last executing test programs: 1m4.660017451s ago: executing program 0 (id=7850): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000ac0)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="02"], 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) 1m4.394996567s ago: executing program 0 (id=7855): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000100)={0x0, 0x7, 0x5d6, 0x4}, 0x10) 1m4.132030849s ago: executing program 0 (id=7862): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="02"], 0x10) socket$l2tp6(0xa, 0x2, 0x73) 1m3.102062528s ago: executing program 2 (id=7877): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000340)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="02"], 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@cgroup=r0, 0x2, 0x0, 0x7, &(0x7f0000000140)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) 1m2.862863552s ago: executing program 2 (id=7881): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000dc0)=@newqdisc={0x74, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x44, 0x2, {{0xffff, 0x7fff, 0x0, 0x1, 0x4, 0x7}, [@TCA_NETEM_JITTER64={0xc, 0xb, 0x1189e72c}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x9d9, 0xfffffffa}}, @TCA_NETEM_CORR={0x10, 0x1, {0x8, 0x6}}]}}}]}, 0x74}}, 0x24000050) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m2.44697767s ago: executing program 2 (id=7888): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@op={0x12}], 0x18, 0x200440d8}, 0x0) 49.492035352s ago: executing program 0 (id=7862): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="02"], 0x10) socket$l2tp6(0xa, 0x2, 0x73) 45.648433231s ago: executing program 2 (id=7888): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@op={0x12}], 0x18, 0x200440d8}, 0x0) 29.740422086s ago: executing program 0 (id=7862): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="02"], 0x10) socket$l2tp6(0xa, 0x2, 0x73) 26.354877866s ago: executing program 2 (id=7888): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@op={0x12}], 0x18, 0x200440d8}, 0x0) 12.306453003s ago: executing program 0 (id=7862): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="02"], 0x10) socket$l2tp6(0xa, 0x2, 0x73) 11.276834853s ago: executing program 2 (id=7888): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@op={0x12}], 0x18, 0x200440d8}, 0x0) 1.824841406s ago: executing program 4 (id=8382): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0xbb8) 1.116943469s ago: executing program 4 (id=8384): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000640), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000680)={'wpan0\x00', 0x0}) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="070200000000000000004b0000000f00a8007364636f6e646e616d6500000e0001"], 0x44}}, 0x0) sendmsg$NL802154_CMD_NEW_SEC_DEV(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000280)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000fbdbdf251a00000004002e8008000300", @ANYRES32=r3, @ANYBLOB='4\x00.'], 0x6c}, 0x1, 0x0, 0x0, 0x20040040}, 0x20040) 1.047543256s ago: executing program 1 (id=8386): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r0, &(0x7f0000000280), &(0x7f0000001840)=@udp6=r1}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000140), &(0x7f0000000000)=""/82}, 0x20) 906.069666ms ago: executing program 1 (id=8387): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)={0x2c, r2, 0x1, 0x70bd26, 0x25dfdbfe, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaaa}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20006911}, 0x0) 905.302149ms ago: executing program 3 (id=8388): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$alg(r1, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4000000}, 0x4000484) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r1) 797.212651ms ago: executing program 4 (id=8389): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000840)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x6, 0x0, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0xfc0, 0x66, 0x0, 0xb, 0x29, 0x0, @rand_addr=0x64010102, @broadcast}, "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"}}, 0xfce) 672.258476ms ago: executing program 1 (id=8390): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @local}, 0x2}}, 0x2e) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x81, @mcast2, 0x5}, 0x1c) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @broadcast}, 0x2, 0x9800}}, 0x2e) 666.176769ms ago: executing program 3 (id=8391): socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x12, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x10, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x59368f8353c3b040}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4008085}, 0x20040000) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r1], 0x90}}, 0x0) 578.961545ms ago: executing program 1 (id=8392): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x1, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x0, 0x3, {@ip4=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000080)={@broadcast, @multicast, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x30, 0x3a, 0x0, @private0, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "18b088", 0x0, 0x0, 0x0, @local, @local}}}}}}}, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000000c0)={0x0, 0x2, 0x6, @random="5788a3a2cad7"}, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) 420.937254ms ago: executing program 1 (id=8393): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x20, 0x5, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x8}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x20008000) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x44, r1, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x8, 0x4, '\x00\x00\x00\x00'}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x44}}, 0x0) 389.897549ms ago: executing program 3 (id=8394): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000001880)=[{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000080)="010fc2cce660f67043199ffffa16c5682e18927d294eed04a22f20c4ff8a7deaee", 0x21}], 0x1, &(0x7f0000000700)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x81}], 0x1, 0x20000000) recvfrom$netrom(r1, &(0x7f0000001900)=""/146, 0x92, 0x10240, 0x0, 0x0) 299.876171ms ago: executing program 3 (id=8395): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0x2000006, 0x12, r0, 0x913e0000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x2000000, 0x13, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305829, &(0x7f0000000540)={0x1100, 0x0, 0x52, 0x10000}) 257.179326ms ago: executing program 4 (id=8396): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="04"], 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r1) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000200), r1) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r2, 0xb6c91f939c8321d, 0x0, 0x0, {0x10}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0xf, @remote}, @NLBL_UNLABEL_A_ACPTFLG={0x8}]}, 0x30}}, 0x0) 251.722214ms ago: executing program 1 (id=8397): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4a24, @dev={0xac, 0x14, 0x14, 0x1a}}, {0x2, 0x4e21, @multicast1}, 0x4, 0x0, 0x0, 0x0, 0x2008, 0x0, 0x200003, 0x1ff, 0x9}) write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="080000fa"], 0xdc) 157.444471ms ago: executing program 3 (id=8398): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000001080)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[], 0x8) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 110.259015ms ago: executing program 4 (id=8399): ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB='..']) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00') bpf$TOKEN_CREATE(0x24, &(0x7f0000003000)={0x0, r1}, 0x8) 13.804998ms ago: executing program 3 (id=8400): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000280)={0x44, r2, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 0s ago: executing program 4 (id=8401): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) sendto$inet6(r1, &(0x7f0000000000)="b8e8", 0x2, 0x4080010, 0x0, 0x0) kernel console output (not intermixed with test programs): 40'. [ 293.344762][T15154] pimreg: entered allmulticast mode [ 293.375064][T15154] dvmrp0: left allmulticast mode [ 293.385926][T15154] pimreg: left allmulticast mode [ 294.658901][T15228] Zero length message leads to an empty skb [ 294.825851][T15239] tipc: Started in network mode [ 294.830931][T15239] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 294.894435][T15239] tipc: Enabled bearer , priority 10 [ 294.952335][T15247] netlink: 'syz.0.4498': attribute type 10 has an invalid length. [ 295.006383][T15247] bridge0: port 3(team0) entered blocking state [ 295.030078][T15247] bridge0: port 3(team0) entered disabled state [ 295.036806][T15247] team0: entered allmulticast mode [ 295.046784][T15247] team_slave_1: entered allmulticast mode [ 295.058461][T15247] team0: entered promiscuous mode [ 295.063633][T15247] team_slave_0: entered promiscuous mode [ 295.071211][T15247] team_slave_1: entered promiscuous mode [ 295.078754][T15247] bridge0: port 3(team0) entered blocking state [ 295.085299][T15247] bridge0: port 3(team0) entered forwarding state [ 295.698679][ T10] IPVS: starting estimator thread 0... [ 295.796491][T15286] IPVS: using max 24 ests per chain, 57600 per kthread [ 296.006767][ T5900] tipc: Node number set to 10136234 [ 296.018568][T15304] tipc: Started in network mode [ 296.043845][T15304] tipc: Node identity e0000002, cluster identity 4711 [ 296.062426][T15304] tipc: Enabling of bearer rejected, failed to enable media [ 296.231661][T15316] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4529'. [ 296.242478][T15316] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4529'. [ 296.317506][T15320] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4531'. [ 296.343093][T15320] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4531'. [ 296.380023][T15320] netlink: 'syz.4.4531': attribute type 14 has an invalid length. [ 296.416872][T15325] sctp: [Deprecated]: syz.0.4534 (pid 15325) Use of struct sctp_assoc_value in delayed_ack socket option. [ 296.416872][T15325] Use struct sctp_sack_info instead [ 296.453019][T15325] sctp: [Deprecated]: syz.0.4534 (pid 15325) Use of struct sctp_assoc_value in delayed_ack socket option. [ 296.453019][T15325] Use struct sctp_sack_info instead [ 296.584981][T15329] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4535'. [ 297.399944][T15374] netlink: 13 bytes leftover after parsing attributes in process `syz.4.4559'. [ 298.255053][T15423] tipc: Enabling of bearer rejected, media not registered [ 298.995069][T15464] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4600'. [ 300.100499][ T44] IPVS: starting estimator thread 0... [ 300.195867][T15512] IPVS: using max 23 ests per chain, 55200 per kthread [ 300.788698][T15542] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4638'. [ 300.815542][T15542] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4638'. [ 300.840793][T15542] netlink: 'syz.1.4638': attribute type 5 has an invalid length. [ 300.864583][T15545] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4640'. [ 300.901506][T15545] netlink: 'syz.2.4640': attribute type 11 has an invalid length. [ 301.432489][T15576] tipc: Enabled bearer , priority 10 [ 301.639567][T15592] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 301.775964][T15597] tipc: Bearer : already 2 bearers with priority 10 [ 301.802583][T15597] tipc: Bearer : trying with adjusted priority [ 301.837356][T15597] tipc: Enabling of bearer rejected, failed to enable media [ 301.938662][T15605] openvswitch: netlink: IPv6 tunnel dst address is zero [ 302.629760][T15645] __nla_validate_parse: 1 callbacks suppressed [ 302.629781][T15645] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4689'. [ 302.651641][T15645] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4689'. [ 302.657553][T15643] team_slave_0: entered promiscuous mode [ 302.666510][T15643] team_slave_1: entered promiscuous mode [ 303.105036][T15671] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4701'. [ 303.114736][T15667] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4702'. [ 303.145697][T15671] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4701'. [ 303.160340][T15667] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4702'. [ 304.049023][T15722] netlink: 'syz.0.4725': attribute type 1 has an invalid length. [ 304.894423][T15767] tunl0: left promiscuous mode [ 304.901607][T15767] gre0: left promiscuous mode [ 305.028811][T15767] bridge0: port 4(gretap0) entered disabled state [ 305.062791][T15767] erspan0: left promiscuous mode [ 305.099809][T15767] ip_vti0: left promiscuous mode [ 305.225285][T15767] bridge0: port 3(batadv0) entered disabled state [ 305.232247][T15767] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.240803][T15767] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.586521][T15767] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 305.647867][T15767] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 305.932654][T15767] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.965453][T15767] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.985407][T15767] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.994437][T15767] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.031614][T15767] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 306.200189][T15767] gtp0: left promiscuous mode [ 306.205796][T15767] gtp0: left allmulticast mode [ 306.925069][T15857] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4786'. [ 306.969384][T15857] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4786'. [ 307.011608][T15857] netlink: 'syz.4.4786': attribute type 13 has an invalid length. [ 307.229058][T15872] tipc: Started in network mode [ 307.258308][T15872] tipc: Node identity dacbad9f3596, cluster identity 4711 [ 307.265700][T15874] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 307.283414][T15872] tipc: Enabled bearer , priority 10 [ 307.594405][T15893] tipc: Started in network mode [ 307.607658][T15893] tipc: Node identity 5f000000000000000000000000000001, cluster identity 4711 [ 307.625861][T15893] tipc: Enabling of bearer rejected, failed to enable media [ 307.706599][ T30] audit: type=1800 audit(1751314654.389:2): pid=15895 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4804" name="memory.events" dev="tmpfs" ino=4723 res=0 errno=0 [ 307.753000][ T30] audit: type=1804 audit(1751314654.409:3): pid=15895 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.4804" name="/newroot/940/memory.events" dev="tmpfs" ino=4723 res=1 errno=0 [ 307.982783][T15913] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 308.000097][T15908] IPVS: stopping master sync thread 15913 ... [ 308.229436][T15925] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4817'. [ 308.396210][ T44] tipc: Node number set to 4015893919 [ 308.617978][T15944] netlink: 165 bytes leftover after parsing attributes in process `syz.1.4825'. [ 308.741983][T15951] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4828'. [ 308.818717][T15958] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 309.038541][T15970] netlink: 104 bytes leftover after parsing attributes in process `syz.3.4837'. [ 309.193563][T15980] netlink: 348 bytes leftover after parsing attributes in process `syz.3.4841'. [ 309.294203][T15983] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4846'. [ 309.603404][T16000] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 309.728439][T16008] netlink: 256 bytes leftover after parsing attributes in process `syz.2.4854'. [ 309.893146][T16016] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4857'. [ 309.950677][T16016] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4857'. [ 309.971785][T16022] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4862'. [ 310.626580][T16057] tipc: Enabling of bearer rejected, failed to enable media [ 312.887103][T16151] syz.4.4924 (16151) used greatest stack depth: 17992 bytes left [ 313.256275][T16187] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 313.509984][T16201] __nla_validate_parse: 3 callbacks suppressed [ 313.510004][T16201] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4949'. [ 313.714681][T16212] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4954'. [ 