last executing test programs: 1.69679751s ago: executing program 0 (id=4216): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) setsockopt$inet6_int(r0, 0x29, 0x3a, &(0x7f0000000040)=0x8, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@mcast2, @in=@local, 0x4e20, 0x400, 0x4e21, 0x0, 0x2, 0x80, 0x40, 0x2f}, {0xfff, 0x401, 0x7, 0x1, 0x5, 0x2, 0x9277, 0xa676}, {0x80000000, 0x6, 0xffff, 0x5}, 0x27, 0x6e6bb2, 0x2, 0x1, 0x3, 0x1}, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4d2, 0x32}, 0x2, @in6=@remote, 0x3504, 0x10b43197a60a3a06, 0x2, 0x2, 0x81, 0xffffffa3, 0x2}}, 0xe8) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 1.556391012s ago: executing program 4 (id=4221): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0x23}, 0x1c) 1.495535287s ago: executing program 1 (id=4223): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) 1.344945608s ago: executing program 1 (id=4228): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000080)=0x3, 0x4) sendto$inet(r0, &(0x7f0000000140)="f461c5bb", 0x4, 0x4004, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) recvfrom$inet(r0, 0x0, 0x0, 0x10040, 0x0, 0x0) 1.241854234s ago: executing program 1 (id=4230): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001f40)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000300)}, 0x8000) setsockopt$sock_attach_bpf(r0, 0x1, 0x4c, &(0x7f00000001c0), 0x4) bind$unix(r1, &(0x7f0000000340)=@abs={0x1, 0x0, 0x4e22}, 0x6e) recvmsg$unix(r0, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x0) 755.116611ms ago: executing program 0 (id=4244): bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x5, 0x1, 0x4, 0xd, 0x0, 0x1, 0xff}, 0x50) close(0x3) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'geneve0\x00', 0x1000}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800020001"], 0x50) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) 709.748152ms ago: executing program 3 (id=4245): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x11, &(0x7f0000000400)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x87}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 643.94166ms ago: executing program 3 (id=4247): socket$inet6(0xa, 0x3, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace00000000000000002100000002ff020000000000000000000000000001"], 0x0) 630.695182ms ago: executing program 4 (id=4248): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x3, [@func_proto={0x0, 0x0, 0x0, 0xd, 0xa}, @enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x2, 0x2}]}]}, {0x0, [0x5f]}}, &(0x7f0000000f40)=""/4089, 0x3b, 0xff9, 0x6, 0xfffffffa}, 0x28) 577.855985ms ago: executing program 0 (id=4249): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x881}, 0x0) 557.395421ms ago: executing program 4 (id=4250): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f00000000c0)=0x2, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x80, @loopback, 0x7ff}, 0x1c) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @loopback, 0xffffffff}, 0x1c) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e22, @multicast2}, 0x10) listen(r0, 0x7) 549.693434ms ago: executing program 2 (id=4251): syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x10001, 0x0, 0x1}}}}}, 0x0) 545.513006ms ago: executing program 3 (id=4252): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x2, 0x2, &(0x7f0000000100)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x9e94}, @exit], &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) 472.077624ms ago: executing program 2 (id=4253): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000002c0)=[@in6={0xa, 0x4e21, 0x383, @dev={0xfe, 0x80, '\x00', 0x3c}, 0x4}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000"], 0x30}], 0x1, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001580)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}], 0x1, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000400)={r4, 0x3}, 0x8) 448.852403ms ago: executing program 4 (id=4254): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) setsockopt$inet6_int(r0, 0x29, 0x3a, &(0x7f0000000040)=0x8, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@mcast2, @in=@local, 0x4e20, 0x400, 0x4e21, 0x0, 0x2, 0x80, 0x40, 0x2f}, {0xfff, 0x401, 0x7, 0x1, 0x5, 0x2, 0x9277, 0xa676}, {0x80000000, 0x6, 0xffff, 0x5}, 0x27, 0x6e6bb2, 0x2, 0x1, 0x3, 0x1}, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4d2, 0x32}, 0x2, @in6=@remote, 0x3504, 0x10b43197a60a3a06, 0x2, 0x2, 0x81, 0xffffffa3, 0x2}}, 0xe8) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 389.623451ms ago: executing program 3 (id=4255): bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x61680, 0x20, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r1}, 0x10) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) close(r2) 382.514539ms ago: executing program 0 (id=4256): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, 0x0, 0x4000094) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x40000) listen(r0, 0x2) syz_emit_ethernet(0x56, &(0x7f00000002c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x20, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x7fff, 0x4}]}}}}}}}}, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000000)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x20, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x20, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}]}}}}}}}}, 0x0) 371.925324ms ago: executing program 1 (id=4257): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x4, r2, 0x1, 0xfe, 0x6, @remote}, 0x14) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000004c0)={'syz_tun\x00'}) bind$packet(r3, 0x0, 0x0) syz_emit_ethernet(0x16, &(0x7f0000000380)={@local, @broadcast, @void, {@llc={0x4, {@snap={0xa8, 0xab, '5', '\x00', 0x86dd}}}}}, 0x0) 316.522942ms ago: executing program 2 (id=4258): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x11, &(0x7f0000000400)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x87}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 310.29416ms ago: executing program 4 (id=4259): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000002e00)={0xc, 0x1c, &(0x7f0000000680)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x17}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x401}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 258.539825ms ago: executing program 0 (id=4260): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x3, [@func_proto={0x0, 0x0, 0x0, 0xd, 0xa}, @enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x2, 0x2}]}]}, {0x0, [0x5f]}}, &(0x7f0000000f40)=""/4089, 0x3b, 0xff9, 0x6, 0xfffffffa}, 0x28) 257.825885ms ago: executing program 3 (id=4261): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x4, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x2, 0x2}]}]}, {0x0, [0x2e, 0x2e]}}, &(0x7f0000000f40)=""/4089, 0x30, 0xff9, 0x8, 0xfffffffa}, 0x28) 257.580851ms ago: executing program 2 (id=4262): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0x23}, 0x1c) 155.61281ms ago: executing program 1 (id=4263): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x10}) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x10001, 0x0, 0x1}}}}}, 0x0) 128.779572ms ago: executing program 2 (id=4264): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f00000000c0)=0x2, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x80, @loopback, 0x7ff}, 0x1c) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @loopback, 0xffffffff}, 0x1c) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e22, @multicast2}, 0x10) listen(r0, 0x7) 128.557012ms ago: executing program 4 (id=4265): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000019c0)=@newtfilter={0x80, 0x2c, 0xd27, 0x70bd26, 0x8000007, {0x0, 0x0, 0x0, r3, {0xfff2, 0x6}, {}, {0x6, 0xa}}, [@filter_kind_options=@f_bpf={{0x8}, {0x54, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_POLICE={0x48, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0xe}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7b6c, 0x20000006, 0x0, 0xdb, 0x19, {0x8, 0x1, 0x800, 0x0, 0x5, 0x2}, {0x4, 0x1, 0x2, 0x0, 0x0, 0x7ff}, 0xaef, 0x9, 0x40}}]}]}}]}, 0x80}, 0x1, 0x0, 0x0, 0x24008044}, 0x0) 107.706957ms ago: executing program 3 (id=4266): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x881}, 0x0) 103.532684ms ago: executing program 0 (id=4267): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001f40)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000300)}, 0x8000) setsockopt$sock_attach_bpf(r0, 0x1, 0x4c, &(0x7f00000001c0), 0x4) bind$unix(r1, &(0x7f0000000340)=@abs={0x1, 0x0, 0x4e22}, 0x6e) recvmsg$unix(r0, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x0) 4.827745ms ago: executing program 2 (id=4268): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000002c0)=[@in6={0xa, 0x4e21, 0x383, @dev={0xfe, 0x80, '\x00', 0x3c}, 0x4}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000"], 0x30}], 0x1, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001580)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}], 0x1, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000400)={r4, 0x3}, 0x8) 0s ago: executing program 1 (id=4269): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) setsockopt$inet6_int(r0, 0x29, 0x3a, &(0x7f0000000040)=0x8, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@mcast2, @in=@local, 0x4e20, 0x400, 0x4e21, 0x0, 0x2, 0x80, 0x40, 0x2f}, {0xfff, 0x401, 0x7, 0x1, 0x5, 0x2, 0x9277, 0xa676}, {0x80000000, 0x6, 0xffff, 0x5}, 0x27, 0x6e6bb2, 0x2, 0x1, 0x3, 0x1}, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4d2, 0x32}, 0x2, @in6=@remote, 0x3504, 0x10b43197a60a3a06, 0x2, 0x2, 0x81, 0xffffffa3, 0x2}}, 0xe8) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) kernel console output (not intermixed with test programs): adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 207.404417][ T3482] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 207.552074][T11028] veth0: entered promiscuous mode [ 207.761814][T11042] __nla_validate_parse: 29 callbacks suppressed [ 207.761832][T11042] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1262'. [ 207.828419][T11026] veth0: left promiscuous mode [ 207.985397][T11051] syzkaller1: entered promiscuous mode [ 208.000311][T11051] syzkaller1: entered allmulticast mode [ 208.034649][T11055] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1266'. [ 208.074191][T11055] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1266'. [ 208.159529][T11062] validate_nla: 1 callbacks suppressed [ 208.159544][T11062] netlink: 'syz.1.1268': attribute type 12 has an invalid length. [ 208.234437][T11064] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1270'. [ 208.260277][T11066] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1269'. [ 208.322476][T11071] netlink: 'syz.1.1268': attribute type 1 has an invalid length. [ 208.378064][T11070] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1268'. [ 208.391405][T11073] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1271'. [ 208.426356][T11070] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 208.875590][T11092] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1276'. [ 208.915594][T11092] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1276'. [ 208.934628][T11093] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1278'. [ 208.944389][T11093] tipc: Enabling of bearer rejected, already enabled [ 208.964222][T11092] netlink: 'syz.2.1276': attribute type 11 has an invalid length. [ 210.029991][T11148] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 0, id = 0 [ 210.642261][ T5985] IPVS: starting estimator thread 0... [ 210.669554][T11163] tipc: Enabled bearer , priority 10 [ 210.700572][T11165] tipc: Failed to remove unknown binding: 66,1,1/3417268089:3470658819/3470658821 [ 210.726904][T11165] tipc: Failed to remove unknown binding: 66,1,1/3417268089:3470658819/3470658821 [ 210.733964][T11161] IPVS: using max 28 ests per chain, 67200 per kthread [ 210.901068][T11173] netlink: 'syz.3.1301': attribute type 10 has an invalid