.987892][T26497] (unnamed net_device) (uninitialized): option active_slave: invalid value (team0) [ 416.296700][T26513] netlink: 'syz.2.10184': attribute type 32 has an invalid length. [ 416.350554][T26513] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10184'. [ 416.363700][T26513] (unnamed net_device) (uninitialized): option coupled_control: invalid value (192) [ 416.405408][T26525] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10187'. [ 416.516141][T26529] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10191'. [ 417.080870][T26566] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10207'. [ 417.200002][T26573] netlink: 32 bytes leftover after parsing attributes in process `syz.4.10209'. [ 417.386781][T26582] netlink: 32 bytes leftover after parsing attributes in process `syz.0.10215'. [ 417.408512][ T5289] IPVS: starting estimator thread 0... [ 417.611872][T26588] IPVS: using max 18 ests per chain, 43200 per kthread [ 417.741332][ T5242] Bluetooth: hci4: command 0x0406 tx timeout [ 418.034058][T26621] openvswitch: netlink: Message has 76 unknown bytes. [ 418.765627][T26670] tipc: Enabled bearer , priority 1 [ 419.191873][T26698] netlink: 'syz.4.10269': attribute type 3 has an invalid length. [ 419.613010][T26722] __nla_validate_parse: 3 callbacks suppressed [ 419.613032][T26722] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10281'. [ 419.674914][T26728] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10284'. [ 420.068260][T26743] IPVS: Unknown mcast interface: macvlan0 [ 420.105783][T26743] IPVS: stopping backup sync thread 24664 ... [ 420.247884][T26758] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10298'. [ 420.683224][T26766] netlink: 'syz.4.10301': attribute type 8 has an invalid length. [ 420.970787][T26789] dvmrp0: entered allmulticast mode [ 420.996405][T26791] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10314'. [ 421.021877][T26789] dvmrp0: left allmulticast mode [ 422.570576][T26889] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10361'. [ 422.735913][T26899] netlink: 'syz.0.10365': attribute type 3 has an invalid length. [ 423.210839][T26928] netlink: 32 bytes leftover after parsing attributes in process `syz.1.10380'. [ 423.564872][T26951] netlink: 'syz.2.10391': attribute type 1 has an invalid length. [ 423.717994][T26966] netlink: 'syz.3.10397': attribute type 3 has an invalid length. [ 423.825745][T26968] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10398'. [ 423.881074][T26968] netlink: 64 bytes leftover after parsing attributes in process `syz.2.10398'. [ 423.901443][T26968] tipc: Invalid UDP bearer configuration [ 423.901492][T26968] tipc: Enabling of bearer rejected, failed to enable media [ 424.922964][T27044] netlink: 'syz.2.10435': attribute type 11 has an invalid length. [ 424.974740][T27047] netlink: 72 bytes leftover after parsing attributes in process `syz.2.10436'. [ 424.984158][T27047] netlink: 72 bytes leftover after parsing attributes in process `syz.2.10436'. [ 425.030471][T27049] netlink: 'syz.1.10437': attribute type 29 has an invalid length. [ 425.243270][T27061] netlink: 144 bytes leftover after parsing attributes in process `syz.1.10443'. [ 425.262225][T27061] netlink: 56 bytes leftover after parsing attributes in process `syz.1.10443'. [ 425.499760][T27073] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10449'. [ 426.183296][T27109] dvmrp5: entered allmulticast mode [ 426.209515][T27109] dvmrp5: left allmulticast mode [ 426.299916][T27120] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10471'. [ 426.745476][T27147] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10485'. [ 427.294313][T27182] netlink: 236 bytes leftover after parsing attributes in process `syz.2.10499'. [ 427.354532][T27185] sctp: [Deprecated]: syz.4.10501 (pid 27185) Use of struct sctp_assoc_value in delayed_ack socket option. [ 427.354532][T27185] Use struct sctp_sack_info instead [ 427.434650][T27187] sctp: [Deprecated]: syz.4.10501 (pid 27187) Use of struct sctp_assoc_value in delayed_ack socket option. [ 427.434650][T27187] Use struct sctp_sack_info instead [ 428.421136][T27252] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10532'. [ 428.692560][ T4626] Bluetooth: hci1: command 0x0406 tx timeout [ 430.078324][T27344] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10577'. [ 430.999031][T27396] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10603'. [ 431.027660][T27396] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10603'. [ 431.042891][T27396] netlink: 'syz.0.10603': attribute type 20 has an invalid length. [ 431.700229][T27445] dummy0: entered promiscuous mode [ 431.721574][T27444] dummy0: left promiscuous mode [ 432.276136][T27487] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10645'. [ 432.346511][T27487] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 432.687871][T27513] tipc: Enabling of bearer rejected, failed to enable media [ 433.232105][T27548] tipc: Enabling of bearer rejected, failed to enable media [ 433.388971][T27555] team0: Device gtp0 is of different type [ 434.171999][T27594] nbd: must specify an index to disconnect [ 434.781490][T27623] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10709'. [ 435.125885][T27640] ieee802154 phy1 wpan1: encryption failed: -22 [ 435.440439][T27654] netlink: 'syz.4.10722': attribute type 66 has an invalid length. [ 435.706570][T27672] netlink: 240 bytes leftover after parsing attributes in process `syz.3.10736'. [ 436.519050][T27733] netlink: 'syz.0.10763': attribute type 3 has an invalid length. [ 438.260092][T27781] netlink: 'syz.1.10786': attribute type 2 has an invalid length. [ 438.301761][T27781] netlink: 132 bytes leftover after parsing attributes in process `syz.1.10786'. [ 438.331162][T27786] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10790'. [ 438.361922][T27786] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10790'. [ 438.371098][T27786] netlink: 'syz.3.10790': attribute type 2 has an invalid length. [ 438.406311][T27791] netlink: 100 bytes leftover after parsing attributes in process `syz.0.10792'. [ 439.834815][T27883] netlink: 'syz.4.10836': attribute type 3 has an invalid length. [ 440.133385][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.474669][T27923] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10856'. [ 440.586371][T27928] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10859'. [ 440.768139][T27938] netlink: 56 bytes leftover after parsing attributes in process `syz.4.10864'. [ 440.853030][T27943] netlink: 'syz.3.10866': attribute type 1 has an invalid length. [ 441.164822][T27954] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10874'. [ 441.187896][T27954] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10874'. [ 441.204752][T27954] netlink: 5 bytes leftover after parsing