last executing test programs: 1.145911606s ago: executing program 1 (id=1533): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa0}, 0x1, 0x0, 0x0, 0x24000850}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x20, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a31000000000900010073797a31"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 1.145705082s ago: executing program 0 (id=1534): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) openat$tun(0xffffffffffffff9c, 0x0, 0x80400, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000740)=@bpf_lsm={0x6, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000400000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r2}, 0x94) 1.03395478s ago: executing program 1 (id=1539): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x97a3}, 0x18) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)="2e0000001000818807b62aa73f72cc9f0ba1f8483a0000005e120602000300000e000a0010000000028000001294", 0x2e}], 0x1}, 0x20008800) 1.015656079s ago: executing program 0 (id=1540): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x3c, 0x0, 0x1, 0x70bd2e, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5, 0x18, 0x1}, @ETHTOOL_A_COALESCE_PKT_RATE_LOW={0x8, 0xd, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x104}, 0x20000000) 961.112934ms ago: executing program 1 (id=1542): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000010025bd7000fddbdf2500000000", @ANYRES32, @ANYBLOB="ff0000000000000024001280110001006272696467655f736c617665000000000c00058008002200"], 0x44}, 0x1, 0x0, 0x0, 0x80c5}, 0x40040c4) 928.009882ms ago: executing program 0 (id=1543): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="44000000190a01"], 0x44}}, 0x0) 828.74179ms ago: executing program 0 (id=1545): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x16) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b400000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000080000003f00000000000000850000000600000095"], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 827.492002ms ago: executing program 1 (id=1547): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r1}, 0x9) r2 = socket$inet6(0xa, 0x1, 0x6) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, &(0x7f0000000340)=ANY=[], 0x18) 754.2116ms ago: executing program 1 (id=1548): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000280)=0x8, 0x1) 754.023823ms ago: executing program 0 (id=1549): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x8, 0x10}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fbdb0cf81c000000180001801400020074756e6c30"], 0x2c}}, 0x0) 702.211569ms ago: executing program 1 (id=1551): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000cc0)="91ebffffff7f7d8625547e6fdcfb96c1d9b461ad7581ce705ad7203fb9e00e70512c27e5d5980dbbdb9d8dd381060e0f5bd279f6b8d9109f8e5b1ad6402331e7e4ba5a0300ee40f4ed347c7997c0c822b355f310b659f42003566ffc26878858a5f20373da0b75bed8465da60f840979b6b18d0cbeb297ce3e1e34d46e9e28b416e60e9f9dceb059bd608a506d563315b1a9c536f6ca7ec68acd35c32cdace2471dce1452c62550a9bf975bb6adf889077c111c77030761c0f5d6baccf58dd38bdc0889b55669170d96224c8fd12762ad7f2a635040cde08fb0cdf", 0xdb}], 0x1}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000001a80)="d61f2c7a6ddbff16a09972b62284a63c170b9a6ec5cd29dfa047b76a9a0eeb4055c9dd2244e47c59e557c459c397cd02eb261fc7d521b1f2e95c3ce17726db0d3236a6d3b52d3f066554d84292329c8a6f034ff8d85d61dcf7ae508c5925903fb1feb7d07fe481313ad476131cf19514d6c77835e9cf82df2f153d9b82985da3e260fc6942d18345ac61b2958886a77e2a2726097d1888a25bee0fdec661520a057f8559f17e462bdf938f7f2303447bfaa744d3891372a825c63e83ff21650af922eaac39ab491cec071d31eebd6526d7a8ddd052d30beb962aeca814ad530c1413e502b92f3e51eaf75ec5b595b19e4945a1a821a8c47f804465f9e04d0ec9aff13036fe4f3a56b324e9ea795cc89d0f30433f3fa8aa7cc4dd93197840d644c6e48329c266316227ea917708cde40163a6b092d3c722a71e9f21255315cb87a74916d56da0479e7e8865b289fc8095a8477e7fee5eda0c55ec6d53c7aac85f6171717935832962f6db7889683497f3f5a4aa6c6af16908cc4c853536c4f624a75cae053c053f8490c028c15bf043adf4729306a4069324be546a83f71c16a15b86f1d6cb5505808acf055c982dfb14eaaa45b139ccc18952a1c1cbde3bb0d4882d72aa508b511b9a3e2b1a11b96aa29650279ca66b2ba92df4f9dcfa322ddd79d8a4da49182ac4d0c7078b2c2c2860e680276da35f952bc9627ab64d475aaeda4e896f04ffbb48983f29cee0574f219acb18778a0b17db40bca0c7102e8d6cbe0d66420a2d836efe9d4932605ad6852bd15bcfbee0fbc22bf79d08512bb8e4ef67004391f17b9723bd61bca96a861833bd415fafb468a205feb866aeaf0057b5d4c2eb5bed757aa6c8a38fd86de6e06bfce036465e63c9a9ae4512985474edbcd3c7ef50e74b4f6091a649cd04c6e14bc7238327edf829e0cca29fe837fd76e49b464933e40cf9799696fdb694a785a4aa7fc9342d32fd2fda5c5f81286dad13a17ac495bafefc5ec9b5ddbd744f879c00635c79d26b8131d7daadb26e5c4d0293ba696d29b1d80be0898263a1b157049fe222f2d2ba85b2dfa5cded7e372edf6bda18ecea8a75be58e19dba91c255561e21128277a8e00fd7c329ef4662494485775223d42803e25eed8f85765465159cdeb91515181a98eb465ddfb367ea9810d414fefc32e6b989bc539e02ca0129911022ec5670fbdc88b7420ab833350964f440aee90b1cc7eee831c3774c1087f8140193056a395839e11bd0aeb1adc4ef26a39d78c18bb33b254ee07c55d8936d659ab6728f69ee81", 0x39a}], 0x1}}], 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 701.925418ms ago: executing program 0 (id=1552): sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r1) socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x3406c012) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, 0x0) write$cgroup_type(r1, &(0x7f0000000080), 0x11ffffce1) syz_emit_ethernet(0x83, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000c80)=ANY=[], 0xe0}, 0x20004065) 701.600506ms ago: executing program 2 (id=1553): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x3c, 0x0, 0x1, 0x70bd2e, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5, 0x18, 0x1}, @ETHTOOL_A_COALESCE_PKT_RATE_LOW={0x8, 0xd, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x104}, 0x20000000) 683.609105ms ago: executing program 2 (id=1554): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='macvlan1\x00', 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x46, &(0x7f00000001c0)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x2, 0xb, 0x38, 0x6a, 0x0, 0x8, 0x1, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x39}}, @redirect={0x5, 0x2, 0x0, @remote, {0x5, 0x4, 0x3, 0x1f, 0x501, 0x67, 0x7f2, 0x48, 0x1, 0xf, @local, @multicast1}, "b2f6fc43e5721dcc"}}}}}, 0x0) 661.478078ms ago: executing program 2 (id=1555): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x3c, r1, 0x301, 0x70bd25, 0x25dfdbfc, {0x24}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x3c}}, 0x0) 594.1227ms ago: executing program 2 (id=1556): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000002600)=@newtaction={0x488, 0x30, 0x12f, 0x0, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x240000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54c]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x4, 0x4, 0x9, 0x934a, {0x10, 0x2, 0x5, 0x4, 0x3, 0x100}, {0xf9, 0x2, 0x100, 0x81, 0xa}, 0x63febb3a, 0x4, 0x85}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x488}}, 0x0) 593.883085ms ago: executing program 2 (id=1557): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000800018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x1c, r3, 0x1, 0x70bd27, 0x0, {{}, {0x0, 0x6}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 593.624813ms ago: executing program 2 (id=1558): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) recvmmsg(r0, &(0x7f0000002a40)=[{{0x0, 0x0, 0x0}, 0x10}], 0x1, 0x0, 0x0) 262.253394ms ago: executing program 4 (id=1562): socket$nl_route(0x10, 0x3, 0x0) socket(0x28, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000600)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r0}, &(0x7f0000000840), &(0x7f0000000880)=r1}, 0x20) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r1, r3, 0x25, 0x0, @val=@kprobe_multi=@syms={0x1, 0x0, 0x0, 0x0, 0x8000000000000001}}, 0x30) syz_emit_ethernet(0x4e, &(0x7f0000000800)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "ecff80", 0x18, 0x11, 0x0, @private0, @mcast2, {[], {0x0, 0x4e22, 0x18, 0x0, @wg=@data={0x3, 0x800}}}}}}}, 0x0) 150.175062ms ago: executing program 3 (id=1563): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000800000000005e002200850000006d00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) syz_emit_ethernet(0x4e, &(0x7f0000000680)={@link_local, @remote, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "2e5cea", 0x18, 0x3c, 0x1, @private1, @mcast2, {[], {0x0, 0x0, 0x18, 0x0, @wg=@data={0x4, 0x6}}}}}}}, 0x0) 149.781355ms ago: executing program 4 (id=1564): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0xb, 0x5, 0x10001, 0xa, 0x1, 0xffffffffffffffff, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000ac0)='L', 0x1}], 0x1}, 0x0) 149.451839ms ago: executing program 3 (id=1565): socket$tipc(0x1e, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r0) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r1, 0xe01, 0x70bd2d, 0x25dfdbfc}, 0x1c}}, 0x24048800) 146.061287ms ago: executing program 4 (id=1566): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000640)={0x1, &(0x7f0000000680)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) listen(r0, 0xb) 117.789439ms ago: executing program 3 (id=1567): syz_emit_ethernet(0x36, &(0x7f0000000440)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x5, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x34}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x0, 0x1}}}}}}, 0x0) 111.623604ms ago: executing program 4 (id=1568): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x140}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) recvmmsg(r1, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) 30.495836ms ago: executing program 3 (id=1569): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001fc0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="82", 0x1}, {&(0x7f0000000140)="84", 0x1}], 0x2}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="000100000000000029"], 0x3d8}}], 0x2, 0x4400c040) 30.257602ms ago: executing program 4 (id=1570): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120019007f00000001"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000240), &(0x7f0000000280)='%pS \x00'}, 0x20) 30.003031ms ago: executing program 3 (id=1571): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001340)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0x6}, 0x18) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003280)=ANY=[@ANYBLOB="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"], 0xb98}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 11.982583ms ago: executing program 4 (id=1572): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 0s ago: executing program 3 (id=1573): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xc8f}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000880}, 0x20004000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.154' (ED25519) to the list of known hosts. [ 49.915191][ T5843] cgroup: Unknown subsys name 'net' [ 50.075519][ T5843] cgroup: Unknown subsys name 'cpuset' [ 50.082662][ T5843] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 51.147739][ T5843] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 54.933301][ T5861] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 54.933594][ T5869] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 54.947717][ T5869] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 54.955055][ T5869] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 54.962255][ T5869] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 54.962574][ T5861] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 54.969936][ T5869] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 54.984168][ T5869] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 54.991705][ T5869] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 54.993114][ T5871] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 54.999581][ T5869] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 55.014413][ T5861] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 55.014609][ T5871] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 55.028954][ T5871] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 55.029559][ T5873] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 55.036680][ T5871] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 55.043479][ T5873] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 55.050610][ T5871] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 55.057174][ T5861] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 55.071223][ T5865] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 55.072470][ T5873] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 55.079708][ T5871] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 55.085914][ T5873] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 55.099777][ T5870] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 55.107471][ T5870] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 55.379018][ T5866] chnl_net:caif_netlink_parms(): no params data found [ 55.450951][ T5859] chnl_net:caif_netlink_parms(): no params data found [ 55.530613][ T5860] chnl_net:caif_netlink_parms(): no params data found [ 55.591556][ T5854] chnl_net:caif_netlink_parms(): no params data found [ 55.649986][ T5866] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.657627][ T5866] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.665038][ T5866] bridge_slave_0: entered allmulticast mode [ 55.671951][ T5866] bridge_slave_0: entered promiscuous mode [ 55.678843][ T5853] chnl_net:caif_netlink_parms(): no params data found [ 55.706166][ T5866] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.713248][ T5866] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.720473][ T5866] bridge_slave_1: entered allmulticast mode [ 55.727071][ T5866] bridge_slave_1: entered promiscuous mode [ 55.736008][ T5859] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.743077][ T5859] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.750418][ T5859] bridge_slave_0: entered allmulticast mode [ 55.757127][ T5859] bridge_slave_0: entered promiscuous mode [ 55.766592][ T5860] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.773679][ T5860] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.780843][ T5860] bridge_slave_0: entered allmulticast mode [ 55.787566][ T5860] bridge_slave_0: entered promiscuous mode [ 55.804562][ T5859] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.811638][ T5859] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.818846][ T5859] bridge_slave_1: entered allmulticast mode [ 55.825263][ T5859] bridge_slave_1: entered promiscuous mode [ 55.844390][ T5860] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.851469][ T5860] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.858721][ T5860] bridge_slave_1: entered allmulticast mode [ 55.865253][ T5860] bridge_slave_1: entered promiscuous mode [ 55.901339][ T5866] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.918187][ T5854] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.926240][ T5854] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.933298][ T5854] bridge_slave_0: entered allmulticast mode [ 55.939878][ T5854] bridge_slave_0: entered promiscuous mode [ 55.953163][ T5866] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.973194][ T5859] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.982384][ T5854] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.989563][ T5854] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.996653][ T5854] bridge_slave_1: entered allmulticast mode [ 56.003014][ T5854] bridge_slave_1: entered promiscuous mode [ 56.010787][ T5860] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.028972][ T5859] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.052009][ T5860] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.062803][ T5866] team0: Port device team_slave_0 added [ 56.101878][ T5866] team0: Port device team_slave_1 added [ 56.107796][ T5853] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.115289][ T5853] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.122390][ T5853] bridge_slave_0: entered allmulticast mode [ 56.129788][ T5853] bridge_slave_0: entered promiscuous mode [ 56.137272][ T5859] team0: Port device team_slave_0 added [ 56.145250][ T5854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.155849][ T5859] team0: Port device team_slave_1 added [ 56.172928][ T5853] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.180120][ T5853] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.187540][ T5853] bridge_slave_1: entered allmulticast mode [ 56.194209][ T5853] bridge_slave_1: entered promiscuous mode [ 56.201507][ T5854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.217196][ T5860] team0: Port device team_slave_0 added [ 56.248978][ T5860] team0: Port device team_slave_1 added [ 56.255211][ T5859] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.262135][ T5859] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.288158][ T5859] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.299570][ T5866] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.306521][ T5866] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.332702][ T5866] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.362005][ T5859] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.369193][ T5859] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.395112][ T5859] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.409199][ T5866] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.416181][ T5866] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.442313][ T5866] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.455322][ T5853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.466076][ T5854] team0: Port device team_slave_0 added [ 56.477523][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.484667][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.510580][ T5860] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.529301][ T5853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.539540][ T5854] team0: Port device team_slave_1 added [ 56.553645][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.560724][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.586871][ T5860] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.629039][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.636193][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.662130][ T5854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.677233][ T5859] hsr_slave_0: entered promiscuous mode [ 56.683175][ T5859] hsr_slave_1: entered promiscuous mode [ 56.700231][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.707199][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.733227][ T5854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.761987][ T5853] team0: Port device team_slave_0 added [ 56.777655][ T5860] hsr_slave_0: entered promiscuous mode [ 56.783584][ T5860] hsr_slave_1: entered promiscuous mode [ 56.789632][ T5860] debugfs: 'hsr0' already exists in 'hsr' [ 56.795644][ T5860] Cannot create hsr debugfs directory [ 56.810491][ T5866] hsr_slave_0: entered promiscuous mode [ 56.816476][ T5866] hsr_slave_1: entered promiscuous mode [ 56.822254][ T5866] debugfs: 'hsr0' already exists in 'hsr' [ 56.827980][ T5866] Cannot create hsr debugfs directory [ 56.834685][ T5853] team0: Port device team_slave_1 added [ 56.894782][ T5854] hsr_slave_0: entered promiscuous mode [ 56.900692][ T5854] hsr_slave_1: entered promiscuous mode [ 56.906857][ T5854] debugfs: 'hsr0' already exists in 'hsr' [ 56.912569][ T5854] Cannot create hsr debugfs directory [ 56.925516][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.932443][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.958509][ T5853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.985302][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.992231][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.018272][ T5853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.123857][ T5870] Bluetooth: hci3: command tx timeout [ 57.124172][ T5858] Bluetooth: hci0: command tx timeout [ 57.129253][ T5870] Bluetooth: hci4: command tx timeout [ 57.134722][ T50] Bluetooth: hci1: command tx timeout [ 57.154715][ T5853] hsr_slave_0: entered promiscuous mode [ 57.160686][ T5853] hsr_slave_1: entered promiscuous mode [ 57.166598][ T5853] debugfs: 'hsr0' already exists in 'hsr' [ 57.172307][ T5853] Cannot create hsr debugfs directory [ 57.203852][ T50] Bluetooth: hci2: command tx timeout [ 57.287336][ T5860] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 57.300222][ T5860] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 57.320770][ T5860] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 57.329135][ T5860] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 57.367805][ T5859] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 57.376754][ T5859] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 57.386933][ T5859] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 57.395964][ T5859] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 57.432506][ T5866] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 57.452840][ T5866] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 57.470471][ T5866] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 57.479117][ T5866] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 57.531899][ T5854] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 57.540333][ T5854] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 57.557209][ T5854] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 57.572612][ T5854] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 57.621025][ T5853] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 57.632284][ T5860] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.643484][ T5853] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 57.653630][ T5853] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 57.662787][ T5853] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 57.695933][ T5859] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.717348][ T5860] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.738395][ T1096] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.745542][ T1096] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.768526][ T1096] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.775657][ T1096] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.792725][ T5859] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.821127][ T1096] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.828237][ T1096] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.847257][ T5866] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.864597][ T1096] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.871742][ T1096] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.905543][ T5854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.924363][ T5866] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.948606][ T5853] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.980974][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.988076][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.008809][ T5854] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.021074][ T5853] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.038334][ T1096] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.045450][ T1096] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.069012][ T1096] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.076100][ T1096] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.085919][ T1096] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.092969][ T1096] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.116973][ T1096] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.124064][ T1096] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.161362][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.168607][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.221332][ T5860] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.296844][ T5860] veth0_vlan: entered promiscuous mode [ 58.309569][ T5853] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 58.333102][ T5860] veth1_vlan: entered promiscuous mode [ 58.367508][ T5859] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.410314][ T5860] veth0_macvtap: entered promiscuous mode [ 58.428093][ T5860] veth1_macvtap: entered promiscuous mode [ 58.472398][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.495565][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.517683][ T5854] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.533123][ T5859] veth0_vlan: entered promiscuous mode [ 58.543488][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.557215][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.571654][ T5859] veth1_vlan: entered promiscuous mode [ 58.590173][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.599645][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.616521][ T5866] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.697951][ T5853] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.706091][ T5854] veth0_vlan: entered promiscuous mode [ 58.712097][ T5859] veth0_macvtap: entered promiscuous mode [ 58.720896][ T5859] veth1_macvtap: entered promiscuous mode [ 58.742582][ T4531] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.757125][ T4531] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.781449][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.791186][ T5854] veth1_vlan: entered promiscuous mode [ 58.805313][ T5954] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.813128][ T5954] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.815244][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.845498][ T4531] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.866302][ T1096] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.878613][ T5860] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 58.885465][ T1096] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.918891][ T1096] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.963600][ T5853] veth0_vlan: entered promiscuous mode [ 58.984780][ T5854] veth0_macvtap: entered promiscuous mode [ 59.012755][ T5853] veth1_vlan: entered promiscuous mode [ 59.023226][ T5854] veth1_macvtap: entered promiscuous mode [ 59.051630][ T5954] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.060779][ T5866] veth0_vlan: entered promiscuous mode [ 59.070611][ T5954] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.076886][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.088360][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.105778][ T5853] veth0_macvtap: entered promiscuous mode [ 59.118118][ T5866] veth1_vlan: entered promiscuous mode [ 59.131485][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.145379][ T5853] veth1_macvtap: entered promiscuous mode [ 59.161741][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.171704][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.192738][ T5866] veth0_macvtap: entered promiscuous mode [ 59.200286][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.205871][ T50] Bluetooth: hci0: command tx timeout [ 59.211725][ T5873] Bluetooth: hci4: command tx timeout [ 59.214508][ T5870] Bluetooth: hci1: command tx timeout [ 59.220132][ T5858] Bluetooth: hci3: command tx timeout [ 59.233591][ T5980] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.257123][ T5866] veth1_macvtap: entered promiscuous mode [ 59.264503][ T4531] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.272521][ T4531] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.274004][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.287183][ T5870] Bluetooth: hci2: command tx timeout [ 59.295907][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.310389][ T5980] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.337187][ T60] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.347024][ T60] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.361210][ T60] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.371206][ T60] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.435570][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.446804][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.465529][ T1096] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.475496][ T1096] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.497274][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.505708][ T1096] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.514050][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.521804][ T1096] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.577415][ T4531] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.587568][ T1096] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.594045][ T4531] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.599387][ T1096] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.622689][ T5980] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.677916][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.698856][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.741312][ T5980] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.781025][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.792082][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.810644][ T1096] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.829325][ T1096] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.007556][ T1096] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.034905][ T5994] Zero length message leads to an empty skb [ 60.086781][ T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.120093][ T36] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.128597][ T5999] netlink: 104 bytes leftover after parsing attributes in process `syz.4.5'. [ 60.152790][ T36] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.563554][ T6008] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8'. [ 60.996508][ T6019] tipc: Started in network mode [ 61.012998][ T6019] tipc: Node identity 3a95a26ba91d, cluster identity 4711 [ 61.034020][ T6019] tipc: Enabled bearer , priority 0 [ 61.044445][ T6026] netlink: 96 bytes leftover after parsing attributes in process `syz.4.9'. [ 61.061675][ T6029] syzkaller0: entered promiscuous mode [ 61.080949][ T6029] syzkaller0: entered allmulticast mode [ 61.176602][ T6019] tipc: Resetting bearer [ 61.190692][ T6018] tipc: Resetting bearer [ 61.226818][ T6018] tipc: Disabling bearer [ 61.251373][ T6044] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12'. [ 61.279332][ T6038] syzkaller1: entered promiscuous mode [ 61.285348][ T5870] Bluetooth: hci1: command tx timeout [ 61.285966][ T5858] Bluetooth: hci3: command tx timeout [ 61.290921][ T5870] Bluetooth: hci0: command tx timeout [ 61.296212][ T50] Bluetooth: hci4: command tx timeout [ 61.300141][ T6038] syzkaller1: entered allmulticast mode [ 61.372828][ T5870] Bluetooth: hci2: command tx timeout [ 61.486254][ T6056] netlink: 'syz.0.14': attribute type 3 has an invalid length. [ 61.522897][ T6056] netlink: 'syz.0.14': attribute type 3 has an invalid length. [ 61.572416][ T6062] netlink: 'syz.1.16': attribute type 1 has an invalid length. [ 61.605166][ T6062] netlink: 172 bytes leftover after parsing attributes in process `syz.1.16'. [ 61.797461][ T6070] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18'. [ 61.813985][ T6073] syz.0.19 uses obsolete (PF_INET,SOCK_PACKET) [ 62.048491][ T6092] netlink: 8 bytes leftover after parsing attributes in process `syz.4.24'. [ 62.064656][ T54] IPVS: starting estimator thread 0... [ 62.139396][ T6101] wg1: entered promiscuous mode [ 62.157200][ T6101] wg1: entered allmulticast mode [ 62.174637][ T6098] IPVS: using max 42 ests per chain, 100800 per kthread [ 62.296937][ T6107] tipc: Enabled bearer , priority 0 [ 62.381419][ T6107] tipc: Resetting bearer [ 62.387745][ T6115] !: renamed from dummy0 (while UP) [ 62.457430][ T6107] tipc: Resetting bearer [ 62.669692][ T6107] tipc: Disabling bearer [ 62.835363][ T6140] netlink: 68 bytes leftover after parsing attributes in process `syz.3.30'. [ 63.364821][ T5870] Bluetooth: hci0: command tx timeout [ 63.366103][ T5873] Bluetooth: hci3: command tx timeout [ 63.373110][ T5870] Bluetooth: hci4: command tx timeout [ 63.375679][ T5858] Bluetooth: hci1: command tx timeout [ 63.444448][ T50] Bluetooth: hci2: command tx timeout [ 63.620079][ T6216] netlink: 8 bytes leftover after parsing attributes in process `syz.2.39'. [ 63.948531][ T6245] syz_tun: entered allmulticast mode [ 63.973813][ T6244] syz_tun: left allmulticast mode [ 64.006850][ T6249] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 64.033601][ T6249] netlink: 28 bytes leftover after parsing attributes in process `syz.1.45'. [ 64.209417][ T6262] ip6gretap0: entered promiscuous mode [ 64.219124][ T6262] macvtap1: entered promiscuous mode [ 64.236350][ T6264] netlink: 'syz.3.49': attribute type 5 has an invalid length. [ 64.396161][ T6281] warning: `syz.3.52' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 64.595512][ T6299] IPVS: length: 146 != 8 [ 64.720825][ T6299] can: request_module (can-proto-3) failed. [ 65.275273][ T6347] __nla_validate_parse: 3 callbacks suppressed [ 65.275290][ T6347] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.68'. [ 66.687894][ T6414] netlink: 'syz.3.85': attribute type 4 has an invalid length. [ 66.729022][ T6414] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 66.783436][ T6423] netlink: 'syz.4.87': attribute type 1 has an invalid length. [ 66.899671][ T6432] netlink: 24 bytes leftover after parsing attributes in process `syz.2.90'. [ 67.080169][ T6452] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 67.152314][ T1210] IPVS: starting estimator thread 0... [ 67.179004][ T6460] Bluetooth: MGMT ver 1.23 [ 67.197999][ T6452] netlink: 4 bytes leftover after parsing attributes in process `syz.4.95'. [ 67.253863][ T6461] IPVS: using max 42 ests per chain, 100800 per kthread [ 67.635181][ T6491] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 67.669943][ T6490] netlink: 4 bytes leftover after parsing attributes in process `syz.4.105'. [ 67.671085][ T6489] vlan0: entered promiscuous mode [ 67.720860][ T6502] netlink: 24 bytes leftover after parsing attributes in process `syz.0.108'. [ 67.773953][ T6489] vlan0: entered allmulticast mode [ 67.779343][ T6489] veth0_vlan: entered allmulticast mode [ 67.829603][ T6507] netlink: 4 bytes leftover after parsing attributes in process `syz.1.109'. [ 67.831310][ T6502] netlink: 'syz.0.108': attribute type 10 has an invalid length. [ 67.838555][ T6507] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 67.881449][ T6507] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 68.348007][ T6543] netlink: 36 bytes leftover after parsing attributes in process `syz.4.117'. [ 68.365839][ T6543] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.373251][ T6543] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.452806][ T6543] tc_dump_action: action bad kind [ 68.489445][ T6543] netlink: 156 bytes leftover after parsing attributes in process `syz.4.117'. [ 68.731261][ T6551] netlink: 20 bytes leftover after parsing attributes in process `syz.0.120'. [ 68.887869][ T6561] netlink: 'syz.1.121': attribute type 16 has an invalid length. [ 68.930023][ T6561] netlink: 'syz.1.121': attribute type 17 has an invalid length. [ 68.952647][ T6557] team0 (unregistering): Port device team_slave_0 removed [ 68.985564][ T6557] team0 (unregistering): Port device team_slave_1 removed [ 69.011280][ T6561] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 69.040476][ T6568] netlink: 8 bytes leftover after parsing attributes in process `syz.0.124'. [ 69.107848][ T6576] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 69.156968][ T6576] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 69.190077][ T6576] bond0 (unregistering): Released all slaves [ 69.576450][ T6583] Bluetooth: MGMT ver 1.23 [ 70.011434][ T24] cfg80211: failed to load regulatory.db [ 70.126443][ T6650] veth0: entered promiscuous mode [ 70.388057][ T6666] syz_tun: entered allmulticast mode [ 70.403008][ T6657] dvmrp1: entered allmulticast mode [ 70.503694][ T6646] syz_tun: left allmulticast mode [ 70.573151][ T6673] wireguard0: entered promiscuous mode [ 70.586380][ T6673] wireguard0: entered allmulticast mode [ 70.611455][ T6644] veth0: left promiscuous mode [ 70.637915][ T6673] netlink: 'syz.0.144': attribute type 4 has an invalid length. [ 70.742601][ T6689] __nla_validate_parse: 6 callbacks suppressed [ 70.742617][ T6689] netlink: 20 bytes leftover after parsing attributes in process `syz.4.147'. [ 70.778503][ T6665] netlink: 'syz.0.144': attribute type 4 has an invalid length. [ 70.830095][ T6692] netlink: 8 bytes leftover after parsing attributes in process `syz.1.148'. [ 70.866636][ T6669] netlink: 'syz.0.144': attribute type 10 has an invalid length. [ 70.866893][ T6692] netlink: 'syz.1.148': attribute type 1 has an invalid length. [ 70.903839][ T6692] netlink: 'syz.1.148': attribute type 2 has an invalid length. [ 70.929727][ T6699] netlink: 248 bytes leftover after parsing attributes in process `syz.4.149'. [ 70.975057][ T6669] veth0_vlan: left promiscuous mode [ 71.052590][ T6669] veth0_vlan: entered promiscuous mode [ 71.112201][ T6669] team0: Device veth0_vlan failed to register rx_handler [ 71.222021][ T6719] netlink: 120 bytes leftover after parsing attributes in process `syz.3.152'. [ 71.294370][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.300792][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.440491][ T6721] syzkaller1: entered promiscuous mode [ 71.474348][ T6721] syzkaller1: entered allmulticast mode [ 71.500311][ T6731] tipc: Enabled bearer , priority 0 [ 71.557422][ T6730] tipc: Disabling bearer [ 71.606037][ T6739] tipc: Enabling of bearer rejected, failed to enable media [ 71.735841][ T6754] netlink: 32 bytes leftover after parsing attributes in process `syz.3.158'. [ 71.795444][ T6762] netlink: 12 bytes leftover after parsing attributes in process `syz.3.158'. [ 71.807004][ T6760] validate_nla: 1 callbacks suppressed [ 71.807019][ T6760] netlink: 'syz.0.160': attribute type 1 has an invalid length. [ 71.869841][ T6760] 8021q: adding VLAN 0 to HW filter on device bond1 [ 72.008706][ T6766] 8021q: adding VLAN 0 to HW filter on device bond1 [ 72.026616][ T6766] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 72.051483][ T6766] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 72.126409][ T6760] veth3: entered promiscuous mode [ 72.207447][ T6780] ip6tnl1: entered promiscuous mode [ 72.214030][ T6780] ip6tnl1: entered allmulticast mode [ 72.372276][ T6776] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.379724][ T6776] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.667512][ T6776] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 72.679525][ T6812] netlink: 80 bytes leftover after parsing attributes in process `syz.0.165'. [ 72.729503][ T6776] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 73.013884][ T6782] tipc: Enabling of bearer rejected, failed to enable media [ 73.096797][ T6189] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.101584][ T6819] netlink: 8 bytes leftover after parsing attributes in process `syz.2.168'. [ 73.149815][ T12] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.183884][ T12] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.226742][ T12] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.270833][ T6828] netlink: 28 bytes leftover after parsing attributes in process `syz.1.170'. [ 73.275787][ T6822] netlink: 'syz.2.172': attribute type 1 has an invalid length. [ 73.289742][ T6828] netlink: 24 bytes leftover after parsing attributes in process `syz.1.170'. [ 73.320574][ T6828] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma? [ 73.397155][ T6844] netlink: 'syz.0.175': attribute type 30 has an invalid length. [ 74.523180][ T6890] erspan0: entered promiscuous mode [ 74.575771][ T6898] hsr_slave_1 (unregistering): left promiscuous mode [ 74.585406][ T6894] sch_tbf: burst 0 is lower than device tunl0 mtu (1480) ! [ 74.741917][ T6909] syzkaller1: entered promiscuous mode [ 74.814155][ T6909] syzkaller1: entered allmulticast mode [ 74.832190][ T10] IPVS: starting estimator thread 0... [ 74.933892][ T6917] IPVS: using max 41 ests per chain, 98400 per kthread [ 75.270163][ T6931] sctp: [Deprecated]: syz.0.197 (pid 6931) Use of struct sctp_assoc_value in delayed_ack socket option. [ 75.270163][ T6931] Use struct sctp_sack_info instead [ 75.325929][ T6931] netlink: 'syz.0.197': attribute type 1 has an invalid length. [ 75.449549][ T6934] bond2: (slave vti0): The slave device specified does not support setting the MAC address [ 75.485587][ T6934] bond2: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 75.520213][ T6934] bond2: (slave vti0): making interface the new active one [ 75.538372][ T6934] bond2: (slave vti0): Enslaving as an active interface with an up link [ 75.731875][ T6956] syz_tun: entered allmulticast mode [ 75.761857][ T6959] Illegal XDP return value 4294967274 on prog (id 96) dev N/A, expect packet loss! [ 75.882403][ T6963] tipc: Started in network mode [ 75.893967][ T6963] tipc: Node identity 080211, cluster identity 4711 [ 75.906622][ T6963] tipc: Enabled bearer , priority 0 [ 75.946261][ T6963] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode [ 75.953654][ T6963] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode [ 75.962089][ T6966] netlink: 'syz.0.204': attribute type 12 has an invalid length. [ 75.975969][ T6966] __nla_validate_parse: 7 callbacks suppressed [ 75.975981][ T6966] netlink: 190972 bytes leftover after parsing attributes in process `syz.0.204'. [ 76.067460][ T6972] netlink: 4 bytes leftover after parsing attributes in process `syz.1.207'. [ 76.069410][ T6973] syzkaller0: entered promiscuous mode [ 76.095382][ T6973] syzkaller0: entered allmulticast mode [ 77.024024][ T56] tipc: Node number set to 134353152 [ 77.141424][ T7028] netlink: 12 bytes leftover after parsing attributes in process `syz.2.222'. [ 77.390553][ T7044] netlink: 'syz.1.228': attribute type 1 has an invalid length. [ 77.416117][ T7049] netlink: 52 bytes leftover after parsing attributes in process `syz.0.231'. [ 77.425474][ T7045] netlink: 12 bytes leftover after parsing attributes in process `syz.4.230'. [ 77.517193][ T7044] 8021q: adding VLAN 0 to HW filter on device bond3 [ 77.537310][ T7044] bond2: (slave bond3): making interface the new active one [ 77.545528][ T7044] bond2: (slave bond3): Enslaving as an active interface with an up link [ 77.556756][ T7046] tun0: tun_chr_ioctl cmd 1074025672 [ 77.562079][ T7046] tun0: ignored: set checksum disabled [ 77.652688][ T7067] syzkaller1: entered promiscuous mode [ 77.684324][ T7067] syzkaller1: entered allmulticast mode [ 77.884233][ T7094] vcan0: Master is either lo or non-ether device [ 77.981103][ T7092] tipc: Can't bind to reserved service type 2 [ 78.138174][ T7104] netlink: 'syz.4.245': attribute type 1 has an invalid length. [ 78.171322][ T7104] netlink: 228 bytes leftover after parsing attributes in process `syz.4.245'. [ 78.205529][ T7104] netlink: 'syz.4.245': attribute type 29 has an invalid length. [ 78.213338][ T7104] netlink: 8 bytes leftover after parsing attributes in process `syz.4.245'. [ 78.525866][ T7120] netlink: 20 bytes leftover after parsing attributes in process `syz.3.248'. [ 78.696147][ T7135] tipc: Enabling of bearer rejected, failed to enable media [ 78.822154][ T7144] tipc: Started in network mode [ 78.843973][ T7144] tipc: Node identity e28e92e6313d, cluster identity 4711 [ 78.861378][ T7144] tipc: Enabled bearer , priority 0 [ 78.879679][ T7146] syzkaller0: entered promiscuous mode [ 78.897765][ T7146] syzkaller0: entered allmulticast mode [ 78.979886][ T7144] tipc: Resetting bearer [ 79.064032][ T7143] tipc: Resetting bearer [ 79.112218][ T7143] tipc: Disabling bearer [ 79.130311][ T7149] netlink: 48 bytes leftover after parsing attributes in process `syz.3.258'. [ 79.220523][ T7150] netlink: 4 bytes leftover after parsing attributes in process `syz.3.258'. [ 79.536543][ T7164] tipc: Enabling of bearer rejected, failed to enable media [ 80.200822][ T7211] netlink: 'syz.1.278': attribute type 10 has an invalid length. [ 80.208894][ T7211] veth0_vlan: entered allmulticast mode [ 80.215428][ T7211] bridge0: port 3(veth0_vlan) entered blocking state [ 80.222330][ T7211] bridge0: port 3(veth0_vlan) entered disabled state [ 80.234071][ T7211] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 80.414056][ T7226] block nbd0: server does not support multiple connections per device. [ 80.424006][ T7226] block nbd0: shutting down sockets [ 80.606413][ T7237] netlink: 'syz.2.286': attribute type 1 has an invalid