last executing test programs: 2.021212492s ago: executing program 0 (id=7699): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) preadv(r1, &(0x7f00000004c0)=[{&(0x7f00000005c0)=""/240, 0xf0}], 0x1, 0x200, 0x0) 1.874761306s ago: executing program 3 (id=7701): r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e1f, @remote}, 0x10) setsockopt$sock_linger(r0, 0x1, 0x3d, &(0x7f0000000080), 0x8) sendmmsg$sock(r0, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@txtime={{0x18, 0x1, 0x3d, 0x20}}], 0x18}}], 0x1, 0x20000844) 1.865943512s ago: executing program 0 (id=7703): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)={0x30, r2, 0x1, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000004}, 0xc000) 1.718492349s ago: executing program 3 (id=7706): r0 = socket$inet6(0xa, 0x1, 0x84) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4) sendto$inet6(r0, &(0x7f00000002c0)='\x00', 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r0, 0x84, 0x6d, &(0x7f0000002280)=""/4086, &(0x7f0000000040)=0xff6) 1.630721423s ago: executing program 0 (id=7708): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x59}]}]}]}, 0x2c}}, 0x0) 1.476668964s ago: executing program 1 (id=7712): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r1, 0x8000000000000003}, 0x18) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={0x0}, 0x1, 0x0, 0x0, 0x18000}, 0x20006043) 1.312022191s ago: executing program 4 (id=7714): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) getsockopt$sock_buf(r0, 0x1, 0x1f, &(0x7f0000000240)=""/21, &(0x7f0000000280)=0x15) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x503}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x4}, @IFLA_VLAN_ID={0x6, 0x1, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004800}, 0x0) 1.287486097s ago: executing program 1 (id=7715): r0 = socket$inet(0xa, 0x801, 0x84) listen(r0, 0x8) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000001590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) 1.246920379s ago: executing program 2 (id=7716): r0 = socket$nl_audit(0x10, 0x3, 0x9) r1 = socket$nl_audit(0x10, 0x3, 0x9) bind$netlink(r1, &(0x7f00000001c0)={0x10, 0x0, 0x25dfdbff}, 0xc) bind$netlink(r0, &(0x7f0000000200)={0x10, 0x0, 0x25dfdbff, 0x2000}, 0xc) 1.181009522s ago: executing program 0 (id=7717): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x1c}}, 0x0) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0100000000180000000002"], 0x1c}}, 0x0) 1.106787236s ago: executing program 1 (id=7718): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f000000c300)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14}}, 0x68}}, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2c000000170a010200000000000040000200fffd0900010073797a30"], 0x2c}}, 0x0) 1.096705647s ago: executing program 2 (id=7719): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x2c, 0x0, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8}]}]}, 0x46}}, 0x4004) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0xa0, 0x30, 0x51b, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}, @m_ct={0x2c, 0x1, 0x0, 0x0, {{0x7}, {0x4}, {0xffffffffffffff0b}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0xa0}}, 0x0) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180100002e0001"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) 1.01398522s ago: executing program 4 (id=7720): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) r1 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_SIOCGIFADDR(r1, 0x8915, 0x0) 940.176187ms ago: executing program 0 (id=7721): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r0, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 897.09889ms ago: executing program 1 (id=7722): sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xffffffffffffff18, &(0x7f0000000100)=[{&(0x7f0000000000)="2f0000001c0005c5ffffff000d000000020000000b000000ec0091c913000180f0ffffeb", 0x1dd}], 0x1}, 0x0) r0 = socket(0x10, 0x80002, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="fc0000001c00071bab0925000900070007ab08000c000000f0007e93210001c000000000000000000000000000039915fa2c1ec28670e9889bb94b46fe0000000a0002", 0xff82) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x3, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492856, 0x0) 845.549894ms ago: executing program 2 (id=7723): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'tunl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5}, @IFLA_IPTUN_FWMARK={0x8}]}}}]}, 0x44}}, 0x0) 793.163908ms ago: executing program 4 (id=7724): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x300000d, 0x13, r0, 0xd7735000) r1 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r1, 0x28, 0x6, &(0x7f0000000080)={0x0, 0xea60}, 0x10) 726.532941ms ago: executing program 0 (id=7725): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e21, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0xff}, 0x1c) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000000)) 715.132395ms ago: executing program 3 (id=7726): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x4e20, 0x5, @private2, 0x9}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x83, &(0x7f0000000180)={r1, 0xf9, 0x20}, &(0x7f0000000500)=0xc) 568.91852ms ago: executing program 2 (id=7727): accept$alg(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0xa, 0x1f}]}, 0x34}}, 0x0) 542.973864ms ago: executing program 1 (id=7728): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000100)={r1}, 0x8) 530.852193ms ago: executing program 4 (id=7729): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x96) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f0000000740)=@framed={{}, [@snprintf={{0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x8, 0xfe00}, {0x7, 0x0, 0x8}, {}, {0x5}, {0x7, 0x0, 0x2, 0x0}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x49}}]}, &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="7638300c000000000000e9000000", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 513.625536ms ago: executing program 3 (id=7730): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_REFILL_DELAY={0x8, 0x9, 0xfffffffd}]}}]}, 0x38}}, 0x0) 331.694853ms ago: executing program 4 (id=7731): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)={0x28, r2, 0x1, 0x0, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}}, 0x0) 316.867023ms ago: executing program 2 (id=7732): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000ac0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8015) 276.36753ms ago: executing program 3 (id=7733): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000700)={0x2c, r1, 0x1, 0x7ffffe, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_WME={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 227.273657ms ago: executing program 1 (id=7734): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) 140.52458ms ago: executing program 4 (id=7735): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@bridge_delneigh={0x28, 0x1c, 0x1, 0x2000, 0x0, {0x7, 0x0, 0x0, r1, 0x8, 0xb2}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x40800) 97.336352ms ago: executing program 2 (id=7736): syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000014000000080016000000000018000180140002006e657464657673696d3000000000000008001500000000020800130000000000080014"], 0x4c}}, 0x0) 0s ago: executing program 3 (id=7737): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030030000b12d25a80648c2594f91124fc60100c03", 0x17}], 0x1}, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl(r0, 0x8b32, &(0x7f0000000040)) kernel console output (not intermixed with test programs): 0 port 6081 - 0 [ 102.275212][ T5846] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.290703][ T5846] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.313821][ T5852] veth1_macvtap: entered promiscuous mode [ 102.345188][ T5845] veth1_vlan: entered promiscuous mode [ 102.367343][ T5851] veth0_macvtap: entered promiscuous mode [ 102.414524][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.424913][ T5851] veth1_macvtap: entered promiscuous mode [ 102.469208][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.524586][ T5852] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.534839][ T5852] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.546060][ T5852] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.555817][ T5852] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.575832][ T5845] veth0_macvtap: entered promiscuous mode [ 102.622711][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.638457][ T5845] veth1_macvtap: entered promiscuous mode [ 102.666782][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.685865][ T2918] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.704125][ T2918] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.736430][ T5857] veth0_vlan: entered promiscuous mode [ 102.780792][ T5857] veth1_vlan: entered promiscuous mode [ 102.790240][ T2918] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.791586][ T5851] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.800752][ T2918] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.819001][ T5851] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.828531][ T5851] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.838392][ T5851] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.878499][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.934679][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.972467][ T5845] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.982069][ T5845] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.991955][ T5845] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.001475][ T5845] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.072438][ T5846] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 103.125360][ T2918] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.145888][ T2918] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.186952][ T5857] veth0_macvtap: entered promiscuous mode [ 103.225395][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.244305][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.253253][ T5857] veth1_macvtap: entered promiscuous mode [ 103.356223][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.385071][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.421293][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.448206][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.466761][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.486592][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.503897][ T5857] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.514378][ T5857] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.525565][ T5857] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.530134][ T5855] Bluetooth: hci1: command tx timeout [ 103.534401][ T5864] Bluetooth: hci0: command tx timeout [ 103.546431][ T5857] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.605460][ T5864] Bluetooth: hci4: command tx timeout [ 103.605477][ T5855] Bluetooth: hci3: command tx timeout [ 103.608791][ T5855] Bluetooth: hci2: command tx timeout [ 103.696879][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.748574][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.830754][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.864643][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.142011][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.211408][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.388848][ T1148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.441173][ T1148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.877797][ T6103] IPv6: addrconf: prefix option has invalid lifetime [ 108.068280][ T6111] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 114.598986][ T6362] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 120.246474][ T6578] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0x2 [ 122.106568][ T6645] can: request_module (can-proto-0) failed. [ 124.588930][ T6752] ip_tunnel: non-ECT from 2.0.0.0 with TOS=0x3 [ 133.297966][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.304764][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.574750][ T7257] delete_channel: no stack [ 150.565782][ T7736] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 150.686761][ T7744] No such timeout policy "syz0" [ 150.859268][ T7748] netlink: 8 bytes leftover after parsing attributes in process `syz.3.882'. [ 150.971845][ T7754] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 151.809450][ T7785] openvswitch: netlink: Missing valid actions attribute. [ 151.816790][ T7785] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 151.951999][ T7790] netlink: 'syz.3.903': attribute type 1 has an invalid length. [ 151.979217][ T7790] netlink: 224 bytes leftover after parsing attributes in process `syz.3.903'. [ 152.595667][ T7810] openvswitch: netlink: Message has 199 unknown bytes. [ 152.624381][ T7810] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 153.524631][ T7841] openvswitch: netlink: Missing key (keys=40, expected=80) [ 153.991143][ T7854] xt_hashlimit: overflow, rate too high: 0 [ 154.155292][ T7860] dvmrp0: entered allmulticast mode [ 154.509602][ T7870] xt_cluster: you have exceeded the maximum number of cluster nodes (257 > 32) [ 154.571788][ T7874] netlink: 'syz.1.946': attribute type 18 has an invalid length. [ 154.656018][ T7874] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 154.657977][ T7878] netlink: 4 bytes leftover after parsing attributes in process `syz.0.947'. [ 154.665508][ T7874] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 154.683115][ T7874] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 154.692025][ T7874] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 155.168835][ T7891] netlink: 'syz.3.953': attribute type 24 has an invalid length. [ 155.372996][ T7896] xt_l2tp: missing protocol rule (udp|l2tpip) [ 155.607493][ T7904] netlink: 64 bytes leftover after parsing attributes in process `syz.3.960'. [ 155.778868][ T7913] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 157.788927][ T8010] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 158.450503][ T8034] warning: `syz.0.999' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 158.584166][ T8038] netlink: 'syz.1.1001': attribute type 32 has an invalid length. [ 158.944831][ T8052] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1007'. [ 159.099180][ T8052] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 160.191689][ T8103] netlink: 'syz.0.1032': attribute type 10 has an invalid length. [ 160.492691][ T8111] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1036'. [ 160.561294][ T8111] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1036'. [ 160.669420][ T8119] No such timeout policy "syz0" [ 160.817581][ T8121] No such timeout policy "syz0" [ 161.443652][ T8146] netlink: 'syz.1.1053': attribute type 1 has an invalid length. [ 161.473824][ T8146] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1053'. [ 161.526887][ T8151] netlink: 'syz.4.1056': attribute type 25 has an invalid length. [ 161.654112][ T8154] netlink: 'syz.3.1057': attribute type 23 has an invalid length. [ 161.671927][ T8155] netlink: 'syz.2.1058': attribute type 7 has an invalid length. [ 161.992942][ T8169] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1065'. [ 162.289778][ T8179] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1069'. [ 162.888492][ T8203] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1080'. [ 162.936766][ T8203] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1080'. [ 163.001102][ T8203] gretap1: entered promiscuous mode [ 163.023662][ T8203] gretap1: entered allmulticast mode [ 163.141589][ T8207] Cannot find del_set index 17 as target [ 163.819068][ T8235] netlink: 'syz.4.1098': attribute type 21 has an invalid length. [ 163.840192][ T8235] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1098'. [ 164.160973][ T8249] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 164.417821][ T8257] xt_ecn: cannot match TCP bits for non-tcp packets [ 164.818649][ T8274] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 165.398188][ T8295] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1128'. [ 165.459716][ T8299] netlink: 'syz.0.1130': attribute type 1 has an invalid length. [ 165.488358][ T8299] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1130'. [ 165.508136][ T8299] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1130'. [ 165.654945][ T8307] netlink: 'syz.4.1134': attribute type 11 has an invalid length. [ 165.696599][ T8307] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1134'. [ 166.412949][ T8333] xt_recent: hitcount (4294967295) is larger than allowed maximum (65535) [ 166.775735][ T8345] netlink: 'syz.0.1151': attribute type 6 has an invalid length. [ 167.259958][ T8360] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1156'. [ 167.956059][ T8388] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1162'. [ 168.571192][ T8406] xt_CT: You must specify a L4 protocol and not use inversions on it [ 169.631497][ T8443] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1189'. [ 169.671601][ T8443] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1189'. [ 170.117296][ T8456] netlink: 'syz.0.1195': attribute type 1 has an invalid length. [ 171.448400][ T8497] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1214'. [ 171.567289][ T8500] No such timeout policy "syz0" [ 171.876701][ T8512] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 171.899506][ T8511] lo speed is unknown, defaulting to 1000 [ 171.905907][ T8511] lo speed is unknown, defaulting to 1000 [ 171.950392][ T8511] lo speed is unknown, defaulting to 1000 [ 171.985235][ T8511] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 172.011623][ T8511] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 172.080725][ T8511] lo speed is unknown, defaulting to 1000 [ 172.090375][ T8511] lo speed is unknown, defaulting to 1000 [ 172.099766][ T8511] lo speed is unknown, defaulting to 1000 [ 172.108209][ T8511] lo speed is unknown, defaulting to 1000 [ 172.119854][ T8511] lo speed is unknown, defaulting to 1000 [ 172.553950][ T8528] sock: sock_timestamping_bind_phc: sock not bind to device [ 172.938205][ T8540] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1237'. [ 172.987482][ T8542] ip6t_srh: unknown srh invflags 5F00 [ 174.752596][ T8588] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 174.848290][ T8594] netlink: 'syz.1.1262': attribute type 10 has an invalid length. [ 174.907534][ T8594] veth0_macvtap: left promiscuous mode [ 175.336508][ T8608] syz.2.1270 uses obsolete (PF_INET,SOCK_PACKET) [ 175.404150][ T8608] hsr0: entered promiscuous mode [ 175.424343][ T8608] hsr0: entered allmulticast mode [ 175.446492][ T8608] hsr_slave_0: entered allmulticast mode [ 175.459389][ T8608] hsr_slave_1: entered allmulticast mode [ 175.464793][ T8610] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1271'. [ 175.505421][ T8610] netlink: 244 bytes leftover after parsing attributes in process `syz.3.1271'. [ 175.753454][ T8620] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1275'. [ 175.801061][ T8620] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1275'. [ 175.845963][ T8620] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1275'. [ 175.978153][ T8624] netlink: 'syz.0.1278': attribute type 49 has an invalid length. [ 176.104650][ T8629] xt_CT: You must specify a L4 protocol and not use inversions on it [ 176.242582][ T8632] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1282'. [ 176.264083][ T8634] nbd: couldn't find a device at index -373156329 [ 176.518242][ T8641] netlink: 'syz.2.1287': attribute type 8 has an invalid length. [ 177.448287][ T8666] x_tables: duplicate underflow at hook 1 [ 177.512371][ T8668] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1300'. [ 177.758611][ T8675] IPVS: set_ctl: invalid protocol: 58 224.0.0.2:20000 [ 178.145370][ T8688] netlink: 'syz.1.1310': attribute type 10 has an invalid length. [ 178.221455][ T8688] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 178.246859][ T8688] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 178.489846][ T8697] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1315'. [ 178.528431][ T8697] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1315'. [ 178.578463][ T8697] netlink: 'syz.1.1315': attribute type 6 has an invalid length. [ 178.602814][ T8697] netlink: 'syz.1.1315': attribute type 5 has an invalid length. [ 178.616002][ T8700] mac80211_hwsim hwsim8 ÿ: renamed from wlan1 (while UP) [ 178.665457][ T8697] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1315'. [ 178.702503][ T8704] netlink: 'syz.4.1318': attribute type 3 has an invalid length. [ 179.206125][ T8718] netlink: 'syz.4.1325': attribute type 3 has an invalid length. [ 179.241550][ T8718] netlink: 666 bytes leftover after parsing attributes in process `syz.4.1325'. [ 181.232749][ T8766] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 181.360066][ T8793] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 181.752377][ T8805] netlink: 'syz.3.1368': attribute type 3 has an invalid length. [ 181.864749][ T8808] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1369'. [ 181.978137][ T8808] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1369'. [ 182.070423][ T8816] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1373'. [ 182.297335][ T8821] delete_channel: no stack [ 182.481633][ T5855] Bluetooth: hci0: command 0x0c20 tx timeout [ 182.708535][ T8835] delete_channel: no stack [ 183.018987][ T8845] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1387'. [ 183.054317][ T8845] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1387'. [ 183.887399][ T8872] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1400'. [ 185.636365][ T8928] openvswitch: netlink: IP tunnel dst address not specified [ 187.211678][ T8953] DRBG: could not allocate digest TFM handle: hmac(sha512) [ 187.508237][ T8987] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1453'. [ 187.749698][ T8998] netlink: 'syz.1.1458': attribute type 1 has an invalid length. [ 188.083762][ T9012] xt_l2tp: v2 doesn't support IP mode [ 188.094412][ T9013] netlink: 'syz.3.1465': attribute type 11 has an invalid length. [ 188.137131][ T9013] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1465'. [ 188.284934][ T9019] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1469'. [ 188.384374][ T9019] netlink: 21 bytes leftover after parsing attributes in process `syz.1.1469'. [ 188.451374][ T9023] openvswitch: netlink: IP tunnel dst address not specified [ 188.488001][ T9019] netlink: 21 bytes leftover after parsing attributes in process `syz.1.1469'. [ 188.907741][ T9035] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1478'. [ 189.008889][ T9039] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1479'. [ 189.044991][ T9043] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1480'. [ 189.253367][ T9046] ieee802154 phy0 wpan0: encryption failed: -90 [ 189.363888][ T9051] xt_SECMARK: invalid mode: 0 [ 190.085983][ T9076] netlink: 'syz.1.1495': attribute type 15 has an invalid length. [ 190.098301][ T9077] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1496'. [ 190.138062][ T9076] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1495'. [ 190.787409][ T9097] netlink: 300 bytes leftover after parsing attributes in process `syz.0.1505'. [ 191.198692][ T9113] netlink: 'syz.4.1513': attribute type 10 has an invalid length. [ 191.262837][ T9113] batman_adv: batadv0: Adding interface: team0 [ 191.312350][ T9113] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.450434][ T9113] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 192.125130][ T9141] IPv6: NLM_F_REPLACE set, but no existing node found! [ 192.461333][ T9153] bond0: entered allmulticast mode [ 192.466632][ T9153] bond_slave_0: entered allmulticast mode [ 192.523513][ T9153] bond_slave_1: entered allmulticast mode [ 193.361062][ T9183] __nla_validate_parse: 5 callbacks suppressed [ 193.361085][ T9183] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1548'. [ 193.722644][ T9196] openvswitch: netlink: Key type 272 is out of range max 32 [ 194.342438][ T9219] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 194.721385][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.738073][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.794589][ T9235] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1574'. [ 195.101388][ T9246] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 195.105464][ T9248] tc_dump_action: action bad kind [ 195.331319][ T9254] netlink: 'syz.0.1581': attribute type 2 has an invalid length. [ 195.998290][ T9280] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1595'. [ 196.103910][ T9280] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 196.178476][ T9280] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 196.214015][ T9280] gretap1: entered promiscuous mode [ 196.236800][ T9280] gretap1: entered allmulticast mode [ 196.382826][ T9296] netlink: 'syz.1.1601': attribute type 10 has an invalid length. [ 196.413658][ T9296] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.438282][ T9296] bridge_slave_1: left allmulticast mode [ 196.474197][ T9298] Cannot find add_set index 0 as target [ 196.508220][ T9296] bridge_slave_1: left promiscuous mode [ 196.568353][ T9296] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.637429][ T9296] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 196.707039][ T9305] netlink: 'syz.4.1607': attribute type 2 has an invalid length. [ 196.813081][ T9308] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1608'. [ 197.473054][ T9331] gre1: entered promiscuous mode [ 197.498028][ T9331] gre1: entered allmulticast mode [ 197.747537][ T9341] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1624'. [ 198.351863][ T9364] xt_hashlimit: max too large, truncated to 1048576 [ 199.128742][ T9397] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1651'. [ 199.357949][ T9405] ipt_REJECT: TCP_RESET invalid for non-tcp [ 200.216458][ T9435] netlink: 'syz.0.1669': attribute type 1 has an invalid length. [ 200.269956][ T9435] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1669'. [ 201.108160][ T9466] Illegal XDP return value 1609816699 on prog (id 167) dev N/A, expect packet loss! [ 201.602506][ T9480] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1692'. [ 201.940325][ T9484] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551585) [ 201.954313][ T9484] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647 [ 203.045701][ T9517] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1711'. [ 203.080685][ T9517] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1711'. [ 203.683356][ T9539] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1722'. [ 204.207434][ T9562] sctp: [Deprecated]: syz.1.1732 (pid 9562) Use of struct sctp_assoc_value in delayed_ack socket option. [ 204.207434][ T9562] Use struct sctp_sack_info instead [ 204.639129][ T9572] netlink: 'syz.4.1738': attribute type 21 has an invalid length. [ 204.834772][ T9578] netlink: 'syz.0.1739': attribute type 1 has an invalid length. [ 204.849639][ T9580] netlink: 'syz.1.1740': attribute type 4 has an invalid length. [ 204.886371][ T9578] netlink: 232 bytes leftover after parsing attributes in process `syz.0.1739'. [ 205.576802][ T9604] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1754'. [ 205.612647][ T9604] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1754'. [ 206.396973][ T9634] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1769'. [ 206.685272][ T9648] netlink: 'syz.4.1774': attribute type 1 has an invalid length. [ 206.853192][ T9650] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1777'. [ 207.195709][ T9663] netlink: 'syz.1.1784': attribute type 1 has an invalid length. [ 207.258111][ T9663] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1784'. [ 207.503208][ T9676] netlink: 'syz.4.1789': attribute type 1 has an invalid length. [ 207.512295][ T9677] netlink: 'syz.0.1790': attribute type 1 has an invalid length. [ 207.564005][ T9677] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.1790'. [ 207.588513][ T9676] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1789'. [ 207.940827][ T9689] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 208.473103][ T9709] Cannot find set identified by id 0 to match [ 209.373481][ T9741] netlink: 'syz.0.1822': attribute type 1 has an invalid length. [ 209.583123][ T9754] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1828'. [ 209.593180][ T9754] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1828'. [ 209.632640][ T9754] geneve2: entered promiscuous mode [ 209.643472][ T9754] geneve2: entered allmulticast mode [ 209.671428][ T9756] netdevsim netdevsim2 netdevsim2: entered allmulticast mode [ 210.066622][ T9769] netlink: 'syz.2.1833': attribute type 2 has an invalid length. [ 210.289940][ T9775] netlink: 'syz.4.1837': attribute type 1 has an invalid length. [ 210.328550][ T9775] netlink: 244 bytes leftover after parsing attributes in process `syz.4.1837'. [ 210.808293][ T9793] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1846'. [ 210.977353][ T9795] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1848'. [ 211.618522][ T9819] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 211.833406][ T9819] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 213.137064][ T9875] netlink: 'syz.1.1886': attribute type 1 has an invalid length. [ 213.173522][ T9875] netlink: 'syz.1.1886': attribute type 3 has an invalid length. [ 213.202456][ T9875] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1886'. [ 213.590736][ T9889] netlink: 'syz.3.1892': attribute type 1 has an invalid length. [ 213.621216][ T9889] netlink: 228 bytes leftover after parsing attributes in process `syz.3.1892'. [ 215.194081][ T9948] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1922'. [ 215.253935][ T9951] ieee802154 phy0 wpan0: encryption failed: -22 [ 215.370429][ T9953] netlink: 'syz.4.1926': attribute type 11 has an invalid length. [ 215.388616][ T9953] netlink: 'syz.4.1926': attribute type 11 has an invalid length. [ 215.418563][ T9953] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1926'. [ 215.497622][ T9959] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1929'. [ 215.793431][ T9967] netlink: 'syz.1.1933': attribute type 1 has an invalid length. [ 216.017460][ T9973] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1936'. [ 216.095296][ T9980] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1939'. [ 216.318840][ T9983] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 216.683782][T10004] netlink: 'syz.1.1951': attribute type 11 has an invalid length. [ 217.235992][T10022] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1960'. [ 217.316549][T10022] openvswitch: netlink: Actions may not be safe on all matching packets [ 217.923177][T10046] SET target dimension over the limit! [ 218.802717][T10078] x_tables: duplicate underflow at hook 4 [ 219.199545][T10094] netlink: 'syz.0.1995': attribute type 11 has an invalid length. [ 219.207623][T10094] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1995'. [ 219.270730][T10098] C: renamed from team_slave_0 (while UP) [ 219.336735][T10098] netlink: 'syz.3.1997': attribute