last executing test programs: 1.240762565s ago: executing program 2 (id=10291): r0 = socket(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB="953a04"], 0x24}}, 0x0) recvmmsg$unix(r0, &(0x7f0000002a40)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f00000008c0)=""/200, 0xc8}, {&(0x7f0000000640)=""/249, 0xf9}, {&(0x7f0000004480)=""/4098, 0x1002}, {&(0x7f0000000740)=""/13, 0xd}, {&(0x7f00000007c0)=""/97, 0x61}, {&(0x7f00000001c0)=""/104, 0x68}, {&(0x7f0000000540)=""/130, 0x82}, {&(0x7f00000009c0)=""/133, 0x85}], 0x8}}], 0x1, 0x2080, 0x0) write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) 1.142479519s ago: executing program 2 (id=10295): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 993.231142ms ago: executing program 2 (id=10298): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000001100)=[{&(0x7f0000001140)="4647b4f310d036b398bd576db787e7b4202ee128ae26c942fc41e537802686e8c349eb6c1ed386de2085218c1cc9fb2decdb2a5f89154999df0aeebf9b9c41add84afb98", 0x44}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'bridge_slave_0\x00'}}, 0x1e) 929.683213ms ago: executing program 0 (id=10302): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="28040000", @ANYRES16=r2, @ANYBLOB="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", @ANYRES32=r3], 0x428}, 0x1, 0x0, 0x0, 0x4000}, 0x200000d4) 846.687862ms ago: executing program 2 (id=10304): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f00000003c0), r0) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000fc0), r0) sendmsg$NL802154_CMD_SET_TX_POWER(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000280)={0x24, r1, 0x926fdb2c68a18847, 0x70bd29, 0x0, {0x6}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x5913a6845d0822ff}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x24048001}, 0x44040) 810.533511ms ago: executing program 4 (id=10306): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000004c0)={@val={0x70}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @remote, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, {[@lsrr={0x83, 0x3, 0xf2}]}}, {0x5e22, 0x4e21, 0x18, 0x0, @wg=@data={0x4, 0x3, 0xffffdd86}}}}}}}, 0x42) 728.325754ms ago: executing program 0 (id=10307): socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x80040005, 0x0, 0x0, 0x40f00, 0x18}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r0, 0x8b1a, &(0x7f0000000040)) 704.196484ms ago: executing program 2 (id=10308): bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x1, 0x4}, 0x38) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'virt_wifi0\x00', @random='\x00\x00\x00\x00\x00 '}) 694.644307ms ago: executing program 3 (id=10309): bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x67) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x36, &(0x7f00000000c0)=[{0x7}, {0x3, 0x5, 0x2c, 0x4}, {0xfac3, 0x2, 0x4, 0x2}, {0x77cf, 0x7f, 0x1, 0x80000001}, {0x7, 0x11, 0xcf, 0x7}]}) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 656.886737ms ago: executing program 1 (id=10310): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000200af501000000000000000001"], 0x84}, 0x1, 0x0, 0x0, 0x844}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00U\x00=\t\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="20000280", @ANYRES32=r0, @ANYBLOB="0000000000000000000000000a000000000000000000001420000100", @ANYRES32=r2], 0x58}}, 0x0) 596.322209ms ago: executing program 0 (id=10311): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000ac0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000340)={0x34, r1, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_KEY={0x18, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x14, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7}]}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x34}, 0x1, 0x0, 0x0, 0x24004c15}, 0x20000000) 588.739171ms ago: executing program 3 (id=10312): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r1, 0x107, 0x13, 0x0, &(0x7f0000000200)) 539.025263ms ago: executing program 2 (id=10313): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x34, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x26, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x12, 0x0, @opaque='\x00'/10}}}}}, 0x0) recvfrom(r0, &(0x7f00000000c0)=""/10, 0xa, 0x0, 0x0, 0x0) 499.892941ms ago: executing program 1 (id=10314): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) ioctl$TUNSETNOCSUM(r2, 0xff07, 0x0) 498.967859ms ago: executing program 0 (id=10315): r0 = socket(0x2, 0x80805, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0x38}}, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={r2, 0x3, 0x7}, 0xc) 431.855733ms ago: executing program 4 (id=10316): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='notify_on_release\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=0x3ff, 0x12) mkdirat$cgroup(r0, &(0x7f00000000c0)='syz1\x00', 0x1ff) 431.136006ms ago: executing program 3 (id=10317): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) 360.627736ms ago: executing program 4 (id=10318): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'gretap0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000080)="33031600d1fd140000007ef52f555f2a3b9fe67025c1d97bfbf719143baa4b1f0f858c6632f47042195e", 0xfdef, 0x40008c1, &(0x7f00000000c0)={0x11, 0x86dd, r2, 0x1, 0x62}, 0x14) 360.467429ms ago: executing program 0 (id=10319): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x2000003c, &(0x7f0000000280)}) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r1, &(0x7f0000000040)=ANY=[], 0x6) 359.852598ms ago: executing program 1 (id=10320): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x3ffffffffffffe) close(0x4) 290.836792ms ago: executing program 1 (id=10321): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000045, &(0x7f00000000c0)={0xa, 0x2, 0x1000, @empty}, 0x1c) shutdown(r0, 0x1) 286.87923ms ago: executing program 3 (id=10322): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0xfffd, @multicast2}, 0x4}}, 0x2e) 228.118099ms ago: executing program 4 (id=10323): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xf}, {}, {0x7, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x10, 0x2, [@TCA_FLOW_EMATCHES={0xc, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}]}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20048084}, 0x2008c014) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x20008000) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x44, r1, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x8, 0x4, '\x00\x00\x00\x00'}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x44}}, 0x0) 198.262602ms ago: executing program 0 (id=10324): r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='westwood\x00', 0x9) r1 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r1, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) 168.115456ms ago: executing program 3 (id=10325): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_pressure(r0, &(0x7f0000000040)='memory.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r1, &(0x7f0000000080)={'some', 0x20, 0x2000000005, 0x20, 0x10000000fffff}, 0x2f) close(r1) 160.43889ms ago: executing program 1 (id=10326): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x74, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0) 160.132322ms ago: executing program 4 (id=10327): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x2) bpf$ENABLE_STATS(0x20, 0x0, 0x0) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{0x6, 0xfc}]}) write(r0, &(0x7f0000000280)="4591", 0x2) 47.934753ms ago: executing program 3 (id=10328): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000500)='g', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x2002}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000000c0)={0xb, 0x4, 0xfe, 0x2, 0x3, 0xfd, 0x85, 0x0, 0x2, 0x4, 0x2, 0x0, 0xf, 0x5}, 0xe) shutdown(r0, 0x1) recvmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) 298.468µs ago: executing program 1 (id=10329): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r2, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90) 0s ago: executing program 4 (id=10330): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1c, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r1, 0x80, 0xb2}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x40800) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x15}]}}}]}, 0x3c}}, 0x0) kernel console output (not intermixed with test programs): 0645] netlink: 'syz.1.2274': attribute type 11 has an invalid length. [ 177.802921][T10645] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2274'. [ 177.892641][T10653] netlink: 'syz.4.2278': attribute type 6 has an invalid length. [ 178.676713][T10692] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2294'. [ 179.241282][T10726] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2306'. [ 179.290818][T10726] netlink: 21 bytes leftover after parsing attributes in process `syz.2.2306'. [ 179.347389][T10726] netlink: 21 bytes leftover after parsing attributes in process `syz.2.2306'. [ 179.600018][T10745] netlink: 'syz.3.2313': attribute type 24 has an invalid length. [ 179.987122][T10760] netlink: 'syz.4.2320': attribute type 1 has an invalid length. [ 180.026066][T10760] netlink: 'syz.4.2320': attribute type 11 has an invalid length. [ 180.086020][T10760] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2320'. [ 180.427456][T10784] netlink: 'syz.0.2330': attribute type 24 has an invalid length. [ 180.597617][T10794] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2334'. [ 180.620338][T10795] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2333'. [ 180.918855][T10810] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2341'. [ 181.118805][T10819] netlink: 'syz.4.2345': attribute type 11 has an invalid length. [ 181.156271][T10819] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2345'. [ 181.545436][T10839] netlink: 'syz.1.2353': attribute type 1 has an invalid length. [ 181.567342][T10839] netlink: 'syz.1.2353': attribute type 3 has an invalid length. [ 181.575200][T10839] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2353'. [ 182.314576][T10882] netlink: 'syz.3.2373': attribute type 1 has an invalid length. [ 182.343126][T10882] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2373'. [ 182.373524][T10883] netlink: 'syz.4.2374': attribute type 3 has an invalid length. [ 182.374415][T10882] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2373'. [ 182.396956][T10883] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2374'. [ 182.526382][T10889] netlink: 216 bytes leftover after parsing attributes in process `syz.0.2377'. [ 182.822043][T10904] openvswitch: netlink: Message has 4 unknown bytes. [ 183.155345][T10919] netlink: 'syz.4.2392': attribute type 11 has an invalid length. [ 183.187287][T10919] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2392'. [ 183.245006][T10925] netlink: 300 bytes leftover after parsing attributes in process `syz.0.2393'. [ 183.254587][T10922] netlink: 'syz.2.2394': attribute type 10 has an invalid length. [ 183.283949][T10922] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 183.335163][T10922] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 183.467519][T10935] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2399'. [ 185.768289][T11048] netlink: 'syz.2.2455': attribute type 2 has an invalid length. [ 186.277543][T11076] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 186.675207][T11094] netlink: 'syz.3.2478': attribute type 7 has an invalid length. [ 186.915012][T11106] __nla_validate_parse: 6 callbacks suppressed [ 186.915030][T11106] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2485'. [ 186.996457][T11110] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 187.073214][T11115] tipc: Trying to set illegal importance in message [ 187.127448][T11118] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2490'. [ 187.153555][T11118] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2490'. [ 187.166512][T11118] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2490'. [ 187.289049][T11125] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2493'. [ 187.691171][T11146] netlink: 'syz.3.2503': attribute type 1 has an invalid length. [ 187.702764][T11146] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2503'. [ 187.787914][T11151] netlink: 'syz.1.2505': attribute type 4 has an invalid length. [ 188.015743][T11163] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2510'. [ 188.405379][T11185] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 189.074327][T11220] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2539'. [ 189.117448][T11220] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2539'. [ 189.661175][T11253] netlink: 808 bytes leftover after parsing attributes in process `syz.1.2554'. [ 190.532300][T11295] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 190.564456][T11300] openvswitch: netlink: IP tunnel dst address not specified [ 190.823221][T11313] netlink: 'syz.3.2582': attribute type 33 has an invalid length. [ 191.021593][T11324] openvswitch: netlink: IP tunnel dst address not specified [ 191.155959][T11331] netlink: 'syz.4.2593': attribute type 2 has an invalid length. [ 192.347570][T11395] sctp: [Deprecated]: syz.1.2622 (pid 11395) Use of struct sctp_assoc_value in delayed_ack socket option. [ 192.347570][T11395] Use struct sctp_sack_info instead [ 192.573458][T11404] netlink: 'syz.2.2628': attribute type 1 has an invalid length. [ 192.597983][T11406] netlink: 'syz.0.2629': attribute type 12 has an invalid length. [ 192.621554][T11406] __nla_validate_parse: 1 callbacks suppressed [ 192.621571][T11406] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2629'. [ 192.642545][T11404] netlink: 244 bytes leftover after parsing attributes in process `syz.2.2628'. [ 192.728398][T11412] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 192.801666][T11416] netlink: 'syz.1.2634': attribute type 1 has an invalid length. [ 192.809718][T11416] netlink: 244 bytes leftover after parsing attributes in process `syz.1.2634'. [ 193.642086][T11450] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.665046][T11450] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.262261][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.277530][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.373556][T11489] netlink: 'syz.1.2665': attribute type 1 has an invalid length. [ 195.007456][T11519] netlink: 'syz.0.2680': attribute type 1 has an invalid length. [ 195.015250][T11519] netlink: 'syz.0.2680': attribute type 2 has an invalid length. [ 195.078304][T11526] netlink: 108 bytes leftover after parsing attributes in process `syz.2.2681'. [ 195.796890][T11562] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.2700'. [ 195.826060][T11562] netlink: zone id is out of range [ 195.845991][T11562] netlink: get zone limit has 8 unknown bytes [ 196.054870][T11574] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2705'. [ 196.064506][T11575] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2707'. [ 196.239962][T11582] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2710'. [ 197.559829][T11656] netlink: 'syz.2.2746': attribute type 1 has an invalid length. [ 197.572557][T11653] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 197.595936][T11659] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2748'. [ 197.642592][T11659] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2748'. [ 198.148859][T11687] netlink: 'syz.4.2760': attribute type 1 has an invalid length. [ 198.969524][T11731] netlink: 'syz.3.2782': attribute type 11 has an invalid length. [ 199.049915][T11731] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2782'. [ 199.371971][T11749] netlink: 'syz.1.2793': attribute type 1 has an invalid length. [ 199.400537][T11749] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2793'. [ 199.414418][T11749] nbd: illegal input index 1048576 [ 199.589009][T11760] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2799'. [ 199.632816][T11761] IPv6: sit1: Disabled Multicast RS [ 200.024844][T11783] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 200.756261][T11820] netlink: 'syz.3.2829': attribute type 21 has an invalid length. [ 200.776933][T11820] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2829'. [ 200.823594][T11823] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2830'. [ 201.535668][T11865] netlink: 'syz.2.2850': attribute type 1 has an invalid length. [ 201.556902][T11865] netlink: 'syz.2.2850': attribute type 1 has an invalid length. [ 201.590559][T11865] netlink: 'syz.2.2850': attribute type 1 has an invalid length. [ 201.633587][T11865] netlink: 