length. [ 80.701268][ T7242] bond1: entered promiscuous mode [ 80.709341][ T7241] netlink: 'syz.4.287': attribute type 1 has an invalid length. [ 80.711543][ T7242] bond1: entered allmulticast mode [ 80.725202][ T7242] 8021q: adding VLAN 0 to HW filter on device bond1 [ 80.771765][ T7255] bond0: entered promiscuous mode [ 80.786215][ T7255] bond0: entered allmulticast mode [ 80.792378][ T7255] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.826618][ T7237] bridge1: entered promiscuous mode [ 80.831923][ T7237] bridge1: entered allmulticast mode [ 80.872950][ T7237] bond1: (slave bridge1): Enslaving as a backup interface with an up link [ 80.891396][ T7241] bridge2: entered promiscuous mode [ 80.896972][ T7241] bridge2: entered allmulticast mode [ 80.908012][ T7241] bond0: (slave bridge2): Enslaving as a backup interface with an up link [ 80.917432][ T12] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 80.930269][ T7264] netlink: 'syz.1.291': attribute type 10 has an invalid length. [ 80.986487][ T13] bond0: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 81.044357][ T6190] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 81.113902][ T13] bond0: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 81.286124][ T7242] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.293540][ T7242] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.341397][ T7285] __nla_validate_parse: 9 callbacks suppressed [ 81.341414][ T7285] netlink: 176 bytes leftover after parsing attributes in process `syz.0.293'. [ 81.597576][ T7242] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 81.619383][ T7242] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 81.952595][ T7281] tipc: Enabling of bearer rejected, failed to enable media [ 82.027687][ T6190] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.077421][ T6190] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.090688][ T7309] netlink: 8 bytes leftover after parsing attributes in process `syz.2.299'. [ 82.116977][ T7309] netlink: 4 bytes leftover after parsing attributes in process `syz.2.299'. [ 82.129272][ T1096] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.157731][ T7309] netlink: 'syz.2.299': attribute type 1 has an invalid length. [ 82.170308][ T1096] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.188864][ T7309] netlink: 10 bytes leftover after parsing attributes in process `syz.2.299'. [ 82.243854][ T7309] block nbd0: Unsupported socket: shutdown callout must be supported. [ 82.427202][ T50] block nbd0: Receive control failed (result -32) [ 82.550492][ T7342] ieee802154 phy1 wpan1: encryption failed: -22 [ 82.561435][ T7330] netlink: 40 bytes leftover after parsing attributes in process `syz.0.303'. [ 82.757061][ T7354] netlink: 16 bytes leftover after parsing attributes in process `syz.3.314'. [ 82.768026][ T7352] netlink: 4 bytes leftover after parsing attributes in process `syz.4.315'. [ 82.777098][ T7354] netlink: 44 bytes leftover after parsing attributes in process `syz.3.314'. [ 82.807866][ T7354] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 82.978499][ T7367] vlan2: entered promiscuous mode [ 82.984249][ T7367] vlan2: entered allmulticast mode [ 83.051181][ T7369] tipc: Enabled bearer , priority 0 [ 83.062574][ T7369] syzkaller0: entered promiscuous mode [ 83.070328][ T7369] syzkaller0: entered allmulticast mode [ 83.089264][ T7369] tipc: Resetting bearer [ 83.099123][ T7368] tipc: Resetting bearer [ 83.112583][ T7368] tipc: Disabling bearer [ 83.306795][ T7374] tipc: Started in network mode [ 83.318499][ T7374] tipc: Node identity , cluster identity 4711 [ 83.338941][ T7374] tipc: Failed to obtain node identity [ 83.370685][ T7374] tipc: Enabling of bearer rejected, failed to enable media [ 83.412656][ T7375] tipc: Invalid UDP bearer configuration [ 83.412689][ T7375] tipc: Enabling of bearer rejected, failed to enable media [ 83.525963][ T7383] tun0: tun_chr_ioctl cmd 1074025673 [ 83.546252][ T7384] tun0: tun_chr_ioctl cmd 2148553947 [ 83.569224][ T7383] tun0: tun_chr_ioctl cmd 1074025673 [ 83.589909][ T7386] netlink: 8 bytes leftover after parsing attributes in process `syz.2.327'. [ 83.856981][ T7380] netlink: 8 bytes leftover after parsing attributes in process `syz.4.325'. [ 83.985107][ T7407] tipc: Enabling of bearer rejected, already enabled [ 84.025046][ T7410] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 84.032280][ T7410] IPv6: NLM_F_CREATE should be set when creating new route [ 84.171389][ T7412] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.182810][ T7412] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 84.209279][ T7415] geneve2: entered promiscuous mode [ 84.225410][ T6183] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 84.245816][ T6183] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 84.269863][ T6183] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 84.280320][ T6183] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 84.515580][ T7442] netlink: 'syz.0.339': attribute type 3 has an invalid length. [ 84.635894][ T7453] ieee802154 phy1 wpan1: encryption failed: -22 [ 84.769169][ T7463] netlink: 'syz.0.348': attribute type 1 has an invalid length. [ 85.060374][ T7477] netlink: 'syz.4.352': attribute type 1 has an invalid length. [ 85.068002][ T7486] bridge0: port 3(erspan0) entered blocking state [ 85.077585][ T7486] bridge0: port 3(erspan0) entered disabled state [ 85.086747][ T7486] erspan0: entered allmulticast mode [ 85.097851][ T7486] erspan0: entered promiscuous mode [ 85.107120][ T7486] bridge0: port 3(erspan0) entered blocking state [ 85.113609][ T7486] bridge0: port 3(erspan0) entered forwarding state [ 85.125471][ T7488] ip6tnl1: entered promiscuous mode [ 85.130687][ T7488] ip6tnl1: entered allmulticast mode [ 85.223571][ T7489] erspan0: left allmulticast mode [ 85.231629][ T7489] erspan0: left promiscuous mode [ 85.239425][ T7489] bridge0: port 3(erspan0) entered disabled state [ 85.698275][ T7542] netlink: 'syz.2.372': attribute type 3 has an invalid length. [ 85.790238][ T7542] syz_tun: entered allmulticast mode [ 85.808160][ T7550] netlink: 'syz.3.374': attribute type 10 has an invalid length. [ 85.818807][ T12] bond0: (slave bond_slave_0): interface is now down [ 85.828874][ T12] bond0: (slave bond_slave_1): interface is now down [ 85.837381][ T7545] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.854177][ T6183] bond0: (slave bond_slave_0): interface is now down [ 85.862724][ T6183] bond0: (slave bond_slave_1): interface is now down [ 85.870261][ T7550] syz_tun: entered promiscuous mode [ 85.879410][ T7550] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 85.888510][ T6183] bond0: (slave bond_slave_0): interface is now down [ 85.895826][ T6183] bond0: (slave bond_slave_1): interface is now down [ 85.902610][ T6183] bond0: (slave syz_tun): interface is now down [ 85.911196][ T7542] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.920221][ T7542] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.928494][ T6189] bond0: (slave bond_slave_0): interface is now down [ 85.939656][ T6189] bond0: (slave bond_slave_1): interface is now down [ 85.946439][ T6189] bond0: (slave syz_tun): interface is now down [ 85.952810][ T7542] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 85.973244][ T7545] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.984347][ T6190] bond0: (slave bond_slave_0): interface is now down [ 85.991027][ T6190] bond0: (slave bond_slave_1): interface is now down [ 85.998150][ T6190] bond0: (slave syz_tun): interface is now down [ 86.022678][ T7541] syz_tun: left allmulticast mode [ 86.034772][ T1096] bond0: (slave bond_slave_0): interface is now down [ 86.041457][ T1096] bond0: (slave bond_slave_1): interface is now down [ 86.050108][ T1096] bond0: (slave syz_tun): interface is now down [ 86.063038][ T7545] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.094681][ T12] bond0: (slave bond_slave_0): interface is now down [ 86.101788][ T12] bond0: (slave bond_slave_1): interface is now down [ 86.115620][ T12] bond0: (slave syz_tun): interface is now down [ 86.125706][ T12] bond0: now running without any active interface! [ 86.170623][ T7545] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.276989][ T6185] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.285626][ T6185] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.323076][ T6185] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.334110][ T6185] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.549045][ T7593] __nla_validate_parse: 21 callbacks suppressed [ 86.549064][ T7593] netlink: 12 bytes leftover after parsing attributes in process `syz.3.384'. [ 86.695677][ T7604] block nbd1: Unsupported socket: shutdown callout must be supported. [ 86.743974][ T7615] netlink: 'syz.4.391': attribute type 9 has an invalid length. [ 86.770615][ T7615] netlink: 8 bytes leftover after parsing attributes in process `syz.4.391'. [ 86.836305][ T7298] IPVS: starting estimator thread 0... [ 86.837289][ T7615] hsr0: entered promiscuous mode [ 86.855675][ T7615] macvlan2: entered promiscuous mode [ 86.861807][ T7615] macvlan2: entered allmulticast mode [ 86.868156][ T7615] hsr0: entered allmulticast mode [ 86.873415][ T7615] hsr_slave_0: entered allmulticast mode [ 86.880588][ T7615] hsr_slave_1: entered allmulticast mode [ 86.919774][ T7619] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.931945][ T7620] IPVS: using max 40 ests per chain, 96000 per kthread [ 86.966650][ T7623] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 87.025786][ T7619] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.089207][ T7637] syzkaller1: entered promiscuous mode [ 87.099307][ T7637] syzkaller1: entered allmulticast mode [ 87.137769][ T7619] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.216273][ T7619] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.293973][ T7658] netlink: 8 bytes leftover after parsing attributes in process `syz.3.401'. [ 87.319645][ T6185] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.340054][ T6185] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.363120][ T6185] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.390777][ T6185] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.483031][ T7667] netlink: 48 bytes leftover after parsing attributes in process `syz.1.403'. [ 87.500857][ T7669] netlink: 16 bytes leftover after parsing attributes in process `syz.4.405'. [ 87.510079][ T7669] netlink: 12 bytes leftover after parsing attributes in process `syz.4.405'. [ 87.514533][ T7667] netlink: 'syz.1.403': attribute type 1 has an invalid length. [ 87.595698][ T7673] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 87.871471][ T7704] netlink: 20 bytes leftover after parsing attributes in process `syz.1.413'. [ 87.888940][ T7704] netlink: 12 bytes leftover after parsing attributes in process `syz.1.413'. [ 87.898018][ T7704] netlink: 'syz.1.413': attribute type 1 has an invalid length. [ 87.906630][ T7704] netlink: 'syz.1.413': attribute type 2 has an invalid length. [ 87.914351][ T7704] netlink: 80 bytes leftover after parsing attributes in process `syz.1.413'. [ 88.254332][ T7718] netlink: 20 bytes leftover after parsing attributes in process `syz.2.419'. [ 88.672097][ T7734] trusted_key: syz.4.424 sent an empty control message without MSG_MORE. [ 88.918135][ T7740] (unnamed net_device) (uninitialized): option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0) [ 89.497192][ T7786] veth3: entered allmulticast mode [ 89.526124][ T7793] netlink: 'syz.0.439': attribute type 1 has an invalid length. [ 89.542576][ T7793] netlink: 'syz.0.439': attribute type 3 has an invalid length. [ 89.555195][ T7793] rdma_op ffff888021fcc1f0 conn xmit_rdma 0000000000000000 [ 89.704072][ T7795] netlink: 'syz.4.441': attribute type 10 has an invalid length. [ 89.769971][ T7815] netlink: 'syz.1.446': attribute type 1 has an invalid length. [ 89.818891][ T7815] 8021q: adding VLAN 0 to HW filter on device bond4 [ 89.847413][ T7822] 8021q: adding VLAN 0 to HW filter on device bond4 [ 89.855233][ T7822] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 89.869975][ T7822] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 90.004726][ T7815] veth3: entered promiscuous mode [ 90.011262][ T7815] bond4: (slave veth3): Enslaving as an active interface with a down link [ 90.020379][ T7833] erspan0: entered allmulticast mode [ 90.031497][ T7833] bond4: (slave erspan0): making interface the new active one [ 90.039499][ T7833] bond4: (slave erspan0): Enslaving as an active interface with an up link [ 90.090464][ T7832] bond4: entered promiscuous mode [ 90.107527][ T7832] 8021q: adding VLAN 0 to HW filter on device bond4 [ 90.118193][ T7839] tipc: Enabled bearer , priority 0 [ 90.355450][ T7853] syzkaller1: entered promiscuous mode [ 90.362331][ T7853] syzkaller1: entered allmulticast mode [ 90.640393][ T7895] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 90.673081][ T7895] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 90.811670][ T7904] netlink: 'syz.3.471': attribute type 4 has an invalid length. [ 90.814368][ T7899] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 90.867422][ T7904] veth5: entered allmulticast mode [ 90.922462][ T7910] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 90.944925][ T7910] gretap1: entered promiscuous mode [ 90.950177][ T7910] gretap1: entered allmulticast mode [ 91.038963][ T7924] sch_tbf: burst 0 is lower than device vlan0 mtu (1514) ! [ 91.104094][ T7928] bond0: (slave syz_tun): Releasing backup interface [ 91.115853][ T7300] tipc: Node number set to 2475205227 [ 91.191919][ T7942] sctp: [Deprecated]: syz.2.481 (pid 7942) Use of int in maxseg socket option. [ 91.191919][ T7942] Use struct sctp_assoc_value instead [ 91.351317][ T7956] tipc: Enabling of bearer rejected, already enabled [ 91.369275][ T7957] bridge0: port 3(erspan0) entered blocking state [ 91.382101][ T7957] bridge0: port 3(erspan0) entered disabled state [ 91.389015][ T7957] erspan0: entered allmulticast mode [ 91.396957][ T7957] erspan0: entered promiscuous mode [ 91.402547][ T7957] bridge0: port 3(erspan0) entered blocking state [ 91.409064][ T7957] bridge0: port 3(erspan0) entered forwarding state [ 91.418314][ T7956] tipc: Resetting bearer [ 91.635228][ T7979] Unsupported ieee802154 address type: 0 [ 91.683306][ T7987] __nla_validate_parse: 21 callbacks suppressed [ 91.683321][ T7987] netlink: 28 bytes leftover after parsing attributes in process `syz.2.494'. [ 91.714446][ T7990] netlink: 'syz.3.496': attribute type 1 has an invalid length. [ 91.726291][ T7990] gretap2: entered allmulticast mode [ 91.739893][ T7991] netlink: 28 bytes leftover after parsing attributes in process `syz.2.494'. [ 91.890377][ T8008] netlink: 'syz.0.501': attribute type 4 has an invalid length. [ 91.903268][ T8010] netlink: 108 bytes leftover after parsing attributes in process `syz.1.502'. [ 91.904340][ T8008] netlink: 17 bytes leftover