attributes in process `syz.4.10874'. [ 441.867504][T28001] netlink: 'syz.0.10894': attribute type 8 has an invalid length. [ 442.450039][T28037] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10911'. [ 442.996516][T28074] bridge0: port 4(syz_tun) entered disabled state [ 443.069593][T28074] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.098393][T28074] bridge0: port 2(bridge_slave_1) entered disabled state [ 443.149032][T28074] bridge0: port 3(netdevsim0) entered disabled state [ 443.251278][T28080] bridge0: port 4(syz_tun) entered blocking state [ 443.257957][T28080] bridge0: port 4(syz_tun) entered forwarding state [ 443.311100][T28080] bridge0: port 1(bridge_slave_0) entered blocking state [ 443.318357][T28080] bridge0: port 1(bridge_slave_0) entered forwarding state [ 443.331013][T28080] bridge0: port 2(bridge_slave_1) entered blocking state [ 443.338263][T28080] bridge0: port 2(bridge_slave_1) entered forwarding state [ 443.399145][T28080] bridge0: port 3(netdevsim0) entered blocking state [ 443.406030][T28080] bridge0: port 3(netdevsim0) entered forwarding state [ 444.570075][T28156] netlink: 332 bytes leftover after parsing attributes in process `syz.1.10965'. [ 444.590419][T28156] netlink: 'syz.1.10965': attribute type 3 has an invalid length. [ 446.294530][T28194] netlink: 184 bytes leftover after parsing attributes in process `syz.3.10983'. [ 446.310283][T28197] netlink: 'syz.2.10984': attribute type 2 has an invalid length. [ 446.553861][ T5289] IPVS: starting estimator thread 0... [ 446.661794][T28207] IPVS: using max 23 ests per chain, 55200 per kthread [ 447.939983][T28237] netlink: 140 bytes leftover after parsing attributes in process `syz.3.11004'. [ 449.211433][T28272] vcan0 speed is unknown, defaulting to 1000 [ 449.306637][T28279] netlink: 36 bytes leftover after parsing attributes in process `syz.2.11023'. [ 449.402636][T28281] netlink: 'syz.2.11024': attribute type 58 has an invalid length. [ 449.410661][T28281] netlink: 20 bytes leftover after parsing attributes in process `syz.2.11024'. [ 449.655897][T28272] lo speed is unknown, defaulting to 1000 [ 450.642854][T28327] netlink: 36 bytes leftover after parsing attributes in process `syz.4.11045'. [ 450.976217][T28334] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11047'. [ 451.455014][T28345] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11048'. [ 451.573252][T28350] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11055'. [ 451.713895][T28356] netlink: 104 bytes leftover after parsing attributes in process `syz.1.11059'. [ 452.082789][T28363] xt_bpf: check failed: parse error [ 452.367905][T28370] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11064'. [ 452.643292][T28389] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11070'. [ 452.653885][T28389] bond0: option miimon: invalid value (18446744073004908548) [ 452.662120][T28389] bond0: option miimon: allowed values 0 - 2147483647 [ 452.995919][T28403] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11079'. [ 453.711376][T28441] sch_tbf: peakrate 64 is lower than or equals to rate 4294967295 ! [ 453.752058][T28439] tun0: tun_chr_ioctl cmd 1074025680 [ 453.905160][ T5242] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 453.922129][ T5242] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 453.930445][ T5242] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 453.941573][ T5242] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 453.952512][ T5242] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 453.964981][ T5242] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 454.035063][T28446] vcan0 speed is unknown, defaulting to 1000 [ 454.117018][T28456] netlink: 20 bytes leftover after parsing attributes in process `syz.4.11103'. [ 454.161529][T28456] netlink: 20 bytes leftover after parsing attributes in process `syz.4.11103'. [ 454.191270][T28456] netlink: 20 bytes leftover after parsing attributes in process `syz.4.11103'. [ 454.304876][T28446] lo speed is unknown, defaulting to 1000 [ 455.028814][T28446] chnl_net:caif_netlink_parms(): no params data found [ 455.207306][T28494] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11119'. [ 455.487350][T28446] bridge0: port 1(bridge_slave_0) entered blocking state [ 455.502408][T28446] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.509672][T28446] bridge_slave_0: entered allmulticast mode [ 455.529349][T28446] bridge_slave_0: entered promiscuous mode [ 455.556647][T28446] bridge0: port 2(bridge_slave_1) entered blocking state [ 455.581832][T28446] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.589099][T28446] bridge_slave_1: entered allmulticast mode [ 455.607660][T28446] bridge_slave_1: entered promiscuous mode [ 455.651125][ T2544] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 455.674676][ T2544] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 455.695213][ T2544] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 455.760382][T28446] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 455.783670][T28446] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 455.809568][ T2544] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 455.824354][ T2544] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 455.862096][ T2544] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 456.045774][ T2544] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 456.070117][ T5242] Bluetooth: hci5: command tx timeout [ 456.072979][ T2544] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 456.120276][ T2544] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 456.208120][T28446] team0: Port device team_slave_0 added [ 456.217713][T28446] team0: Port device team_slave_1 added [ 456.324056][ T2544] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 456.359607][ T2544] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 456.379795][ T2544] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 456.440641][T28446] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 456.472057][T28446] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 456.530723][T28446] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 456.579025][T28446] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 456.590854][T28446] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 456.625708][T28446] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 456.766673][T28569] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.945090][T28569] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.985523][T28446] hsr_slave_0: entered promiscuous mode [ 457.026825][T28446] hsr_slave_1: entered promiscuous mode [ 457.129625][T28569] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.163881][T28590] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11165'. [ 457.256213][T28569] bridge0: port 