'syz.2.2850': attribute type 2 has an invalid length. [ 201.666270][T11865] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2850'. [ 201.833769][T11877] netlink: 'syz.0.2857': attribute type 1 has an invalid length. [ 201.858270][T11877] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2857'. [ 201.882069][T11877] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2857'. [ 202.088014][T11890] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 202.314015][T11901] netlink: 'syz.1.2870': attribute type 21 has an invalid length. [ 203.003069][T11942] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2887'. [ 203.357122][T11955] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 203.769375][T11977] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2907'. [ 203.792299][T11980] nbd: couldn't find a device at index -373156329 [ 203.831718][T11977] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 203.907525][T11977] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 203.924005][T11977] gretap1: entered promiscuous mode [ 203.932565][T11977] gretap1: entered allmulticast mode [ 204.249928][T11998] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2917'. [ 204.283616][T11998] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2917'. [ 204.886663][T12030] netlink: 'syz.2.2932': attribute type 8 has an invalid length. [ 204.991510][T12035] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 206.126473][T12089] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 206.177148][T12093] netdevsim netdevsim2: Firmware load for './file0/../file0' refused, path contains '..' component [ 206.287453][T12098] netlink: 'syz.0.2966': attribute type 1 has an invalid length. [ 206.313441][T12098] netlink: 244 bytes leftover after parsing attributes in process `syz.0.2966'. [ 206.330875][T12099] netlink: 'syz.3.2964': attribute type 11 has an invalid length. [ 206.361412][T12099] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2964'. [ 206.569786][T12112] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 206.583050][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 206.590629][ T6099] Bluetooth: hci2: command 0x0406 tx timeout [ 206.596677][ T6099] Bluetooth: hci3: command 0x0406 tx timeout [ 206.604158][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 206.610402][ T6106] Bluetooth: hci1: command 0x0406 tx timeout [ 207.286823][T12151] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2991'. [ 207.388184][T12157] netlink: 'syz.0.2994': attribute type 1 has an invalid length. [ 207.624266][T12169] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 207.844124][T12179] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3005'. [ 208.040344][T12179] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 208.052390][T12179] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 208.063019][T12179] bond0 (unregistering): Released all slaves [ 208.438816][T12204] (unnamed net_device) (uninitialized): down delay (33554432) is not a multiple of miimon (640), value rounded to 33553920 ms [ 208.501472][T12206] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3018'. [ 208.615579][T12214] netlink: 6 bytes leftover after parsing attributes in process `syz.3.3020'. [ 208.656677][T12214] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 209.015665][T12235] netlink: 'syz.2.3031': attribute type 1 has an invalid length. [ 209.055503][T12235] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3031'. [ 209.067019][T12237] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3033'. [ 209.665293][T12269] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3047'. [ 209.705749][T12269] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3047'. [ 209.993223][T12283] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 210.177950][T12290] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 210.233547][T12291] pim6reg: entered allmulticast mode [ 210.607932][T12311] netlink: 'syz.3.3070': attribute type 23 has an invalid length. [ 210.875339][T12324] netlink: 'syz.0.3077': attribute type 1 has an invalid length. [ 210.935862][T12324] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3077'. [ 212.680323][T12415] netlink: 'syz.1.3116': attribute type 1 has an invalid length. [ 212.739455][T12420] netlink: 204 bytes leftover after parsing attributes in process `syz.2.3120'. [ 212.749016][T12415] netlink: 232 bytes leftover after parsing attributes in process `syz.1.3116'. [ 212.782361][T12415] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3116'. [ 213.602395][T12463] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3139'. [ 213.909463][T12479] netlink: 'syz.3.3145': attribute type 4 has an invalid length. [ 214.362298][T12503] netlink: 'syz.4.3154': attribute type 1 has an invalid length. [ 214.422062][T12503] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3154'. [ 215.100879][T12539] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3170'. [ 215.143450][T12539] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3170'. [ 215.579942][T12566] netlink: 'syz.4.3180': attribute type 10 has an invalid length. [ 215.611102][T12566] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3180'. [ 215.657342][T12566] batadv0: entered promiscuous mode [ 215.677397][T12566] batadv0: entered allmulticast mode [ 215.714222][T12566] bridge0: port 3(batadv0) entered blocking state [ 215.721995][T12571] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3184'. [ 215.738640][T12566] bridge0: port 3(batadv0) entered disabled state [ 215.756532][T12566] bridge0: port 3(batadv0) entered blocking state [ 215.763196][T12566] bridge0: port 3(batadv0) entered forwarding state [ 216.138444][ T1334] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 216.147935][ T1334] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 216.194251][T12593] netlink: 88 bytes leftover after parsing attributes in process `syz.2.3195'. [ 216.666164][T12618] openvswitch: netlink: Actions may not be safe on all matching packets [ 217.013947][T12633] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551585) [ 217.047469][T12633] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647 [ 217.576801][T12659] netlink: 'syz.3.3227': attribute type 21 has an invalid length. [ 217.585688][T12660] netlink: 'syz.4.3226': attribute type 10 has an invalid length. [ 217.610654][T12660] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3226'. [ 217.612536][T12659] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 217.652630][T12660] dummy0: entered promiscuous mode [ 217.676367][T12660] bridge0: port 4(dummy0) entered blocking state [ 217.701238][T12660] bridge0: port 4(dummy0) entered disabled state [ 217.718369][T12660] dummy0: entered allmulticast mode [ 217.744948][T12660] bridge0: port 4(dummy0) entered blocking state [ 217.751509][T12660] bridge0: port 4(dummy0) entered forwarding state [ 218.717470][T12703] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3248'. [ 220.333351][T12782] delete_channel: no stack [ 220.991178][T12821] netlink: 9 bytes leftover after parsing attributes in process `syz.2.3306'. [ 221.061547][T12821] gretap0: entered promiscuous mode [ 221.123309][T12827] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3309'. [ 222.298625][T12886] netlink: 'syz.2.3337': attribute type 1 has an invalid length. [ 222.306407][T12886] netlink: 15 bytes leftover after parsing attributes in process `syz.2.3337'. [ 222.356707][T12888] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3339'. [ 222.415805][T12888] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3339'. [ 222.538804][T12897] netlink: 144 bytes leftover after parsing attributes in process `syz.3.3343'. [ 222.857463][T12913] netlink: 164 bytes leftover after parsing attributes in process `syz.0.3351'. [ 223.063868][T12924] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3356'. [ 223.822935][T12965] netlink: 'syz.2.3376': attribute type 1 has an invalid length. [ 223.835449][T12965] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3376'. [ 224.626270][T13004] netlink: set zone limit has 8 unknown bytes [ 224.830837][T13018] netlink: 232 bytes leftover after parsing attributes in process `syz.2.3402'. [ 224.964605][T13022] netlink: 248 bytes leftover after parsing attributes in process `syz.3.3405'. [ 225.188651][T13038] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3413'. [ 225.552834][T13052] netlink: 'syz.0.3423': attribute type 13 has an invalid length. [ 225.574438][T13052] lo: entered promiscuous mode [ 225.602584][T13052] lo: entered allmulticast mode [ 225.628169][T13052] tunl0: entered promiscuous mode [ 225.652517][T13052] tunl0: entered allmulticast mode [ 225.677107][T13052] gre0: entered promiscuous mode [ 225.682570][T13052] gre0: entered allmulticast mode [ 225.734235][T13052] gretap0: entered promiscuous mode [ 225.748971][T13052] gretap0: entered allmulticast mode [ 225.773499][T13052] gretap0: refused to change device tx_queue_len [ 225.792925][T13052] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 225.811289][T13064] delete_channel: no stack [ 226.086079][T13076] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 226.592588][T13103] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3443'. [ 226.657587][T13103] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3443'. [ 226.900475][T13120] netlink: 'syz.3.3449': attribute type 7 has an invalid length. [ 227.280421][T13139] dvmrp1: entered allmulticast mode [ 228.667575][T13212] netlink: 244 bytes leftover after parsing attributes in process `syz.3.3492'. [ 228.796975][T13217] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3494'. [ 228.959681][T13225] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3498'. [ 229.006576][T13225] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3498'. [ 229.050457][T13230] netlink: 220 bytes leftover after parsing attributes in process `syz.1.3502'. [ 229.220722][T13239] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3506'. [ 230.269830][T13295] netlink: zone id is out of range [ 230.403627][T13297] netlink: 'syz.1.3533': attribute type 1 has an invalid length. [ 230.687804][T13315] netlink: 'syz.1.3537': attribute type 1 has an invalid length. [ 230.723101][T13315] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3537'. [ 231.074329][T13334] netlink: 'syz.2.3549': attribute type 1 has an invalid length. [ 231.097193][T13334] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3549'. [ 231.123210][T13334] nbd: couldn't find device at index 1048576 [ 231.525514][T13353] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3559'. [ 231.569675][T13358] netlink: 'syz.3.3561': attribute type 1 has an invalid length. [ 232.001695][T13377] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 232.222085][T13393] openvswitch: netlink: Message has -1 unknown bytes. [ 233.583467][T13462] delete_channel: no stack [ 234.226358][T13497] netlink: 191164 bytes leftover after parsing attributes in process `syz.4.3629'. [ 234.384890][T13503] netlink: 'syz.2.3634': attribute type 64 has an invalid length. [ 234.404966][T13503] netlink: 5 bytes leftover after parsing attributes in process `syz.2.3634'. [ 235.216568][T13550] netlink: 'syz.4.3655': attribute type 1 has an invalid length. [ 235.229324][T13550] netlink: 228 bytes leftover after parsing attributes in process `syz.4.3655'. [ 235.432507][T13560] netlink: 'syz.0.3661': attribute type 1 has an invalid length. [ 235.452928][T13560] netlink: 'syz.0.3661': attribute type 1 has an invalid length. [ 235.587848][T13567] netlink: 'syz.2.3665': attribute type 5 has an invalid length. [ 235.817591][T13580] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3672'. [ 235.824545][T13582] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3671'. [ 235.922108][T13582] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 235.943320][T13582] netlink: 184 bytes leftover after parsing attributes in process `syz.2.3671'. [ 236.688971][T13628] netlink: 'syz.1.3695': attribute type 3 has an invalid length. [ 236.877883][T13636] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3699'. [ 237.512044][T13669] netlink: 'syz.0.3713': attribute type 30 has an invalid length. [ 237.573209][T13669] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 237.626156][T13669] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 237.647850][T13677] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3718'. [ 237.716741][T13677] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3718'. [ 238.091194][T13702] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3730'. [ 238.386734][T13717] netlink: 'syz.2.3736': attribute type 8 has an invalid length. [ 238.708852][T13734] netlink: 'syz.0.3747': attribute type 4 has an invalid length. [ 239.290894][T13764] openvswitch: netlink: Flow key attribute not present in set flow. [ 239.718117][T13790] __nla_validate_parse: 1 callbacks suppressed [ 239.718135][T13790] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3771'. [ 239.738818][T13790] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3771'. [ 240.421669][T13829] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 240.922359][T13855] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 240.976376][T13855] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 241.033042][T13861] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3804'. [ 241.057537][T13863] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3805'. [ 241.078254][T13861] netlink: 244 bytes leftover after parsing attributes in process `syz.1.3804'. [ 241.114873][T13867] (unnamed net_device) (uninitialized): peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 241.232115][T13867] bond1: entered promiscuous mode [ 241.237456][T13867] bond1: entered allmulticast mode [ 241.243140][T13867] 8021q: adding VLAN 0 to HW filter on device bond1 [ 241.408403][T13878] netlink: 'syz.0.3811': attribute type 2 has an invalid length. [ 241.754159][T13897] netlink: 404 bytes leftover after parsing attributes in process `syz.3.3822'. [ 241.793068][T13897] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3822'. [ 241.829875][T13897] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3822'. [ 241.847745][T13897] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3822'. [ 241.862759][T13903] netlink: 'syz.4.3824': attribute type 24 has an invalid length. [ 242.040371][T13909] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3827'. [ 242.064978][T13913] netlink: 'syz.0.3829': attribute type 8 has an invalid length. [ 242.914364][T13956] netlink: 'syz.3.3849': attribute type 2 has an invalid length. [ 242.935843][T13956] netlink: 'syz.3.3849': attribute type 8 has an invalid length. [ 243.101520][T13966] netlink: 'syz.4.3856': attribute type 11 has an invalid length. [ 243.729108][T14004] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 245.529489][T14101] __nla_validate_parse: 5 callbacks suppressed [ 245.529507][T14101] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3922'. [ 245.736431][T14110] netlink: 'syz.3.3926': attribute type 11 has an invalid length. [ 245.765508][T14110] netlink: 228 bytes leftover after parsing attributes in process `syz.3.3926'. [ 245.832211][T14114] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3927'. [ 246.074968][T14130] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3935'. [ 246.115563][T14130] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3935'. [ 246.448704][T14147] netlink: 'syz.3.3942': attribute type 3 has an invalid length. [ 246.456472][T14147] netlink: 'syz.3.3942': attribute type 1 has an invalid length. [ 246.507463][T14152] netlink: 'syz.0.3944': attribute type 28 has an invalid length. [ 246.534841][T14152] netlink: 'syz.0.3944': attribute type 3 has an invalid length. [ 246.569307][T14152] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3944'. [ 246.860433][T14169] netlink: 'syz.0.3950': attribute type 13 has an invalid length. [ 247.036845][T14178] netlink: 'syz.1.3953': attribute type 1 has an invalid length. [ 247.287038][T14169] 8021q: adding VLAN 0 to HW filter on device team0 [ 247.334382][T14169] batman_adv: batadv0: Interface activated: team0 [ 247.402651][T14169] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 247.866559][T14214] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3970'. [ 247.937589][T14214] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3970'. [ 248.019826][T14222] netlink: 45 bytes leftover after parsing attributes in process `syz.4.3974'. [ 248.357577][T14242] netlink: 'syz.1.3981': attribute type 11 has an invalid length. [ 248.389769][T14242] netlink: 'syz.1.3981': attribute type 11 has an