length. [ 211.034961][T11183] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551607) [ 211.053730][T11187] netlink: 'syz.3.1301': attribute type 11 has an invalid length. [ 211.054686][T11183] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647 [ 211.089836][T11185] bridge0: port 4(veth0_to_bridge) entered blocking state [ 211.098227][T11185] bridge0: port 4(veth0_to_bridge) entered disabled state [ 211.107116][T11185] veth0_to_bridge: entered allmulticast mode [ 211.115156][T11185] veth0_to_bridge: entered promiscuous mode [ 212.050220][T11218] batadv0: left promiscuous mode [ 212.071377][T11218] batadv0: left allmulticast mode [ 212.118671][T11218] ip6gre2: left allmulticast mode [ 212.140968][T11218] geneve2: left allmulticast mode [ 212.176142][T11218] mac80211_hwsim hwsim11 wlan1: left promiscuous mode [ 212.186198][T11218] macvtap1: left promiscuous mode [ 212.298630][T11246] netlink: 'syz.0.1319': attribute type 8 has an invalid length. [ 212.346320][T11252] netlink: 'syz.0.1321': attribute type 10 has an invalid length. [ 212.354476][T11251] netlink: 'syz.0.1321': attribute type 10 has an invalid length. [ 212.359753][T11251] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 212.427503][T11255] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 212.770543][T11277] __nla_validate_parse: 11 callbacks suppressed [ 212.770563][T11277] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1329'. [ 212.789219][T11277] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1329'. [ 212.799124][T11277] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1329'. [ 212.848214][T11280] netlink: 'syz.3.1328': attribute type 1 has an invalid length. [ 212.857099][T11280] netlink: 160 bytes leftover after parsing attributes in process `syz.3.1328'. [ 212.867872][T11280] netlink: 'syz.3.1328': attribute type 1 has an invalid length. [ 212.893880][T11280] netlink: 'syz.3.1328': attribute type 2 has an invalid length. [ 213.004547][T11290] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1330'. [ 213.341575][T11313] netlink: 'syz.0.1338': attribute type 16 has an invalid length. [ 213.358004][T11315] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1336'. [ 213.374244][T11313] netlink: 'syz.0.1338': attribute type 17 has an invalid length. [ 213.387153][T11314] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1337'. [ 213.398251][T11316] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1338'. [ 213.423414][T11315] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1336'. [ 213.618717][T11320] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1339'. [ 214.515223][T11373] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 214.610871][T11393] netlink: 'syz.4.1357': attribute type 1 has an invalid length. [ 214.760072][T11397] netlink: 'syz.1.1359': attribute type 1 has an invalid length. [ 214.888057][ T30] audit: type=1107 audit(1759062317.531:3): pid=11395 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 215.074278][T11410] netlink: 'syz.0.1362': attribute type 1 has an invalid length. [ 215.240780][T11410] bond3: entered promiscuous mode [ 215.275235][T11410] 8021q: adding VLAN 0 to HW filter on device bond3 [ 215.372783][T11413] 8021q: adding VLAN 0 to HW filter on device bond4 [ 215.396451][T11413] bond3: (slave bond4): making interface the new active one [ 215.426071][T11413] bond4: entered promiscuous mode [ 215.443073][T11425] netlink: 'syz.2.1365': attribute type 3 has an invalid length. [ 215.452758][T11413] bond3: (slave bond4): Enslaving as an active interface with an up link [ 215.496844][T11420] geneve3: entered promiscuous mode [ 215.589202][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.602780][ T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.660942][ T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.690264][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.855682][T11447] syz_tun (unregistering): left allmulticast mode [ 215.934022][T11459] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode [ 215.943100][T11459] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode [ 216.050918][T11465] netlink: 'syz.1.1378': attribute type 18 has an invalid length. [ 216.846531][T11474] gre2: entered promiscuous mode [ 216.851512][T11474] gre2: entered allmulticast mode [ 216.887801][T11483] lo: entered promiscuous mode [ 216.892819][T11483] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 217.411864][T11519] tipc: Enabled bearer , priority 0 [ 217.447796][T11518] tipc: Disabling bearer [ 217.659162][T11534] tipc: Enabling of bearer rejected, already enabled [ 217.690562][T11534] tipc: Resetting bearer [ 217.886727][T11543] __nla_validate_parse: 20 callbacks suppressed [ 217.886745][T11543] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1400'. [ 217.983467][T11554] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1399'. [ 217.999978][T11553] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 218.158558][T11560] 8021q: adding VLAN 0 to HW filter on device team0 [ 218.173157][T11562] batadv0 speed is unknown, defaulting to 1000 [ 218.180673][T11562] batadv0 speed is unknown, defaulting to 1000 [ 218.188674][T11562] batadv0 speed is unknown, defaulting to 1000 [ 218.270300][T11562] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 218.341452][T11569] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 218.379005][T11569] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 218.397031][T11576] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1408'. [ 218.468264][T11562] batadv0 speed is unknown, defaulting to 1000 [ 218.478156][T11562] batadv0 speed is unknown, defaulting to 1000 [ 218.495497][T11562] batadv0 speed is unknown, defaulting to 1000 [ 218.514065][T11569] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 218.523986][T11569] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 218.572797][T11562] batadv0 speed is unknown, defaulting to 1000 [ 218.588103][T11562] batadv0 speed is unknown, defaulting to 1000 [ 218.651865][T11569] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 218.691074][T11569] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 218.774857][T11569] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 218.785363][T11569] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 218.946992][T11609] netlink: 'syz.1.1418': attribute type 1 has an invalid length. [ 219.008505][T11609] 8021q: adding VLAN 0 to HW filter on device bond4 [ 219.016987][ T8947] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 219.026006][ T8947] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 219.079034][T11608] 8021q: adding VLAN 0 to HW filter on device bond4 [ 219.089085][T11608] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 219.100794][T11608] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 219.160172][T11609] veth11: entered promiscuous mode [ 219.167866][T11177] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 219.177358][T11177] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 219.217863][T11624] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1422'. [ 219.223327][T11177] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 219.235334][T11624] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1422'. [ 219.248848][T11177] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 219.257947][T11624] netlink: 'syz.2.1422': attribute type 7 has an invalid length. [ 219.325301][T11177] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 219.351313][T11177] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 219.550045][T11647] netlink: 'syz.0.1428': attribute type 13 has an invalid length. [ 219.592571][T11650] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 219.611214][T11650] tipc: Enabled bearer , priority 0 [ 219.619323][T11650] syzkaller0: entered promiscuous mode [ 219.625364][T11650] syzkaller0: entered allmulticast mode [ 220.167808][T11650] tipc: Resetting bearer [ 220.197464][T11650] tipc: Disabling bearer [ 220.405497][T11664] tipc: Enabled bearer , priority 0 [ 220.570870][T11672] netlink: 'syz.0.1435': attribute type 1 has an invalid length. [ 220.624646][T11678] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1435'. [ 220.635407][T11664] syzkaller0: entered promiscuous mode [ 220.640980][T11664] syzkaller0: entered allmulticast mode [ 220.652510][T11664] tipc: Resetting bearer [ 220.697310][T11672] bond5: entered promiscuous mode [ 220.702362][T11672] bond5: entered allmulticast mode [ 220.712119][T11663] tipc: Resetting bearer [ 220.994420][T11683] netlink: 'syz.2.1439': attribute type 10 has an invalid length. [ 221.262303][T11717] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1446'. [ 221.318136][T11720] netlink: 'syz.3.1446': attribute type 7 has an invalid length. [ 221.548662][T11725] netlink: 'syz.3.1446': attribute type 10 has an invalid length. [ 221.556788][T11725] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1446'. [ 222.273944][T11663] tipc: Disabling bearer [ 222.293906][T11725] dummy0: entered promiscuous mode [ 222.299629][T11725] bridge0: port 2(dummy0) entered blocking state [ 222.325944][T11725] bridge0: port 2(dummy0) entered disabled state [ 222.332426][T11725] dummy0: entered allmulticast mode [ 222.365468][T11725] bridge0: port 2(dummy0) entered blocking state [ 222.371934][T11725] bridge0: port 2(dummy0) entered forwarding state [ 222.534944][T11733] tipc: Enabled bearer , priority 0 [ 222.546507][T11733] netlink: 'syz.2.1451': attribute type 21 has an invalid length. [ 222.554531][T11733] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1451'. [ 222.578190][T11733] tipc: Resetting bearer [ 222.863425][T11758] geneve3: left promiscuous mode [ 222.879885][T11758] gre2: left promiscuous mode [ 222.889950][T11758] gre2: left allmulticast mode [ 222.905077][T11758] veth11: left promiscuous mode [ 222.910319][T11179] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.932331][T11179] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.945688][T11768] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1461'. [ 222.963568][T11179] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.987993][T11179] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.108443][T11765] batadv0 speed is unknown, defaulting to 1000 [ 223.243287][T11787] netlink: 277 bytes leftover after parsing attributes in process `syz.3.1464'. [ 223.278576][T11785] tipc: Enabled bearer , priority 0 [ 223.380143][T11784] tipc: Disabling bearer [ 223.462336][T11797] tipc: Failed to remove unknown binding: 66,1,1/221957039:3451779962/3451779964 [ 223.480392][T11797] tipc: Failed to remove unknown binding: 66,1,1/221957039:3451779962/3451779964 [ 223.677189][T11808] IPVS: set_ctl: invalid protocol: 43 224.0.0.1:20001 [ 223.848411][T11820] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1475'. [ 223.927107][T11820] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1475'. [ 224.011144][T11827] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1477'. [ 224.045148][T11825] netlink: 'syz.4.1477': attribute type 11 has an invalid length. [ 224.060246][T11831] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1479'. [ 224.462789][T11857] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1486'. [ 224.619426][T11867] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1489'. [ 224.657792][T11867] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1489'. [ 224.692187][T11867] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1489'. [ 225.188650][T11885] batadv0 speed is unknown, defaulting to 1000 [ 226.232481][T11940] tipc: Enabling of bearer rejected, failed to enable media [ 226.482489][T11950] netlink: 'syz.2.1507': attribute type 29 has an invalid length. [ 226.525373][T11948] netlink: 'syz.2.1507': attribute type 29 has an invalid length. [ 226.806529][T11963] IPVS: set_ctl: invalid protocol: 42 172.20.20.187:20002 [ 227.050028][T11970] batadv0 speed is unknown, defaulting to 1000 [ 227.346241][T11988] 8021q: adding VLAN 0 