type 1 has an invalid length. [ 219.360855][T10098] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 219.659392][T10109] netlink: 'syz.4.2002': attribute type 2 has an invalid length. [ 219.710097][T10109] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2002'. [ 220.358538][T10136] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2015'. [ 220.740507][T10152] xt_nat: multiple ranges no longer supported [ 221.053631][T10159] netlink: 'syz.0.2025': attribute type 2 has an invalid length. [ 221.477665][T10178] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2036'. [ 221.539441][T10178] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2036'. [ 222.401020][ T5853] Bluetooth: hci2: command 0x0406 tx timeout [ 222.407829][ T5863] Bluetooth: hci4: command 0x0406 tx timeout [ 222.408205][ T5861] Bluetooth: hci3: command 0x0406 tx timeout [ 222.414009][ T5863] Bluetooth: hci0: command 0x0c20 tx timeout [ 222.420962][ T5865] Bluetooth: hci1: command 0x0406 tx timeout [ 222.639157][T10220] : renamed from veth0_vlan (while UP) [ 222.902822][T10201] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 223.557549][T10252] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2072'. [ 223.603780][T10256] netlink: 'syz.1.2073': attribute type 10 has an invalid length. [ 223.631660][T10249] bond1: entered promiscuous mode [ 223.636881][T10249] bond1: entered allmulticast mode [ 223.647701][T10249] 8021q: adding VLAN 0 to HW filter on device bond1 [ 223.653797][T10260] openvswitch: netlink: Actions may not be safe on all matching packets [ 223.778275][T10256] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 224.162935][T10276] xt_CONNSECMARK: invalid mode: 0 [ 224.638590][ T51] Bluetooth: hci0: command 0x0c20 tx timeout [ 224.912612][T10300] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2096'. [ 224.949179][T10300] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2096'. [ 225.214557][T10308] xt_l2tp: unknown flags: 18 [ 225.277627][T10310] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2101'. [ 225.781159][T10326] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 226.062405][T10335] netlink: 6 bytes leftover after parsing attributes in process `syz.2.2112'. [ 226.096278][T10335] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 227.125792][T10374] openvswitch: netlink: EtherType 257 is less than min 600 [ 227.424994][T10387] netlink: 'syz.2.2138': attribute type 6 has an invalid length. [ 227.453914][T10387] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2138'. [ 228.828131][T10437] sctp: [Deprecated]: syz.1.2163 (pid 10437) Use of int in maxseg socket option. [ 228.828131][T10437] Use struct sctp_assoc_value instead [ 228.876152][T10441] ip6t_REJECT: ECHOREPLY is not supported [ 229.047351][T10443] netlink: 'syz.3.2166': attribute type 13 has an invalid length. [ 229.078492][T10443] lo: entered promiscuous mode [ 229.083453][T10443] lo: entered allmulticast mode [ 229.171268][T10443] tunl0: entered promiscuous mode [ 229.176402][T10443] tunl0: entered allmulticast mode [ 229.241054][T10443] gre0: entered promiscuous mode [ 229.268134][T10443] gre0: entered allmulticast mode [ 229.352109][T10443] gretap0: entered promiscuous mode [ 229.357588][T10443] gretap0: entered allmulticast mode [ 229.403598][T10443] gretap0: refused to change device tx_queue_len [ 229.426560][T10443] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 230.595286][T10495] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2191'. [ 230.837246][T10506] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2197'. [ 230.885440][T10506] bridge_slave_0: left allmulticast mode [ 230.934785][T10506] bridge_slave_0: left promiscuous mode [ 230.971883][T10506] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.031880][T10512] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2200'. [ 231.326275][T10519] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2203'. [ 231.641143][T10530] ieee802154 phy0 wpan0: encryption failed: -22 [ 231.895422][T10539] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 231.935379][T10541] netlink: 172 bytes leftover after parsing attributes in process `syz.2.2214'. [ 232.034150][T10546] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2216'. [ 232.233449][T10552] netlink: 252 bytes leftover after parsing attributes in process `syz.0.2219'. [ 232.646311][T10567] netlink: 'syz.4.2225': attribute type 4 has an invalid length. [ 232.886034][T10575] xt_CT: You must specify a L4 protocol and not use inversions on it [ 234.175363][T10627] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 235.512602][T10671] netlink: 'syz.4.2267': attribute type 1 has an invalid length. [ 235.540880][T10671] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2267'. [ 235.760068][T10680] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2271'. [ 235.902928][T10689] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551614) [ 235.966087][T10689] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 236.137841][T10693] netlink: 196 bytes leftover after parsing attributes in process `syz.2.2277'. [ 236.198632][T10693] netlink: 196 bytes leftover after parsing attributes in process `syz.2.2277'. [ 236.238147][T10693] netlink: 19 bytes leftover after parsing attributes in process `syz.2.2277'. [ 237.844652][ T5930] IPVS: starting estimator thread 0... [ 237.961811][T10763] IPVS: using max 27 ests per chain, 64800 per kthread [ 238.360327][T10780] openvswitch: netlink: Port 10289156 exceeds max allowable 65535 [ 238.680873][T10793] macvlan0: entered promiscuous mode [ 238.715228][T10793] macvlan0: entered allmulticast mode [ 239.855976][ T43] lo speed is unknown, defaulting to 1000 [ 239.878315][T10835] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2340'. [ 240.286528][T10848] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 240.559720][T10861] x_tables: arp_tables: MARK.2 target: invalid size 8 (kernel) != (user) 0 [ 241.258985][T10888] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2365'. [ 241.295090][T10888] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 241.318038][T10888] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 241.892188][T10910] netlink: 'syz.4.2376': attribute type 1 has an invalid length. [ 241.931666][T10910] netlink: 'syz.4.2376': attribute type 1 has an invalid length. [ 242.455035][T10930] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2387'. [ 242.478999][T10932] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 242.803698][T10946] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2393'. [ 243.356488][T10964] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2406'. [ 243.393421][T10964] hsr_slave_0: left promiscuous mode [ 243.423762][T10964] hsr_slave_1: left promiscuous mode [ 243.856067][T10986] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2415'. [ 243.920842][T10988] netlink: 'syz.3.2416': attribute type 64 has an invalid length. [ 243.938840][T10988] netlink: 5 bytes leftover after parsing attributes in process `syz.3.2416'. [ 244.041529][T10990] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2417'. [ 245.295135][T11040] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2441'. [ 245.394452][T11043] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 245.522783][T11049] netlink: 'syz.0.2443': attribute type 1 has an invalid length. [ 245.572776][T11049] netlink: 'syz.0.2443': attribute type 3 has an invalid length. [ 245.594999][T11049] netlink: 'syz.0.2443': attribute type 235 has an invalid length. [ 246.087954][T11068] sctp: [Deprecated]: syz.4.2454 (pid 11068) Use of int in maxseg socket option. [ 246.087954][T11068] Use struct sctp_assoc_value instead [ 246.991691][T11103] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 247.436045][T11117] xt_socket: unknown flags 0x2 [ 248.316568][T11155] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 248.791609][T11170] netlink: 'syz.1.2506': attribute type 1 has an invalid length. [ 249.816405][T11212] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2527'. [ 252.068897][T11296] netlink: 'syz.1.2564': attribute type 1 has an invalid length. [ 252.076713][T11296] netlink: 228 bytes leftover after parsing attributes in process `syz.1.2564'. [ 252.147651][T11296] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2564'. [ 252.558128][T11314] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2571'. [ 252.567087][T11314] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2571'. [ 252.951470][T11328] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 253.755637][T11354] SET target dimension over the limit! [ 254.728107][T11388] netlink: 'syz.1.2605': attribute type 3 has an invalid length. [ 254.755769][T11388] netlink: 'syz.1.2605': attribute type 3 has an invalid length. [ 254.808174][T11388] netlink: 'syz.1.2605': attribute type 3 has an invalid length. [ 254.858561][T11388] netlink: 'syz.1.2605': attribute type 3 has an invalid length. [ 254.888557][T11388] netlink: 'syz.1.2605': attribute type 3 has an invalid length. [ 254.936041][T11388] netlink: 'syz.1.2605': attribute type 3 has an invalid length. [ 254.963613][T11388] netlink: 'syz.1.2605': attribute type 3 has an invalid length. [ 255.037156][T11388] netlink: 'syz.1.2605': attribute type 3 has an invalid length. [ 255.068131][T11388] netlink: 'syz.1.2605': attribute type 3 has an invalid length. [ 255.086743][T11388] netlink: 'syz.1.2605': attribute type 3 has an invalid length. [ 255.112181][T11390] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$ûÌÌULÙvy¸ÚØ¢…D£øUDŒžóúz [ 255.354025][T11407] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2614'. [ 256.178662][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.190600][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.470833][T11449] xt_hashlimit: invalid rate [ 256.636546][T11454] netlink: set zone limit has 8 unknown bytes [ 256.992408][T11465] openvswitch: netlink: Key type 29 is not supported [ 257.434870][T11483] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 257.491275][T11483] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 257.779803][T11497] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2650'. [ 257.831823][T11500] netlink: 'syz.1.2652': attribute type 11 has an invalid length. [ 257.842474][T11497] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2650'. [ 257.863372][T11500] netlink: 228 bytes leftover after parsing attributes in process `syz.1.2652'. [ 258.056666][T11497] veth3: entered allmulticast mode [ 258.838975][T11529] veth1_vlan: entered allmulticast mode [ 259.026921][T11539] xt_limit: Overflow, try lower: 2147483649/128 [ 259.172999][T11529] syz.0.2665 (11529) used greatest stack depth: 20056 bytes left [ 259.751630][T11564] validate_nla: 45 callbacks suppressed [ 259.751653][T11564] netlink: 'syz.0.2677': attribute type 9 has an invalid length. [ 259.815871][T11564] netlink: 'syz.0.2677': attribute type 9 has an invalid length. [ 260.551762][T11597] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 260.732018][T11606] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2693'. [ 260.959758][T11612] netlink: 'syz.3.2697': attribute type 1 has an invalid length. [ 261.017766][T11612] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2697'. [ 261.053473][T11617] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2698'. [ 261.087140][T11617] unsupported nlmsg_type 40 [ 261.888667][T11644] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 261.890734][T11645] netlink: 'syz.4.2712': attribute type 11 has an invalid length. [ 261.897773][T11644] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 261.953489][T11645] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2712'. [ 262.505183][T11665] Cannot find del_set index 17 as target [ 262.667014][T11674] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2727'. [ 263.098425][T11691] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2735'. [ 263.466234][T11706] netlink: 'syz.3.2742': attribute type 1 has an invalid length. [ 263.773590][T11720] xt_cgroup: xt_cgroup: no path or classid specified [ 263.911454][T11725] netlink: 'syz.4.2750': attribute type 10 has an invalid length. [ 263.934549][T11723] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2752'. [ 263.945736][T11725] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.954174][T11725] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.017704][T11728] netlink: 'syz.1.2753': attribute type 3 has an invalid length. [ 264.031102][T11725] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.039180][T11725] bridge0: port 2(bridge_slave_1) entered forwarding state [ 264.046864][T11725] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.050223][T11728] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2753'. [ 264.054438][T11725] bridge0: port 1(bridge_slave_0) entered forwarding state [ 264.086744][T11725] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 264.358587][T11740] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 265.508670][T11784] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 266.968425][T11836] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2807'. [ 267.021815][T11836] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2807'. [ 267.033847][T11838] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2808'. [ 267.280076][T11848] lo: entered promiscuous mode [ 267.285243][T11848] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 267.392063][T11857] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2817'. [ 267.403222][T11857] tc_dump_action: action bad kind [ 267.637403][T11865] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2819'. [ 268.678310][T11906] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2840'. [ 268.753964][T11906] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2840'. [ 268.812398][T11906] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2840'. [ 269.137452][T11925] netlink: 'syz.0.2850': attribute type 9 has an invalid length. [ 269.707200][T11947] netlink: 'syz.3.2859': attribute type 7 has an invalid length. [ 269.746587][T11947] netlink: 'syz.3.2859': attribute type 8 has an invalid length. [ 269.796266][T11949] xt_l2tp: invalid flags combination: c [ 269.887268][T11953] netlink: 'syz.0.2861': attribute type 3 has an invalid length. [ 269.915144][T11952] netlink: 'syz.4.2862': attribute type 21 has an invalid length. [ 269.927824][T11953] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2861'. [ 269.948859][T11952] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2862'. [ 270.281870][T11966] netlink: 'syz.2.2869': attribute type 1 has an invalid length. [ 270.348001][T11966] netlink: 'syz.2.2869': attribute type 2 has an invalid length. [ 270.462582][T11973] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 272.640399][T12058] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 273.168116][T12074] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2922'. [ 273.546537][T12089] netlink: 204 bytes leftover after parsing attributes in process `syz.3.2927'. [ 274.913228][T12138] netlink: 'syz.1.2947': attribute type 11 has an invalid length. [ 274.958379][T12138] netlink: 'syz.1.2947': attribute type 4 has an invalid length. [ 274.999920][T12138] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2947'. [ 275.537119][T12163] netlink: 'syz.3.2957': attribute type 21 has an invalid length. [ 276.204200][T12187] netlink: 'syz.2.2969': attribute type 11 has an invalid length. [ 277.469791][T12233] netlink: 'syz.1.2992': attribute type 5 has an invalid length. [ 277.558121][T12237] x_tables: unsorted underflow at hook 2 [ 277.901890][T12251] xt_bpf: check failed: parse error [ 278.919497][T12291] netlink: 'syz.4.3021': attribute type 3 has an invalid length. [ 278.978830][T12291] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3021'. [ 279.518266][T12312] openvswitch: netlink: Missing key (keys=40, expected=80) [ 279.983292][T12332] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3040'. [ 280.036340][T12332] (unnamed net_device) (uninitialized): (slave gre0): Device is not bonding slave [ 280.117695][T12332] (unnamed net_device) (uninitialized): option active_slave: invalid value (gre0) [ 280.808029][T12363] netlink: 'syz.2.3057': attribute type 3 has an invalid length. [ 280.944456][T12369] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3060'. [ 280.962874][T12369] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3060'. [ 281.036304][T12373] xt_l2tp: wrong L2TP version: 0 [ 281.179652][T12377] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 281.274091][T12383] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3067'. [ 281.432160][T12387] lo: left promiscuous mode [ 281.436764][T12387] lo: left allmulticast mode [ 281.474969][T12387] tunl0: left promiscuous mode [ 281.511964][T12387] tunl0: left allmulticast mode [ 281.549988][T12392] netlink: 'syz.4.3071': attribute type 33 has an invalid length. [ 281.551408][T12387] gre0: left promiscuous mode [ 281.581809][T12387] gre0: left allmulticast mode [ 281.745266][T12387] gretap0: left promiscuous mode [ 281.766282][T12387] gretap0: left allmulticast mode [ 281.809366][T12387] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 282.091684][T12409] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 282.353410][T12418] netlink: 'syz.0.3087': attribute type 1 has an invalid length. [ 282.553339][T12426] netlink: 5 bytes leftover after parsing attributes in process `syz.1.3090'. [ 282.578179][T12426] 0ªX¹¦D: renamed from gretap0 (while UP) [ 282.636102][T12426] 0ªX¹¦D: entered allmulticast mode [ 282.674923][T12426] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 282.961265][T12443] (unnamed net_device) (uninitialized): peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 283.162724][T12443] bond2: entered promiscuous mode [ 283.168073][T12443] bond2: entered allmulticast mode [ 283.173996][T12443] 8021q: adding VLAN 0 to HW filter on device bond2 [ 283.763621][T12472] netlink: 144 bytes leftover after parsing attributes in process `syz.4.3111'. [ 283.936920][T12481] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3115'. [ 284.135336][T12488] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3118'. [ 284.248140][T12488] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3118'. [ 284.376382][T12495] bridge0: port 3(gretap0) entered blocking state [ 284.457549][T12495] bridge0: port 3(gretap0) entered disabled state [ 284.486041][T12495] gretap0: entered allmulticast mode [ 284.515630][T12495] gretap0: entered promiscuous mode [ 284.563605][T12495] bridge0: port 3(gretap0) entered blocking state [ 284.570623][T12495] bridge0: port 3(gretap0) entered forwarding state [ 284.598059][T12503] netlink: 'syz.1.3126': attribute type 11 has an invalid length. [ 284.609767][T12505] netlink: 192 bytes leftover after parsing attributes in process `syz.3.3125'. [ 284.639510][T12503] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3126'. [ 284.967333][T12518] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3132'. [ 285.066831][T12520] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3133'. [ 286.112915][T12560] x_tables: ip6_tables: REDIRECT target: used from hooks INPUT, but only usable from PREROUTING/OUTPUT [ 286.433956][T12576] set match dimension is over the limit! [ 286.810511][T12589] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3167'. [ 286.963992][T12598] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 287.014911][T12597] netlink: 'syz.3.3171': attribute type 21 has an invalid length. [ 287.073078][T12597] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3171'. [ 287.301636][T12610] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 287.805613][T12629] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3186'. [ 288.533513][T12656] netlink: 'syz.4.3199': attribute type 21 has an invalid length. [ 288.576459][T12656] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3199'. [ 288.923792][T12677] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 288.934008][T12666] bond3: entered promiscuous mode [ 288.967992][T12666] bond3: entered allmulticast mode [ 289.008460][T12666] 8021q: adding VLAN 0 to HW filter on device bond3 [ 289.168231][T12682] netlink: 'syz.4.3210': attribute type 4 has an invalid length. [ 289.568563][T12699] __nla_validate_parse: 1 callbacks suppressed [ 289.568585][T12699] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3218'. [ 289.945428][T12712] !: renamed from dummy0 (while UP) [ 290.581787][T12739] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3237'. [ 291.881433][T12787] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3263'. [ 291.955360][T12792] netlink: 'syz.0.3265': attribute type 10 has an invalid length. [ 291.999437][T12792] bond0: left allmulticast mode [ 292.012376][T12792] bond_slave_0: left allmulticast mode [ 292.020399][T12792] bond_slave_1: left allmulticast mode [ 292.040546][T12792] 8021q: adding VLAN 0 to HW filter on device bond0 [ 292.051017][T12792] team0: Port device bond0 added [ 292.331108][T12805] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3272'. [ 292.449752][T12810] netlink: 'syz.2.3274': attribute type 7 has an invalid length. [ 292.538252][T12812] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3276'. [ 292.706949][T12820] netlink: 596 bytes leftover after parsing attributes in process `syz.0.3279'. [ 293.071519][T12833] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3284'. [ 293.148937][T12833] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3284'. [ 293.186558][T12833] netlink: 31 bytes leftover after parsing attributes in process `syz.3.3284'. [ 293.221482][T12833] netlink: 'syz.3.3284': attribute type 3 has an invalid length. [ 293.245182][T12833] netlink: 'syz.3.3284': attribute type 2 has an invalid length. [ 293.268378][T12833] netlink: 31 bytes leftover after parsing attributes in process `syz.3.3284'. [ 294.005027][T12864] openvswitch: netlink: Message has -1 unknown bytes. [ 294.576673][T12882] netlink: 'syz.4.3310': attribute type 21 has an invalid length. [ 294.668217][T12882] __nla_validate_parse: 2 callbacks suppressed [ 294.668237][T12882] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3310'. [ 294.752685][T12886] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3312'. [ 294.780418][T12886] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3312'. [ 294.835570][T12886] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3312'. [ 295.281293][T12906] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 295.682368][T12920] netdevsim netdevsim2: Direct firmware load for failed with error -2 [ 295.722631][T12920] netdevsim netdevsim2: Falling back to sysfs fallback for: [ 295.894179][T12930] netlink: 'syz.0.3334': attribute type 33 has an invalid length. [ 295.952039][T12930] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3334'. [ 296.684602][T12958] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3349'. [ 297.082505][T12976] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 297.244262][T12981] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 297.881408][T13004] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 298.078727][T13010] xt_HMARK: spi-set and port-set can't be combined [ 298.615783][T13034] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3385'. [ 299.777819][T13079] netlink: 'syz.1.3408': attribute type 10 has an invalid length. [ 299.805530][T13079] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 299.845620][T13082] tipc: Trying to set illegal importance in message [ 299.866924][T13079] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 299.973542][T13086] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 301.980746][T13165] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 301.988246][T13165] IPv6: NLM_F_CREATE should be set when creating new route [ 302.143294][T13171] xt_TPROXY: Can be used only with -p tcp or -p udp [ 302.233757][T13175] netlink: 'syz.1.3451': attribute type 16 has an invalid length. [ 302.269056][T13175] netlink: 'syz.1.3451': attribute type 3 has an invalid length. [ 302.277054][T13175] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3451'. [ 302.327202][T13177] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3453'. [ 302.788346][T13196] netlink: 4388 bytes leftover after parsing attributes in process `syz.4.3460'. [ 302.791281][T13195] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 303.138183][T13206] netlink: 'syz.1.3465': attribute type 1 has an invalid length. [ 303.147967][T13206] netlink: 228 bytes leftover after parsing attributes in process `syz.1.3465'. [ 303.225487][T13206] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3465'. [ 303.831580][T13232] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3475'. [ 304.126554][T13244] IPVS: Unknown mcast interface: pim6reg1 [ 304.228332][T13251] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 304.727019][T13269] delete_channel: no stack [ 305.042379][T13282] SET target dimension over the limit! [ 305.079008][T13284] xt_CT: You must specify a L4 protocol and not use inversions on it [ 305.175920][T13286] netlink: 'syz.2.3500': attribute type 5 has an invalid length. [ 305.418408][T13295] netlink: 'syz.4.3502': attribute type 23 has an invalid length. [ 305.769137][T13309] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3509'. [ 305.841598][T13312] xt_TCPMSS: Only works on TCP SYN packets [ 305.942721][T13314] xt_ecn: cannot match TCP bits for non-tcp packets [ 306.338424][T13327] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 307.193100][T13361] netlink: 'syz.0.3535': attribute type 10 has an invalid length. [ 307.213245][T13361] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3535'. [ 307.263868][T13361] dummy0: entered promiscuous mode [ 307.298014][T13361] bridge0: port 4(dummy0) entered blocking state [ 307.324969][T13361] bridge0: port 4(dummy0) entered disabled state [ 307.365950][T13361] dummy0: entered allmulticast mode [ 307.868985][T13386] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 308.301082][T13404] netlink: 'syz.2.3555': attribute type 1 has an invalid length. [ 308.494901][T13412] netlink: 'syz.3.3559': attribute type 4 has an invalid length. [ 308.761520][T13420] set match dimension is over the limit! [ 308.777811][T13422] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 309.081288][T13436] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 309.143055][T13436] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3570'. [ 309.173323][T13436] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3570'. [ 309.797619][T13462] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3583'. [ 310.833050][T13506] Bluetooth: MGMT ver 1.23 [ 310.925258][T13499] "syz.2.3600" (13499) uses obsolete ecb(arc4) skcipher [ 312.206954][T13557] tipc: MTU too low for tipc bearer [ 312.628258][T13572] netlink: 'syz.2.3631': attribute type 32 has an invalid length. [ 312.636258][T13572] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3631'. [ 312.715087][T13572] (unnamed net_device) (uninitialized): option coupled_control: invalid value (52) [ 312.979718][T13584] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3637'. [ 313.260758][T13595] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3642'. [ 313.324877][T13595] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3642'. [ 313.398425][T13595] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3642'. [ 313.653400][T13609] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3649'. [ 315.326006][T13676] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 315.333995][T13676] IPv6: NLM_F_CREATE should be set when creating new route [ 315.341771][T13676] IPv6: NLM_F_CREATE should be set when creating new route [ 315.349435][T13676] IPv6: NLM_F_CREATE should be set when creating new route [ 315.377360][T13678] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 315.416141][T13678] Zero length message leads to an empty skb [ 316.138446][T13707] netlink: 'syz.3.3694': attribute type 13 has an invalid length. [ 316.182079][T13707] veth0_macvtap: left promiscuous mode [ 316.241348][T13707] macvtap0: entered allmulticast mode [ 316.252453][T13707] macvtap0: refused to change device tx_queue_len [ 316.503298][T13719] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3700'. [ 317.487269][T13752] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3714'. [ 317.604507][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.611364][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.757035][T13760] lo speed is unknown, defaulting to 1000 [ 317.858037][T13765] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3720'. [ 317.938138][T13770] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3723'. [ 317.953333][T13770] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3723'. [ 318.066547][T13772] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3724'. [ 318.127649][T13772] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3724'. [ 318.171143][T13779] netlink: 'syz.0.3725': attribute type 1 has an invalid length. [ 318.301130][T13781] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3728'. [ 319.082928][T13809] team0: Device vti0 is of different type [ 320.177600][T13856] netlink: 'syz.0.3758': attribute type 33 has an invalid length. [ 321.583108][T13910] netlink: 'syz.0.3779': attribute type 58 has an invalid length. [ 321.594447][T13910] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3779'. [ 321.815817][T13918] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 321.825311][ T5915] IPVS: starting estimator thread 0... [ 321.844319][T13920] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3783'. [ 321.936915][T13922] pimreg3: entered allmulticast mode [ 321.942722][T13921] IPVS: using max 27 ests per chain, 64800 per kthread [ 322.246505][T13935] tipc: Started in network mode [ 322.257688][T13935] tipc: Node identity , cluster identity 4711 [ 322.293151][T13935] tipc: Failed to set node id, please configure manually [ 322.328655][T13935] tipc: Enabling of bearer rejected, failed to enable media [ 322.598667][T13950] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3797'. [ 322.784922][T13959] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3802'. [ 322.823796][T13959] netlink: 'syz.4.3802': attribute type 5 has an invalid length. [ 322.857224][T13959] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3802'. [ 323.153417][T13974] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 323.684659][T13993] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3818'. [ 323.691054][T13989] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 324.668400][T14027] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3833'. [ 325.122317][T14044] lo: entered allmulticast mode [ 325.144698][T14044] lo: left allmulticast mode [ 326.392116][T14099] netlink: 'syz.0.3866': attribute type 3 has an invalid length. [ 326.473987][T14105] xt_CT: You must specify a L4 protocol and not use inversions on it [ 326.474863][T14104] lo: left promiscuous mode [ 326.672127][T14104] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.672517][T14116] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3873'. [ 326.679735][T14104] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.823687][T14104] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 