313.723972][T16212] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4954'. [ 314.195570][T16230] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 314.226534][T16232] netlink: 'syz.4.4963': attribute type 1 has an invalid length. [ 314.244583][T16232] netlink: 236 bytes leftover after parsing attributes in process `syz.4.4963'. [ 315.107572][T16277] sctp: [Deprecated]: syz.1.4986 (pid 16277) Use of int in maxseg socket option. [ 315.107572][T16277] Use struct sctp_assoc_value instead [ 315.320048][T16290] tipc: Enabling of bearer rejected, already enabled [ 315.477647][T16299] Bluetooth: MGMT ver 1.23 [ 315.842247][T16317] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5004'. [ 316.374085][T16345] netlink: 'syz.0.5016': attribute type 1 has an invalid length. [ 316.395443][T16345] netlink: 236 bytes leftover after parsing attributes in process `syz.0.5016'. [ 317.090224][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.097054][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.162037][T16385] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 317.630674][T16407] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.5045'. [ 318.066435][T16431] netlink: 'syz.2.5057': attribute type 2 has an invalid length. [ 318.094599][T16432] IPVS: Error connecting to the multicast addr [ 318.377755][T16446] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5064'. [ 318.432392][T16450] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 318.448191][T16454] netlink: 2 bytes leftover after parsing attributes in process `syz.3.5068'. [ 318.664579][T16464] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5073'. [ 318.755890][T16469] netlink: 18 bytes leftover after parsing attributes in process `syz.1.5074'. [ 318.827040][T16472] Bluetooth: MGMT ver 1.23 [ 319.732121][T16520] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5100'. [ 320.531453][T16558] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 320.542640][T16558] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 320.552148][T16558] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 320.561519][T16558] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 320.674576][T16565] netlink: 'syz.4.5122': attribute type 2 has an invalid length. [ 320.690569][T16564] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5121'. [ 320.721720][T16564] netlink: 120 bytes leftover after parsing attributes in process `syz.2.5121'. [ 320.732414][T16564] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5121'. [ 320.930550][ T5842] Bluetooth: hci2: command 0x0406 tx timeout [ 320.938749][ T5838] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 321.862794][T16626] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 322.276563][T16632] netlink: 'syz.1.5155': attribute type 2 has an invalid length. [ 322.288287][T16632] netlink: 1184 bytes leftover after parsing attributes in process `syz.1.5155'. [ 322.500863][T16647] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5162'. [ 322.510150][T16647] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5162'. [ 322.519550][T16647] netlink: 'syz.1.5162': attribute type 12 has an invalid length. [ 322.545512][T16647] netlink: 'syz.1.5162': attribute type 11 has an invalid length. [ 322.702643][T16654] tipc: Enabling of bearer rejected, failed to enable media [ 323.056179][T16671] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 323.466876][T16697] netlink: 'syz.0.5188': attribute type 21 has an invalid length. [ 323.485836][T16697] netlink: 156 bytes leftover after parsing attributes in process `syz.0.5188'. [ 324.184266][T16737] netlink: 100 bytes leftover after parsing attributes in process `syz.2.5207'. [ 324.416118][T16752] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.5213'. [ 324.639571][T16762] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5219'. [ 324.659325][T16762] openvswitch: netlink: Unknown nsh attribute 0 [ 324.685782][T16762] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 325.002104][T16780] ipvlan2: entered promiscuous mode [ 325.021034][T16780] bridge0: port 5(ipvlan2) entered blocking state [ 325.029683][T16780] bridge0: port 5(ipvlan2) entered disabled state [ 325.043227][T16780] ipvlan2: entered allmulticast mode [ 325.054886][T16780] bridge0: entered allmulticast mode [ 325.081776][T16780] ipvlan2: left allmulticast mode [ 325.105966][T16780] bridge0: left allmulticast mode [ 325.160695][T16788] veth1_macvtap: entered allmulticast mode [ 325.194287][T16788] macsec0: left promiscuous mode [ 325.209348][T16788] macsec0: left allmulticast mode [ 325.214469][T16788] veth1_macvtap: left allmulticast mode [ 325.393917][T16800] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5238'. [ 325.436618][T16800] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5238'. [ 325.616670][T16808] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.630786][T16808] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 325.772210][T16808] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.813538][T16808] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 325.904049][T16808] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.923956][T16808] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 326.036700][T16808] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.065331][T16808] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 326.159591][T16832] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 326.172146][T16832] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 326.382464][T16808] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 326.416083][T16808] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 326.478441][T16808] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 326.518214][T16808] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 326.545829][T16808] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 326.573705][T16808] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 326.623186][T16808] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 326.635676][T16808] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 326.766995][T16860] vlan2: entered allmulticast mode [ 326.788028][T16860] mac80211_hwsim hwsim7 wlan0: entered allmulticast mode [ 327.490261][T16901] nbd: must specify a size in bytes for the device [ 328.480369][T16959] netlink: 'syz.1.5310': attribute type 11 has an invalid length. [ 328.661832][T16968] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5313'. [ 328.671703][T16968] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5313'. [ 329.735346][T17025] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5341'. [ 329.744380][T17025] tipc: Invalid UDP bearer configuration [ 329.744438][T17025] tipc: Enabling of bearer rejected, failed to enable media [ 329.819699][T17027] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 330.006052][T17036] netlink: 'syz.0.5346': attribute type 10 has an invalid length. [ 330.059594][T17036] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 330.078344][T17036] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 331.031680][T17086] openvswitch: netlink: IPv6 tunnel dst address is zero [ 331.263594][T17101] netlink: 'syz.0.5378': attribute type 1 has an invalid length. [ 332.063173][T17137] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 332.205997][ T5838] Bluetooth: hci4: command 0x0405 tx timeout [ 332.374100][T17153] netlink: 'syz.2.5403': attribute type 2 has an invalid length. [ 333.058207][T17177] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5414'. [ 333.081410][T17177] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5414'. [ 333.285895][T17185] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5418'. [ 333.646422][T17201] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5427'. [ 334.811302][T17259] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5455'. [ 334.828655][T17260] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 335.431372][T17296] netlink: 'syz.4.5471': attribute type 178 has an invalid length. [ 335.503789][T17298] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5472'. [ 335.534796][T17298] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5472'. [ 335.563758][T17298] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5472'. [ 335.700514][T17308] pim6reg527: entered allmulticast mode [ 335.873948][T17320] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5483'. [ 336.214288][T17338] team0: Device gtp0 is of different type [ 336.732743][T17367] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5506'. [ 336.833222][T17369] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5509'. [ 336.852461][T17369] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5509'. [ 337.243820][T17392] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5518'. [ 337.305630][T17392] netlink: 'syz.3.5518': attribute type 2 has an invalid length. [ 337.325584][T17392] netlink: 'syz.3.5518': attribute type 1 has an invalid length. [ 337.348995][T17392] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5518'. [ 337.732185][T17415] vlan2: entered allmulticast mode [ 338.276104][T17445] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 338.827226][T17475] netlink: 'syz.0.5559': attribute type 1 has an invalid length. [ 338.842266][T17475] netlink: 'syz.0.5559': attribute type 3 has an invalid length. [ 338.865357][T17475] NCSI netlink: No device for ifindex 131080 [ 339.269887][T17498] netlink: 'syz.4.5570': attribute type 15 has an invalid length. [ 339.512467][T17509] netlink: 'syz.4.5575': attribute type 3 has an invalid length. [ 339.566564][T17512] : renamed from hsr0 (while UP) [ 340.622127][T17568] __nla_validate_parse: 7 callbacks suppressed [ 340.622149][T17568] netlink: 10 bytes leftover after parsing attributes in process `syz.0.5602'. [ 340.899561][T17580] netlink: 168 bytes leftover after parsing attributes in process `syz.1.5608'. [ 342.098742][T17633] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 342.119221][T17632] netlink: 'syz.2.5635': attribute type 1 has an invalid length. [ 342.135692][T17632] netlink: 144 bytes leftover after parsing attributes in process `syz.2.5635'. [ 342.160055][T17632] netlink: 'syz.2.5635': attribute type 1 has an invalid length. [ 342.170741][T17632] netlink: 'syz.2.5635': attribute type 2 has an invalid length. [ 342.179238][T17632] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5635'. [ 342.337353][T17641] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 342.868912][T17671] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5653'. [ 342.920086][T17677] netlink: 'syz.4.5655': attribute type 1 has an invalid length. [ 343.634066][T17718] netlink: 'syz.1.5674': attribute type 1 has an invalid length. [ 343.665594][T17718] netlink: 'syz.1.5674': attribute type 2 has an invalid length. [ 343.706119][T17718] netlink: 1172 bytes leftover after parsing attributes in process `syz.1.5674'. [ 344.458271][T17765] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5696'. [ 345.972662][T17850] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5739'. [ 346.160072][T17858] Bluetooth: MGMT ver 1.23 [ 347.115837][T17910] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5766'. [ 347.246349][T17916] netlink: 248 bytes leftover after parsing attributes in process `syz.0.5767'. [ 347.265969][T17916] NCSI netlink: No device for ifindex 0 [ 347.438589][T17925] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 347.900445][T17948] netlink: 96 bytes leftover after parsing attributes in process `syz.3.5783'. [ 348.262132][T17966] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 348.393650][T17972] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 348.888560][T18001] veth0_to_bond: entered allmulticast mode [ 350.100706][T18071] netlink: 'syz.0.5842': attribute type 1 has an invalid length. [ 350.118144][T18071] lo speed is unknown, defaulting to 1000 [ 350.131859][T18068] netlink: 'syz.0.5842': attribute type 1 has an invalid length. [ 351.150202][T18120] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5866'. [ 352.392181][T18182] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5897'. [ 352.759307][T18199] netlink: 'syz.4.5907': attribute type 1 has an invalid length. [ 352.791148][T18199] netlink: 220 bytes leftover after parsing attributes in process `syz.4.5907'. [ 352.831142][T18199] netlink: 'syz.4.5907': attribute type 1 has an invalid length. [ 353.038362][T18216] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5914'. [ 353.085942][T18214] 8021q: adding VLAN 0 to HW filter on device bond0 [ 354.105934][T18274] Bluetooth: MGMT ver 1.23 [ 354.212154][T18280] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 354.312971][T18286] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5942'. [ 355.412317][T18341] nbd: must specify a device to reconfigure [ 355.725971][T18358] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5968'. [ 356.020104][T18374] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5976'. [ 356.055462][T18374] netlink: 43 bytes leftover after parsing attributes in process `syz.1.5976'. [ 356.081311][T18374] netlink: 'syz.1.5976': attribute type 5 has an invalid length. [ 356.092198][T18374] netlink: 43 bytes leftover after parsing attributes in process `syz.1.5976'. [ 356.196112][T18384] netlink: 'syz.2.5981': attribute type 1 has an invalid length. [ 356.581039][T18404] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5989'. [ 356.641023][T18404] netlink: 43 bytes leftover after parsing attributes in process `syz.1.5989'. [ 356.666191][T18404] netlink: 'syz.1.5989': attribute type 6 has an invalid length. [ 356.711474][T18404] netlink: 'syz.1.5989': attribute type 5 has an invalid length. [ 356.773576][T18404] netlink: 43 bytes leftover after parsing attributes in process `syz.1.5989'. [ 358.681633][T18497] pimreg3: entered allmulticast mode [ 358.897905][T18509] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6038'. [ 359.297603][T18530] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6047'. [ 360.177003][T18572] smc: net device erspan0 applied user defined pnetid SYZ0 [ 360.528053][T18594] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6078'. [ 361.569168][T18651] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6108'. [ 361.586813][T18655] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6107'. [ 361.595722][T18651] gre0: Master is either lo or non-ether device [ 361.795838][T18667] bridge0: port 3(veth0_to_bridge) entered blocking state [ 361.832050][T18667] bridge0: port 3(veth0_to_bridge) entered disabled state [ 361.843168][T18667] veth0_to_bridge: entered allmulticast mode [ 361.853647][T18667] veth0_to_bridge: entered promiscuous mode [ 361.865605][T18667] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 361.904196][T18672] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6118'. [ 361.921336][T18667] bridge0: port 3(veth0_to_bridge) entered blocking state [ 361.929026][T18667] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 361.938687][T18672] netlink: 'syz.2.6118': attribute type 30 has an invalid length. [ 361.947077][T18672] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6118'. [ 362.120843][T18680] netlink: 'syz.2.6122': attribute type 23 has an invalid length. [ 362.873303][T18713] netlink: 'syz.2.6136': attribute type 1 has an invalid length. [ 363.182290][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:56:05:ad:3c:c8:c4, vlan:0) [ 363.195388][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:56:05:ad:3c:c8:c4, vlan:0) [ 363.207939][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:56:05:ad:3c:c8:c4, vlan:0) [ 363.220708][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:56:05:ad:3c:c8:c4, vlan:0) [ 363.233254][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:56:05:ad:3c:c8:c4, vlan:0) [ 363.245893][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:56:05:ad:3c:c8:c4, vlan:0) [ 363.258435][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:56:05:ad:3c:c8:c4, vlan:0) [ 363.270959][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:56:05:ad:3c:c8:c4, vlan:0) [ 363.283505][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:56:05:ad:3c:c8:c4, vlan:0) [ 363.296039][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:56:05:ad:3c:c8:c4, vlan:0) [ 363.464022][T18734] netlink: 277 