last executing test programs: 3.351939493s ago: executing program 1 (id=13255): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x5}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0xffffffffffffffff}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}]}}]}, 0x48}}, 0x4000000) 3.161882799s ago: executing program 1 (id=13259): shutdown(0xffffffffffffffff, 0x1) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000003200)={'ip6tnl0\x00', &(0x7f0000003180)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) socket$kcm(0x2, 0xa, 0x2) 3.03818475s ago: executing program 1 (id=13264): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write(r2, &(0x7f0000000240), 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000240)={0xfffb, 0x5, 0x4, 0x6, 0x9, 0x8001, 0x0, 0x4}, 0x20) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0x800001c, @local}, {0x0, 0x17c1, 0x8}}}}}, 0x0) close(r3) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000840)) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r4) recvmmsg(r4, 0x0, 0x0, 0x40000000, 0x0) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @broadcast}) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x2a) 2.638216408s ago: executing program 3 (id=13268): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000061113800000000001e0000fbffffffff9400000c00000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r2) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c80)={0x2c, r3, 0x1, 0x70bd25, 0x0, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010101}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x1c, r3, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004001}, 0x840) r4 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r4, &(0x7f00000032c0)=[{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r4, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0xc}}], 0x30}], 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c4400000000000e0feff0085000000b200000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) ioctl$SIOCGIFHWADDR(r6, 0x8927, &(0x7f0000000000)={'team_slave_1\x00'}) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r5, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r5, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000003c80)="f50cb6", 0x3}], 0x1}}], 0x1, 0x8011) recvmmsg(r5, &(0x7f000000a400)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001c80)=""/4096, 0x1000}], 0x1}, 0x40}], 0x1, 0x10120, 0x0) shutdown(r5, 0x1) socket$inet(0x2, 0x3, 0x3d9) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x24, 0x0, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [@ETHTOOL_A_COALESCE_RX_MAX_FRAMES_LOW={0x8, 0xf, 0x3}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8015}, 0x48005) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 1.187744808s ago: executing program 1 (id=13273): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="2b0326bd7000fbdbdf25120000006d53ccf2c673c8c2b9046cb13cab36a45fcf8b0a9c03242f35a3ad6f446feb5b10dcc45672b028fb74e23f5d35258c6d876deb91d2ed048ce6984f64f272b007810798ea83c98b13082a7138433ab8a5a1427c13ac88cb5cd50b93448a8f14a0"], 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x8000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r0) 1.078738504s ago: executing program 3 (id=13275): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0xb86}, @TCA_TBF_PARMS={0x28, 0x1, {{0xa, 0x2, 0xffff, 0x7, 0xcc, 0x3}, {0x0, 0x1, 0x7, 0x8, 0x7f, 0x9}, 0xa6, 0x7, 0x1bb6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x470b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0xd, 0xfff3}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x2, 0x81}}}]}, 0x3c}}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.043361359s ago: executing program 1 (id=13277): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x34, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x26, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x12, 0x0, @opaque='\x00'/10}}}}}, 0x0) recvfrom(r0, &(0x7f00000000c0)=""/10, 0xa, 0x0, 0x0, 0x0) 841.723687ms ago: executing program 4 (id=13281): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000600)=@getsa={0x34, 0x12, 0x1, 0x0, 0x0, {@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x0, 0x32}, [@mark={0xc}]}, 0x34}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x14, 0x4, 0x8, 0x6}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r2}, &(0x7f0000000080), &(0x7f0000000200)}, 0x20) socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(0x0, r3) syz_init_net_socket$ax25(0x3, 0x2, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), r3) bpf$ITER_CREATE(0xb, 0x0, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r5, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) ioctl$sock_netdev_private(r4, 0x8914, &(0x7f0000000000)) 801.363814ms ago: executing program 0 (id=13282): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x44, r0, 0x801, 0x400, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abe725c86ec8e000000006500"}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}]}, 0x44}}, 0x0) 715.685897ms ago: executing program 4 (id=13284): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x28, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x28}}, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) ioctl(r0, 0x8b32, &(0x7f0000000040)) 701.090466ms ago: executing program 3 (id=13285): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x19}}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 681.386351ms ago: executing program 2 (id=13286): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01012abd7000000008002b00000008000300", @ANYRES32=r2, @ANYBLOB="040046000500340076000000080026006c090000300051802c0000800500020000000000080003000aac0f0009000100315d1b96c6000000040006"], 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x4804) 680.512086ms ago: executing program 0 (id=13287): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)={0x2c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings=[@NL80211_ATTR_AKM_SUITES={0x4}]]}, 0x2c}}, 0x0) 602.54098ms ago: executing program 4 (id=13288): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83}, 0x1c) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x5, 0x14, 0x0, &(0x7f0000000100)="259a53f271a76d2608fff74588a80a3888a82f15", 0x0, 0xd11, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 599.603388ms ago: executing program 3 (id=13289): setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, &(0x7f0000000040)={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0xffffffffffffffff, "3e39a2c0c616903ed84a30150f17b0134f8577856641072383ee08b44d457617", 0x101, 0x5cd, 0x101, 0x1}, 0x3c) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r2, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}}, 0x0) 590.632887ms ago: executing program 2 (id=13290): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'sit0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000080)="33031600d1fd140000007ef52f555f2a3b9fe67025c1d97bfbf719143baa4b1f0f858c6632f47042195e", 0xfdef, 0x40008c1, &(0x7f00000000c0)={0x11, 0x86dd, r2, 0x1, 0x62}, 0x14) 502.01131ms ago: executing program 0 (id=13291): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x2, 0xfffffffd, 0x6}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0x9}}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 472.793778ms ago: executing program 2 (id=13292): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000014c0)={0x1c, r1, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x880}, 0x0) 451.031807ms ago: executing program 0 (id=13293): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@multicast1, @in=@multicast2, 0x4e20, 0x0, 0x800, 0x0, 0x2}, {0x7, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {0xffffffffffffffff}, 0x3, 0x0, 0x1, 0x0, 0x3, 0x3}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x2b}, 0x0, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x200000}}, 0xe8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) 359.054205ms ago: executing program 2 (id=13294): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000600)=@getsa={0x34, 0x12, 0x1, 0x0, 0x0, {@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x0, 0x32}, [@mark={0xc}]}, 0x34}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x14, 0x4, 0x8, 0x6}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r2}, &(0x7f0000000080), &(0x7f0000000200)}, 0x20) socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(0x0, r3) syz_init_net_socket$ax25(0x3, 0x2, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), r3) bpf$ITER_CREATE(0xb, 0x0, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r5, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) ioctl$sock_netdev_private(r4, 0x8914, &(0x7f0000000000)) 289.749266ms ago: executing program 0 (id=13295): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) shutdown(r0, 0x1) recvmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x40000142, 0x0) 259.299362ms ago: executing program 3 (id=13296): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0500ffffffff000000002100000008000300", @ANYRES32=r2, @ANYBLOB="38002d800a"], 0x54}}, 0x0) 258.273923ms ago: executing program 4 (id=13297): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) sendmmsg(r0, &(0x7f00000028c0)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000100)="b3", 0x1}], 0x1}}], 0x1, 0x4015) ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000040)) 205.834649ms ago: executing program 2 (id=13298): socket$inet_icmp_raw(0x2, 0x3, 0x1) getuid() socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x46, &(0x7f0000000200)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) 126.024672ms ago: executing program 4 (id=13299): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x2, 0x1000, @empty}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0xc, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x9}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, "fbddf0", 0x8, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @mcast2, {[], @echo_reply={0x81, 0x0, 0x0, 0x2, 0x4}}}}}}, 0x0) 114.970284ms ago: executing program 0 (id=13300): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b80)={0x7c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @random="13610680c4c9"}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @beacon=[@NL80211_ATTR_BEACON_TAIL={0x20, 0xf, [@ht={0x2d, 0x1a, {0x800, 0x1, 0x0, 0x0, {0x0, 0x128a, 0x0, 0x80, 0x0, 0x1, 0x0, 0x1, 0x1}, 0x1, 0x8, 0x30}}]}]]}, 0x7c}}, 0x0) 88.403557ms ago: executing program 1 (id=13301): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), r0) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000380)={0x20, r2, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_OUT_KEY_ID={0x4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x10) 64.782707ms ago: executing program 2 (id=13302): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r0, &(0x7f00000002c0)={@val={0x0, 0x86dd}, @val={0x0, 0x4, 0x11, 0x4, 0x0, 0xa6b9}, @mpls={[], @ipv6=@gre_packet={0xe, 0x6, "ec00be", 0x44, 0x2f, 0xff, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0xa888, 0x88be, 0x2, {{0x6, 0x1, 0x9, 0x2, 0x1, 0x0, 0x3, 0x4}, 0x1, {0x8100}}}, {0x8, 0x22eb, 0x20000, {{0x0, 0x2, 0xc, 0x0, 0x0, 0x2, 0x7, 0x2}, 0x2, {0x2, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0x7a) 21.485735ms ago: executing program 4 (id=13303): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x2, 0xfffffffd, 0x6}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0x9}}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 0s ago: executing program 3 (id=13304): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0xa) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000100), 0x1c) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x4e24, 0x91, @remote, 0x1}}, 0x0, 0x0, 0x32, 0x0, "0c9e089c1b4a04000bde79f04103c458187eb46c2d996aff287154e786455261c425a7519cc275d04e6205abd307a0c4fa3838bf399ad5bd35f21907c7988d1300"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000500)={@in6={{0xa, 0x4e24, 0x0, @loopback, 0x2}}, 0x0, 0x0, 0x4, 0x0, "a1c1dd75a6843e10951cd4b347113e55eb499519becf7542c90bc21470e441225642855b5f2faed4a18d67efd5f2fdf98328de94410300"}, 0xd8) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x1, @mcast2, 0x4}}, 0x0, 0x0, 0x11, 0x0, "2b20a9a47cddc63b223be606d7fa19f22a369ae751de81ca4d11e10450d766feb63b382d54ba4bb57a219cad5ddfc1e4fe760a1ce2ca64196953e92a07b3937730a33b6deca160d8c2fbff48eb964283"}, 0xd8) listen(r6, 0x0) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) kernel console output (not intermixed with test programs): 18] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7561'. [ 356.059205][T21826] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7561'. [ 356.096290][T21823] : entered promiscuous mode [ 356.575607][T21852] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7577'. [ 356.950431][T21879] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7589'. [ 357.627665][T21919] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.656837][T21926] netlink: 'syz.4.7612': attribute type 2 has an invalid length. [ 357.665162][T21926] netlink: 188 bytes leftover after parsing attributes in process `syz.4.7612'. [ 357.726743][T21919] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.820215][T21919] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.908202][T21919] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.088508][ T36] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.155450][ T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.199566][ T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.296463][ T36] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.519989][T21969] netlink: 248 bytes leftover after parsing attributes in process `syz.4.7631'. [ 358.566409][T21969] NCSI netlink: No device for ifindex 0 [ 358.571812][T21973] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7635'. [ 358.776336][T21986] netlink: 'syz.4.7639': attribute type 11 has an invalid length. [ 359.552229][T22031] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7663'. [ 360.084488][T22056] netlink: 212364 bytes leftover after parsing attributes in process `syz.0.7675'. [ 360.127994][T22056] openvswitch: netlink: Message has 5 unknown bytes. [ 360.182800][T22061] tipc: Enabling of bearer rejected, failed to enable media [ 360.691793][T22091] syz.2.7692 (22091) used obsolete PPPIOCDETACH ioctl [ 360.900546][T22104] tipc: Enabled bearer , priority 10 [ 361.656034][T22151] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 361.781270][T22158] netlink: 332 bytes leftover after parsing attributes in process `syz.3.7724'. [ 362.032121][T22176] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.7733'. [ 362.149083][T22184] lo speed is unknown, defaulting to 1000 [ 362.355297][T22197] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7743'. [ 363.132023][T22252] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7770'. [ 363.321430][T22263] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7775'. [ 363.369771][T22263] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 363.389088][T22263] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (1) [ 363.758614][T22288] gretap0: entered promiscuous mode [ 363.766843][T22288] vlan1: entered promiscuous mode [ 363.832299][T22294] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7791'. [ 363.850577][T22294] netlink: 272 bytes leftover after parsing attributes in process `syz.0.7791'. [ 363.860619][T22294] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7791'. [ 365.128386][T22375] netlink: 'syz.0.7831': attribute type 7 has an invalid length. [ 365.187440][T22378] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 365.658307][T22408] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7846'. [ 365.694024][T22412] netlink: 96 bytes leftover after parsing attributes in process `syz.4.7849'. [ 366.949666][T22491] __nla_validate_parse: 1 callbacks suppressed [ 366.949684][T22491] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7888'. [ 366.970774][T22491] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7888'. [ 366.981323][T22491] netlink: 'syz.2.7888': attribute type 12 has an invalid length. [ 367.032023][T22491] netlink: 'syz.2.7888': attribute type 11 has an invalid length. [ 367.268289][T22512] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7898'. [ 367.278383][T22512] netlink: 'syz.0.7898': attribute type 2 has an invalid length. [ 367.287341][T22512] netlink: 'syz.0.7898': attribute type 1 has an invalid length. [ 367.323191][T22512] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7898'. [ 367.580733][T22533] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7904'. [ 367.800824][T22546] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 367.924139][T22552] nbd: must specify at least one socket [ 368.014619][T22554] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.7916'. [ 368.019491][T22560] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7917'. [ 368.174878][T22564] netlink: 'syz.4.7922': attribute type 27 has an invalid length. [ 368.199084][T22566] vlan2: entered promiscuous mode [ 368.227375][T22566] bridge0: entered promiscuous mode [ 369.007286][T22619] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.7945'. [ 369.170470][T22628] openvswitch: netlink: Unknown