3(netdevsim0) entered disabled state [ 457.311291][T28569] netdevsim netdevsim1 netdevsim0 (unregistering): left allmulticast mode [ 457.321229][T28569] netdevsim netdevsim1 netdevsim0 (unregistering): left promiscuous mode [ 457.333670][T28569] bridge0: port 3(netdevsim0) entered disabled state [ 457.346143][T28569] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.374024][ T2544] team0: left allmulticast mode [ 457.379911][ T2544] team_slave_0: left allmulticast mode [ 457.390619][ T2544] team_slave_1: left allmulticast mode [ 457.404412][ T2544] team0: left promiscuous mode [ 457.409381][ T2544] team_slave_0: left promiscuous mode [ 457.448798][ T2544] team_slave_1: left promiscuous mode [ 457.473451][ T2544] bridge0: port 4(team0) entered disabled state [ 457.497190][ T2544] macvlan1: left allmulticast mode [ 457.503704][ T2544] veth1_vlan: left allmulticast mode [ 457.509712][ T2544] macvlan1: left promiscuous mode [ 457.515752][ T2544] bridge0: port 3(macvlan1) entered disabled state [ 457.526880][ T2544] bridge_slave_1: left allmulticast mode [ 457.532745][ T2544] bridge_slave_1: left promiscuous mode [ 457.538679][ T2544] bridge0: port 2(bridge_slave_1) entered disabled state [ 457.551158][ T2544] bridge_slave_0: left allmulticast mode [ 457.557114][ T2544] bridge_slave_0: left promiscuous mode [ 457.565666][ T2544] bridge0: port 1(bridge_slave_0) entered disabled state [ 457.598102][ T2544] tipc: Resetting bearer [ 457.608815][ T2544] tipc: Resetting bearer [ 457.770107][ T2544] tipc: Disabling bearer [ 457.889611][ T2544] tipc: Disabling bearer [ 458.131950][ T5242] Bluetooth: hci5: command tx timeout [ 458.411445][ T2544] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 458.426193][ T2544] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 458.437338][ T2544] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 458.451485][ T2544] bond0 (unregistering): Released all slaves [ 458.556033][ T2544] bond1 (unregistering): Released all slaves [ 458.568266][ T2544] bond2 (unregistering): Released all slaves [ 458.578197][ T2544] bond3 (unregistering): Released all slaves [ 458.589082][ T2544] bond4 (unregistering): Released all slaves [ 458.775495][ T2544] tipc: Left network mode [ 458.869908][ T2544] IPVS: stopping backup sync thread 9622 ... [ 458.876232][T28569] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.906249][T28569] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.999082][T28569] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.136948][T28626] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11180'. [ 459.203599][T28569] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.275059][T28640] sch_fq: defrate 0 ignored. [ 459.622779][T28656] netlink: 'syz.4.11189': attribute type 10 has an invalid length. [ 459.659367][T28656] batman_adv: batadv0: Adding interface: team0 [ 459.700111][T28656] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 459.770746][T28656] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 459.782013][T28663] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11192'. [ 459.834936][ T2544] hsr_slave_0: left promiscuous mode [ 459.878863][ T2544] hsr_slave_1: left promiscuous mode [ 459.894026][ T2544] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 459.912311][ T2544] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 459.959073][ T2544] veth1_vlan: left promiscuous mode [ 460.211876][ T5242] Bluetooth: hci5: command tx timeout [ 460.776743][ T2544] team0 (unregistering): Port device team_slave_1 removed [ 460.836130][ T2544] team0 (unregistering): Port device team_slave_0 removed [ 461.231579][T28659] netlink: 'syz.4.11189': attribute type 10 has an invalid length. [ 461.241893][T28659] netlink: 2 bytes leftover after parsing attributes in process `syz.4.11189'. [ 461.251534][T28659] team0: entered promiscuous mode [ 461.270008][T28659] 8021q: adding VLAN 0 to HW filter on device team0 [ 461.279168][T28659] batman_adv: batadv0: Interface activated: team0 [ 461.293158][T28659] batman_adv: batadv0: Interface deactivated: team0 [ 461.299799][T28659] batman_adv: batadv0: Removing interface: team0 [ 461.320371][T28659] bridge0: port 1(team0) entered blocking state [ 461.326919][T28659] bridge0: port 1(team0) entered disabled state [ 461.333862][T28659] team0: entered allmulticast mode [ 461.342415][ T5286] lo speed is unknown, defaulting to 1000 [ 461.343684][T28676] netlink: 'syz.3.11198': attribute type 3 has an invalid length. [ 461.556414][T28446] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 461.634667][T28446] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 461.677628][T28446] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 461.707062][T28446] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 461.937534][ T2544] IPVS: stop unused estimator thread 0... [ 462.166621][T28446] 8021q: adding VLAN 0 to HW filter on device bond0 [ 462.248645][T28446] 8021q: adding VLAN 0 to HW filter on device team0 [ 462.285438][T28613] bridge0: port 1(bridge_slave_0) entered blocking state [ 462.292655][T28613] bridge0: port 1(bridge_slave_0) entered forwarding state [ 462.301217][ T5242] Bluetooth: hci5: command tx timeout [ 462.363807][T28613] bridge0: port 2(bridge_slave_1) entered blocking state [ 462.371105][T28613] bridge0: port 2(bridge_slave_1) entered forwarding state [ 462.704909][T28446] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 462.757016][T28446] veth0_vlan: entered promiscuous mode [ 462.770857][T28446] veth1_vlan: entered promiscuous mode [ 462.818429][T28446] veth0_macvtap: entered promiscuous mode [ 462.842760][T28446] veth1_macvtap: entered promiscuous mode [ 462.869555][T28446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 462.882944][T28446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 462.894204][T28446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 462.905140][T28446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 462.916286][T28446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 462.927389][T28446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 462.940399][T28446] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 462.970930][T28446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 462.992170][T28446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 463.009257][T28446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 463.020446][T28446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 463.034375][T28446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 463.046314][T28446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 463.058220][T28446] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 