326.839489][T14104] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 327.005226][T14104] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.022987][T14104] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.035928][T14104] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.046953][T14104] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.206877][T14108] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3870'. [ 327.385511][T14130] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3880'. [ 327.400661][T14130] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3880'. [ 327.426853][T14130] netlink: 'syz.1.3880': attribute type 5 has an invalid length. [ 327.632844][T14142] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 327.814445][T14149] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3888'. [ 327.819765][T14152] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 328.640022][ T5849] Bluetooth: hci4: command 0x0406 tx timeout [ 328.716270][T14194] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 328.967061][ T43] IPVS: starting estimator thread 0... [ 329.088156][T14206] IPVS: using max 23 ests per chain, 55200 per kthread [ 330.716896][T14296] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3962'. [ 330.735099][T14296] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3962'. [ 330.754733][T14296] netlink: 'syz.0.3962': attribute type 7 has an invalid length. [ 330.766071][T14298] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3963'. [ 330.808947][T14298] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 330.831200][T14298] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 330.902203][T14304] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3966'. [ 331.435379][T14331] "syz.1.3977" (14331) uses obsolete ecb(arc4) skcipher [ 332.028997][T14358] netlink: 176 bytes leftover after parsing attributes in process `syz.3.3990'. [ 332.040548][T14360] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3991'. [ 332.058034][T14358] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3990'. [ 332.087413][T14362] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3992'. [ 332.405872][T14376] netlink: 'syz.3.3998': attribute type 3 has an invalid length. [ 332.434819][T14376] netlink: 766 bytes leftover after parsing attributes in process `syz.3.3998'. [ 333.032264][T14402] ip6gre1: entered allmulticast mode [ 333.308472][T14412] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4017'. [ 333.540478][T14421] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4022'. [ 333.545648][T14423] netlink: 'syz.4.4021': attribute type 1 has an invalid length. [ 333.599657][T14421] geneve2: entered promiscuous mode [ 334.142455][T14443] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4031'. [ 335.432007][T14502] netlink: 100 bytes leftover after parsing attributes in process `syz.2.4055'. [ 335.868415][T14522] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4064'. [ 336.923214][T14578] netlink: 'syz.0.4089': attribute type 1 has an invalid length. [ 338.168476][T14634] __nla_validate_parse: 2 callbacks suppressed [ 338.168501][T14634] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4116'. [ 338.214983][T14636] netlink: 'syz.4.4117': attribute type 29 has an invalid length. [ 338.245892][T14638] Bluetooth: MGMT ver 1.23 [ 338.639512][T14654] gretap0: vlans aren't supported yet for dev_uc|mc_add() [ 338.789862][T14661] netlink: 216 bytes leftover after parsing attributes in process `syz.4.4129'. [ 338.835071][T14661] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4129'. [ 339.082662][T14673] tipc: Started in network mode [ 339.118713][T14673] tipc: Node identity aaaaaaaaaa35, cluster identity 4711 [ 339.163663][T14673] tipc: Enabled bearer , priority 10 [ 340.269170][ T10] tipc: Node number set to 10463914 [ 340.454636][T14725] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4158'. [ 341.672689][T14783] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4185'. [ 341.748327][T14788] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4186'. [ 341.783011][T14788] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 341.815754][T14788] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (1) [ 342.008113][T14795] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4190'. [ 342.252525][T14805] netlink: 204 bytes leftover after parsing attributes in process `syz.1.4195'. [ 342.286949][T14808] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4196'. [ 342.372572][T14811] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4198'. [ 344.437024][T14813] vlan2: entered allmulticast mode [ 344.442309][T14813] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 344.598397][T14831] netlink: 'syz.2.4207': attribute type 32 has an invalid length. [ 344.607034][T14831] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4207'. [ 344.668209][T14831] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 345.475786][T14880] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4227'. [ 345.712859][T14890] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4233'. [ 345.752867][T14890] netlink: 272 bytes leftover after parsing attributes in process `syz.4.4233'. [ 345.781718][T14890] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4233'. [ 345.895180][T14897] netlink: 'syz.3.4236': attribute type 1 has an invalid length. [ 346.013833][T14901] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4238'. [ 346.064293][T14905] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 346.230442][T14910] netlink: 'syz.1.4243': attribute type 13 has an invalid length. [ 348.021726][T14994] team0: Device vti0 is of different type [ 348.780584][T15031] tipc: Enabling of bearer rejected, failed to enable media [ 348.820210][T15034] nbd: must specify a device to reconfigure [ 348.957576][T15040] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 349.916890][T15091] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4331'. [ 350.522563][T15121] openvswitch: netlink: Unknown key attributes 2 [ 351.287498][T15156] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4363'. [ 351.326164][T15156] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4363'. [ 351.387112][ T43] IPVS: starting estimator thread 0... [ 351.490030][T15164] IPVS: using max 22 ests per chain, 52800 per kthread [ 351.554553][T15171] netlink: 'syz.1.4370': attribute type 18 has an invalid length. [ 352.042204][T15196] netlink: 'syz.4.4381': attribute type 11 has an invalid length. [ 353.790160][T15270] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4415'. [ 355.014708][T15320] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4443'. [ 355.054701][T15320] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4443'. [ 355.081486][T15322] pim6reg: entered allmulticast mode [ 355.093466][T15320] netlink: 'syz.4.4443': attribute type 11 has an invalid length. [ 355.115484][T15322] pim6reg: left allmulticast mode [ 355.389414][T15333] netlink: 212364 bytes leftover after parsing attributes in process `syz.4.4450'. [ 355.426314][T15333] openvswitch: netlink: Message has 5 unknown bytes. [ 357.236711][T15414] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4487'. [ 357.411143][T15422] veth0_to_bond: entered allmulticast mode [ 358.089867][T15454] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 358.100018][T15456] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4507'. [ 358.130212][T15455] delete_channel: no stack [ 358.142818][T15458] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.4508'. [ 359.053588][T15503] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4530'. [ 359.099143][T15503] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4530'. [ 359.134928][T15503] netlink: 'syz.2.4530': attribute type 15 has an invalid length. [ 359.232169][T15510] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4533'. [ 359.275835][T15510] netlink: 43 bytes leftover after parsing attributes in process `syz.3.4533'. [ 359.318148][T15510] netlink: 'syz.3.4533': attribute type 6 has an invalid length. [ 359.365037][T15510] netlink: 'syz.3.4533': attribute type 5 has an invalid length. [ 359.598548][T15529] netlink: 'syz.3.4542': attribute type 12 has an invalid length. [ 359.628020][T15529] netlink: 'syz.3.4542': attribute type 11 has an invalid length. [ 360.369005][T15566] rdma_op ffff888025ad71f0 conn xmit_rdma 0000000000000000 [ 361.372675][T15601] __nla_validate_parse: 3 callbacks suppressed [ 361.372697][T15601] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.4574'. [ 361.658833][T15616] smc: net device erspan0 applied user defined pnetid SYZ0 [ 362.168684][ T5849] Bluetooth: hci4: command 0x0406 tx timeout [ 363.523634][T15709] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4623'. [ 363.537368][T15709] netlink: 'syz.2.4623': attribute type 3 has an invalid length. [ 363.947715][T15723] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4631'. [ 364.968424][T15770] batman_adv: batadv0: Adding interface: netdevsim0 [ 364.988817][T15770] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 365.028855][T15770] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 365.255458][T15782] netlink: 'syz.3.4660': attribute type 62 has an invalid length. [ 365.631625][T15800] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4670'. [ 365.661798][T15800] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4670'. [ 365.688149][T15800] netlink: 'syz.2.4670': attribute type 13 has an invalid length. [ 366.817704][T15860] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4698'. [ 367.748477][T15907] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4719'. [ 367.770500][T15907] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4719'. [ 367.781430][T15908] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4720'. [ 368.836738][T15948] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4738'. [ 368.857082][T15948] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4738'. [ 370.696118][T16023] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4774'. [ 370.780583][T16030] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4777'. [ 370.806050][T16029] netlink: zone id is out of range [ 370.836996][T16029] netlink: zone id is out of range [ 370.852847][T16029] netlink: zone id is out of range [ 370.878165][T16029] netlink: zone id is out of range [ 370.887766][T16029] netlink: zone id is out of range [ 370.900625][T16029] netlink: zone id is out of range [ 370.932230][T16029] netlink: zone id is out of range [ 370.976120][T16029] netlink: zone id is out of range [ 371.007776][T16036] netlink: 277 bytes leftover after parsing attributes in process `syz.0.4780'. [ 371.012380][T16029] netlink: zone id is out of range [ 371.064123][T16029] netlink: zone id is out of range [ 371.130460][T16040] netlink: 'syz.4.4781': attribute type 6 has an invalid length. [ 371.150573][T16040] netlink: 'syz.4.4781': attribute type 6 has an invalid length. [ 371.408367][T16049] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4786'. [ 372.223078][T16084] __nla_validate_parse: 2 callbacks suppressed [ 372.223102][T16084] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4803'. [ 372.326425][T16082] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.460591][T16082] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.556377][T16094] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4808'. [ 372.608305][T16082] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.743399][T16082] batman_adv: batadv0: Removing interface: netdevsim0 [ 372.769444][T16082] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.011733][ T30] audit: type=1800 audit(1752638686.190:2): pid=16113 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4817" name="memory.events" dev="tmpfs" ino=4946 res=0 errno=0 [ 373.050529][ T30] audit: type=1804 audit(1752638686.220:3): pid=16113 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.4817" name="/newroot/983/memory.events" dev="tmpfs" ino=4946 res=1 errno=0 [ 373.123794][T16082] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.245295][T16082] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.291492][T16082] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.393272][T16082] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.754715][T16145] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4833'. [ 373.786751][T16147] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 373.969614][T16153] netlink: 'syz.2.4836': attribute type 23 has an invalid length. [ 374.344639][T16164] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 374.863042][T16185] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4850'. [ 374.967568][T16189] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 375.048395][T16191] tipc: Started in network mode [ 375.076911][T16191] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 375.114822][T16191] tipc: Enabled bearer , priority 10 [ 376.227989][ T43] tipc: Node number set to 10136234 [ 376.449815][T16255] tipc: Enabling of bearer rejected, media not registered [ 376.565891][T16261] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4887'. [ 376.595085][T16261] 8021q: adding VLAN 0 to HW filter on device bond0 [ 376.664276][T16265] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4889'. [ 377.529720][T16303] netlink: 'syz.3.4908': attribute type 27 has an invalid length. [ 377.569303][T16305] netlink: 'syz.1.4909': attribute type 1 has an invalid length. [ 378.179785][T16337] net_ratelimit: 5 callbacks suppressed [ 378.179819][T16337] openvswitch: netlink: VXLAN extension message has 12 unknown bytes. [ 378.406840][T16345] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 378.495953][T16351] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 379.044594][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.053035][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.337197][T16387] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 379.628308][T16395] 0ªX¹¦D: left allmulticast mode [ 379.727391][T16395] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 379.795210][ T43] lo speed is unknown, defaulting to 1000 [ 379.801869][ T43] syz2: Port: 1 Link DOWN [ 380.076961][T16413] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4961'. [ 380.117539][T16413] netlink: 176 bytes leftover after parsing attributes in process `syz.2.4961'. [ 380.136812][T16413] netlink: 'syz.2.4961': attribute type 5 has an invalid length. [ 380.231927][T16421] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 380.831256][T16448] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4977'. [ 381.046876][T16456] netlink: 165 bytes leftover after parsing attributes in process `syz.3.4982'. [ 382.150626][T16506] ieee802154 phy0 wpan0: encryption failed: -22 [ 382.276069][T16511] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 382.996890][T16544] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 383.341526][T16563] netlink: 'syz.0.5029': attribute type 1 has an invalid length. [ 383.392419][T16563] netlink: 216 bytes leftover after parsing attributes in process `syz.0.5029'. [ 384.299270][T16611] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5051'. [ 384.582835][T16625] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5058'. [ 384.638378][T16628] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 384.875842][T16641] nbd: must specify at least one socket [ 385.094220][T16654] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5072'. [ 386.570225][T16714] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 387.145861][T16741] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5113'. [ 387.187966][T16741] netlink: 