key attributes 2 [ 369.492602][T22650] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7958'. [ 369.651272][T22658] lo speed is unknown, defaulting to 1000 [ 370.118975][T22690] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 370.292132][T22703] net veth1_virt_wifi .: renamed from virt_wifi0 [ 370.990698][T22750] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8003'. [ 371.922380][T22800] netlink: 'syz.4.8027': attribute type 1 has an invalid length. [ 371.987192][T22806] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 372.339539][T22822] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 372.963093][T22855] __nla_validate_parse: 2 callbacks suppressed [ 372.963110][T22855] netlink: 32 bytes leftover after parsing attributes in process `syz.3.8054'. [ 373.122308][T22866] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8057'. [ 373.282792][T22878] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8065'. [ 373.749024][T22904] openvswitch: netlink: IPv6 tunnel dst address is zero [ 374.365524][T22946] netlink: 27 bytes leftover after parsing attributes in process `syz.0.8098'. [ 375.492661][T23003] tipc: Enabling of bearer rejected, already enabled [ 375.829668][T23026] IPVS: length: 8 != 1152 [ 376.157886][T23049] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8145'. [ 376.592828][T23070] sock: sock_timestamping_bind_phc: sock not bind to device [ 377.128870][T23101] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8167'. [ 377.231856][T23108] atomic_op ffff888057d60998 conn xmit_atomic 0000000000000000 [ 377.873469][T23152] openvswitch: netlink: IPv4 frag type 255 is out of range max 2 [ 378.033991][T23158] netlink: 168 bytes leftover after parsing attributes in process `syz.3.8196'. [ 378.036780][T23161] netlink: 'syz.2.8195': attribute type 29 has an invalid length. [ 378.082777][T23161] netlink: 'syz.2.8195': attribute type 29 has an invalid length. [ 378.201308][T23169] netem: change failed [ 379.883320][T23271] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8247'. [ 380.208382][T23293] netlink: 'syz.0.8259': attribute type 1 has an invalid length. [ 380.236502][T23293] netlink: 216 bytes leftover after parsing attributes in process `syz.0.8259'. [ 381.141393][T23357] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 381.797093][T23398] netlink: 'syz.2.8308': attribute type 1 has an invalid length. [ 381.818526][T23398] netlink: 'syz.2.8308': attribute type 3 has an invalid length. [ 381.829093][T23398] netlink: 224 bytes leftover after parsing attributes in process `syz.2.8308'. [ 382.122732][T23422] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8319'. [ 382.730678][T23460] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 382.850872][T23468] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.8341'. [ 382.898433][T23468] netlink: zone id is out of range [ 382.925248][T23468] netlink: get zone limit has 8 unknown bytes [ 383.166653][T23488] tipc: Started in network mode [ 383.171785][T23488] tipc: Node identity ac1414aa, cluster identity 4711 [ 383.189668][T23488] tipc: Enabling of bearer rejected, failed to enable media [ 383.481293][T23504] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8359'. [ 384.345405][T23556] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8385'. [ 384.356867][T23556] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 384.385080][T23556] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 384.531286][T23569] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8391'. [ 384.862338][T23590] netlink: 'syz.3.8401': attribute type 1 has an invalid length. [ 384.879099][T23590] netlink: 236 bytes leftover after parsing attributes in process `syz.3.8401'. [ 385.050175][T23606] netlink: 104 bytes leftover after parsing attributes in process `syz.0.8409'. [ 385.218293][T23617] netlink: 'syz.3.8415': attribute type 1 has an invalid length. [ 385.226778][T23617] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 385.448991][T23630] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8421'. [ 385.731952][T23648] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8430'. [ 385.891776][T23657] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8432'. [ 386.689945][T23709] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 386.731755][T23716] team0: Device ip6gre1 is of different type [ 386.845087][T23721] netlink: 'syz.0.8466': attribute type 1 has an invalid length. [ 386.866451][T23721] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8466'. [ 386.877669][T23723] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8467'. [ 387.605771][T23769] netlink: zone id is out of range [ 387.623354][T23769] netlink: zone id is out of range [ 387.643602][T23769] netlink: zone id is out of range [ 387.649239][T23769] netlink: zone id is out of range [ 387.820864][T23777] netlink: 'syz.3.8493': attribute type 1 has an invalid length. [ 387.849689][T23777] netlink: 'syz.3.8493': attribute type 1 has an invalid length. [ 387.853800][T23783] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 389.121875][T23865] __nla_validate_parse: 6 callbacks suppressed [ 389.121895][T23865] netlink: 104 bytes leftover after parsing attributes in process `syz.4.8535'. [ 389.321227][T23876] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8542'. [ 389.481033][T23884] netlink: 'syz.4.8544': attribute type 11 has an invalid length. [ 390.171385][T23924] pimreg3: entered allmulticast mode [ 390.263730][T23930] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8566'. [ 390.424736][T23942] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8572'. [ 390.435604][T23942] netlink: 'syz.0.8572': attribute type 5 has an invalid length. [ 390.456025][T23942] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8572'. [ 390.483304][T23943] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8574'. [ 390.523041][T23943] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8574'. [ 390.652826][ T12] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 390.669203][ T12] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 390.691252][ T12] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 390.725408][ T12] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 391.603945][T24020] tipc: MTU too low for tipc bearer [ 391.806627][T24035] netlink: 'syz.2.8619': attribute type 1 has an invalid length. [ 391.817881][T24035] netlink: 'syz.2.8619': attribute type 3 has an invalid length. [ 391.828167][T24035] netlink: 224 bytes leftover after parsing attributes in process `syz.2.8619'. [ 391.849843][T24035] NCSI netlink: No device for ifindex 131080 [ 392.048658][T24051] netlink: 'syz.0.8627': attribute type 1 has an invalid length. [ 392.415802][ T6107] Bluetooth: hci4: link tx timeout [ 392.421159][ T6107] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 393.066847][T24107] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave [ 393.088906][T24107] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 393.315591][T24121] netlink: 'syz.0.8662': attribute type 1 has an invalid length. [ 393.646371][T24145] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8672'. [ 393.755328][T24152] netlink: 'syz.1.8677': attribute type 29 has an invalid length. [ 393.769672][T24152] netlink: 'syz.1.8677': attribute type 29 has an invalid length. [ 393.997906][T24170] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8684'. [ 394.172109][T24180] netlink: 'syz.1.8690': attribute type 3 has an invalid length. [ 394.473010][ T6107] Bluetooth: hci4: command 0x0406 tx timeout [ 395.619784][T24269] netlink: 'syz.2.8728': attribute type 1 has an invalid length. [ 395.761719][T24275] nbd: must specify a size in bytes for the device [ 395.867760][T24281] netlink: 'syz.0.8733': attribute type 29 has an invalid length. [ 395.906467][T24281] netlink: 'syz.0.8733': attribute type 29 has an invalid length. [ 396.311678][T24306] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8746'. [ 396.326353][T24306] net_ratelimit: 9 callbacks suppressed [ 396.326373][T24306] openvswitch: netlink: Unknown nsh attribute 0 [ 396.362144][T24306] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 396.445938][T24311] netlink: 'syz.1.8749': attribute type 2 has an invalid length. [ 396.483726][T24311] netlink: 'syz.1.8749': attribute type 2 has an invalid length. [ 396.564149][T24322] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 396.571724][T24322] IPv6: NLM_F_CREATE should be set when creating new route [ 396.579084][T24322] IPv6: NLM_F_CREATE should be set when creating new route [ 396.586363][T24322] IPv6: NLM_F_CREATE should be set when creating new route [ 396.635461][T24322] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 396.903456][T24344] netlink: 'syz.3.8763': attribute type 29 has an invalid length. [ 397.448712][T24377] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8780'. [ 398.166185][T24422] netlink: 72 bytes leftover after parsing attributes in process `syz.3.8802'. [ 398.346262][T24434] netlink: 184 bytes leftover after parsing attributes in process `syz.1.8810'. [ 398.361701][T24434] xt_socket: unknown flags 0xd0 [ 398.370805][T24432] tipc: Enabling of bearer rejected, media not registered [ 398.412035][T24436] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8811'. [ 398.702098][T24455] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 398.752522][T24459] netlink: 'syz.0.8822': attribute type 32 has an invalid length. [ 398.781311][T24459] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8822'. [ 398.805036][T24459] (unnamed net_device) (uninitialized): option coupled_control: invalid value (52) [ 399.197655][T24484] netlink: 'syz.3.8833': attribute type 18 has an invalid length. [ 399.267941][T24488] netlink: 'syz.1.8835': attribute type 6 has an invalid length. [ 399.311567][T24488] netlink: 'syz.1.8835': attribute type 6 has an invalid length. [ 399.890131][T24528] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8853'. [ 399.953999][T24530] veth0_macvtap: left promiscuous mode [ 400.011229][T24530] macvtap0: entered allmulticast mode [ 400.027780][T24530] macvtap0: refused to change device tx_queue_len [ 400.062664][T24539] pim6reg: entered allmulticast mode [ 400.439354][T24561] tap0: tun_chr_ioctl cmd 1074025672 [ 400.447072][T24561] tap0: ignored: set checksum disabled [ 401.150230][T24593] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8884'. [ 401.161048][T24599] netlink: 81 bytes leftover after parsing attributes in process `syz.3.8887'. [ 401.278324][T24603] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 401.984106][ T9687] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 401.992174][ T9687] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 402.013590][ T889] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 402.066852][T24650] validate_nla: 2 callbacks suppressed [ 402.066870][T24650] netlink: 'syz.2.8911': attribute type 1 has an invalid length. [ 402.082072][T24650] netlink: 172 bytes leftover after parsing attributes in process `syz.2.8911'. [ 402.186749][T24656] Bluetooth: MGMT ver 1.23 [ 402.303524][ T10] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 402.446442][ T10] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 402.557453][T24678] netlink: 165 bytes leftover after parsing attributes in process `syz.0.8925'. [ 403.050133][T24710] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8939'. [ 403.283722][T24728] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8947'. [ 403.862108][T24762] netlink: 232 bytes leftover after parsing attributes in process `syz.4.8962'. [ 403.903494][T24764] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8964'. [ 404.200607][T24785] netlink: 'syz.2.8973': attribute type 1 has an invalid length. [ 404.219894][T24785] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8973'. [ 404.439682][T24797] netlink: 'syz.3.8979': attribute type 83 has an invalid length. [ 404.541838][T24802] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8980'. [ 404.552727][T24802] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8980'. [ 405.320046][T24843] erspan0: entered promiscuous mode [ 405.448298][T24846] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9001'. [ 405.913184][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 407.582529][T24965] __nla_validate_parse: 1 callbacks suppressed [ 407.582546][T24965] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9052'. [ 407.848983][T24977] netlink: 'syz.1.9057': attribute type 16 has an invalid length. [ 407.903707][T24977] netlink: 'syz.1.9057': attribute type 17 has an invalid length. [ 408.050811][T24977] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 408.359042][T25005] netlink: 36 bytes leftover after parsing attributes in process `syz.4.9069'. [ 408.950641][ T30] audit: type=1804 audit(1754581798.790:5): pid=25045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.9087" name="/newroot/1816/cgroup.controllers" dev="tmpfs" ino=9108 res=1 errno=0 [ 408.975484][ T30] audit: type=1800 audit(1754581798.820:6): pid=25045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.9087" name="cgroup.controllers" dev="tmpfs" ino=9108 res=0 errno=0 [ 409.526811][T25076] netlink: 'syz.1.9102': attribute type 28 has an invalid length. [ 409.563001][T25076] netlink: 'syz.1.9102': attribute type 3 has an invalid length. [ 409.571405][T25076] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9102'. [ 410.310199][T25131] bridge_slave_0: invalid flags given to default FDB implementation [ 410.339234][T25129] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9126'. [ 410.678074][T25149] netlink: 'syz.4.9135': attribute type 6 has an invalid length. [ 412.723849][T25239] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 412.933978][T25248] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9180'. [ 413.386679][T25278] netlink: 'syz.4.9195': attribute type 11 has an invalid length. [ 413.785856][T25303] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9206'. [ 413.807014][T25307] netlink: 32 bytes leftover after parsing attributes in process `syz.1.9205'. [ 413.913318][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 414.796961][T25371] netlink: 'syz.1.9234': attribute type 2 has an invalid length. [ 414.862606][T25373] netlink: 248 bytes leftover after parsing attributes in process `syz.1.9236'. [ 415.786260][T25423] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9257'. [ 416.108836][T25439] netlink: 'syz.1.9264': attribute type 1 has an invalid length. [ 416.126200][T25439] netlink: 212 bytes leftover after parsing attributes in process `syz.1.9264'. [ 416.158468][T25439] netlink: 'syz.1.9264': attribute type 1 has an invalid length. [ 416.226279][T25443] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9267'. [ 416.783239][T25471] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9280'. [ 416.876173][T25478] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.9284'. [ 417.301891][T25503] veth0: entered promiscuous mode [ 417.314436][T25501] veth0: left promiscuous mode [ 417.484506][T25511] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9300'. [ 418.160684][T25555] sctp: [Deprecated]: syz.2.9321 (pid 25555) Use of struct sctp_assoc_value in delayed_ack socket option. [ 418.160684][T25555] Use struct sctp_sack_info instead [ 418.767011][T25596] __nla_validate_parse: 1 callbacks suppressed [ 418.767094][T25596] netlink: 32 bytes leftover after parsing attributes in process `syz.4.9339'. [ 419.057857][T25613] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9348'. [ 419.227711][T25625] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9354'. [ 419.243360][T25625] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9354'. [ 419.251573][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880577e7000: rx timeout, send abort [ 419.261806][T25625] bridge0: port 2(vlan2) entered blocking state [ 419.269808][T25625] bridge0: port 2(vlan2) entered disabled state [ 419.287987][T25625] vlan2: entered allmulticast mode [ 419.293661][T25625] bridge0: entered allmulticast mode [ 419.308735][T25625] vlan2: left allmulticast mode [ 419.313963][T25625] bridge0: left allmulticast mode [ 419.762133][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880577e7000: abort rx timeout. Force session deactivation [ 420.060332][T25674] netlink: 196 bytes leftover after parsing attributes in process `syz.4.9375'. [ 421.079020][T25677] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 421.105517][T25677] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 421.503313][ T9683] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.553996][ T9683] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 19999 - 0 [ 421.590248][ T9683] netdevsim netdevsim1 netdevsim0: set [1, 2] type 2 family 0 port 20000 - 0 [ 421.631729][ T9683] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.652587][ T9683] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 19999 - 0 [ 421.664272][T25736] vxcan1: tx drop: invalid da for name 0x0000000000000014 [ 421.683140][ T9683] netdevsim netdevsim1 netdevsim1: set [1, 2] type 2 family 0 port 20000 - 0 [ 421.722449][ T9683] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.752482][ T9683] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 19999 - 0 [ 