after parsing attributes in process `syz.0.501'. [ 91.941090][ T8003] netlink: del zone limit has 4 unknown bytes [ 91.947486][ T8010] openvswitch: netlink: Flow key attr not present in new flow. [ 92.002037][ T8008] veth3: entered allmulticast mode [ 92.091313][ T8021] netlink: 148 bytes leftover after parsing attributes in process `syz.2.505'. [ 92.120988][ T8023] netlink: 'syz.0.504': attribute type 1 has an invalid length. [ 92.188637][ T8023] 8021q: adding VLAN 0 to HW filter on device bond5 [ 92.237599][ T8032] netlink: 16 bytes leftover after parsing attributes in process `syz.3.507'. [ 92.287696][ T8032] netlink: 224 bytes leftover after parsing attributes in process `syz.3.507'. [ 92.311523][ T8030] 8021q: adding VLAN 0 to HW filter on device bond5 [ 92.363286][ T8030] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 92.376962][ T8030] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 92.425861][ T8023] veth5: entered promiscuous mode [ 92.433471][ T8023] bond5: (slave veth5): Enslaving as an active interface with a down link [ 92.544500][ T8055] netlink: 40 bytes leftover after parsing attributes in process `syz.1.512'. [ 92.559239][ T8055] netlink: 40 bytes leftover after parsing attributes in process `syz.1.512'. [ 92.569986][ T8043] erspan0: entered allmulticast mode [ 92.620748][ T8058] netlink: 'syz.3.513': attribute type 1 has an invalid length. [ 92.665550][ T8058] bond1: entered promiscuous mode [ 92.710233][ T8071] netlink: 4 bytes leftover after parsing attributes in process `syz.0.516'. [ 92.712534][ T8058] 8021q: adding VLAN 0 to HW filter on device bond1 [ 92.733669][ T8062] tap0: tun_chr_ioctl cmd 1074025677 [ 92.742856][ T8062] tap0: linktype set to 805 [ 92.765478][ T8058] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 92.772746][ T8058] IPv6: NLM_F_CREATE should be set when creating new route [ 92.779981][ T8058] IPv6: NLM_F_CREATE should be set when creating new route [ 92.788960][ T8058] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 92.922806][ T8074] netlink: 'syz.3.517': attribute type 2 has an invalid length. [ 93.233930][ T8107] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 93.341281][ T8116] tipc: Started in network mode [ 93.346269][ T8116] tipc: Node identity 080211000001, cluster identity 4711 [ 93.353459][ T8116] tipc: Enabled bearer , priority 0 [ 93.361229][ T8117] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode [ 93.369299][ T8117] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode [ 93.558049][ T8127] ip6tnl1: entered promiscuous mode [ 93.579092][ T8127] ip6tnl1: entered allmulticast mode [ 93.742395][ T8143] ieee802154 phy1 wpan1: encryption failed: -22 [ 94.023304][ T8152] gretap1: entered promiscuous mode [ 94.036381][ T8152] gretap1: entered allmulticast mode [ 94.348952][ T8170] hsr_slave_1 (unregistering): left promiscuous mode [ 94.455953][ T8187] RDS: rds_bind could not find a transport for 100:806:aaaa:aaaa:aaaa::, load rds_tcp or rds_rdma? [ 94.474848][ T7291] tipc: Node number set to 134418688 [ 94.906673][ T8217] IPv6: NLM_F_REPLACE set, but no existing node found! [ 95.002756][ T8186] raw_sendmsg: syz.2.547 forgot to set AF_INET. Fix it! [ 95.949797][ T8291] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 95.963651][ T8291] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 96.557358][ T8328] validate_nla: 2 callbacks suppressed [ 96.557375][ T8328] netlink: 'syz.1.577': attribute type 1 has an invalid length. [ 96.759089][ T8336] __nla_validate_parse: 12 callbacks suppressed [ 96.759107][ T8336] netlink: 28 bytes leftover after parsing attributes in process `syz.2.583'. [ 96.807699][ T8336] netlink: 'syz.2.583': attribute type 10 has an invalid length. [ 96.815997][ T8336] bond0: (slave wlan1): Opening slave failed [ 97.004864][ T8347] netlink: 144 bytes leftover after parsing attributes in process `syz.2.586'. [ 97.162403][ T8359] netlink: 12 bytes leftover after parsing attributes in process `syz.3.589'. [ 97.163450][ T8356] tipc: Enabling of bearer rejected, failed to enable media [ 97.185840][ T8359] netlink: 8 bytes leftover after parsing attributes in process `syz.3.589'. [ 97.208711][ T8359] netlink: 12 bytes leftover after parsing attributes in process `syz.3.589'. [ 97.224428][ T8359] netlink: 8 bytes leftover after parsing attributes in process `syz.3.589'. [ 97.432514][ T8371] tipc: Enabled bearer , priority 10 [ 97.438317][ T8373] netlink: 24 bytes leftover after parsing attributes in process `syz.0.594'. [ 97.576643][ T8386] netlink: 8 bytes leftover after parsing attributes in process `syz.0.600'. [ 97.598090][ T8384] netlink: 16 bytes leftover after parsing attributes in process `syz.4.599'. [ 97.611785][ T8384] IPv6: sit1: Disabled Multicast RS [ 97.617693][ T8386] netlink: 8 bytes leftover after parsing attributes in process `syz.0.600'. [ 97.649874][ T8384] sit1: entered allmulticast mode [ 97.770269][ T8393] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 97.821023][ T8393] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 97.918902][ T8393] pimreg3: entered allmulticast mode [ 97.927781][ T8410] ieee802154 phy1 wpan1: encryption failed: -22 [ 98.024988][ T8425] netlink: 'syz.4.610': attribute type 1 has an invalid length. [ 98.046889][ T8425] 8021q: adding VLAN 0 to HW filter on device bond2 [ 98.058550][ T8431] mac80211_hwsim hwsim10 wlan1: entered allmulticast mode [ 98.073600][ T8425] bond2: (slave gretap1): making interface the new active one [ 98.083229][ T8425] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 98.096384][ T8431] erspan0: left allmulticast mode [ 98.101522][ T8431] erspan0: left promiscuous mode [ 98.107272][ T8431] bridge0: port 3(erspan0) entered disabled state [ 98.130138][ T8439] netlink: 'syz.2.612': attribute type 10 has an invalid length. [ 98.138449][ T8431] bridge_slave_0: left allmulticast mode [ 98.144713][ T8431] bridge_slave_0: left promiscuous mode [ 98.150397][ T8431] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.160750][ T8431] bridge_slave_1: left allmulticast mode [ 98.173785][ T8431] bridge_slave_1: left promiscuous mode [ 98.184490][ T8431] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.195280][ T8431] bond0: (slave bond_slave_0): Releasing backup interface [ 98.206796][ T8431] bond0: (slave bond_slave_1): Releasing backup interface [ 98.218798][ T8431] team0: Port device team_slave_0 removed [ 98.228478][ T8431] team0: Port device team_slave_1 removed [ 98.235532][ T8431] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 98.243194][ T8431] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 98.255755][ T8431] bond1: (slave bridge1): Removing an active aggregator [ 98.263172][ T8431] bond1: (slave bridge1): Releasing backup interface [ 98.271448][ T8431] bridge1: left promiscuous mode [ 98.277323][ T8431] bridge1: left allmulticast mode [ 98.287891][ T8439] mac80211_hwsim hwsim10 wlan1: left allmulticast mode [ 98.299082][ T8439] bond0: (slave wlan1): Opening slave failed [ 98.370834][ T8447] netlink: 'syz.3.616': attribute type 9 has an invalid length. [ 98.380177][ T8442] syz.2.612 (8442) used greatest stack depth: 17960 bytes left [ 98.396086][ T8449] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 98.420121][ T8449] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 98.876348][ T8481] Bluetooth: MGMT ver 1.23 [ 98.988545][ T8481] geneve2: entered promiscuous mode [ 99.027437][ T6189] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.043381][ T6189] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.069932][ T6189] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.124284][ T6189] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.593991][ T8547] IPVS: set_ctl: invalid protocol: 44 224.0.0.2:0 [ 100.797049][ T8559] mac80211_hwsim hwsim17 wlan1: entered allmulticast mode [ 100.825958][ T8559] bridge_slave_0: left allmulticast mode [ 100.831615][ T8559] bridge_slave_0: left promiscuous mode [ 100.860444][ T8564] unsupported nla_type 52263 [ 100.867835][ T8559] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.869681][ T8565] netlink: 'syz.4.644': attribute type 10 has an invalid length. [ 100.894371][ T8559] bridge_slave_1: left allmulticast mode [ 100.900149][ T8559] bridge_slave_1: left promiscuous mode [ 100.906941][ T8559] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.921227][ T8559] team0: Port device team_slave_0 removed [ 100.929135][ T8559] team0: Port device team_slave_1 removed [ 100.937047][ T8559] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 100.945999][ T8559] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 100.954164][ T8559] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 100.961532][ T8559] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 100.972559][ T8559] bond0: (slave bridge2): Removing an active aggregator [ 100.981110][ T8559] bond0: (slave bridge2): Releasing backup interface [ 100.988640][ T8559] bridge2: left promiscuous mode [ 100.993653][ T8559] bridge2: left allmulticast mode [ 101.004041][ T8559] bond2: (slave gretap1): Releasing active interface [ 103.606220][ T8594] __nla_validate_parse: 74 callbacks suppressed [ 103.606241][ T8594] netlink: 32 bytes leftover after parsing attributes in process `syz.3.656'. [ 103.694538][ T8612] netlink: 16 bytes leftover after parsing attributes in process `syz.0.660'. [ 103.835715][ T8619] syz_tun: entered allmulticast mode [ 103.919604][ T8630] netlink: 28 bytes leftover after parsing attributes in process `syz.4.666'. [ 103.994123][ T8632] netlink: 20 bytes leftover after parsing attributes in process `syz.3.667'. [ 104.021911][ T8632] netlink: 20 bytes leftover after parsing attributes in process `syz.3.667'. [ 104.089018][ T8639] netlink: 8 bytes leftover after parsing attributes in process `syz.3.669'. [ 104.113043][ T8639] netlink: 12 bytes leftover after parsing attributes in process `syz.3.669'. [ 104.138489][ T8641] batadv1: entered promiscuous mode [ 104.173628][ T8643] netlink: 'syz.3.672': attribute type 21 has an invalid length. [ 104.181517][ T8643] netlink: 128 bytes leftover after parsing attributes in process `syz.3.672'. [ 104.196892][ T8643] netlink: 'syz.3.672': attribute type 5 has an invalid length. [ 104.206153][ T8643] netlink: 'syz.3.672': attribute type 6 has an invalid length. [ 104.213947][ T8643] netlink: 3 bytes leftover after parsing attributes in process `syz.3.672'. [ 104.343444][ T8648] IPVS: Scheduler module ip_vs_sip not found [ 104.441287][ T8652] netlink: 16 bytes leftover after parsing attributes in process `syz.0.675'. [ 104.642259][ T8618] syz_tun: left allmulticast mode [ 105.226066][ T8710] netlink: 'syz.0.694': attribute type 7 has an invalid length. [ 105.240304][ T8697] syzkaller1: entered promiscuous mode [ 105.247912][ T8697] syzkaller1: entered allmulticast mode [ 105.263820][ T8710] netlink: 'syz.0.694': attribute type 8 has an invalid length. [ 105.405253][ T8718] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 105.768665][ T8748] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 106.594577][ T8813] syzkaller0: entered promiscuous mode [ 106.600237][ T8813] syzkaller0: entered allmulticast mode [ 106.612312][ T8814] dummy0: entered promiscuous mode [ 106.620658][ T8813] tipc: Enabled bearer , priority 0 [ 106.634709][ T8813] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 106.647990][ T8813] tipc: Resetting bearer [ 106.657571][ T8811] tipc: Resetting bearer [ 106.667883][ T8811] tipc: Disabling bearer [ 106.770865][ T8831] tipc: Enabling of bearer rejected, already enabled [ 107.330750][ T8861] netlink: 'syz.3.742': attribute type 6 has an invalid length. [ 107.772259][ T8865] netlink: 'syz.4.743': attribute type 13 has an invalid length. [ 107.780808][ T8865] netlink: 'syz.4.743': attribute type 17 has an invalid length. [ 107.867730][ T8865] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.886289][ T8865] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 107.908089][ T8870] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 107.938163][ T8873] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 107.968503][ T8877] tipc: Enabling of bearer rejected, already enabled [ 107.993006][ T8877] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) ! [ 108.168807][ T8913] batadv_slave_0: entered promiscuous mode [ 108.191923][ T8911] batadv_slave_0: left promiscuous mode [ 108.421793][ T8939] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 108.479189][ T8944] netlink: 'syz.2.763': attribute type 3 has an invalid length. [ 108.495097][ T50] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 108.519900][ T8949] netlink: 'syz.2.765': attribute type 10 has an invalid length. [ 108.808714][ T8969] __nla_validate_parse: 92 callbacks suppressed [ 108.808731][ T8969] netlink: 348 bytes leftover after parsing attributes in process `syz.2.770'. [ 108.861964][ T8972] netlink: 20 bytes leftover after parsing attributes in process `syz.2.771'. [ 108.872730][ T8972] netlink: 4 bytes leftover after parsing attributes in process `syz.2.771'. [ 109.058842][ T30] audit: type=1800 audit(1756192443.811:2): pid=8981 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.775" name="memory.events" dev="tmpfs" ino=955 res=0 errno=0 [ 109.183456][ T8989] batadv_slave_0: entered promiscuous mode [ 109.262955][ T8984] netlink: 20 bytes leftover after parsing attributes in process `syz.4.776'. [ 109.361622][ T8983] batadv_slave_0: left promiscuous mode [ 109.416142][ T8999] block nbd1: server does not support multiple connections per device. [ 109.429825][ T9011] validate_nla: 1 callbacks suppressed [ 109.429838][ T9011] netlink: 'syz.4.783': attribute type 11 has an invalid length. [ 109.443376][ T8999] block nbd1: shutting down sockets [ 109.449819][ T9011] netlink: 36 bytes leftover after parsing attributes in process `syz.4.783'. [ 109.526849][ T9019] netlink: 92 bytes leftover after parsing attributes in process `syz.4.783'. [ 109.655259][ T9027] netlink: 12 bytes leftover after parsing attributes in process `syz.2.787'. [ 109.763557][ T9027] bridge2: port 1(veth5) entered blocking state [ 109.794976][ T9027] bridge2: port 1(veth5) entered disabled state [ 109.807960][ T9027] veth5: entered allmulticast mode [ 109.820687][ T9027] veth5: entered promiscuous mode [ 109.880299][ T9046] bridge2: port 2(veth0_to_bond) entered blocking state [ 109.896764][ T9046] bridge2: port 2(veth0_to_bond) entered disabled state [ 109.909118][ T9046] veth0_to_bond: entered allmulticast mode [ 109.933090][ T9046] veth0_to_bond: entered promiscuous mode [ 109.945184][ T9059] netlink: 'syz.1.792': attribute type 1 has an invalid length. [ 109.968585][ T9059] 8021q: adding VLAN 0 to HW filter on device bond5 [ 109.994545][ T9059] 8021q: adding VLAN 0 to HW filter on device bond5 [ 110.005128][ T9059] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 110.017601][ T9059] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 110.034941][ T9065] netlink: 8 bytes