bytes leftover after parsing attributes in process `syz.1.6147'. [ 364.146575][T18746] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6153'. [ 364.206607][T18746] netlink: 56 bytes leftover after parsing attributes in process `syz.0.6153'. [ 364.271825][T18746] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6153'. [ 365.864482][T18788] IPVS: ip_vs_edit_dest(): server weight less than zero [ 365.879492][ T5913] IPVS: starting estimator thread 0... [ 365.958388][T18794] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6174'. [ 365.987144][T18792] IPVS: using max 23 ests per chain, 55200 per kthread [ 366.013208][T18794] netlink: 'syz.0.6174': attribute type 3 has an invalid length. [ 366.164293][T18798] netlink: 64 bytes leftover after parsing attributes in process `syz.1.6176'. [ 366.946253][T18818] tipc: Cannot configure node identity twice [ 367.074690][T18824] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6188'. [ 367.121987][T18823] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6189'. [ 367.309391][T18828] team0: Device vti0 is of different type [ 368.185296][ C0] net_ratelimit: 11358 callbacks suppressed [ 368.185317][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:56:05:ad:3c:c8:c4, vlan:0) [ 368.203864][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:56:05:ad:3c:c8:c4, vlan:0) [ 368.216456][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:56:05:ad:3c:c8:c4, vlan:0) [ 368.229050][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:56:05:ad:3c:c8:c4, vlan:0) [ 368.241694][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:56:05:ad:3c:c8:c4, vlan:0) [ 368.254336][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:56:05:ad:3c:c8:c4, vlan:0) [ 368.266905][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:56:05:ad:3c:c8:c4, vlan:0) [ 368.279457][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:56:05:ad:3c:c8:c4, vlan:0) [ 368.292035][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:56:05:ad:3c:c8:c4, vlan:0) [ 368.304581][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:56:05:ad:3c:c8:c4, vlan:0) [ 368.794328][T18871] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6208'. [ 368.854023][T18871] netlink: 176 bytes leftover after parsing attributes in process `syz.0.6208'. [ 368.955740][T18871] netlink: 'syz.0.6208': attribute type 5 has an invalid length. [ 369.349484][T18881] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6216'. [ 370.799052][T18921] atomic_op ffff888021b58998 conn xmit_atomic 0000000000000000 [ 371.247117][T18931] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6239'. [ 371.936618][T18941] macvtap1: entered allmulticast mode [ 371.961220][T18941] veth0_macvtap: entered allmulticast mode [ 372.463798][T18957] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6250'. [ 372.488736][T18959] netlink: 160 bytes leftover after parsing attributes in process `syz.4.6254'. [ 373.195549][ C0] net_ratelimit: 11034 callbacks suppressed [ 373.195572][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:56:05:ad:3c:c8:c4, vlan:0) [ 373.214150][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:56:05:ad:3c:c8:c4, vlan:0) [ 373.226746][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:56:05:ad:3c:c8:c4, vlan:0) [ 373.239314][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:56:05:ad:3c:c8:c4, vlan:0) [ 373.251894][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:56:05:ad:3c:c8:c4, vlan:0) [ 373.264411][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:56:05:ad:3c:c8:c4, vlan:0) [ 373.276954][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:56:05:ad:3c:c8:c4, vlan:0) [ 373.289491][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:56:05:ad:3c:c8:c4, vlan:0) [ 373.302084][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:56:05:ad:3c:c8:c4, vlan:0) [ 373.314629][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:56:05:ad:3c:c8:c4, vlan:0) [ 374.616173][T19009] sctp: [Deprecated]: syz.0.6275 (pid 19009) Use of int in maxseg socket option. [ 374.616173][T19009] Use struct sctp_assoc_value instead [ 375.214042][T19020] netlink: 284 bytes leftover after parsing attributes in process `syz.4.6282'. [ 375.966046][T19042] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6292'. [ 376.004578][T19042] xfrm2: entered promiscuous mode [ 376.016429][T19042] xfrm2: entered allmulticast mode [ 376.027199][T19042] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6292'. [ 376.066179][T19044] bond2: entered promiscuous mode [ 376.071538][T19044] bond2: entered allmulticast mode [ 376.077936][T19044] 8021q: adding VLAN 0 to HW filter on device bond2 [ 376.223185][T19044] bond2 (unregistering): Released all slaves [ 376.445789][T19061] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6301'. [ 377.038165][T19088] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6314'. [ 377.389899][T19104] netlink: 1044 bytes leftover after parsing attributes in process `syz.2.6321'. [ 378.231529][ T5925] hid-generic 0005:10CF:05DF.0001: item fetching failed at offset 0/1 [ 378.296226][ T5925] hid-generic 0005:10CF:05DF.0001: probe with driver hid-generic failed with error -22 [ 378.524280][T19167] netlink: 64 bytes leftover after parsing attributes in process `syz.3.6351'. [ 378.542485][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.542561][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.187425][T19200] net_ratelimit: 5613 callbacks suppressed [ 379.187446][T19200] openvswitch: netlink: VXLAN extension 173 out of range max 1 [ 379.898956][T19239] netlink: 'syz.1.6384': attribute type 1 has an invalid length. [ 379.903046][T19243] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6381'. [ 379.926190][T19243] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6381'. [ 380.535120][T19269] sctp: [Deprecated]: syz.0.6396 (pid 19269) Use of struct sctp_assoc_value in delayed_ack socket option. [ 380.535120][T19269] Use struct sctp_sack_info instead [ 380.812224][T19279] IPVS: persistence engine module ip_vs_pe_À not found [ 380.960164][T19288] netlink: 'syz.1.6404': attribute type 1 has an invalid length. [ 380.998902][T19288] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6404'. [ 381.224081][ T5838] Bluetooth: hci4: link tx timeout [ 381.231255][ T5838] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 381.600106][T19324] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6421'. [ 382.197188][T19352] xt_bpf: check failed: parse error [ 382.230576][T19357] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6434'. [ 382.698028][T19374] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6441'. [ 383.022390][T19392] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6446'. [ 383.044435][T19395] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6449'. [ 383.075582][T19395] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6449'. [ 383.122283][T19395] bridge0: port 5(vlan2) entered blocking state [ 383.165537][T19395] bridge0: port 5(vlan2) entered disabled state [ 383.201090][T19395] vlan2: entered allmulticast mode [ 383.214534][T19395] bridge0: entered allmulticast mode [ 383.240439][T19395] vlan2: left allmulticast mode [ 383.246191][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 383.259285][T19395] bridge0: left allmulticast mode [ 383.419218][T19408] team0: Device gtp0 is of different type [ 384.984420][T19476] __nla_validate_parse: 1 callbacks suppressed [ 384.984441][T19476] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6477'. [ 384.985140][T19477] netlink: 100 bytes leftover after parsing attributes in process `syz.1.6478'. [ 385.706972][T19513] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6490'. [ 385.921163][T19524] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6494'. [ 386.305689][T19536] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6500'. [ 386.909617][T19569] netlink: 'syz.1.6512': attribute type 83 has an invalid length. [ 387.414577][T19598] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6523'. [ 388.127439][T19630] netlink: 152064 bytes leftover after parsing attributes in process `syz.1.6536'. [ 388.148493][T19630] netlink: zone id is out of range [ 388.201371][T19630] netlink: zone id is out of range [ 388.229362][T19630] netlink: zone id is out of range [ 388.249643][T19630] netlink: zone id is out of range [ 388.269952][T19630] netlink: zone id is out of range [ 388.288815][T19630] netlink: zone id is out of range [ 388.300835][T19630] netlink: zone id is out of range [ 388.309103][T19634] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6537'. [ 388.328469][T19630] netlink: zone id is out of range [ 388.339024][T19630] netlink: zone id is out of range [ 388.364192][T19630] netlink: zone id is out of range [ 389.188365][T19670] bridge0: port 3(veth0_to_bridge) entered disabled state [ 389.195971][T19670] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.203740][T19670] bridge0: port 1(bridge_slave_0) entered disabled state [ 389.439329][T19680] netlink: 76 bytes leftover after parsing attributes in process `syz.0.6554'. [ 389.594714][T19689] netlink: 81 bytes leftover after parsing attributes in process `syz.0.6561'. [ 390.081991][T19715] netlink: 165 bytes leftover after parsing attributes in process `syz.0.6570'. [ 390.210733][T19721] netlink: 1036 bytes leftover after parsing attributes in process `syz.3.6573'. [ 390.222079][T19721] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 390.881169][T19761] netlink: 14 bytes leftover after parsing attributes in process `syz.0.6592'. [ 391.075051][T19768] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6595'. [ 391.215123][T19761] bond0 (unregistering): (slave 1!€ÿ): Releasing backup interface [ 391.261020][T19761] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 391.303398][T19761] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 391.351176][T19761] bond0 (unregistering): Released all slaves [ 391.423390][T19780] netlink: 232 bytes leftover after parsing attributes in process `syz.1.6601'. [ 391.509776][T19784] netlink: 104 bytes leftover after parsing attributes in process `syz.4.6603'. [ 392.183990][T19824] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6622'. [ 392.621780][T19845] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6630'. [ 393.278732][T19884] netlink: 'syz.4.6648': attribute type 83 has an invalid length. [ 393.510042][T19897] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6653'. [ 393.598817][T19902] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6656'. [ 394.810120][T19963] veth0: entered promiscuous mode [ 394.843711][T19962] veth0: left promiscuous mode [ 395.183189][T19984] dvmrp0: entered allmulticast mode [ 395.268356][T19986] dvmrp0: left allmulticast mode [ 395.280304][T19986] vlan1: left allmulticast mode [ 395.286435][T19993] netlink: 'syz.2.6700': attribute type 39 has an invalid length. [ 395.298152][T19986] veth0_vlan: left allmulticast mode [ 395.500220][T19997] __nla_validate_parse: 3 callbacks suppressed [ 395.500240][T19997] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6702'. [ 395.749054][T20011] vlan3: entered promiscuous mode [ 395.764471][T20011] bridge0: entered promiscuous mode [ 396.111203][ T64] tipc: Subscription rejected, illegal request [ 396.538936][T20056] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6731'. [ 396.764160][T20071] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6738'. [ 397.743709][T20125] net_ratelimit: 217 callbacks suppressed [ 397.743729][T20125] team_slave_0: mtu greater than device maximum [ 398.029108][T20139] batman_adv: batadv0: Adding interface: ipvlan2 [ 398.038178][T20139] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 398.073790][T20139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 398.087579][T20139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.098176][T20139] batman_adv: batadv0: Interface activated: ipvlan2 [ 398.134131][T20144] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6772'. [ 398.352679][T20156] netlink: 'syz.3.6778': attribute type 9 has an invalid length. [ 399.141209][T20196] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6797'. [ 399.501687][T20217] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6808'. [ 399.649439][T20217] macvtap2: entered promiscuous mode [ 399.663363][T20227] openvswitch: netlink: IP tunnel dst address not specified [ 399.671961][T20217] vlan0: entered promiscuous mode [ 399.678260][T20217] macvtap2: entered allmulticast mode [ 399.686382][T20217] vlan0: entered allmulticast mode [ 399.696499][T20217] veth0_vlan: entered allmulticast mode [ 399.709835][T20225] netlink: 52 bytes leftover after parsing attributes in process `syz.2.6811'. [ 399.822227][T20231] sch_fq: defrate 0 ignored. [ 400.037579][T20243] netlink: 'syz.0.6820': attribute type 4 has an invalid length. [ 400.275700][T20257] netlink: 'syz.3.6827': attribute type 2 has an invalid length. [ 400.301939][T20257] netlink: 'syz.3.6827': attribute type 8 has an invalid length. [ 400.312948][T20257] netlink: 1148 bytes leftover after parsing attributes in process `syz.3.6827'. [ 400.759224][T20278] bridge2: entered promiscuous mode [ 400.775370][T20278] bridge2: entered allmulticast mode [ 401.073959][T20302] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6849'. [ 401.589149][T20333] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6863'. [ 401.859640][T20347] tipc: New replicast peer: 255.255.255.255 [ 401.880105][T20347] tipc: Enabled bearer , priority 10 [ 401.912701][T20349] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6871'. [ 402.451903][T20377] netlink: 'syz.4.6884': attribute type 2 has an invalid length. [ 403.077351][T20411] IPv6: NLM_F_CREATE should be specified when creating new route [ 404.094934][T20460] gtp1: entered promiscuous mode [ 404.149982][T20460] gtp1: entered allmulticast mode [ 405.618452][T20529] lo speed is unknown, defaulting to 1000 [ 405.661037][T20529] lo speed is unknown, defaulting to 1000 [ 406.328869][T20566] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 406.510990][T20572] netlink: 188 bytes leftover after parsing attributes in process `syz.0.6973'. [ 406.972526][T20592] netlink: 104 bytes leftover after parsing attributes in process `syz.4.6982'. [ 407.251907][T20604] netlink: 52 bytes leftover after parsing attributes in process `syz.2.6987'. [ 407.275101][T20604] netlink: 52 bytes leftover after parsing attributes in process `syz.2.6987'. [ 407.305627][T20605] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6988'. [ 407.342971][T20605] macsec0: entered promiscuous mode [ 408.702625][T20676] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7021'. [ 408.780722][T20680] netlink: 'syz.2.7023': attribute type 8 has an invalid length. [ 408.806721][T20680] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7023'. [ 408.817074][T20680] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.827861][T20680] bridge0: entered allmulticast mode [ 408.871299][T20687] netlink: 104 bytes leftover after parsing attributes in process `syz.4.7026'. [ 409.060413][T20691] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7028'. [ 409.253979][T20705] netlink: 'syz.0.7034': attribute type 5 has an invalid length. [ 410.152019][T20752] netlink: 248 bytes leftover after parsing attributes in process `syz.1.7058'. [ 411.024632][T20801] tipc: Enabled bearer , priority 10 [ 412.135282][ T5900] tipc: Node number set to 3758096386 [ 412.268638][T20866] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 414.208984][T20962] __nla_validate_parse: 3 callbacks suppressed [ 414.209005][T20962] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7158'. [ 414.229940][T20962] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7158'. [ 414.467351][T20974] syz.1.7165: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 414.514393][T20974] CPU: 1 UID: 0 PID: 20974 Comm: syz.1.7165 Not tainted 6.16.0-rc3-syzkaller-00122-g60f7f4afaf6d #0 PREEMPT(full) [ 414.514424][T20974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 414.514444][T20974] Call Trace: [ 414.514453][T20974] [ 414.514462][T20974] dump_stack_lvl+0x189/0x250 [ 414.514514][T20974] ? __pfx_dump_stack_lvl+0x10/0x10 [ 414.514543][T20974] ? __pfx__printk+0x10/0x10 [ 414.514564][T20974] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 