421.762996][ T9683] netdevsim netdevsim1 netdevsim2: set [1, 2] type 2 family 0 port 20000 - 0 [ 421.771884][ T9683] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.816376][ T9683] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 19999 - 0 [ 421.843505][ T9683] netdevsim netdevsim1 netdevsim3: set [1, 2] type 2 family 0 port 20000 - 0 [ 422.032011][T25754] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9410'. [ 422.665931][T25781] netlink: 'syz.3.9420': attribute type 1 has an invalid length. [ 422.685723][T25781] netlink: 224 bytes leftover after parsing attributes in process `syz.3.9420'. [ 423.620849][T25824] netlink: 52 bytes leftover after parsing attributes in process `syz.4.9440'. [ 423.811617][T25838] vxcan1: tx address claim with dlc 1 [ 423.893153][T25843] netlink: 'syz.1.9450': attribute type 6 has an invalid length. [ 423.971444][T25850] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9452'. [ 424.135086][T25859] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.9456'. [ 424.598849][T25888] netlink: 112 bytes leftover after parsing attributes in process `syz.0.9470'. [ 424.860870][T25904] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9478'. [ 424.908107][T25904] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9478'. [ 425.177347][T25925] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9488'. [ 425.223314][T25929] openvswitch: netlink: IPv4 tun info is not correct [ 425.272615][T25930] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 425.415099][T25941] netlink: 52 bytes leftover after parsing attributes in process `syz.4.9496'. [ 425.779434][T25966] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9508'. [ 425.992433][T25978] netlink: 284 bytes leftover after parsing attributes in process `syz.4.9514'. [ 426.210933][T25992] netlink: 'syz.2.9521': attribute type 39 has an invalid length. [ 426.407282][T26001] smc: net device bond0 applied user defined pnetid SYZ2 [ 426.436056][T26001] smc: net device bond0 erased user defined pnetid SYZ2 [ 427.009367][T26040] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 427.489030][T26060] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9551'. [ 427.518335][T26061] 8021q: adding VLAN 0 to HW filter on device bond2 [ 427.543806][T26061] bond2: entered allmulticast mode [ 427.553624][T26064] netlink: 'syz.1.9553': attribute type 83 has an invalid length. [ 427.842863][T26061] bond2 (unregistering): Released all slaves [ 428.217606][T26098] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 429.253841][T26164] __nla_validate_parse: 2 callbacks suppressed [ 429.253859][T26164] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9601'. [ 429.273329][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 430.762646][T26255] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9641'. [ 431.443467][T26299] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9660'. [ 431.455184][T26302] netlink: 100 bytes leftover after parsing attributes in process `syz.2.9661'. [ 431.620251][T26310] sch_tbf: burst 4 is lower than device ip6tnl0 mtu (65485) ! [ 431.851949][T26328] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9675'. [ 431.951896][T26328] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9675'. [ 432.141545][T26345] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9683'. [ 432.191236][T26348] tap0: tun_chr_ioctl cmd 2148553947 [ 432.862584][T26390] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9704'. [ 433.072125][T26403] macvtap1: entered promiscuous mode [ 433.092345][T26403] vlan0: entered promiscuous mode [ 433.102575][T26403] macvtap1: entered allmulticast mode [ 433.121489][T26403] vlan0: entered allmulticast mode [ 433.130667][T26403] veth0_vlan: entered allmulticast mode [ 433.466725][T26426] siw: device registration error -23 [ 433.529916][T26432] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9724'. [ 433.697430][T26444] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9729'. [ 434.365169][T26488] netlink: 'syz.2.9751': attribute type 1 has an invalid length. [ 434.383169][T26488] netlink: 'syz.2.9751': attribute type 10 has an invalid length. [ 434.401327][T26488] netlink: 236 bytes leftover after parsing attributes in process `syz.2.9751'. [ 434.452466][T26490] netlink: 'syz.1.9753': attribute type 3 has an invalid length. [ 434.493407][T26490] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 434.641372][T26499] netlink: 104 bytes leftover after parsing attributes in process `syz.0.9757'. [ 435.377398][T26552] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9779'. [ 435.586503][T26566] netlink: 27 bytes leftover after parsing attributes in process `syz.0.9785'. [ 435.780934][T26576] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9790'. [ 435.831647][T26582] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.9793'. [ 435.913054][ T6107] Bluetooth: hci4: command 0x0406 tx timeout [ 436.140380][T26600] netlink: 'syz.0.9799': attribute type 21 has an invalid length. [ 436.149399][T26600] netlink: 128 bytes leftover after parsing attributes in process `syz.0.9799'. [ 436.164243][T26600] netlink: 'syz.0.9799': attribute type 4 has an invalid length. [ 436.172008][T26600] netlink: 'syz.0.9799': attribute type 5 has an invalid length. [ 436.189030][T26600] netlink: 3 bytes leftover after parsing attributes in process `syz.0.9799'. [ 436.212104][T26602] netlink: 'syz.0.9799': attribute type 21 has an invalid length. [ 436.230647][T26602] netlink: 128 bytes leftover after parsing attributes in process `syz.0.9799'. [ 436.244878][T26602] netlink: 'syz.0.9799': attribute type 4 has an invalid length. [ 436.252825][T26602] netlink: 'syz.0.9799': attribute type 5 has an invalid length. [ 436.261805][T26602] netlink: 3 bytes leftover after parsing attributes in process `syz.0.9799'. [ 437.476612][T26670] netem: incorrect ge model size [ 437.729165][T26688] netlink: zone id is out of range [ 437.737475][T26688] netlink: zone id is out of range [ 437.764948][T26688] netlink: zone id is out of range [ 437.770119][T26688] netlink: zone id is out of range [ 437.796085][T26688] netlink: zone id is out of range [ 437.808829][T26688] netlink: zone id is out of range [ 437.820905][T26688] netlink: zone id is out of range [ 437.834693][T26688] netlink: zone id is out of range [ 437.847601][T26688] netlink: zone id is out of range [ 438.546943][T26739] veth0: entered promiscuous mode [ 438.567083][T26738] veth0: left promiscuous mode [ 438.718235][ T5157] block nbd1: Receive control failed (result -32) [ 439.055165][T26769] netlink: 'syz.0.9877': attribute type 10 has an invalid length. [ 439.097771][T26769] team0: Port device geneve0 added [ 439.761569][T26819] __nla_validate_parse: 9 callbacks suppressed [ 439.761589][T26819] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.9901'. [ 439.824477][T26821] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9903'. [ 440.042324][T26836] net_ratelimit: 218 callbacks suppressed [ 440.042342][T26836] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 440.180696][T26846] netlink: 'syz.3.9914': attribute type 83 has an invalid length. [ 440.418312][T26860] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9922'. [ 440.430469][T26860] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9922'. [ 440.993604][T26890] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9935'. [ 441.071306][T26897] netlink: 100 bytes leftover after parsing attributes in process `syz.0.9939'. [ 441.099038][T26899] netlink: 'syz.4.9938': attribute type 58 has an invalid length. [ 441.127481][T26899] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9938'. [ 441.322812][T26909] tap0: tun_chr_ioctl cmd 1074025678 [ 441.337081][T26909] tap0: group set to 0 [ 441.384347][T26917] sctp: [Deprecated]: syz.0.9947 (pid 26917) Use of struct sctp_assoc_value in delayed_ack socket option. [ 441.384347][T26917] Use struct sctp_sack_info instead [ 442.448838][T26977] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9975'. [ 442.514906][T26983] netlink: 96 bytes leftover after parsing attributes in process `syz.2.9977'. [ 443.266669][T27023] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9995'. [ 443.751043][T27049] netlink: 'syz.2.10007': attribute type 5 has an invalid length. [ 444.336215][T27089] netlink: 'syz.2.10024': attribute type 1 has an invalid length. [ 444.345206][T27089] netlink: 'syz.2.10024': attribute type 4 has an invalid length. [ 444.353972][T27089] NCSI netlink: No device for ifindex 458760 [ 444.952383][T27126] __nla_validate_parse: 2 callbacks suppressed [ 444.952404][T27126] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10043'. [ 444.976460][T27126] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10043'. [ 445.001655][T27130] netlink: 56 bytes leftover after parsing attributes in process `syz.2.10042'. [ 445.846117][T27181] blkio.reset_stats is deprecated [ 445.961127][T27189] netlink: 40 bytes leftover after parsing attributes in process `syz.3.10071'. [ 447.467764][T27267] netlink: 'syz.0.10105': attribute type 4 has an invalid length. [ 447.589616][T27275] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10109'. [ 447.831871][T27293] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10117'. [ 447.970350][T27301] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10120'. [ 447.995670][T27302] tap0: tun_chr_ioctl cmd 1074025676 [ 448.005311][T27302] tap0: owner set to 0 [ 448.060427][T27306] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10124'. [ 448.164558][T27312] netlink: 48 bytes leftover after parsing attributes in process `syz.3.10127'. [ 448.605302][T27339] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 448.994905][T27366] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 449.490881][T27398] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10169'. [ 449.670082][T27410] netlink: 'syz.4.10175': attribute type 14 has an invalid length. [ 449.969176][T27428] A link change request failed with some changes committed already. Interface veth0_to_bridge may have been left with an inconsistent configuration, please check. [ 450.180754][T27444] netlink: 108 bytes leftover after parsing attributes in process `syz.2.10193'. [ 450.203516][T27444] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10193'. [ 450.254766][T27447] macvtap1: entered allmulticast mode [ 450.260299][T27447] veth0_macvtap: entered allmulticast mode [ 450.384191][T27456] netlink: 'syz.0.10198': attribute type 4 has an invalid length. [ 450.569570][T27464] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10200'. [ 450.713085][ T5157] Bluetooth: hci4: command 0x0406 tx timeout [ 451.117795][T27496] openvswitch: netlink: IP tunnel dst address not specified [ 451.243608][T27500] netlink: 'syz.2.10219': attribute type 2 has an invalid length. [ 451.251870][T27500] netlink: 84 bytes leftover after parsing attributes in process `syz.2.10219'. [ 451.610975][T27523] tipc: Enabled bearer , priority 10 [ 452.057018][T27553] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10244'. [ 452.140530][T27560] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10247'. [ 452.599503][T27592] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10262'. [ 452.625595][T27592] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10262'. [ 452.636060][T27592] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10262'. [ 452.692745][T27596] team0: Device wireguard0 is of different type [ 452.729943][T27597] netlink: 160 bytes leftover after parsing attributes in process `syz.2.10264'. [ 453.144803][T27624] netlink: 'syz.0.10275': attribute type 1 has an invalid length. [ 453.167770][T27624] netlink: 'syz.0.10275': attribute type 2 has an invalid length. [ 453.467176][T27643] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 453.644231][T27657] netlink: 'syz.0.10290': attribute type 21 has an invalid length. [ 453.770762][T27665] bridge6: entered promiscuous mode [ 453.778020][T27665] bridge6: entered allmulticast mode [ 454.051625][T27683] netlink: 'syz.3.10304': attribute type 4 has an invalid length. [ 454.499894][T27706] bond0: entered promiscuous mode [ 454.553284][T27706] bond0: left promiscuous mode [ 454.627681][T27716] ip6gre0: Master is either lo or non-ether device [ 455.037919][T27738] vlan2: entered allmulticast mode [ 455.059615][T27738] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 455.241854][T27755] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 455.258997][T27758] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 455.266428][T27758] IPv6: NLM_F_CREATE should be set when creating new route [ 455.273734][T27758] IPv6: NLM_F_CREATE should be set when creating new route [ 455.291156][T27756] __nla_validate_parse: 8 callbacks suppressed [ 455.291174][T27756] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10336'. [ 455.318552][T27758] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 455.513277][ T5157] Bluetooth: hci1: command 0x0406 tx timeout [ 455.720614][T27784] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10350'. [ 455.751229][T27784] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10350'. [ 455.798659][T27790] netlink: 146840 bytes leftover after parsing attributes in process `syz.3.10353'. [ 455.960795][T27800] veth0: entered promiscuous mode [ 456.022500][T27803] veth0: left promiscuous mode [ 456.057206][T27805] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10360'. [ 456.496365][T27835] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 456.949402][T27864] netlink: 256 bytes leftover after parsing attributes in process `syz.4.10389'. [ 456.967070][T27866] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10390'. [ 456.986155][T27866] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10390'. [ 457.023098][T27866] 8021q: VLANs not supported on wg1 [ 457.279595][T27884] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10399'. [ 457.628669][T27910] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10409'. [ 458.012746][T27936] bridge_slave_0: entered promiscuous mode [ 458.959094][T27999] netlink: 'syz.4.10453': attribute type 2 has an invalid length. [ 458.968373][T27999] netlink: 'syz.4.10453': attribute type 8 has an invalid length. [ 459.356448][T28022] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 459.368783][T28022] openvswitch: netlink: Duplicate key (type 0). [ 459.993172][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 460.607427][T28096] __nla_validate_parse: 14 callbacks suppressed [ 460.607443][T28096] netlink: 76 bytes leftover after parsing attributes in process `syz.3.10500'. [ 460.703580][T28100] netlink: 104 bytes leftover after parsing attributes in process `syz.1.10501'. [ 460.772022][T28102] tap0: tun_chr_ioctl cmd 1074025677 [ 460.781006][T28102] tap0: linktype set to 65534 [ 460.955594][T28115] veth0: entered promiscuous mode [ 460.978990][T28113] veth0: left promiscuous mode [ 461.113566][T28122] netlink: 176 bytes leftover after parsing attributes in process `syz.3.10512'. [ 461.125447][T28122] ip6gretap0: entered promiscuous mode [ 461.131799][T28122] netlink: 176 bytes leftover after parsing attributes in process `syz.3.10512'. [ 461.327375][T28131] netlink: 'syz.4.10516': attribute type 1 has an invalid length. [ 461.343471][T28131] netlink: 172 bytes leftover after parsing attributes in process `syz.4.10516'. [ 462.047441][T28169] netem: unknown loss type 0 [ 462.606446][T28199] netlink: 'syz.1.10546': attribute type 8 has an invalid length. [ 462.741156][T28209] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10552'. [ 462.875379][T28216] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10557'. [ 463.041030][T28225] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10560'. [ 463.051333][T28225] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10560'. [ 463.365814][T28235] netem: change failed [ 465.107144][T28332] netlink: 'syz.0.10603': attribute type 29 has an invalid length. [ 465.140377][T28332] netlink: 'syz.0.10603': attribute type 29 has an invalid length. [ 465.180404][T28332] netlink: 'syz.0.10603': attribute type 29 has an invalid length. [ 465.195167][T28340] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10607'. [ 465.214629][T28332] netlink: 'syz.0.10603': attribute type 29 has an invalid length. [ 465.438818][T28344] syz.2.10608 (28344) used greatest stack depth: 17864 bytes left [ 465.905965][T28384] netlink: 'syz.1.10625': attribute type 1 has an invalid length. [ 465.929567][T28384] netlink: 'syz.1.10625': attribute type 2 has an invalid length. [ 465.943885][T28384] netlink: 'syz.1.10625': attribute type 1 has an invalid length. [ 465.951922][T28384] netlink: 1156 bytes leftover after parsing attributes in process `syz.1.10625'. [ 465.974381][T28381] netlink: 'syz.2.10624': attribute type 1 has an invalid length. [ 465.986646][T28381] nbd: error processing sock list [ 465.991889][T28381] block nbd2: shutting down sockets [ 466.160255][T28397] netlink: 'syz.0.10631': attribute type 1 has an invalid length. [ 466.180970][T28397] netlink: 172 bytes leftover after parsing attributes in process `syz.0.10631'. [ 466.200188][T28397] netlink: 'syz.0.10631': attribute type 1 has an invalid length. [ 466.315114][T28404] gtp0: entered promiscuous mode [ 466.334495][T28404] gtp0: entered