invalid length. [ 248.430797][T14242] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3981'. [ 248.565027][T14253] netlink: 'syz.2.3987': attribute type 11 has an invalid length. [ 248.607412][T14253] netlink: 'syz.2.3987': attribute type 11 has an invalid length. [ 248.642727][T14256] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 248.702476][T14256] 0ªî{X¹¦: entered allmulticast mode [ 248.737707][T14256] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 249.190969][T14287] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 250.597095][T14332] netlink: 'syz.4.4020': attribute type 64 has an invalid length. [ 250.626117][T14332] __nla_validate_parse: 6 callbacks suppressed [ 250.626136][T14332] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4020'. [ 250.739329][T14338] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4025'. [ 251.490199][T14381] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4046'. [ 251.751168][T14391] TCP: TCP_TX_DELAY enabled [ 251.773321][T14393] lo speed is unknown, defaulting to 1000 [ 251.828384][T14393] lo speed is unknown, defaulting to 1000 [ 251.836476][T14393] lo speed is unknown, defaulting to 1000 [ 251.926920][T14393] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 252.004723][T14393] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 252.153441][T14393] lo speed is unknown, defaulting to 1000 [ 252.153714][T14413] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4061'. [ 252.245519][T14413] geneve2: entered promiscuous mode [ 252.292670][T14418] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4065'. [ 252.314452][T14418] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4065'. [ 252.340731][T14393] lo speed is unknown, defaulting to 1000 [ 252.381749][T14418] geneve2: entered promiscuous mode [ 252.395272][T14418] geneve2: entered allmulticast mode [ 252.403186][T14393] lo speed is unknown, defaulting to 1000 [ 252.419417][T14393] lo speed is unknown, defaulting to 1000 [ 252.431239][T14393] lo speed is unknown, defaulting to 1000 [ 252.986382][T14453] netlink: 'syz.1.4081': attribute type 21 has an invalid length. [ 253.019101][T14453] netlink: 'syz.1.4081': attribute type 1 has an invalid length. [ 253.297042][T14467] 8021q: VLANs not supported on lo [ 253.360554][T14469] pimreg: entered allmulticast mode [ 254.142283][T14505] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4107'. [ 254.142642][T14507] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4110'. [ 254.156633][T14509] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4109'. [ 254.185828][T14505] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4107'. [ 254.201519][T14509] netlink: 'syz.1.4109': attribute type 3 has an invalid length. [ 254.677649][T14530] unsupported nlmsg_type 40 [ 254.986630][T14549] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 255.444802][T14574] geneve3: entered promiscuous mode [ 255.477472][T14574] geneve3: entered allmulticast mode [ 255.703762][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.712225][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.051687][T14608] netlink: 'syz.3.4159': attribute type 10 has an invalid length. [ 256.113765][T14608] team0: Device hsr_slave_0 failed to register rx_handler [ 256.481484][T14629] netlink: 'syz.1.4169': attribute type 10 has an invalid length. [ 256.563286][T14629] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.617377][T14629] bridge_slave_1: left allmulticast mode [ 256.644174][T14629] bridge_slave_1: left promiscuous mode [ 256.654012][T14629] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.691558][T14629] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 256.723047][T14635] batadv2: entered allmulticast mode [ 256.981938][T14647] netlink: 'syz.0.4178': attribute type 1 has an invalid length. [ 257.042029][T14647] __nla_validate_parse: 6 callbacks suppressed [ 257.042045][T14647] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4178'. [ 257.103008][T14651] netlink: 'syz.4.4180': attribute type 11 has an invalid length. [ 257.134276][T14651] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4180'. [ 257.552526][T14681] netlink: 'syz.0.4194': attribute type 11 has an invalid length. [ 257.889384][T14699] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4204'. [ 257.974971][T14703] netlink: 'syz.3.4206': attribute type 3 has an invalid length. [ 258.011044][T14703] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4206'. [ 258.021431][T14705] openvswitch: netlink: Key type 29 is not supported [ 258.184013][T14713] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4211'. [ 258.218627][T14713] hsr_slave_0: left promiscuous mode [ 258.233763][T14713] hsr_slave_1: left promiscuous mode [ 258.418193][T14725] netlink: 'syz.0.4217': attribute type 16 has an invalid length. [ 258.426200][T14725] netlink: 'syz.0.4217': attribute type 3 has an invalid length. [ 258.452186][T14725] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4217'. [ 258.544540][T14729] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4219'. [ 258.751348][T14741] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4225'. [ 258.883881][T14747] ieee802154 phy0 wpan0: encryption failed: -22 [ 258.996563][T14753] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4231'. [ 259.038770][T14753] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4231'. [ 259.067452][T14753] netlink: 'syz.0.4231': attribute type 3 has an invalid length. [ 259.075432][T14753] netlink: 'syz.0.4231': attribute type 2 has an invalid length. [ 259.825496][T14793] sctp: [Deprecated]: syz.1.4251 (pid 14793) Use of int in maxseg socket option. [ 259.825496][T14793] Use struct sctp_assoc_value instead [ 260.030171][T14798] 8021q: adding VLAN 0 to HW filter on device bond1 [ 260.802496][T14850] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 261.106071][T14865] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551614) [ 261.158908][T14865] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 261.558035][T14887] dummy0: left allmulticast mode [ 261.573520][T14887] bridge0: port 4(dummy0) entered disabled state [ 261.650789][T14887] bridge0: port 3(batadv0) entered disabled state [ 261.682255][T14887] bridge_slave_1: left allmulticast mode [ 261.689047][T14887] bridge_slave_1: left promiscuous mode [ 261.694850][T14887] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.723929][T14887] bridge_slave_0: left allmulticast mode [ 261.733938][T14887] bridge_slave_0: left promiscuous mode [ 261.743295][T14887] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.999479][T14906] netdevsim netdevsim0: Firmware load for '..' refused, path contains '..' component [ 262.062441][T14913] netlink: 'syz.4.4309': attribute type 15 has an invalid length. [ 262.072853][T14913] __nla_validate_parse: 6 callbacks suppressed [ 262.072871][T14913] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4309'. [ 262.624437][T14940] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4320'. [ 263.595098][T14994] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4344'. [ 264.339076][T15007] infiniband syz!: set active [ 264.344843][T15007] infiniband syz!: added team_slave_0 [ 264.395194][T15007] RDS/IB: syz!: added [ 264.400137][T15007] smc: adding ib device syz! with port count 1 [ 264.425294][T15007] smc: ib device syz! port 1 has pnetid [ 264.717405][T15046] netlink: 'syz.3.4369': attribute type 27 has an invalid length. [ 264.975537][T15060] gre1: entered promiscuous mode [ 265.026481][T15060] gre1: entered allmulticast mode [ 265.129488][T15068] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 265.210993][T15068] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 266.267453][T15117] openvswitch: netlink: Tunnel attr 0 has unexpected len 16 expected 8 [ 266.686907][T15135] netlink: 'syz.3.4413': attribute type 1 has an invalid length. [ 266.725985][T15135] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4413'. [ 266.760317][T15135] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4413'. [ 267.125545][T15153] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 267.309185][T15161] netlink: 'syz.0.4426': attribute type 2 has an invalid length. [ 267.333707][T15164] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4428'. [ 267.397477][T15164] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4428'. [ 267.565220][ T6231] lo speed is unknown, defaulting to 1000 [ 267.689798][T15178] netlink: 'syz.3.4434': attribute type 1 has an invalid length. [ 269.198252][T15207] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 269.378607][T15251] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 269.774059][T15271] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4481'. [ 269.806692][T15273] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4482'. [ 269.955970][T15282] netlink: 'syz.3.4486': attribute type 12 has an invalid length. [ 269.992240][T15283] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4487'. [ 270.418154][ T6105] Bluetooth: hci0: command 0x0406 tx timeout [ 270.770497][T15324] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4507'. [ 271.917669][T15386] netlink: 'syz.3.4538': attribute type 1 has an invalid length. [ 271.954102][T15386] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4538'. [ 271.991020][T15392] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4540'. [ 272.682575][T15429] netlink: 'syz.2.4559': attribute type 13 has an invalid length. [ 272.702940][T15429] netlink: 'syz.2.4559': attribute type 58 has an invalid length. [ 272.746349][T15429] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4559'. [ 273.134895][T15452] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4571'. [ 273.631475][T15480] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4585'. [ 273.977427][T15496] ieee802154 phy1 wpan1: encryption failed: -22 [ 274.489947][T15526] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 274.493108][T15527] netlink: 'syz.3.4607': attribute type 1 has an invalid length. [ 274.539544][T15527] netlink: 228 bytes leftover after parsing attributes in process `syz.3.4607'. [ 274.559086][T15527] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4607'. [ 274.972320][T15553] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4620'. [ 275.090287][T15560] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4625'. [ 275.134891][T15560] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4625'. [ 275.179961][T15565] netlink: 256 bytes leftover after parsing attributes in process `syz.4.4627'. [ 275.374335][T15573] ip6gre1: entered allmulticast mode [ 275.441784][T15577] netlink: 'syz.0.4633': attribute type 1 has an invalid length. [ 275.688641][T15589] netlink: 'syz.4.4639': attribute type 1 has an invalid length. [ 275.696413][T15589] netlink: 244 bytes leftover after parsing attributes in process `syz.4.4639'. [ 276.084610][T15612] netlink: 'syz.3.4649': attribute type 7 has an invalid length. [ 276.113066][T15612] netlink: 'syz.3.4649': attribute type 8 has an invalid length. [ 276.467977][T15632] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-tlb(5) [ 276.473155][T15634] netlink: 'syz.1.4662': attribute type 2 has an invalid length. [ 277.277422][T15680] netlink: 'syz.4.4683': attribute type 8 has an invalid length. [ 277.410787][T15684] netlink: 'syz.3.4686': attribute type 5 has an invalid length. [ 277.418331][T15686] lo: entered promiscuous mode [ 277.434167][T15686] netlink: 'syz.1.4688': attribute type 2 has an invalid length. [ 277.457293][T15686] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 277.532452][ T6231] lo speed is unknown, defaulting to 1000 [ 277.542071][ T6231] syz2: Port: 1 Link DOWN [ 277.542362][T15684] geneve4: entered promiscuous mode [ 277.563148][T15684] geneve4: entered allmulticast mode [ 277.579099][ T1334] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 277.631181][ T1334] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 277.645705][ T1334] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 277.686354][ T1334] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 277.801644][T15703] openvswitch: netlink: Missing key (keys=40, expected=80) [ 277.899431][T15710] __nla_validate_parse: 5 callbacks suppressed [ 277.899447][T15710] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4699'. [ 278.261032][T15729] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 278.300023][T15732] openvswitch: netlink: EtherType 257 is less than min 600 [ 278.389481][T15737] netlink: 'syz.4.4712': attribute type 11 has an invalid length. [ 278.417441][T15737] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4712'. [ 278.679054][T15749] netlink: 'syz.2.4720': attribute type 2 has an invalid length. [ 278.684121][T15751] netlink: 'syz.1.4718': attribute type 1 has an invalid length. [ 278.722580][T15751] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4718'. [ 278.904627][T15762] netlink: 252 bytes leftover after parsing attributes in process `syz.3.4724'. [ 279.283493][T15780] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4732'. [ 279.337524][T15780] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4732'. [ 279.404108][T15780] gretap0: entered promiscuous mode [ 279.424635][T15780] gretap0: entered allmulticast mode [ 280.212240][T15829] sctp: [Deprecated]: syz.1.4751 (pid 15829) Use of int in max_burst socket option. [ 280.212240][T15829] Use struct sctp_assoc_value instead [ 280.475340][T15846] validate_nla: 1 callbacks suppressed [ 280.475359][T15846] netlink: 'syz.0.4758': attribute type 1 has an invalid length. [ 281.460232][T15897] netlink: 'syz.3.4782': attribute type 11 has an invalid length. [ 281.501327][T15897] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4782'. [ 281.552101][T15901] netlink: 'syz.2.4783': attribute type 1 has an invalid length. [ 281.582485][T15901] netlink: 'syz.2.4783': attribute type 1 has an invalid length. [ 281.678225][T15905] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4785'. [ 282.015988][T15924] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4793'. [ 282.082139][T15929] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4796'. [ 282.552419][T15954] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 282.595514][T15956] netlink: 'syz.0.4807': attribute type 1 has an invalid length. [ 282.957399][T15973] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 283.300733][T15989] netlink: 'syz.0.4822': attribute type 33 has an invalid length. [ 283.358527][T15989] batman_adv: batadv0: Interface deactivated: team0 [ 283.386129][T15997] ieee802154 phy1 wpan1: encryption failed: -22 [ 283.744759][T16013] __nla_validate_parse: 1 callbacks suppressed [ 283.744776][T16013] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4834'. [ 283.804024][T16017] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4835'. [ 283.810104][T16013] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4834'. [ 284.562677][T16059] lo speed is unknown, defaulting to 1000 [ 284.614391][T16059] lo speed is unknown, defaulting to 1000 [ 284.626176][T16059] lo speed is unknown, defaulting to 1000 [ 284.985641][T16059] infiniband syz0: set down [ 284.990311][T16059] infiniband syz0: added lo [ 284.998984][ T6231] lo speed is unknown, defaulting to 1000 [ 285.040314][T16059] RDS/IB: syz0: added [ 285.044459][T16059] smc: adding ib device syz0 with port count 1 [ 285.050716][T16059] smc: ib device syz0 port 1 has pnetid [ 285.065011][ T6231] lo speed is unknown, defaulting to 1000 [ 285.108477][T16059] lo speed is unknown, defaulting to 1000 [ 285.247517][T16088] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4870'. [ 285.586948][T16059] lo speed is unknown, defaulting to 1000 [ 285.738421][T16076] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 286.045799][T16120] erspan0: entered promiscuous mode [ 286.077763][T16120] erspan0: entered allmulticast mode [ 286.144474][T16125] netlink: 1284 bytes leftover after parsing attributes in process `syz.0.4889'. [ 286.215649][T16059] lo speed is unknown, defaulting to 1000 [ 286.343834][T16134] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4890'. [ 286.443105][T16139] sit0: entered promiscuous mode [ 286.494041][T16139] netlink: 'syz.4.4896': attribute type 1 has an invalid length. [ 286.548290][T16139] netlink: 1 bytes leftover after parsing attributes in process `syz.4.4896'. [ 286.960427][T16163] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4908'. [ 286.987308][ T6105] Bluetooth: hci0: command 0x0406 tx timeout [ 287.339053][T16059] lo speed is unknown, defaulting to 1000 [ 287.432128][T16186] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4919'. [ 