414.514585][T20974] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 414.514608][T20974] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 414.514631][T20974] warn_alloc+0x214/0x310 [ 414.514655][T20974] ? stack_depot_save_flags+0x40/0x900 [ 414.514687][T20974] ? __pfx_warn_alloc+0x10/0x10 [ 414.514713][T20974] ? kasan_save_track+0x4f/0x80 [ 414.514744][T20974] ? xskq_create+0x56/0x170 [ 414.514770][T20974] ? xsk_init_queue+0xb0/0x110 [ 414.514795][T20974] ? xsk_setsockopt+0x43f/0x710 [ 414.514819][T20974] ? do_sock_setsockopt+0x25a/0x3e0 [ 414.514841][T20974] ? __x64_sys_setsockopt+0x18b/0x220 [ 414.514863][T20974] ? do_syscall_64+0xfa/0x3b0 [ 414.514893][T20974] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.514922][T20974] __vmalloc_node_range_noprof+0x125/0x12f0 [ 414.514976][T20974] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 414.515008][T20974] ? __kasan_kmalloc+0x93/0xb0 [ 414.515031][T20974] vmalloc_user_noprof+0xad/0xf0 [ 414.515053][T20974] ? xskq_create+0xbf/0x170 [ 414.515083][T20974] xskq_create+0xbf/0x170 [ 414.515114][T20974] xsk_init_queue+0xb0/0x110 [ 414.515151][T20974] xsk_setsockopt+0x43f/0x710 [ 414.515182][T20974] ? __pfx_xsk_setsockopt+0x10/0x10 [ 414.515209][T20974] ? __lock_acquire+0xab9/0xd20 [ 414.515249][T20974] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 414.515275][T20974] ? __pfx_xsk_setsockopt+0x10/0x10 [ 414.515304][T20974] do_sock_setsockopt+0x25a/0x3e0 [ 414.515331][T20974] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 414.515356][T20974] ? __fget_files+0x2a/0x420 [ 414.515389][T20974] __x64_sys_setsockopt+0x18b/0x220 [ 414.515416][T20974] do_syscall_64+0xfa/0x3b0 [ 414.515441][T20974] ? lockdep_hardirqs_on+0x9c/0x150 [ 414.515466][T20974] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.515484][T20974] ? clear_bhb_loop+0x60/0xb0 [ 414.515505][T20974] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.515522][T20974] RIP: 0033:0x7f9e44f8e929 [ 414.515544][T20974] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 414.515560][T20974] RSP: 002b:00007f9e45d4c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 414.515579][T20974] RAX: ffffffffffffffda RBX: 00007f9e451b5fa0 RCX: 00007f9e44f8e929 [ 414.515593][T20974] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 414.515603][T20974] RBP: 00007f9e45010b39 R08: 0000000000000004 R09: 0000000000000000 [ 414.515614][T20974] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 414.515625][T20974] R13: 0000000000000000 R14: 00007f9e451b5fa0 R15: 00007ffdacea4c88 [ 414.515652][T20974] [ 414.834712][T20979] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7167'. [ 414.838149][T20974] Mem-Info: [ 414.850351][T20974] active_anon:5157 inactive_anon:0 isolated_anon:0 [ 414.850351][T20974] active_file:1147 inactive_file:39953 isolated_file:0 [ 414.850351][T20974] unevictable:768 dirty:243 writeback:0 [ 414.850351][T20974] slab_reclaimable:11153 slab_unreclaimable:111226 [ 414.850351][T20974] mapped:29112 shmem:1370 pagetables:1158 [ 414.850351][T20974] sec_pagetables:0 bounce:0 [ 414.850351][T20974] kernel_misc_reclaimable:0 [ 414.850351][T20974] free:1316883 free_pcp:14093 free_cma:0 [ 414.902702][T20974] Node 0 active_anon:20672kB inactive_anon:0kB active_file:4588kB inactive_file:159608kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116408kB dirty:992kB writeback:0kB shmem:3944kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11796kB pagetables:4328kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 414.946110][T20974] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 414.997652][T20974] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 415.033620][T20974] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 415.039576][T20974] Node 0 DMA32 free:1351460kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:20428kB inactive_anon:0kB active_file:4588kB inactive_file:157772kB unevictable:1536kB writepending:992kB present:3129332kB managed:2561004kB mlocked:0kB bounce:0kB free_pcp:37864kB local_pcp:14756kB free_cma:0kB [ 415.080671][T20974] lowmem_reserve[]: 0 0 1 1 1 [ 415.095327][T20974] Node 0 Normal free:4kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1836kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 415.148428][T20974] lowmem_reserve[]: 0 0 0 0 0 [ 415.160561][T20974] Node 1 Normal free:3903572kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:16128kB local_pcp:992kB free_cma:0kB [ 415.193906][T20974] lowmem_reserve[]: 0 0 0 0 0 [ 415.203435][T20974] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 415.241404][T20974] Node 0 DMA32: 2208*4kB (UM) 691*8kB (UME) 80*16kB (UME) 177*32kB (UM) 119*64kB (UME) 125*128kB (UME) 82*256kB (UME) 39*512kB (UM) 12*1024kB (U) 6*2048kB (UME) 303*4096kB (UM) = 1351544kB [ 415.290438][T20974] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 415.326247][T20974] Node 1 Normal: 211*4kB (UM) 47*8kB (UME) 49*16kB (UME) 170*32kB (UME) 41*64kB (UME) 10*128kB (UME) 2*256kB (M) 3*512kB (UM) 1*1024kB (M) 1*2048kB (U) 949*4096kB (M) = 3903572kB [ 415.379068][T20974] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 415.451288][T20974] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 415.517819][T20974] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 415.561740][T20974] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 415.572177][T21007] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7179'. [ 415.582561][T21007] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 415.590325][T20974] 42466 total pagecache pages [ 415.600443][T21007] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 415.612044][T20974] 0 pages in swap cache [ 415.618000][T20974] Free swap = 124996kB [ 415.635089][T20974] Total swap = 124996kB [ 415.648280][T20974] 2097051 pages RAM [ 415.659507][T20974] 0 pages HighMem/MovableOnly [ 415.687527][T20974] 424694 pages reserved [ 415.691768][T20974] 0 pages cma reserved [ 416.352379][T21046] veth0: entered promiscuous mode [ 416.358751][T21045] veth0: left promiscuous mode [ 416.913097][T21076] netlink: 340 bytes leftover after parsing attributes in process `syz.2.7212'. [ 417.441492][T21096] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7223'. [ 417.652340][T21105] netlink: 104 bytes leftover after parsing attributes in process `syz.0.7225'. [ 417.751576][T21111] netlink: 'syz.1.7228': attribute type 25 has an invalid length. [ 417.764660][T21111] netlink: 'syz.1.7228': attribute type 7 has an invalid length. [ 418.316254][T21136] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 418.564383][T21150] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7245'. [ 418.609766][T21151] netem: change failed [ 418.806545][T21164] netlink: 'syz.1.7251': attribute type 1 has an invalid length. [ 419.290952][T21190] bridge_slave_0: invalid flags given to default FDB implementation [ 419.408693][T21196] netlink: 'syz.0.7267': attribute type 5 has an invalid length. [ 419.631666][T21207] netlink: 'syz.3.7272': attribute type 1 has an invalid length. [ 419.708279][T21209] netlink: 108 bytes leftover after parsing attributes in process `syz.0.7273'. [ 419.726888][T21209] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7273'. [ 419.801770][T21215] netlink: 165 bytes leftover after parsing attributes in process `syz.3.7275'. [ 419.937738][T21221] netlink: 104 bytes leftover after parsing attributes in process `syz.2.7279'. [ 420.383818][T21245] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7290'. [ 420.920955][T21276] netlink: 'syz.0.7304': attribute type 29 has an invalid length. [ 420.933748][T21278] netlink: 64 bytes leftover after parsing attributes in process `syz.3.7303'. [ 420.962726][T21276] netlink: 'syz.0.7304': attribute type 29 has an invalid length. [ 420.990176][T21276] netlink: 'syz.0.7304': attribute type 29 has an invalid length. [ 421.532578][T21307] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7315'. [ 421.541823][T21307] netlink: 'syz.0.7315': attribute type 3 has an invalid length. [ 421.792644][T21317] netlink: 'syz.1.7320': attribute type 1 has an invalid length. [ 421.801129][T21317] netlink: 188 bytes leftover after parsing attributes in process `syz.1.7320'. [ 421.810947][T21317] NCSI netlink: No device for ifindex 458760 [ 422.320986][T21347] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 422.766039][T21373] validate_nla: 1 callbacks suppressed [ 422.766062][T21373] netlink: 'syz.4.7343': attribute type 3 has an invalid length. [ 422.808895][T21373] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 422.896717][T21380] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7348'. [ 422.943636][T21378] sctp: [Deprecated]: syz.0.7347 (pid 21378) Use of int in max_burst socket option deprecated. [ 422.943636][T21378] Use struct sctp_assoc_value instead [ 423.024064][T21384] netlink: 104 bytes leftover after parsing attributes in process `syz.4.7349'. [ 423.188619][ T1149] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 423.211046][ T30] audit: type=1804 audit(1751314769.909:4): pid=21394 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.7354" name="/newroot/1435/cgroup.controllers" dev="tmpfs" ino=7215 res=1 errno=0 [ 423.243459][ T1149] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 423.252197][ T5913] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 423.285338][ T30] audit: type=1800 audit(1751314769.909:5): pid=21394 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.7354" name="cgroup.controllers" dev="tmpfs" ino=7215 res=0 errno=0 [ 423.965783][ T5900] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 424.206332][ T5900] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 424.774307][T21471] __nla_validate_parse: 7 callbacks suppressed [ 424.774331][T21471] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7392'. [ 425.029479][T21488] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7400'. [ 425.053143][T21488] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7400'. [ 425.314144][T21504] netlink: 'syz.2.7408': attribute type 1 has an invalid length. [ 425.342935][T21504] netlink: 172 bytes leftover after parsing attributes in process `syz.2.7408'. [ 425.760690][T21527] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7420'. [ 426.502741][T21567] netlink: 'syz.4.7439': attribute type 83 has an invalid length. [ 427.059637][T21592] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 427.431503][T21608] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7454'. [ 427.485377][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 427.807353][T21629] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7463'. [ 428.236893][T21653] netlink: 64 bytes leftover after parsing attributes in process `syz.4.7474'. [ 428.334888][T21658] sch_tbf: burst 8 is lower than device ip6tnl0 mtu (1452) ! [ 428.660644][T21669] netlink: 'syz.0.7483': attribute type 1 has an invalid length. [ 429.030925][T21684] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.7491'. [ 429.123412][T21688] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 429.637900][T21710] netlink: 146840 bytes leftover after parsing attributes in process `syz.4.7503'. [ 430.347523][T21740] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7516'. [ 430.404992][T21740] netlink: 10 bytes leftover after parsing attributes in process `syz.2.7516'. [ 430.703146][T21758] netem: incorrect ge model size [ 430.712987][T21758] netem: change failed [ 430.903497][T21764] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7527'. [ 431.163086][T21783] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7536'. [ 431.495637][T21800] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7543'. [ 431.756815][T21814] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7550'. [ 431.872234][T21819] netlink: 'syz.3.7552': attribute type 1 has an invalid length. [ 431.890404][T21819] netlink: 172 bytes leftover after parsing attributes in process `syz.3.7552'. [ 432.741592][T21854] netlink: 'syz.2.7569': attribute type 9 has an invalid length. [ 432.749750][T21854] netlink: 212260 bytes leftover after parsing attributes in process `syz.2.7569'. [ 432.912471][T21865] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7574'. [ 434.587963][T21965] netlink: 256 bytes leftover after parsing attributes in process `syz.4.7621'. [ 435.060423][T21981] netlink: 'syz.2.7628': attribute type 10 has an invalid length. [ 436.125421][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 436.154534][T22026] __nla_validate_parse: 2 callbacks suppressed [ 436.154555][T22026] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7649'. [ 436.176672][T22026] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7649'. [ 436.190097][T22026] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7649'. [ 437.311108][T22072] netlink: 'syz.3.7670': attribute type 4 has an invalid length. [ 437.334594][T22074] netlink: 'syz.1.7671': attribute type 1 has an invalid length. [ 437.360959][T22074] netlink: 'syz.1.7671': attribute type 4 has an invalid length. [ 437.374476][T22074] netlink: 192 bytes leftover after parsing attributes in process `syz.1.7671'. [ 437.557652][T22083] bridge0: entered allmulticast mode [ 437.589606][T22086] netlink: 'syz.4.7677': attribute type 2 has an invalid length. [ 437.624583][T22086] netlink: 88 bytes leftover after parsing attributes in process `syz.4.7677'. [ 437.882096][ T5925] hid-generic 0005:046D:FFF9.0002: item fetching failed at offset 0/1 [ 437.940893][ T5925] hid-generic 0005:046D:FFF9.0002: probe with driver hid-generic failed with error -22 [ 438.329226][T22128] xt_hashlimit: size too large, truncated to 1048576 [ 438.386927][T22132] netlink: 'syz.1.7696': attribute type 1 has an invalid length. [ 438.402671][T22133] : renamed from bridge_slave_0 (while UP) [ 438.411964][T22132] netlink: 'syz.1.7696': attribute type 2 has an invalid length. [ 438.425344][T22132] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7696'. [ 438.447741][T22132] netlink: 'syz.1.7696': attribute type 1 has an invalid length. [ 438.479241][T22132] netlink: 'syz.1.7696': attribute type 2 has an invalid length. [ 438.495776][T22132] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7696'. [ 438.882111][T22150] netlink: 'syz.2.7706': attribute type 29 has an invalid length. [ 439.124680][T22162] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7711'. [ 439.223385][T22168] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7714'. [ 439.591060][T22185] bond4: entered promiscuous mode [ 439.606088][T22185] 8021q: adding VLAN 0 to HW filter on device bond4 [ 439.771437][T22190] 8021q: adding VLAN 0 to HW filter on device bond5 [ 439.793099][T22200] netlink: 'syz.4.7728': attribute type 11 has an invalid length. [ 439.800397][T22190] bond4: (slave bond5): making interface the new active one [ 439.825431][T22190] bond5: entered promiscuous mode [ 439.832182][T22190] bond4: (slave bond5): Enslaving as an active interface with an up link [ 439.971027][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.994275][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.027225][T22208] netlink: 44 bytes leftover after parsing attributes in process `syz.1.7731'. [ 440.573366][T22233] sctp: [Deprecated]: syz.1.7743 (pid 22233) Use of struct sctp_assoc_value in delayed_ack socket option. [ 440.573366][T22233] Use struct sctp_sack_info instead [ 440.913894][T22253] validate_nla: 3 callbacks suppressed [ 440.913915][T22253] netlink: 'syz.2.7752': attribute type 1 has an invalid length. [ 440.942896][T22253] netlink: 'syz.2.7752': attribute type 10 has an invalid length. [ 440.957714][T22253] netlink: 'syz.2.7752': attribute type 4 has an invalid length. [ 441.269214][T22272] __nla_validate_parse: 4 callbacks suppressed [ 441.269235][T22272] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7760'. [ 441.360919][T22274] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7761'. [ 441.592859][T22285] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7766'. [ 441.899018][T22302] tipc: Started in network mode [ 441.904216][T22302] tipc: Node identity ac14142f, cluster identity 4711 [ 441.911368][T22302] tipc: New replicast peer: 0.0.0.0 [ 441.921075][T22302] tipc: Enabled bearer , priority 10 [ 441.934609][T22302] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00aa [ 442.136259][T22313] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7780'. [ 