allmulticast mode [ 466.772560][T28435] netlink: 32 bytes leftover after parsing attributes in process `syz.4.10648'. [ 467.387580][T28471] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10667'. [ 467.441416][T28479] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10671'. [ 467.456658][T28479] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10671'. [ 467.526862][T28481] veth0: entered promiscuous mode [ 467.559214][T28480] veth0: left promiscuous mode [ 467.720600][T28494] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 467.854515][T28494] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 468.008382][T28494] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 468.016356][T28508] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10685'. [ 468.094147][T28513] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10687'. [ 468.135224][T28494] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 468.378080][ T9683] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 468.422546][ T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 468.479988][ T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 468.522361][ T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 469.029409][T28569] netlink: 88 bytes leftover after parsing attributes in process `syz.0.10708'. [ 469.313822][T28580] lo: left promiscuous mode [ 469.400971][T28580] gretap0: left promiscuous mode [ 469.819806][T28580] bridge0: port 2(bridge_slave_1) entered disabled state [ 469.827127][T28580] bridge0: port 1(bridge_slave_0) entered disabled state [ 469.950329][T28580] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 470.148954][T28617] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10723'. [ 470.512789][T28638] sctp: [Deprecated]: syz.4.10734 (pid 28638) Use of int in max_burst socket option. [ 470.512789][T28638] Use struct sctp_assoc_value instead [ 471.192670][T28682] vxcan1: tx address claim with dest, not broadcast [ 471.821733][T28722] netlink: 'syz.4.10775': attribute type 4 has an invalid length. [ 472.303529][T28747] __nla_validate_parse: 2 callbacks suppressed [ 472.303548][T28747] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10787'. [ 472.455347][T28752] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.10790'. [ 472.477889][T28755] netlink: 'syz.4.10791': attribute type 10 has an invalid length. [ 472.520908][T28755] team0: Port device 0! added [ 472.559856][T28757] netlink: 'syz.4.10791': attribute type 10 has an invalid length. [ 472.618422][T28757] team0: Port device 0! removed [ 472.641621][T28757] bond0: (slave 0!): Enslaving as an active interface with an up link [ 472.760112][T28770] sctp: [Deprecated]: syz.2.10798 (pid 28770) Use of struct sctp_assoc_value in delayed_ack socket option. [ 472.760112][T28770] Use struct sctp_sack_info instead [ 475.341098][T28916] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10861'. [ 475.460549][T28922] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10864'. [ 475.872719][T28941] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10871'. [ 475.894676][T28941] netlink: 'syz.3.10871': attribute type 7 has an invalid length. [ 475.906308][T28941] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10871'. [ 476.939840][T28987] syzkaller1: entered promiscuous mode [ 476.955855][T28987] syzkaller1: entered allmulticast mode [ 477.382518][T29015] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 477.599761][T29030] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.10914'. [ 478.408759][T29083] netlink: 36 bytes leftover after parsing attributes in process `syz.1.10930'. [ 478.533269][T29087] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10934'. [ 478.589446][T29093] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10934'. [ 478.602026][T29087] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 478.649902][T29092] tipc: Started in network mode [ 478.655872][T29092] tipc: Node identity ac14142f, cluster identity 4711 [ 478.671575][T29092] tipc: New replicast peer: 0.0.0.0 [ 478.684386][T29092] tipc: Enabled bearer , priority 10 [ 478.692782][T29096] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00aa [ 478.811983][T29106] syzkaller1: entered promiscuous mode [ 478.818270][T29106] syzkaller1: entered allmulticast mode [ 478.866658][T29107] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10940'. [ 479.693064][T25727] tipc: Node number set to 2886997039 [ 480.571530][T29155] openvswitch: netlink: IPv4 tun info is not correct [ 480.771243][T29164] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 480.870711][T29169] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 480.906977][T29164] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 481.032309][T29164] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 481.100833][T29178] siw: device registration error -23 [ 481.289268][ T9692] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 481.324666][ T12] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 481.377632][ T9692] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 481.390168][ T9692] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 481.444999][T29192] netlink: 68 bytes leftover after parsing attributes in process `syz.3.10973'. [ 481.488731][T29192] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10973'. [ 481.589159][T29199] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 4032 [ 481.637900][T29202] netlink: 'syz.3.10978': attribute type 4 has an invalid length. [ 481.794935][T29214] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10983'. [ 481.817035][T29214] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10983'. [ 482.149899][T29234] netlink: 'syz.3.10992': attribute type 4 has an invalid length. [ 482.546603][T29251] netlink: 28 bytes leftover after parsing attributes in process `syz.4.11000'. [ 482.561575][T29251] netlink: 'syz.4.11000': attribute type 7 has an invalid length. [ 482.570248][T29251] netlink: 'syz.4.11000': attribute type 8 has an invalid length. [ 482.606683][T29255] netlink: 'syz.3.11002': attribute type 9 has an invalid length. [ 482.654852][T29255] netlink: 'syz.3.11002': attribute type 9 has an invalid length. [ 483.330133][T29297] __nla_validate_parse: 1 callbacks suppressed [ 483.330154][T29297] netlink: 88 bytes leftover after parsing attributes in process `syz.1.11023'. [ 483.605426][T29313] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11027'. [ 483.623215][T29314] netlink: 'syz.1.11028': attribute type 39 has an invalid length. [ 483.633126][T29313] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11027'. [ 483.656576][T29313] netlink: 'syz.0.11027': attribute type 11 has an invalid length. [ 483.889068][T29328] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.11036'. [ 483.912869][T29329] netlink: 'syz.2.11035': attribute type 1 has an invalid length. [ 484.753478][T29386] netlink: 'syz.3.11062': attribute type 12 has an invalid length. [ 484.761449][T29386] netlink: 148 bytes leftover after parsing attributes in process `syz.3.11062'. [ 484.808316][T29386] netlink: 23 bytes leftover after parsing attributes in process `syz.3.11062'. [ 485.118790][T29407] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11072'. [ 485.479185][T29426] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11080'. [ 485.533841][T29426] gtp0: entered promiscuous mode [ 485.545611][T29426] gtp0: entered allmulticast mode [ 485.685446][T29441] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11084'. [ 485.842555][T29448] macvlan0: entered allmulticast mode [ 485.909922][T29448] macvlan0 (unregistering): left allmulticast mode [ 486.179964][T29469] syzkaller1: entered promiscuous mode [ 486.186169][T29469] syzkaller1: entered allmulticast mode [ 486.251906][T29475] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.11102'. [ 487.438636][T29541] sctp: [Deprecated]: syz.0.11133 (pid 29541) Use of struct sctp_assoc_value in delayed_ack socket option. [ 487.438636][T29541] Use struct sctp_sack_info instead [ 488.209097][T29588] validate_nla: 5 callbacks suppressed [ 488.209116][T29588] netlink: 'syz.3.11154': attribute type 2 has an invalid length. [ 488.453370][T29600] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 34 [ 488.513315][T29604] __nla_validate_parse: 7 callbacks suppressed [ 488.513335][T29604] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11162'. [ 488.627920][T29614] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 488.684602][T29617] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11168'. [ 488.704780][T29617] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11168'. [ 488.732273][ T12] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 488.750932][ T12] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 488.769890][ T12] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 488.779164][ T12] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 488.910339][T29624] lo speed is unknown, defaulting to 1000 [ 489.056301][T29632] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11174'. [ 489.791203][T29624] vxcan1 speed is unknown, defaulting to 1000 [ 489.927838][T29670] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11190'. [ 489.941904][T29670] netlink: 'syz.0.11190': attribute type 7 has an invalid length. [ 489.950673][T29670] netlink: 'syz.0.11190': attribute type 8 has an invalid length. [ 489.963934][T29670] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11190'. [ 490.002722][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 490.023729][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 490.086043][T29673] syzkaller1: entered promiscuous mode [ 490.091679][T29673] syzkaller1: entered allmulticast mode [ 490.347979][T29683] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11196'. [ 490.393668][T29683] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11196'. [ 490.409647][T29683] netlink: 'syz.1.11196': attribute type 6 has an invalid length. [ 490.695246][T29693] syzkaller1: entered promiscuous mode [ 490.700953][T29693] syzkaller1: entered allmulticast mode [ 491.478502][T29734] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11218'. [ 491.646390][T29740] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.11221'. [ 491.886442][T29750] vlan1: entered allmulticast mode [ 491.891713][T29750] veth1: entered allmulticast mode [ 492.376245][T29779] syzkaller1: entered promiscuous mode [ 492.381844][T29779] syzkaller1: entered allmulticast mode [ 493.725789][T29838] lo speed is unknown, defaulting to 1000 [ 494.067250][T29861] veth0: entered promiscuous mode [ 494.074243][T29860] veth0: left promiscuous mode [ 494.599947][T29838] vxcan1 speed is unknown, defaulting to 1000 [ 494.826482][T29895] syzkaller1: entered promiscuous mode [ 494.853101][T29895] syzkaller1: entered allmulticast mode [ 495.049985][T29902] netlink: 'syz.0.11293': attribute type 4 has an invalid length. [ 495.352462][T29920] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 495.601509][T29934] __nla_validate_parse: 6 callbacks suppressed [ 495.601526][T29934] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11307'. [ 496.203015][T29954] veth0: entered promiscuous mode [ 496.229380][T29953] veth0: left promiscuous mode [ 496.414658][T29967] pim6reg1: entered promiscuous mode [ 496.425695][T29967] pim6reg1: entered allmulticast mode [ 496.647118][T29982] netlink: 'syz.4.11327': attribute type 17 has an invalid length. [ 496.658498][T29982] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11327'. [ 496.668958][T29982] netlink: 28 bytes leftover after parsing attributes in process `syz.4.11327'. [ 496.920024][T29999] netlink: 28 bytes leftover after parsing attributes in process `syz.4.11336'. [ 496.943287][T29999] netlink: 28 bytes leftover after parsing attributes in process `syz.4.11336'. [ 497.193645][T30015] syzkaller1: entered promiscuous mode [ 497.213560][T30015] syzkaller1: entered allmulticast mode [ 497.729501][T30046] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 499.288122][T30128] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11385'. [ 499.300715][T30130] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11386'. [ 499.334710][T30130] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11386'. [ 499.449119][T30126] lo speed is unknown, defaulting to 1000 [ 500.071869][ T12] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d [ 500.109756][T30162] syzkaller1: entered promiscuous mode [ 500.125558][T30162] syzkaller1: entered allmulticast mode [ 500.229424][T30126] vxcan1 speed is unknown, defaulting to 1000 [ 500.433553][T30175] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.11403'. [ 501.016928][T30196] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11411'. [ 501.429156][T30220] netlink: 996 bytes leftover after parsing attributes in process `syz.2.11423'. [ 501.513194][ T6107] Bluetooth: hci4: command 0x0406 tx timeout [ 501.903393][T30244] netlink: 'syz.4.11434': attribute type 1 has an invalid length. [ 501.943172][T30244] 8021q: adding VLAN 0 to HW filter on device bond1 [ 502.412221][T30276] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 502.614178][T30292] netlink: 48 bytes leftover after parsing attributes in process `syz.0.11453'. [ 502.725571][T30298] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11455'. [ 502.904643][T30309] trusted_key: syz.4.11458 sent an empty control message without MSG_MORE. [ 502.979450][ T9683] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 503.492430][T30338] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 503.895523][T30346] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11473'. [ 503.928584][T30346] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11473'. [ 503.951986][T30346] netlink: 'syz.0.11473': attribute type 15 has an invalid length. [ 503.963259][T30346] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11473'. [ 503.998594][T30346] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11473'. [ 504.027767][T30346] netlink: 'syz.0.11473': attribute type 15 has an invalid length. [ 504.132765][T30345] syzkaller1: entered promiscuous mode [ 504.139161][T30345] syzkaller1: entered allmulticast mode [ 504.350299][T30373] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11481'. [ 504.387553][T30373] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11481'. [ 506.010094][T30447] pim6reg1: entered promiscuous mode [ 506.016452][T30447] pim6reg1: entered allmulticast mode [ 506.103810][T30453] netlink: 'syz.3.11511': attribute type 12 has an invalid length. [ 506.112460][T30453] netlink: 'syz.3.11511': attribute type 29 has an invalid length. [ 506.133112][T30453] netlink: 148 bytes leftover after parsing attributes in process `syz.3.11511'. [ 506.147488][T30453] netlink: 'syz.3.11511': attribute type 3 has an invalid length. [ 506.159573][T30453] netlink: 'syz.3.11511': attribute type 2 has an invalid length. [ 506.171083][T30453] netlink: 35 bytes leftover after parsing attributes in process `syz.3.11511'. [ 506.848723][T30495] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11529'. [ 507.192193][ T12] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 508.330092][T30561] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11555'. [ 508.339911][T30561] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11555'. [ 508.361889][ T12] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 508.362058][T30561] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11555'. [ 508.380387][T30561] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11555'. [ 508.381089][ T12] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 508.405486][ T12] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 508.414295][ T12] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 508.622184][T30573] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11561'. [ 508.798978][T30583] netlink: 'syz.2.11566': attribute type 12 has an invalid length. [ 508.826338][T30585] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11567'. [ 509.081513][T30600] netlink: 'syz.4.11573': attribute type 16 has an invalid length. [ 509.090025][T30600] netlink: 20 bytes leftover after parsing attributes in process `syz.4.11573'. [ 510.202776][T30636] syzkaller1: entered promiscuous mode [ 510.208445][T30636] syzkaller1: entered allmulticast mode [ 511.068605][T30691] netlink: 'syz.2.11613': attribute type 1 has an invalid length. [ 511.076754][T30691] netlink: 'syz.2.11613': attribute type 2 has an invalid length. [ 511.088361][T30691] netlink: 'syz.2.11613': attribute type 1 has an invalid length. [ 511.097859][T30691] netlink: 'syz.2.11613': attribute type 2 has an invalid length. [ 512.512442][T30742] lo: left promiscuous mode [ 512.519381][T30742] tunl0: left promiscuous mode [ 512.526036][T30742] gre0: left promiscuous mode [ 512.532336][T30742] gretap0: left promiscuous mode [ 512.540036][T30742] erspan0: left promiscuous mode [ 512.548619][T30742] ip_vti0: left promiscuous mode [ 512.570596][T30742] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 512.817723][T30763] __nla_validate_parse: 3 callbacks suppressed [ 512.817743][T30763] netlink: 9 bytes leftover after parsing attributes in process `syz.2.11640'. [ 512.846085][T30766] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11639'. [ 