to HW filter on device bond24 [ 227.372275][T11988] bridge0: port 1(bond24) entered blocking state [ 227.379558][T11988] bridge0: port 1(bond24) entered disabled state [ 227.387337][T11988] bond24: entered allmulticast mode [ 227.395346][T11988] bond24: entered promiscuous mode [ 227.429781][T12002] tipc: Enabling of bearer rejected, failed to enable media [ 227.600887][T12006] netlink: 'syz.2.1521': attribute type 13 has an invalid length. [ 227.729899][T12002] syzkaller0: entered promiscuous mode [ 227.741668][T12002] syzkaller0: entered allmulticast mode [ 228.129522][T12035] netlink: 'syz.4.1528': attribute type 4 has an invalid length. [ 228.160042][T12035] netlink: 'syz.4.1528': attribute type 4 has an invalid length. [ 228.243234][T12035] netlink: 'syz.4.1528': attribute type 1 has an invalid length. [ 228.445421][T12047] batadv0 speed is unknown, defaulting to 1000 [ 228.505695][T11179] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x9 [ 229.439887][T12100] __nla_validate_parse: 4 callbacks suppressed [ 229.439905][T12100] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1545'. [ 229.461679][T12102] ieee802154 phy0 wpan0: encryption failed: -22 [ 229.601956][T12115] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1546'. [ 229.645671][T12115] 8021q: adding VLAN 0 to HW filter on device bond25 [ 229.673397][T12115] 8021q: adding VLAN 0 to HW filter on device bond25 [ 229.680778][T12115] bond25: (slave sit1): The slave device specified does not support setting the MAC address [ 229.692187][T12115] bond25: (slave sit1): Error -95 calling set_mac_address [ 229.708976][T12121] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1546'. [ 229.716261][T12119] lo: entered allmulticast mode [ 229.722902][T12121] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1546'. [ 229.734578][T12121] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1546'. [ 229.745847][T12121] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1546'. [ 229.756947][T12121] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1546'. [ 229.766476][T12121] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1546'. [ 229.855178][T12125] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1549'. [ 229.865446][T12125] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1549'. [ 229.991925][T12131] batadv0 speed is unknown, defaulting to 1000 [ 230.757116][T12157] netlink: 'syz.3.1560': attribute type 27 has an invalid length. [ 230.998936][T12157] bridge0: port 2(dummy0) entered disabled state [ 231.048887][T12157] veth1_to_batadv: left allmulticast mode [ 231.069237][T12157] vlan2: left promiscuous mode [ 231.085970][T12157] tipc: Resetting bearer [ 231.101069][T12157] syzkaller0: left promiscuous mode [ 231.112975][T12157] syzkaller0: left allmulticast mode [ 231.159425][T12157] bond5: left promiscuous mode [ 231.260940][T12157] geneve2: left promiscuous mode [ 231.269942][T12157] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 231.277362][T12157] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 231.285204][T12157] macsec1: left promiscuous mode [ 231.290308][T12157] macsec1: left allmulticast mode [ 231.330978][T12176] tipc: Enabled bearer , priority 0 [ 231.375308][ T36] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 231.384330][ T36] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 231.394468][ T36] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 231.403230][ T36] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 231.455550][ T36] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 231.467496][ T36] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 231.481728][T12169] tipc: Disabling bearer [ 231.594598][ T36] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 231.602973][ T36] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 231.642813][T12192] tipc: Enabled bearer , priority 0 [ 231.664274][T12194] syzkaller0: entered promiscuous mode [ 231.670288][T12194] syzkaller0: entered allmulticast mode [ 231.702662][T12191] syzkaller0: entered promiscuous mode [ 231.709991][T12191] syzkaller0: entered allmulticast mode [ 231.736533][T12189] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 231.746187][T12198] Bluetooth: MGMT ver 1.23 [ 231.783719][T12189] tipc: Resetting bearer [ 231.829185][T12188] tipc: Resetting bearer [ 231.951548][T12188] tipc: Disabling bearer [ 232.720719][T12208] netlink: 'syz.0.1574': attribute type 1 has an invalid length. [ 232.731072][T12208] netlink: 'syz.0.1574': attribute type 4 has an invalid length. [ 232.741152][T12208] netlink: 'syz.0.1574': attribute type 1 has an invalid length. [ 232.750442][T12208] netlink: 'syz.0.1574': attribute type 4 has an invalid length. [ 232.838037][T12243] netlink: 'syz.3.1582': attribute type 13 has an invalid length. [ 232.853813][T12243] netlink: 'syz.3.1582': attribute type 17 has an invalid length. [ 233.186776][T12243] 8021q: adding VLAN 0 to HW filter on device bond0 [ 233.226159][T12243] 8021q: adding VLAN 0 to HW filter on device team0 [ 233.287895][T12252] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 233.512988][T12243] bridge0: port 2(dummy0) entered blocking state [ 233.519702][T12243] bridge0: port 2(dummy0) entered forwarding state [ 233.661981][T12243] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 233.722298][T12257] tipc: Enabling of bearer rejected, failed to enable media [ 233.732088][T12258] netlink: 'syz.0.1586': attribute type 15 has an invalid length. [ 233.775895][ T5184] Bluetooth: hci4: command 0x0405 tx timeout [ 233.784557][T12247] batadv0 speed is unknown, defaulting to 1000 [ 234.076888][T12275] 8021q: adding VLAN 0 to HW filter on device bond26 [ 234.475487][T12312] __nla_validate_parse: 13 callbacks suppressed [ 234.475506][T12312] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1598'. [ 234.535163][T12302] batadv0 speed is unknown, defaulting to 1000 [ 234.564550][T12312] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1598'. [ 234.724592][T12323] netlink: 4436 bytes leftover after parsing attributes in process `syz.3.1603'. [ 234.780064][T12323] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096 [ 234.921084][T12338] netlink: 'syz.0.1607': attribute type 10 has an invalid length. [ 235.144664][T12359] netlink: 'syz.4.1612': attribute type 13 has an invalid length. [ 235.171547][T12359] netlink: 'syz.4.1612': attribute type 17 has an invalid length. [ 235.199295][T12359] lo: left promiscuous mode [ 235.254455][T12363] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1614'. [ 235.321120][T12359] 8021q: adding VLAN 0 to HW filter on device bond0 [ 235.330969][T12359] 8021q: adding VLAN 0 to HW filter on device team0 [ 235.352048][T12367] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1614'. [ 235.364697][T12359] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 235.399114][T12365] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1615'. [ 235.444624][T12365] unsupported nlmsg_type 40 [ 235.511027][T12362] batadv0 speed is unknown, defaulting to 1000 [ 235.591751][T12372] tipc: Enabled bearer , priority 0 [ 235.620202][T12372] syzkaller0: entered promiscuous mode [ 235.634762][T12372] syzkaller0: entered allmulticast mode [ 235.669034][T12372] tipc: Resetting bearer [ 235.691184][T12371] tipc: Resetting bearer [ 235.732925][T12371] tipc: Disabling bearer [ 236.339579][T12395] syzkaller0: entered promiscuous mode [ 236.379686][T12395] syzkaller0: entered allmulticast mode [ 236.571009][T12405] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1625'. [ 237.742539][T12404] batadv0 speed is unknown, defaulting to 1000 [ 237.862140][T12423] netlink: 344 bytes leftover after parsing attributes in process `syz.0.1629'. [ 238.304346][T12450] sctp: [Deprecated]: syz.4.1634 (pid 12450) Use of struct sctp_assoc_value in delayed_ack socket option. [ 238.304346][T12450] Use struct sctp_sack_info instead [ 238.785174][T12480] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1639'. [ 239.272280][T12506] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 239.473251][T12518] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1650'. [ 239.674887][T12527] xfrm1: entered allmulticast mode [ 239.696100][T12529] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1653'. [ 239.723153][T12529] netlink: zone id is out of range [ 239.730069][T12534] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1654'. [ 239.741252][T12529] netlink: zone id is out of range [ 239.747037][T12529] netlink: get zone limit has 8 unknown bytes [ 239.759351][T12529] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1653'. [ 239.816725][T12529] macvtap2: entered promiscuous mode [ 239.822291][T12529] bond0: entered promiscuous mode [ 239.829679][T12529] bond_slave_0: entered promiscuous mode [ 239.864910][T12529] bond_slave_1: entered promiscuous mode [ 239.883210][T12529] macvtap2: entered allmulticast mode [ 239.899366][T12529] bond0: entered allmulticast mode [ 239.909471][T12529] bond_slave_0: entered allmulticast mode [ 239.923005][T12529] bond_slave_1: entered allmulticast mode [ 239.940269][T12529] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 240.011598][T12540] tipc: Enabled bearer , priority 0 [ 240.024216][T12538] syzkaller0: entered promiscuous mode [ 240.036060][T12538] syzkaller0: entered allmulticast mode [ 240.052913][T12516] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1649'. [ 240.108289][T12538] tipc: Resetting bearer [ 240.230245][T12538] tipc: Disabling bearer [ 245.896428][T12574] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1665'. [ 245.943028][T12573] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1666'. [ 246.289511][T12590] batadv0 speed is unknown, defaulting to 1000 [ 246.376351][T12594] batadv0 speed is unknown, defaulting to 1000 [ 246.728229][T12610] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1676'. [ 247.497993][T12637] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1683'. [ 247.562932][T12640] validate_nla: 1 callbacks suppressed [ 247.562949][T12640] netlink: 'syz.3.1683': attribute type 7 has an invalid length. [ 247.589618][T12639] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1684'. [ 247.644964][T12644] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1684'. [ 247.801434][T12649] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1686'. [ 247.887224][T12651] syzkaller1: entered promiscuous mode [ 247.892838][T12651] syzkaller1: entered allmulticast mode [ 247.962090][T12655] netlink: 140 bytes leftover after parsing attributes in process `syz.4.1687'. [ 247.994648][T12657] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1689'. [ 248.350353][T12672] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1693'. [ 249.544268][T12732] veth1_to_hsr: left allmulticast mode [ 249.562452][T12732] veth1_to_hsr: left promiscuous mode [ 249.590816][T12732] bond0: left allmulticast mode [ 249.599896][T12732] bond_slave_0: left allmulticast mode [ 249.606509][T12732] bond_slave_1: left allmulticast mode [ 249.612103][T12732] bond0: left promiscuous mode [ 249.617989][T12732] bond_slave_0: left promiscuous mode [ 249.641855][T12732] bond_slave_1: left promiscuous mode [ 249.765807][T12750] tipc: Enabling of bearer rejected, already enabled [ 250.380862][T12777] netlink: 'syz.4.1719': attribute type 10 has an invalid length. [ 250.422561][T12781] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 250.592761][T12786] bond0: (slave vlan2): Opening slave failed [ 250.642165][T12789] syzkaller0: entered promiscuous mode [ 250.651313][T12789] syzkaller0: entered allmulticast mode [ 250.671025][T12791] tipc: Enabling of bearer rejected, already enabled [ 250.829342][T12799] netlink: 'syz.3.1726': attribute type 1 has an invalid length. [ 250.885915][T12799] 8021q: adding VLAN 0 to HW filter on device bond7 [ 250.970954][T12801] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 251.005378][T12801] bond7: (slave batadv1): making interface the new active one [ 251.024963][T12801] bond7: (slave batadv1): Enslaving as an active interface with an up link [ 251.364992][T12821] netlink: 'syz.3.1731': attribute type 13 has an invalid length. [ 251.373481][T12821] netlink: 'syz.3.1731': attribute type 17 has an invalid length. [ 251.431708][T12821] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 251.486506][T12824] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 251.504857][T12823] __nla_validate_parse: 4 callbacks suppressed [ 251.504873][T12823] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1732'. [ 251.521452][T12823] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1732'. [ 251.555713][T12823] netlink: 'syz.4.1732': attribute type 4 has an invalid length. [ 251.562469][T12821] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 251.591100][T12820] batadv0 speed is unknown, defaulting to 1000 [ 251.591760][T12823] netlink: 'syz.4.1732': attribute type 4 has an invalid length. [ 251.645864][T12826] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 251.653128][T12826] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 251.660471][T12826] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 251.667750][T12826] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 251.675029][T12826] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 251.682280][T12826] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 251.689555][T12826] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 251.696825][T12826] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 251.728185][T12828] batadv0 speed is unknown, defaulting to 1000 [ 252.130767][T12833] batadv0 speed is unknown, defaulting to 1000 [ 252.222300][T12844] sctp: [Deprecated]: syz.0.1734 (pid 12844) Use of struct sctp_assoc_value in delayed_ack socket option. [ 252.222300][T12844] Use struct sctp_sack_info instead [ 253.121975][T12873] netlink: 'syz.1.1743': attribute type 10 has an invalid length. [ 253.147527][T12870] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1745'. [ 253.173026][T12873] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1743'. [ 253.200416][T12871] batadv0 speed is unknown, defaulting to 1000 [ 253.243010][T12885] netlink: 'syz.1.1743': attribute type 10 has an invalid length. [ 253.323564][T12889] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1750'. [ 253.445881][T12893] batadv0 speed is unknown, defaulting to 1000 [ 253.537351][T12898] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1749'. [ 253.554194][T12898] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1749'. [ 253.948536][T12915] netlink: 'syz.1.1756': attribute type 1 has an invalid length. [ 254.065185][T12925] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1756'. [ 254.137359][T12921] bond5: (slave geneve4): making interface the new active one [ 254.146327][T12921] bond5: (slave geneve4): Enslaving as an active interface with an up link [ 254.301359][T12943] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 254.330041][ T6506] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 254.394641][ T6506] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 254.441194][ T6506] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 254.473201][ T6506] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 254.799267][T12950] batadv0 speed is unknown, defaulting to 1000 [ 254.890494][T12976] netlink: 'syz.1.1769': attribute type 30 has an invalid length. [ 254.949081][T12944] batadv0 speed is unknown, defaulting to 1000 [ 254.965283][T12976] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 255.415094][T12992] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1772'. [ 255.436078][T12992] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1772'. [ 255.628625][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.815165][T13010] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 255.912038][T13016] macvtap0: entered promiscuous mode [ 255.928265][T13016] veth1_to_hsr: entered promiscuous mode [ 255.944723][T13016] macvtap0: entered allmulticast mode [ 255.960488][T13016] veth1_to_hsr: entered allmulticast mode [ 256.011858][T13021] macvtap1: entered promiscuous mode [ 256.020788][T13021] macvtap1: entered allmulticast mode [ 256.057985][T13017] macvtap1: entered promiscuous mode [ 256.064985][T13017] macvtap1: entered allmulticast mode [ 256.081077][ T30] audit: type=1107 audit(1759062358.721:4): pid=13027 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 256.099219][ T30] audit: type=1107 audit(1759062358.721:5): pid=13027 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 256.112241][ T30] audit: type=1107 audit(1759062358.721:6): pid=13027 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 256.125378][ T30] audit: type=1107 audit(1759062358.721:7): pid=13027 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 256.139464][ T30] audit: type=1107 audit(1759062358.721:8): pid=13027 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 256.152377][ T30] audit: type=1107 audit(1759062358.721:9): pid=13027 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 256.180072][ T30] audit: type=1107 audit(1759062358.721:10): pid=13027 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 256.221933][ T30] audit: type=1107 audit(1759062358.721:11): pid=13027 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 256.240039][ T30] audit: type=1107 audit(1759062358.721:12): pid=13027 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 256.255722][ T30] audit: type=1107 audit(1759062358.721:13): pid=13027 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 256.381683][T13046] batadv0 speed is unknown, defaulting to 1000 [ 256.960377][T13077] batadv0 speed is unknown, defaulting to 1000 [ 257.298686][T13092] batadv0 speed is unknown, defaulting to 1000 [ 258.090501][T13130] __nla_validate_parse: 5 callbacks suppressed [ 258.090519][T13130] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1807'. [ 258.152950][T13130] macvtap3: entered promiscuous mode [ 258.162664][T13130] bond0: entered promiscuous mode [ 258.173395][T13130] bond_slave_0: entered promiscuous mode [ 258.191767][T13130] bond_slave_1: entered promiscuous mode [ 258.217629][T13130] macvtap3: entered allmulticast mode [ 258.236202][T13130] bond0: entered allmulticast mode [ 258.261893][T13130] bond_slave_0: entered allmulticast mode [ 258.294625][T13130] bond_slave_1: entered allmulticast mode [ 258.315600][T13130] 8021q: adding VLAN 0 to HW filter on device macvtap3 [ 258.346550][T13133] bond0: left allmulticast mode [ 258.360330][T13133] bond_slave_0: left allmulticast mode [ 258.367250][T13133] bond_slave_1: left allmulticast mode [ 258.375243][T13133] bond0: left promiscuous mode [ 258.380403][T13133] bond_slave_0: left promiscuous mode [ 258.387740][T13133] bond_slave_1: left promiscuous mode [ 258.887481][T13155] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 259.020030][T13170] batadv0 speed is unknown, defaulting to 1000 [ 259.189392][T13174] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1821'. [ 259.217187][T13174] netlink: 'syz.4.1821': attribute type 10 has an invalid length. [ 259.226675][T13172] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 259.293951][ T5184] Bluetooth: hci4: command 0x0405 tx timeout [ 259.307031][ T5985] IPVS: starting estimator thread 0... [ 259.403480][T13181] IPVS: using max 24 ests per chain, 57600 per kthread [ 259.421422][T13180] bond0: Device is already in use. [ 259.512448][T13191] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1826'. [ 259.544886][T13191] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1826'. [ 259.563976][T13191] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1826'. [ 259.937096][T13213] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1835'. [ 260.244781][T13236] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1841'. [ 260.263039][T13236] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1841'. [ 260.304866][T13236] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1841'. [ 260.385567][T13253] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1845'. [ 260.436600][T13253] netlink: 'syz.0.1845': attribute type 1 has an invalid length. [ 260.554396][T13259] netlink: 'syz.1.1848': attribute type 39 has an invalid length. [ 260.617652][T13263] netlink: 'syz.1.1848': attribute type 1 has an invalid length. [ 260.903608][ T5871] Bluetooth: hci0: command tx timeout [ 261.349950][T13307] syzkaller1: entered promiscuous mode [ 261.356126][T13307] syzkaller1: entered allmulticast mode [ 261.482000][T13313] netlink: 'syz.1.1858': attribute type 2 has an invalid length. [ 261.490650][T13313] netlink: 'syz.1.1858': attribute type 1 has an invalid length. [ 262.314832][T13338] netlink: 'syz.3.1863': attribute type 16 has an invalid length. [ 262.322731][T13338] netlink: 'syz.3.1863': attribute type 17 has an invalid length. [ 262.350660][T13338] net_ratelimit: 3258 callbacks suppressed [ 262.350675][T13338] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 262.802090][T13355] netlink: 'syz.0.1870': attribute type 2 has an invalid length. [ 263.393147][T13406] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 263.688054][T13418] bond7 (unregistering): Released all slaves [ 263.787855][T13423] tipc: Enabled bearer , priority 0 [ 263.799369][T13415] syzkaller0: entered promiscuous mode [ 263.813417][T13415] syzkaller0: entered allmulticast mode [ 263.847374][T13416] batadv0 speed is unknown, defaulting to 1000 [ 263.886136][T13427] __nla_validate_parse: 10 callbacks suppressed [ 263.886152][T13427] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1890'. [ 263.929339][T13427] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1890'. [ 264.325076][T13454] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1898'. [ 264.335671][T13459] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1899'. [ 264.418307][T13462] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1900'. [ 264.430060][T13464] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1900'. [ 264.455009][T13413] tipc: Resetting bearer [ 264.629738][T13413] tipc: Disabling bearer [ 264.766500][T13476] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1904'. [ 264.776636][T13480] netlink: 'syz.3.1905': attribute type 10 has an invalid length. [ 264.805775][T13480] bridge0: port 2(dummy0) entered disabled state [ 264.813011][T13482] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1906'. [ 264.861691][T13482] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1906'. [ 265.324907][T13510] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1913'. [ 265.645201][T13535] atomic_op ffff8880538d9998 conn xmit_atomic 0000000000000000 [ 265.905973][T13546] ieee802154 phy0 wpan0: encryption failed: -22 [ 265.922635][T13545] netlink: 'syz.2.1922': attribute type 10 has an invalid length. [ 265.943928][T13548] ieee802154 phy0 wpan0: encryption failed: -22 [ 266.647362][T13575] batadv0 speed is unknown, defaulting to 1000 [ 267.034435][T13596] batadv0 speed is unknown, defaulting to 1000 [ 267.465811][T13627] batadv0 speed is unknown, defaulting to 1000 [ 268.811358][T13705] RDS: rds_bind could not find a transport for fc01::, load rds_tcp or rds_rdma? [ 268.921207][T13707] __nla_validate_parse: 14 callbacks suppressed [ 268.921226][T13707] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.1963'. [ 268.947799][T13707] netlink: zone id is out of range [ 268.953180][T13707] netlink: zone id is out of range [ 268.962283][T13707] netlink: get zone limit has 8 unknown bytes [ 269.143978][T13716] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1958'. [ 269.224428][T13723] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1958'. [ 269.282583][T13716] netlink: 'syz.4.1958': attribute type 1 has an invalid length. [ 269.314124][T13716] netlink: 'syz.4.1958': attribute type 1 has an invalid length. [ 269.321864][T13716] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1958'. [ 269.770826][T13739] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1971'. [ 