287.760050][T16198] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4925'. [ 288.129653][T16059] lo speed is unknown, defaulting to 1000 [ 288.212624][T16220] netlink: 'syz.3.4936': attribute type 2 has an invalid length. [ 288.456214][T16230] netlink: 'syz.3.4940': attribute type 10 has an invalid length. [ 288.532575][T16233] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 288.561358][T16230] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 288.629526][T16238] netlink: 'syz.2.4945': attribute type 39 has an invalid length. [ 288.877620][T16246] __nla_validate_parse: 2 callbacks suppressed [ 288.877639][T16246] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4949'. [ 289.176721][T16261] netlink: 5 bytes leftover after parsing attributes in process `syz.1.4956'. [ 289.237546][T16265] netlink: 108 bytes leftover after parsing attributes in process `syz.3.4959'. [ 289.738881][T16293] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 290.023350][ T6289] IPVS: starting estimator thread 0... [ 290.104114][T16314] netdevsim netdevsim1 ÿÿÿÿÿÿ: renamed from netdevsim0 (while UP) [ 290.161689][T16310] IPVS: using max 30 ests per chain, 72000 per kthread [ 290.203669][T16317] bond4: entered promiscuous mode [ 290.211783][T16317] bond4: entered allmulticast mode [ 290.220589][T16317] 8021q: adding VLAN 0 to HW filter on device bond4 [ 290.456325][T16333] netlink: 'syz.1.4991': attribute type 3 has an invalid length. [ 290.485490][T16333] netlink: 201372 bytes leftover after parsing attributes in process `syz.1.4991'. [ 290.667659][T16342] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4995'. [ 290.883938][T16357] netlink: 256 bytes leftover after parsing attributes in process `syz.3.5002'. [ 290.953543][T16359] geneve2: entered promiscuous mode [ 290.972491][T16359] geneve2: entered allmulticast mode [ 291.026869][ T49] netdevsim netdevsim1 ÿÿÿÿÿÿ: set [1, 1] type 2 family 0 port 19999 - 0 [ 291.053915][T16363] netlink: zone id is out of range [ 291.061851][ T49] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 291.091832][ T49] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 291.097946][T16363] netlink: zone id is out of range [ 291.114164][ T49] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 291.157335][T16363] netlink: zone id is out of range [ 291.162489][T16363] netlink: zone id is out of range [ 291.213463][T16372] netlink: 'syz.0.5009': attribute type 1 has an invalid length. [ 291.226942][T16372] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5009'. [ 291.232696][T16363] netlink: zone id is out of range [ 291.280548][T16363] netlink: zone id is out of range [ 291.285703][T16363] netlink: zone id is out of range [ 291.304211][T16363] netlink: zone id is out of range [ 291.442300][T16381] delete_channel: no stack [ 291.626422][T16390] ieee802154 phy1 wpan1: encryption failed: -22 [ 291.972660][T16411] netlink: 164 bytes leftover after parsing attributes in process `syz.2.5028'. [ 292.028042][T16411] netlink: 164 bytes leftover after parsing attributes in process `syz.2.5028'. [ 292.037118][T16411] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5028'. [ 292.457820][T16429] ipvlan0: entered promiscuous mode [ 292.463086][T16429] ipvlan0: entered allmulticast mode [ 292.485824][T16429] veth0_vlan: entered allmulticast mode [ 292.684605][T16437] netlink: 'syz.0.5041': attribute type 1 has an invalid length. [ 293.315556][T16465] veth3: entered promiscuous mode [ 293.332220][T16465] veth3: entered allmulticast mode [ 296.279596][T16629] netlink: 'syz.1.5129': attribute type 4 has an invalid length. [ 296.346988][T16631] __nla_validate_parse: 2 callbacks suppressed [ 296.347005][T16631] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5130'. [ 296.895621][T16663] netlink: 'syz.2.5145': attribute type 1 has an invalid length. [ 297.447834][T16693] netlink: 'syz.0.5160': attribute type 10 has an invalid length. [ 297.490042][T16694] netlink: 'syz.2.5161': attribute type 16 has an invalid length. [ 297.498164][T16693] veth0_vlan: entered allmulticast mode [ 297.518000][T16694] netlink: 'syz.2.5161': attribute type 17 has an invalid length. [ 297.607615][T16693] veth0_vlan: left promiscuous mode [ 297.634629][T16693] veth0_vlan: entered promiscuous mode [ 297.663271][T16693] team0: Device veth0_vlan failed to register rx_handler [ 297.741355][T16694] gretap0: left promiscuous mode [ 297.751810][T16694] erspan0: left promiscuous mode [ 297.760017][T16694] erspan0: left allmulticast mode [ 297.791903][T16693] syz.0.5160 (16693) used greatest stack depth: 19880 bytes left [ 297.800124][T16694] net_ratelimit: 396 callbacks suppressed [ 297.800135][T16694] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 297.830934][T16696] netlink: 196 bytes leftover after parsing attributes in process `syz.4.5162'. [ 297.848129][T16696] netlink: 196 bytes leftover after parsing attributes in process `syz.4.5162'. [ 297.879823][T16696] netlink: 19 bytes leftover after parsing attributes in process `syz.4.5162'. [ 298.112908][T16718] openvswitch: netlink: Geneve opt len 62 is not a multiple of 4. [ 298.613805][T16747] netlink: 'syz.1.5187': attribute type 1 has an invalid length. [ 299.092890][T16772] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 299.158387][T16777] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5202'. [ 299.210934][T16779] IPv6: Can't replace route, no match found [ 299.351676][T16786] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5206'. [ 300.116795][T16829] sctp: [Deprecated]: syz.0.5227 (pid 16829) Use of struct sctp_assoc_value in delayed_ack socket option. [ 300.116795][T16829] Use struct sctp_sack_info instead [ 300.163716][T16829] sctp: [Deprecated]: syz.0.5227 (pid 16829) Use of struct sctp_assoc_value in delayed_ack socket option. [ 300.163716][T16829] Use struct sctp_sack_info instead [ 301.448652][T16896] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 304.149712][T17030] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 304.263767][T17034] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 304.305683][T17034] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5310'. [ 304.357574][T17034] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5310'. [ 304.441316][T17043] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5313'. [ 305.341271][T17095] netlink: 72 bytes leftover after parsing attributes in process `syz.1.5340'. [ 305.723580][T17116] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5351'. [ 305.757356][T17116] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 306.072766][T17132] Bluetooth: MGMT ver 1.23 [ 306.210367][T17139] sock: sock_set_timeout: `syz.3.5362' (pid 17139) tries to set negative timeout [ 306.345954][T17146] xt_limit: Overflow, try lower: 271964/0 [ 307.035895][T17187] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 307.545212][T17217] netlink: 'syz.3.5401': attribute type 2 has an invalid length. [ 307.627476][T17222] openvswitch: netlink: IPv4 frag type 255 is out of range max 2 [ 308.274234][T17261] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5417'. [ 308.289378][T17261] openvswitch: netlink: Unknown nsh attribute 0 [ 308.297118][T17261] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 309.574211][T17331] Bluetooth: MGMT ver 1.23 [ 309.622985][T17333] tipc: Enabling of bearer rejected, failed to enable media [ 310.600946][T17381] netlink: 96 bytes leftover after parsing attributes in process `syz.4.5476'. [ 310.693476][T17386] netlink: 76 bytes leftover after parsing attributes in process `syz.1.5479'. [ 310.878564][T17396] Bluetooth: MGMT ver 1.23 [ 310.918547][T17398] xt_policy: too many policy elements [ 312.163168][T17469] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5515'. [ 312.174223][T17470] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5517'. [ 312.194705][T17469] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5515'. [ 312.246522][T17475] team0: Device vti0 is of different type [ 312.413429][T17483] Zero length message leads to an empty skb [ 313.936923][T17561] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5559'. [ 313.988444][T17564] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5561'. [ 314.019672][T17565] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 314.290692][T17579] netlink: 'syz.1.5568': attribute type 29 has an invalid length. [ 314.331506][T17579] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5568'. [ 314.343683][T17584] netlink: 'syz.1.5568': attribute type 29 has an invalid length. [ 314.358622][T17584] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5568'. [ 314.424664][T17588] tipc: Started in network mode [ 314.439827][T17588] tipc: Node identity fe80000000000000000000000000002a, cluster identity 4711 [ 314.481837][T17588] tipc: Enabled bearer , priority 10 [ 315.046736][T17624] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5589'. [ 315.064973][T17624] netlink: 'syz.0.5589': attribute type 30 has an invalid length. [ 315.211469][T17630] tipc: Invalid UDP bearer configuration [ 315.211521][T17630] tipc: Enabling of bearer rejected, failed to enable media [ 315.361395][T17640] vlan2: entered allmulticast mode [ 315.478895][T17647] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 315.551858][T17653] netlink: 'syz.0.5603': attribute type 6 has an invalid length. [ 315.577382][T17653] netlink: 'syz.0.5603': attribute type 5 has an invalid length. [ 315.607347][T17653] __nla_validate_parse: 4 callbacks suppressed [ 315.607363][T17653] netlink: 43 bytes leftover after parsing attributes in process `syz.0.5603'. [ 315.622898][ T9] tipc: Node number set to 4269801514 [ 316.436143][T17688] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.5620'. [ 316.621714][T17697] netlink: 'syz.0.5625': attribute type 1 has an invalid length. [ 316.964958][T17717] Driver unsupported XDP return value 0 on prog (id 419) dev N/A, expect packet loss! [ 317.142460][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.573516][T17754] netlink: 'syz.0.5651': attribute type 1 has an invalid length. [ 317.682695][T17759] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5653'. [ 317.927981][T17771] netlink: 104 bytes leftover after parsing attributes in process `syz.0.5660'. [ 318.248617][T17789] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5668'. [ 318.406458][T17799] netlink: 'syz.2.5673': attribute type 1 has an invalid length. [ 319.335012][T17850] lo speed is unknown, defaulting to 1000 [ 320.005127][T17882] sctp: [Deprecated]: syz.3.5713 (pid 17882) Use of int in max_burst socket option deprecated. [ 320.005127][T17882] Use struct sctp_assoc_value instead [ 320.122785][T17890] sch_tbf: peakrate 7 is lower than or equals to rate 2147483647 ! [ 320.585073][T17920] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5731'. [ 320.799899][T17936] netlink: 'syz.1.5738': attribute type 2 has an invalid length. [ 320.809405][T17936] netlink: 'syz.1.5738': attribute type 2 has an invalid length. [ 320.896388][T17938] netlink: 104 bytes leftover after parsing attributes in process `syz.0.5741'. [ 321.124447][T17951] net veth1_virt_wifi .: renamed from virt_wifi0 [ 321.154765][T17952] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 321.215406][T17956] : entered promiscuous mode [ 321.907683][T17995] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 322.360205][T18024] netlink: 'syz.0.5784': attribute type 3 has an invalid length. [ 322.371058][T18024] netlink: 766 bytes leftover after parsing attributes in process `syz.0.5784'. [ 322.526817][T18032] sit2: entered promiscuous mode [ 322.537863][T18032] sit2: entered allmulticast mode [ 323.615763][T18093] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5817'. [ 324.178036][T18122] netlink: 'syz.2.5832': attribute type 6 has an invalid length. [ 324.217502][T18122] netlink: 'syz.2.5832': attribute type 6 has an invalid length. [ 324.473648][T18140] tipc: Started in network mode [ 324.490722][T18140] tipc: Node identity 4, cluster identity 3 [ 324.515696][T18140] tipc: Node number set to 4 [ 324.653604][T18149] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 325.957568][T18218] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 326.475030][T18248] netlink: 'syz.2.5892': attribute type 23 has an invalid length. [ 327.074166][T18285] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5910'. [ 328.046292][T18332] pim6reg527: entered allmulticast mode [ 328.314865][T18344] block nbd0: not configured, cannot reconfigure [ 329.226037][T18376] netlink: 100 bytes leftover after parsing attributes in process `syz.2.5953'. [ 329.276670][T18381] tipc: Started in network mode [ 329.310011][T18381] tipc: Node identity e0000002, cluster identity 4711 [ 329.353682][T18381] tipc: Enabling of bearer rejected, failed to enable media [ 329.647071][T18393] veth5: entered allmulticast mode [ 329.725553][T18400] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 329.750477][T18400] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 329.787953][T18400] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 330.509581][T18446] netlink: 332 bytes leftover after parsing attributes in process `syz.0.5988'. [ 331.532919][T18504] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 332.572348][T18558] netlink: 'syz.0.6042': attribute type 29 has an invalid length. [ 333.777431][ T6101] Bluetooth: hci4: command 0x0406 tx timeout [ 333.830522][T18613] dvmrp1: entered allmulticast mode [ 333.840188][T18613] dvmrp1: left allmulticast mode [ 334.069782][T18622] vlan2: entered promiscuous mode [ 334.091493][T18622] bridge0: entered promiscuous mode [ 334.390753][T18641] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6082'. [ 335.312761][T18685] pimreg: entered allmulticast mode [ 335.322340][T18685] dvmrp1: left allmulticast mode [ 335.327906][T18685] pimreg: left allmulticast mode [ 336.747873][T18757] netlink: 'syz.0.6137': attribute type 1 has an invalid length. [ 336.765318][T18757] netlink: 216 bytes leftover after parsing attributes in process `syz.0.6137'. [ 336.823633][T18759] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave [ 336.833780][T18759] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 338.374717][T18843] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6179'. [ 338.412173][T18843] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6179'. [ 339.120477][T18885] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 339.137391][ T9] IPVS: starting estimator thread 0... [ 339.182610][T18890] netlink: 312 bytes leftover after parsing attributes in process `syz.0.6201'. [ 339.208886][T18892] netlink: 104 bytes leftover after parsing attributes in process `syz.4.6202'. [ 339.247356][T18886] IPVS: using max 27 ests per chain, 64800 per kthread [ 339.376962][T18901] tipc: Enabling not permitted [ 339.385923][T18901] tipc: Enabling of bearer rejected, failed to enable media [ 341.226586][T18996] netlink: 'syz.2.6251': attribute type 7 has an invalid length. [ 341.401872][T19007] IPVS: Error joining to the multicast group [ 341.465951][T19011] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6258'. [ 341.763464][T19027] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 342.390960][T19067] netlink: 'syz.3.6285': attribute type 11 has an invalid length. [ 342.836576][T19085] pimreg3: entered allmulticast mode [ 342.985939][T19100] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6299'. [ 343.057335][T19100] netlink: 'syz.0.6299': attribute type 5 has an invalid length. [ 343.077659][T19100] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6299'. [ 343.542999][T19131] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 343.849302][T19148] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6323'. [ 343.968435][T19153] netlink: 'syz.2.6327': attribute type 1 has an invalid length. [ 344.270273][T19172] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 345.085570][T19217] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 345.635661][T19245] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6369'. [ 345.696319][T19245] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6369'. [ 346.273648][T19283] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6387'. [ 346.623541][T19303] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6396'. [ 346.674989][T19304] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6397'. [ 346.937414][T19318] netlink: 256 bytes leftover after parsing attributes in process `syz.3.6404'. [ 347.325113][T19340] netlink: 'syz.2.6413': attribute type 2 has an invalid length. [ 347.601011][T19356] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6419'. [ 