463.075287][T28446] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.086958][T28446] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.097558][T28446] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.107075][T28446] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.237675][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 463.305938][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 463.327170][ T2596] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 463.336804][ T2596] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 463.430739][T28775] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11091'. [ 463.588478][T28781] netlink: 72 bytes leftover after parsing attributes in process `syz.1.11234'. [ 463.746357][T28788] bridge0: port 5(vlan0) entered blocking state [ 463.779970][T28788] bridge0: port 5(vlan0) entered disabled state [ 463.819743][T28788] vlan0: entered allmulticast mode [ 463.895544][T28788] vlan0: left allmulticast mode [ 464.083070][T28817] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11252'. [ 464.123444][T28817] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11252'. [ 464.246333][T28821] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 464.262058][T28821] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.287412][T28825] netlink: 52 bytes leftover after parsing attributes in process `syz.0.11254'. [ 464.372068][ T5242] Bluetooth: hci5: command tx timeout [ 464.498848][T28821] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 464.510626][T28821] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.710111][T28821] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 464.738059][T28821] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.824489][T28856] sctp: [Deprecated]: syz.4.11268 (pid 28856) Use of struct sctp_assoc_value in delayed_ack socket option. [ 464.824489][T28856] Use struct sctp_sack_info instead [ 464.849757][T28855] netlink: 36 bytes leftover after parsing attributes in process `syz.2.11271'. [ 465.139070][T28821] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 465.165470][T28821] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.194267][T28878] tun0: tun_chr_ioctl cmd 1074025677 [ 465.202095][T28878] tun0: linktype set to 65534 [ 465.437254][T28821] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 465.480631][T28821] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.539861][T28821] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 465.560485][T28821] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.634259][T28821] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 465.642759][T28821] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.657322][T28821] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 465.665837][T28821] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.235459][T28943] vcan0 speed is unknown, defaulting to 1000 [ 466.614231][T28965] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11316'. [ 467.042449][T28983] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 467.059291][T28983] team0: Device ipvlan0 failed to register rx_handler [ 467.270790][T28994] netlink: 11562 bytes leftover after parsing attributes in process `syz.0.11328'. [ 467.487289][T29000] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 467.499691][T29000] syzkaller0: linktype set to 512 [ 468.064183][T29032] xt_policy: neither incoming nor outgoing policy selected [ 468.378514][T29045] netlink: 277 bytes leftover after parsing attributes in process `syz.2.11352'. [ 468.580692][T29057] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11357'. [ 468.808013][T29070] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.928420][T29070] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.030008][T29070] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.127408][T29070] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.199052][T29070] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.261047][T29070] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.289609][T29070] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.333195][T29070] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.611885][T29109] netem: incorrect ge model size [ 469.632976][T29109] netem: change failed [ 469.927138][T29126] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11388'. [ 469.994177][T29129] tap0: tun_chr_ioctl cmd 1074025677 [ 469.999658][T29129] tap0: linktype set to 0 [ 470.045503][T29133] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 470.269935][T29143] netlink: 'syz.1.11395': attribute type 10 has an invalid length. [ 470.357751][T29143] batman_adv: batadv0: Adding interface: team0 [ 470.381528][T29143] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 470.409146][T29143] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 470.421494][T29150] netlink: 'syz.1.11395': attribute type 10 has an invalid length. [ 470.445810][T29150] netlink: 2 bytes leftover after parsing attributes in process `syz.1.11395'. [ 470.461980][T29150] team0: entered promiscuous mode [ 470.469089][T29150] team_slave_0: entered promiscuous mode [ 470.481526][T29150] team_slave_1: entered promiscuous mode [ 470.499158][T29150] 8021q: adding VLAN 0 to HW filter on device team0 [ 470.508507][T29150] batman_adv: batadv0: Interface activated: team0 [ 470.521698][T29150] batman_adv: batadv0: Interface deactivated: team0 [ 470.529208][T29150] batman_adv: batadv0: Removing interface: team0 [ 470.557188][T29150] bridge0: port 3(team0) entered blocking state [ 470.570081][T29150] bridge0: port 3(team0) entered disabled state [ 470.577315][T29150] team0: entered allmulticast mode [ 470.583202][T29150] team_slave_0: entered allmulticast mode [ 470.589717][T29150] team_slave_1: entered allmulticast mode [ 470.598431][T29150] bridge0: port 3(team0) entered blocking state [ 470.604847][T29150] bridge0: port 3(team0) entered forwarding state [ 471.636779][T29203] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11421'. [ 471.651172][T29205] netlink: 28 bytes leftover after parsing attributes in process `syz.4.11422'. [ 471.830460][T29213] netlink: 'syz.0.11427': attribute type 1 has an invalid length. [ 471.848288][T29213] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 471.855614][T29213] IPv6: NLM_F_CREATE should be set when creating new route [ 472.033664][T29223] vcan0 speed is unknown, defaulting to 1000 [ 472.237354][T29238] netlink: 264 bytes leftover after parsing attributes in process `syz.3.11436'. [ 472.329069][T29240] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 472.345697][T29240] syzkaller0: linktype set to 804 [ 472.659382][T29254] netlink: 224 bytes leftover after parsing attributes in process `syz.0.11443'. [ 472.709493][T29258] bridge0: port 2(vlan4) entered blocking state [ 472.725462][T29258] bridge0: port 2(vlan4) entered disabled state [ 472.739916][T29258] vlan4: entered allmulticast mode [ 472.748440][T29258] vlan4: left allmulticast mode [ 472.772096][T29223] netlink: 