512.855780][T30763] gretap0: entered promiscuous mode [ 512.899494][T30766] bridge_slave_1 (unregistering): left allmulticast mode [ 512.911482][T30766] bridge_slave_1 (unregistering): left promiscuous mode [ 512.919366][T30766] bridge0: port 2(bridge_slave_1) entered disabled state [ 512.938757][T30771] netlink: 5 bytes leftover after parsing attributes in process `syz.2.11640'. [ 512.968893][T30771] 0ªî{X¹¦: renamed from gretap0 [ 512.975784][T30771] 0ªî{X¹¦: left promiscuous mode [ 512.981054][T30771] 0ªî{X¹¦: entered allmulticast mode [ 512.997145][T30771] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 513.273610][ T6107] Bluetooth: hci4: command 0x0406 tx timeout [ 513.690206][T30808] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11656'. [ 513.715688][T30811] netlink: 'syz.1.11655': attribute type 13 has an invalid length. [ 513.735591][T30811] netlink: 'syz.1.11655': attribute type 17 has an invalid length. [ 513.930115][T30808] hsr_slave_0 (unregistering): left promiscuous mode [ 514.233303][T30811] 8021q: adding VLAN 0 to HW filter on device bond0 [ 514.242716][T30811] 8021q: adding VLAN 0 to HW filter on device team0 [ 514.256658][T30811] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 514.282495][T30831] ip6gre1: entered allmulticast mode [ 514.411102][T30835] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11666'. [ 514.677580][T30860] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11677'. [ 514.871414][T30870] netlink: 212264 bytes leftover after parsing attributes in process `syz.3.11681'. [ 515.086234][T30882] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11686'. [ 515.096965][T30882] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11686'. [ 515.111298][T30882] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11686'. [ 515.552627][T30893] bond3: entered allmulticast mode [ 515.575785][T30893] 8021q: adding VLAN 0 to HW filter on device bond3 [ 515.589684][T30893] bridge0: port 2(bond3) entered blocking state [ 515.597415][T30893] bridge0: port 2(bond3) entered disabled state [ 515.612207][T30893] bond3: entered promiscuous mode [ 515.620762][T30893] bridge0: port 2(bond3) entered blocking state [ 515.627518][T30893] bridge0: port 2(bond3) entered listening state [ 515.719029][T30909] netlink: 'syz.2.11696': attribute type 18 has an invalid length. [ 515.743343][T30909] netlink: 'syz.2.11696': attribute type 18 has an invalid length. [ 515.968915][T30927] veth0_to_bridge: left allmulticast mode [ 515.975033][T30927] veth0_to_bridge: left promiscuous mode [ 515.981013][T30927] bridge0: port 3(veth0_to_bridge) entered disabled state [ 515.990469][T30927] bridge_slave_0: left allmulticast mode [ 515.997560][T30927] bridge_slave_0: left promiscuous mode [ 516.004276][T30927] bridge0: port 1(bridge_slave_0) entered disabled state [ 516.026481][T30927] bond0: (slave bond_slave_0): Releasing backup interface [ 516.044894][T30927] bond0: (slave bond_slave_1): Releasing backup interface [ 516.069889][T30927] team0: Port device C removed [ 516.087053][T30927] team0: Port device team_slave_1 removed [ 516.094146][T30927] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 516.102578][T30927] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 516.110533][T30927] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 516.125772][T30927] bond3: left promiscuous mode [ 516.130805][T30927] bridge0: port 2(bond3) entered disabled state [ 516.140381][T30930] netlink: 'syz.4.11705': attribute type 7 has an invalid length. [ 516.867925][T30972] pim6reg1: entered promiscuous mode [ 516.874006][T30972] pim6reg1: entered allmulticast mode [ 516.980893][T30982] netlink: 'syz.4.11727': attribute type 4 has an invalid length. [ 516.997884][T30982] netlink: 'syz.4.11727': attribute type 4 has an invalid length. [ 517.268031][T30987] netlink: 'syz.3.11730': attribute type 15 has an invalid length. [ 517.442174][ T49] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0xfa [ 518.951133][T31040] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 519.025311][T31048] netlink: 'syz.4.11752': attribute type 21 has an invalid length. [ 519.131712][T31048] __nla_validate_parse: 9 callbacks suppressed [ 519.131757][T31048] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11752'. [ 519.154222][T31048] netlink: 'syz.4.11752': attribute type 21 has an invalid length. [ 519.162241][T31048] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11752'. [ 520.917388][T31088] netlink: 'syz.1.11767': attribute type 1 has an invalid length. [ 520.992598][T31088] netlink: 128 bytes leftover after parsing attributes in process `syz.1.11767'. [ 521.059759][T31088] netlink: 'syz.1.11767': attribute type 2 has an invalid length. [ 521.133064][T31088] netlink: 'syz.1.11767': attribute type 1 has an invalid length. [ 521.518752][T31102] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 521.565722][T31105] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11775'. [ 521.611115][ T9683] smc: removing ib device syz2 [ 522.037335][T31132] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11784'. [ 522.083243][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 523.728035][T31176] lo speed is unknown, defaulting to 1000 [ 524.397726][T31201] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11808'. [ 524.800421][T31209] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11812'. [ 524.961353][T31209] team1: entered promiscuous mode [ 524.978402][T31209] team1: entered allmulticast mode [ 525.069100][T31222] netlink: 'syz.4.11818': attribute type 1 has an invalid length. [ 525.168936][T31222] bond2: (slave gretap2): making interface the new active one [ 525.177777][T31222] bond2: (slave gretap2): Enslaving as an active interface with an up link [ 525.730978][T31257] netlink: 'syz.0.11834': attribute type 1 has an invalid length. [ 525.792277][T31261] netlink: 28 bytes leftover after parsing attributes in process `syz.4.11835'. [ 525.796475][T31257] bond5: (slave ip6gretap2): making interface the new active one [ 525.810704][T31257] bond5: (slave ip6gretap2): Enslaving as an active interface with an up link [ 525.843519][T31261] netlink: 'syz.4.11835': attribute type 7 has an invalid length. [ 525.880877][T31261] netlink: 'syz.4.11835': attribute type 8 has an invalid length. [ 525.889121][T31261] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11835'. [ 526.320984][T31282] netlink: 60 bytes leftover after parsing attributes in process `syz.2.11845'. [ 527.018767][T31308] lo speed is unknown, defaulting to 1000 [ 527.186583][T31317] netlink: 'syz.4.11857': attribute type 1 has an invalid length. [ 527.305887][T31321] bond3: (slave bridge8): making interface the new active one [ 527.314306][T31321] bond3: (slave bridge8): Enslaving as an active interface with an up link [ 527.958393][T31313] netlink: 'syz.0.11853': attribute type 6 has an invalid length. [ 527.983956][T31345] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11869'. [ 528.514635][T31373] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11877'. [ 528.796896][T31383] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11881'. [ 528.841784][T31383] netlink: 'syz.0.11881': attribute type 20 has an invalid length. [ 528.998803][T31383] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11881'. [ 529.008641][T31383] netlink: 'syz.0.11881': attribute type 20 has an invalid length. [ 530.647291][T31469] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11914'. [ 530.873593][T31482] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11920'. [ 531.286898][T31505] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 531.387752][T31511] syzkaller1: entered promiscuous mode [ 531.399754][T31511] syzkaller1: entered allmulticast mode [ 531.515904][T31520] netlink: 84 bytes leftover after parsing attributes in process `syz.4.11934'. [ 531.552593][T31522] netlink: 'syz.3.11933': attribute type 13 has an invalid length. [ 531.640051][T31526] netlink: 'syz.0.11936': attribute type 15 has an invalid length. [ 531.736575][T31532] sctp: [Deprecated]: syz.0.11938 (pid 31532) Use of int in maxseg socket option. [ 531.736575][T31532] Use struct sctp_assoc_value instead [ 532.052444][T31544] syzkaller0: entered promiscuous mode [ 532.058144][T31544] syzkaller0: entered allmulticast mode [ 534.187047][T31594] netlink: 184 bytes leftover after parsing attributes in process `syz.4.11961'. [ 534.759252][T31623] netlink: 'syz.1.11974': attribute type 1 has an invalid length. [ 534.772772][T31623] netlink: 'syz.1.11974': attribute type 4 has an invalid length. [ 534.787843][T31623] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.11974'. [ 534.900238][T31628] syzkaller1: entered promiscuous mode [ 534.922661][T31628] syzkaller1: entered allmulticast mode [ 535.463771][T31661] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11991'. [ 535.491264][T31661] Unsupported xt match [ 535.491282][T31661] unable to load match [ 536.114583][T31700] syzkaller1: entered promiscuous mode [ 536.120122][T31700] syzkaller1: entered allmulticast mode [ 536.969920][T31738] netlink: 'syz.4.12024': attribute type 1 has an invalid length. [ 537.014201][T31738] netlink: 'syz.4.12024': attribute type 4 has an invalid length. [ 537.045436][T31738] netlink: 9422 bytes leftover after parsing attributes in process `syz.4.12024'. [ 537.215987][T31751] netlink: 32 bytes leftover after parsing attributes in process `syz.4.12030'. [ 537.228148][T31755] netlink: 'syz.2.12032': attribute type 1 has an invalid length. [ 537.321434][T31763] bond2: (slave gretap0): making interface the new active one [ 537.330000][T31763] bond2: (slave gretap0): Enslaving as an active interface with an up link [ 537.561002][T31773] lo speed is unknown, defaulting to 1000 [ 537.665235][T31780] dvmrp0: entered allmulticast mode [ 539.458444][T31852] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 539.466665][T31852] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 539.578859][T31854] mac80211_hwsim hwsim5 syzkaller0: Caught tx_queue_len zero misconfig [ 540.089075][T31882] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12082'. [ 540.120110][T31882] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12082'. [ 540.444366][T31899] veth0_virt_wifi: renamed from veth0_vlan [ 540.721482][T31921] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12099'. [ 541.045852][T31921] vlan0 (unregistering): left allmulticast mode [ 541.052493][T31921] veth0_vlan (unregistering): left allmulticast mode [ 541.067873][T31921] vlan0 (unregistering): left promiscuous mode [ 541.309904][T31943] netlink: 84 bytes leftover after parsing attributes in process `syz.2.12104'. [ 541.915593][ T5502] veth0_virt_wifi: left promiscuous mode [ 542.003996][ T5502] veth0_virt_wifi: entered promiscuous mode [ 542.392725][T31999] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12119'. [ 542.676565][T32008] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12122'. [ 542.734829][T32008] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12122'. [ 542.973703][T32017] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12124'. [ 542.997569][T32017] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12124'. [ 543.153997][T32026] dvmrp8: entered allmulticast mode [ 543.221070][T32033] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12130'. [ 543.233299][T32034] netlink: 240 bytes leftover after parsing attributes in process `syz.4.12127'. [ 543.618191][T32051] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12137'. [ 543.773286][T32061] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12141'. [ 544.312305][T32087] netlink: 36 bytes leftover after parsing attributes in process `syz.3.12149'. [ 545.310859][T32133] sctp: [Deprecated]: syz.2.12168 (pid 32133) Use of int in max_burst socket option deprecated. [ 545.310859][T32133] Use struct sctp_assoc_value instead [ 546.545115][T32174] syzkaller0: entered promiscuous mode [ 546.550907][T32174] syzkaller0: entered allmulticast mode [ 548.507390][T32203] ip6erspan0: entered promiscuous mode [ 548.517023][T32202] syzkaller1: entered promiscuous mode [ 548.523986][T32202] syzkaller1: entered allmulticast mode [ 548.559268][T32208] __nla_validate_parse: 4 callbacks suppressed [ 548.559289][T32208] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12196'. [ 548.624369][T32208] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12196'. [ 548.889875][T32226] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12203'. [ 549.057623][T32230] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12205'. [ 549.747399][T32256] syzkaller0: entered promiscuous mode [ 549.769616][T32256] syzkaller0: entered allmulticast mode [ 549.857379][T32263] atm:do_vcc_ioctl: ATM_SETSC is obsolete; used by syz.3.12216:32263 [ 551.184873][T32296] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12225'. [ 552.472166][T32312] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12230'. [ 552.564006][T32316] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12231'. [ 552.715029][T32316] team0: left allmulticast mode [ 552.742465][T32316] team0: left promiscuous mode [ 552.762029][T32316] bridge0: port 1(team0) entered disabled state [ 552.837727][T32335] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12238'. [ 552.924589][T32339] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12237'. [ 553.012705][T32333] lo speed is unknown, defaulting to 1000 [ 553.807050][T32364] syzkaller1: entered promiscuous mode [ 553.823145][T32364] syzkaller1: entered allmulticast mode [ 553.968802][T32369] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12249'. [ 554.028236][T32370] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12249'. [ 554.569757][T32391] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12257'. [ 555.491371][T32405] netlink: 'syz.4.12262': attribute type 1 has an invalid length. [ 555.499441][T32405] netlink: 'syz.4.12262': attribute type 1 has an invalid length. [ 555.513630][T32405] netlink: 216 bytes leftover after parsing attributes in process `syz.4.12262'. [ 555.822737][T32418] netlink: 'syz.4.12264': attribute type 4 has an invalid length. [ 556.403493][T32437] sch_tbf: burst 19872 is lower than device lo mtu (39799) ! [ 556.676173][T32458] syz_tun: entered allmulticast mode [ 556.684759][T32453] syz_tun: left allmulticast mode [ 557.636730][T32499] syzkaller1: entered promiscuous mode [ 557.642419][T32499] syzkaller1: entered allmulticast mode [ 557.779896][T32504] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12293'. [ 558.018325][T32513] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12297'. [ 558.038929][T32512] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12296'. [ 558.184522][T32517] tipc: Started in network mode [ 558.194220][T32517] tipc: Node identity aace8c97090a, cluster identity 4711 [ 558.201857][T32517] tipc: Enabled bearer , priority 0 [ 558.234696][T32524] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12301'. [ 558.330028][T32517] syzkaller0: entered promiscuous mode [ 558.336022][T32517] syzkaller0: entered allmulticast mode [ 558.342423][T32517] tipc: Resetting bearer [ 558.397527][T32538] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12305'. [ 558.467311][T32516] tipc: Resetting bearer [ 559.328282][T25727] tipc: Node number set to 2747567255 [ 560.412597][T32516] tipc: Disabling bearer [ 560.506207][T32574] netlink: 40 bytes leftover after parsing attributes in process `syz.4.12314'. [ 560.696972][T32586] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 560.723732][T32586] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 561.001481][T32608] tipc: Enabled bearer , priority 0 [ 561.033921][T32601] netlink: 'syz.1.12325': attribute type 13 has an invalid length. [ 561.639450][T32601] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 561.900661][T32641] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12340'. [ 561.945552][T32645] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12342'. [ 562.432273][T32662] syzkaller0: entered promiscuous mode [ 562.437978][T32662] syzkaller0: entered allmulticast mode [ 563.995333][ T6107] Bluetooth: hci4: command 0x0406 tx timeout [ 564.262579][T32696] dvmrp1: entered allmulticast mode [ 564.397696][T32706] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12365'. [ 564.683524][T32724] netlink: 'syz.3.12373': attribute type 1 has an invalid length. [ 564.694360][T32723] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12374'. [ 564.749935][T32724] 8021q: adding VLAN 0 to HW filter on device bond4 [ 564.785349][T32723] 8021q: adding VLAN 0 to HW filter on device bond3 [ 564.852352][T32735] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12377'. [ 564.930662][T32721] team0 (unregistering): Port device team_slave_0 removed [ 564.940662][T32721] team0 (unregistering): Port device team_slave_1 removed [ 564.977865][T32730] bond4: (slave veth7): Enslaving as an active interface with a down link [ 565.005230][T32728] vlan3: entered allmulticast mode [ 565.010421][T32728] bond3: entered allmulticast mode [ 565.045226][T32724] bond4: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 565.239000][T32744] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12380'. [ 565.876317][ T314] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12395'. [ 