347.862086][T19369] netlink: 11 bytes leftover after parsing attributes in process `syz.1.6427'. [ 348.249210][T19389] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 348.315023][T19391] tipc: Enabling of bearer rejected, failed to enable media [ 348.359052][T19398] netlink: 10 bytes leftover after parsing attributes in process `syz.1.6441'. [ 348.916373][T19424] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6454'. [ 349.500986][T19459] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6471'. [ 350.304185][T19509] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.6496'. [ 350.462361][T19515] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6498'. [ 351.700798][T19579] Bluetooth: MGMT ver 1.23 [ 351.884848][T19590] __nla_validate_parse: 2 callbacks suppressed [ 351.884866][T19590] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6536'. [ 351.920029][T19592] netlink: 'syz.3.6537': attribute type 1 has an invalid length. [ 351.936163][T19590] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6536'. [ 351.967406][T19592] netlink: 220 bytes leftover after parsing attributes in process `syz.3.6537'. [ 351.987899][T19592] netlink: 'syz.3.6537': attribute type 1 has an invalid length. [ 352.188306][T19608] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6544'. [ 352.568464][T19628] netlink: 14 bytes leftover after parsing attributes in process `syz.2.6554'. [ 352.659703][T19631] netlink: 'syz.4.6556': attribute type 13 has an invalid length. [ 352.694042][T19631] veth0_macvtap: left promiscuous mode [ 352.709918][T19631] macvtap0: entered allmulticast mode [ 352.750263][T19631] macvtap0: refused to change device tx_queue_len [ 353.018014][T19651] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6565'. [ 353.053413][T19651] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6565'. [ 353.090363][T19651] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6565'. [ 353.246065][T19658] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.283394][T19658] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 353.503452][T19658] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.562910][T19658] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 353.776757][T19658] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.802390][T19658] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 353.836217][T19686] netlink: 'syz.2.6580': attribute type 33 has an invalid length. [ 354.035200][T19658] netdevsim netdevsim1 ÿÿÿÿÿÿ (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.087509][T19658] netdevsim netdevsim1 ÿÿÿÿÿÿ (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 354.342700][ T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 354.374414][ T12] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 354.436261][ T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 354.481791][ T12] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 354.545579][ T3565] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 354.569531][ T3565] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 354.620064][T19724] netlink: 'syz.4.6599': attribute type 2 has an invalid length. [ 354.630157][T19724] netlink: 188 bytes leftover after parsing attributes in process `syz.4.6599'. [ 354.666899][ T3565] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 354.692339][ T3565] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 354.884468][T19737] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6604'. [ 356.139918][T19807] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 356.752869][T19841] netlink: 'syz.4.6656': attribute type 2 has an invalid length. [ 357.083335][T19858] __nla_validate_parse: 3 callbacks suppressed [ 357.083353][T19858] netlink: 100 bytes leftover after parsing attributes in process `syz.3.6663'. [ 357.185085][T19862] tipc: Started in network mode [ 357.206801][T19862] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 357.228489][T19862] tipc: Enabled bearer , priority 10 [ 357.249894][T19864] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6667'. [ 357.516978][T19878] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6674'. [ 357.867893][T19896] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 358.082893][T19908] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6687'. [ 358.115232][T19908] netlink: 'syz.4.6687': attribute type 2 has an invalid length. [ 358.126982][T19908] netlink: 'syz.4.6687': attribute type 1 has an invalid length. [ 358.153979][T19908] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6687'. [ 358.349469][ T6083] tipc: Node number set to 10136234 [ 360.423939][T20035] netlink: 'syz.4.6750': attribute type 1 has an invalid length. [ 360.937933][T20065] netlink: 64 bytes leftover after parsing attributes in process `syz.0.6765'. [ 360.947190][T20065] netlink: 64 bytes leftover after parsing attributes in process `syz.0.6765'. [ 362.177809][ T6105] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 362.184394][ T6101] Bluetooth: hci0: command 0x0406 tx timeout [ 362.764964][T20167] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6813'. [ 362.807408][T20167] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6813'. [ 362.846018][T20172] rdma_op ffff8880322f59f0 conn xmit_rdma 0000000000000000 [ 362.846359][T20171] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 362.864062][T20173] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6816'. [ 362.864095][T20173] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6816'. [ 364.005613][T20233] tipc: Enabling of bearer rejected, failed to enable media [ 364.460768][T20261] netlink: 'syz.1.6856': attribute type 62 has an invalid length. [ 364.999001][T20293] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6872'. [ 365.324879][ T30] audit: type=1800 audit(1754705331.301:2): pid=20308 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.6879" name="memory.events" dev="tmpfs" ino=6683 res=0 errno=0 [ 365.374527][ T30] audit: type=1804 audit(1754705331.341:3): pid=20308 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.6879" name="/newroot/1331/memory.events" dev="tmpfs" ino=6683 res=1 errno=0 [ 366.089951][T20355] netlink: 'syz.2.6902': attribute type 1 has an invalid length. [ 366.351163][T20368] netlink: 'syz.0.6908': attribute type 1 has an invalid length. [ 366.373306][T20370] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6909'. [ 366.612918][T20384] nbd: socks must be embedded in a SOCK_ITEM attr [ 367.801457][T20434] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6938'. [ 368.189070][T20454] netlink: 'syz.0.6948': attribute type 1 has an invalid length. [ 368.196859][T20454] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 368.479137][T20467] netlink: 104 bytes leftover after parsing attributes in process `syz.0.6953'. [ 369.084176][T20496] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 369.094629][T20498] IPv6: NLM_F_REPLACE set, but no existing node found! [ 369.342652][T20503] tipc: MTU too low for tipc bearer [ 369.900020][T20529] sctp: [Deprecated]: syz.1.6980 (pid 20529) Use of int in maxseg socket option. [ 369.900020][T20529] Use struct sctp_assoc_value instead [ 370.718513][T20576] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 370.957118][T20586] netlink: 248 bytes leftover after parsing attributes in process `syz.1.7002'. [ 370.992211][T20586] NCSI netlink: No device for ifindex 0 [ 371.387492][T20609] netlink: 'syz.1.7010': attribute type 3 has an invalid length. [ 371.435690][T20614] netlink: 'syz.2.7011': attribute type 2 has an invalid length. [ 371.809423][T20626] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7015'. [ 372.369443][T20652] netlink: 212404 bytes leftover after parsing attributes in process `syz.4.7028'. [ 372.735968][T20674] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7037'. [ 372.769417][T20671] tipc: Enabling of bearer rejected, failed to enable media [ 372.897129][T20682] lo: entered allmulticast mode [ 372.905638][T20682] lo: left allmulticast mode [ 373.426662][T20711] pim6reg: entered allmulticast mode [ 373.454924][T20711] pim6reg: left allmulticast mode [ 373.806499][T20730] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7065'. [ 373.837074][T20730] netlink: 'syz.1.7065': attribute type 2 has an invalid length. [ 373.861819][T20730] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7065'. [ 374.084232][T20744] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7073'. [ 374.364706][T20758] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 374.945765][T20791] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.7095'. [ 374.994186][T20791] netlink: zone id is out of range [ 375.017600][T20791] netlink: get zone limit has 8 unknown bytes [ 375.313664][T20814] netlink: 'syz.0.7105': attribute type 2 has an invalid length. [ 375.468190][T20820] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7107'. [ 375.703488][T20832] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7112'. [ 375.769581][T20836] netlink: 'syz.4.7114': attribute type 1 has an invalid length. [ 375.805892][T20836] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7114'. [ 376.109289][T20854] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 376.426195][T20873] tipc: Enabling of bearer rejected, failed to enable media [ 376.563268][T20883] netlink: 192 bytes leftover after parsing attributes in process `syz.0.7137'. [ 376.717313][T20888] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7139'. [ 376.924572][T20902] netem: change failed [ 377.368300][ T9] IPVS: starting estimator thread 0... [ 377.440193][T20933] netlink: 176 bytes leftover after parsing attributes in process `syz.2.7162'. [ 377.477377][T20928] IPVS: using max 26 ests per chain, 62400 per kthread [ 378.120847][T20970] openvswitch: netlink: nsh attribute has 2338 unknown bytes. [ 378.165451][T20970] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 379.116971][T21013] netlink: 'syz.2.7199': attribute type 1 has an invalid length. [ 379.143003][T21013] __nla_validate_parse: 3 callbacks suppressed [ 379.143020][T21013] netlink: 208 bytes leftover after parsing attributes in process `syz.2.7199'. [ 379.182265][T21013] netlink: 'syz.2.7199': attribute type 1 has an invalid length. [ 379.200781][T21013] netlink: 'syz.2.7199': attribute type 2 has an invalid length. [ 379.642169][T21035] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 379.668203][T21037] xt_socket: unknown flags 0x50 [ 380.173865][T21063] netlink: 'syz.3.7225': attribute type 58 has an invalid length. [ 380.194526][T21063] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7225'. [ 380.426633][T21075] team0: Device vti0 is of different type [ 381.620617][T21135] netlink: 44 bytes leftover after parsing attributes in process `syz.1.7258'. [ 381.649508][T21135] netlink: 43 bytes leftover after parsing attributes in process `syz.1.7258'. [ 381.672366][T21135] netlink: 'syz.1.7258': attribute type 5 has an invalid length. [ 381.698422][T21135] netlink: 43 bytes leftover after parsing attributes in process `syz.1.7258'. [ 382.197626][T21158] netlink: 'syz.1.7267': attribute type 10 has an invalid length. [ 382.257701][T21158] bridge0: port 2(team0) entered blocking state [ 382.278256][T21158] bridge0: port 2(team0) entered disabled state [ 382.284743][T21158] team0: entered allmulticast mode [ 382.338923][T21158] team_slave_0: entered allmulticast mode [ 382.344698][T21158] team_slave_1: entered allmulticast mode [ 382.387070][T21171] x_tables: ip_tables: MARK.2 target: invalid size 8 (kernel) != (user) 16 [ 382.419283][T21158] team0: entered promiscuous mode [ 382.428686][T21158] team_slave_0: entered promiscuous mode [ 382.434571][T21158] team_slave_1: entered promiscuous mode [ 382.470840][T21158] bridge0: port 2(team0) entered blocking state [ 382.478111][T21158] bridge0: port 2(team0) entered forwarding state [ 384.360371][T21280] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7322'. [ 384.587630][T21291] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.7327'. [ 384.857806][T21302] tipc: Enabled bearer , priority 0 [ 385.930252][T21356] netlink: 'syz.2.7356': attribute type 1 has an invalid length. [ 386.563631][T21390] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7373'. [ 386.875029][T21407] netlink: 'syz.3.7382': attribute type 3 has an invalid length. [ 387.131534][T21422] netlink: 'syz.1.7391': attribute type 1 has an invalid length. [ 387.143253][T21422] netlink: 'syz.1.7391': attribute type 3 has an invalid length. [ 387.155476][T21422] netlink: 224 bytes leftover after parsing attributes in process `syz.1.7391'. [ 387.272188][T21428] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7393'. [ 387.344327][T21432] netlink: 212388 bytes leftover after parsing attributes in process `syz.2.7395'. [ 387.382172][T21432] openvswitch: netlink: Message has 5 unknown bytes. [ 387.993676][T21469] netlink: 104 bytes leftover after parsing attributes in process `syz.3.7414'. [ 388.585352][T21505] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 389.121910][T21529] Bluetooth: MGMT ver 1.23 [ 390.127776][T21582] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 390.254983][T21590] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 391.217927][ T6101] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 391.218428][ T6105] Bluetooth: hci2: command 0x0406 tx timeout [ 391.463518][T21657] netlink: 184 bytes leftover after parsing attributes in process `syz.0.7508'. [ 391.501908][T21657] xt_socket: unknown flags 0xd0 [ 391.733667][T21673] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 393.302980][T21752] netlink: 348 bytes leftover after parsing attributes in process `syz.0.7552'. [ 393.618754][T21767] openvswitch: netlink: IPv6 tunnel dst address is zero [ 393.693285][T21770] netlink: 'syz.2.7560': attribute type 10 has an invalid length. [ 393.743341][T21772] netlink: 'syz.0.7561': attribute type 142 has an invalid length. [ 394.248726][T21795] netlink: 212364 bytes leftover after parsing attributes in process `syz.4.7570'. [ 394.301759][T21795] openvswitch: netlink: Message has 5 unknown bytes. [ 394.522957][T21809] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7576'. [ 394.781318][T21824] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 395.047174][T21837] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7590'. [ 395.862530][T21884] netlink: 'syz.3.7608': attribute type 27 has an invalid length. [ 395.934256][T21888] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7610'. [ 396.545330][T21911] netlink: 'syz.1.7622': attribute type 3 has an invalid length. [ 396.996358][T21937] netlink: 'syz.4.7632': attribute type 3 has an invalid length. [ 397.092882][T21939] netlink: 108 bytes leftover after parsing attributes in process `syz.3.7634'. [ 398.265635][T21997] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7663'. [ 398.280163][T21997] netlink: 5 bytes leftover after parsing attributes in process `syz.1.7663'. [ 398.508722][T22010] nbd: must specify at least one socket [ 398.747835][T22025] bridge: RTM_NEWNEIGH with unconfigured vlan 3 on bridge_slave_0 [ 398.883888][T22032] netlink: 'syz.1.7680': attribute type 1 has an invalid length. [ 398.943609][T22032] netlink: 236 bytes leftover after parsing attributes in process `syz.1.7680'. [ 399.931430][T22092] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7711'. [ 399.994982][T22095] netlink: 'syz.4.7712': attribute type 178 has an invalid length. [ 400.469099][T22123] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7726'. [ 400.567830][T22127] netlink: 'syz.1.7728': attribute type 1 has an invalid length. [ 400.575597][T22127] netlink: 236 bytes leftover after parsing attributes in process `syz.1.7728'. [ 400.779208][T22141] nbd: must specify a device to reconfigure [ 401.106530][T22163] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7746'. [ 401.309961][T22173] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7751'. [ 401.332448][T22173] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 401.367893][T22173] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 401.590597][T22193] pim6reg: entered allmulticast mode [ 401.617824][ T6105] Bluetooth: hci0: command 0x0406 tx timeout [ 401.644411][T22197] pim6reg: left allmulticast mode [ 401.673220][T22196] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7762'. [ 402.257728][T22230] sock: sock_timestamping_bind_phc: sock not bind to device [ 402.392265][T22240] openvswitch: netlink: VXLAN extension message has 11 unknown bytes. [ 402.713381][T22258] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7791'. [ 402.820145][T22261] netlink: 'syz.4.7793': attribute type 