269.908080][T13747] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 270.015587][T13749] mac80211_hwsim hwsim9 wlan0: entered promiscuous mode [ 270.022667][T13749] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 270.098121][T13754] batadv0 speed is unknown, defaulting to 1000 [ 270.143781][T13761] netlink: 'syz.0.1978': attribute type 7 has an invalid length. [ 270.162411][T13758] team0: Port device dummy0 removed [ 270.245420][T13761] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1978'. [ 270.294342][T13761] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1978'. [ 270.346283][T13768] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1978'. [ 270.380005][T13768] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1978'. [ 270.390175][T13768] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1978'. [ 271.140335][T13810] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 271.257360][T13810] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 271.329276][T13810] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 271.428806][T13810] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 271.598316][ T36] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 271.621219][ T36] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 271.630923][ T36] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 271.704853][ T36] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 271.798869][T13836] kthread_run failed with err -4 [ 271.900721][T13851] netlink: 'syz.2.2002': attribute type 17 has an invalid length. [ 271.920382][T13851] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 271.987443][T13855] : entered promiscuous mode [ 272.170052][T13871] pim6reg: entered allmulticast mode [ 272.192862][T13871] pim6reg: left allmulticast mode [ 272.610796][ T8947] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 272.623116][ T8947] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 272.994459][T13901] netlink: 'syz.4.2016': attribute type 1 has an invalid length. [ 273.050760][T13901] 8021q: adding VLAN 0 to HW filter on device bond27 [ 273.144792][T13901] gretap2: entered promiscuous mode [ 273.402146][T13926] batadv0 speed is unknown, defaulting to 1000 [ 273.457328][T13931] bond0: (slave rose0): Error: Device can not be enslaved while up [ 273.762305][T13951] syzkaller0: left promiscuous mode [ 273.768843][T13951] syzkaller0: left allmulticast mode [ 273.788488][T13951] geneve3: entered promiscuous mode [ 274.587213][T13977] netlink: 'syz.0.2039': attribute type 8 has an invalid length. [ 274.598935][T13976] netlink: 'syz.1.2038': attribute type 23 has an invalid length. [ 274.624162][T13977] __nla_validate_parse: 12 callbacks suppressed [ 274.624177][T13977] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2039'. [ 274.675338][T13983] netlink: 'syz.0.2039': attribute type 8 has an invalid length. [ 274.694784][T13983] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2039'. [ 274.893117][T13990] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2042'. [ 274.911681][T13995] bridge0: port 1(erspan0) entered blocking state [ 274.918806][T13995] bridge0: port 1(erspan0) entered disabled state [ 274.926459][T13995] erspan0: entered allmulticast mode [ 274.943987][T13995] erspan0: entered promiscuous mode [ 274.966129][T13995] erspan0: left allmulticast mode [ 274.971175][T13995] erspan0: left promiscuous mode [ 275.006859][T13995] bridge0: port 1(erspan0) entered disabled state [ 275.330732][T14023] bond0: entered promiscuous mode [ 275.349282][T14023] bond_slave_0: entered promiscuous mode [ 275.372879][T14023] bond_slave_1: entered promiscuous mode [ 275.387797][T14026] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2053'. [ 275.389790][T14023] dummy0: entered promiscuous mode [ 275.691279][T14043] IPVS: set_ctl: invalid protocol: 44 224.0.0.1:20004 [ 275.842918][T14045] batadv0 speed is unknown, defaulting to 1000 [ 275.882875][T14047] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2059'. [ 276.241454][T14063] netlink: 'syz.4.2062': attribute type 10 has an invalid length. [ 276.389283][T14070] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2062'. [ 276.439004][T14063] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 276.482446][T14070] bond24: left allmulticast mode [ 276.519755][T14070] bond24: left promiscuous mode [ 276.540431][T14070] bridge0: port 1(bond24) entered disabled state [ 276.669126][T14090] netlink: 92 bytes leftover after parsing attributes in process `syz.1.2065'. [ 276.725764][T14070] bond0: (slave bridge0): Releasing backup interface [ 276.866884][T14085] batadv0 speed is unknown, defaulting to 1000 [ 277.028297][T14100] netlink: 'syz.4.2072': attribute type 13 has an invalid length. [ 277.038349][T14100] netlink: 'syz.4.2072': attribute type 17 has an invalid length. [ 277.209448][T14095] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2070'. [ 277.393076][T14100] batadv0 speed is unknown, defaulting to 1000 [ 277.492181][T14100] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 277.575182][T14118] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2075'. [ 277.585282][T14118] netlink: 49 bytes leftover after parsing attributes in process `syz.2.2075'. [ 277.614310][T14118] netlink: 'syz.2.2075': attribute type 1 has an invalid length. [ 278.001646][T14129] batadv0 speed is unknown, defaulting to 1000 [ 278.078609][T14126] IPVS: persistence engine module ip_vs_pe_… not found [ 278.245666][T14145] netlink: 'syz.4.2082': attribute type 1 has an invalid length. [ 278.390065][T14145] 8021q: adding VLAN 0 to HW filter on device bond28 [ 278.803093][T14179] FAULT_INJECTION: forcing a failure. [ 278.803093][T14179] name failslab, interval 1, probability 0, space 0, times 0 [ 278.848475][T14179] CPU: 0 UID: 0 PID: 14179 Comm: syz.3.2089 Not tainted syzkaller #0 PREEMPT(full) [ 278.848501][T14179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 278.848523][T14179] Call Trace: [ 278.848534][T14179] [ 278.848544][T14179] dump_stack_lvl+0x189/0x250 [ 278.848572][T14179] ? __pfx____ratelimit+0x10/0x10 [ 278.848594][T14179] ? __pfx_dump_stack_lvl+0x10/0x10 [ 278.848616][T14179] ? __pfx__printk+0x10/0x10 [ 278.848648][T14179] ? __pfx___might_resched+0x10/0x10 [ 278.848683][T14179] should_fail_ex+0x414/0x560 [ 278.848716][T14179] should_failslab+0xa8/0x100 [ 278.848745][T14179] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 278.848772][T14179] ? __alloc_skb+0x112/0x2d0 [ 278.848800][T14179] __alloc_skb+0x112/0x2d0 [ 278.848827][T14179] netlink_sendmsg+0x5c6/0xb30 [ 278.848861][T14179] ? __pfx_netlink_sendmsg+0x10/0x10 [ 278.848888][T14179] ? aa_sock_msg_perm+0xf1/0x1d0 [ 278.848920][T14179] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 278.848940][T14179] ? __pfx_netlink_sendmsg+0x10/0x10 [ 278.848964][T14179] __sock_sendmsg+0x21c/0x270 [ 278.848998][T14179] ____sys_sendmsg+0x505/0x830 [ 278.849029][T14179] ? __pfx_____sys_sendmsg+0x10/0x10 [ 278.849065][T14179] ? import_iovec+0x74/0xa0 [ 278.849092][T14179] ___sys_sendmsg+0x21f/0x2a0 [ 278.849121][T14179] ? __pfx____sys_sendmsg+0x10/0x10 [ 278.849188][T14179] ? __fget_files+0x2a/0x420 [ 278.849215][T14179] ? __fget_files+0x3a0/0x420 [ 278.849254][T14179] __x64_sys_sendmsg+0x19b/0x260 [ 278.849283][T14179] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 278.849320][T14179] ? __pfx_ksys_write+0x10/0x10 [ 278.849341][T14179] ? rcu_is_watching+0x15/0xb0 [ 278.849366][T14179] ? do_syscall_64+0xbe/0x3b0 [ 278.849393][T14179] do_syscall_64+0xfa/0x3b0 [ 278.849414][T14179] ? lockdep_hardirqs_on+0x9c/0x150 [ 278.849435][T14179] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.849455][T14179] ? clear_bhb_loop+0x60/0xb0 [ 278.849479][T14179] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.849498][T14179] RIP: 0033:0x7f66a698eec9 [ 278.849521][T14179] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 278.849539][T14179] RSP: 002b:00007f66a77de038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 278.849564][T14179] RAX: ffffffffffffffda RBX: 00007f66a6be6180 RCX: 00007f66a698eec9 [ 278.849579][T14179] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000005 [ 278.849591][T14179] RBP: 00007f66a77de090 R08: 0000000000000000 R09: 0000000000000000 [ 278.849604][T14179] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 278.849616][T14179] R13: 00007f66a6be6218 R14: 00007f66a6be6180 R15: 00007fff40acf818 [ 278.849649][T14179] [ 279.365167][T14189] netlink: 'syz.3.2091': attribute type 13 has an invalid length. [ 279.375134][T14189] netlink: 'syz.3.2091': attribute type 17 has an invalid length. [ 280.276318][T14187] pimreg: entered allmulticast mode [ 280.294659][T14187] pimreg: left allmulticast mode [ 280.350434][T14189] bridge0: port 2(dummy0) entered blocking state [ 280.357033][T14189] bridge0: port 2(dummy0) entered forwarding state [ 280.396139][T14189] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 280.703947][T14211] __nla_validate_parse: 6 callbacks suppressed [ 280.703965][T14211] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2094'. [ 280.739346][T14212] batadv0 speed is unknown, defaulting to 1000 [ 281.307677][T14250] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (71) [ 281.611104][T14264] netlink: 'syz.2.2100': attribute type 16 has an invalid length. [ 281.629160][T14264] netlink: 'syz.2.2100': attribute type 17 has an invalid length. [ 281.721136][T14271] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2103'. [ 281.750856][T14264] 8021q: adding VLAN 0 to HW filter on device bond0 [ 281.774597][T14264] 8021q: adding VLAN 0 to HW filter on device team0 [ 281.785072][T14264] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 281.806062][T14271] 8021q: VLANs not supported on ipvlan1 [ 281.827584][T14273] macsec0: entered promiscuous mode [ 281.832921][T14273] macsec0: entered allmulticast mode [ 282.658014][T14290] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2107'. [ 282.676185][T14289] netlink: 360 bytes leftover after parsing attributes in process `syz.4.2108'. [ 282.997003][T14299] netlink: 'syz.1.2112': attribute type 6 has an invalid length. [ 283.190624][T14310] netlink: 'syz.2.2114': attribute type 13 has an invalid length. [ 283.200711][T14310] netlink: 'syz.2.2114': attribute type 17 has an invalid length. [ 284.020069][T14318] batadv0 speed is unknown, defaulting to 1000 [ 284.265325][T14330] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2119'. [ 284.285699][T14328] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2118'. [ 284.298549][T14330] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2119'. [ 284.310360][T14328] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2118'. [ 284.428995][T14332] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2120'. [ 284.449207][T14332] netlink: 'syz.1.2120': attribute type 1 has an invalid length. [ 284.566189][T14344] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2123'. [ 284.717820][T14352] netlink: 'syz.0.2126': attribute type 30 has an invalid length. [ 284.731426][T14352] netlink: 'syz.0.2126': attribute type 7 has an invalid length. [ 284.736129][T14351] tipc: Enabled bearer , priority 0 [ 284.743865][T14352] netlink: 'syz.0.2126': attribute type 8 has an invalid length. [ 284.830836][T14351] syzkaller0: entered promiscuous mode [ 284.837115][T14351] syzkaller0: entered allmulticast mode [ 284.976486][T14366] blkio.reset_stats is deprecated [ 285.233643][T14372] A link change request failed with some changes committed already. Interface veth0_virt_wifi may have been left with an inconsistent configuration, please check. [ 285.303073][T14372] (unnamed net_device) (uninitialized): option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0) [ 285.355409][T14348] tipc: Resetting bearer [ 287.222481][T14390] tipc: Failed to remove unknown binding: 66,1,1/3417268089:2961488778/2961488780 [ 287.242324][T14390] tipc: Failed to remove unknown binding: 66,1,1/3417268089:2961488778/2961488780 [ 