566.100975][ T329] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12401'. [ 566.510568][ T351] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12408'. [ 566.772780][ T364] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12414'. [ 567.009382][ T376] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12420'. [ 567.072706][ T376] vlan3: entered allmulticast mode [ 567.078537][ T376] bridge6: entered allmulticast mode [ 567.091134][ T378] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 567.190056][ T378] syzkaller0: entered promiscuous mode [ 567.199839][ T378] syzkaller0: entered allmulticast mode [ 569.031041][ T400] lo speed is unknown, defaulting to 1000 [ 569.057004][ T408] netlink: 'syz.2.12431': attribute type 2 has an invalid length. [ 569.069741][ T408] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12431'. [ 569.481135][ T404] lo speed is unknown, defaulting to 1000 [ 569.547870][ T424] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12436'. [ 570.551714][ T441] netlink: 64 bytes leftover after parsing attributes in process `syz.2.12441'. [ 571.016271][ T464] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12449'. [ 571.274363][ T476] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12451'. [ 571.323088][ T476] netlink: 'syz.4.12451': attribute type 1 has an invalid length. [ 571.340146][ T476] netlink: 108 bytes leftover after parsing attributes in process `syz.4.12451'. [ 571.580593][ T494] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12461'. [ 571.734915][ T501] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12465'. [ 571.771461][ T506] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12464'. [ 571.816727][ T501] netlink: 16 bytes leftover after parsing attributes in process `syz.0.12465'. [ 572.025872][ T517] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12471'. [ 572.042199][ T517] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12471'. [ 572.060459][ T521] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12472'. [ 572.248366][ T525] netlink: 'syz.4.12474': attribute type 5 has an invalid length. [ 574.419637][ T637] netlink: 'syz.1.12520': attribute type 4 has an invalid length. [ 574.452671][ T637] netlink: 'syz.1.12520': attribute type 4 has an invalid length. [ 577.098821][ T712] netlink: 'syz.0.12542': attribute type 1 has an invalid length. [ 577.144573][ T716] __nla_validate_parse: 7 callbacks suppressed [ 577.144591][ T716] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12545'. [ 577.183452][ T712] 8021q: adding VLAN 0 to HW filter on device bond6 [ 577.290121][ T719] 8021q: adding VLAN 0 to HW filter on device bond6 [ 577.313954][ T719] bond6: (slave vxcan5): The slave device specified does not support setting the MAC address [ 577.342185][ T719] bond6: (slave vxcan5): Error -95 calling set_mac_address [ 577.380934][ T726] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12546'. [ 577.397740][ T712] gretap1: entered promiscuous mode [ 577.413460][ T712] bond6: (slave gretap1): making interface the new active one [ 577.450360][ T712] bond6: (slave gretap1): Enslaving as an active interface with an up link [ 577.549539][ T728] syzkaller0: entered promiscuous mode [ 577.555655][ T728] syzkaller0: entered allmulticast mode [ 577.592215][ T722] tipc: Enabled bearer , priority 0 [ 577.604512][ T721] tipc: Resetting bearer [ 577.721103][ T749] netlink: 36 bytes leftover after parsing attributes in process `syz.2.12554'. [ 577.735047][ T749] netlink: 16 bytes leftover after parsing attributes in process `syz.2.12554'. [ 577.758921][ T749] netlink: 36 bytes leftover after parsing attributes in process `syz.2.12554'. [ 577.775694][ T749] netlink: 36 bytes leftover after parsing attributes in process `syz.2.12554'. [ 578.607033][T17944] tipc: Node number set to 2886997162 [ 579.079727][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804ff99400: rx timeout, send abort [ 579.089001][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88804ff99400: 0x2fe01: (3) A timeout occurred and this is the connection abort to close the session. [ 580.681939][ T721] tipc: Disabling bearer [ 580.730205][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807c208800: rx timeout, send abort [ 580.738976][ C1] vcan0: j1939_tp_rxtimer: 0xffff888031e2f800: rx timeout, send abort [ 580.747575][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88807c208800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 580.762011][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888031e2f800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 581.001965][ T775] lo speed is unknown, defaulting to 1000 [ 581.113438][ T785] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12563'. [ 581.128899][ T784] netlink: 24 bytes leftover after parsing attributes in process `syz.1.12565'. [ 581.295382][ T785] bridge_slave_1: left allmulticast mode [ 581.301493][ T785] bridge0: port 2(bridge_slave_1) entered disabled state [ 581.318663][ T785] bridge_slave_0: left allmulticast mode [ 581.332397][ T785] bridge0: port 1(bridge_slave_0) entered disabled state [ 581.934965][ T816] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12575'. [ 582.299273][ T826] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12578'. [ 582.342559][ T826] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12578'. [ 582.608023][ T840] lo speed is unknown, defaulting to 1000 [ 583.003471][ T848] lo speed is unknown, defaulting to 1000 [ 583.562221][ T879] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12596'. [ 583.727564][ T879] vlan4: entered allmulticast mode [ 583.745960][ T879] bridge0: entered allmulticast mode [ 583.763838][ T879] bridge8: port 1(vlan4) entered blocking state [ 583.788118][ T879] bridge8: port 1(vlan4) entered disabled state [ 583.851528][ T879] vlan4: entered promiscuous mode [ 583.872332][ T879] bridge0: entered promiscuous mode [ 583.989219][ T892] netlink: 'syz.3.12601': attribute type 1 has an invalid length. [ 584.070537][ T892] 8021q: adding VLAN 0 to HW filter on device bond6 [ 584.081325][ T892] bond5: (slave bond6): making interface the new active one [ 584.092364][ T892] bond5: (slave bond6): Enslaving as an active interface with an up link [ 584.144623][ T901] bond5: (slave gretap2): Enslaving as a backup interface with an up link [ 584.177969][ T892] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12601'. [ 584.207229][ T892] 8021q: adding VLAN 0 to HW filter on device bond5 [ 584.338397][ T912] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12607'. [ 584.911845][ T942] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12614'. [ 584.917725][ T947] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12613'. [ 585.040554][ T945] lo speed is unknown, defaulting to 1000 [ 585.506291][ T964] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12618'. [ 586.143569][ T984] tipc: Enabled bearer , priority 0 [ 586.199630][ T984] syzkaller0: entered promiscuous mode [ 586.218555][ T984] syzkaller0: entered allmulticast mode [ 586.262649][ T988] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12627'. [ 586.283626][ T984] tipc: Resetting bearer [ 586.308130][ T983] tipc: Resetting bearer [ 586.373952][ T983] tipc: Disabling bearer [ 586.599223][ T1001] lo speed is unknown, defaulting to 1000 [ 586.671167][ T1009] 0ªî{X¹¦: left allmulticast mode [ 586.724562][ T1009] bridge_slave_0: left promiscuous mode [ 586.766080][ T1009] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 587.361893][ T1049] tipc: Resetting bearer [ 587.736486][ T1065] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12643'. [ 588.333537][ T1088] netlink: 'syz.2.12649': attribute type 1 has an invalid length. [ 588.450312][ T1088] 8021q: adding VLAN 0 to HW filter on device bond4 [ 588.609528][ T1091] 8021q: adding VLAN 0 to HW filter on device bond4 [ 588.628770][ T1091] bond4: (slave vxcan1): The slave device specified does not support setting the MAC address [ 588.667668][ T1091] bond4: (slave vxcan1): Error -95 calling set_mac_address [ 589.192575][ T1124] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12657'. [ 589.266846][ T1124] 8021q: adding VLAN 0 to HW filter on device bond5 [ 589.276857][ T1129] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12659'. [ 589.286417][ T1129] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12659'. [ 589.296372][ T1129] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12659'. [ 589.305889][ T1129] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12659'. [ 589.426528][ T1135] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12660'. [ 589.429723][ T1127] bond5: (slave bridge10): Enslaving as an active interface with an up link [ 589.511899][ T1138] sch_tbf: burst 88 is lower than device veth11 mtu (1514) ! [ 589.887535][ T1156] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12669'. [ 590.135474][ T1160] netlink: 40 bytes leftover after parsing attributes in process `syz.1.12671'. [ 590.146188][ T1160] nbd: couldn't find a device at index 0 [ 590.590277][ T1165] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12673'. [ 590.816562][ T1178] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 591.697857][ T1195] nbd2: detected capacity change from 0 to 63 [ 591.715777][ T1196] block nbd2: NBD_DISCONNECT [ 591.750199][ T1196] block nbd2: Disconnected due to user request. [ 591.764827][ T1196] block nbd2: shutting down sockets [ 591.768078][ T628] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 591.788641][ T628] Buffer I/O error on dev nbd2, logical block 0, async page read [ 591.849861][ T11] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 0 [ 591.860963][ T11] Buffer I/O error on dev nbd2, logical block 1, async page read [ 591.869240][ T11] Buffer I/O error on dev nbd2, logical block 2, async page read [ 591.877167][ T11] Buffer I/O error on dev nbd2, logical block 3, async page read [ 591.887730][ T628] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 591.897083][ T628] Buffer I/O error on dev nbd2, logical block 0, async page read [ 591.906348][ T628] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 591.916402][ T628] Buffer I/O error on dev nbd2, logical block 1, async page read [ 591.924493][ T628] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 591.933726][ T628] Buffer I/O error on dev nbd2, logical block 2, async page read [ 591.944431][ T628] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 591.954127][ T628] Buffer I/O error on dev nbd2, logical block 3, async page read [ 591.962220][ T628] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 591.971468][ T628] Buffer I/O error on dev nbd2, logical block 0, async page read [ 591.979736][ T628] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 591.988929][ T628] Buffer I/O error on dev nbd2, logical block 1, async page read [ 591.997153][ T628] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 592.007313][ T628] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 592.020388][ T628] ldm_validate_partition_table(): Disk read failed. [ 592.037277][ T628] Dev nbd2: unable to read RDB block 0 [ 592.046571][ T628] nbd2: unable to read partition table [ 592.099848][ T628] ldm_validate_partition_table(): Disk read failed. [ 592.108638][ T628] Dev nbd2: unable to read RDB block 0 [ 592.116224][ T628] nbd2: unable to read partition table [ 593.217674][ T1189] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 593.236993][ T1203] tipc: Enabled bearer , priority 0 [ 593.261681][ T1204] tipc: Disabling bearer [ 593.284649][ T1213] mac80211_hwsim hwsim13 wlan1: entered allmulticast mode [ 593.298909][ T1217] __nla_validate_parse: 6 callbacks suppressed [ 593.298927][ T1217] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12687'. [ 593.304932][ T1213] netlink: 'syz.3.12686': attribute type 10 has an invalid length. [ 593.324929][ T1217] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12687'. [ 593.325174][ T1213] mac80211_hwsim hwsim13 wlan1: left allmulticast mode [ 593.347491][ T1213] bond0: (slave wlan1): refused to change device type [ 593.463636][ T1213] bond4: (slave veth0_to_bond): Releasing active interface [ 593.489063][ T1213] bond4: (slave veth7): Releasing active interface [ 593.499623][ T1213] bond5: (slave bond6): Releasing backup interface [ 593.506635][ T1213] bond5: (slave bond6): the permanent HWaddr of slave - c6:1c:32:6a:8d:2c - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 593.525994][ T1213] bond5: (slave gretap2): making interface the new active one [ 593.541114][ T1213] bond5: (slave gretap2): Releasing backup interface [ 593.559554][ T1217] netlink: 156 bytes leftover after parsing attributes in process `syz.0.12687'. [ 593.570859][ T1222] rdma_rxe: rxe_newlink: failed to add lo [ 593.640011][ T1222] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 593.659029][ T1213] syz.3.12686 (1213) used greatest stack depth: 17448 bytes left [ 593.827284][ T1236] netlink: 'syz.3.12692': attribute type 1 has an invalid length. [ 593.985582][ T1241] bond7: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 594.079264][ T1245] veth13: entered promiscuous mode [ 594.097814][ T1245] bond7: (slave veth13): Enslaving as a backup interface with a down link [ 594.252122][ T1253] netlink: 'syz.2.12696': attribute type 10 has an invalid length. [ 594.357459][ T1257] netlink: 'syz.2.12698': attribute type 1 has an invalid length. [ 594.428466][ T1257] 8021q: adding VLAN 0 to HW filter on device bond6 [ 594.502135][ T1260] vlan5: entered promiscuous mode [ 594.509786][ T1260] bond6: entered promiscuous mode [ 594.515328][ T1260] vlan5: entered allmulticast mode [ 594.520468][ T1260] bond6: entered allmulticast mode [ 594.561359][ T1257] bond6: (slave gretap1): making interface the new active one [ 594.570576][ T1257] gretap1: entered promiscuous mode [ 594.582345][ T1257] gretap1: entered allmulticast mode [ 594.608270][ T1257] bond6: (slave gretap1): Enslaving as an active interface with an up link [ 594.739625][ T1271] tipc: Enabling of bearer rejected, already enabled [ 594.844869][ T1274] vxcan1: entered allmulticast mode [ 595.366109][ T1312] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12715'. [ 595.469177][ T1312] 8021q: adding VLAN 0 to HW filter on device bond8 [ 595.509201][ T1312] macvlan0: entered promiscuous mode [ 595.514940][ T1312] macvlan0: entered allmulticast mode [ 595.522061][ T1312] bond8: (slave macvlan0): Opening slave failed [ 595.628505][ T1320] netlink: 'syz.4.12722': attribute type 4 has an invalid length. [ 595.782540][ T1329] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12724'. [ 595.809061][ T1335] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12727'. [ 595.828858][ T1335] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12727'. [ 596.151293][ T1357] netlink: 'syz.0.12733': attribute type 13 has an invalid length. [ 596.177474][ T1357] veth0_macvtap: left promiscuous mode [ 596.227108][ T1357] macvtap0: entered allmulticast mode [ 596.237344][ T1357] macvtap0: refused to change device tx_queue_len [ 596.316614][ T1365] tipc: Enabled bearer , priority 0 [ 596.333053][ T1365] syzkaller0: entered promiscuous mode [ 596.338979][ T1365] syzkaller0: entered allmulticast mode [ 596.369655][ T1365] tipc: Resetting bearer [ 596.379669][ T1364] tipc: Resetting bearer [ 596.400562][ T1364] tipc: Disabling bearer [ 596.616907][ T1378] netlink: 'syz.1.12741': attribute type 1 has an invalid length. [ 596.624133][ T1380] netlink: 'syz.2.12742': attribute type 1 has an invalid length. [ 596.655603][ T1380] 8021q: adding VLAN 0 to HW filter on device bond7 [ 596.693137][ T1378] bond2 (unregistering): Released all slaves [ 596.733471][ T1380] bond7: (slave veth13): Enslaving as an active interface with a down link [ 596.754843][ T1383] ip6tnl1: entered promiscuous mode [ 596.760408][ T1383] ip6tnl1: entered allmulticast mode [ 596.795318][ T1384] bond7: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 596.821870][ T1380] vlan6: entered allmulticast mode [ 596.828287][ T1380] veth1: entered allmulticast mode [ 596.838294][ T1380] bond7: (slave vlan6): Opening slave failed [ 597.097803][ T1390] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 597.166267][ T1396] tipc: Enabling of bearer rejected, already enabled [ 597.292307][ T1401] tipc: Enabled bearer , priority 0 [ 597.327629][ T1401] syzkaller0: entered promiscuous mode [ 597.355186][ T1401] syzkaller0: entered allmulticast mode [ 597.432147][ T1401] tipc: Resetting bearer [ 597.487542][ T1410] tipc: Enabling of bearer rejected, already enabled [ 597.533160][ T1398] tipc: Resetting bearer [ 597.610426][ T1398] tipc: Disabling bearer [ 597.763801][ T1425] GUP no longer grows the stack in syz.4.12755 (1425): 200000003000-20000000a000 (200000001000) [ 597.820122][ T1425] CPU: 1 UID: 0 PID: 1425 Comm: syz.4.12755 Not tainted 6.16.0-syzkaller-06620-gae633388cae3 #0 PREEMPT(full) [ 597.820152][ T1425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 597.820172][ T1425] Call Trace: [ 597.820180][ T1425] [ 597.820192][ T1425] dump_stack_lvl+0x189/0x250 [ 597.820222][ T1425] ? __pfx_dump_stack_lvl+0x10/0x10 [ 597.820242][ T1425] ? __pfx__printk+0x10/0x10 [ 597.820262][ T1425] ? find_vma+0xe7/0x160 [ 597.820309][ T1425] __get_user_pages+0x2a60/0x30b0 [ 597.820374][ T1425] ? __pfx___get_user_pages+0x10/0x10 [ 597.820408][ T1425] __gup_longterm_locked+0xd66/0x15b0 [ 597.820438][ T1425] ? try_grab_folio_fast+0x35b/0x4f0 [ 597.820468][ T1425] ? sanity_check_pinned_pages+0x11c8/0x12c0 [ 597.820500][ T1425] gup_fast_fallback+0x1cd4/0x2260 [ 597.820522][ T1425] ? is_bpf_text_address+0x26/0x2b0 [ 597.820585][ T1425] ? __pfx_gup_fast_fallback+0x10/0x10 [ 597.820605][ T1425] ? stack_trace_save+0x9c/0xe0 [ 597.820629][ T1425] ? stack_depot_save_flags+0x40/0x900 [ 597.820657][ T1425] ? pin_user_pages_fast+0x4d/0xb0 [ 597.820682][ T1425] iov_iter_extract_pages+0x35a/0x5e0 [ 597.820726][ T1425] extract_iter_to_sg+0xe46/0x24e0 [ 597.820758][ T1425] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 597.820791][ T1425] ? __asan_memset+0x22/0x50 [ 597.820813][ T1425] af_alg_get_rsgl+0x436/0x810 [ 597.820851][ T1425] aead_recvmsg+0x4cc/0x13f0 [ 597.820886][ T1425] ? __pfx_aead_recvmsg+0x10/0x10 [ 597.820899][ T1425] ? __schedule+0x1755/0x4d30 [ 597.820920][ T1425] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 597.820938][ T1425] ? __pfx_aead_recvmsg+0x10/0x10 [ 597.820953][ T1425] sock_recvmsg_nosec+0x186/0x1c0 [ 597.820978][ T1425] ____sys_recvmsg+0x3aa/0x460 [ 597.821003][ T1425] ? __pfx_____sys_recvmsg+0x10/0x10 [ 597.821032][ T1425] ? import_iovec+0x74/0xa0 [ 597.821054][ T1425] ___sys_recvmsg+0x1b5/0x510 [ 597.821075][ T1425] ? __pfx____sys_recvmsg+0x10/0x10 [ 597.821119][ T1425] ? __might_fault+0xb0/0x130 [ 597.821145][ T1425] do_recvmmsg+0x307/0x770 [ 597.821169][ T1425] ? __pfx_do_recvmmsg+0x10/0x10 [ 597.821182][ T1425] ? __ia32_sys_rt_sigreturn+0x6a2/0x7b0 [ 597.821213][ T1425] ? __pfx_do_futex+0x10/0x10 [ 597.821245][ T1425] __x64_sys_recvmmsg+0x190/0x240 [ 597.821263][ T1425] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 597.821277][ T1425] ? rcu_is_watching+0x15/0xb0 [ 597.821312][ T1425] ? do_syscall_64+0xbe/0x3b0 [ 597.821336][ T1425] do_syscall_64+0xfa/0x3b0 [ 597.821355][ T1425] ? lockdep_hardirqs_on+0x9c/0x150 [ 597.821375][ T1425] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 597.821390][ T1425] ? clear_bhb_loop+0x60/0xb0 [ 597.821409][ T1425] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 597.821422][ T1425] RIP: 0033:0x7f871718ebe9 [ 597.821437][ T1425] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 597.821450][ T1425] RSP: 002b:00007f8717f54038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 597.821468][ T1425] RAX: ffffffffffffffda RBX: 00007f87173b5fa0 RCX: 00007f871718ebe9 [ 597.821480][ T1425] RDX: 0000000000000002 RSI: 0000200000000180 RDI: 0000000000000008 [ 597.821489][ T1425] RBP: 00007f8717211e19 R08: 0000000000000000 R09: 0000000000000000 [ 597.821498][ T1425] R10: 0000000000000101 R11: 0000000000000246 R12: 0000000000000000 [ 597.821507][ T1425] R13: 00007f87173b6038 R14: 00007f87173b5fa0 R15: 00007ffdd947c928 [ 597.821533][ T1425] [ 598.358943][ T1446] tipc: Enabling of bearer rejected, already enabled [ 598.446327][ T1452] tipc: Enabled bearer , priority 0 [ 598.453894][ T1452] syzkaller0: entered promiscuous mode [ 598.459663][ T1452] syzkaller0: entered allmulticast mode [ 598.492791][ T1448] tipc: Enabled bearer , priority 0 [ 598.511837][ T1448] syzkaller0: entered promiscuous mode [ 598.520898][ T1448] syzkaller0: entered allmulticast mode [ 598.540902][ T1452] tipc: Resetting bearer [ 598.558416][ T1449] tipc: Resetting bearer [ 598.593499][ T1449] tipc: Disabling bearer [ 598.649239][ T1448] tipc: Resetting bearer [ 598.666020][ T1460] tipc: Enabling of bearer rejected, already enabled [ 598.704501][ T1447] tipc: Resetting bearer [ 598.771688][ T1447] tipc: Disabling bearer [ 598.848797][ T1470] tipc: Enabled bearer , priority 0 [ 598.858121][ T1470] syzkaller0: entered promiscuous mode [ 598.865171][ T1470] syzkaller0: entered allmulticast mode [ 598.876796][ T1470] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 598.920244][ T1470] tipc: Resetting bearer [ 598.936674][ T1469] tipc: Resetting bearer [ 598.966719][ T1469] tipc: Disabling bearer [ 599.098564][ T1479] tipc: Enabled bearer , priority 0 [ 599.108632][ T1479] syzkaller0: entered promiscuous mode [ 599.116716][ T1479] syzkaller0: entered allmulticast mode [ 599.158184][ T1479] tipc: Resetting bearer [ 599.170402][ T1478] tipc: Resetting bearer [ 599.238590][ T1478] tipc: Disabling bearer [ 599.431043][ T1496] tipc: Enabled bearer , priority 0 [ 599.439716][ T1496] syzkaller0: entered promiscuous mode [ 599.445376][ T1496] syzkaller0: entered allmulticast mode [ 599.499308][ T1496] tipc: Resetting bearer [ 599.520191][ T1495] tipc: Resetting bearer [ 599.588524][ T1495] tipc: Disabling bearer [ 599.611722][ T1501] tipc: Enabling of bearer rejected, already enabled [ 599.640955][ T1506] Unknown status report in ack skb [ 599.789529][ T1509] netlink: 'syz.0.12786': attribute type 1 has an invalid length. [ 599.818941][ T1512] tipc: Enabled bearer , priority 0 [ 599.885073][ T1522] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12789'. [ 599.911205][ T1509] 8021q: adding VLAN 0 to HW filter on device bond7 [ 599.952067][ T1518] 8021q: adding VLAN 0 to HW filter on device bond7 [ 599.979765][ T1518] bond7: (slave vxcan5): The slave device specified does not support setting the MAC address [ 600.009112][ T1518] bond7: (slave vxcan5): Error -95 calling set_mac_address [ 600.079342][ T1512] syzkaller0: entered promiscuous mode [ 600.089102][ T1512] syzkaller0: entered allmulticast mode [ 600.139289][ T1538] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 600.208420][ T1525] veth13: entered promiscuous mode [ 600.220843][ T1525] bond7: (slave veth13): Enslaving as an active interface with a down link [ 600.248625][ T1532] tipc: Enabled bearer , priority 0 [ 600.257596][ T1533] tipc: Resetting bearer [ 600.281007][ T1509] vlan2: entered allmulticast mode [ 600.290267][ T1509] bond7: entered allmulticast mode [ 600.342265][ T1534] syzkaller0: entered promiscuous mode [ 600.349963][ T1534] syzkaller0: entered allmulticast mode [ 600.359282][ T1538] tipc: Resetting bearer [ 600.371831][ T1511] tipc: Resetting bearer [ 600.397898][ T1511] tipc: Disabling bearer [ 600.417504][ T1542] syzkaller0: entered promiscuous mode [ 600.423919][ T1542] syzkaller0: entered allmulticast mode [ 600.455232][ T1521] tipc: Resetting bearer [ 600.497687][ T1521] tipc: Disabling bearer [ 600.513480][ T1549] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12792'. [ 600.985839][ T1573] tipc: Enabled bearer , priority 0 [ 601.014477][ T1573] syzkaller0: entered promiscuous mode [ 601.028585][ T1573] syzkaller0: entered allmulticast mode [ 601.112469][ T1573] tipc: Resetting bearer [ 601.197071][ T1571] tipc: Resetting bearer [ 601.279413][ T1571] tipc: Disabling bearer [ 601.620703][ T1608] netlink: 'syz.3.12810': attribute type 10 has an invalid length. [ 601.638742][ T1608] 8021q: adding VLAN 0 to HW filter on device bond0 [ 601.656952][ T1608] team0: Device bond0 failed to register rx_handler [ 601.788784][ T1623] syz_tun: entered allmulticast mode [ 601.799341][ T1623] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12816'. [ 601.992374][ T1632] vlan0: entered allmulticast mode [ 601.998597][ T1632] bond0: entered allmulticast mode [ 602.003922][ T1632] bond_slave_0: entered allmulticast mode [ 602.010170][ T1632] bond_slave_1: entered allmulticast mode [ 602.016916][ T1632] mac80211_hwsim hwsim7 ÿ: entered allmulticast mode [ 602.024121][ T1632] geneve1: entered allmulticast mode [ 602.081883][ T1636] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 602.120264][ T1636] syzkaller0: entered promiscuous mode [ 602.126744][ T1636] syzkaller0: entered allmulticast mode [ 602.288909][ T1648] netlink: 'syz.0.12825': attribute type 1 has an invalid length. [ 602.450010][ T1658] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 602.453973][ T1659] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12825'. [ 602.847712][ T1673] netlink: 'syz.2.12829': attribute type 1 has an invalid length. [ 604.033708][ T1652] bond8: (slave ip6gretap3): Enslaving as a backup interface with an up link [ 604.095128][ T1656] veth15: entered promiscuous mode [ 604.116459][ T1656] bond8: (slave veth15): Enslaving as a backup interface with a down link [ 604.126384][ T1660] tipc: Enabled bearer , priority 0 [ 604.146571][ T9692] bond8: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 604.150018][ T1659] 8021q: adding VLAN 0 to HW filter on device bond8 [ 604.174360][ T1661] syzkaller0: entered promiscuous mode [ 604.179955][ T1661] syzkaller0: entered allmulticast mode [ 604.192324][ T1673] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 604.212703][ T1675] gretap2: entered promiscuous mode [ 604.240168][ T1670] tipc: Resetting bearer [ 604.254602][ T1653] tipc: Resetting bearer [ 604.286973][ T9692] bond8: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 604.301017][ T1653] tipc: Disabling bearer [ 604.629400][ T1697] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12837'. [ 604.948395][ T1724] syzkaller0: entered promiscuous mode [ 604.965089][ T1724] syzkaller0: entered allmulticast mode [ 604.976759][ T1724] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 605.689029][ T1732] openvswitch: netlink: Key type 16144 is out of range max 32 [ 605.861278][ T1738] netlink: 'syz.1.12852': attribute type 29 has an invalid length. [ 605.893251][ T1738] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12852'. [ 605.919425][ T1742] netlink: 'syz.1.12852': attribute type 29 has an invalid length. [ 605.935634][ T1742] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12852'. [ 605.961184][ T1745] netlink: 16 bytes leftover after parsing attributes in process `syz.2.12854'. [ 606.009007][ T1745] team0: Mode changed to "broadcast" [ 606.042767][ T1745] vlan0: entered promiscuous mode [ 606.074054][ T1745] team0: Port device vlan0 added [ 606.093857][ T1753] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12854'. [ 606.130359][ T1745] tipc: Enabled bearer , priority 0 [ 606.212773][ T1756] netlink: 'syz.3.12858': attribute type 10 has an invalid length. [ 606.233943][ T1756] bond0: (slave wlan1): refused to change device type [ 606.630976][ T1787] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12870'. [ 607.109888][ T1770] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 607.259416][ T1793] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 607.310789][ T1793] syzkaller0: entered promiscuous mode [ 607.317903][ T1793] syzkaller0: entered allmulticast mode [ 607.796456][ T1812] netlink: 'syz.3.12875': attribute type 10 has an invalid length. [ 608.852785][ T1840] netlink: 'syz.2.12886': attribute type 29 has an invalid length. [ 608.864558][ T1840] netlink: 'syz.2.12886': attribute type 29 has an invalid length. [ 608.879146][ T1840] netlink: 500 bytes leftover after parsing attributes in process `syz.2.12886'. [ 608.893399][ T1841] syzkaller0: entered promiscuous mode [ 608.903341][ T1841] syzkaller0: entered allmulticast mode [ 608.909698][ T1840] netlink: 'syz.2.12886': attribute type 10 has an invalid length. [ 608.921584][ T1840] netlink: 144 bytes leftover after parsing attributes in process `syz.2.12886'. [ 608.940332][ T1840] netlink: 'syz.2.12886': attribute type 13 has an invalid length. [ 609.218979][ T1840] 8021q: adding VLAN 0 to HW filter on device team0 [ 609.226917][ T1840] tipc: Resetting bearer [ 609.235950][ T1840] tipc: Resetting bearer [ 609.248093][ T1840] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 609.276837][T25729] lo speed is unknown, defaulting to 1000 [ 609.285014][T25729] syz0: Port: 1 Link ACTIVE [ 609.289631][T25729] lo speed is unknown, defaulting to 1000 [ 609.381421][ T1858] netlink: 'syz.2.12894': attribute type 1 has an invalid length. [ 609.426512][ T1858] 8021q: adding VLAN 0 to HW filter on device bond8 [ 609.478629][ T1858] 8021q: adding VLAN 0 to HW filter on device bond8 [ 609.489808][ T1858] bond8: (slave vxcan1): The slave device specified does not support setting the MAC address [ 609.502860][ T1858] bond8: (slave vxcan1): Error -95 calling set_mac_address [ 609.531529][ T1865] gretap2: entered promiscuous mode [ 609.539898][ T1865] bond8: (slave gretap2): making interface the new active one [ 609.548313][ T1865] bond8: (slave gretap2): Enslaving as an active interface with an up link [ 609.709089][ T1858] macvlan2: entered promiscuous mode [ 609.717830][ T1858] macvlan2: entered allmulticast mode [ 609.732301][ T1858] bond8: entered promiscuous mode [ 609.747978][ T1858] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 609.787391][ T1858] bond8: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap2 [ 609.814793][ T1858] bond8: left promiscuous mode [ 609.981224][ T1881] tipc: Enabling of bearer rejected, already enabled [ 610.169850][ T1898] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12905'. [ 610.250855][ T1904] netlink: 20 bytes leftover after parsing attributes in process `syz.3.12910'. [ 610.256552][ T1898] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12905'. [ 610.350796][ T1906] netlink: 'syz.1.12912': attribute type 10 has an invalid length. [ 610.459563][ T1913] 8021q: adding VLAN 0 to HW filter on device bond0 [ 610.576078][ T1919] tipc: Enabled bearer , priority 0 [ 610.592044][ T1919] syzkaller0: entered promiscuous mode [ 610.623281][ T1919] syzkaller0: entered allmulticast mode [ 610.674027][ T1919] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 610.761935][ T1932] tipc: Resetting bearer [ 610.843305][ T1918] tipc: Resetting bearer [ 610.902643][ T1918] tipc: Disabling bearer [ 610.956498][ T1942] tipc: Enabled bearer , priority 0 [ 610.974344][ T1944] tipc: Enabling of bearer rejected, already enabled [ 610.997323][ T1939] syzkaller0: entered promiscuous mode [ 611.018335][ T1939] syzkaller0: entered allmulticast mode [ 611.049057][ T1939] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 611.123549][ T1938] tipc: Resetting bearer [ 611.190507][ T1938] tipc: Disabling bearer [ 611.288663][ T1958] netlink: 'syz.3.12936': attribute type 10 has an invalid length. [ 611.300796][ T1960] tipc: Enabling of bearer rejected, already enabled [ 611.317117][ T1958] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 611.491168][ T1969] tipc: Resetting bearer [ 611.521769][ T1969] bond7: (slave veth0_to_bond): Releasing active interface [ 611.578407][ T1969] team0: Port device vlan0 removed [ 611.606129][ T1969] bond2: (slave gretap0): Releasing active interface [ 611.623607][ T6243] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 611.678817][ T1969] vlan4: left promiscuous mode [ 611.698996][ T1969] bridge0: left promiscuous mode [ 611.708723][ T1969] bridge8: port 1(vlan4) entered disabled state [ 611.726469][ T1969] bond5: (slave bridge10): Releasing backup interface [ 611.741673][ T1969] bond6: (slave gretap1): Releasing active interface [ 611.749859][ T1969] gretap1: left promiscuous mode [ 611.756812][ T1969] gretap1: left allmulticast mode [ 611.779059][ T1969] bond7: (slave veth13): Releasing active interface [ 611.796740][ T1969] bond8: (slave gretap2): Releasing active interface [ 611.817076][ T1973] syz_tun: entered allmulticast mode [ 611.843899][T17944] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 611.883680][ T1982] team0: Mode changed to "loadbalance" [ 611.950675][ T1987] team0: Port device vlan0 added [ 612.176365][ T1994] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 613.051146][ T2066] openvswitch: netlink: Key type 16144 is out of range max 32 [ 613.433661][ T2082] xt_socket: unknown flags 0xe4 [ 613.514891][ T2084] tipc: Enabled bearer , priority 0 [ 613.534205][ T2084] syzkaller0: entered promiscuous mode [ 613.539722][ T2084] syzkaller0: entered allmulticast mode [ 613.568472][ T2083] tipc: Resetting bearer [ 613.582480][ T2092] __nla_validate_parse: 1 callbacks suppressed [ 613.582499][ T2092] netlink: 244 bytes leftover after parsing attributes in process `syz.0.12990'. [ 613.609921][ T2083] tipc: Disabling bearer [ 614.028097][ T2114] team0: Port device geneve0 removed [ 614.044952][ T2114] tipc: Resetting bearer [ 614.054336][ T2114] bond5: (slave ip6gretap2): Releasing active interface [ 614.078817][ T2114] bond6: (slave gretap1): Releasing active interface [ 614.109792][ T2114] bond7: (slave veth13): Releasing active interface [ 614.137006][ T2114] bond8: (slave ip6gretap3): Removing an active aggregator [ 614.147713][ T2114] bond8: (slave ip6gretap3): Releasing backup interface [ 614.156095][ T2114] bond8: (slave ip6gretap3): the permanent HWaddr of slave - d6:12:71:ff:97:e6 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 614.175603][ T2127] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 614.207951][ T2114] bond8: (slave veth15): Releasing backup interface [ 614.219655][ T2117] netlink: 'syz.1.13002': attribute type 1 has an invalid length. [ 614.232384][ T2118] team0: Mode changed to "activebackup" [ 614.353631][ T2127] veth0_vlan: left promiscuous mode [ 614.397247][ T2127] vlan0: entered promiscuous mode [ 614.411748][ T2127] veth0_vlan: entered promiscuous mode [ 614.521824][ T2127] team0: Port device vlan0 added [ 614.547574][ T2114] tipc: Enabled bearer , priority 0 [ 615.186575][ T2185] IPVS: stopping master