96 bytes leftover after parsing attributes in process `syz.2.11430'. [ 473.092937][T29277] netlink: 'syz.0.11454': attribute type 10 has an invalid length. [ 473.137956][T29277] batman_adv: batadv0: Adding interface: team0 [ 473.151766][T29277] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 473.225464][T29277] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 473.272406][T29288] netlink: 'syz.0.11454': attribute type 10 has an invalid length. [ 473.290840][T29288] netlink: 2 bytes leftover after parsing attributes in process `syz.0.11454'. [ 473.323902][T29288] team0: entered promiscuous mode [ 473.335907][T29288] team_slave_0: entered promiscuous mode [ 473.349424][T29288] team_slave_1: entered promiscuous mode [ 473.367943][T29288] 8021q: adding VLAN 0 to HW filter on device team0 [ 473.385755][T29288] batman_adv: batadv0: Interface activated: team0 [ 473.396007][T29288] batman_adv: batadv0: Interface deactivated: team0 [ 473.407171][T29288] batman_adv: batadv0: Removing interface: team0 [ 473.429525][T29288] bridge0: port 3(team0) entered blocking state [ 473.445763][T29288] bridge0: port 3(team0) entered disabled state [ 473.453982][T29288] team0: entered allmulticast mode [ 473.459245][T29288] team_slave_0: entered allmulticast mode [ 473.468117][T29288] team_slave_1: entered allmulticast mode [ 473.478910][T29288] bridge0: port 3(team0) entered blocking state [ 473.485267][T29288] bridge0: port 3(team0) entered forwarding state [ 473.526970][T29293] netlink: 'syz.2.11461': attribute type 12 has an invalid length. [ 473.908620][T29313] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11470'. [ 474.199928][T29332] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 474.727545][T29361] netlink: 96 bytes leftover after parsing attributes in process `syz.2.11491'. [ 474.771063][T29355] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.933353][T29355] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.126574][T29355] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.312900][T29355] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.051578][T29429] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11522'. [ 477.578755][T29522] netlink: 176 bytes leftover after parsing attributes in process `syz.2.11563'. [ 477.690356][T29527] syz.4.11566[29527] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 477.690457][T29527] syz.4.11566[29527] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 477.707393][T29527] syz.4.11566[29527] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 477.834423][T29535] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11570'. [ 477.912713][T29541] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11570'. [ 478.058343][T29549] tun0: tun_chr_ioctl cmd 1074025677 [ 478.093834][T29549] tun0: linktype set to 823 [ 478.128102][T29557] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11580'. [ 478.332392][T29570] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11587'. [ 478.552008][T29584] netlink: 'syz.2.11592': attribute type 15 has an invalid length. [ 478.992797][T29618] netlink: 'syz.4.11608': attribute type 1 has an invalid length. [ 479.000752][T29618] netlink: 'syz.4.11608': attribute type 4 has an invalid length. [ 479.011169][T29618] netlink: 192 bytes leftover after parsing attributes in process `syz.4.11608'. [ 479.123280][T29621] netlink: 64 bytes leftover after parsing attributes in process `syz.1.11609'. [ 479.152757][T29631] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11610'. [ 479.508386][T29649] vcan0 speed is unknown, defaulting to 1000 [ 479.876015][T29672] netlink: 104 bytes leftover after parsing attributes in process `syz.3.11632'. [ 480.284803][T29698] netlink: 16 bytes leftover after parsing attributes in process `syz.4.11644'. [ 480.887165][T29723] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11656'. [ 480.900453][T29723] netlink: 'syz.2.11656': attribute type 1 has an invalid length. [ 480.918514][T29723] netlink: 'syz.2.11656': attribute type 2 has an invalid length. [ 480.929796][T29723] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11656'. [ 480.951970][T29728] netlink: 'syz.1.11658': attribute type 1 has an invalid length. [ 481.165200][T29741] netlink: 32 bytes leftover after parsing attributes in process `syz.2.11664'. [ 481.537861][T29768] netlink: 52 bytes leftover after parsing attributes in process `syz.4.11676'. [ 482.752708][T29793] tun0: tun_chr_ioctl cmd 1074025675 [ 482.762447][T29793] tun0: persist disabled [ 483.019577][T29810] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.11693'. [ 483.110401][T29811] tipc: New replicast peer: 255.255.255.255 [ 483.145331][T29811] tipc: Enabled bearer , priority 10 [ 483.179403][ T4626] Bluetooth: hci5: command 0x0405 tx timeout [ 484.039229][T29881] __nla_validate_parse: 2 callbacks suppressed [ 484.039248][T29881] netlink: 40 bytes leftover after parsing attributes in process `syz.3.11726'. [ 484.366679][T29900] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11734'. [ 484.397873][T29900] bridge0: port 3(team0) entered disabled state [ 484.416223][T29900] netlink: 160 bytes leftover after parsing attributes in process `syz.1.11734'. [ 484.707570][T29920] netlink: 168 bytes leftover after parsing attributes in process `syz.1.11744'. [ 485.183302][T29952] netlink: 76 bytes leftover after parsing attributes in process `syz.3.11758'. [ 485.405319][T29970] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11768'. [ 485.419691][T29970] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11768'. [ 486.021019][T30014] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11786'. [ 486.494395][T30036] tipc: Enabling of bearer rejected, failed to enable media [ 486.941194][T30074] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11808'. [ 487.146389][T30088] netlink: 84 bytes leftover after parsing attributes in process `syz.2.11813'. [ 487.180392][T30088] netem: invalid attributes len -16 [ 487.186619][T30088] netem: change failed [ 487.268696][T30098] netlink: 'syz.3.11815': attribute type 39 has an invalid length. [ 488.154458][T30153] netlink: 'syz.0.11837': attribute type 5 has an invalid length. [ 489.096095][T30218] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-alb(6) [ 489.273511][T30223] tun0: tun_chr_ioctl cmd 1342215231 [ 489.353196][T30229] __nla_validate_parse: 5 callbacks suppressed [ 489.353216][T30229] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.11871'. [ 489.359249][T30230] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11870'. [ 489.440757][T30230] vxcan1 (unregistering): left allmulticast mode [ 489.477427][T30234] gretap0: entered promiscuous mode [ 489.492776][T30234] erspan0: entered promiscuous mode [ 489.508788][T30234] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 