287.351145][T14348] tipc: Disabling bearer [ 287.461435][T14397] __nla_validate_parse: 2 callbacks suppressed [ 287.461453][T14397] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2133'. [ 287.478482][T14397] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2133'. [ 287.678849][T14411] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2139'. [ 287.721085][T14411] netlink: 'syz.4.2139': attribute type 5 has an invalid length. [ 287.744635][T14411] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2139'. [ 287.792424][T14411] geneve2: entered promiscuous mode [ 287.826604][T14411] geneve2: entered allmulticast mode [ 287.847742][ T8944] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 287.875313][ T8944] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 287.892979][ T8944] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 287.914037][T14422] block nbd1: server does not support multiple connections per device. [ 287.915907][ T8944] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 287.925606][T14422] block nbd1: shutting down sockets [ 288.084511][T14440] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2147'. [ 288.151314][T14440] bond0: entered promiscuous mode [ 288.186539][T14440] bond_slave_0: entered promiscuous mode [ 288.211162][T14440] bond_slave_1: entered promiscuous mode [ 288.235036][T14440] bond0: left promiscuous mode [ 288.253200][T14440] bond_slave_0: left promiscuous mode [ 288.260477][T14440] bond_slave_1: left promiscuous mode [ 288.425226][T14465] netlink: 'syz.2.2155': attribute type 1 has an invalid length. [ 288.461204][T14465] 8021q: adding VLAN 0 to HW filter on device bond3 [ 288.505063][T14465] 8021q: adding VLAN 0 to HW filter on device bond3 [ 288.527415][T14465] bond3: (slave vxcan1): The slave device specified does not support setting the MAC address [ 288.592041][T14473] netlink: 'syz.3.2153': attribute type 17 has an invalid length. [ 288.594791][T14465] bond3: (slave vxcan1): Error -95 calling set_mac_address [ 288.666193][T14473] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 288.695000][T14470] veth7: entered promiscuous mode [ 288.710428][T14470] bond3: (slave veth7): Enslaving as an active interface with a down link [ 288.825463][ T8952] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 288.834916][ T8952] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 288.952666][T14482] 8021q: adding VLAN 0 to HW filter on device bond7 [ 289.049473][T14484] batadv0 speed is unknown, defaulting to 1000 [ 289.199431][T14493] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 289.334274][T14498] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2161'. [ 289.736872][T14516] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2165'. [ 289.997849][T14528] batadv0 speed is unknown, defaulting to 1000 [ 290.467832][T14567] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2177'. [ 290.497083][T14567] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2177'. [ 290.571084][T14570] netlink: 'syz.3.2178': attribute type 7 has an invalid length. [ 290.721453][T14583] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2182'. [ 290.788487][T14585] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 290.989162][T14600] netlink: 'syz.3.2186': attribute type 4 has an invalid length. [ 291.206163][T14605] netlink: 'syz.0.2189': attribute type 1 has an invalid length. [ 291.216425][T14607] netlink: 'syz.0.2189': attribute type 1 has an invalid length. [ 291.477544][T14616] batadv0 speed is unknown, defaulting to 1000 [ 291.860221][T14621] batadv0 speed is unknown, defaulting to 1000 [ 292.046841][T14639] netlink: 'syz.2.2197': attribute type 1 has an invalid length. [ 292.368894][T14653] batadv0 speed is unknown, defaulting to 1000 [ 292.664804][T14667] netlink: 'syz.4.2203': attribute type 2 has an invalid length. [ 292.688409][T14667] __nla_validate_parse: 3 callbacks suppressed [ 292.688426][T14667] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2203'. [ 292.815558][ T5871] Bluetooth: hci0: command tx timeout [ 292.914179][T14674] syzkaller0: entered promiscuous mode [ 292.933852][T14674] syzkaller0: entered allmulticast mode [ 293.075747][T14686] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 293.076228][T14683] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2206'. [ 293.157943][T14683] tipc: Enabling of bearer rejected, failed to enable media [ 293.172896][T14683] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2206'. [ 293.204075][T14686] batadv0 speed is unknown, defaulting to 1000 [ 293.268524][T14696] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2208'. [ 293.494323][T14703] netlink: 'syz.2.2211': attribute type 2 has an invalid length. [ 293.502168][T14703] netlink: 'syz.2.2211': attribute type 8 has an invalid length. [ 293.512132][T14703] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2211'. [ 293.754854][T14715] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2215'. [ 293.785391][T14715] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2215'. [ 293.890056][T14715] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2215'. [ 293.950104][T14725] netlink: 248 bytes leftover after parsing attributes in process `syz.0.2218'. [ 293.989367][T14726] pim6reg: entered allmulticast mode [ 294.021070][T14725] pimreg3: entered allmulticast mode [ 294.029193][T14729] pim6reg: left allmulticast mode [ 294.082601][T14731] netlink: 'syz.4.2220': attribute type 7 has an invalid length. [ 294.149020][T14731] netlink: 'syz.4.2220': attribute type 7 has an invalid length. [ 294.219844][T14732] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 294.535071][T14753] netlink: 961 bytes leftover after parsing attributes in process `syz.2.2224'. [ 294.554984][T14732] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 294.899937][T14732] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 294.911558][T14732] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 295.176247][T14774] netlink: 'syz.2.2229': attribute type 7 has an invalid length. [ 295.185117][T14774] netlink: 'syz.2.2229': attribute type 3 has an invalid length. [ 295.405596][T14789] netlink: 'syz.4.2232': attribute type 1 has an invalid length. [ 295.612845][T14791] macvlan2: entered promiscuous mode [ 295.639730][T14791] macvlan2: entered allmulticast mode [ 295.660944][T14791] bond29: entered promiscuous mode [ 295.680485][T14791] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 295.750644][T14791] bond29: left promiscuous mode [ 296.612809][T14824] batadv0 speed is unknown, defaulting to 1000 [ 296.739400][T14829] netlink: 'syz.3.2242': attribute type 1 has an invalid length. [ 297.768258][T14862] batadv0 speed is unknown, defaulting to 1000 [ 298.357260][T14870] batadv0 speed is unknown, defaulting to 1000 [ 298.548858][T14873] bridge8: entered promiscuous mode [ 298.660238][T14880] IPv6: sit2: Disabled Multicast RS [ 298.687299][T14880] sit2: entered allmulticast mode [ 299.893997][T14902] netlink: 'syz.4.2261': attribute type 10 has an invalid length. [ 299.949832][T14902] __nla_validate_parse: 114 callbacks suppressed [ 299.949852][T14902] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2261'. [ 300.100485][T14909] netlink: 'syz.4.2264': attribute type 5 has an invalid length. [ 300.165334][T14911] netlink: 'syz.2.2265': attribute type 1 has an invalid length. [ 300.261953][T14911] 8021q: adding VLAN 0 to HW filter on device bond4 [ 300.367006][T14918] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2265'. [ 300.581160][T14911] batadv0 speed is unknown, defaulting to 1000 [ 300.669242][T14916] batadv0 speed is unknown, defaulting to 1000 [ 301.019196][T14930] openvswitch: netlink: Message has -2 unknown bytes. [ 301.028814][T14930] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2268'. [ 301.121656][T14930] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2268'. [ 301.527653][T14941] batadv0 speed is unknown, defaulting to 1000 [ 301.682259][T14948] netlink: 248 bytes leftover after parsing attributes in process `syz.4.2273'. [ 301.781972][T14948] netlink: 'syz.4.2273': attribute type 9 has an invalid length. [ 302.069888][T14762] Set syz1 is full, maxelem 65536 reached [ 302.265102][T14961] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2276'. [ 302.509590][T14969] syz.1.2278: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 302.530929][T14969] CPU: 1 UID: 0 PID: 14969 Comm: syz.1.2278 Not tainted syzkaller #0 PREEMPT(full) [ 302.530952][T14969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 302.530963][T14969] Call Trace: [ 302.530971][T14969] [ 302.530979][T14969] dump_stack_lvl+0x189/0x250 [ 302.531005][T14969] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 302.531031][T14969] ? __pfx_dump_stack_lvl+0x10/0x10 [ 302.531052][T14969] ? __pfx__printk+0x10/0x10 [ 302.531077][T14969] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 302.531097][T14969] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 302.531122][T14969] warn_alloc+0x214/0x310 [ 302.531159][T14969] ? stack_depot_save_flags+0x40/0x860 [ 302.531188][T14969] ? __pfx_warn_alloc+0x10/0x10 [ 302.531216][T14969] ? kasan_save_track+0x4f/0x80 [ 302.531239][T14969] ? xskq_create+0x56/0x170 [ 302.531256][T14969] ? xsk_init_queue+0xb0/0x110 [ 302.531270][T14969] ? xsk_setsockopt+0x4dc/0x8d0 [ 302.531294][T14969] ? do_sock_setsockopt+0x17c/0x1b0 [ 302.531314][T14969] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 302.531334][T14969] ? do_syscall_64+0xfa/0x3b0 [ 302.531353][T14969] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.531379][T14969] __vmalloc_node_range_noprof+0x125/0x12f0 [ 302.531438][T14969] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 302.531470][T14969] ? __kasan_kmalloc+0x93/0xb0 [ 302.531498][T14969] vmalloc_user_noprof+0xad/0xf0 [ 302.531526][T14969] ? xskq_create+0xbf/0x170 [ 302.531548][T14969] xskq_create+0xbf/0x170 [ 302.531570][T14969] xsk_init_queue+0xb0/0x110 [ 302.531592][T14969] xsk_setsockopt+0x4dc/0x8d0 [ 302.531622][T14969] ? __pfx_xsk_setsockopt+0x10/0x10 [ 302.531651][T14969] ? __pfx_aa_sk_perm+0x10/0x10 [ 302.531683][T14969] ? aa_sock_opt_perm+0xff/0x1b0 [ 302.531705][T14969] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 302.531725][T14969] ? __pfx_xsk_setsockopt+0x10/0x10 [ 302.531755][T14969] do_sock_setsockopt+0x17c/0x1b0 [ 302.531786][T14969] __x64_sys_setsockopt+0x13f/0x1b0 [ 302.531817][T14969] do_syscall_64+0xfa/0x3b0 [ 302.531839][T14969] ? lockdep_hardirqs_on+0x9c/0x150 [ 302.531859][T14969] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.531879][T14969] ? clear_bhb_loop+0x60/0xb0 [ 302.531904][T14969] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.531927][T14969] RIP: 0033:0x7faf25d8eec9 [ 302.531945][T14969] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 302.531963][T14969] RSP: 002b:00007faf23fee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 302.531983][T14969] RAX: ffffffffffffffda RBX: 00007faf25fe5fa0 RCX: 00007faf25d8eec9 [ 302.531998][T14969] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000008 [ 302.532010][T14969] RBP: 00007faf25e11f91 R08: 0000000000000004 R09: 0000000000000000 [ 302.532022][T14969] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 302.532034][T14969] R13: 00007faf25fe6038 R14: 00007faf25fe5fa0 R15: 00007ffebbea07b8 [ 302.532070][T14969] [ 302.533255][T14969] Mem-Info: [ 302.851472][T14973] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2280'. [ 302.888218][T14969] active_anon:4003 inactive_anon:0 isolated_anon:0 [ 302.888218][T14969] active_file:3657 inactive_file:39973 isolated_file:0 [ 302.888218][T14969] unevictable:768 dirty:167 writeback:0 [ 302.888218][T14969] slab_reclaimable:12773 slab_unreclaimable:156928 [ 302.888218][T14969] mapped:29613 shmem:1370 pagetables:1014 [ 302.888218][T14969] sec_pagetables:0 bounce:0 [ 302.888218][T14969] kernel_misc_reclaimable:0 [ 302.888218][T14969] free:1258542 free_pcp:17218 free_cma:0 [ 302.940354][T14969] Node 0 active_anon:15912kB inactive_anon:0kB