442.272353][T22321] vcan0: tx drop: invalid da for name 0xffffffffffffffff [ 442.532386][T22331] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 442.826423][T22350] netlink: 'syz.1.7796': attribute type 2 has an invalid length. [ 442.861769][T22347] syzkaller1: entered promiscuous mode [ 442.875672][T22347] syzkaller1: entered allmulticast mode [ 443.075876][ T976] tipc: Node number set to 2886997039 [ 443.670701][T22384] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.7811'. [ 443.803170][T22389] veth0: entered promiscuous mode [ 443.819951][T22389] veth0: left promiscuous mode [ 443.905856][T22395] netlink: 14560 bytes leftover after parsing attributes in process `syz.4.7816'. [ 444.005246][T22401] batadv_slave_1: entered promiscuous mode [ 444.026995][T22400] batadv_slave_1: left promiscuous mode [ 444.262520][T22414] team_slave_0: left promiscuous mode [ 444.283584][T22414] team_slave_1: left promiscuous mode [ 444.396851][T22414] team0 (unregistering): Port device team_slave_0 removed [ 444.462563][T22414] team0 (unregistering): Port device team_slave_1 removed [ 444.944942][T22443] netlink: 'syz.0.7835': attribute type 4 has an invalid length. [ 444.991827][T22447] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7839'. [ 445.138442][T22455] xt_hashlimit: size too large, truncated to 1048576 [ 445.209369][T22458] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7842'. [ 446.884413][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 446.893621][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 446.901899][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 446.911090][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 446.925061][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 447.073976][T22520] lo speed is unknown, defaulting to 1000 [ 447.087744][T22520] lo speed is unknown, defaulting to 1000 [ 447.544024][T22546] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7880'. [ 447.752279][T22552] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7883'. [ 447.763076][T22552] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7883'. [ 447.775750][T22552] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7883'. [ 447.784769][T22552] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7883'. [ 447.980940][ T1149] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.185922][ T1149] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.465895][ T1149] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.556285][T22520] chnl_net:caif_netlink_parms(): no params data found [ 448.680615][ T1149] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.790691][ T5838] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 448.799896][ T5838] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 448.808342][ T5838] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 448.819571][ T5838] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 448.829056][ T5838] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 449.005652][ T51] Bluetooth: hci0: command tx timeout [ 449.065093][T22520] bridge0: port 1(bridge_slave_0) entered blocking state [ 449.091585][T22520] bridge0: port 1(bridge_slave_0) entered disabled state [ 449.104991][T22520] bridge_slave_0: entered allmulticast mode [ 449.117903][T22520] bridge_slave_0: entered promiscuous mode [ 449.129732][T22520] bridge0: port 2(bridge_slave_1) entered blocking state [ 449.161192][T22520] bridge0: port 2(bridge_slave_1) entered disabled state [ 449.176041][T22520] bridge_slave_1: entered allmulticast mode [ 449.184409][T22520] bridge_slave_1: entered promiscuous mode [ 449.330989][T22520] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 449.355412][T22582] lo speed is unknown, defaulting to 1000 [ 449.397962][T22520] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 449.416923][T22582] lo speed is unknown, defaulting to 1000 [ 449.562989][T22520] team0: Port device team_slave_0 added [ 449.589148][T22520] team0: Port device team_slave_1 added [ 449.637026][ T1149] bridge_slave_0: left allmulticast mode [ 449.643167][ T1149] bridge_slave_0: left promiscuous mode [ 449.656738][ T1149] bridge0: port 1(bridge_slave_0) entered disabled state [ 449.773069][T22608] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 450.215417][T22618] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7911'. [ 450.480426][ T1149] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 450.494999][ T1149] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 450.508920][ T1149] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 450.520467][ T1149] bond0 (unregistering): Released all slaves [ 450.525265][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 450.541132][ T1149] bond1 (unregistering): Released all slaves [ 450.558321][ T1149] bond2 (unregistering): Released all slaves [ 450.576393][ T1149] bond3 (unregistering): Released all slaves [ 450.666484][T22520] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 450.685937][T22520] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 450.721217][T22520] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 450.749231][T22520] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 450.767495][T22520] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 450.807735][T22520] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 450.826119][ T1149] tipc: Disabling bearer [ 450.849122][ T51] Bluetooth: hci4: command tx timeout [ 450.863732][ T1149] tipc: Disabling bearer [ 450.880308][ T1149] tipc: Left network mode [ 451.075111][T22635] openvswitch: netlink: IPv4 tun info is not correct [ 451.086538][ T51] Bluetooth: hci0: command tx timeout [ 451.158307][T22520] hsr_slave_0: entered promiscuous mode [ 451.189713][T22520] hsr_slave_1: entered promiscuous mode [ 451.206416][T22520] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 451.214135][T22520] Cannot create hsr debugfs directory [ 451.565236][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 452.605333][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 452.765454][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 452.791935][T22703] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 452.823987][T22520] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.911040][T22582] chnl_net:caif_netlink_parms(): no params data found [ 452.932228][ T51] Bluetooth: hci4: command tx timeout [ 453.117266][T22520] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.165887][ T51] Bluetooth: hci0: command tx timeout [ 453.261191][ T1149] hsr_slave_0: left promiscuous mode [ 453.288957][ T1149] hsr_slave_1: left promiscuous mode [ 453.305281][ T1149] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 453.312842][ T1149] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 453.350493][ T1149] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 453.358139][ T1149] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 453.389657][ T1149] veth1_macvtap: left promiscuous mode [ 453.395823][ T1149] veth0_macvtap: left promiscuous mode [ 453.402483][ T1149] veth1_vlan: left promiscuous mode [ 453.409688][ T1149] veth0_vlan: left promiscuous mode [ 453.645230][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 453.672470][ T1149] pim6reg527 (unregistering): left allmulticast mode [ 454.083291][ T1149] team0 (unregistering): Port device team_slave_1 removed [ 454.129404][ T1149] team0 (unregistering): Port device team_slave_0 removed [ 454.561499][T22520] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.685629][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 454.729296][T22520] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.991425][T22760] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7957'. [ 455.005311][ T51] Bluetooth: hci4: command tx timeout [ 455.180311][T22765] netlink: 'syz.4.7958': attribute type 4 has an invalid length. [ 455.192033][T22582] bridge0: port 1(bridge_slave_0) entered blocking state [ 455.203860][T22582] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.235808][T22582] bridge_slave_0: entered allmulticast mode [ 455.245443][ T51] Bluetooth: hci0: command tx timeout [ 455.261927][T22582] bridge_slave_0: entered promiscuous mode [ 455.322843][T22582] bridge0: port 2(bridge_slave_1) entered blocking state [ 455.375523][T22582] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.382849][T22582] bridge_slave_1: entered allmulticast mode [ 455.438702][T22582] bridge_slave_1: entered promiscuous mode [ 455.599993][T22582] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 455.645513][T22582] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 455.694440][ T1149] IPVS: stop unused estimator thread 0... [ 455.725263][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 455.942125][T22582] team0: Port device team_slave_0 added [ 456.039972][T22582] team0: Port device team_slave_1 added [ 456.171191][T22582] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 456.183423][T22582] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 456.215071][T22582] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 456.235799][T22582] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 456.242926][T22582] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 456.269233][T22582] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 456.360353][T22520] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 456.388256][T22520] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 456.458074][T22520] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 456.477392][T22520] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 456.541001][T22582] hsr_slave_0: entered promiscuous mode [ 456.567776][T22582] hsr_slave_1: entered promiscuous mode [ 456.586096][T22582] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 456.608314][T22582] Cannot create hsr debugfs directory [ 456.765245][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 457.095995][ T51] Bluetooth: hci4: command tx timeout [ 457.222256][T22520] 8021q: adding VLAN 0 to HW filter on device bond0 [ 457.543148][T22520] 8021q: adding VLAN 0 to HW filter on device team0 [ 457.723213][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 457.730515][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 457.773194][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 457.780463][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 457.805409][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 458.152975][T22582] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 458.190506][T22582] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 458.213556][T22861] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7987'. [ 458.251597][T22582] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 458.289210][T22582] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 458.680216][T22520] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 458.718500][T22582] 8021q: adding VLAN 0 to HW filter on device bond0 [ 458.798031][T22582] 8021q: adding VLAN 0 to HW filter on device team0 [ 458.845274][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 458.861091][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 458.868354][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 458.894510][T22887] lo speed is unknown, defaulting to 1000 [ 458.901476][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 458.908705][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 458.960643][T22887] lo speed is unknown, defaulting to 1000 [ 458.991295][T22520] veth0_vlan: entered promiscuous mode [ 459.025062][T22895] netlink: 'syz.4.7996': attribute type 20 has an invalid length. [ 459.070326][T22520] veth1_vlan: entered promiscuous mode [ 459.165430][ T51] Bluetooth: hci4: command tx timeout [ 459.227603][T22582] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 459.342977][T22520] veth0_macvtap: entered promiscuous mode [ 459.392699][T22520] veth1_macvtap: entered promiscuous mode [ 459.501857][T22520] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 459.538917][T22907] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.7999'. [ 459.556015][T22908] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7998'. [ 459.568182][T22520] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 459.593849][T22520] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.655016][T22520] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.675451][T22520] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.684229][T22520] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.885591][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 460.054748][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 460.083303][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 460.160690][ T1149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 460.167752][T22582] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 460.190940][ T1149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 460.327880][T22926] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 460.421221][T22853] hid-generic 0005:0C45:1010.0003: item fetching failed at offset 0/1 [ 460.449751][T22853] hid-generic 0005:0C45:1010.0003: probe with driver hid-generic failed with error -22 [ 460.578869][T22582] veth0_vlan: entered promiscuous mode [ 460.699751][T22582] veth1_vlan: entered promiscuous mode [ 460.925570][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 461.188660][ T36] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.321445][ T36] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.457313][T22582] veth0_macvtap: entered promiscuous mode [ 461.526501][T22582] veth1_macvtap: entered promiscuous mode [ 461.632576][ T36] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.711453][T22582] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 461.750233][T22965] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.8015'. [ 461.883116][ T36] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.964141][T22582] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 461.965453][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 462.032694][T22582] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.060311][T22582] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.095505][T22582] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.104279][T22582] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.343550][ T5838] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 462.354407][ T5838] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 462.376769][ T5838] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 462.400804][ T5838] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 462.410747][ T5838] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 462.885526][ T36] bridge_slave_1: left allmulticast mode [ 462.891777][ T36] bridge_slave_1: left promiscuous mode [ 462.905443][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 462.913411][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 462.949133][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 463.005431][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 463.016090][ T36] bridge_slave_0: left allmulticast mode [ 463.021804][ T36] bridge_slave_0: left promiscuous mode [ 463.046972][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 463.701039][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 463.713803][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 463.736980][ T36] bond0 (unregistering): Released all slaves [ 463.772002][T22983] lo speed is unknown, defaulting to 1000 [ 463.825751][T22983] lo speed is unknown, defaulting to 1000 [ 463.912972][ T1149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 463.940906][ T1149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 464.045302][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 464.455548][ T51] Bluetooth: hci0: command tx timeout [ 464.926708][T23053] syzkaller1: entered promiscuous mode [ 464.937482][T23053] syzkaller1: entered allmulticast mode [ 465.085302][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 465.582759][ T36] hsr_slave_0: left promiscuous mode [ 465.596958][ T36] hsr_slave_1: left promiscuous mode [ 465.615880][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 465.624063][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 