sync thread 2186 ... [ 615.189830][ T2186] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 615.749446][ T2228] xt_limit: Overflow, try lower: 604147548/4200216962 [ 615.969934][ T2240] openvswitch: netlink: Key type 16144 is out of range max 32 [ 616.551716][ T2275] bond0: (slave ip_vti0): Error: Device can not be enslaved while up [ 616.610262][ T2273] tipc: Enabled bearer , priority 0 [ 616.628562][ T2273] syzkaller0: entered promiscuous mode [ 616.649635][ T2273] syzkaller0: entered allmulticast mode [ 616.680092][ T2273] tipc: Resetting bearer [ 616.703789][ T2272] tipc: Resetting bearer [ 616.765168][ T2272] tipc: Disabling bearer [ 616.859380][ T2293] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 616.910208][ T2293] syzkaller0: entered promiscuous mode [ 616.941841][ T2293] syzkaller0: entered allmulticast mode [ 617.100082][ T2309] netlink: 16 bytes leftover after parsing attributes in process `syz.0.13085'. [ 617.125959][ T2309] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13085'. [ 617.135825][ T2309] netlink: 16 bytes leftover after parsing attributes in process `syz.0.13085'. [ 617.325830][ T2324] tipc: Enabling of bearer rejected, already enabled [ 617.519573][ T2336] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 617.546175][ T2336] syzkaller0: entered promiscuous mode [ 617.563811][ T2336] syzkaller0: entered allmulticast mode [ 617.832679][ T2360] tipc: Enabled bearer , priority 0 [ 617.848342][ T2360] syzkaller0: entered promiscuous mode [ 617.866633][ T2360] syzkaller0: entered allmulticast mode [ 617.895904][ T2360] tipc: Resetting bearer [ 617.936509][ T2358] tipc: Resetting bearer [ 617.974348][ T2358] tipc: Disabling bearer [ 618.306846][ T2385] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 618.338569][ T2385] syzkaller0: entered promiscuous mode [ 618.350351][ T2385] syzkaller0: entered allmulticast mode [ 618.477076][ T2402] netlink: 20 bytes leftover after parsing attributes in process `syz.1.13122'. [ 618.521478][ T2401] tipc: Enabled bearer , priority 0 [ 618.529470][ T2401] syzkaller0: entered promiscuous mode [ 618.535351][ T2401] syzkaller0: entered allmulticast mode [ 618.552528][ T2401] tipc: Resetting bearer [ 618.576871][ T2398] tipc: Resetting bearer [ 618.627825][ T2398] tipc: Disabling bearer [ 618.854639][ T2433] netlink: 24 bytes leftover after parsing attributes in process `syz.3.13133'. [ 618.870956][ T2433] netlink: 10 bytes leftover after parsing attributes in process `syz.3.13133'. [ 618.884385][ T2431] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 618.899911][ T2431] syzkaller0: entered promiscuous mode [ 618.911600][ T2431] syzkaller0: entered allmulticast mode [ 618.957344][ T2435] netem: change failed [ 619.228199][ T2461] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13141'. [ 619.287965][ T2465] tipc: Enabled bearer , priority 0 [ 619.317509][ T2465] syzkaller0: entered promiscuous mode [ 619.333988][ T2465] syzkaller0: entered allmulticast mode [ 619.398927][ T2464] tipc: Resetting bearer [ 619.446456][ T2464] tipc: Disabling bearer [ 619.459410][ T2472] bridge_slave_0: default FDB implementation only supports local addresses [ 619.470420][ T2477] netlink: 'syz.4.13146': attribute type 1 has an invalid length. [ 619.596598][ T2483] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13149'. [ 620.056190][ T2514] tipc: Enabling of bearer rejected, already enabled [ 620.207853][ T2530] netlink: 36 bytes leftover after parsing attributes in process `syz.2.13164'. [ 620.260144][ T2533] tipc: Enabling of bearer rejected, already enabled [ 620.492480][ T2559] syzkaller0: entered promiscuous mode [ 620.504989][ T2559] syzkaller0: entered allmulticast mode [ 620.752590][ T2572] netlink: 16 bytes leftover after parsing attributes in process `syz.4.13180'. [ 620.798711][ T2572] team0: No ports can be present during mode change [ 620.814299][ T2572] vlan0: entered promiscuous mode [ 620.835909][ T2572] netlink: 24 bytes leftover after parsing attributes in process `syz.4.13180'. [ 620.911836][ T2581] tipc: Enabled bearer , priority 0 [ 620.931511][ T2581] syzkaller0: entered promiscuous mode [ 620.952830][ T2581] syzkaller0: entered allmulticast mode [ 620.993971][ T2581] tipc: Resetting bearer [ 621.014942][ T2579] tipc: Resetting bearer [ 621.032136][ T2579] tipc: Disabling bearer [ 621.246625][ T2611] tipc: Enabled bearer , priority 0 [ 621.265841][ T2611] syzkaller0: entered promiscuous mode [ 621.277166][ T2611] syzkaller0: entered allmulticast mode [ 621.301155][ T2611] tipc: Resetting bearer [ 621.322776][ T2610] tipc: Resetting bearer [ 621.377643][ T2610] tipc: Disabling bearer [ 621.420038][ T2625] tun0: tun_chr_ioctl cmd 1074025675 [ 621.425509][ T2625] tun0: persist disabled [ 621.447094][ T2624] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 621.715241][ T2644] tipc: Enabled bearer , priority 0 [ 621.744523][ T2644] syzkaller0: entered promiscuous mode [ 621.750037][ T2644] syzkaller0: entered allmulticast mode [ 621.788683][ T2644] tipc: Resetting bearer [ 621.808764][ T2643] tipc: Resetting bearer [ 621.867133][ T2643] tipc: Disabling bearer [ 621.880584][ T2654] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13205'. [ 621.935691][ T2660] tipc: Enabled bearer , priority 0 [ 621.958360][ T2660] syzkaller0: entered promiscuous mode [ 621.976580][ T2660] syzkaller0: entered allmulticast mode [ 622.008484][ T2660] tipc: Resetting bearer [ 622.045230][ T2658] tipc: Resetting bearer [ 622.085026][ T2658] tipc: Disabling bearer [ 622.506530][ T2704] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 622.533875][ T2709] openvswitch: netlink: Key type 16144 is out of range max 32 [ 622.537033][ T2704] syzkaller0: entered promiscuous mode [ 622.552396][ T2704] syzkaller0: entered allmulticast mode [ 623.225170][ T2757] openvswitch: netlink: Key type 16144 is out of range max 32 [ 623.263629][ T2760] netlink: 28 bytes leftover after parsing attributes in process `syz.4.13238'. [ 623.306531][ T2765] tipc: Enabled bearer , priority 0 [ 623.331718][ T2767] netlink: 16 bytes leftover after parsing attributes in process `syz.2.13240'. [ 623.342018][ T2765] syzkaller0: entered promiscuous mode [ 623.348465][ T2765] syzkaller0: entered allmulticast mode [ 623.366910][ T2767] team0: No ports can be present during mode change [ 623.423637][ T2764] tipc: Resetting bearer [ 623.484062][ T2764] tipc: Disabling bearer [ 623.521054][ T2776] tipc: Enabled bearer , priority 0 [ 623.531646][ T2776] syzkaller0: entered promiscuous mode [ 623.556303][ T2776] syzkaller0: entered allmulticast mode [ 623.585575][ T2776] tipc: Resetting bearer [ 623.621861][ T2774] tipc: Resetting bearer [ 623.638791][ T2785] netlink: 'syz.2.13246': attribute type 11 has an invalid length. [ 623.730939][ T2774] tipc: Disabling bearer [ 623.774859][ T2797] tipc: Resetting bearer [ 623.818236][ T2800] openvswitch: netlink: Key type 16144 is out of range max 32 [ 624.028382][ T2820] tipc: Enabling of bearer rejected, already enabled [ 624.181257][ T2830] openvswitch: netlink: Key type 16144 is out of range max 32 [ 624.296637][ T2837] syzkaller0: entered promiscuous mode [ 624.302152][ T2837] syzkaller0: entered allmulticast mode [ 624.438912][ T2852] __nla_validate_parse: 1 callbacks suppressed [ 624.438928][ T2852] netlink: 20 bytes leftover after parsing attributes in process `syz.4.13267'. [ 624.628361][ T2854] openvswitch: netlink: Key type 16144 is out of range max 32 [ 625.899854][ T2846] lo speed is unknown, defaulting to 1000 [ 626.108805][ T2876] tipc: Enabled bearer , priority 0 [ 626.127320][ T2876] tipc: Resetting bearer [ 626.196696][ T2874] tipc: Disabling bearer [ 626.260320][ T2881] tipc: Enabled bearer , priority 0 [ 626.274348][ T2881] syzkaller0: entered promiscuous mode [ 626.281424][ T2881] syzkaller0: entered allmulticast mode [ 626.299198][ T2881] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 626.390043][ T2880] tipc: Resetting bearer [ 626.422349][ T2880] tipc: Disabling bearer [ 627.274244][ C1] ------------[ cut here ]------------ [ 627.279827][ C1] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0x0 with flags 0x0 [ 627.290714][ C1] WARNING: CPU: 1 PID: 23 at net/mac80211/rate.c:403 __rate_control_send_low+0x5df/0x820 [ 627.300616][ C1] Modules linked in: [ 627.304598][ C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Not tainted 6.16.0-syzkaller-06620-gae633388cae3 #0 PREEMPT(full) [ 627.316404][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 627.326607][ C1] RIP: 0010:__rate_control_send_low+0x5df/0x820 [ 627.332934][ C1] Code: 38 0f b6 04 28 84 c0 0f 85 d7 01 00 00 41 8b 0f 48 c7 c7 80 c9 ad 8c 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 e8 a2 f4 9c f6 90 <0f> 0b 90 90 e9 73 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c [ 627.352780][ C1] RSP: 0018:ffffc900001d7258 EFLAGS: 00010246 [ 627.358938][ C1] RAX: a37fe4b4b3fa7b00 RBX: 000000000000000c RCX: ffff88801d6bda00 [ 627.366972][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 627.375022][ C1] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 627.383051][ C1] R10: dffffc0000000000 R11: fffffbfff1bfa5cc R12: ffff88802ff793e8 [ 627.391053][ C1] R13: 0000000000000000 R14: ffff888031058e40 R15: ffff88803105b0d8 [ 627.399114][ C1] FS: 0000000000000000(0000) GS:ffff888125d80000(0000) knlGS:0000000000000000 [ 627.408110][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 627.414771][ C1] CR2: 00007f1fa4b46048 CR3: 0000000054130000 CR4: 00000000003526f0 [ 627.422766][ C1] Call Trace: [ 627.426309][ C1] [ 627.429294][ C1] rate_control_send_low+0x194/0x7a0 [ 627.434749][ C1] rate_control_get_rate+0x20b/0x5d0 [ 627.440076][ C1] ieee80211_beacon_get_finish+0x39a/0x6c0 [ 627.445976][ C1] ? __pfx_ieee80211_beacon_get_finish+0x10/0x10 [ 627.452347][ C1] ? __local_bh_enable_ip+0x12d/0x1c0 [ 627.457827][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 627.463624][ C1] ieee80211_beacon_get_ap+0x1868/0x1f30 [ 627.469313][ C1] ? __pfx_ieee80211_beacon_get_ap+0x10/0x10 [ 627.475415][ C1] ? __ieee80211_beacon_get+0x36/0x1880 [ 627.481259][ C1] ? __ieee80211_beacon_get+0x36/0x1880 [ 627.486917][ C1] ? ret_from_fork+0x3fc/0x770 [ 627.491856][ C1] ? __ieee80211_beacon_get+0x36/0x1880 [ 627.498059][ C1] __ieee80211_beacon_get+0x118e/0x1880 [ 627.503695][ C1] ? __ieee80211_beacon_get+0x36/0x1880 [ 627.509291][ C1] ieee80211_beacon_get_tim+0xb4/0x2b0 [ 627.514832][ C1] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 627.521043][ C1] mac80211_hwsim_beacon_tx+0x3ce/0x860 [ 627.526702][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 627.533985][ C1] __iterate_interfaces+0x2ab/0x590 [ 627.539221][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 627.545407][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 627.552640][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 627.558806][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 627.565975][ C1] mac80211_hwsim_beacon+0xbb/0x1c0 [ 627.571212][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 627.577113][ C1] __hrtimer_run_queues+0x52c/0xc60 [ 627.582368][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 627.588285][ C1] ? read_tsc+0x9/0x20 [ 627.592519][ C1] hrtimer_run_softirq+0x187/0x2b0 [ 627.597894][ C1] handle_softirqs+0x283/0x870 [ 627.602690][ C1] ? run_ksoftirqd+0x9b/0x100 [ 627.607419][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 627.615091][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 627.620162][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 627.625285][ C1] run_ksoftirqd+0x9b/0x100 [ 627.629826][ C1] ? __pfx_run_ksoftirqd+0x10/0x10 [ 627.635031][ C1] smpboot_thread_fn+0x53f/0xa60 [ 627.640002][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 627.645129][ C1] kthread+0x70e/0x8a0 [ 627.649213][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 627.654819][ C1] ? __pfx_kthread+0x10/0x10 [ 627.659514][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 627.664762][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 627.670072][ C1] ? __pfx_kthread+0x10/0x10 [ 627.674756][ C1] ret_from_fork+0x3fc/0x770 [ 627.679402][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 627.684733][ C1] ? __switch_to_asm+0x39/0x70 [ 627.689530][ C1] ? __switch_to_asm+0x33/0x70 [ 627.694456][ C1] ? __pfx_kthread+0x10/0x10 [ 627.699157][ C1] ret_from_fork_asm+0x1a/0x30 [ 627.703992][ C1] [ 627.707037][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 627.714315][ C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Not tainted 6.16.0-syzkaller-06620-gae633388cae3 #0 PREEMPT(full) [ 627.725950][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 627.736104][ C1] Call Trace: [ 627.739505][ C1] [ 627.742435][ C1] dump_stack_lvl+0x99/0x250 [ 627.747044][ C1] ? __asan_memcpy+0x40/0x70 [ 627.751645][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 627.756840][ C1] ? __pfx__printk+0x10/0x10 [ 627.761447][ C1] panic+0x2db/0x790 [ 627.765415][ C1] ? __pfx_panic+0x10/0x10 [ 627.769945][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 627.774911][ C1] __warn+0x31b/0x4b0 [ 627.778893][ C1] ? __rate_control_send_low+0x5df/0x820 [ 627.784614][ C1] ? __rate_control_send_low+0x5df/0x820 [ 627.790418][ C1] report_bug+0x2be/0x4f0 [ 627.794766][ C1] ? __rate_control_send_low+0x5df/0x820 [ 627.800399][ C1] ? __rate_control_send_low+0x5df/0x820 [ 627.806034][ C1] ? __rate_control_send_low+0x5e1/0x820 [ 627.811925][ C1] handle_bug+0x84/0x160 [ 627.816274][ C1] exc_invalid_op+0x1a/0x50 [ 627.820819][ C1] asm_exc_invalid_op+0x1a/0x20 [ 627.825706][ C1] RIP: 0010:__rate_control_send_low+0x5df/0x820 [ 627.831942][ C1] Code: 38 0f b6 04 28 84 c0 0f 85 d7 01 00 00 41 8b 0f 48 c7 c7 80 c9 ad 8c 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 e8 a2 f4 9c f6 90 <0f> 0b 90 90 e9 73 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c [ 627.851629][ C1] RSP: 0018:ffffc900001d7258 EFLAGS: 00010246 [ 627.857721][ C1] RAX: a37fe4b4b3fa7b00 RBX: 000000000000000c RCX: ffff88801d6bda00 [ 627.865778][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 627.873765][ C1] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 627.881762][ C1] R10: dffffc0000000000 R11: fffffbfff1bfa5cc R12: ffff88802ff793e8 [ 627.889729][ C1] R13: 0000000000000000 R14: ffff888031058e40 R15: ffff88803105b0d8 [ 627.897726][ C1] ? __rate_control_send_low+0x5de/0x820 [ 627.903373][ C1] rate_control_send_low+0x194/0x7a0 [ 627.908675][ C1] rate_control_get_rate+0x20b/0x5d0 [ 627.913972][ C1] ieee80211_beacon_get_finish+0x39a/0x6c0 [ 627.919804][ C1] ? __pfx_ieee80211_beacon_get_finish+0x10/0x10 [ 627.926129][ C1] ? __local_bh_enable_ip+0x12d/0x1c0 [ 627.931519][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 627.937385][ C1] ieee80211_beacon_get_ap+0x1868/0x1f30 [ 627.943205][ C1] ? __pfx_ieee80211_beacon_get_ap+0x10/0x10 [ 627.949221][ C1] ? __ieee80211_beacon_get+0x36/0x1880 [ 627.954760][ C1] ? __ieee80211_beacon_get+0x36/0x1880 [ 627.960306][ C1] ? ret_from_fork+0x3fc/0x770 [ 627.965086][ C1] ? __ieee80211_beacon_get+0x36/0x1880 [ 627.970660][ C1] __ieee80211_beacon_get+0x118e/0x1880 [ 627.976225][ C1] ? __ieee80211_beacon_get+0x36/0x1880 [ 627.981788][ C1] ieee80211_beacon_get_tim+0xb4/0x2b0 [ 627.987309][ C1] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 627.993423][ C1] mac80211_hwsim_beacon_tx+0x3ce/0x860 [ 627.998973][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 628.006258][ C1] __iterate_interfaces+0x2ab/0x590 [ 628.011467][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 628.017631][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 628.024824][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 628.030906][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 628.037926][ C1] mac80211_hwsim_beacon+0xbb/0x1c0 [ 628.043180][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 628.048991][ C1] __hrtimer_run_queues+0x52c/0xc60 [ 628.054239][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 628.059988][ C1] ? read_tsc+0x9/0x20 [ 628.064132][ C1] hrtimer_run_softirq+0x187/0x2b0 [ 628.069301][ C1] handle_softirqs+0x283/0x870 [ 628.074065][ C1] ? run_ksoftirqd+0x9b/0x100 [ 628.078820][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 628.084137][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 628.089183][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 628.094248][ C1] run_ksoftirqd+0x9b/0x100 [ 628.098759][ C1] ? __pfx_run_ksoftirqd+0x10/0x10 [ 628.103868][ C1] smpboot_thread_fn+0x53f/0xa60 [ 628.108804][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 628.113852][ C1] kthread+0x70e/0x8a0 [ 628.117939][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 628.123409][ C1] ? __pfx_kthread+0x10/0x10 [ 628.127994][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 628.133186][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 628.138381][ C1] ? __pfx_kthread+0x10/0x10 [ 628.143139][ C1] ret_from_fork+0x3fc/0x770 [ 628.147730][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 628.152935][ C1] ? __switch_to_asm+0x39/0x70 [ 628.157693][ C1] ? __switch_to_asm+0x33/0x70 [ 628.162556][ C1] ? __pfx_kthread+0x10/0x10 [ 628.167264][ C1] ret_from_fork_asm+0x1a/0x30 [ 628.172048][ C1] [ 628.175455][ C1] Kernel Offset: disabled [ 628.179768][ C1] Rebooting in 86400 seconds..