leftover after parsing attributes in process `syz.1.792'. [ 110.048398][ T9065] netlink: 4 bytes leftover after parsing attributes in process `syz.1.792'. [ 110.058609][ T9065] netlink: 8 bytes leftover after parsing attributes in process `syz.1.792'. [ 110.262833][ T9083] netlink: 'syz.4.796': attribute type 20 has an invalid length. [ 110.318662][ T9083] netlink: 'syz.4.796': attribute type 83 has an invalid length. [ 110.456415][ T9092] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 110.490676][ T9108] netlink: 'syz.3.803': attribute type 1 has an invalid length. [ 110.662021][ T9125] netlink: 'syz.0.809': attribute type 1 has an invalid length. [ 111.181504][ T9167] netlink: 'syz.0.822': attribute type 2 has an invalid length. [ 111.302217][ T9176] tipc: Started in network mode [ 111.307236][ T9176] tipc: Node identity BtUuiN, cluster identity 4711 [ 111.315320][ T9176] tipc: Enabled bearer , priority 0 [ 111.367762][ T9175] tipc: Resetting bearer [ 111.447112][ T9175] tipc: Disabling bearer [ 111.488721][ T9174] netlink: 'syz.4.824': attribute type 4 has an invalid length. [ 111.525266][ T9174] netlink: 'syz.4.824': attribute type 4 has an invalid length. [ 111.632586][ T30] audit: type=1800 audit(1756192446.381:3): pid=9193 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.830" name="blkio.bfq.time_recursive" dev="tmpfs" ino=754 res=0 errno=0 [ 111.828922][ T9212] syzkaller1: entered promiscuous mode [ 111.834507][ T9212] syzkaller1: entered allmulticast mode [ 111.862069][ T9215] netlink: 'syz.3.837': attribute type 15 has an invalid length. [ 112.497587][ T9255] erspan0: left allmulticast mode [ 112.588762][ T9255] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.596280][ T9255] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.017422][ T9255] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 113.107703][ T9255] wireguard0: left promiscuous mode [ 113.113878][ T9255] wireguard0: left allmulticast mode [ 113.129427][ T9255] bond4: left promiscuous mode [ 113.135953][ T9255] veth3: left allmulticast mode [ 113.141232][ T9255] veth5: left promiscuous mode [ 113.188357][ T9270] macvlan0: entered promiscuous mode [ 113.212515][ T9270] macvlan0: entered allmulticast mode [ 113.235382][ T6190] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.255397][ T6190] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.283214][ T6190] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.330616][ T6190] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.595348][ T9313] tipc: Enabling of bearer rejected, already enabled [ 114.043310][ T9343] __nla_validate_parse: 22 callbacks suppressed [ 114.043327][ T9343] netlink: 248 bytes leftover after parsing attributes in process `syz.2.872'. [ 114.106908][ T9358] netlink: 32 bytes leftover after parsing attributes in process `syz.3.875'. [ 114.322745][ T9374] netlink: 12 bytes leftover after parsing attributes in process `syz.2.879'. [ 114.331647][ T9376] netlink: 8 bytes leftover after parsing attributes in process `syz.4.880'. [ 114.331675][ T9376] netlink: 76 bytes leftover after parsing attributes in process `syz.4.880'. [ 114.510917][ T9384] validate_nla: 1 callbacks suppressed [ 114.510934][ T9384] netlink: 'syz.2.882': attribute type 4 has an invalid length. [ 114.526860][ T9386] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.884'. [ 114.557587][ T9384] netlink: 'syz.2.882': attribute type 4 has an invalid length. [ 114.584978][ T9392] netlink: 'syz.4.885': attribute type 1 has an invalid length. [ 114.601961][ T9392] netlink: 'syz.4.885': attribute type 1 has an invalid length. [ 114.649262][ T9399] netlink: 16 bytes leftover after parsing attributes in process `syz.4.887'. [ 114.799777][ T9406] netlink: 5 bytes leftover after parsing attributes in process `syz.1.889'. [ 114.817815][ T9406] netlink: 12 bytes leftover after parsing attributes in process `syz.1.889'. [ 114.832022][ T9412] netlink: 'syz.4.890': attribute type 10 has an invalid length. [ 114.874370][ T9406] ieee802154 phy1 wpan1: encryption failed: -22 [ 114.900990][ T9408] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 114.937115][ T9418] netlink: 4 bytes leftover after parsing attributes in process `syz.1.892'. [ 115.140532][ T9437] ip6erspan1: entered allmulticast mode [ 115.303413][ T9457] netlink: 'syz.0.903': attribute type 1 has an invalid length. [ 115.339492][ T9463] netlink: 'syz.3.905': attribute type 7 has an invalid length. [ 115.370865][ T9457] 8021q: adding VLAN 0 to HW filter on device bond6 [ 115.448129][ T9465] bond6: (slave gretap1): making interface the new active one [ 115.457854][ T9465] bond6: (slave gretap1): Enslaving as an active interface with an up link [ 115.476432][ T9473] dvmrp8: entered allmulticast mode [ 115.486050][ T9461] dvmrp8: left allmulticast mode [ 115.492278][ T30] audit: type=1800 audit(1756192450.241:4): pid=9462 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.904" name="memory.events" dev="tmpfs" ino=932 res=0 errno=0 [ 115.520773][ T9466] syzkaller1: entered promiscuous mode [ 115.531009][ T9466] syzkaller1: entered allmulticast mode [ 115.821003][ T9503] dvmrp0: entered allmulticast mode [ 116.103595][ T9514] tipc: Enabling of bearer rejected, already enabled [ 116.127701][ T9514] sch_fq: defrate 257 ignored. [ 116.379512][ T9523] vlan2: left promiscuous mode [ 116.384956][ T9523] bond0: left promiscuous mode [ 116.389833][ T9523] vlan2: left allmulticast mode [ 116.394922][ T9523] bond0: left allmulticast mode [ 116.400066][ T9523] ip6tnl1: left promiscuous mode [ 116.405214][ T9523] ip6tnl1: left allmulticast mode [ 116.412862][ T9523] macvlan2: left promiscuous mode [ 116.419152][ T9523] macvlan2: left allmulticast mode [ 116.426776][ T9523] mac80211_hwsim hwsim17 wlan1: left allmulticast mode [ 116.435292][ T9523] sit1: left allmulticast mode [ 116.442479][ T9523] hsr0: left allmulticast mode [ 116.447439][ T9523] hsr_slave_0: left allmulticast mode [ 116.452859][ T9523] hsr_slave_1: left allmulticast mode [ 116.458421][ T9523] macvlan0: left promiscuous mode [ 116.463469][ T9523] macvlan0: left allmulticast mode [ 116.470137][ T6189] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.482324][ T6189] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.501394][ T6189] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.510219][ T6189] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.763343][ T9553] netlink: 'syz.3.932': attribute type 4 has an invalid length. [ 116.899084][ T9570] netlink: 'syz.3.935': attribute type 12 has an invalid length. [ 116.918692][ T9571] bond0: entered promiscuous mode [ 116.924231][ T9571] bond_slave_0: entered promiscuous mode [ 116.930091][ T9571] bond_slave_1: entered promiscuous mode [ 116.937715][ T9571] batadv0: entered promiscuous mode [ 116.943721][ T9571] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 116.955373][ T9571] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 116.965895][ T9571] hsr1: entered allmulticast mode [ 116.966595][ T9562] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 116.970972][ T9571] bond0: entered allmulticast mode [ 116.983504][ T9571] bond_slave_0: entered allmulticast mode [ 116.989694][ T9571] bond_slave_1: entered allmulticast mode [ 116.995461][ T9571] batadv0: entered allmulticast mode [ 117.001560][ T9571] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 117.009346][ T9571] bond0: left promiscuous mode [ 117.014134][ T9571] bond_slave_0: left promiscuous mode [ 117.019598][ T9571] bond_slave_1: left promiscuous mode [ 117.025650][ T9571] batadv0: left promiscuous mode [ 117.175191][ T9588] syzkaller0: entered promiscuous mode [ 117.183939][ T9588] syzkaller0: entered allmulticast mode [ 117.304321][ T9606] netlink: 'syz.3.947': attribute type 4 has an invalid length. [ 118.224648][ T9649] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 118.304525][ T9657] bridge0: port 1(vlan0) entered blocking state [ 118.313065][ T9657] bridge0: port 1(vlan0) entered disabled state [ 118.319572][ T9657] vlan0: entered allmulticast mode [ 118.326190][ T9657] bridge0: entered allmulticast mode [ 118.333133][ T9657] vlan0: left allmulticast mode [ 118.344803][ T9657] bridge0: left allmulticast mode [ 118.611515][ T9695] macvlan0: entered promiscuous mode [ 118.625784][ T9695] bond0: (slave macvlan0): Enslaving as an active interface with a down link [ 118.755306][ T9702] tipc: Enabling of bearer rejected, already enabled [ 118.799514][ T9702] tipc: Resetting bearer [ 119.004473][ T9726] tipc: Enabling of bearer rejected, already enabled [ 119.077094][ T9731] __nla_validate_parse: 20 callbacks suppressed [ 119.077112][ T9731] netlink: 4 bytes leftover after parsing attributes in process `syz.2.984'. [ 119.132298][ T9740] netlink: 5636 bytes leftover after parsing attributes in process `syz.1.987'. [ 119.143083][ T9739] netlink: 20 bytes leftover after parsing attributes in process `syz.1.987'. [ 119.153450][ T9740] netlink: 20 bytes leftover after parsing attributes in process `syz.1.987'. [ 119.163275][ T9739] netlink: 8 bytes leftover after parsing attributes in process `syz.1.987'. [ 119.180060][ T9740] netlink: 8 bytes leftover after parsing attributes in process `syz.1.987'. [ 119.484575][ T9751] bond0: entered promiscuous mode [ 119.490321][ T9751] batadv0: entered promiscuous mode [ 119.496274][ T9751] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 119.512193][ T9751] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 119.531203][ T9751] hsr1: entered allmulticast mode [ 119.559122][ T9751] bond0: entered allmulticast mode [ 119.583385][ T9753] netlink: 844 bytes leftover after parsing attributes in process `syz.1.992'. [ 119.602155][ T9751] batadv0: entered allmulticast mode [ 119.624892][ T9751] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 119.638006][ T9751] bond0: left promiscuous mode [ 119.647294][ T9757] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 119.658588][ T9751] batadv0: left promiscuous mode [ 119.682786][ T9758] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 119.818448][ T9771] netlink: 36 bytes leftover after parsing attributes in process `syz.3.996'. [ 120.035395][ T9788] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 120.080139][ T9788] IPVS: Unknown mcast interface: vcan0 [ 120.192810][ T9810] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1006'. [ 120.199657][ T9803] validate_nla: 3 callbacks suppressed [ 120.199671][ T9803] netlink: 'syz.2.1005': attribute type 1 has an invalid length. [ 120.238525][ T9803] netlink: 232 bytes leftover after parsing attributes in process `syz.2.1005'. [ 120.488337][ T9823] bond7: (slave ip6gretap1): making interface the new active one [ 120.497542][ T9828] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 120.502260][ T9823] bond7: (slave ip6gretap1): Enslaving as an active interface with an up link [ 120.596592][ T9838] team0: Device macvlan0 is already an upper device of the team interface [ 120.643606][ T9833] netlink: 'syz.2.1017': attribute type 10 has an invalid length. [ 120.675180][ T9833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 120.683579][ T9833] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 121.068713][ T9877] tipc: Enabled bearer , priority 0 [ 121.077500][ T9877] tipc: Resetting bearer [ 121.088661][ T9875] tipc: Disabling bearer [ 121.226947][ T9901] syzkaller1: entered promiscuous mode [ 121.232443][ T9901] syzkaller1: entered allmulticast mode [ 121.389891][ T9917] netlink: 'syz.0.1043': attribute type 13 has an invalid length. [ 121.421628][ T9917] netlink: 'syz.0.1043': attribute type 17 has an invalid length. [ 121.457869][ T9917] erspan0: left promiscuous mode [ 121.466010][ T9930] netlink: 'syz.1.1048': attribute type 1 has an invalid length. [ 121.507448][ T9917] 8021q: adding VLAN 0 to HW filter on device bond0 [ 121.514980][ T9917] 8021q: adding VLAN 0 to HW filter on device team0 [ 121.527542][ T9917] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 121.571882][ T9930] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 121.617562][ T9926] syzkaller1: entered promiscuous mode [ 121.632727][ T9926] syzkaller1: entered allmulticast mode [ 121.782138][ T9949] ip6erspan0: entered allmulticast mode [ 121.949213][ T9971] syzkaller1: entered promiscuous mode [ 121.956933][ T9971] syzkaller1: entered allmulticast mode [ 123.343591][ T9999] netlink: 'syz.0.1060': attribute type 3 has an invalid length. [ 123.369620][ T50] Bluetooth: hci4: link tx timeout [ 123.374877][ T50] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 123.382564][ T50] Bluetooth: hci4: link tx timeout [ 123.387973][ T50] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 123.761759][T10022] syzkaller1: entered promiscuous mode [ 123.776029][T10022] syzkaller1: entered allmulticast mode [ 123.865283][T10027] RDS: rds_bind could not find a transport for 2001::2, load rds_tcp or rds_rdma? [ 124.094127][T10044] __nla_validate_parse: 15 callbacks suppressed [ 124.094145][T10044] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1076'. [ 124.113273][ T7300] IPVS: starting estimator thread 0... [ 124.318604][T10050] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 124.424965][T10049] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1078'. [ 124.436841][T10049] bridge_slave_1: left allmulticast mode [ 124.442809][T10049] bridge_slave_1: left promiscuous mode [ 124.449782][T10049] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.460924][T10049] bridge_slave_0: left allmulticast mode [ 124.470989][T10049] bridge_slave_0: left promiscuous mode [ 124.477385][T10049] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.524382][T10045] IPVS: using max 40 ests per chain, 96000 per kthread [ 124.939252][T10068] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1083'. [ 124.957619][T10071] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (71) [ 124.993642][T10068] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1083'. [ 125.062998][T10076] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1085'. [ 125.066160][T10068] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1083'. [ 125.092827][T10076] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1085'. [ 125.115843][T10076] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1085'. [ 125.132428][T10076] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1085'. [ 125.154231][T10082] Unsupported ieee802154 address type: 0 [ 125.181411][T10082] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1087'. [ 125.377758][T10100] !: renamed from dummy0 [ 125.455708][ T5858] Bluetooth: hci4: command 0x0406 tx timeout [ 126.287711][T10158] netlink: 'syz.1.1106': attribute type 4 has an invalid length. [ 126.747025][T10188] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20003 [ 127.009896][T10218] tc_dump_action: action bad kind [ 127.022705][T10224] netlink: 'syz.1.1129': attribute type 1 has an invalid length. [ 