43 bytes leftover after parsing attributes in process `syz.3.5113'. [ 387.218091][T16741] netlink: 'syz.3.5113': attribute type 5 has an invalid length. [ 387.226927][T16741] netlink: 43 bytes leftover after parsing attributes in process `syz.3.5113'. [ 387.479828][T16755] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5121'. [ 387.709187][T16769] netlink: 256 bytes leftover after parsing attributes in process `syz.0.5126'. [ 387.750244][T16769] netlink: 'syz.0.5126': attribute type 9 has an invalid length. [ 387.945863][T16778] netlink: 'syz.3.5133': attribute type 3 has an invalid length. [ 388.851988][T16829] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5153'. [ 388.991821][T16834] IPVS: ip_vs_add_dest(): server weight less than zero [ 389.191569][T16844] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5161'. [ 389.300015][T16849] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 389.328348][T16849] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 389.347782][T16849] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 389.388709][T16849] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 389.446309][T16857] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 390.651548][T16914] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5195'. [ 390.775743][T16921] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5198'. [ 390.969361][T16931] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5203'. [ 391.232004][T16942] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 391.248024][T16944] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5210'. [ 391.604402][T16961] netlink: 'syz.4.5218': attribute type 2 has an invalid length. [ 391.605989][T16957] sit2: entered promiscuous mode [ 391.626863][T16957] sit2: entered allmulticast mode [ 392.008030][T16980] netlink: 'syz.1.5229': attribute type 83 has an invalid length. [ 392.226847][T16991] netlink: 100 bytes leftover after parsing attributes in process `syz.4.5233'. [ 392.684359][T17018] netlink: 'syz.4.5246': attribute type 29 has an invalid length. [ 392.706146][T17018] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5246'. [ 392.730185][T17018] netlink: 'syz.4.5246': attribute type 29 has an invalid length. [ 392.748179][T17018] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5246'. [ 393.042630][T17030] sctp: [Deprecated]: syz.4.5252 (pid 17030) Use of int in max_burst socket option deprecated. [ 393.042630][T17030] Use struct sctp_assoc_value instead [ 393.059061][T17029] netlink: 'syz.2.5251': attribute type 29 has an invalid length. [ 393.074607][T17029] netlink: 'syz.2.5251': attribute type 29 has an invalid length. [ 393.444135][T17041] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5257'. [ 394.172429][T17067] syz.4.5269 (17067) used obsolete PPPIOCDETACH ioctl [ 394.491905][T17080] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 394.589649][T17084] netlink: 'syz.3.5277': attribute type 2 has an invalid length. [ 395.088907][T17102] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 395.200344][T17108] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 395.836755][T17136] netlink: 96 bytes leftover after parsing attributes in process `syz.2.5304'. [ 395.877159][T17136] vlan2: entered allmulticast mode [ 395.897416][T17136] gretap0: entered allmulticast mode [ 395.925214][T17142] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5305'. [ 395.934209][T17143] netlink: 2 bytes leftover after parsing attributes in process `syz.1.5306'. [ 395.957520][T17142] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5305'. [ 396.193149][T17153] tipc: Enabling not permitted [ 396.210854][T17153] tipc: Enabling of bearer rejected, failed to enable media [ 396.914583][T17186] netlink: 'syz.0.5327': attribute type 2 has an invalid length. [ 397.015888][T17190] netlink: 'syz.2.5329': attribute type 3 has an invalid length. [ 397.285454][T17203] netlink: 'syz.1.5335': attribute type 10 has an invalid length. [ 397.928112][T17234] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5352'. [ 398.025726][T17240] tipc: Invalid UDP bearer configuration [ 398.025794][T17240] tipc: Enabling of bearer rejected, failed to enable media [ 398.125437][T17246] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5356'. [ 398.145715][T17246] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5356'. [ 398.189174][T17250] netlink: 168 bytes leftover after parsing attributes in process `syz.1.5359'. [ 398.988672][T17290] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5378'. [ 399.011731][T17295] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5381'. [ 399.960011][T17341] netlink: 'syz.4.5404': attribute type 1 has an invalid length. [ 400.026126][T17345] tipc: Started in network mode [ 400.035066][T17345] tipc: Node identity e0000002, cluster identity 4711 [ 400.085428][T17345] tipc: Enabling of bearer rejected, failed to enable media [ 400.167726][T17349] netlink: 'syz.4.5407': attribute type 10 has an invalid length. [ 400.200745][T17349] batman_adv: batadv0: Removing interface: team0 [ 400.231425][T17349] bridge0: port 3(team0) entered blocking state [ 400.239601][T17349] bridge0: port 3(team0) entered disabled state [ 400.258141][T17349] team0: entered allmulticast mode [ 400.297042][T17349] team_slave_0: entered allmulticast mode [ 400.317292][T17349] team_slave_1: entered allmulticast mode [ 400.329527][T17360] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 400.370569][T17349] team0: left allmulticast mode [ 400.392034][T17349] team_slave_0: left allmulticast mode [ 400.410609][T17349] team_slave_1: left allmulticast mode [ 400.719326][ T5849] Bluetooth: hci0: command 0x0c20 tx timeout [ 400.726295][ T51] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 401.015153][T17393] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5427'. [ 401.066577][T17397] netlink: 'syz.1.5430': attribute type 178 has an invalid length. [ 401.268588][T17403] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5432'. [ 401.734340][T17403] tipc: Resetting bearer [ 401.849981][T17403] tipc: Disabling bearer [ 402.317294][T17446] netlink: 256 bytes leftover after parsing attributes in process `syz.2.5454'. [ 402.799261][ T51] Bluetooth: hci0: command 0x0c20 tx timeout [ 402.874564][T17475] netlink: 'syz.1.5470': attribute type 1 has an invalid length. [ 402.884024][T17475] netlink: 'syz.1.5470': attribute type 3 has an invalid length. [ 402.893220][T17475] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5470'. [ 402.914702][T17475] NCSI netlink: No device for ifindex 131080 [ 403.092537][T17484] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5473'. [ 403.118172][T17484] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5473'. [ 403.434118][T17502] smc: net device erspan0 erased user defined pnetid SYZ0 [ 403.744313][T17517] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.5487'. [ 403.772651][T17511] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.5487'. [ 404.748370][T17566] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5514'. [ 405.935888][T17628] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5544'. [ 405.978150][T17628] netlink: 'syz.1.5544': attribute type 5 has an invalid length. [ 406.346399][T17648] __nla_validate_parse: 2 callbacks suppressed [ 406.346420][T17648] netlink: 288 bytes leftover after parsing attributes in process `syz.2.5554'. [ 406.915006][T17678] Bluetooth: MGMT ver 1.23 [ 407.629979][T17714] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5587'. [ 408.339900][T17703] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 408.696255][T17723] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5591'. [ 408.957995][ T5849] Bluetooth: hci2: command 0x0406 tx timeout [ 408.964723][ T51] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 409.641998][T17763] netlink: 'syz.3.5610': attribute type 1 has an invalid length. [ 410.208955][T17782] netlink: 76 bytes leftover after parsing attributes in process `syz.4.5619'. [ 410.287972][T17782] nbd: illegal input index -8454144 [ 410.427359][T17785] pimreg: entered allmulticast mode [ 410.707031][T17803] netlink: 'syz.1.5629': attribute type 11 has an invalid length. [ 410.814311][T17806] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5630'. [ 411.665306][T17853] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5652'. [ 411.898053][T17859] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5654'. [ 412.593107][T17882] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5668'. [ 412.649316][T17884] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5667'. [ 412.852849][T17895] veth1_macvtap: left promiscuous mode [ 413.212576][T17911] macvtap1: entered promiscuous mode [ 413.231753][T17911] vlan0: entered promiscuous mode [ 413.247707][T17911] macvtap1: entered allmulticast mode [ 413.265575][T17911] vlan0: entered allmulticast mode [ 413.273312][T17911] : entered allmulticast mode [ 413.440311][T17921] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 413.498767][T17925] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5687'. [ 414.283963][T17966] netlink: 76 bytes leftover after parsing attributes in process `syz.0.5705'. [ 415.856174][T18047] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 416.435697][T18069] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5750'. [ 416.444266][T18068] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5748'. [ 416.847399][T18088] netlink: 'syz.4.5758': attribute type 83 has an invalid length. [ 417.024983][T18094] vxcan1: tx address claim with dest, not broadcast [ 417.456843][T18120] netlink: 80 bytes leftover after parsing attributes in process `syz.1.5771'. [ 418.077651][T18142] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5783'. [ 418.199547][T18146] bridge0: port 1(bridge_slave_0) entered disabled state [ 418.314925][T18150] netlink: 'syz.1.5787': attribute type 1 has an invalid length. [ 418.543201][T18159] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5791'. [ 418.587624][T18159] bond0: entered promiscuous mode [ 418.607511][T18159] bond_slave_0: entered promiscuous mode [ 418.632090][T18159] bond_slave_1: entered promiscuous mode [ 418.644252][T18159] bond0: left promiscuous mode [ 418.655130][T18159] bond_slave_0: left promiscuous mode [ 418.671984][T18159] bond_slave_1: left promiscuous mode [ 419.235865][T18191] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5804'. [ 419.308657][T18193] netlink: 72 bytes leftover after parsing attributes in process `syz.1.5806'. [ 420.304999][T18240] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5828'. [ 420.315203][T18240] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5828'. [ 420.847628][T18261] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5836'. [ 421.019731][T18271] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5841'. [ 421.067719][T18275] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5843'. [ 421.294652][T18279] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 422.345241][T18336] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 422.398258][ T5849] Bluetooth: hci4: command 0x0406 tx timeout [ 422.829193][T18359] netlink: 'syz.1.5882': attribute type 8 has an invalid length. [ 423.368472][T18382] __nla_validate_parse: 2 callbacks suppressed [ 423.368495][T18382] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5893'. [ 423.789349][T18402] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5902'. [ 423.908897][T18410] netlink: 88 bytes leftover after parsing attributes in process `syz.3.5908'. [ 423.924862][T18410] netem: invalid attributes len -24 [ 423.957982][T18410] netem: change failed [ 424.398148][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 425.057672][T18461] bridge0: port 3(gretap0) entered disabled state [ 425.166423][T18461] bridge0: port 2(bridge_slave_1) entered disabled state [ 425.174539][T18461] bridge0: port 1(bridge_slave_0) entered disabled state [ 425.229138][T18461] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 425.547033][T18483] netlink: 'syz.1.5940': attribute type 2 has an invalid length. [ 425.566090][T18483] netlink: 'syz.1.5940': attribute type 8 has an invalid length. [ 425.566174][T18482] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5941'. [ 425.574546][T18483] netlink: 1148 bytes leftover after parsing attributes in process `syz.1.5940'. [ 425.649283][T18487] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5943'. [ 426.776684][T18536] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5963'. [ 427.165520][T18553] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 427.301468][T18561] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5975'. [ 427.439761][T18567] vxcan1: tx address claim with dlc 0 [ 427.703245][T18579] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5985'. [ 427.951504][T18579] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 427.971107][T18579] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 427.990339][T18579] bond0 (unregistering): Released all slaves [ 428.031613][T18589] vlan3: entered promiscuous mode [ 428.037069][T18589] bridge0: entered promiscuous mode [ 428.043544][T18589] vlan3: entered allmulticast mode [ 428.049163][T18589] bridge0: entered allmulticast mode [ 428.567997][T18610] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 428.829209][T18616] xt_CT: No such helper "snmp" [ 429.784551][T18671] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6027'. [ 430.385447][T18692] IPv6: NLM_F_CREATE should be specified when creating new route [ 430.967640][T18718] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6047'. [ 431.975091][T18757] 8021q: adding VLAN 0 to HW filter on device bond2 [ 431.984834][T18757] bond0: (slave bond2): Enslaving as an active interface with an up link [ 432.564470][T18790] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6076'. [ 432.911116][T18804] netlink: 'syz.3.6083': attribute type 1 has an invalid length. [ 432.925365][T18804] netlink: 172 bytes leftover after parsing attributes in process `syz.3.6083'. [ 433.111992][T18813] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6089'. [ 433.731942][T18844] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6102'. [ 433.763692][T18842] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6103'. [ 437.027395][T18871] veth0_macvtap: entered promiscuous mode [ 437.038371][T18871] macvtap1: entered allmulticast mode [ 437.043827][T18871] veth0_macvtap: entered allmulticast mode [ 437.268561][T18895] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6125'. [ 437.326587][T18895] xfrm1: entered promiscuous mode [ 437.331210][T18899] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6125'. [ 437.352884][T18895] xfrm1: entered allmulticast mode [ 437.720110][T18917] tap0: tun_chr_ioctl cmd 1074025676 [ 437.725496][T18917] tap0: owner set to 0 [ 439.038395][T18981] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6167'. [ 439.066164][T18984] netlink: 'syz.1.6168': attribute type 83 has an invalid length. [ 439.559504][T19005] netlink: 165 bytes leftover after parsing attributes in process `syz.0.6180'. [ 439.781702][T19019] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6184'. [ 439.994721][T19019] macvtap1: entered promiscuous mode [ 440.001602][T19019] vlan0: entered promiscuous mode [ 440.007313][T19019] macvtap1: entered allmulticast mode [ 440.015898][T19019] vlan0: entered allmulticast mode [ 440.021528][T19019] veth0_vlan: entered allmulticast mode [ 440.484888][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.521301][T19041] netlink: 'syz.2.6197': attribute type 3 has an invalid length. [ 440.777981][T19062] sch_fq: defrate 0 