1 has an invalid length. [ 402.845237][T22261] netlink: 232 bytes leftover after parsing attributes in process `syz.4.7793'. [ 402.876198][T22261] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7793'. [ 403.859163][T22317] netlink: 104 bytes leftover after parsing attributes in process `syz.1.7821'. [ 403.871241][T22319] team0: No ports can be present during mode change [ 404.623813][T22361] bridge0: port 1(veth0_to_bridge) entered blocking state [ 404.645865][T22361] bridge0: port 1(veth0_to_bridge) entered disabled state [ 404.689084][T22361] veth0_to_bridge: entered allmulticast mode [ 404.709248][T22361] veth0_to_bridge: entered promiscuous mode [ 405.404860][T22398] veth0: entered promiscuous mode [ 405.415945][T22395] veth0: left promiscuous mode [ 405.608142][T22407] netlink: 104 bytes leftover after parsing attributes in process `syz.3.7863'. [ 405.700407][T22414] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.7866'. [ 405.733328][T22417] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7868'. [ 405.971826][T22431] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7874'. [ 406.182269][T22445] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7880'. [ 406.860615][T22496] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7901'. [ 407.146357][T22502] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 408.143452][T22565] __nla_validate_parse: 2 callbacks suppressed [ 408.143470][T22565] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7932'. [ 408.298746][T22565] macvtap1: entered promiscuous mode [ 408.304357][T22565] vlan0: entered promiscuous mode [ 408.310010][T22565] macvtap1: entered allmulticast mode [ 408.316657][T22565] vlan0: entered allmulticast mode [ 408.322167][T22565] veth0_vlan: entered allmulticast mode [ 408.612447][T22590] vxlan0: entered promiscuous mode [ 408.620262][T22590] vxlan0: entered allmulticast mode [ 408.628409][ T3565] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 408.636954][ T3565] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 408.665299][ T3565] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 408.702274][ T3565] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 408.846242][T22607] team_slave_0: mtu greater than device maximum [ 408.920313][T22609] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7954'. [ 408.942419][T22613] netlink: 84 bytes leftover after parsing attributes in process `syz.1.7955'. [ 409.219060][T22625] (unnamed net_device) (uninitialized): ARP target 1.0.0.0 is already present [ 409.237732][T22625] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (1) [ 410.187366][T22682] netlink: 576 bytes leftover after parsing attributes in process `syz.1.7986'. [ 410.326039][T22689] sctp: [Deprecated]: syz.0.7992 (pid 22689) Use of int in maxseg socket option. [ 410.326039][T22689] Use struct sctp_assoc_value instead [ 410.548087][T22705] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7999'. [ 410.558880][T22705] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7999'. [ 411.118968][T22732] openvswitch: netlink: Unknown key attributes 2 [ 411.273318][T22742] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8011'. [ 411.286908][T22742] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8011'. [ 411.345278][T22742] bridge0: port 3(vlan1) entered blocking state [ 411.366002][T22742] bridge0: port 3(vlan1) entered disabled state [ 411.389560][T22742] vlan1: entered allmulticast mode [ 411.418013][T22742] bridge0: entered allmulticast mode [ 411.478860][T22742] vlan1: left allmulticast mode [ 411.483764][T22742] bridge0: left allmulticast mode [ 411.620530][T22755] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8017'. [ 412.110196][T22779] bridge0: port 1(bridge_slave_0) entered disabled state [ 412.138039][T22783] netlink: 'syz.3.8026': attribute type 16 has an invalid length. [ 412.166827][T22779] bridge0: port 2(bridge_slave_1) entered disabled state [ 412.217060][T22783] netlink: 'syz.3.8026': attribute type 17 has an invalid length. [ 412.416404][T22783] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 412.632907][T22802] netlink: 256 bytes leftover after parsing attributes in process `syz.4.8034'. [ 413.025294][T22822] netlink: 'syz.3.8041': attribute type 18 has an invalid length. [ 413.431666][T22846] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8052'. [ 413.954807][T22875] netlink: 'syz.2.8062': attribute type 10 has an invalid length. [ 414.407937][T22901] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8070'. [ 414.494112][T22901] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8070'. [ 414.723710][T22914] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8075'. [ 414.734293][T22914] netlink: 10 bytes leftover after parsing attributes in process `syz.4.8075'. [ 415.564256][T22960] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 416.048806][T22989] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 416.056250][T22989] IPv6: NLM_F_CREATE should be set when creating new route [ 416.063531][T22989] IPv6: NLM_F_CREATE should be set when creating new route [ 416.127889][T22989] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 416.162978][T22994] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8106'. [ 416.277866][T22997] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 416.384174][T23001] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8110'. [ 416.950517][T23030] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8120'. [ 417.548983][T23058] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8131'. [ 417.617593][ T6105] Bluetooth: hci1: command 0x0406 tx timeout [ 417.829141][T23066] netlink: 32 bytes leftover after parsing attributes in process `syz.3.8133'. [ 418.091251][T23078] netlink: 'syz.2.8141': attribute type 4 has an invalid length. [ 419.066415][T23131] erspan0: entered promiscuous mode [ 419.196509][T23141] unknown channel width for channel at 909000KHz? [ 419.235711][T23144] __nla_validate_parse: 2 callbacks suppressed [ 419.235730][T23144] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8171'. [ 419.457078][T23157] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 419.731069][T23171] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8184'. [ 419.808277][T23171] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8184'. [ 420.020194][T23183] netlink: 188 bytes leftover after parsing attributes in process `syz.2.8190'. [ 420.048217][T23185] vxcan1: tx drop: invalid da for name 0x0000000000000014 [ 420.347515][T23200] veth0: entered promiscuous mode [ 420.353600][T23195] veth0: left promiscuous mode [ 420.446481][T23208] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8202'. [ 420.456376][T23208] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 420.471994][T23208] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 420.669657][T23220] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8206'. [ 421.430618][T23268] netlink: 56 bytes leftover after parsing attributes in process `syz.3.8230'. [ 421.603549][T23279] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8235'. [ 421.900113][T23296] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8245'. [ 422.069576][T23307] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8249'. [ 422.806620][T23352] openvswitch: netlink: Multiple metadata blocks provided [ 424.942289][T23456] __nla_validate_parse: 2 callbacks suppressed [ 424.942367][T23456] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8320'. [ 425.090749][T23462] bridge_slave_0: entered promiscuous mode [ 425.232881][T23468] netlink: 'syz.3.8321': attribute type 83 has an invalid length. [ 425.411182][T23481] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8332'. [ 425.752526][T23502] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8342'. [ 425.798581][T23502] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8342'. [ 425.993439][T23519] netlink: 'syz.2.8348': attribute type 83 has an invalid length. [ 426.418915][T23544] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8363'. [ 426.434807][T23544] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8363'. [ 426.692650][T23557] netlink: 64 bytes leftover after parsing attributes in process `syz.4.8368'. [ 426.881036][T23565] openvswitch: netlink: VXLAN extension message has 3 unknown bytes. [ 426.966640][T23568] gtp1: entered promiscuous mode [ 426.989266][T23568] gtp1: entered allmulticast mode [ 427.572745][T23590] tipc: New replicast peer: 255.255.255.255 [ 427.590295][T23590] tipc: Enabled bearer , priority 10 [ 427.630474][T23594] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8387'. [ 427.764918][T23600] netlink: 236 bytes leftover after parsing attributes in process `syz.1.8389'. [ 428.414547][T23627] netlink: 'syz.2.8403': attribute type 1 has an invalid length. [ 428.433652][T23627] netlink: 'syz.2.8403': attribute type 3 has an invalid length. [ 428.454539][T23627] netlink: 216 bytes leftover after parsing attributes in process `syz.2.8403'. [ 428.527909][T23627] NCSI netlink: No device for ifindex 813332851 [ 428.618171][T23630] netlink: 'syz.0.8406': attribute type 1 has an invalid length. [ 428.647332][T23630] nbd: error processing sock list [ 428.656184][T23630] block nbd1: shutting down sockets [ 429.601842][T23677] openvswitch: netlink: IPv4 tun info is not correct [ 429.695867][T23682] netem: change failed [ 430.242764][T23715] __nla_validate_parse: 4 callbacks suppressed [ 430.242782][T23715] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8442'. [ 430.597122][T23734] netlink: 1 bytes leftover after parsing attributes in process `syz.0.8453'. [ 430.910950][T23752] netlink: 'syz.0.8461': attribute type 1 has an invalid length. [ 430.959670][T23752] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8461'. [ 431.134785][T23770] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8470'. [ 431.428894][T23786] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8478'. [ 431.819748][T23815] netem: change failed [ 432.036564][T23827] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8496'. [ 432.132851][T23833] netlink: 'syz.4.8499': attribute type 9 has an invalid length. [ 432.138508][T23829] batman_adv: batadv0: Adding interface: wlan1 [ 432.153468][T23829] batman_adv: batadv0: The MTU of interface wlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 432.184270][T23829] batman_adv: batadv0: Not using interface wlan1 (retrying later): interface not active [ 432.833712][T23874] netlink: 'syz.3.8518': attribute type 1 has an invalid length. [ 432.851170][T23874] netlink: 172 bytes leftover after parsing attributes in process `syz.3.8518'. [ 433.396015][T23911] sch_tbf: burst 4 is lower than device ip6tnl0 mtu (1452) ! [ 433.504804][T23917] veth0_to_team: entered promiscuous mode [ 433.516673][T23917] veth0_to_team: entered allmulticast mode [ 434.306479][T23956] netlink: 71 bytes leftover after parsing attributes in process `syz.0.8557'. [ 434.681500][T23974] netlink: 'syz.3.8563': attribute type 6 has an invalid length. [ 434.702864][T23974] netlink: 'syz.3.8563': attribute type 6 has an invalid length. [ 435.238269][T24013] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8581'. [ 435.440466][T24026] netlink: 340 bytes leftover after parsing attributes in process `syz.4.8588'. [ 435.523315][T24028] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8589'. [ 435.704450][T24039] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8593'. [ 435.840611][T24048] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8598'. [ 436.085609][T24060] netlink: 104 bytes leftover after parsing attributes in process `syz.3.8604'. [ 436.257055][T24070] netlink: 'syz.0.8609': attribute type 1 has an invalid length. [ 436.265018][T24070] netlink: 224 bytes leftover after parsing attributes in process `syz.0.8609'. [ 436.325684][T24074] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8611'. [ 436.354546][T24074] bond0: entered promiscuous mode [ 436.377100][T24074] bond0: left promiscuous mode [ 437.007374][T24105] nbd1: detected capacity change from 0 to 549764202496 [ 437.022454][ T6105] block nbd1: Receive control failed (result -32) [ 437.254742][T24078] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 437.332087][T24131] netlink: 'syz.3.8639': attribute type 4 has an invalid length. [ 437.344103][T24134] team0: No ports can be present during mode change [ 437.479582][T24141] netlink: 1036 bytes leftover after parsing attributes in process `syz.3.8643'. [ 437.493522][T24141] sch_tbf: burst 0 is lower than device lo mtu (80) ! [ 438.313578][T24190] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 438.352641][T24191] netlink: 108 bytes leftover after parsing attributes in process `syz.1.8667'. [ 438.372437][T24191] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8667'. [ 438.860947][T24224] raw_sendmsg: syz.3.8682 forgot to set AF_INET. Fix it! [ 439.879529][T24290] tap0: tun_chr_ioctl cmd 1074025672 [ 439.884959][T24290] tap0: ignored: set checksum disabled [ 439.965572][T24298] netlink: 'syz.2.8717': attribute type 83 has an invalid length. [ 440.502211][T24332] veth0: entered promiscuous mode [ 440.518547][T24332] veth0: left promiscuous mode [ 440.989452][T24362] netlink: 'syz.3.8748': attribute type 2 has an invalid length. [ 441.154664][T24373] __nla_validate_parse: 3 callbacks suppressed [ 441.154682][T24373] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8754'. [ 441.347417][T24378] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8757'. [ 441.844403][T24403] netlink: 'syz.4.8769': attribute type 2 has an invalid length. [ 441.860583][T24403] netlink: 84 bytes leftover after parsing attributes in process `syz.4.8769'. [ 441.865376][T24401] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8768'. [ 442.311338][T24434] openvswitch: netlink: Multiple metadata blocks provided [ 442.967492][T24468] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8800'. [ 443.101439][T24477] netlink: 1044 bytes leftover after parsing attributes in process `syz.3.8804'. [ 443.279370][T24487] netlink: 'syz.2.8807': attribute type 1 has an invalid length. [ 443.297548][T24487] netlink: 'syz.2.8807': attribute type 4 has an invalid length. [ 443.317494][T24487] netlink: 192 bytes leftover after parsing attributes in process `syz.2.8807'. [ 443.460848][T24496] netlink: 100 bytes leftover after parsing attributes in process `syz.0.8811'. [ 443.826148][T24514] bridge3: entered promiscuous mode [ 443.846976][T24514] bridge3: entered allmulticast mode [ 444.069564][T24526] openvswitch: netlink: IP tunnel dst address not specified [ 444.297758][T24536] sctp: [Deprecated]: syz.4.8832 (pid 24536) Use of struct sctp_assoc_value in delayed_ack socket option. [ 444.297758][T24536] Use struct sctp_sack_info instead [ 444.641932][T24559] netlink: 284 bytes leftover after parsing attributes in process `syz.1.8842'. [ 445.993264][T24647] veth0: entered promiscuous mode [ 446.002638][T24646] veth0: left promiscuous mode [ 446.727420][T24683] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8898'. [ 446.829533][T24687] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8901'. [ 447.794587][T24740] netlink: 'syz.0.8926': attribute type 1 has an invalid length. [ 447.803982][T24740] netlink: 'syz.0.8926': attribute type 10 has an invalid length. [ 447.825418][T24740] netlink: 236 bytes leftover after parsing attributes in process `syz.0.8926'. [ 448.372872][T24781] netlink: 'syz.0.8943': attribute type 1 has an invalid length. [ 448.410890][T24781] netlink: 212 bytes leftover after parsing attributes in process `syz.0.8943'. [ 448.421819][T24781] netlink: 'syz.0.8943': attribute type 1 has an invalid length. [ 448.841821][T24803] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8956'. [ 448.887916][T24803] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8956'. [ 449.361805][T24826] netlink: 52 bytes leftover after parsing attributes in process `syz.2.8966'. [ 449.422198][T24827] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8967'. [ 449.585054][T24840] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8973'. [ 449.649301][ T12] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 449.680017][ T12] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 449.688669][ T6083] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 449.903795][T24850] syz.3.8978 (24850) used greatest stack depth: 17896 bytes left [ 449.997561][ T6083] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 450.285578][T24880] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8991'. [ 450.669289][ T980] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 451.200086][T24921] netem: unknown loss type 0 [ 451.205042][T24921] netem: change failed [ 452.264854][T24985] __nla_validate_parse: 4 callbacks suppressed [ 452.264871][T24985] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9040'. [ 452.474910][T24998] netlink: 48 bytes leftover after parsing attributes in process `syz.0.9046'. [ 452.697838][T25009] batman_adv: batadv0: Adding interface: dummy0 [ 452.706573][T25009] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 452.741727][T25009] batman_adv: batadv0: Interface activated: dummy0 [ 452.812602][T25018] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9056'. [ 453.777496][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 453.800123][T25076] netlink: 'syz.4.9083': attribute type 2 has an invalid length. [ 453.954196][T25086] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9086'. [ 454.008490][T25088] netlink: 284 bytes leftover after parsing attributes in process `syz.1.9089'. [ 454.188360][ T3565] tipc: Subscription rejected, illegal request [ 454.345271][T25109] sctp: [Deprecated]: syz.1.9099 (pid 25109) Use of struct sctp_assoc_value in delayed_ack socket option. [ 454.345271][T25109] Use struct sctp_sack_info instead [ 454.345385][T25113] openvswitch: netlink: Multiple metadata blocks provided [ 454.547169][T25123] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 454.789764][T25141] netlink: 'syz.3.9113': attribute type 6 has an invalid length. [ 455.282606][T25170] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 455.326841][T25173] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9129'. [ 455.379012][T25173] xfrm1: entered promiscuous mode [ 455.384145][T25173] xfrm1: entered allmulticast mode [ 455.410787][T25173] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9129'. [ 455.599339][T25188] veth1_macvtap: left promiscuous mode [ 455.801094][T25203] netlink: 'syz.2.9144': attribute type 1 has an invalid length. [ 455.842391][T25203] netlink: 'syz.2.9144': attribute type 2 has an invalid length. [ 455.870314][T25203] netlink: 'syz.2.9144': attribute type 1 has an invalid length. [ 455.891341][T25203] netlink: 1156 bytes leftover after parsing attributes in process `syz.2.9144'. [ 455.912794][T25208] ip6gre0: Master is either lo or non-ether device [ 456.313786][T25233] netlink: 68 bytes leftover after parsing attributes in process `syz.0.9159'. [ 456.523202][T25249] netlink: 'syz.2.9167': attribute type 4 has an invalid length. [ 457.618644][T25316] af_packet: tpacket_rcv: packet too big, clamped from 112 to 4294967272. macoff=96 [ 458.363311][T25363] netlink: 'syz.2.9223': attribute type 21 has an invalid length. [ 458.372198][T25363] netlink: 128 bytes leftover after parsing attributes in process `syz.2.9223'. [ 458.382509][T25363] netlink: 'syz.2.9223': attribute type 4 has an invalid length. [ 458.392773][T25363] netlink: 'syz.2.9223': attribute type 5 has an invalid length. [ 458.418613][T25363] netlink: 3 bytes leftover after parsing attributes in process `syz.2.9223'. [ 458.453901][T25363] netlink: 'syz.2.9223': attribute type 21 has an invalid length. [ 458.467062][T25363] netlink: 128 bytes leftover after parsing attributes in process `syz.2.9223'. [ 458.480883][T25363] netlink: 3 bytes leftover after parsing attributes in process `syz.2.9223'. [ 459.228685][T25409] team0: Device wireguard0 is of different type [ 459.304718][T25419] netlink: 3 bytes leftover after parsing attributes in process `syz.0.9249'. [ 459.609211][T25435] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9256'. [ 459.845829][T25451] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 459.999520][T25459] netem: incorrect ge model size [ 460.060721][T25459] netem: change failed [ 460.474531][T25492] validate_nla: 2 callbacks suppressed [ 460.474549][T25492] netlink: 'syz.0.9283': attribute type 5 has an invalid length. [ 460.649300][T25503] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9289'. [ 460.669126][T25503] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9289'. [ 460.732567][T25508] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9292'. [ 460.845836][T25515] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9294'. [ 461.274384][T25544] netlink: 'syz.4.9307': attribute type 1 has an invalid length. [ 461.367672][T25545] nbd2: detected capacity change from 0 to 127 [ 461.377719][ T6105] block nbd2: Receive control failed (result -32) [ 461.523655][T25557] netlink: 'syz.2.9314': attribute type 5 has an invalid length. [ 462.417434][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 462.517545][T25605] tap0: tun_chr_ioctl cmd 2148553947 [ 463.615913][T25673] sctp: [Deprecated]: syz.2.9369 (pid 25673) Use of int in max_burst socket option deprecated. [ 463.615913][T25673] Use struct sctp_assoc_value instead [ 463.763966][T25683] __nla_validate_parse: 4 callbacks suppressed [ 463.763987][T25683] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9375'. [ 464.182242][T25713] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9390'. [ 464.375119][T25727] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9395'. [ 464.472280][T25732] netlink: 48 bytes leftover after parsing attributes in process `syz.1.9399'. [ 464.866107][T25757] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9410'. [ 465.172009][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807ae4f400: rx timeout, send abort [ 465.182945][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807ae4f400: 0x2fe01: (3) A timeout occurred and this is the connection abort to close the session. [ 465.341668][T25783] veth0: entered promiscuous mode [ 465.363979][T25782] veth0: left promiscuous mode [ 465.524349][T25798] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9429'. [ 465.843975][T25818] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9437'. [ 466.145886][T25838] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 466.551314][T25860] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9459'. [ 466.761096][T25872] netlink: 104 bytes leftover after parsing attributes in process `syz.3.9464'. [ 466.919944][T25878] netlink: 36 bytes leftover after parsing attributes in process `syz.0.9467'. [ 466.954508][T25878] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.962015][T25878] bridge0: port 1(bridge_slave_0) entered disabled state [ 467.323201][T25905] netlink: 'syz.2.9480': attribute type 1 has an invalid length. [ 467.728555][T25932] bond0: option mode: unable to set because the bond device has slaves [ 469.094650][T26018] __nla_validate_parse: 1 callbacks suppressed [ 469.094669][T26018] netlink: 165 bytes leftover after parsing attributes in process `syz.4.9534'. [ 469.190725][T26022] sch_fq: defrate 0 ignored. [ 469.374159][T26030] tun1: tun_chr_ioctl cmd 1074025675 [ 469.414789][T26030] tun1: persist disabled [ 470.299783][T26072] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9560'. [ 470.666955][T26086] netlink: 'syz.4.9567': attribute type 9 has an invalid length. [ 470.697455][T26086] netlink: 211988 bytes leftover after parsing attributes in process `syz.4.9567'. [ 471.403894][T26121] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9584'. [ 471.416855][T26121] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9584'. [ 471.816353][T26147] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 471.827813][ T6083] IPVS: starting estimator thread 0... [ 471.928115][T26149] IPVS: using max 29 ests per chain, 69600 per kthread [ 472.051117][T26159] bond2: entered promiscuous mode [ 472.056314][T26159] bond2: entered allmulticast mode [ 472.062058][T26159] 8021q: adding VLAN 0 to HW filter on device bond2 [ 472.178221][ T6101] Bluetooth: hci4: command 0x0406 tx timeout [ 472.252097][T26172] netlink: 36 bytes leftover after parsing attributes in process `syz.0.9608'. [ 472.253669][T26159] bond2 (unregistering): Released all slaves [ 472.559502][T26179] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9610'. [ 472.640633][T26185] netem: incorrect gi model size [ 472.667815][T26185] netem: change failed [ 472.754234][T26193] bridge0: port 2(erspan0) entered blocking state [ 472.776746][T26193] bridge0: port 2(erspan0) entered disabled state [ 472.794015][T26193] erspan0: entered allmulticast mode [ 472.818335][T26193] erspan0: left allmulticast mode [ 473.348270][T26208] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 473.379237][T26208] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 473.453564][T26230] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9635'. [ 473.536039][T26230] netlink: 'syz.1.9635': attribute type 1 has an invalid length. [ 473.537804][T26233] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9636'. [ 473.573692][T26230] netlink: 'syz.1.9635': attribute type 2 has an invalid length. [ 473.627343][ T13] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.657128][ T13] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 473.683137][ T49] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.718131][ T49] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 473.737459][ T49] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.746368][ T49] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 473.808055][T26247] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9643'. [ 473.856174][ T49] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.888188][ T49] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 474.002309][T26254] macvtap1: entered promiscuous mode [ 474.046616][T26254] vlan0: entered promiscuous mode [ 474.056174][T26254] macvtap1: entered allmulticast mode [ 474.062728][T26254] vlan0: entered allmulticast mode [ 474.068175][T26254] veth0_vlan: entered allmulticast mode [ 474.076007][T26262] veth0_to_bridge: entered promiscuous mode [ 474.100889][T26261] veth0_to_bridge: left promiscuous mode [ 474.287416][T26273] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9656'. [ 474.331000][T26273] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9656'. [ 474.575891][T26293] netlink: 284 bytes leftover after parsing attributes in process `syz.1.9665'. [ 474.938835][T26317] netlink: 68 bytes leftover after parsing attributes in process `syz.4.9676'. [ 475.278468][T26338] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 475.398291][T26346] veth0: entered promiscuous mode [ 475.418560][T26344] veth0: left promiscuous mode [ 475.582096][T26357] netlink: 'syz.2.9697': attribute type 39 has an invalid length. [ 475.703771][T26361] netlink: 52 bytes leftover after parsing attributes in process `syz.3.9699'. [ 476.221523][T26394] netlink: 'syz.1.9712': attribute type 2 has an invalid length. [ 476.267015][T26401] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 476.516571][T26414] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9721'. [ 477.736429][T26493] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9759'. [ 477.800451][T26495] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9760'. [ 477.855155][T26499] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.9761'. [ 477.885918][T26501] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9762'. [ 478.504832][T26542] veth0: entered promiscuous mode [ 478.519366][T26538] veth0: left promiscuous mode [ 479.409595][T26594] sch_fq: defrate 0 ignored. [ 479.494076][ T6105] block nbd3: Receive control failed (result -32) [ 479.574917][T26604] __nla_validate_parse: 6 callbacks suppressed [ 479.574935][T26604] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9815'. [ 479.867939][T26624] netlink: 104 bytes leftover after parsing attributes in process `syz.2.9822'. [ 480.583383][T26670] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.9844'. [ 480.616715][T26670] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 480.625957][T26670] openvswitch: netlink: Duplicate key (type 0). [ 481.123765][T26702] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9859'. [ 481.137088][T26703] 8021q: adding VLAN 0 to HW filter on device bond3 [ 481.150681][T26703] bond0: (slave bond3): Enslaving as an active interface with an up link [ 481.471307][T26722] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9869'. [ 481.543306][T26722] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9869'. [ 481.781143][T26743] netlink: 165 bytes leftover after parsing attributes in process `syz.3.9879'. [ 481.951169][T26751] veth0_macvtap: entered promiscuous mode [ 481.979964][T26751] macvtap2: entered allmulticast mode [ 481.985509][T26751] veth0_macvtap: entered allmulticast mode [ 482.275227][T26763] netlink: 'syz.3.9888': attribute type 1 has an invalid length. [ 482.292258][T26763] netlink: 'syz.3.9888': attribute type 4 has an invalid length. [ 482.300438][T26763] netlink: 188 bytes leftover after parsing attributes in process `syz.3.9888'. [ 482.310547][T26763] NCSI netlink: No device for ifindex 458760 [ 482.505272][T26775] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9893'. [ 483.149763][T26809] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9910'. [ 483.350499][T26818] netlink: 'syz.0.9914': attribute type 11 has an invalid length. [ 483.833574][T26848] sch_tbf: burst 0 is lower than device lo mtu (230) ! [ 484.918195][T26920] __nla_validate_parse: 5 callbacks suppressed [ 484.918213][T26920] netlink: 32 bytes leftover after parsing attributes in process `syz.3.9960'. [ 485.193852][T26936] netlink: 52 bytes leftover after parsing attributes in process `syz.2.9969'. [ 485.247081][T26940] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.9971'. [ 485.709088][T26963] syz.4.9981: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 485.730177][T26963] CPU: 1 UID: 0 PID: 26963 Comm: syz.4.9981 Not tainted 6.16.0-syzkaller-12084-g33caa208dba6 #0 PREEMPT(full) [ 485.730232][T26963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 485.730264][T26963] Call Trace: [ 485.730272][T26963] [ 485.730282][T26963] dump_stack_lvl+0x189/0x250 [ 485.730314][T26963] ? __pfx_dump_stack_lvl+0x10/0x10 [ 485.730338][T26963] ? __pfx__printk+0x10/0x10 [ 485.730364][T26963] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 485.730387][T26963] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 485.730411][T26963] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 485.730436][T26963] warn_alloc+0x214/0x310 [ 485.730464][T26963] ? stack_depot_save_flags+0x40/0x860 [ 485.730488][T26963] ? __pfx_warn_alloc+0x10/0x10 [ 485.730516][T26963] ? kasan_save_track+0x4f/0x80 [ 485.730540][T26963] ? xskq_create+0x56/0x170 [ 485.730558][T26963] ? xsk_init_queue+0xb0/0x110 [ 485.730576][T26963] ? xsk_setsockopt+0x4dc/0x8d0 [ 485.730600][T26963] ? do_sock_setsockopt+0x17c/0x1b0 [ 485.730623][T26963] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 485.730646][T26963] ? do_syscall_64+0xfa/0x3b0 [ 485.730667][T26963] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.730693][T26963] __vmalloc_node_range_noprof+0x125/0x12f0 [ 485.730747][T26963] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 485.730780][T26963] ? __kasan_kmalloc+0x93/0xb0 [ 485.730805][T26963] vmalloc_user_noprof+0xad/0xf0 [ 485.730830][T26963] ? xskq_create+0xbf/0x170 [ 485.730852][T26963] xskq_create+0xbf/0x170 [ 485.730876][T26963] xsk_init_queue+0xb0/0x110 [ 485.730901][T26963] xsk_setsockopt+0x4dc/0x8d0 [ 485.730924][T26963] ? __pfx_xsk_setsockopt+0x10/0x10 [ 485.730945][T26963] ? __pfx_aa_sk_perm+0x10/0x10 [ 485.730970][T26963] ? aa_sock_opt_perm+0xff/0x1b0 [ 485.730996][T26963] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 485.731014][T26963] ? __pfx_xsk_setsockopt+0x10/0x10 [ 485.731035][T26963] do_sock_setsockopt+0x17c/0x1b0 [ 485.731066][T26963] __x64_sys_setsockopt+0x13f/0x1b0 [ 485.731097][T26963] do_syscall_64+0xfa/0x3b0 [ 485.731117][T26963] ? lockdep_hardirqs_on+0x9c/0x150 [ 485.731138][T26963] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.731157][T26963] ? clear_bhb_loop+0x60/0xb0 [ 485.731179][T26963] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.731204][T26963] RIP: 0033:0x7f980618ebe9 [ 485.731226][T26963] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 485.731244][T26963] RSP: 002b:00007f980702e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 485.731265][T26963] RAX: ffffffffffffffda RBX: 00007f98063b5fa0 RCX: 00007f980618ebe9 [ 485.731278][T26963] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 485.731289][T26963] RBP: 00007f9806211e19 R08: 0000000000000004 R09: 0000000000000000 [ 485.731301][T26963] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 485.731313][T26963] R13: 00007f98063b6038 R14: 00007f98063b5fa0 R15: 00007ffc22dc1cc8 [ 485.731343][T26963] [ 485.731355][T26963] Mem-Info: [ 486.047636][T26963] active_anon:4323 inactive_anon:0 isolated_anon:0 [ 486.047636][T26963] active_file:1350 