active_file:14628kB inactive_file:159692kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:118452kB dirty:668kB writeback:0kB shmem:3944kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14176kB pagetables:4032kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 302.979749][T14969] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:124kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 303.010351][T14969] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 303.040777][T14969] lowmem_reserve[]: 0 2499 2501 2501 2501 [ 303.048268][T14969] Node 0 DMA32 free:1139472kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:15660kB inactive_anon:0kB active_file:14628kB inactive_file:157856kB unevictable:1536kB writepending:668kB present:3129332kB managed:2559852kB mlocked:0kB bounce:0kB free_pcp:49008kB local_pcp:27980kB free_cma:0kB [ 303.082347][T14969] lowmem_reserve[]: 0 0 1 1 1 [ 303.089292][T14969] Node 0 Normal free:4kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:52kB inactive_anon:0kB active_file:0kB inactive_file:1836kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 303.119676][T14969] lowmem_reserve[]: 0 0 0 0 0 [ 303.125084][T14969] Node 1 Normal free:3880080kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:20480kB local_pcp:10432kB free_cma:0kB [ 303.163083][T14969] lowmem_reserve[]: 0 0 0 0 0 [ 303.168488][T14969] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 303.249087][T14969] Node 0 DMA32: 2410*4kB (UME) 634*8kB (UME) 319*16kB (UME) 600*32kB (UME) 459*64kB (UME) 192*128kB (UM) 83*256kB (UME) 44*512kB (UM) 21*1024kB (UM) 7*2048kB (UM) 238*4096kB (M) = 1147432kB [ 303.283994][T14969] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 303.296953][T14969] Node 1 Normal: 220*4kB (UE) 56*8kB (UME) 38*16kB (UME) 50*32kB (UME) 21*64kB (UME) 9*128kB (UME) 5*256kB (UM) 4*512kB (UME) 2*1024kB (UM) 1*2048kB (E) 944*4096kB (M) = 3880080kB [ 303.349185][T14969] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 303.410163][T14969] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 303.420567][T14993] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2286'. [ 303.440734][T14969] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 303.475737][T14969] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 303.485655][T14969] 45847 total pagecache pages [ 303.490431][T14969] 0 pages in swap cache [ 303.496010][T14969] Free swap = 124996kB [ 303.500176][T14969] Total swap = 124996kB [ 303.507535][T14969] 2097051 pages RAM [ 303.511350][T14969] 0 pages HighMem/MovableOnly [ 303.516930][T14969] 424998 pages reserved [ 303.554887][T14969] 0 pages cma reserved [ 303.632318][T15006] netlink: 'syz.3.2289': attribute type 4 has an invalid length. [ 303.734348][T15010] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2291'. [ 303.836898][T15010] bond31: entered promiscuous mode [ 303.842806][T15010] 8021q: adding VLAN 0 to HW filter on device bond31 [ 303.870448][T15020] netlink: 16170 bytes leftover after parsing attributes in process `syz.2.2293'. [ 304.128107][T15034] lo speed is unknown, defaulting to 1000 [ 304.136149][T15034] lo speed is unknown, defaulting to 1000 [ 304.158907][T15034] lo speed is unknown, defaulting to 1000 [ 304.166136][T15037] tipc: Enabling of bearer rejected, already enabled [ 304.203065][T15034] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 304.252596][T15034] lo speed is unknown, defaulting to 1000 [ 304.289385][T15034] lo speed is unknown, defaulting to 1000 [ 304.297539][T15034] lo speed is unknown, defaulting to 1000 [ 304.307705][T15043] netlink: 'syz.1.2302': attribute type 12 has an invalid length. [ 304.327640][T15034] lo speed is unknown, defaulting to 1000 [ 304.337146][T15034] lo speed is unknown, defaulting to 1000 [ 304.578657][T15062] IPv6: Can't replace route, no match found [ 305.008494][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 305.008511][ T30] audit: type=1800 audit(1759062407.651:38): pid=15075 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2311" name="memory.events" dev="tmpfs" ino=2370 res=0 errno=0 [ 305.012539][T15075] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2311'. [ 305.036730][ T30] audit: type=1804 audit(1759062407.651:39): pid=15075 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.2311" name="/newroot/459/memory.events" dev="tmpfs" ino=2370 res=1 errno=0 [ 305.050401][T15075] tipc: Enabled bearer , priority 18 [ 305.225001][T15087] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2312'. [ 305.387607][T15095] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2319'. [ 305.398648][T15095] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2319'. [ 305.409952][T15096] netlink: 'syz.1.2318': attribute type 13 has an invalid length. [ 305.429445][T15096] netlink: 'syz.1.2318': attribute type 17 has an invalid length. [ 305.687934][T15096] bond0: left promiscuous mode [ 305.693222][T15096] bond_slave_0: left promiscuous mode [ 305.700675][T15096] bond_slave_1: left promiscuous mode [ 305.708220][T15096] dummy0: left promiscuous mode [ 305.716777][T15096] 8021q: adding VLAN 0 to HW filter on device bond0 [ 305.728517][T15096] 8021q: adding VLAN 0 to HW filter on device team0 [ 305.751179][T15096] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 305.844182][T15103] batadv0 speed is unknown, defaulting to 1000 [ 305.852313][T15103] lo speed is unknown, defaulting to 1000 [ 306.146369][T15138] netlink: 348 bytes leftover after parsing attributes in process `syz.4.2326'. [ 306.408464][T15150] vti1: entered promiscuous mode [ 306.471861][T15149] batadv0 speed is unknown, defaulting to 1000 [ 306.498315][T15149] lo speed is unknown, defaulting to 1000 [ 306.504193][T15159] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2334'. [ 317.056116][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 360.294954][T15177] netlink: 'syz.1.2337': attribute type 12 has an invalid length. [ 363.281106][T15191] netlink: 'syz.0.2341': attribute type 5 has an invalid length. [ 363.360856][T15190] batadv0 speed is unknown, defaulting to 1000 [ 363.375629][T15189] batadv0 speed is unknown, defaulting to 1000 [ 363.392841][T15189] lo speed is unknown, defaulting to 1000 [ 363.460926][T15190] lo speed is unknown, defaulting to 1000 [ 363.468308][T15203] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2345'. [ 363.818361][T15215] batadv0 speed is unknown, defaulting to 1000 [ 363.899632][T15215] lo speed is unknown, defaulting to 1000 [ 363.920782][T15211] batadv0 speed is unknown, defaulting to 1000 [ 363.949297][T15211] lo speed is unknown, defaulting to 1000 [ 364.096064][T15223] batadv0 speed is unknown, defaulting to 1000 [ 364.114706][T15223] lo speed is unknown, defaulting to 1000 [ 364.450726][T15245] batadv0 speed is unknown, defaulting to 1000 [ 364.460108][T15245] lo speed is unknown, defaulting to 1000 [ 364.696866][T15250] veth0: entered promiscuous mode [ 364.759409][T15252] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2355'. [ 364.774746][T15249] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2354'. [ 364.804857][T15249] veth0 (unregistering): left promiscuous mode [ 365.085369][T15260] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2357'. [ 365.378073][T15269] netlink: 'syz.2.2360': attribute type 1 has an invalid length. [ 365.387095][T15269] netlink: 'syz.2.2360': attribute type 4 has an invalid length. [ 365.397041][T15267] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2359'. [ 365.414062][T15267] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2359'. [ 365.423087][T15267] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2359'. [ 365.433081][T15267] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2359'. [ 365.686466][T15280] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2364'. [ 365.801132][T15285] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2365'. [ 366.388886][T15325] batadv0 speed is unknown, defaulting to 1000 [ 366.397437][T15325] lo speed is unknown, defaulting to 1000 [ 366.641814][T15341] batadv0 speed is unknown, defaulting to 1000 [ 366.697843][T15352] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 366.697863][T15351] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 366.763198][T15341] lo speed is unknown, defaulting to 1000 [ 366.833022][T15351] netlink: 'syz.1.2386': attribute type 6 has an invalid length. [ 366.856286][T15352] netlink: 'syz.1.2386': attribute type 6 has an invalid length. [ 367.267236][T15382] 8021q: adding VLAN 0 to HW filter on device bond7 [ 367.754684][T15419] batadv0 speed is unknown, defaulting to 1000 [ 367.762791][T15419] lo speed is unknown, defaulting to 1000 [ 368.711035][T15469] batadv0 speed is unknown, defaulting to 1000 [ 368.724183][T15468] batadv0 speed is unknown, defaulting to 1000 [ 368.731008][T15469] lo speed is unknown, defaulting to 1000 [ 368.748802][T15468] lo speed is unknown, defaulting to 1000 [ 369.316613][T15474] __nla_validate_parse: 12 callbacks suppressed [ 369.316632][T15474] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2420'. [ 369.499414][T15477] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2422'. [ 369.515603][T15483] netlink: 'syz.3.2424': attribute type 4 has an invalid length. [ 369.531754][T15483] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2424'. [ 369.541642][T15484] batadv0 speed is unknown, defaulting to 1000 [ 369.550019][T15484] lo speed is unknown, defaulting to 1000 [ 369.557766][T15483] wlan1: mtu less than device minimum [ 369.739857][ T5847] af_packet: tpacket_rcv: packet too big, clamped from 9908 to 3952. macoff=96 [ 370.572313][T15532] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2431'. [ 370.782510][T15538] netlink: 'syz.0.2435': attribute type 11 has an invalid length. [ 371.081016][T15546] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2437'. [ 371.238416][T15561] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2439'. [ 371.254133][T15562] netlink: 'syz.0.2438': attribute type 5 has an invalid length. [ 371.356907][T15568] netlink: 'syz.2.2443': attribute type 3 has an invalid length. [ 371.364542][T15566] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2441'. [ 371.434621][T15573] veth0_to_bridge: entered promiscuous mode [ 371.446769][T15576] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2443'. [ 371.465250][T15571] bridge0: port 5(erspan0) entered blocking state [ 371.471769][T15571] bridge0: port 5(erspan0) entered disabled state [ 371.495735][T15571] erspan0: entered allmulticast mode [ 371.512881][T15571] erspan0: entered promiscuous mode [ 371.550718][T15583] erspan0: left allmulticast mode [ 371.564233][T15583] erspan0: left promiscuous mode [ 371.569367][T15583] bridge0: port 5(erspan0) entered disabled state [ 371.598924][T15582] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2445'. [ 371.608522][T15582] Unsupported xt match [ 371.608534][T15582] unable to load match [ 371.609708][T15585] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2446'. [ 371.628448][T15572] veth0_to_bridge: left promiscuous mode [ 371.634946][T15582] syzkaller0: entered promiscuous mode [ 371.640490][T15582] syzkaller0: entered allmulticast mode [ 372.016134][T15608] netlink: 'syz.0.2452': attribute type 12 has an invalid length. [ 372.037606][T15607] netlink: zone id is out of range [ 372.042803][T15607] netlink: zone id is out of range [ 372.048575][T15607] netlink: zone id is out of range [ 372.054668][T15607] netlink: zone id is out of range [ 372.060335][T15607] netlink: zone id is out of range [ 372.066355][T15607] netlink: zone id is out of range [ 372.071477][T15607] netlink: zone id is out of range [ 372.077782][T15607] netlink: zone id is out of range [ 372.082984][T15607] netlink: zone id is out of range [ 372.100715][T15607] netlink: zone id is out of range [ 372.116386][T15607] netlink: 'syz.4.2453': attribute type 4 has an invalid length. [ 372.167478][T15611] netlink: 'syz.4.2453': attribute type 4 has an invalid length. [ 