ignored. [ 441.489155][T19096] netlink: 104 bytes leftover after parsing attributes in process `syz.3.6223'. [ 442.081512][T19124] netlink: 203516 bytes leftover after parsing attributes in process `syz.2.6236'. [ 442.118125][T19124] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 442.126460][T19124] openvswitch: netlink: Duplicate key (type 0). [ 442.266915][T19130] Bluetooth: MGMT ver 1.23 [ 442.342713][T19134] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6241'. [ 442.666133][T19145] veth0: entered promiscuous mode [ 442.709042][T19143] veth0: left promiscuous mode [ 443.493141][T19185] tipc: New replicast peer: 255.255.255.255 [ 443.531515][T19185] tipc: Enabled bearer , priority 10 [ 443.658719][T19191] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6266'. [ 443.865840][T19204] netlink: 104 bytes leftover after parsing attributes in process `syz.3.6271'. [ 444.371500][T19229] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6283'. [ 444.863962][T19254] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6295'. [ 445.039003][T19260] netlink: 1044 bytes leftover after parsing attributes in process `syz.4.6296'. [ 446.499202][T19327] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6325'. [ 446.514096][T19327] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6325'. [ 446.538004][T19327] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6325'. [ 446.791773][T19337] bridge0: port 2(bridge_slave_1) entered disabled state [ 446.800475][T19337] bridge0: port 1(bridge_slave_0) entered disabled state [ 446.860284][T19339] netlink: 244 bytes leftover after parsing attributes in process `syz.1.6332'. [ 448.115023][T19389] tun0: tun_chr_ioctl cmd 1074025675 [ 448.132030][T19389] tun0: persist disabled [ 448.251287][T19396] gtp1: entered promiscuous mode [ 448.268662][T19396] gtp1: entered allmulticast mode [ 448.786175][T19426] __nla_validate_parse: 1 callbacks suppressed [ 448.786197][T19426] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6369'. [ 449.391449][T19443] netlink: 100 bytes leftover after parsing attributes in process `syz.1.6377'. [ 449.488166][T19447] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6379'. [ 449.941239][T19464] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6386'. [ 450.344138][T19485] openvswitch: netlink: IPv4 tun info is not correct [ 450.417331][T19478] syz.2.6393 (19478) used greatest stack depth: 15448 bytes left [ 450.487296][T19490] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6398'. [ 450.504998][T19490] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6398'. [ 450.943104][T19513] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6407'. [ 451.379005][T19534] netlink: 'syz.1.6420': attribute type 9 has an invalid length. [ 451.420509][T19534] netlink: 212260 bytes leftover after parsing attributes in process `syz.1.6420'. [ 452.581837][T19597] netlink: 23 bytes leftover after parsing attributes in process `syz.2.6448'. [ 452.728697][T19603] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6451'. [ 452.750008][T19606] netlink: 'syz.2.6454': attribute type 1 has an invalid length. [ 452.770593][T19606] netlink: 'syz.2.6454': attribute type 4 has an invalid length. [ 452.806503][T19606] NCSI netlink: No device for ifindex 458760 [ 453.187130][T19630] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 453.892338][T19666] lo: entered allmulticast mode [ 454.018810][T19669] __nla_validate_parse: 6 callbacks suppressed [ 454.018829][T19669] netlink: 92 bytes leftover after parsing attributes in process `syz.3.6483'. [ 454.499260][T19690] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6493'. [ 454.552120][T19695] raw_sendmsg: syz.2.6495 forgot to set AF_INET. Fix it! [ 454.718827][T19700] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6498'. [ 455.334439][T19732] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 455.485760][T19740] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6517'. [ 455.713708][T19752] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6523'. [ 456.234034][T19775] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6531'. [ 456.276597][T19777] netlink: 256 bytes leftover after parsing attributes in process `syz.2.6533'. [ 456.822080][T19794] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 456.949098][T19802] netlink: 11562 bytes leftover after parsing attributes in process `syz.1.6543'. [ 457.305502][T19814] netlink: 'syz.2.6548': attribute type 19 has an invalid length. [ 457.343007][T19818] bond0: entered promiscuous mode [ 457.348411][T19818] bond_slave_0: entered promiscuous mode [ 457.354429][T19818] bond_slave_1: entered promiscuous mode [ 457.362881][T19818] batadv0: entered promiscuous mode [ 457.369552][T19818] bridge_slave_1: entered promiscuous mode [ 457.375795][T19818] geneve1: entered promiscuous mode [ 457.686330][T19832] netlink: 'syz.0.6558': attribute type 58 has an invalid length. [ 457.700390][T19832] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6558'. [ 458.218264][T19857] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6568'. [ 458.580847][T19870] gretap0: entered promiscuous mode [ 458.616934][T19870] gretap0: left promiscuous mode [ 459.080444][T19891] __nla_validate_parse: 4 callbacks suppressed [ 459.080466][T19891] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.6583'. [ 461.101081][T19964] team0: Cannot enslave team device to itself [ 461.166724][T19969] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.6617'. [ 461.350826][T19973] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6619'. [ 461.828704][T19999] sch_fq: defrate 0 ignored. [ 462.106953][T20013] tap0: tun_chr_ioctl cmd 1074025672 [ 462.132098][T20013] tap0: ignored: set checksum disabled [ 462.202852][T20016] netlink: 'syz.3.6637': attribute type 5 has an invalid length. [ 462.382905][T20027] openvswitch: netlink: Multiple metadata blocks provided [ 462.753720][T20046] veth0: entered promiscuous mode [ 462.799560][T20046] veth0: left promiscuous mode [ 463.713874][T20089] sctp: [Deprecated]: syz.3.6670 (pid 20089) Use of int in maxseg socket option. [ 463.713874][T20089] Use struct sctp_assoc_value instead [ 464.900296][T20142] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6694'. [ 464.925718][T20143] netlink: 'syz.4.6695': attribute type 1 has an invalid length. [ 465.006783][T20149] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6698'. [ 465.235817][T20161] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6703'. [ 465.369405][T20164] netlink: 340 bytes leftover after parsing attributes in process `syz.2.6705'. [ 466.286200][T20211] netlink: 196 bytes leftover after parsing attributes in process `syz.2.6726'. [ 466.745341][T20232] netlink: 56 bytes leftover after parsing attributes in process `syz.2.6737'. [ 467.153010][T20250] netlink: 'syz.1.6745': attribute type 83 has an invalid length. [ 467.598424][T20272] tipc: Enabling of bearer rejected, already enabled [ 468.447489][T20312] tap0: tun_chr_ioctl cmd 1074025678 [ 468.455328][T20312] tap0: group set to 0 [ 468.924571][T20335] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6782'. [ 468.985938][T20335] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6782'. [ 469.128768][T20345] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6788'. [ 469.547464][T20364] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6794'. [ 469.756740][T20377] veth0: entered promiscuous mode [ 469.790461][T20374] veth0: left promiscuous mode [ 470.121406][T20387] xt_CT: No such helper "snmp" [ 471.509663][T20461] tap0: tun_chr_ioctl cmd 2148553947 [ 472.060013][T20485] block nbd0: Unsupported socket: shutdown callout must be supported. [ 472.911494][T20521] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 473.591319][T20550] __nla_validate_parse: 1 callbacks suppressed [ 473.591343][T20550] netlink: 152064 bytes leftover after parsing attributes in process `syz.4.6883'. [ 473.601471][T20554] ip6gre2: entered allmulticast mode [ 473.670865][T20550] netlink: zone id is out of range [ 473.680161][T20558] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6887'. [ 473.728290][T20550] netlink: zone id is out of range [ 473.733565][T20550] netlink: zone id is out of range [ 473.753188][T20550] netlink: zone id is out of range [ 473.778085][T20550] netlink: zone id is out of range [ 473.798433][T20550] netlink: zone id is out of range [ 473.822332][T20550] netlink: zone id is out of range [ 473.852852][T20550] netlink: zone id is out of range [ 473.878840][T20550] netlink: zone id is out of range [ 473.928002][T20550] netlink: zone id is out of range [ 474.079316][T20563] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.6889'. [ 474.325586][T20575] sch_tbf: burst 4 is lower than device ip6tnl0 mtu (1536) ! [ 474.929784][T20603] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 475.456212][T20628] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6918'. [ 476.676463][T20690] netlink: 'syz.2.6947': attribute type 1 has an invalid length. [ 476.913943][T20701] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6951'. [ 477.289003][T20720] netlink: 'syz.1.6960': attribute type 6 has an invalid length. [ 478.099621][T20763] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6979'. [ 478.446017][T20778] netlink: 52 bytes leftover after parsing attributes in process `syz.3.6985'. [ 478.456693][T20778] netlink: 52 bytes leftover after parsing attributes in process `syz.3.6985'. [ 478.660036][T20785] netlink: 'syz.1.6988': attribute type 83 has an invalid length. [ 478.800229][T20791] sctp: [Deprecated]: syz.0.6992 (pid 20791) Use of struct sctp_assoc_value in delayed_ack socket option. [ 478.800229][T20791] Use struct sctp_sack_info instead [ 478.918374][T20796] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6994'. [ 479.012738][T20798] siw: device registration error -23 [ 479.358110][ T59] wlan1: Trigger new scan to find an IBSS to join [ 480.065671][T20854] netlink: 'syz.2.7016': attribute type 4 has an invalid length. [ 480.940800][T20895] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7038'. [ 481.095916][T20899] xt_bpf: check failed: parse error [ 481.184298][T20903] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7042'. [ 481.672874][T20927] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7054'. [ 482.318697][ T7964] wlan1: Trigger new scan to find an IBSS to join [ 482.536849][T20973] netlink: 'syz.1.7077': attribute type 10 has an invalid length. [ 482.950891][T20990] netlink: 71 bytes leftover after parsing attributes in process `syz.3.7087'. [ 482.983596][T20992] netlink: 100 bytes leftover after parsing attributes in process `syz.1.7086'. [ 483.386641][T21015] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7095'. [ 483.491474][T21021] net_ratelimit: 217 callbacks suppressed [ 483.491498][T21021] openvswitch: netlink: Multiple metadata blocks provided [ 483.922247][T21041] netlink: 48 bytes leftover after parsing attributes in process `syz.3.7107'. [ 484.109936][T21054] netlink: 'syz.3.7110': attribute type 11 has an invalid length. [ 485.018086][T21093] netlink: 108 bytes leftover after parsing attributes in process `syz.0.7131'. [ 485.082991][T21099] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7134'. [ 485.248389][T21106] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7137'. [ 485.359042][ T7960] wlan1: Trigger new scan to find an IBSS to join [ 486.274972][ T59] wlan1: Creating new IBSS network, BSSID 9e:ae:6d:32:8e:9b [ 488.004655][T21210] netlink: 'syz.0.7182': attribute type 2 has an invalid length. [ 488.335310][T21219] sch_tbf: burst 0 is lower than device lo mtu (1550) ! [ 488.383303][T21223] netlink: 165 bytes leftover after parsing attributes in process `syz.1.7189'. [ 488.572497][T21230] netem: change failed [ 489.401796][T21262] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7205'. [ 489.661695][T21269] netlink: 'syz.2.7210': attribute type 1 has an invalid length. [ 489.690511][T21269] netlink: 172 bytes leftover after parsing attributes in process `syz.2.7210'. [ 489.980880][T21284] macvtap2: entered promiscuous mode [ 490.006795][T21284] macvtap2: entered allmulticast mode [ 492.599878][T21381] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7263'. [ 492.764179][T21389] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7267'. [ 492.897140][T21393] team0: Device gtp0 is of different type [ 493.262305][T21408] block nbd0: server does not support multiple connections per device. [ 493.300291][T21408] block nbd0: shutting down sockets [ 493.373834][T21411] bond0: entered promiscuous mode [ 493.387215][T21411] bond0: entered allmulticast mode [ 493.414756][T21411] 8021q: adding VLAN 0 to HW filter on device bond0 [ 493.661907][T21411] bond0 (unregistering): Released all slaves [ 493.964715][T21434] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7288'. [ 494.696709][T21463] sch_tbf: burst 21990 is lower than device lo mtu (65550) ! [ 495.424016][T21496] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7317'. [ 495.471886][T21496] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7317'. [ 495.531450][T21501] netlink: 'syz.2.7320': attribute type 6 has an invalid length. [ 495.686493][T21508] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7321'. [ 495.735846][T21508] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7321'. [ 496.138631][T21526] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7330'. [ 496.482265][T21543] netlink: 104 bytes leftover after parsing attributes in process `syz.2.7336'. [ 496.747223][T21553] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.7342'. [ 497.629496][T21595] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7360'. [ 497.788555][T21600] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7363'. [ 497.943879][T21608] netlink: 165 bytes leftover after parsing attributes in process `syz.0.7367'. [ 498.291148][T21624] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 498.603916][T21633] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7378'. [ 498.613525][T21635] openvswitch: netlink: Multiple metadata blocks provided [ 499.195745][T21661] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7390'. [ 499.384518][T21669] netlink: 'syz.1.7393': attribute type 2 has an invalid length. [ 499.716985][T21685] netlink: 188 bytes leftover after parsing attributes in process `syz.1.7402'. [ 500.375161][T21720] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7413'. [ 500.642727][T21728] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7417'. [ 500.933611][T21743] netlink: 'syz.3.7427': attribute type 11 has an invalid length. [ 501.021794][T21747] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.7425'. [ 501.598525][T21777] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7441'. [ 501.926128][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.657273][T21818] netlink: 'syz.4.7459': attribute type 4 has an invalid length. [ 503.018877][ T30] audit: type=1804 audit(1752638816.190:4): pid=21834 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.7467" name="/newroot/1460/cgroup.controllers" dev="tmpfs" ino=7359 res=1 errno=0 [ 503.109718][ T30] audit: type=1800 audit(1752638816.200:5): pid=21834 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.7467" name="cgroup.controllers" dev="tmpfs" ino=7359 res=0 errno=0 [ 503.692881][T21872] netlink: 'syz.2.7483': attribute type 3 has an invalid length. [ 503.728257][T21872] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 504.138753][T21894] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7494'. [ 504.216979][T21898] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7494'. [ 504.482770][ T1105] tipc: Subscription rejected, illegal request [ 505.078528][T21939] syz.4.7513: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 505.109040][T21939] CPU: 0 UID: 0 PID: 21939 Comm: syz.4.7513 Not tainted 6.16.0-rc5-syzkaller-00204-gdae7f9cbd190 #0 PREEMPT(full) [ 505.109075][T21939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 505.109087][T21939] Call Trace: [ 505.109096][T21939] [ 505.109105][T21939] dump_stack_lvl+0x189/0x250 [ 505.109141][T21939] ? __pfx_dump_stack_lvl+0x10/0x10 [ 505.109168][T21939] ? __pfx__printk+0x10/0x10 [ 505.109197][T21939] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 505.109226][T21939] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 505.109257][T21939] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 505.109289][T21939] warn_alloc+0x214/0x310 [ 505.109317][T21939] ? stack_depot_save_flags+0x40/0x900 [ 505.109353][T21939] ? __pfx_warn_alloc+0x10/0x10 [ 505.109384][T21939] ? kasan_save_track+0x4f/0x80 [ 505.109406][T21939] ? xskq_create+0x56/0x170 [ 505.109435][T21939] ? xsk_init_queue+0xb0/0x110 [ 505.109462][T21939] ? xsk_setsockopt+0x43f/0x710 [ 505.109488][T21939] ? do_sock_setsockopt+0x25a/0x3e0 [ 505.109511][T21939] ? __x64_sys_setsockopt+0x18b/0x220 [ 505.109534][T21939] ? do_syscall_64+0xfa/0x3b0 [ 505.109553][T21939] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 505.109584][T21939] __vmalloc_node_range_noprof+0x125/0x12f0 [ 505.109662][T21939] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 505.109699][T21939] ? __kasan_kmalloc+0x93/0xb0 [ 505.109728][T21939] vmalloc_user_noprof+0xad/0xf0 [ 505.109756][T21939] ? xskq_create+0xbf/0x170 [ 505.109788][T21939] xskq_create+0xbf/0x170 [ 505.109824][T21939] xsk_init_queue+0xb0/0x110 [ 505.109858][T21939] xsk_setsockopt+0x43f/0x710 [ 505.109892][T21939] ? __pfx_xsk_setsockopt+0x10/0x10 [ 505.109919][T21939] ? __lock_acquire+0xab9/0xd20 [ 505.109955][T21939] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 505.109986][T21939] ? __pfx_xsk_setsockopt+0x10/0x10 [ 505.110017][T21939] do_sock_setsockopt+0x25a/0x3e0 [ 505.110048][T21939] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 505.110081][T21939] ? __fget_files+0x2a/0x420 [ 505.110120][T21939] __x64_sys_setsockopt+0x18b/0x220 [ 505.110154][T21939] do_syscall_64+0xfa/0x3b0 [ 505.110173][T21939] ? lockdep_hardirqs_on+0x9c/0x150 [ 505.110205][T21939] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 505.110225][T21939] ? clear_bhb_loop+0x60/0xb0 [ 505.110251][T21939] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 505.110271][T21939] RIP: 0033:0x7efd0c98e929 [ 505.110291][T21939] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 505.110310][T21939] RSP: 002b:00007efd0d729038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 505.110333][T21939] RAX: ffffffffffffffda RBX: 00007efd0cbb5fa0 RCX: 00007efd0c98e929 [ 505.110349][T21939] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 505.110362][T21939] RBP: 00007efd0ca10b39 R08: 0000000000000004 R09: 0000000000000000 [ 505.110376][T21939] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 505.110389][T21939] R13: 0000000000000000 R14: 00007efd0cbb5fa0 R15: 00007ffca9eef348 [ 505.110424][T21939] [ 505.110432][T21939] Mem-Info: [ 505.437195][T21939] active_anon:7270 inactive_anon:0 isolated_anon:0 [ 505.437195][T21939] active_file:1158 inactive_file:39989 isolated_file:0 [ 505.437195][T21939] unevictable:768 dirty:196 writeback:0 [ 505.437195][T21939] slab_reclaimable:11004 slab_unreclaimable:116702 [ 505.437195][T21939] mapped:28975 shmem:1371 pagetables:1433 [ 505.437195][T21939] sec_pagetables:0 bounce:0 [ 505.437195][T21939] kernel_misc_reclaimable:0 [ 505.437195][T21939] free:1306359 free_pcp:15756 free_cma:0 [ 505.490364][T21939] Node 0 active_anon:29380kB inactive_anon:0kB active_file:4632kB inactive_file:159748kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116000kB dirty:784kB writeback:0kB shmem:3948kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12196kB pagetables:5676kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 505.498622][T21955] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 505.524188][T21939] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 505.524289][T21939] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 505.524353][T21939] lowmem_reserve[]: 0 2498 2500 2500 2500 [ 505.524497][T21939] Node 0 DMA32 free:1317656kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:29432kB inactive_anon:0kB active_file:4632kB inactive_file:158184kB unevictable:1536kB writepending:784kB present:3129332kB managed:2558392kB mlocked:0kB bounce:0kB free_pcp:39036kB local_pcp:20228kB free_cma:0kB [ 505.524563][T21939] lowmem_reserve[]: 0 0 1 1 1 [ 505.727888][T21939] Node 0 Normal free:24kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1564kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 505.809683][T21939] lowmem_reserve[]: 0 0 0 0 0 [ 505.829170][T21939] Node 1 Normal free:3892396kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:23648kB local_pcp:15328kB free_cma:0kB [ 505.978375][T21939] lowmem_reserve[]: 0 0 0 0 0 [ 505.993430][T21939] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 506.055004][T21939] Node 0 DMA32: 2558*4kB (UME) 1862*8kB (UME) 762*16kB (UME) 1536*32kB (UME) 1352*64kB (UME) 638*128kB (UM) 397*256kB (UM) 206*512kB (UME) 96*1024kB (UME) 10*2048kB (UME) 180*4096kB (UM) = 1317832kB [ 506.106523][T21939] Node 0 Normal: 0*4kB 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 24kB [ 506.167847][T21939] Node 1 Normal: 209*4kB (UE) 59*8kB (UME) 55*16kB (UME) 95*32kB (UME) 31*64kB (UME) 9*128kB (UME) 4*256kB (ME) 4*512kB (UME) 2*1024kB (UM) 2*2048kB (UE) 946*4096kB (M) = 3892396kB [ 506.216752][T21939] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 506.267371][T21939] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 506.297559][T21939] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 506.316187][T21939] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 506.348833][T21939] 42514 total pagecache pages [ 506.356492][T21981] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 506.375542][T21939] 0 pages in swap cache [ 506.386558][T21981] bridge0: port 2(bridge_slave_1) entered disabled state [ 506.399844][T21939] Free swap = 124996kB [ 506.404085][T21939] Total swap = 124996kB [ 506.432378][T21939] 2097051 pages RAM [ 506.436257][T21939] 0 pages HighMem/MovableOnly [ 506.454210][T21939] 425411 pages reserved [ 506.464396][T21939] 0 pages cma reserved [ 506.634838][T21991] netlink: 'syz.1.7537': attribute type 1 has an invalid length. [ 506.663146][T21991] netlink: 'syz.1.7537': attribute type 2 has an invalid length. [ 506.682698][T21991] netlink: 'syz.1.7537': attribute type 1 has an invalid length. [ 506.700231][T21991] netlink: 1156 bytes leftover after parsing attributes in process `syz.1.7537'. [ 507.204153][T22019] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7550'. [ 507.223647][T22019] 8021q: VLANs not supported on ip6_vti0 [ 507.527730][T22033] netlink: 'syz.0.7558': attribute type 39 has an invalid length. [ 508.499565][T22070] netlink: 'syz.2.7572': attribute type 21 has an invalid length. [ 508.562542][T22070] netlink: 128 bytes leftover after parsing attributes in process `syz.2.7572'. [ 508.586309][T22070] netlink: 'syz.2.7572': attribute type 4 has an invalid length. [ 508.614203][T22070] netlink: 'syz.2.7572': attribute type 5 has an invalid length. [ 508.615337][T22066] netlink: 'syz.2.7572': attribute type 21 has an invalid length. [ 508.645498][T22070] netlink: 3 bytes leftover after parsing attributes in process `syz.2.7572'. [ 508.737907][T22066] netlink: 128 bytes leftover after parsing attributes in process `syz.2.7572'. [ 508.768216][T22066] netlink: 'syz.2.7572': attribute type 4 has an invalid length. [ 508.790147][T22066] netlink: 'syz.2.7572': attribute type 5 has an invalid length. [ 508.822494][T22066] netlink: 3 bytes leftover after parsing attributes in process `syz.2.7572'. [ 508.829302][T22082] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7579'. [ 508.931960][T22082] vlan0: entered allmulticast mode [ 508.948267][T22082] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 509.806516][T22132] netlink: 104 bytes leftover after parsing attributes in process `syz.4.7596'. [ 509.918100][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 510.465204][T22164] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7610'. [ 510.484812][T22164] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7610'. [ 511.185362][T22192] netlink: 1036 bytes leftover after parsing attributes in process `syz.4.7624'. [ 511.211250][T22192] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 511.228626][T22194] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7625'. [ 511.588384][T22213] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7634'. [ 511.857395][T22228] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7640'. [ 511.874668][T22228] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7640'. [ 511.896537][ T30] audit: type=1107 audit(1752638825.070:6): pid=22225 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 512.143074][T22240] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7644'. [ 513.106251][T22285] netlink: 'syz.3.7668': attribute type 14 has an invalid length. [ 513.554669][T22313] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7679'. [ 513.623077][T22314] bridge4: entered promiscuous mode [ 513.648230][T22314] bridge4: entered allmulticast mode [ 514.798724][ T5849] Bluetooth: hci2: command 0x0406 tx timeout [ 514.798901][ T51] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 515.136500][T22389] vlan3: entered promiscuous mode [ 515.152051][T22389] bridge0: entered promiscuous mode [ 515.279750][T22395] __nla_validate_parse: 2 callbacks suppressed [ 515.279774][T22395] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7717'. [ 515.353736][T22399] netlink: 'syz.2.7719': attribute type 1 has an invalid length. [ 515.370491][T22400] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7718'. [ 515.400043][T22399] netlink: 172 bytes leftover after parsing attributes in process `syz.2.7719'. [ 515.638462][T22406] netlink: 176 bytes leftover after parsing attributes in process `syz.1.7722'. [ 515.675525][T22406] netlink: 176 bytes leftover after parsing attributes in process `syz.1.7722'. [ 516.286949][ T1148] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 516.326454][ T1148] ------------[ cut here ]------------ [ 516.349761][ T1148] UBSAN: array-index-out-of-bounds in net/mac80211/scan.c:1223:5 [ 516.369450][T22436] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 516.376263][ T1148] index 11 is out of range for type 'struct ieee80211_channel *[] __counted_by(n_channels)' (aka 'struct ieee80211_channel *[]') [ 516.426487][ T1148] CPU: 1 UID: 0 PID: 1148 Comm: kworker/u8:6 Not tainted 6.16.0-rc5-syzkaller-00204-gdae7f9cbd190 #0 PREEMPT(full) [ 516.426521][ T1148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 516.426533][ T1148] Workqueue: events_unbound cfg80211_wiphy_work [ 516.426573][ T1148] Call Trace: [ 516.426582][ T1148] [ 516.426590][ T1148] dump_stack_lvl+0x189/0x250 [ 516.426622][ T1148] ? __pfx_dump_stack_lvl+0x10/0x10 [ 516.426646][ T1148] ? __pfx__printk+0x10/0x10 [ 516.426698][ T1148] ubsan_epilogue+0xa/0x40 [ 516.426724][ T1148] __ubsan_handle_out_of_bounds+0xe9/0xf0 [ 516.426756][ T1148] ieee80211_request_ibss_scan+0x600/0x8b0 [ 516.426805][ T1148] ieee80211_ibss_work+0xd85/0x1060 [ 516.426832][ T1148] ? lockdep_hardirqs_on+0x9c/0x150 [ 516.426865][ T1148] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 516.426893][ T1148] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 516.426919][ T1148] ? kcov_remote_stop+0x17e/0x6d0 [ 516.426948][ T1148] ? __pfx_ieee80211_ibss_work+0x10/0x10 [ 516.426984][ T1148] ? skb_dequeue+0x10e/0x150 [ 516.427001][ T1148] ? ieee80211_iface_work+0xcd4/0xfe0 [ 516.427033][ T1148] ? ieee80211_iface_work+0xf39/0xfe0 [ 516.427072][ T1148] cfg80211_wiphy_work+0x2dc/0x460 [ 516.427096][ T1148] ? process_scheduled_works+0x9ef/0x17b0 [ 516.427121][ T1148] process_scheduled_works+0xae1/0x17b0 [ 516.427182][ T1148] ? __pfx_process_scheduled_works+0x10/0x10 [ 516.427228][ T1148] worker_thread+0x8a0/0xda0 [ 516.427256][ T1148] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 516.427294][ T1148] ? __kthread_parkme+0x7b/0x200 [ 516.427331][ T1148] kthread+0x70e/0x8a0 [ 516.427362][ T1148] ? __pfx_worker_thread+0x10/0x10 [ 516.427385][ T1148] ? __pfx_kthread+0x10/0x10 [ 516.427415][ T1148] ? _raw_spin_unlock_irq+0x23/0x50 [ 516.427442][ T1148] ? lockdep_hardirqs_on+0x9c/0x150 [ 516.427468][ T1148] ? __pfx_kthread+0x10/0x10 [ 516.427497][ T1148] ret_from_fork+0x3fc/0x770 [ 516.427528][ T1148] ? __pfx_ret_from_fork+0x10/0x10 [ 516.427630][ T1148] ? __switch_to_asm+0x39/0x70 [ 516.427653][ T1148] ? __switch_to_asm+0x33/0x70 [ 516.427676][ T1148] ? __pfx_kthread+0x10/0x10 [ 516.427705][ T1148] ret_from_fork_asm+0x1a/0x30 [ 516.427752][ T1148] [ 516.741646][ T1148] ---[ end trace ]--- [ 516.745824][ T1148] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 516.753070][ T1148] CPU: 0 UID: 0 PID: 1148 Comm: kworker/u8:6 Not tainted 6.16.0-rc5-syzkaller-00204-gdae7f9cbd190 #0 PREEMPT(full) [ 516.765627][ T1148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 516.775821][ T1148] Workqueue: events_unbound cfg80211_wiphy_work [ 516.782324][ T1148] Call Trace: [ 516.785643][ T1148] [ 516.788615][ T1148] dump_stack_lvl+0x99/0x250 [ 516.793268][ T1148] ? __asan_memcpy+0x40/0x70 [ 516.798024][ T1148] ? __pfx_dump_stack_lvl+0x10/0x10 [ 516.803298][ T1148] ? __pfx__printk+0x10/0x10 [ 516.807983][ T1148] panic+0x2db/0x790 [ 516.812035][ T1148] ? __pfx_panic+0x10/0x10 [ 516.816505][ T1148] ? _printk+0xcf/0x120 [ 516.820838][ T1148] ? __pfx__printk+0x10/0x10 [ 516.825592][ T1148] check_panic_on_warn+0x89/0xb0 [ 516.830726][ T1148] __ubsan_handle_out_of_bounds+0xe9/0xf0 [ 516.836794][ T1148] ieee80211_request_ibss_scan+0x600/0x8b0 [ 516.842776][ T1148] ieee80211_ibss_work+0xd85/0x1060 [ 516.848046][ T1148] ? lockdep_hardirqs_on+0x9c/0x150 [ 516.853312][ T1148] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 516.859263][ T1148] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 516.865738][ T1148] ? kcov_remote_stop+0x17e/0x6d0 [ 516.871070][ T1148] ? __pfx_ieee80211_ibss_work+0x10/0x10 [ 516.876832][ T1148] ? skb_dequeue+0x10e/0x150 [ 516.881966][ T1148] ? ieee80211_iface_work+0xcd4/0xfe0 [ 516.887707][ T1148] ? ieee80211_iface_work+0xf39/0xfe0 [ 516.893136][ T1148] cfg80211_wiphy_work+0x2dc/0x460 [ 516.898329][ T1148] ? process_scheduled_works+0x9ef/0x17b0 [ 516.904119][ T1148] process_scheduled_works+0xae1/0x17b0 [ 516.909725][ T1148] ? __pfx_process_scheduled_works+0x10/0x10 [ 516.915944][ T1148] worker_thread+0x8a0/0xda0 [ 516.920578][ T1148] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 516.927127][ T1148] ? __kthread_parkme+0x7b/0x200 [ 516.932097][ T1148] kthread+0x70e/0x8a0 [ 516.936187][ T1148] ? __pfx_worker_thread+0x10/0x10 [ 516.941488][ T1148] ? __pfx_kthread+0x10/0x10 [ 516.946537][ T1148] ? _raw_spin_unlock_irq+0x23/0x50 [ 516.951845][ T1148] ? lockdep_hardirqs_on+0x9c/0x150 [ 516.957069][ T1148] ? __pfx_kthread+0x10/0x10 [ 516.961681][ T1148] ret_from_fork+0x3fc/0x770 [ 516.966326][ T1148] ? __pfx_ret_from_fork+0x10/0x10 [ 516.971569][ T1148] ? __switch_to_asm+0x39/0x70 [ 516.976444][ T1148] ? __switch_to_asm+0x33/0x70 [ 516.981235][ T1148] ? __pfx_kthread+0x10/0x10 [ 516.985846][ T1148] ret_from_fork_asm+0x1a/0x30 [ 516.990657][ T1148] [ 516.994050][ T1148] Kernel Offset: disabled [ 516.998439][ T1148] Rebooting in 86400 seconds..