465.638808][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 465.662902][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 465.698266][T23076] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8042'. [ 465.746032][ T36] veth1_macvtap: left promiscuous mode [ 465.751659][ T36] veth0_macvtap: left promiscuous mode [ 465.765453][ T36] veth1_vlan: left promiscuous mode [ 465.770915][ T36] veth0_vlan: left promiscuous mode [ 465.952938][T23081] netlink: 'syz.1.8044': attribute type 1 has an invalid length. [ 466.087940][ T5838] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 466.097969][ T5838] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 466.109924][ T5838] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 466.125264][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 466.143460][ T5838] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 466.151619][ T5838] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 466.249631][T23087] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8046'. [ 466.529590][ T51] Bluetooth: hci0: command tx timeout [ 466.663783][ T36] team0 (unregistering): Port device team_slave_1 removed [ 466.737782][ T36] team0 (unregistering): Port device team_slave_0 removed [ 467.165341][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 467.371908][T23082] lo speed is unknown, defaulting to 1000 [ 467.417094][T23082] lo speed is unknown, defaulting to 1000 [ 467.522038][T22983] chnl_net:caif_netlink_parms(): no params data found [ 467.572072][T23109] sctp: [Deprecated]: syz.3.8054 (pid 23109) Use of struct sctp_assoc_value in delayed_ack socket option. [ 467.572072][T23109] Use struct sctp_sack_info instead [ 467.611014][T23109] sctp: [Deprecated]: syz.3.8054 (pid 23109) Use of struct sctp_assoc_value in delayed_ack socket option. [ 467.611014][T23109] Use struct sctp_sack_info instead [ 468.058163][T22983] bridge0: port 1(bridge_slave_0) entered blocking state [ 468.095425][T22983] bridge0: port 1(bridge_slave_0) entered disabled state [ 468.114402][T22983] bridge_slave_0: entered allmulticast mode [ 468.137984][T23131] netlink: 'syz.1.8059': attribute type 4 has an invalid length. [ 468.160042][T22983] bridge_slave_0: entered promiscuous mode [ 468.205299][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 468.216199][ T51] Bluetooth: hci4: command tx timeout [ 468.263087][T22983] bridge0: port 2(bridge_slave_1) entered blocking state [ 468.306221][T22983] bridge0: port 2(bridge_slave_1) entered disabled state [ 468.313542][T22983] bridge_slave_1: entered allmulticast mode [ 468.345113][T22983] bridge_slave_1: entered promiscuous mode [ 468.604013][T22983] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 468.618112][ T51] Bluetooth: hci0: command tx timeout [ 468.728331][T22983] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 468.892843][T23159] netlink: 'syz.1.8065': attribute type 17 has an invalid length. [ 468.908015][T23159] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8065'. [ 468.927317][T23159] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8065'. [ 469.245362][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 470.285268][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 470.297617][ T51] Bluetooth: hci4: command tx timeout [ 470.356540][T22983] team0: Port device team_slave_0 added [ 470.462822][T22983] team0: Port device team_slave_1 added [ 470.508262][T23166] netlink: 'syz.4.8066': attribute type 4 has an invalid length. [ 470.644174][ T36] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.696644][ T51] Bluetooth: hci0: command tx timeout [ 470.742134][ T36] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.764779][T22983] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 470.773398][T22983] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 470.806636][T22983] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 470.823702][T22983] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 470.838928][T22983] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 470.865410][T22983] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 470.977465][ T36] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.013131][T23187] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8075'. [ 471.090941][ T36] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.325804][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 471.373901][T22983] hsr_slave_0: entered promiscuous mode [ 471.387354][T22983] hsr_slave_1: entered promiscuous mode [ 471.394311][T22983] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 471.402190][T22983] Cannot create hsr debugfs directory [ 471.699363][T23082] chnl_net:caif_netlink_parms(): no params data found [ 472.051309][ T36] bridge_slave_1: left allmulticast mode [ 472.067440][ T36] bridge_slave_1: left promiscuous mode [ 472.074405][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 472.100415][ T36] bridge_slave_0: left allmulticast mode [ 472.110166][ T36] bridge_slave_0: left promiscuous mode [ 472.131169][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 472.136179][T23226] netlink: 84 bytes leftover after parsing attributes in process `syz.1.8084'. [ 472.321675][T23228] netlink: 'syz.3.8085': attribute type 4 has an invalid length. [ 472.365323][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 472.369259][ T51] Bluetooth: hci4: command tx timeout [ 472.728748][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 472.747347][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 472.764000][ T36] bond0 (unregistering): Released all slaves [ 473.371798][T23082] bridge0: port 1(bridge_slave_0) entered blocking state [ 473.397570][T23082] bridge0: port 1(bridge_slave_0) entered disabled state [ 473.405319][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 473.405646][T23082] bridge_slave_0: entered allmulticast mode [ 473.437509][T23082] bridge_slave_0: entered promiscuous mode [ 473.670674][T23082] bridge0: port 2(bridge_slave_1) entered blocking state [ 473.687258][T23082] bridge0: port 2(bridge_slave_1) entered disabled state [ 473.715372][T23082] bridge_slave_1: entered allmulticast mode [ 473.738452][T23082] bridge_slave_1: entered promiscuous mode [ 474.169847][ T36] hsr_slave_0: left promiscuous mode [ 474.190513][ T36] hsr_slave_1: left promiscuous mode [ 474.213609][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 474.232642][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 474.242114][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 474.255643][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 474.290111][ T36] veth1_macvtap: left promiscuous mode [ 474.297653][ T36] veth0_macvtap: left promiscuous mode [ 474.303625][ T36] veth1_vlan: left promiscuous mode [ 474.320656][ T36] veth0_vlan: left promiscuous mode [ 474.445287][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 474.453614][ T51] Bluetooth: hci4: command tx timeout [ 474.879059][ T36] team0 (unregistering): Port device team_slave_1 removed [ 474.919261][ T36] team0 (unregistering): Port device team_slave_0 removed [ 475.322517][T23278] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 475.392829][T23082] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 475.466514][ T44] lo speed is unknown, defaulting to 1000 [ 475.485868][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 475.513572][T23082] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 475.778868][T23082] team0: Port device team_slave_0 added [ 475.887535][T23082] team0: Port device team_slave_1 added [ 475.950207][T22983] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 476.065707][T22983] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 476.079423][T22983] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 476.112006][T23082] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 476.137188][T23082] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 476.195306][T23082] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 476.210273][T23082] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 476.240657][T23082] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 476.268889][T23082] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 476.292955][T22983] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 476.479711][T23082] hsr_slave_0: entered promiscuous mode [ 476.489812][T23082] hsr_slave_1: entered promiscuous mode [ 476.502975][T23082] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 476.516290][T23082] Cannot create hsr debugfs directory [ 476.525314][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 477.173550][T22983] 8021q: adding VLAN 0 to HW filter on device bond0 [ 477.405725][T22983] 8021q: adding VLAN 0 to HW filter on device team0 [ 477.453336][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 477.460610][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 477.513953][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 477.521219][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 477.565307][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 477.905084][T23082] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 477.923522][T23382] IPVS: wrr: UDP 224.0.0.2:20004 - no destination available [ 477.938918][T23082] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 478.003994][T23082] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 478.061549][T23082] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 478.304351][T23082] 8021q: adding VLAN 0 to HW filter on device bond0 [ 478.391617][T23082] 8021q: adding VLAN 0 to HW filter on device team0 [ 478.462163][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 478.469411][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 478.521344][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 478.528729][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 478.599231][T22983] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 478.606256][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 478.826051][T22983] veth0_vlan: entered promiscuous mode [ 478.881660][T22983] veth1_vlan: entered promiscuous mode [ 479.031452][T22983] veth0_macvtap: entered promiscuous mode [ 479.068738][T22983] veth1_macvtap: entered promiscuous mode [ 479.196291][T22983] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 479.248676][T22983] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 479.286853][T22983] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.314708][T22983] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.344206][T22983] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.364481][T22983] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.599510][T23082] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 479.645490][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 479.799675][ T1012] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 479.820829][ T1012] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 479.980214][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 479.991836][T23082] veth0_vlan: entered promiscuous mode [ 480.010202][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 480.041026][T23082] veth1_vlan: entered promiscuous mode [ 480.236223][T23082] veth0_macvtap: entered promiscuous mode [ 480.267191][T23082] veth1_macvtap: entered promiscuous mode [ 480.440798][T23082] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 480.499100][T23082] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 480.685301][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 480.707079][T23460] af_packet: tpacket_rcv: packet too big, clamped from 39 to 4294967272. macoff=96 [ 480.754728][ T1149] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.796356][T23082] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.816965][T23082] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.839596][T23082] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.855450][T23082] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.981675][ T1149] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.162890][ T1149] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.227125][T23471] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8144'. [ 481.302496][ T1149] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.699806][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 481.725316][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 481.757778][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 481.907230][ T1149] bridge_slave_1: left allmulticast mode [ 481.933365][ T1149] bridge_slave_1: left promiscuous mode [ 481.955175][ T1149] bridge0: port 2(bridge_slave_1) entered disabled state [ 482.026737][ T1149] bridge_slave_0: left allmulticast mode [ 482.032910][ T1149] bridge_slave_0: left promiscuous mode [ 482.085953][ T1149] bridge0: port 1(bridge_slave_0) entered disabled state [ 482.145950][ T5838] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 482.156170][ T5838] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 482.164193][ T5838] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 482.173216][ T5838] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 482.181431][ T5838] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 482.448848][T23518] netlink: 104 bytes leftover after parsing attributes in process `syz.1.8157'. [ 482.712261][T23525] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8159'. [ 482.765234][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 483.072786][ T1149] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 483.086194][ T1149] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 483.098465][ T1149] bond0 (unregistering): Released all slaves [ 483.124858][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 483.149611][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 483.169726][T23515] netlink: 14528 bytes leftover after parsing attributes in process `syz.4.8156'. [ 483.281728][T23502] lo speed is unknown, defaulting to 1000 [ 483.317070][T23502] lo speed is unknown, defaulting to 1000 [ 483.665067][T23539] netlink: 'syz.3.8165': attribute type 2 has an invalid length. [ 483.805617][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 484.211294][ T5838] Bluetooth: hci0: command tx timeout [ 484.845329][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 484.928410][ T1149] hsr_slave_0: left promiscuous mode [ 484.956081][ T1149] hsr_slave_1: left promiscuous mode [ 484.993693][ T1149] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 485.018403][ T1149] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 485.057973][ T1149] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 485.080630][ T1149] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 485.190998][ T1149] veth1_macvtap: left promiscuous mode [ 485.215949][ T1149] veth0_macvtap: left promiscuous mode [ 485.221668][ T1149] veth1_vlan: left promiscuous mode [ 485.250538][ T1149] veth0_vlan: left promiscuous mode [ 485.538882][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 485.551192][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 485.559109][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 485.602547][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 485.615607][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 485.885278][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 486.285542][ T5838] Bluetooth: hci0: command tx timeout [ 486.321886][ T1149] team0 (unregistering): Port device team_slave_1 removed [ 486.367628][ T1149] team0 (unregistering): Port device team_slave_0 removed [ 486.686021][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 486.925227][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 486.961850][T23606] lo speed is unknown, defaulting to 1000 [ 486.983774][T23606] lo speed is unknown, defaulting to 1000 [ 487.049936][T23635] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8188'. [ 487.069642][T23635] netlink: 'syz.4.8188': attribute type 1 has an invalid length. [ 487.084951][T23635] netlink: 'syz.4.8188': attribute type 2 has an invalid length. [ 487.139319][T23502] chnl_net:caif_netlink_parms(): no params data found [ 487.687940][T23502] bridge0: port 1(bridge_slave_0) entered blocking state [ 487.697290][T23502] bridge0: port 1(bridge_slave_0) entered disabled state [ 487.715423][T23502] bridge_slave_0: entered allmulticast mode [ 487.726516][ T5838] Bluetooth: hci4: command tx timeout [ 487.740466][T23502] bridge_slave_0: entered promiscuous mode [ 487.750129][T23502] bridge0: port 2(bridge_slave_1) entered blocking state [ 487.757719][T23502] bridge0: port 2(bridge_slave_1) entered disabled state [ 487.765295][T23502] bridge_slave_1: entered allmulticast mode [ 487.773385][T23502] bridge_slave_1: entered promiscuous mode [ 487.965258][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 488.018299][T23502] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 488.111903][T23502] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 488.340775][ T1149] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.365564][ T5838] Bluetooth: hci0: command tx timeout [ 488.534395][ T1149] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.661715][T23502] team0: Port device team_slave_0 added [ 488.730294][ T1149] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.788580][T23502] team0: Port device team_slave_1 added [ 488.940366][ T1149] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.005232][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 489.037652][T23502] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 489.044673][T23502] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 489.081210][T23502] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 489.119888][T23502] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 489.138772][T23502] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 489.191488][T23502] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 489.423962][T23502] hsr_slave_0: entered promiscuous mode [ 489.600175][T23502] hsr_slave_1: entered promiscuous mode [ 489.622826][T23502] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 489.648917][T23502] Cannot create hsr debugfs directory [ 489.815699][ T5838] Bluetooth: hci4: command tx timeout [ 490.045248][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 490.221814][T23729] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8215'. [ 490.274368][ T1149] bridge_slave_1: left allmulticast mode [ 490.280482][ T1149] bridge_slave_1: left promiscuous mode [ 490.304340][ T1149] bridge0: port 2(bridge_slave_1) entered disabled state [ 490.325601][T23731] netlink: 'syz.3.8215': attribute type 1 has an invalid length. [ 490.333446][T23731] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8215'. [ 490.350018][ T1149] bridge_slave_0: left allmulticast mode [ 490.359189][ T1149] bridge_slave_0: left promiscuous mode [ 490.365013][ T1149] bridge0: port 1(bridge_slave_0) entered disabled state [ 490.445323][ T5838] Bluetooth: hci0: command tx timeout [ 490.759928][ T1149] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 490.773657][ T1149] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 490.784612][ T1149] bond0 (unregistering): Released all slaves [ 490.853539][T23606] chnl_net:caif_netlink_parms(): no params data found [ 490.951110][T23739] bridge0: port 1(bridge_slave_0) entered disabled state [ 491.085207][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 491.388219][T23760] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8227'. [ 491.440079][T23764] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8227'. [ 491.580219][T23606] bridge0: port 1(bridge_slave_0) entered blocking state [ 491.620551][T23606] bridge0: port 1(bridge_slave_0) entered disabled state [ 491.655410][T23606] bridge_slave_0: entered allmulticast mode [ 491.690956][T23606] bridge_slave_0: entered promiscuous mode [ 491.712848][T23606] bridge0: port 2(bridge_slave_1) entered blocking state [ 491.720890][T23606] bridge0: port 2(bridge_slave_1) entered disabled state [ 491.739958][T23606] bridge_slave_1: entered allmulticast mode [ 491.753613][T23606] bridge_slave_1: entered promiscuous mode [ 491.885597][ T5838] Bluetooth: hci4: command tx timeout [ 492.125241][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 492.274312][ T1149] hsr_slave_0: left promiscuous mode [ 492.295551][ T1149] hsr_slave_1: left promiscuous mode [ 492.301709][ T1149] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 492.312362][ T1149] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 492.330779][ T1149] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 492.339501][ T1149] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 492.380312][ T1149] veth1_macvtap: left promiscuous mode [ 492.386042][ T1149] veth0_macvtap: left promiscuous mode [ 492.391666][ T1149] veth1_vlan: left promiscuous mode [ 492.397616][ T1149] veth0_vlan: left promiscuous mode [ 492.934075][ T1149] team0 (unregistering): Port device team_slave_1 removed [ 492.977057][ T1149] team0 (unregistering): Port device team_slave_0 removed [ 493.166882][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 493.380288][T23606] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 493.546126][T23606] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 493.847529][T23606] team0: Port device team_slave_0 added [ 493.917796][T23606] team0: Port device team_slave_1 added [ 493.966000][ T5838] Bluetooth: hci4: command tx timeout [ 494.103212][T23606] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 494.121765][T23606] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 494.152986][T23606] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 494.188383][T23606] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 494.195518][T23606] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 494.221517][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 494.228910][T23606] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 494.398845][T23502] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 494.414850][T23502] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 494.468613][T23606] hsr_slave_0: entered promiscuous mode [ 494.485087][T23606] hsr_slave_1: entered promiscuous mode [ 494.494397][T23606] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 494.503047][T23606] Cannot create hsr debugfs directory [ 494.518001][T23502] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 494.557421][T23502] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 495.091445][T23502] 8021q: adding VLAN 0 to HW filter on device bond0 [ 495.159999][T23502] 8021q: adding VLAN 0 to HW filter on device team0 [ 495.180692][ T1111] bridge0: port 1(bridge_slave_0) entered blocking state [ 495.187935][ T1111] bridge0: port 1(bridge_slave_0) entered forwarding state [ 495.212341][ T1111] bridge0: port 2(bridge_slave_1) entered blocking state [ 495.219594][ T1111] bridge0: port 2(bridge_slave_1) entered forwarding state [ 495.245806][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 495.310447][T23859] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.8265'. [ 495.430719][T23606] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 495.468470][T23606] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 495.484191][T23606] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 495.549642][T23606] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 495.857104][T23606] 8021q: adding VLAN 0 to HW filter on device bond0 [ 495.876254][T23880] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.8271'. [ 495.906318][T23606] 8021q: adding VLAN 0 to HW filter on device team0 [ 495.933882][ T1149] bridge0: port 1(bridge_slave_0) entered blocking state [ 495.941135][ T1149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 495.978386][ T1149] bridge0: port 2(bridge_slave_1) entered blocking state [ 495.985608][ T1149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 496.046526][T23502] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 496.083428][T23885] netlink: 'syz.4.8273': attribute type 9 has an invalid length. [ 496.143908][T23885] netlink: 'syz.4.8273': attribute type 9 has an invalid length. [ 496.208385][T23502] veth0_vlan: entered promiscuous mode [ 496.239936][T23502] veth1_vlan: entered promiscuous mode [ 496.285369][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 496.364963][T23502] veth0_macvtap: entered promiscuous mode [ 496.390994][T23502] veth1_macvtap: entered promiscuous mode [ 496.449339][T23502] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 496.484858][T23502] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 496.525804][T23502] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.560045][T23502] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.577828][T23502] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.595284][T23502] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.744284][T23606] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 496.988709][T23600] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 497.001217][T23600] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 497.130159][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 497.133871][T23606] veth0_vlan: entered promiscuous mode [ 497.149409][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 497.217999][T23606] veth1_vlan: entered promiscuous mode [ 497.291555][T23920] syzkaller1: entered promiscuous mode [ 497.301311][T23920] syzkaller1: entered allmulticast mode [ 497.325216][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 497.460872][T23606] veth0_macvtap: entered promiscuous mode [ 497.507343][T23606] veth1_macvtap: entered promiscuous mode [ 497.548509][T23606] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 497.579898][T23606] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 497.615408][T23606] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.646152][T23606] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.654987][T23606] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.671454][T23606] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.722221][T23931] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8292'. [ 497.837393][T23935] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8294'. [ 497.937603][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 497.958147][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 498.040422][T23938] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8296'. [ 498.056583][T23938] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8296'. [ 498.170916][ T37] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.217160][ T1111] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 498.242114][ T1111] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 498.375391][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 498.378401][ T37] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.802730][ T37] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.934641][ T37] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.315885][ T37] bridge_slave_1: left allmulticast mode [ 499.321615][ T37] bridge_slave_1: left promiscuous mode [ 499.331859][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 499.353032][ T37] bridge_slave_0: left allmulticast mode [ 499.365217][ T37] bridge_slave_0: left promiscuous mode [ 499.378127][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 499.405370][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 499.463260][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 499.473777][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 499.482179][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 499.491690][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 499.501276][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 499.854401][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 499.886081][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 499.899726][ T37] bond0 (unregistering): Released all slaves [ 499.943753][T23959] lo speed is unknown, defaulting to 1000 [ 499.954875][T23959] lo speed is unknown, defaulting to 1000 [ 500.231420][T23971] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.8309'. [ 500.445352][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 500.761545][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 500.773180][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 500.782457][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 500.798207][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 500.808569][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 501.103358][ T37] hsr_slave_0: left promiscuous mode [ 501.131467][ T37] hsr_slave_1: left promiscuous mode [ 501.137853][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 501.155622][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 501.183834][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 501.203049][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 501.217362][T23991] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 501.264177][ T37] veth1_macvtap: left promiscuous mode [ 501.285241][ T37] veth0_macvtap: left promiscuous mode [ 501.295576][ T37] veth1_vlan: left promiscuous mode [ 501.317812][ T37] veth0_vlan: left promiscuous mode [ 501.411397][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.418073][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.485966][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 501.567850][ T51] Bluetooth: hci0: command tx timeout [ 502.284574][ T37] team0 (unregistering): Port device team_slave_1 removed [ 502.324811][ T37] team0 (unregistering): Port device team_slave_0 removed [ 502.537273][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 502.845595][ T51] Bluetooth: hci4: command tx timeout [ 502.918673][T24013] lo speed is unknown, defaulting to 1000 [ 502.956479][T23983] lo speed is unknown, defaulting to 1000 [ 502.964458][T24013] lo speed is unknown, defaulting to 1000 [ 503.112297][T23959] chnl_net:caif_netlink_parms(): no params data found [ 503.501508][T23959] bridge0: port 1(bridge_slave_0) entered blocking state [ 503.520221][T23959] bridge0: port 1(bridge_slave_0) entered disabled state [ 503.545428][T23959] bridge_slave_0: entered allmulticast mode [ 503.553909][T23959] bridge_slave_0: entered promiscuous mode [ 503.565552][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 503.573380][T23983] lo speed is unknown, defaulting to 1000 [ 503.582662][T23959] bridge0: port 2(bridge_slave_1) entered blocking state [ 503.595389][T23959] bridge0: port 2(bridge_slave_1) entered disabled state [ 503.613492][T23959] bridge_slave_1: entered allmulticast mode [ 503.627291][T23959] bridge_slave_1: entered promiscuous mode [ 503.645438][ T51] Bluetooth: hci0: command tx timeout [ 503.703119][T24048] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.8337'. [ 503.882206][T23959] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 503.954014][T23959] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 504.112957][ T37] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.201187][T23959] team0: Port device team_slave_0 added [ 504.259471][T23959] team0: Port device team_slave_1 added [ 504.333883][ T37] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.482694][ T37] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.550068][T23959] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 504.557279][T23959] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 504.584446][T23959] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 504.611896][T23959] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 504.619278][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 504.649762][T23959] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 504.680198][T23959] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 504.708341][ T37] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.812067][T23959] hsr_slave_0: entered promiscuous mode [ 504.819478][T23959] hsr_slave_1: entered promiscuous mode [ 504.826742][T23959] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 504.834339][T23959] Cannot create hsr debugfs directory [ 504.936761][ T5838] Bluetooth: hci4: command tx timeout [ 505.113111][T23983] chnl_net:caif_netlink_parms(): no params data found [ 505.149037][ T37] bridge_slave_1: left allmulticast mode [ 505.170836][ T37] bridge_slave_1: left promiscuous mode [ 505.179228][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 505.207248][ T37] bridge_slave_0: left allmulticast mode [ 505.223226][ T37] bridge_slave_0: left promiscuous mode [ 505.238642][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 505.647612][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 