127.242916][T10239] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 127.338411][T10239] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 127.569201][T10255] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 127.580370][T10255] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 127.604179][ T5858] Bluetooth: hci4: command 0x0406 tx timeout [ 128.072631][T10303] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode [ 128.103367][T10303] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode [ 128.121800][T10306] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 128.152392][T10306] netlink: 'syz.4.1153': attribute type 11 has an invalid length. [ 128.161063][T10306] netlink: 'syz.4.1153': attribute type 1 has an invalid length. [ 128.348778][T10332] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 128.747533][T10342] pim6reg1: entered promiscuous mode [ 128.752940][T10342] pim6reg1: entered allmulticast mode [ 129.276411][T10376] bond4: entered promiscuous mode [ 129.281549][T10376] bond4: entered allmulticast mode [ 129.287030][T10376] 8021q: adding VLAN 0 to HW filter on device bond4 [ 129.338719][T10382] netlink: 'syz.1.1176': attribute type 1 has an invalid length. [ 129.440511][T10389] netlink: 'syz.4.1177': attribute type 1 has an invalid length. [ 129.491625][T10389] 8021q: adding VLAN 0 to HW filter on device bond5 [ 129.500758][T10399] __nla_validate_parse: 12 callbacks suppressed [ 129.500782][T10399] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1179'. [ 129.522705][T10393] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1180'. [ 129.700523][T10411] FAULT_INJECTION: forcing a failure. [ 129.700523][T10411] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 129.805569][T10411] CPU: 1 UID: 0 PID: 10411 Comm: syz.2.1183 Not tainted syzkaller #0 PREEMPT(full) [ 129.805593][T10411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 129.805603][T10411] Call Trace: [ 129.805610][T10411] [ 129.805624][T10411] dump_stack_lvl+0x189/0x250 [ 129.805655][T10411] ? __pfx____ratelimit+0x10/0x10 [ 129.805677][T10411] ? __pfx_dump_stack_lvl+0x10/0x10 [ 129.805696][T10411] ? __pfx__printk+0x10/0x10 [ 129.805715][T10411] ? __might_fault+0xb0/0x130 [ 129.805741][T10411] ? rcu_is_watching+0x15/0xb0 [ 129.805759][T10411] should_fail_ex+0x414/0x560 [ 129.805783][T10411] _copy_from_user+0x2d/0xb0 [ 129.805801][T10411] ___sys_recvmsg+0x12e/0x510 [ 129.805823][T10411] ? __pfx____sys_recvmsg+0x10/0x10 [ 129.805843][T10411] ? __fget_files+0x2a/0x420 [ 129.805867][T10411] ? rcu_is_watching+0x15/0xb0 [ 129.805883][T10411] ? lock_release+0x4b/0x3e0 [ 129.805906][T10411] ? __might_fault+0xcc/0x130 [ 129.805928][T10411] do_recvmmsg+0x307/0x770 [ 129.805950][T10411] ? __pfx_do_recvmmsg+0x10/0x10 [ 129.805974][T10411] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 129.806006][T10411] __x64_sys_recvmmsg+0x190/0x240 [ 129.806025][T10411] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 129.806043][T10411] ? rcu_is_watching+0x15/0xb0 [ 129.806061][T10411] ? rcu_is_watching+0x15/0xb0 [ 129.806078][T10411] do_syscall_64+0xfa/0x3b0 [ 129.806094][T10411] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.806111][T10411] ? clear_bhb_loop+0x60/0xb0 [ 129.806130][T10411] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.806146][T10411] RIP: 0033:0x7fc18fd8ebe9 [ 129.806165][T10411] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 129.806180][T10411] RSP: 002b:00007fc190cb6038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 129.806202][T10411] RAX: ffffffffffffffda RBX: 00007fc18ffb5fa0 RCX: 00007fc18fd8ebe9 [ 129.806215][T10411] RDX: 03fffffffffffdfc RSI: 00002000000099c0 RDI: 0000000000000005 [ 129.806227][T10411] RBP: 00007fc190cb6090 R08: 0000000000000000 R09: 0000000000000000 [ 129.806238][T10411] R10: 0000000000010002 R11: 0000000000000246 R12: 0000000000000001 [ 129.806249][T10411] R13: 00007fc18ffb6038 R14: 00007fc18ffb5fa0 R15: 00007ffdca3f6638 [ 129.806270][T10411] [ 130.345362][T10430] netlink: 'syz.2.1190': attribute type 13 has an invalid length. [ 130.364931][T10430] netlink: 'syz.2.1190': attribute type 17 has an invalid length. [ 130.386047][T10436] syzkaller0: Caught tx_queue_len zero misconfig [ 130.720307][T10430] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 130.811594][T10446] netlink: 27 bytes leftover after parsing attributes in process `syz.4.1193'. [ 130.877034][T10448] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1194'. [ 131.012095][T10461] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1195'. [ 131.029787][T10457] netlink: 'syz.0.1196': attribute type 66 has an invalid length. [ 131.107342][T10463] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1199'. [ 131.458816][T10477] FAULT_INJECTION: forcing a failure. [ 131.458816][T10477] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 131.525998][T10477] CPU: 0 UID: 0 PID: 10477 Comm: syz.3.1200 Not tainted syzkaller #0 PREEMPT(full) [ 131.526023][T10477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 131.526033][T10477] Call Trace: [ 131.526040][T10477] [ 131.526047][T10477] dump_stack_lvl+0x189/0x250 [ 131.526072][T10477] ? __pfx____ratelimit+0x10/0x10 [ 131.526095][T10477] ? __pfx_dump_stack_lvl+0x10/0x10 [ 131.526113][T10477] ? __pfx__printk+0x10/0x10 [ 131.526133][T10477] ? __might_fault+0xb0/0x130 [ 131.526159][T10477] ? rcu_is_watching+0x15/0xb0 [ 131.526177][T10477] should_fail_ex+0x414/0x560 [ 131.526200][T10477] _copy_from_user+0x2d/0xb0 [ 131.526219][T10477] ___sys_recvmsg+0x12e/0x510 [ 131.526239][T10477] ? __pfx____sys_recvmsg+0x10/0x10 [ 131.526260][T10477] ? __fget_files+0x2a/0x420 [ 131.526283][T10477] ? rcu_is_watching+0x15/0xb0 [ 131.526299][T10477] ? lock_release+0x4b/0x3e0 [ 131.526321][T10477] ? __might_fault+0xcc/0x130 [ 131.526343][T10477] do_recvmmsg+0x307/0x770 [ 131.526365][T10477] ? __pfx_do_recvmmsg+0x10/0x10 [ 131.526388][T10477] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 131.526421][T10477] __x64_sys_recvmmsg+0x190/0x240 [ 131.526441][T10477] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 131.526467][T10477] ? rcu_is_watching+0x15/0xb0 [ 131.526486][T10477] ? rcu_is_watching+0x15/0xb0 [ 131.526503][T10477] do_syscall_64+0xfa/0x3b0 [ 131.526519][T10477] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.526536][T10477] ? clear_bhb_loop+0x60/0xb0 [ 131.526554][T10477] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.526571][T10477] RIP: 0033:0x7f166df8ebe9 [ 131.526586][T10477] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 131.526600][T10477] RSP: 002b:00007f166ed52038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 131.526619][T10477] RAX: ffffffffffffffda RBX: 00007f166e1b5fa0 RCX: 00007f166df8ebe9 [ 131.526631][T10477] RDX: 03fffffffffffdfc RSI: 00002000000099c0 RDI: 0000000000000005 [ 131.526643][T10477] RBP: 00007f166ed52090 R08: 0000000000000000 R09: 0000000000000000 [ 131.526654][T10477] R10: 0000000000010002 R11: 0000000000000246 R12: 0000000000000001 [ 131.526665][T10477] R13: 00007f166e1b6038 R14: 00007f166e1b5fa0 R15: 00007ffd565687b8 [ 131.526685][T10477] [ 132.054940][T10481] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1201'. [ 132.115799][T10483] netlink: 'syz.1.1203': attribute type 21 has an invalid length. [ 132.130718][T10483] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1203'. [ 132.167150][T10487] netlink: 248 bytes leftover after parsing attributes in process `syz.3.1204'. [ 132.192748][T10489] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1205'. [ 132.422132][T10512] gretap0: entered promiscuous mode [ 132.438693][T10512] gretap0: left promiscuous mode [ 132.492673][T10521] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 132.666338][T10537] tipc: Enabling of bearer rejected, already enabled [ 132.734445][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.779343][T10537] tipc: Resetting bearer [ 132.850224][T10508] syzkaller1: entered promiscuous mode [ 132.860798][T10508] syzkaller1: entered allmulticast mode [ 134.098227][T10637] netlink: 'syz.1.1246': attribute type 18 has an invalid length. [ 134.125212][T10642] syzkaller1: entered promiscuous mode [ 134.130754][T10642] syzkaller1: entered allmulticast mode [ 134.563132][T10660] netlink: 'syz.3.1252': attribute type 1 has an invalid length. [ 134.630613][T10660] 8021q: adding VLAN 0 to HW filter on device bond2 [ 134.652112][T10665] bond2: (slave veth9): Enslaving as an active interface with a down link [ 134.671087][T10660] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 134.681520][T10660] bond2: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 134.711018][T10670] __nla_validate_parse: 19 callbacks suppressed [ 134.711032][T10670] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1255'. [ 135.309419][T10682] netlink: 'syz.0.1259': attribute type 1 has an invalid length. [ 135.343702][T10684] !: renamed from dummy0 (while UP) [ 135.395465][T10690] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1259'. [ 135.471136][T10682] bond8: entered promiscuous mode [ 135.499391][T10682] 8021q: adding VLAN 0 to HW filter on device bond8 [ 135.537428][T10686] batadv_slave_0: entered promiscuous mode [ 135.558309][T10690] batadv1: entered promiscuous mode [ 135.577054][T10690] batadv1: entered allmulticast mode [ 135.583573][T10690] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 135.594206][T10690] bond8: (slave batadv1): making interface the new active one [ 135.602434][T10682] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1259'. [ 135.602784][T10690] bond8: (slave batadv1): Enslaving as an active interface with an up link [ 135.625026][T10685] batadv_slave_0: left promiscuous mode [ 135.638430][T10682] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1259'. [ 135.650973][T10707] sctp: [Deprecated]: syz.2.1262 (pid 10707) Use of int in maxseg socket option. [ 135.650973][T10707] Use struct sctp_assoc_value instead [ 135.663421][T10706] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1265'. [ 135.674992][T10706] netlink: 'syz.3.1265': attribute type 30 has an invalid length. [ 135.699053][ T6189] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 135.709218][ T6189] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 135.750791][T10715] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1267'. [ 135.772140][T10709] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 135.784560][ T6189] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 135.792744][ T6189] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 135.895655][T10722] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1268'. [ 135.962600][T10722] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1268'. [ 136.000560][T10737] IPVS: Error connecting to the multicast addr [ 136.009350][T10733] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1270'. [ 136.034437][T10745] netlink: 'syz.1.1273': attribute type 4 has an invalid length. [ 136.185899][ T30] audit: type=1107 audit(1756192470.941:5): pid=10751 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='¶'Û€>{' [ 136.519178][T10776] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1280'. [ 136.656300][T10781] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 136.868801][T10814] 8021q: VLANs not supported on ip_vti0 [ 137.679596][T10875] openvswitch: netlink: Tunnel attr 14 has unexpected len 4 expected 0 [ 137.826297][T10886] netlink: 'syz.4.1310': attribute type 4 has an invalid length. [ 137.921215][T10894] blkio.reset_stats is deprecated [ 138.245069][T10937] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 138.380485][T10946] FAULT_INJECTION: forcing a failure. [ 138.380485][T10946] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 138.407942][T10946] CPU: 0 UID: 0 PID: 10946 Comm: syz.1.1323 Not tainted syzkaller #0 PREEMPT(full) [ 138.407965][T10946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 138.407975][T10946] Call Trace: [ 138.407982][T10946] [ 138.407989][T10946] dump_stack_lvl+0x189/0x250 [ 138.408012][T10946] ? __pfx____ratelimit+0x10/0x10 [ 138.408039][T10946] ? __pfx_dump_stack_lvl+0x10/0x10 [ 138.408058][T10946] ? __pfx__printk+0x10/0x10 [ 138.408078][T10946] ? __might_fault+0xb0/0x130 [ 138.408103][T10946] ? rcu_is_watching+0x15/0xb0 [ 138.408121][T10946] should_fail_ex+0x414/0x560 [ 138.408145][T10946] _copy_from_user+0x2d/0xb0 [ 138.408164][T10946] ___sys_recvmsg+0x12e/0x510 [ 138.408185][T10946] ? __pfx____sys_recvmsg+0x10/0x10 [ 138.408205][T10946] ? __fget_files+0x2a/0x420 [ 138.408232][T10946] ? rcu_is_watching+0x15/0xb0 [ 138.408248][T10946] ? lock_release+0x4b/0x3e0 [ 138.408271][T10946] ? __might_fault+0xcc/0x130 [ 138.408293][T10946] do_recvmmsg+0x307/0x770 [ 138.408314][T10946] ? __pfx_do_recvmmsg+0x10/0x10 [ 138.408338][T10946] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 138.408371][T10946] __x64_sys_recvmmsg+0x190/0x240 [ 138.408390][T10946] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 138.408411][T10946] ? rcu_is_watching+0x15/0xb0 [ 138.408440][T10946] do_syscall_64+0xfa/0x3b0 [ 138.408456][T10946] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.408473][T10946] ? clear_bhb_loop+0x60/0xb0 [ 138.408491][T10946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.408508][T10946] RIP: 0033:0x7fc366d8ebe9 [ 138.408523][T10946] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 138.408536][T10946] RSP: 002b:00007fc367b50038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 138.408555][T10946] RAX: ffffffffffffffda RBX: 00007fc366fb5fa0 RCX: 00007fc366d8ebe9 [ 138.408567][T10946] RDX: 03fffffffffffdfc RSI: 00002000000099c0 RDI: 0000000000000005 [ 138.408578][T10946] RBP: 00007fc367b50090 R08: 0000000000000000 R09: 0000000000000000 [ 138.408589][T10946] R10: 0000000000010002 R11: 0000000000000246 R12: 0000000000000002 [ 138.408599][T10946] R13: 00007fc366fb6038 R14: 00007fc366fb5fa0 R15: 00007fff2897d7e8 [ 138.408619][T10946] [ 138.787364][T10955] openvswitch: netlink: Message has 20 unknown bytes. [ 138.798703][T10955] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 139.276214][T11004] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 140.156629][T11026] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 140.222321][T11030] __nla_validate_parse: 18 callbacks suppressed [ 140.222338][T11030] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1350'. [ 140.234853][T11034] tipc: Enabling of bearer rejected, already enabled [ 140.263005][T11033] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1347'. [ 140.282161][T11030] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1350'. [ 140.293291][T11037] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1350'. [ 140.331342][T11030] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1350'. [ 140.342456][T11030] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1350'. [ 140.476853][T11048] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1353'. [ 140.782844][T11070] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1359'. [ 140.813526][T11070] bridge_slave_1: left allmulticast mode [ 140.820921][T11070] bridge_slave_1: left promiscuous mode [ 140.836591][T11070] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.854483][T11072] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1358'. [ 140.866032][T11070] bridge_slave_0: left allmulticast mode [ 140.871877][T11070] bridge_slave_0: left promiscuous mode [ 140.879668][T11070] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.884783][T11075] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1360'. [ 141.152778][T11088] bond0: (slave macvlan0): Releasing backup interface [ 141.281537][T11102] netlink: 'syz.3.1366': attribute type 3 has an invalid length. [ 141.311710][T11102] netlink: 'syz.3.1366': attribute type 1 has an invalid length. [ 141.692819][ T30] audit: type=1800 audit(1756192476.441:6): pid=11126 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1374" name="memory.events" dev="tmpfs" ino=1362 res=0 errno=0 [ 141.821202][T11132] netlink: 'syz.2.1375': attribute type 10 has an invalid length. [ 142.011969][T11138] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 142.100649][T11147] netlink: 'syz.2.1378': attribute type 10 has an invalid length. [ 142.118881][T11147] bond0: (slave wlan1): Opening slave failed [ 142.228223][T11160] IPv6: NLM_F_CREATE should be specified when creating new route [ 142.260755][T11160] IPVS: Error joining to the multicast group [ 142.398495][ T30] audit: type=1800 audit(1756192477.151:7): pid=11167 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1384" name="blkio.bfq.io_queued_recursive" dev="tmpfs" ino=1449 res=0 errno=0 [ 142.609955][T11178] netlink: 'syz.4.1387': attribute type 142 has an invalid length. [ 143.022589][T11195] netlink: 'syz.4.1392': attribute type 6 has an invalid length. [ 143.346261][T11215] tipc: Enabled bearer , priority 0 [ 143.358209][T11215] syzkaller0: entered promiscuous mode [ 143.369973][T11215] syzkaller0: entered allmulticast mode [ 143.393694][T11215] tipc: Resetting bearer [ 143.402301][T11214] tipc: Resetting bearer [ 143.422897][T11214] tipc: Disabling bearer [ 144.342642][T11294] openvswitch: netlink: Message has 8 unknown bytes. [ 144.780161][T11340] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 144.953399][T11358] vlan0: entered promiscuous mode [ 144.962785][T11358] gretap0: entered promiscuous mode [ 145.036076][T11370] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 145.590001][T11421] netlink: 'syz.4.1498': attribute type 15 has an invalid length. [ 146.106751][T11455] __nla_validate_parse: 20 callbacks suppressed [ 146.106763][T11455] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1513'. [ 146.339380][T11477] netlink: 'syz.2.1524': attribute type 3 has an invalid length. [ 146.368848][T11477] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1524'. [ 146.439161][T11487] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1527'. [ 146.456867][T11489] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1528'. [ 146.488531][T11489] bridge0: port 1(batadv1) entered blocking state [ 146.502365][T11489] bridge0: port 1(batadv1) entered disabled state [ 146.511842][T11489] batadv1: entered allmulticast mode [ 146.521120][T11489] batadv1: entered promiscuous mode [ 146.617455][T11502] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1533'. [ 146.741642][T11517] netlink: 'syz.1.1539': attribute type 10 has an invalid length. [ 146.753499][T11517] macvlan1: entered allmulticast mode [ 146.759168][T11517] veth1_vlan: entered allmulticast mode [ 146.831383][T11526] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1538'. [ 146.867099][T11530] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1543'. [ 146.999012][ T6183] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 147.008303][ T6183] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 147.761948][T11591] ------------[ cut here ]------------ [ 147.768321][T11591] verifier bug: REG INVARIANTS VIOLATION (true_reg1): range bounds violation u64=[0xffffdfcd, 0xffffffffffffdfcc] s64=[0x80000000ffffdfcd, 0x7fffffffffffdfcc] u32=[0xffffdfcd, 0xffffdfcc] s32=[0xffffdfcd, 0xffffdfcc] var_off=(0xffffdfcc, 0xffffffff00000000)(1) [ 147.799048][T11591] WARNING: CPU: 0 PID: 11591 at kernel/bpf/verifier.c:2733 reg_bounds_sanity_check+0x6e6/0xc20 [ 147.809839][T11591] Modules linked in: [ 147.814946][T11591] CPU: 0 UID: 0 PID: 11591 Comm: syz.4.1572 Not tainted syzkaller #0 PREEMPT(full) [ 147.824753][T11591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 147.835257][T11591] RIP: 0010:reg_bounds_sanity_check+0x6e6/0xc20 [ 147.841977][T11591] Code: 24 20 4c 8b 44 24 60 4c 8b 4c 24 58 41 ff 75 00 53 41 57 55 ff 74 24 38 ff 74 24 70 ff 74 24 40 e8 2f 35 aa ff 48 83 c4 38 90 <0f> 0b 90 90 48 bb 00 00 00 00 00 fc ff df 4d 89 f7 4c 8b 74 24 08 [ 147.861836][T11591] RSP: 0018:ffffc9001a9d6f08 EFLAGS: 00010282 [ 147.868354][T11591] RAX: c37ecf5aa43ed900 RBX: 00000000ffffdfcc RCX: 0000000000080000 [ 147.876689][T11591] RDX: ffffc9000c1fa000 RSI: 000000000001354c RDI: 000000000001354d [ 147.884972][T11591] RBP: 00000000ffffdfcd R08: 0000000000000003 R09: 0000000000000004 [ 147.893201][T11591] R10: dffffc0000000000 R11: fffffbfff1bfa1ec R12: ffff8880302ee258 [ 147.901218][T11591] R13: ffff8880302ee278 R14: ffff8880302ee290 R15: 00000000ffffdfcc [ 147.909219][T11591] FS: 00007f38db0776c0(0000) GS:ffff888125c18000(0000) knlGS:0000000000000000 [ 147.918164][T11591] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 147.924878][T11591] CR2: 00007f166ece56c0 CR3: 00000000223c4000 CR4: 00000000003526f0 [ 147.932851][T11591] Call Trace: [ 147.936153][T11591] [ 147.939083][T11591] reg_set_min_max+0x214/0x300 [ 147.943870][T11591] check_cond_jmp_op+0x1625/0x2910 [ 147.948989][T11591] ? __pfx_check_cond_jmp_op+0x10/0x10 [ 147.954460][T11591] ? do_check+0x4531/0xe520 [ 147.958963][T11591] ? kfree+0x18e/0x440 [ 147.963016][T11591] do_check+0x6751/0xe520 [ 147.967364][T11591] ? __pfx_do_check+0x10/0x10 [ 147.972027][T11591] ? init_func_state+0x1ddf/0x2d20 [ 147.977151][T11591] do_check_common+0x1949/0x24f0 [ 147.982084][T11591] bpf_check+0x1746a/0x1d2d0 [ 147.986691][T11591] ? kernel_text_address+0xa5/0xe0 [ 147.991793][T11591] ? __kernel_text_address+0xd/0x40 [ 147.997026][T11591] ? unwind_get_return_address+0x4d/0x90 [ 148.002667][T11591] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 148.009082][T11591] ? arch_stack_walk+0xfc/0x150 [ 148.013983][T11591] ? __mutex_trylock_common+0x153/0x260 [ 148.019528][T11591] ? __pfx___mutex_trylock_common+0x10/0x10 [ 148.025430][T11591] ? trace_contention_end+0x39/0x120 [ 148.030698][T11591] ? rcu_is_watching+0x15/0xb0 [ 148.035493][T11591] ? css_rstat_updated+0x23a/0x4f0 [ 148.040603][T11591] ? __pfx_css_rstat_updated+0x10/0x10 [ 148.046070][T11591] ? pcpu_memcg_post_alloc_hook+0x6b/0x520 [ 148.051862][T11591] ? __pfx_bpf_check+0x10/0x10 [ 148.056628][T11591] ? rcu_is_watching+0x15/0xb0 [ 148.061377][T11591] ? ktime_get_with_offset+0x8c/0x2a0 [ 148.066749][T11591] ? rcu_is_watching+0x15/0xb0 [ 148.071489][T11591] ? ktime_get_with_offset+0x8c/0x2a0 [ 148.076863][T11591] ? rcu_is_watching+0x15/0xb0 [ 148.081606][T11591] ? ktime_get_with_offset+0x8c/0x2a0 [ 148.087140][T11591] ? ktime_get_with_offset+0x8c/0x2a0 [ 148.092520][T11591] ? seqcount_lockdep_reader_access+0x175/0x1c0 [ 148.098762][T11591] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 148.105354][T11591] ? rcu_is_watching+0x15/0xb0 [ 148.110101][T11591] ? lock_release+0x4b/0x3e0 [ 148.114718][T11591] ? __might_fault+0xb0/0x130 [ 148.119395][T11591] ? __asan_memset+0x22/0x50 [ 148.123989][T11591] ? bpf_obj_name_cpy+0x194/0x1e0 [ 148.129006][T11591] ? bpf_lsm_bpf_prog_load+0x9/0x20 [ 148.134213][T11591] ? security_bpf_prog_load+0x7f/0x310 [ 148.139676][T11591] bpf_prog_load+0x1318/0x1930 [ 148.144448][T11591] ? __pfx_bpf_prog_load+0x10/0x10 [ 148.149540][T11591] ? __might_fault+0xb0/0x130 [ 148.154225][T11591] ? lock_release+0x4b/0x3e0 [ 148.158818][T11591] ? __might_fault+0xb0/0x130 [ 148.163476][T11591] ? __might_fault+0xcc/0x130 [ 148.168217][T11591] ? bpf_lsm_bpf+0x9/0x20 [ 148.172548][T11591] ? security_bpf+0x7e/0x300 [ 148.177136][T11591] __sys_bpf+0x528/0x870 [ 148.181360][T11591] ? __pfx___sys_bpf+0x10/0x10 [ 148.186120][T11591] ? rcu_is_watching+0x15/0xb0 [ 148.190867][T11591] __x64_sys_bpf+0x7c/0x90 [ 148.195322][T11591] do_syscall_64+0xfa/0x3b0 [ 148.199822][T11591] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.205894][T11591] ? clear_bhb_loop+0x60/0xb0 [ 148.210552][T11591] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.216442][T11591] RIP: 0033:0x7f38da18ebe9 [ 148.220837][T11591] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 148.240475][T11591] RSP: 002b:00007f38db077038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 148.248955][T11591] RAX: ffffffffffffffda RBX: 00007f38da3b5fa0 RCX: 00007f38da18ebe9 [ 148.256957][T11591] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 148.264943][T11591] RBP: 00007f38da211e19 R08: 0000000000000000 R09: 0000000000000000 [ 148.272893][T11591] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 148.280860][T11591] R13: 00007f38da3b6038 R14: 00007f38da3b5fa0 R15: 00007ffddab2ef18 [ 148.288838][T11591] [ 148.291838][T11591] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 148.299097][T11591] CPU: 0 UID: 0 PID: 11591 Comm: syz.4.1572 Not tainted syzkaller #0 PREEMPT(full) [ 148.308441][T11591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 148.318474][T11591] Call Trace: [ 148.321734][T11591] [ 148.324650][T11591] dump_stack_lvl+0x99/0x250 [ 148.329227][T11591] ? __asan_memcpy+0x40/0x70 [ 148.333816][T11591] ? __pfx_dump_stack_lvl+0x10/0x10 [ 148.339013][T11591] ? __pfx__printk+0x10/0x10 [ 148.343588][T11591] vpanic+0x281/0x750 [ 148.347551][T11591] ? __pfx__printk+0x10/0x10 [ 148.352125][T11591] ? __pfx_vpanic+0x10/0x10 [ 148.356615][T11591] ? is_bpf_text_address+0x26/0x2b0 [ 148.361804][T11591] panic+0xb9/0xc0 [ 148.365509][T11591] ? __pfx_panic+0x10/0x10 [ 148.369917][T11591] __warn+0x31b/0x4b0 [ 148.373889][T11591] ? reg_bounds_sanity_check+0x6e6/0xc20 [ 148.379523][T11591] ? reg_bounds_sanity_check+0x6e6/0xc20 [ 148.385144][T11591] report_bug+0x2be/0x4f0 [ 148.389461][T11591] ? reg_bounds_sanity_check+0x6e6/0xc20 [ 148.395083][T11591] ? reg_bounds_sanity_check+0x6e6/0xc20 [ 148.400704][T11591] ? reg_bounds_sanity_check+0x6e8/0xc20 [ 148.406322][T11591] handle_bug+0x84/0x160 [ 148.410549][T11591] exc_invalid_op+0x1a/0x50 [ 148.415036][T11591] asm_exc_invalid_op+0x1a/0x20 [ 148.419867][T11591] RIP: 0010:reg_bounds_sanity_check+0x6e6/0xc20 [ 148.426097][T11591] Code: 24 20 4c 8b 44 24 60 4c 8b 4c 24 58 41 ff 75 00 53 41 57 55 ff 74 24 38 ff 74 24 70 ff 74 24 40 e8 2f 35 aa ff 48 83 c4 38 90 <0f> 0b 90 90 48 bb 00 00 00 00 00 fc ff df 4d 89 f7 4c 8b 74 24 08 [ 148.445684][T11591] RSP: 0018:ffffc9001a9d6f08 EFLAGS: 00010282 [ 148.451737][T11591] RAX: c37ecf5aa43ed900 RBX: 00000000ffffdfcc RCX: 0000000000080000 [ 148.459689][T11591] RDX: ffffc9000c1fa000 RSI: 000000000001354c RDI: 000000000001354d [ 148.467640][T11591] RBP: 00000000ffffdfcd R08: 0000000000000003 R09: 0000000000000004 [ 148.475592][T11591] R10: dffffc0000000000 R11: fffffbfff1bfa1ec R12: ffff8880302ee258 [ 148.483547][T11591] R13: ffff8880302ee278 R14: ffff8880302ee290 R15: 00000000ffffdfcc [ 148.491518][T11591] reg_set_min_max+0x214/0x300 [ 148.496273][T11591] check_cond_jmp_op+0x1625/0x2910 [ 148.501382][T11591] ? __pfx_check_cond_jmp_op+0x10/0x10 [ 148.506827][T11591] ? do_check+0x4531/0xe520 [ 148.511317][T11591] ? kfree+0x18e/0x440 [ 148.515373][T11591] do_check+0x6751/0xe520 [ 148.519711][T11591] ? __pfx_do_check+0x10/0x10 [ 148.524373][T11591] ? init_func_state+0x1ddf/0x2d20 [ 148.529471][T11591] do_check_common+0x1949/0x24f0 [ 148.534400][T11591] bpf_check+0x1746a/0x1d2d0 [ 148.538975][T11591] ? kernel_text_address+0xa5/0xe0 [ 148.544077][T11591] ? __kernel_text_address+0xd/0x40 [ 148.549273][T11591] ? unwind_get_return_address+0x4d/0x90 [ 148.554887][T11591] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 148.561030][T11591] ? arch_stack_walk+0xfc/0x150 [ 148.565879][T11591] ? __mutex_trylock_common+0x153/0x260 [ 148.571410][T11591] ? __pfx___mutex_trylock_common+0x10/0x10 [ 148.577284][T11591] ? trace_contention_end+0x39/0x120 [ 148.582551][T11591] ? rcu_is_watching+0x15/0xb0 [ 148.587297][T11591] ? css_rstat_updated+0x23a/0x4f0 [ 148.592390][T11591] ? __pfx_css_rstat_updated+0x10/0x10 [ 148.597832][T11591] ? pcpu_memcg_post_alloc_hook+0x6b/0x520 [ 148.603630][T11591] ? __pfx_bpf_check+0x10/0x10 [ 148.608373][T11591] ? rcu_is_watching+0x15/0xb0 [ 148.613116][T11591] ? ktime_get_with_offset+0x8c/0x2a0 [ 148.618467][T11591] ? rcu_is_watching+0x15/0xb0 [ 148.623212][T11591] ? ktime_get_with_offset+0x8c/0x2a0 [ 148.628567][T11591] ? rcu_is_watching+0x15/0xb0 [ 148.633315][T11591] ? ktime_get_with_offset+0x8c/0x2a0 [ 148.638673][T11591] ? ktime_get_with_offset+0x8c/0x2a0 [ 148.644028][T11591] ? seqcount_lockdep_reader_access+0x175/0x1c0 [ 148.650259][T11591] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 148.656832][T11591] ? rcu_is_watching+0x15/0xb0 [ 148.661575][T11591] ? lock_release+0x4b/0x3e0 [ 148.666154][T11591] ? __might_fault+0xb0/0x130 [ 148.670819][T11591] ? __asan_memset+0x22/0x50 [ 148.675396][T11591] ? bpf_obj_name_cpy+0x194/0x1e0 [ 148.680399][T11591] ? bpf_lsm_bpf_prog_load+0x9/0x20 [ 148.685582][T11591] ? security_bpf_prog_load+0x7f/0x310 [ 148.691043][T11591] bpf_prog_load+0x1318/0x1930 [ 148.695806][T11591] ? __pfx_bpf_prog_load+0x10/0x10 [ 148.700908][T11591] ? __might_fault+0xb0/0x130 [ 148.705574][T11591] ? lock_release+0x4b/0x3e0 [ 148.710151][T11591] ? __might_fault+0xb0/0x130 [ 148.714814][T11591] ? __might_fault+0xcc/0x130 [ 148.719483][T11591] ? bpf_lsm_bpf+0x9/0x20 [ 148.723804][T11591] ? security_bpf+0x7e/0x300 [ 148.728400][T11591] __sys_bpf+0x528/0x870 [ 148.732629][T11591] ? __pfx___sys_bpf+0x10/0x10 [ 148.737391][T11591] ? rcu_is_watching+0x15/0xb0 [ 148.742151][T11591] __x64_sys_bpf+0x7c/0x90 [ 148.746553][T11591] do_syscall_64+0xfa/0x3b0 [ 148.751046][T11591] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.757098][T11591] ? clear_bhb_loop+0x60/0xb0 [ 148.761769][T11591] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.767644][T11591] RIP: 0033:0x7f38da18ebe9 [ 148.772043][T11591] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 148.791637][T11591] RSP: 002b:00007f38db077038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 148.800039][T11591] RAX: ffffffffffffffda RBX: 00007f38da3b5fa0 RCX: 00007f38da18ebe9 [ 148.807997][T11591] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 148.815954][T11591] RBP: 00007f38da211e19 R08: 0000000000000000 R09: 0000000000000000 [ 148.823914][T11591] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 148.831873][T11591] R13: 00007f38da3b6038 R14: 00007f38da3b5fa0 R15: 00007ffddab2ef18 [ 148.839836][T11591] [ 148.843059][T11591] Kernel Offset: disabled [ 148.847361][T11591] Rebooting in 86400 seconds..