489.517968][T30234] Cannot create hsr debugfs directory [ 489.524727][T30234] hsr0: Slave A (gretap0) is not up; please bring it up to get a fully working HSR network [ 489.536543][T30234] hsr0: Slave B (erspan0) is not up; please bring it up to get a fully working HSR network [ 489.983694][T30260] tun0: tun_chr_ioctl cmd 1074025681 [ 490.394922][T30288] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11898'. [ 490.545218][T30298] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 490.639275][T30304] mac80211_hwsim hwsim3 wlan1: Device is already in use. [ 490.787839][T30310] xt_CT: No such helper "syz0" [ 490.799518][T30316] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 490.807987][T30316] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 490.816543][T30316] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 490.824871][T30316] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 490.867225][T30318] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11912'. [ 490.918752][T30320] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11913'. [ 491.022574][ T5242] Bluetooth: hci5: command 0x0405 tx timeout [ 491.129896][T30334] bridge: RTM_NEWNEIGH with unconfigured vlan 1 on bridge0 [ 491.521510][T30359] netlink: 'syz.0.11932': attribute type 1 has an invalid length. [ 491.980921][T30387] netlink: 'syz.4.11945': attribute type 11 has an invalid length. [ 492.132480][T30396] netlink: 'syz.4.11949': attribute type 2 has an invalid length. [ 492.201671][T30395] tipc: Started in network mode [ 492.212138][T30395] tipc: Node identity ac14140f, cluster identity 4711 [ 492.234203][T30395] tipc: New replicast peer: 255.255.255.255 [ 492.240799][T30395] tipc: Enabled bearer , priority 10 [ 492.636324][T30433] netlink: 44 bytes leftover after parsing attributes in process `syz.4.11968'. [ 492.818729][T30447] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11974'. [ 493.352256][ T5316] tipc: Node number set to 2886997007 [ 493.662138][T30498] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11996'. [ 493.750561][T30505] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11998'. [ 494.017861][T30518] vlan0: entered promiscuous mode [ 494.035960][T30518] geneve1: entered promiscuous mode [ 494.052271][T30518] vlan0: entered allmulticast mode [ 494.066347][T30518] geneve1: entered allmulticast mode [ 494.083634][T30518] team0: Port device vlan0 added [ 494.292642][T30532] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12010'. [ 494.629316][T30547] netlink: 'syz.2.12017': attribute type 2 has an invalid length. [ 494.653356][T30547] netlink: 'syz.2.12017': attribute type 8 has an invalid length. [ 495.415855][T30583] netlink: 188 bytes leftover after parsing attributes in process `syz.2.12035'. [ 495.453646][T30586] netlink: 'syz.1.12033': attribute type 1 has an invalid length. [ 495.461515][T30586] netlink: 112 bytes leftover after parsing attributes in process `syz.1.12033'. [ 495.705364][T30600] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12042'. [ 495.866775][T30610] hsr0: entered promiscuous mode [ 495.873618][T30610] macvlan0: entered allmulticast mode [ 495.879294][T30610] hsr0: entered allmulticast mode [ 495.884780][T30610] gretap0: entered allmulticast mode [ 495.890176][T30610] erspan0: entered allmulticast mode [ 495.951108][T30610] hsr0: left allmulticast mode [ 495.956155][T30610] gretap0: left allmulticast mode [ 495.961335][T30610] erspan0: left allmulticast mode [ 496.030486][T30617] tipc: Enabling of bearer rejected, failed to enable media [ 496.039106][T30622] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12052'. [ 496.041129][T30619] netlink: 84 bytes leftover after parsing attributes in process `syz.1.12053'. [ 496.064215][T30622] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12052'. [ 496.080715][T30619] netlink: 32 bytes leftover after parsing attributes in process `syz.1.12053'. [ 496.197162][T30628] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12057'. [ 496.377887][T30641] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12063'. [ 496.859006][T30674] netlink: 'syz.0.12079': attribute type 2 has an invalid length. [ 496.948429][T30679] nicvf0: tun_chr_ioctl cmd 1074025676 [ 496.954496][T30679] nicvf0: owner set to 0 [ 497.006745][T30684] pim6reg: entered allmulticast mode [ 497.020690][T30683] pim6reg: left allmulticast mode [ 497.056642][T30689] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12084'. [ 498.424888][T30773] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 499.678030][T30843] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 499.687008][T30843] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 499.695682][T30843] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 499.704332][T30843] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 499.780632][T30848] netlink: 'syz.1.12158': attribute type 12 has an invalid length. [ 499.816532][T30848] netlink: 'syz.1.12158': attribute type 29 has an invalid length. [ 499.857924][T30848] netlink: 'syz.1.12158': attribute type 2 has an invalid length. [ 499.870440][T30848] netlink: 'syz.1.12158': attribute type 2 has an invalid length. [ 499.879630][T30848] netlink: 'syz.1.12158': attribute type 1 has an invalid length. [ 499.888394][T30848] netlink: 'syz.1.12158': attribute type 37 has an invalid length. [ 500.078205][T30862] netem: unknown loss type 13 [ 500.093866][T30862] netem: change failed [ 500.580728][T30887] netlink: 'syz.4.12178': attribute type 1 has an invalid length. [ 501.502161][ T4626] Bluetooth: hci5: command 0x0405 tx timeout [ 501.602413][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.325247][T30976] netlink: 'syz.2.12218': attribute type 14 has an invalid length. [ 502.858455][T31002] __nla_validate_parse: 4 callbacks suppressed [ 502.858475][T31002] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12231'. [ 503.484635][T31046] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bridge, syncid = 0, id = 0 [ 503.510586][T31045] netlink: 24 bytes leftover after parsing attributes in process `syz.1.12249'. [ 503.607558][T31051] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12253'. [ 503.632205][T31051] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12253'. [ 503.664217][T31051] vlan0: entered allmulticast mode [ 503.838002][T31065] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12259'. [ 504.033182][T31081] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12264'. [ 504.042551][T31081] netlink: 40 bytes leftover after parsing attributes in process `syz.0.12264'. [ 504.702524][T31104] bridge0: port 3(batadv0) entered disabled state [ 504.709439][T31104] bridge0: port 2(bridge_slave_1) entered disabled state [ 504.716728][T31104] bridge0: port 1(bridge_slave_0) entered disabled state [ 504.718903][T31122] sctp: [Deprecated]: syz.1.12284 (pid 31122) Use of struct sctp_assoc_value in delayed_ack socket option. [ 504.718903][T31122] Use struct sctp_sack_info instead [ 504.775485][T31104] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 505.256029][T31150] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12298'. [ 505.278071][T31152] gretap0: left promiscuous mode [ 505.338635][T31152] bridge0: port 4(syz_tun) entered disabled state [ 505.351038][T31152] bridge0: port 2(bridge_slave_1) entered disabled state [ 505.358331][T31152] bridge0: port 1(bridge_slave_0) entered disabled state [ 505.367116][T31152] bridge0: left allmulticast mode [ 505.411337][T31152] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 505.928977][ T5250] cgroup: fork rejected by pids controller in /syz2 [ 505.967830][T31195] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12318'. [ 505.977729][T31195] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12318'. [ 506.610963][T31225] vlan1: entered promiscuous mode [ 506.653578][T31225] macvtap0: entered promiscuous mode [ 506.694049][T31225] macvtap0: left promiscuous mode [ 506.864590][ T4626] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 506.874866][ T4626] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 506.890462][ T4626] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 506.899067][ T4626] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 506.907479][ T4626] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 506.916022][ T4626] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 507.019305][T31236] vcan0 speed is unknown, defaulting to 1000 [ 507.326135][T31236] chnl_net:caif_netlink_parms(): no params data found [ 507.451365][T31236] bridge0: port 1(bridge_slave_0) entered blocking state [ 507.459102][T31236] bridge0: port 1(bridge_slave_0) entered disabled state [ 507.466486][T31236] bridge_slave_0: entered allmulticast mode [ 507.473556][T31236] bridge_slave_0: entered promiscuous mode [ 507.481270][T31236] bridge0: port 2(bridge_slave_1) entered blocking state [ 507.488773][T31236] bridge0: port 2(bridge_slave_1) entered disabled state [ 507.496728][T31236] bridge_slave_1: entered allmulticast mode [ 507.503765][T31236] bridge_slave_1: entered promiscuous mode [ 507.532580][T31236] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 507.549291][T31236] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 507.611498][T31236] team0: Port device team_slave_0 added [ 507.631450][T31236] team0: Port device team_slave_1 added [ 507.714911][T31236] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 507.742223][T31236] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 507.773420][T31236] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 507.806727][T31236] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 507.816931][T31236] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 507.849441][T31236] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 508.111146][T31236] hsr_slave_0: entered promiscuous mode [ 508.123835][T31236] hsr_slave_1: entered promiscuous mode [ 508.135747][T31236] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 508.182142][T31236] Cannot create hsr debugfs directory [ 508.592906][T31236] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 508.603802][T31236] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.637685][T31298] __nla_validate_parse: 2 callbacks suppressed [ 508.637706][T31298] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12361'. [ 508.763605][T31236] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 508.800103][T31236] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.848026][T31305] tun0: tun_chr_ioctl cmd 1074025692 [ 508.882591][T31236] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 508.893192][T31236] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.011217][T31309] ------------[ cut here ]------------ [ 509.016839][ T4626] Bluetooth: hci2: command tx timeout [ 509.022378][T31309] WARNING: CPU: 1 PID: 31309 at net/core/dev.c:9526 unregister_netdevice_many_notify+0x18c8/0x1da0 [ 509.033238][T31309] Modules linked in: [ 509.037164][T31309] CPU: 1 UID: 0 PID: 31309 Comm: syz.4.12366 Not tainted 6.12.0-rc2-syzkaller-00631-g6d858708d465 #0 [ 509.048079][T31309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 509.058191][T31309] RIP: 0010:unregister_netdevice_many_notify+0x18c8/0x1da0 [ 509.065520][T31309] Code: 00 f8 90 0f 0b 90 e9 4f ff ff ff e8 42 25 00 f8 90 0f 0b 90 eb 9d e8 37 25 00 f8 90 0f 0b 90 e9 e8 f1 ff ff e8 29 25 00 f8 90 <0f> 0b 90 e9 5a f3 ff ff e8 1b 25 00 f8 90 0f 0b 90 e9 cd f4 ff ff [ 509.085375][T31309] RSP: 0018:ffffc9000efd6fc0 EFLAGS: 00010283 [ 509.091754][T31309] RAX: ffffffff8994c227 RBX: 00000000ffffffa1 RCX: 0000000000040000 [ 509.099966][T31309] RDX: ffffc9000a0a1000 RSI: 0000000000000dad RDI: 0000000000000dae SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 509.108056][T31309] RBP: ffffc9000efd71b0 R08: ffffffff8994b57d R09: ffffffff8667d4c8 [ 509.116107][T31309] R10: 0000000000000004 R11: ffff8880619cda00 R12: ffffc90004cdd000 [ 509.124160][T31309] R13: 1ffff1100f056986 R14: ffff8880782b4c30 R15: ffff8880782b4c28 [ 509.132212][T31309] FS: 00007fe4187436c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 509.141169][T31309] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 509.147882][T31309] CR2: 00007f5ea6d0cfce CR3: 0000000027e0a000 CR4: 00000000003526f0 [ 509.155922][T31309] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 509.164049][T31309] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 509.172139][T31309] Call Trace: [ 509.175441][T31309] [ 509.178391][T31309] ? __warn+0x168/0x4e0 [ 509.182639][T31309] ? unregister_netdevice_many_notify+0x18c8/0x1da0 [ 509.189270][T31309] ? report_bug+0x2b3/0x500 [ 509.194190][T31309] ? unregister_netdevice_many_notify+0x18c8/0x1da0 [ 509.200838][T31309] ? handle_bug+0x60/0x90 [ 509.205453][T31309] ? exc_invalid_op+0x1a/0x50 [ 509.210161][T31309] ? asm_exc_invalid_op+0x1a/0x20 [ 509.215265][T31309] ? bond_xdp+0x218/0x8a0 [ 509.219625][T31309] ? unregister_netdevice_many_notify+0xc1d/0x1da0 [ 509.226218][T31309] ? unregister_netdevice_many_notify+0x18c7/0x1da0 [ 509.232943][T31309] ? unregister_netdevice_many_notify+0x18c8/0x1da0 [ 509.239596][T31309] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 509.246458][T31309] ? unregister_netdevice_queue+0x26b/0x370 [ 509.252616][T31309] ? __nla_parse+0x40/0x60 [ 509.257061][T31309] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 509.263426][T31309] rtnl_dellink+0x50b/0x8d0 [ 509.267965][T31309] ? mark_lock+0x9a/0x360 [ 509.272360][T31309] ? __pfx_rtnl_dellink+0x10/0x10 [ 509.277487][T31309] ? __pfx___mutex_lock+0x10/0x10 [ 509.282628][T31309] ? __pfx_rtnl_dellink+0x10/0x10 [ 509.287682][T31309] rtnetlink_rcv_msg+0x73f/0xcf0 [ 