505.726336][ T5838] Bluetooth: hci0: command tx timeout [ 505.896259][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 505.909236][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 505.920470][ T37] bond0 (unregistering): Released all slaves [ 506.090266][T24101] netlink: 'syz.1.8358': attribute type 4 has an invalid length. [ 506.670524][T23983] bridge0: port 1(bridge_slave_0) entered blocking state [ 506.695198][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 506.705443][T23983] bridge0: port 1(bridge_slave_0) entered disabled state [ 506.712748][T23983] bridge_slave_0: entered allmulticast mode [ 506.741969][T23983] bridge_slave_0: entered promiscuous mode [ 506.759758][T23983] bridge0: port 2(bridge_slave_1) entered blocking state [ 506.771224][T24123] netlink: 'syz.3.8366': attribute type 4 has an invalid length. [ 506.773345][T23983] bridge0: port 2(bridge_slave_1) entered disabled state [ 506.814399][T24123] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8366'. [ 506.818557][T23983] bridge_slave_1: entered allmulticast mode [ 506.834165][T23983] bridge_slave_1: entered promiscuous mode [ 507.005344][ T5838] Bluetooth: hci4: command 0x040f tx timeout [ 507.218238][T23983] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 507.246423][T23983] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 507.289942][ T37] hsr_slave_0: left promiscuous mode [ 507.319606][ T37] hsr_slave_1: left promiscuous mode [ 507.327110][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 507.341320][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 507.368901][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 507.376978][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 507.424192][ T37] veth1_macvtap: left promiscuous mode [ 507.434648][ T37] veth0_macvtap: left promiscuous mode [ 507.440850][ T37] veth1_vlan: left promiscuous mode [ 507.446573][ T37] veth0_vlan: left promiscuous mode [ 507.735200][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 507.808846][ T5838] Bluetooth: hci0: command tx timeout [ 508.414959][ T37] team0 (unregistering): Port device team_slave_1 removed [ 508.504709][ T37] team0 (unregistering): Port device team_slave_0 removed [ 508.775364][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 509.085547][ T5838] Bluetooth: hci4: command 0x040f tx timeout [ 509.191377][T23983] team0: Port device team_slave_0 added [ 509.218222][T23983] team0: Port device team_slave_1 added [ 509.292227][T24163] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8384'. [ 509.362091][T24163] netlink: 'syz.4.8384': attribute type 1 has an invalid length. [ 509.380498][T24163] netlink: 32 bytes leftover after parsing attributes in process `syz.4.8384'. [ 509.410591][T23983] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 509.420212][T23983] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 509.454218][T23983] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 509.480339][T24170] trusted_key: syz.3.8388 sent an empty control message without MSG_MORE. [ 509.536668][T23983] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 509.543856][T23983] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 509.578025][T23983] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 509.682571][T23959] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 509.700371][T24177] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8391'. [ 509.728907][T24177] netlink: 'syz.3.8391': attribute type 7 has an invalid length. [ 509.738492][T24177] netlink: 'syz.3.8391': attribute type 8 has an invalid length. [ 509.746997][T24177] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8391'. [ 509.777087][T24173] syzkaller1: entered promiscuous mode [ 509.782699][T24173] syzkaller1: entered allmulticast mode [ 509.792670][T24180] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.8392'. [ 509.793061][T23959] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 509.815408][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 509.823836][T24177] erspan0: entered promiscuous mode [ 509.833371][T24177] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 509.841600][T24177] Cannot create hsr debugfs directory [ 509.847566][T24177] hsr0: Slave A (erspan0) is not up; please bring it up to get a fully working HSR network [ 509.857836][T24177] hsr0: Slave B (gretap0) is not up; please bring it up to get a fully working HSR network [ 509.884861][T23983] hsr_slave_0: entered promiscuous mode [ 509.902414][T23983] hsr_slave_1: entered promiscuous mode [ 509.931765][T23983] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 509.945916][T23983] Cannot create hsr debugfs directory [ 510.005466][T23959] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 510.047856][T23959] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 510.123143][T24195] netlink: 'syz.4.8396': attribute type 15 has an invalid length. [ 510.170792][T24194] syzkaller1: entered promiscuous mode [ 510.190345][T24194] syzkaller1: entered allmulticast mode [ 510.369086][T24204] ------------[ cut here ]------------ [ 510.374796][T24204] WARNING: CPU: 0 PID: 24204 at ./include/net/mac80211.h:7748 _ieee80211_sta_cur_vht_bw+0x524/0x6e0 [ 510.386189][T24204] Modules linked in: [ 510.390398][T24204] CPU: 0 UID: 0 PID: 24204 Comm: syz.3.8400 Not tainted 6.16.0-rc3-syzkaller-00122-g60f7f4afaf6d #0 PREEMPT(full) [ 510.402654][T24204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 510.412935][T24204] RIP: 0010:_ieee80211_sta_cur_vht_bw+0x524/0x6e0 [ 510.420008][T24204] Code: 00 00 00 eb 49 41 83 fd 05 74 30 41 83 fd 0d 75 13 e8 60 53 e5 f6 b8 04 00 00 00 eb 31 e8 54 53 e5 f6 eb 28 e8 4d 53 e5 f6 90 <0f> 0b 90 eb 1d e8 42 53 e5 f6 b8 02 00 00 00 eb 13 e8 36 53 e5 f6 [ 510.439853][T24204] RSP: 0018:ffffc90004f9ef48 EFLAGS: 00010283 [ 510.446228][T24204] RAX: ffffffff8adafb23 RBX: ffff888025160000 RCX: 0000000000080000 [ 510.454276][T24204] RDX: ffffc9000c7c9000 RSI: 0000000000000390 RDI: 0000000000000391 [ 510.463756][T24204] RBP: 0000000000000000 R08: ffff88807bd5bc00 R09: 0000000000000007 [ 510.472009][T24204] R10: 000000000000000d R11: 0000000000000002 R12: 0000000000000000 [ 510.480116][T24204] R13: 0000000000000007 R14: ffff888025160180 R15: 1ffff11004a2c030 [ 510.488232][T24204] FS: 00007fede49f66c0(0000) GS:ffff888125c50000(0000) knlGS:0000000000000000 [ 510.498923][T24204] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 510.505669][T24204] CR2: 0000200000001080 CR3: 0000000073ef2000 CR4: 00000000003526f0 [ 510.513703][T24204] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 510.522030][T24204] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 510.530462][T24204] Call Trace: [ 510.533974][T24204] [ 510.537041][T24204] __ieee80211_vht_handle_opmode+0x3c0/0x850 [ 510.543075][T24204] ? ieee80211_get_link_sband+0x5f/0x3e0 [ 510.548869][T24204] ? __pfx___ieee80211_vht_handle_opmode+0x10/0x10 [ 510.555573][T24204] ? ieee80211_get_link_sband+0x5f/0x3e0 [ 510.561621][T24204] ? ieee80211_sta_init_nss+0x8dd/0xbe0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 510.568331][T24204] ? ieee80211_get_link_sband+0x335/0x3e0 [ 510.574133][T24204] sta_link_apply_parameters+0xbb8/0xec0 [ 510.579945][T24204] sta_apply_parameters+0x944/0x15b0 [ 510.585353][T24204] ieee80211_add_station+0x424/0x6a0 [ 510.590707][T24204] rdev_add_station+0x105/0x290 [ 510.595680][T24204] nl80211_new_station+0x1723/0x1b40 [ 510.601042][T24204] ? __pfx_nl80211_new_station+0x10/0x10 [ 510.606989][T24204] ? netdev_run_todo+0xe1d/0xea0 [ 510.612013][T24204] ? nl80211_pre_doit+0x4f1/0x930 [ 510.618244][T24204] genl_family_rcv_msg_doit+0x215/0x300 [ 510.623876][T24204] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 510.630121][T24204] ? bpf_lsm_capable+0x9/0x20 [ 510.634855][T24204] ? security_capable+0x7e/0x2e0 [ 510.639967][T24204] genl_rcv_msg+0x60e/0x790 [ 510.644547][T24204] ? __pfx_genl_rcv_msg+0x10/0x10 [ 510.649696][T24204] ? ref_tracker_free+0x63a/0x7d0 [ 510.654785][T24204] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 510.660363][T24204] ? __pfx_nl80211_new_station+0x10/0x10 [ 510.666595][T24204] ? __pfx_nl80211_post_doit+0x10/0x10 [ 510.672118][T24204] ? __pfx_ref_tracker_free+0x10/0x10 [ 510.677723][T24204] netlink_rcv_skb+0x205/0x470 [ 510.682550][T24204] ? __pfx_genl_rcv_msg+0x10/0x10 [ 510.687773][T24204] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 510.693129][T24204] ? down_read+0x1ad/0x2e0 [ 510.697767][T24204] genl_rcv+0x28/0x40 [ 510.701808][T24204] netlink_unicast+0x758/0x8d0 [ 510.706677][T24204] netlink_sendmsg+0x805/0xb30 [ 510.711531][T24204] ? __pfx_netlink_sendmsg+0x10/0x10 [ 510.716946][T24204] ? aa_sock_msg_perm+0x94/0x160 [ 510.721937][T24204] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 510.727365][T24204] ? __pfx_netlink_sendmsg+0x10/0x10 [ 510.732700][T24204] __sock_sendmsg+0x219/0x270 [ 510.737525][T24204] ____sys_sendmsg+0x505/0x830 [ 510.742348][T24204] ? __pfx_____sys_sendmsg+0x10/0x10 [ 510.747754][T24204] ? import_iovec+0x74/0xa0 [ 510.752304][T24204] ___sys_sendmsg+0x21f/0x2a0 [ 510.757136][T24204] ? __pfx____sys_sendmsg+0x10/0x10 [ 510.762438][T24204] ? __fget_files+0x2a/0x420 [ 510.767421][T24204] ? __fget_files+0x3a0/0x420 [ 510.772167][T24204] __x64_sys_sendmsg+0x19b/0x260 [ 510.777241][T24204] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 510.782768][T24204] ? rcu_is_watching+0x15/0xb0 [ 510.787736][T24204] ? do_syscall_64+0xbe/0x3b0 [ 510.792471][T24204] do_syscall_64+0xfa/0x3b0 [ 510.797138][T24204] ? lockdep_hardirqs_on+0x9c/0x150 [ 510.802397][T24204] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.808721][T24204] ? clear_bhb_loop+0x60/0xb0 [ 510.813949][T24204] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.820056][T24204] RIP: 0033:0x7fede6b8e929 [ 510.824519][T24204] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 510.844292][T24204] RSP: 002b:00007fede49f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 510.852921][T24204] RAX: ffffffffffffffda RBX: 00007fede6db5fa0 RCX: 00007fede6b8e929 [ 510.855520][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 510.860990][T24204] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 0000000000000006 [ 510.876225][T24204] RBP: 00007fede6c10b39 R08: 0000000000000000 R09: 0000000000000000 [ 510.884239][T24204] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 510.892311][T24204] R13: 0000000000000000 R14: 00007fede6db5fa0 R15: 00007fff6eed1f98 [ 510.900411][T24204] [ 510.903486][T24204] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 510.910795][T24204] CPU: 0 UID: 0 PID: 24204 Comm: syz.3.8400 Not tainted 6.16.0-rc3-syzkaller-00122-g60f7f4afaf6d #0 PREEMPT(full) [ 510.922883][T24204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 510.932950][T24204] Call Trace: [ 510.936245][T24204] [ 510.939190][T24204] dump_stack_lvl+0x99/0x250 [ 510.943804][T24204] ? __asan_memcpy+0x40/0x70 [ 510.948416][T24204] ? __pfx_dump_stack_lvl+0x10/0x10 [ 510.953684][T24204] ? __pfx__printk+0x10/0x10 [ 510.958324][T24204] panic+0x2db/0x790 [ 510.962292][T24204] ? __pfx_panic+0x10/0x10 [ 510.966767][T24204] ? show_trace_log_lvl+0x4fb/0x550 [ 510.972044][T24204] __warn+0x31b/0x4b0 [ 510.976084][T24204] ? _ieee80211_sta_cur_vht_bw+0x524/0x6e0 [ 510.981943][T24204] ? _ieee80211_sta_cur_vht_bw+0x524/0x6e0 [ 510.987805][T24204] report_bug+0x2be/0x4f0 [ 510.992159][T24204] ? _ieee80211_sta_cur_vht_bw+0x524/0x6e0 [ 510.997984][T24204] ? _ieee80211_sta_cur_vht_bw+0x524/0x6e0 [ 511.003816][T24204] ? _ieee80211_sta_cur_vht_bw+0x526/0x6e0 [ 511.009682][T24204] handle_bug+0x84/0x160 [ 511.013958][T24204] exc_invalid_op+0x1a/0x50 [ 511.018498][T24204] asm_exc_invalid_op+0x1a/0x20 [ 511.023454][T24204] RIP: 0010:_ieee80211_sta_cur_vht_bw+0x524/0x6e0 [ 511.029894][T24204] Code: 00 00 00 eb 49 41 83 fd 05 74 30 41 83 fd 0d 75 13 e8 60 53 e5 f6 b8 04 00 00 00 eb 31 e8 54 53 e5 f6 eb 28 e8 4d 53 e5 f6 90 <0f> 0b 90 eb 1d e8 42 53 e5 f6 b8 02 00 00 00 eb 13 e8 36 53 e5 f6 [ 511.049519][T24204] RSP: 0018:ffffc90004f9ef48 EFLAGS: 00010283 [ 511.055614][T24204] RAX: ffffffff8adafb23 RBX: ffff888025160000 RCX: 0000000000080000 [ 511.063601][T24204] RDX: ffffc9000c7c9000 RSI: 0000000000000390 RDI: 0000000000000391 [ 511.071592][T24204] RBP: 0000000000000000 R08: ffff88807bd5bc00 R09: 0000000000000007 [ 511.079588][T24204] R10: 000000000000000d R11: 0000000000000002 R12: 0000000000000000 [ 511.087578][T24204] R13: 0000000000000007 R14: ffff888025160180 R15: 1ffff11004a2c030 [ 511.095576][T24204] ? _ieee80211_sta_cur_vht_bw+0x523/0x6e0 [ 511.101418][T24204] ? _ieee80211_sta_cur_vht_bw+0x523/0x6e0 [ 511.107251][T24204] __ieee80211_vht_handle_opmode+0x3c0/0x850 [ 511.113250][T24204] ? ieee80211_get_link_sband+0x5f/0x3e0 [ 511.118908][T24204] ? __pfx___ieee80211_vht_handle_opmode+0x10/0x10 [ 511.125446][T24204] ? ieee80211_get_link_sband+0x5f/0x3e0 [ 511.131103][T24204] ? ieee80211_sta_init_nss+0x8dd/0xbe0 [ 511.136668][T24204] ? ieee80211_get_link_sband+0x335/0x3e0 [ 511.142413][T24204] sta_link_apply_parameters+0xbb8/0xec0 [ 511.148080][T24204] sta_apply_parameters+0x944/0x15b0 [ 511.153398][T24204] ieee80211_add_station+0x424/0x6a0 [ 511.158723][T24204] rdev_add_station+0x105/0x290 [ 511.163634][T24204] nl80211_new_station+0x1723/0x1b40 [ 511.168961][T24204] ? __pfx_nl80211_new_station+0x10/0x10 [ 511.174646][T24204] ? netdev_run_todo+0xe1d/0xea0 [ 511.179637][T24204] ? nl80211_pre_doit+0x4f1/0x930 [ 511.184696][T24204] genl_family_rcv_msg_doit+0x215/0x300 [ 511.190286][T24204] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 511.196393][T24204] ? bpf_lsm_capable+0x9/0x20 [ 511.201085][T24204] ? security_capable+0x7e/0x2e0 [ 511.206055][T24204] genl_rcv_msg+0x60e/0x790 [ 511.210588][T24204] ? __pfx_genl_rcv_msg+0x10/0x10 [ 511.215640][T24204] ? ref_tracker_free+0x63a/0x7d0 [ 511.220690][T24204] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 511.226093][T24204] ? __pfx_nl80211_new_station+0x10/0x10 [ 511.231745][T24204] ? __pfx_nl80211_post_doit+0x10/0x10 [ 511.237218][T24204] ? __pfx_ref_tracker_free+0x10/0x10 [ 511.242613][T24204] netlink_rcv_skb+0x205/0x470 [ 511.247410][T24204] ? __pfx_genl_rcv_msg+0x10/0x10 [ 511.252457][T24204] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 511.257773][T24204] ? down_read+0x1ad/0x2e0 [ 511.262207][T24204] genl_rcv+0x28/0x40 [ 511.266205][T24204] netlink_unicast+0x758/0x8d0 [ 511.271005][T24204] netlink_sendmsg+0x805/0xb30 [ 511.275797][T24204] ? __pfx_netlink_sendmsg+0x10/0x10 [ 511.281121][T24204] ? aa_sock_msg_perm+0x94/0x160 [ 511.286100][T24204] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 511.291405][T24204] ? __pfx_netlink_sendmsg+0x10/0x10 [ 511.296713][T24204] __sock_sendmsg+0x219/0x270 [ 511.301418][T24204] ____sys_sendmsg+0x505/0x830 [ 511.306212][T24204] ? __pfx_____sys_sendmsg+0x10/0x10 [ 511.311525][T24204] ? import_iovec+0x74/0xa0 [ 511.316049][T24204] ___sys_sendmsg+0x21f/0x2a0 [ 511.320749][T24204] ? __pfx____sys_sendmsg+0x10/0x10 [ 511.326007][T24204] ? __fget_files+0x2a/0x420 [ 511.330613][T24204] ? __fget_files+0x3a0/0x420 [ 511.335315][T24204] __x64_sys_sendmsg+0x19b/0x260 [ 511.340272][T24204] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 511.345764][T24204] ? rcu_is_watching+0x15/0xb0 [ 511.350576][T24204] ? do_syscall_64+0xbe/0x3b0 [ 511.355284][T24204] do_syscall_64+0xfa/0x3b0 [ 511.359814][T24204] ? lockdep_hardirqs_on+0x9c/0x150 [ 511.365037][T24204] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.371116][T24204] ? clear_bhb_loop+0x60/0xb0 [ 511.375812][T24204] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.381725][T24204] RIP: 0033:0x7fede6b8e929 [ 511.386170][T24204] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 511.405796][T24204] RSP: 002b:00007fede49f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 511.414228][T24204] RAX: ffffffffffffffda RBX: 00007fede6db5fa0 RCX: 00007fede6b8e929 [ 511.422214][T24204] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 0000000000000006 [ 511.430198][T24204] RBP: 00007fede6c10b39 R08: 0000000000000000 R09: 0000000000000000 [ 511.438186][T24204] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 511.446167][T24204] R13: 0000000000000000 R14: 00007fede6db5fa0 R15: 00007fff6eed1f98 [ 511.454164][T24204] [ 511.457544][T24204] Kernel Offset: disabled [ 511.461915][T24204] Rebooting in 86400 seconds..