inactive_file:40037 isolated_file:0 [ 486.047636][T26963] unevictable:768 dirty:260 writeback:0 [ 486.047636][T26963] slab_reclaimable:11880 slab_unreclaimable:120023 [ 486.047636][T26963] mapped:28945 shmem:1367 pagetables:1238 [ 486.047636][T26963] sec_pagetables:0 bounce:0 [ 486.047636][T26963] kernel_misc_reclaimable:0 [ 486.047636][T26963] free:1305759 free_pcp:12468 free_cma:0 [ 486.138209][T26963] Node 0 active_anon:17392kB inactive_anon:0kB active_file:5400kB inactive_file:159948kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:115780kB dirty:1036kB writeback:0kB shmem:3932kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11888kB pagetables:4920kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 486.267706][T26963] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 486.344754][T26963] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 486.413557][T26963] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 486.457697][T26963] Node 0 DMA32 free:1310600kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:17444kB inactive_anon:0kB active_file:5400kB inactive_file:158352kB unevictable:1536kB writepending:1036kB present:3129332kB managed:2557520kB mlocked:0kB bounce:0kB free_pcp:35572kB local_pcp:21488kB free_cma:0kB [ 486.524104][T26963] lowmem_reserve[]: 0 0 1 1 1 [ 486.529197][T26963] Node 0 Normal free:0kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1596kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 486.630456][T26963] lowmem_reserve[]: 0 0 0 0 0 [ 486.658590][T26963] Node 1 Normal free:3896628kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:14720kB local_pcp:10112kB free_cma:0kB [ 486.749387][T26963] lowmem_reserve[]: 0 0 0 0 0 [ 486.754474][T26963] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 486.830137][T26963] Node 0 DMA32: 668*4kB (UME) 546*8kB (UME) 304*16kB (ME) 559*32kB (UME) 422*64kB (UME) 173*128kB (UM) 95*256kB (UM) 49*512kB (UM) 17*1024kB (UM) 9*2048kB (UM) 280*4096kB (UM) = 1311072kB [ 486.891107][T26963] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 486.923870][T26963] Node 1 Normal: 199*4kB (UME) 45*8kB (UME) 47*16kB (UME) 158*32kB (UME) 48*64kB (UME) 10*128kB (UME) 5*256kB (UME) 2*512kB (M) 2*1024kB (ME) 1*2048kB (E) 947*4096kB (M) = 3896628kB [ 486.945526][T26963] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 486.960736][T26963] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 486.970986][T26963] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 486.982050][T26963] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 486.991947][T26963] 42750 total pagecache pages [ 486.996971][T26963] 0 pages in swap cache [ 487.001474][T26963] Free swap = 124996kB [ 487.007160][T26963] Total swap = 124996kB [ 487.012150][T26963] 2097051 pages RAM [ 487.018259][T26963] 0 pages HighMem/MovableOnly [ 487.079987][T26963] 425645 pages reserved [ 487.112794][T26963] 0 pages cma reserved [ 487.146855][T27035] netlink: 232 bytes leftover after parsing attributes in process `syz.3.10014'. [ 487.283681][T27043] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10018'. [ 487.813919][T27078] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10035'. [ 488.071222][T27093] tipc: Enabling of bearer rejected, already enabled [ 488.474094][T27115] netlink: 'syz.3.10050': attribute type 21 has an invalid length. [ 488.501423][T27115] netlink: 152 bytes leftover after parsing attributes in process `syz.3.10050'. [ 488.544417][T27119] netlink: 'syz.4.10052': attribute type 9 has an invalid length. [ 488.578236][T27119] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10052'. [ 488.891441][T27143] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10063'. [ 489.260601][T27166] veth0: entered promiscuous mode [ 489.269878][T27163] veth0: left promiscuous mode [ 489.689116][T27190] netlink: 100 bytes leftover after parsing attributes in process `syz.3.10086'. [ 489.720406][T27192] netlink: 'syz.2.10087': attribute type 11 has an invalid length. [ 489.996913][T27212] __nla_validate_parse: 3 callbacks suppressed [ 489.996940][T27212] netlink: 81 bytes leftover after parsing attributes in process `syz.2.10096'. [ 490.973239][T27274] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 491.036935][T27274] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 492.023423][T27312] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10141'. [ 492.060188][T27318] netlink: 'syz.0.10143': attribute type 9 has an invalid length. [ 492.086562][T27318] netlink: 212260 bytes leftover after parsing attributes in process `syz.0.10143'. [ 492.697405][T27356] netlink: 104 bytes leftover after parsing attributes in process `syz.1.10164'. [ 492.751415][T27362] dvmrp0: entered allmulticast mode [ 492.782385][T27362] dvmrp0: left allmulticast mode [ 492.837668][T27366] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10167'. [ 492.890859][T27369] netlink: 'syz.1.10169': attribute type 1 has an invalid length. [ 492.932773][T27369] netlink: 172 bytes leftover after parsing attributes in process `syz.1.10169'. [ 492.977440][T27369] netlink: 'syz.1.10169': attribute type 1 has an invalid length. [ 493.033170][T27375] netlink: 84 bytes leftover after parsing attributes in process `syz.0.10171'. [ 493.172500][T27381] netlink: 32 bytes leftover after parsing attributes in process `syz.1.10175'. [ 493.625098][T27412] openvswitch: netlink: VXLAN extension 173 out of range max 1 [ 494.661464][T27478] 8021q: adding VLAN 0 to HW filter on device team0 [ 494.686536][T27478] batman_adv: batadv0: Interface activated: team0 [ 494.716900][T27478] batman_adv: batadv0: Interface deactivated: team0 [ 494.745798][T27478] batman_adv: batadv0: Removing interface: team0 [ 494.765825][T27478] team0: Cannot enslave team device to itself [ 494.786936][T27487] openvswitch: netlink: IPv4 tunnel dst address is zero [ 495.093543][T27506] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10229'. [ 495.117371][T27509] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10231'. [ 495.130978][T27506] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10229'. [ 495.165532][T27509] team_slave_0: entered promiscuous mode [ 495.171546][T27509] team_slave_1: entered promiscuous mode [ 495.233626][T27506] gretap0: entered promiscuous mode [ 495.250848][T27514] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10233'. [ 495.265346][T27506] gretap0: left promiscuous mode [ 495.289202][T27517] netlink: 32 bytes leftover after parsing attributes in process `syz.0.10235'. [ 495.417681][T27522] vxcan1: tx address claim with dlc 1 [ 495.457491][ T6101] Bluetooth: hci4: command 0x0406 tx timeout [ 496.180324][T27577] netlink: 44 bytes leftover after parsing attributes in process `syz.3.10261'. [ 496.217046][T27577] netlink: 44 bytes leftover after parsing attributes in process `syz.3.10261'. [ 496.836937][T27621] netlink: 'syz.1.10280': attribute type 1 has an invalid length. [ 496.847181][T27624] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10281'. [ 496.866732][T27624] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10281'. [ 496.894499][T27624] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10281'. [ 497.374769][T27649] veth0: entered promiscuous mode [ 497.394706][T27649] veth0: left promiscuous mode [ 498.428419][ C1] ------------[ cut here ]------------ [ 498.433942][ C1] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0x0 with flags 0x0 [ 498.444821][ C1] WARNING: CPU: 1 PID: 23 at net/mac80211/rate.c:403 __rate_control_send_low+0x5df/0x820 [ 498.454720][ C1] Modules linked in: [ 498.458675][ C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Not tainted 6.16.0-syzkaller-12084-g33caa208dba6 #0 PREEMPT(full) [ 498.470271][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 498.480417][ C1] RIP: 0010:__rate_control_send_low+0x5df/0x820 [ 498.486693][ C1] Code: 38 0f b6 04 28 84 c0 0f 85 d7 01 00 00 41 8b 0f 48 c7 c7 60 60 b0 8c 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 e8 82 13 94 f6 90 <0f> 0b 90 90 e9 73 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c [ 498.506540][ C1] RSP: 0018:ffffc900001d7258 EFLAGS: 00010246 [ 498.512662][ C1] RAX: 073d6bb01a3bb700 RBX: 000000000000000c RCX: ffff88801d685a00 [ 498.520692][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 498.528746][ C1] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 498.536743][ C1] R10: dffffc0000000000 R11: fffffbfff1bfa1ec R12: ffff8880560502a8 [ 498.544782][ C1] R13: 0000000000000000 R14: ffff88802ff30e40 R15: ffff88802ff330d8 [ 498.552825][ C1] FS: 0000000000000000(0000) GS:ffff888125d21000(0000) knlGS:0000000000000000 [ 498.561890][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 498.568521][ C1] CR2: 00005636d793c660 CR3: 0000000055cd2000 CR4: 00000000003526f0 [ 498.576510][ C1] Call Trace: [ 498.579833][ C1] [ 498.582792][ C1] rate_control_send_low+0x194/0x7a0 [ 498.588141][ C1] rate_control_get_rate+0x20b/0x5d0 [ 498.593464][ C1] ieee80211_beacon_get_finish+0x39a/0x6c0 [ 498.599357][ C1] ? __pfx_ieee80211_beacon_get_finish+0x10/0x10 [ 498.605712][ C1] ? __local_bh_enable_ip+0x12d/0x1c0 [ 498.611150][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 498.616923][ C1] ieee80211_beacon_get_ap+0x1868/0x1f30 [ 498.622633][ C1] ? __pfx_ieee80211_beacon_get_ap+0x10/0x10 [ 498.628685][ C1] ? __ieee80211_beacon_get+0x36/0x1880 [ 498.634257][ C1] ? __ieee80211_beacon_get+0x36/0x1880 [ 498.639937][ C1] ? smpboot_thread_fn+0x53f/0xa60 [ 498.645072][ C1] ? __ieee80211_beacon_get+0x36/0x1880 [ 498.650962][ C1] __ieee80211_beacon_get+0x118e/0x1880 [ 498.656548][ C1] ? __ieee80211_beacon_get+0x36/0x1880 [ 498.662177][ C1] ieee80211_beacon_get_tim+0xb4/0x2b0 [ 498.667724][ C1] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 498.673831][ C1] mac80211_hwsim_beacon_tx+0x3ce/0x860 [ 498.679450][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 498.686706][ C1] __iterate_interfaces+0x2ab/0x590 [ 498.691969][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 498.698092][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 498.705316][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 498.711470][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 498.718572][ C1] mac80211_hwsim_beacon+0xbb/0x1c0 [ 498.723791][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 498.729652][ C1] __hrtimer_run_queues+0x52c/0xc60 [ 498.734901][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 498.740672][ C1] ? read_tsc+0x9/0x20 [ 498.744771][ C1] hrtimer_run_softirq+0x187/0x2b0 [ 498.749938][ C1] handle_softirqs+0x283/0x870 [ 498.754725][ C1] ? run_ksoftirqd+0x9b/0x100 [ 498.759465][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 498.764770][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 498.769841][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 498.774882][ C1] run_ksoftirqd+0x9b/0x100 [ 498.779436][ C1] ? __pfx_run_ksoftirqd+0x10/0x10 [ 498.784574][ C1] smpboot_thread_fn+0x53f/0xa60 [ 498.789575][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 498.794627][ C1] kthread+0x70e/0x8a0 [ 498.798757][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 498.804248][ C1] ? __pfx_kthread+0x10/0x10 [ 498.808899][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 498.814150][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 498.819409][ C1] ? __pfx_kthread+0x10/0x10 [ 498.824023][ C1] ret_from_fork+0x3fc/0x770 [ 498.828667][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 498.833821][ C1] ? __switch_to_asm+0x39/0x70 [ 498.838649][ C1] ? __switch_to_asm+0x33/0x70 [ 498.843447][ C1] ? __pfx_kthread+0x10/0x10 [ 498.848100][ C1] ret_from_fork_asm+0x1a/0x30 [ 498.852903][ C1] [ 498.855932][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 498.863213][ C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Not tainted 6.16.0-syzkaller-12084-g33caa208dba6 #0 PREEMPT(full) [ 498.874743][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 498.884787][ C1] Call Trace: [ 498.888055][ C1] [ 498.890974][ C1] dump_stack_lvl+0x99/0x250 [ 498.895564][ C1] ? __asan_memcpy+0x40/0x70 [ 498.900165][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 498.905354][ C1] ? __pfx__printk+0x10/0x10 [ 498.909960][ C1] vpanic+0x281/0x750 [ 498.913943][ C1] ? __pfx__printk+0x10/0x10 [ 498.918527][ C1] ? __pfx_vpanic+0x10/0x10 [ 498.923017][ C1] ? is_bpf_text_address+0x292/0x2b0 [ 498.928302][ C1] panic+0xb9/0xc0 [ 498.932013][ C1] ? __pfx_panic+0x10/0x10 [ 498.936464][ C1] __warn+0x31b/0x4b0 [ 498.940444][ C1] ? __rate_control_send_low+0x5df/0x820 [ 498.946070][ C1] ? __rate_control_send_low+0x5df/0x820 [ 498.951693][ C1] report_bug+0x2be/0x4f0 [ 498.956010][ C1] ? __rate_control_send_low+0x5df/0x820 [ 498.961632][ C1] ? __rate_control_send_low+0x5df/0x820 [ 498.967257][ C1] ? __rate_control_send_low+0x5e1/0x820 [ 498.972881][ C1] handle_bug+0x84/0x160 [ 498.977117][ C1] exc_invalid_op+0x1a/0x50 [ 498.981613][ C1] asm_exc_invalid_op+0x1a/0x20 [ 498.986474][ C1] RIP: 0010:__rate_control_send_low+0x5df/0x820 [ 498.992711][ C1] Code: 38 0f b6 04 28 84 c0 0f 85 d7 01 00 00 41 8b 0f 48 c7 c7 60 60 b0 8c 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 e8 82 13 94 f6 90 <0f> 0b 90 90 e9 73 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c [ 499.012302][ C1] RSP: 0018:ffffc900001d7258 EFLAGS: 00010246 [ 499.018361][ C1] RAX: 073d6bb01a3bb700 RBX: 000000000000000c RCX: ffff88801d685a00 [ 499.026319][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 499.034301][ C1] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 499.042261][ C1] R10: dffffc0000000000 R11: fffffbfff1bfa1ec R12: ffff8880560502a8 [ 499.050227][ C1] R13: 0000000000000000 R14: ffff88802ff30e40 R15: ffff88802ff330d8 [ 499.058200][ C1] ? __rate_control_send_low+0x5de/0x820 [ 499.063840][ C1] rate_control_send_low+0x194/0x7a0 [ 499.069209][ C1] rate_control_get_rate+0x20b/0x5d0 [ 499.074498][ C1] ieee80211_beacon_get_finish+0x39a/0x6c0 [ 499.080305][ C1] ? __pfx_ieee80211_beacon_get_finish+0x10/0x10 [ 499.086618][ C1] ? __local_bh_enable_ip+0x12d/0x1c0 [ 499.091980][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 499.097690][ C1] ieee80211_beacon_get_ap+0x1868/0x1f30 [ 499.103408][ C1] ? __pfx_ieee80211_beacon_get_ap+0x10/0x10 [ 499.109384][ C1] ? __ieee80211_beacon_get+0x36/0x1880 [ 499.114925][ C1] ? __ieee80211_beacon_get+0x36/0x1880 [ 499.120463][ C1] ? smpboot_thread_fn+0x53f/0xa60 [ 499.125566][ C1] ? __ieee80211_beacon_get+0x36/0x1880 [ 499.131105][ C1] __ieee80211_beacon_get+0x118e/0x1880 [ 499.136645][ C1] ? __ieee80211_beacon_get+0x36/0x1880 [ 499.142188][ C1] ieee80211_beacon_get_tim+0xb4/0x2b0 [ 499.147645][ C1] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 499.153716][ C1] mac80211_hwsim_beacon_tx+0x3ce/0x860 [ 499.159259][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 499.166453][ C1] __iterate_interfaces+0x2ab/0x590 [ 499.171649][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 499.177709][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 499.184898][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 499.190955][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 499.197971][ C1] mac80211_hwsim_beacon+0xbb/0x1c0 [ 499.203157][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 499.208952][ C1] __hrtimer_run_queues+0x52c/0xc60 [ 499.214154][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 499.219856][ C1] ? read_tsc+0x9/0x20 [ 499.223923][ C1] hrtimer_run_softirq+0x187/0x2b0 [ 499.229022][ C1] handle_softirqs+0x283/0x870 [ 499.233773][ C1] ? run_ksoftirqd+0x9b/0x100 [ 499.238439][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 499.243714][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 499.248741][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 499.253803][ C1] run_ksoftirqd+0x9b/0x100 [ 499.258314][ C1] ? __pfx_run_ksoftirqd+0x10/0x10 [ 499.263425][ C1] smpboot_thread_fn+0x53f/0xa60 [ 499.268353][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 499.273369][ C1] kthread+0x70e/0x8a0 [ 499.277433][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 499.282887][ C1] ? __pfx_kthread+0x10/0x10 [ 499.287471][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 499.292656][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 499.297878][ C1] ? __pfx_kthread+0x10/0x10 [ 499.302548][ C1] ret_from_fork+0x3fc/0x770 [ 499.307131][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 499.312239][ C1] ? __switch_to_asm+0x39/0x70 [ 499.317001][ C1] ? __switch_to_asm+0x33/0x70 [ 499.321756][ C1] ? __pfx_kthread+0x10/0x10 [ 499.326344][ C1] ret_from_fork_asm+0x1a/0x30 [ 499.331200][ C1] [ 499.334472][ C1] Kernel Offset: disabled [ 499.338781][ C1] Rebooting in 86400 seconds..