509.292950][T31309] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 509.298114][T31309] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 509.303860][T31309] netlink_rcv_skb+0x1e3/0x430 [ 509.308657][T31309] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 509.314190][T31309] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 509.319485][T31309] ? netlink_deliver_tap+0x2e/0x1b0 [ 509.324789][T31309] netlink_unicast+0x7f6/0x990 [ 509.329605][T31309] ? __pfx_netlink_unicast+0x10/0x10 [ 509.335110][T31309] ? __virt_addr_valid+0x183/0x530 [ 509.340258][T31309] ? __check_object_size+0x48e/0x900 [ 509.345695][T31309] netlink_sendmsg+0x8e4/0xcb0 [ 509.350504][T31309] ? __pfx_netlink_sendmsg+0x10/0x10 [ 509.355909][T31309] ? aa_sock_msg_perm+0x91/0x160 [ 509.360882][T31309] ? __pfx_netlink_sendmsg+0x10/0x10 [ 509.366237][T31309] __sock_sendmsg+0x221/0x270 [ 509.370945][T31309] ____sys_sendmsg+0x52a/0x7e0 [ 509.375783][T31309] ? __pfx_____sys_sendmsg+0x10/0x10 [ 509.381107][T31309] __sys_sendmsg+0x292/0x380 [ 509.385800][T31309] ? __pfx___sys_sendmsg+0x10/0x10 [ 509.390987][T31309] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 509.397643][T31309] ? do_syscall_64+0x100/0x230 [ 509.402647][T31309] ? do_syscall_64+0xb6/0x230 [ 509.407346][T31309] do_syscall_64+0xf3/0x230 [ 509.411943][T31309] ? clear_bhb_loop+0x35/0x90 [ 509.416646][T31309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 509.422655][T31309] RIP: 0033:0x7fe41797dff9 [ 509.427085][T31309] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 509.446786][T31309] RSP: 002b:00007fe418743038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 509.455272][T31309] RAX: ffffffffffffffda RBX: 00007fe417b35f80 RCX: 00007fe41797dff9 [ 509.463343][T31309] RDX: 0000000020004010 RSI: 0000000020000000 RDI: 0000000000000004 [ 509.471322][T31309] RBP: 00007fe4179f0296 R08: 0000000000000000 R09: 0000000000000000 [ 509.479389][T31309] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 509.487422][T31309] R13: 0000000000000000 R14: 00007fe417b35f80 R15: 00007ffd07629398 [ 509.495499][T31309] [ 509.498836][T31309] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 509.506121][T31309] CPU: 1 UID: 0 PID: 31309 Comm: syz.4.12366 Not tainted 6.12.0-rc2-syzkaller-00631-g6d858708d465 #0 [ 509.516963][T31309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 509.527010][T31309] Call Trace: [ 509.530282][T31309] [ 509.533206][T31309] dump_stack_lvl+0x241/0x360 [ 509.537888][T31309] ? __pfx_dump_stack_lvl+0x10/0x10 [ 509.543086][T31309] ? __pfx__printk+0x10/0x10 [ 509.547698][T31309] ? vscnprintf+0x5d/0x90 [ 509.552046][T31309] panic+0x349/0x880 [ 509.555951][T31309] ? __warn+0x177/0x4e0 [ 509.560115][T31309] ? __pfx_panic+0x10/0x10 [ 509.564549][T31309] __warn+0x34b/0x4e0 [ 509.568535][T31309] ? unregister_netdevice_many_notify+0x18c8/0x1da0 [ 509.575125][T31309] report_bug+0x2b3/0x500 [ 509.579448][T31309] ? unregister_netdevice_many_notify+0x18c8/0x1da0 [ 509.586056][T31309] handle_bug+0x60/0x90 [ 509.590227][T31309] exc_invalid_op+0x1a/0x50 [ 509.594742][T31309] asm_exc_invalid_op+0x1a/0x20 [ 509.599598][T31309] RIP: 0010:unregister_netdevice_many_notify+0x18c8/0x1da0 [ 509.606802][T31309] Code: 00 f8 90 0f 0b 90 e9 4f ff ff ff e8 42 25 00 f8 90 0f 0b 90 eb 9d e8 37 25 00 f8 90 0f 0b 90 e9 e8 f1 ff ff e8 29 25 00 f8 90 <0f> 0b 90 e9 5a f3 ff ff e8 1b 25 00 f8 90 0f 0b 90 e9 cd f4 ff ff [ 509.626421][T31309] RSP: 0018:ffffc9000efd6fc0 EFLAGS: 00010283 [ 509.632492][T31309] RAX: ffffffff8994c227 RBX: 00000000ffffffa1 RCX: 0000000000040000 [ 509.640465][T31309] RDX: ffffc9000a0a1000 RSI: 0000000000000dad RDI: 0000000000000dae [ 509.648434][T31309] RBP: ffffc9000efd71b0 R08: ffffffff8994b57d R09: ffffffff8667d4c8 [ 509.656403][T31309] R10: 0000000000000004 R11: ffff8880619cda00 R12: ffffc90004cdd000 [ 509.664371][T31309] R13: 1ffff1100f056986 R14: ffff8880782b4c30 R15: ffff8880782b4c28 [ 509.672346][T31309] ? bond_xdp+0x218/0x8a0 [ 509.676677][T31309] ? unregister_netdevice_many_notify+0xc1d/0x1da0 [ 509.683188][T31309] ? unregister_netdevice_many_notify+0x18c7/0x1da0 [ 509.689810][T31309] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 509.696595][T31309] ? unregister_netdevice_queue+0x26b/0x370 [ 509.702504][T31309] ? __nla_parse+0x40/0x60 [ 509.706918][T31309] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 509.713158][T31309] rtnl_dellink+0x50b/0x8d0 [ 509.717659][T31309] ? mark_lock+0x9a/0x360 [ 509.721991][T31309] ? __pfx_rtnl_dellink+0x10/0x10 [ 509.727064][T31309] ? __pfx___mutex_lock+0x10/0x10 [ 509.732099][T31309] ? __pfx_rtnl_dellink+0x10/0x10 [ 509.737124][T31309] rtnetlink_rcv_msg+0x73f/0xcf0 [ 509.742060][T31309] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 509.747169][T31309] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 509.752635][T31309] netlink_rcv_skb+0x1e3/0x430 [ 509.757392][T31309] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 509.762847][T31309] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 509.768138][T31309] ? netlink_deliver_tap+0x2e/0x1b0 [ 509.773329][T31309] netlink_unicast+0x7f6/0x990 [ 509.778096][T31309] ? __pfx_netlink_unicast+0x10/0x10 [ 509.783376][T31309] ? __virt_addr_valid+0x183/0x530 [ 509.788482][T31309] ? __check_object_size+0x48e/0x900 [ 509.793769][T31309] netlink_sendmsg+0x8e4/0xcb0 [ 509.798534][T31309] ? __pfx_netlink_sendmsg+0x10/0x10 [ 509.803832][T31309] ? aa_sock_msg_perm+0x91/0x160 [ 509.808783][T31309] ? __pfx_netlink_sendmsg+0x10/0x10 [ 509.814071][T31309] __sock_sendmsg+0x221/0x270 [ 509.818757][T31309] ____sys_sendmsg+0x52a/0x7e0 [ 509.823533][T31309] ? __pfx_____sys_sendmsg+0x10/0x10 [ 509.828838][T31309] __sys_sendmsg+0x292/0x380 [ 509.833434][T31309] ? __pfx___sys_sendmsg+0x10/0x10 [ 509.838572][T31309] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 509.844900][T31309] ? do_syscall_64+0x100/0x230 [ 509.849661][T31309] ? do_syscall_64+0xb6/0x230 [ 509.854336][T31309] do_syscall_64+0xf3/0x230 [ 509.858833][T31309] ? clear_bhb_loop+0x35/0x90 [ 509.863508][T31309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 509.869415][T31309] RIP: 0033:0x7fe41797dff9 [ 509.873823][T31309] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 509.893420][T31309] RSP: 002b:00007fe418743038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 509.901831][T31309] RAX: ffffffffffffffda RBX: 00007fe417b35f80 RCX: 00007fe41797dff9 [ 509.909796][T31309] RDX: 0000000020004010 RSI: 0000000020000000 RDI: 0000000000000004 [ 509.917765][T31309] RBP: 00007fe4179f0296 R08: 0000000000000000 R09: 0000000000000000 [ 509.925729][T31309] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 509.933696][T31309] R13: 0000000000000000 R14: 00007fe417b35f80 R15: 00007ffd07629398 [ 509.941677][T31309] [ 509.944943][T31309] Kernel Offset: disabled [ 509.949255][T31309] Rebooting in 86400 seconds..