372.703889][T15623] RDS: rds_bind could not find a transport for ::ffff:172.30.1.2, load rds_tcp or rds_rdma? [ 373.655701][ T5995] lo speed is unknown, defaulting to 1000 [ 373.700277][ T5993] lo speed is unknown, defaulting to 1000 [ 373.737334][T15628] sctp: [Deprecated]: syz.1.2457 (pid 15628) Use of struct sctp_assoc_value in delayed_ack socket option. [ 373.737334][T15628] Use struct sctp_sack_info instead [ 373.918033][T15636] tipc: Enabling of bearer rejected, failed to enable media [ 373.989587][T15642] bond0: (slave dummy0): Releasing backup interface [ 374.146045][T15643] batadv0 speed is unknown, defaulting to 1000 [ 374.174550][T15643] lo speed is unknown, defaulting to 1000 [ 374.527984][T15675] __nla_validate_parse: 1 callbacks suppressed [ 374.528002][T15675] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2467'. [ 374.667451][T15686] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2471'. [ 374.881776][T15695] batadv0 speed is unknown, defaulting to 1000 [ 374.897250][T15695] lo speed is unknown, defaulting to 1000 [ 374.947999][T15701] tipc: Enabled bearer , priority 0 [ 374.969585][T15701] syzkaller0: entered promiscuous mode [ 374.971646][T15706] netlink: 'syz.0.2476': attribute type 1 has an invalid length. [ 374.975181][T15701] syzkaller0: entered allmulticast mode [ 375.022869][T15708] : renamed from bond_slave_0 [ 375.032678][T15701] tipc: Resetting bearer [ 375.050717][T15706] bond8: entered promiscuous mode [ 375.057971][T15706] bond8: entered allmulticast mode [ 375.065154][T15706] 8021q: adding VLAN 0 to HW filter on device bond8 [ 375.080029][T15700] tipc: Resetting bearer [ 375.106905][T15700] tipc: Disabling bearer [ 375.131143][T15706] bridge9: entered promiscuous mode [ 375.137373][T15706] bridge9: entered allmulticast mode [ 375.144721][T15706] bond8: (slave bridge9): Enslaving as a backup interface with an up link [ 375.183583][T15706] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2476'. [ 375.192569][T15706] netlink: 'syz.0.2476': attribute type 30 has an invalid length. [ 375.201140][T15706] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2476'. [ 375.392448][T15726] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2482'. [ 375.402880][T15726] tipc: Enabling of bearer rejected, failed to enable media [ 375.749647][T15747] batadv0 speed is unknown, defaulting to 1000 [ 375.788232][T15747] lo speed is unknown, defaulting to 1000 [ 375.824146][T15754] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2490'. [ 375.859185][T15758] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2489'. [ 376.020059][T15765] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2491'. [ 376.030391][T15765] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2491'. [ 377.402737][T15814] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2500'. [ 377.439765][T15788] batadv0 speed is unknown, defaulting to 1000 [ 377.498555][T15788] lo speed is unknown, defaulting to 1000 [ 377.707439][T15829] batadv0 speed is unknown, defaulting to 1000 [ 377.739264][T15829] lo speed is unknown, defaulting to 1000 [ 377.789072][T15839] batadv0 speed is unknown, defaulting to 1000 [ 377.833199][T15839] lo speed is unknown, defaulting to 1000 [ 378.011829][T15846] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 378.019087][T15846] IPv6: NLM_F_CREATE should be set when creating new route [ 378.026427][T15846] IPv6: NLM_F_CREATE should be set when creating new route [ 378.287117][T15870] bond3: left promiscuous mode [ 378.298579][T15870] bond4: left promiscuous mode [ 378.327649][T15870] bond5: left promiscuous mode [ 378.349947][T15870] bond5: left allmulticast mode [ 378.398132][T15870] bond8: left promiscuous mode [ 378.403028][T15870] bridge9: left promiscuous mode [ 378.420485][T15870] bond8: left allmulticast mode [ 378.430144][T15870] bridge9: left allmulticast mode [ 378.504532][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.745059][T15886] veth0: entered promiscuous mode [ 378.771557][T15896] batadv0 speed is unknown, defaulting to 1000 [ 378.781705][T15896] lo speed is unknown, defaulting to 1000 [ 378.816390][T15897] netlink: 'syz.0.2523': attribute type 21 has an invalid length. [ 378.832612][T15886] veth0: left promiscuous mode [ 378.861447][T15897] IPv6: Can't replace route, no match found [ 379.613318][ T5871] Bluetooth: hci4: command 0x0405 tx timeout [ 379.702902][T15956] netlink: 'syz.2.2538': attribute type 7 has an invalid length. [ 379.751692][T15956] __nla_validate_parse: 7 callbacks suppressed [ 379.751708][T15956] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2538'. [ 379.815136][T15960] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2538'. [ 379.914365][T15956] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2538'. [ 379.927010][T15956] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2538'. [ 379.944537][T15956] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2538'. [ 379.959506][T15956] netlink: 540 bytes leftover after parsing attributes in process `syz.2.2538'. [ 380.060806][T15976] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2543'. [ 380.199280][T15987] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2543'. [ 380.520216][T16011] netlink: 10 bytes leftover after parsing attributes in process `syz.2.2554'. [ 380.541429][T16011] netlink: 10 bytes leftover after parsing attributes in process `syz.2.2554'. [ 380.740747][T16026] x_tables: ip_tables: udp match: only valid for protocol 17 [ 380.776972][T16019] netlink: 'syz.4.2557': attribute type 1 has an invalid length. [ 380.792655][T16019] veth10: entered promiscuous mode [ 380.996629][T16035] bridge10: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 381.549588][T16052] batadv0 speed is unknown, defaulting to 1000 [ 381.631575][T16052] lo speed is unknown, defaulting to 1000 [ 381.705830][ T5184] Bluetooth: hci4: command 0x0405 tx timeout [ 381.728524][T16067] netlink: 'syz.4.2572': attribute type 1 has an invalid length. [ 382.113093][T16077] tipc: Enabled bearer , priority 0 [ 382.122680][T16077] syzkaller0: entered promiscuous mode [ 382.172476][T16077] syzkaller0: entered allmulticast mode [ 382.328039][T16077] tipc: Resetting bearer [ 382.368342][T16073] tipc: Resetting bearer [ 382.438294][T16073] tipc: Disabling bearer [ 382.675587][T16110] pim6reg: entered allmulticast mode [ 382.764330][T16121] netlink: 'syz.2.2586': attribute type 1 has an invalid length. [ 383.065835][T16138] netlink: 'syz.0.2595': attribute type 29 has an invalid length. [ 383.076424][T16138] netlink: 'syz.0.2595': attribute type 29 has an invalid length. [ 384.624822][T16186] bridge0: port 2(dummy0) entered disabled state [ 384.644404][T16186] bridge0: entered allmulticast mode [ 384.715033][T16186] dummy0: left allmulticast mode [ 384.720227][T16186] dummy0: left promiscuous mode [ 384.727088][T16186] bridge0: port 2(dummy0) entered disabled state [ 384.758273][T16186] team0: left allmulticast mode [ 384.763151][T16186] bond2: left allmulticast mode [ 384.776134][T16186] team0: left promiscuous mode [ 384.781051][T16186] bond2: left promiscuous mode [ 384.791971][T16186] bridge0: port 1(team0) entered disabled state [ 384.892915][T16204] syzkaller0: entered promiscuous mode [ 384.898806][T16204] syzkaller0: entered allmulticast mode [ 385.016531][T16211] netlink: 'syz.3.2627': attribute type 1 has an invalid length. [ 385.028147][T16211] __nla_validate_parse: 44 callbacks suppressed [ 385.028162][T16211] netlink: 16255 bytes leftover after parsing attributes in process `syz.3.2627'. [ 387.260609][T16222] netlink: 'syz.0.2633': attribute type 10 has an invalid length. [ 387.273182][T16222] netlink: 55 bytes leftover after parsing attributes in process `syz.0.2633'. [ 387.276449][T16226] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2634'. [ 387.393911][T16226] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2634'. [ 387.418513][T16233] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2634'. [ 387.775010][T16259] sctp: [Deprecated]: syz.0.2648 (pid 16259) Use of int in max_burst socket option deprecated. [ 387.775010][T16259] Use struct sctp_assoc_value instead [ 388.144989][T16285] net_ratelimit: 12 callbacks suppressed [ 388.144999][T16285] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 388.153193][T16290] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2663'. [ 389.302685][T16308] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2670'. [ 390.197874][T16340] sctp: [Deprecated]: syz.4.2681 (pid 16340) Use of int in max_burst socket option deprecated. [ 390.197874][T16340] Use struct sctp_assoc_value instead [ 390.255573][T16341] veth9: entered promiscuous mode [ 391.964367][T16444] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2730'. [ 392.050692][T16449] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 392.978012][T16508] sctp: [Deprecated]: syz.1.2761 (pid 16508) Use of int in max_burst socket option deprecated. [ 392.978012][T16508] Use struct sctp_assoc_value instead [ 393.995203][T16576] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 394.205048][T16585] batadv0 speed is unknown, defaulting to 1000 [ 394.212573][T16585] lo speed is unknown, defaulting to 1000 [ 394.930561][T16634] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2817'. [ 395.230742][T16648] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 395.348050][T16657] bridge_slave_1: default FDB implementation only supports local addresses [ 395.902682][ T5871] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 395.924262][ T5871] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 395.932211][ T5871] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 395.949536][ T5871] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 395.958113][ T5871] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 396.007461][T16674] batadv0 speed is unknown, defaulting to 1000 [ 396.022035][T16674] lo speed is unknown, defaulting to 1000 [ 396.429750][T16674] chnl_net:caif_netlink_parms(): no params data found [ 396.628116][T16674] bridge0: port 1(bridge_slave_0) entered blocking state [ 396.637776][T16674] bridge0: port 1(bridge_slave_0) entered disabled state [ 396.645436][T16674] bridge_slave_0: entered allmulticast mode [ 396.653141][T16674] bridge_slave_0: entered promiscuous mode [ 396.668040][T16674] bridge0: port 2(bridge_slave_1) entered blocking state [ 396.675886][T16674] bridge0: port 2(bridge_slave_1) entered disabled state [ 396.683061][T16674] bridge_slave_1: entered allmulticast mode [ 396.691562][T16674] bridge_slave_1: entered promiscuous mode [ 396.751503][T16674] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 396.769773][T16674] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 396.874337][T16674] team0: Port device team_slave_0 added [ 396.899697][T16674] team0: Port device team_slave_1 added [ 396.944597][T16674] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 396.951671][T16674] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 396.978776][T16674] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 396.992564][T16674] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 397.000914][T16674] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 397.028052][T16674] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 397.089311][T16674] hsr_slave_0: entered promiscuous mode [ 397.095976][T16674] hsr_slave_1: entered promiscuous mode [ 397.102058][T16674] debugfs: 'hsr0' already exists in 'hsr' [ 397.108474][T16674] Cannot create hsr debugfs directory [ 397.632614][T16760] netlink: 'syz.1.2875': attribute type 1 has an invalid length. [ 397.650593][T16758] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2874'. [ 397.716859][T16674] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 397.732674][T16674] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 397.750176][T16760] bond8: entered promiscuous mode [ 397.756088][T16760] bond8: entered allmulticast mode [ 397.761627][T16760] 8021q: adding VLAN 0 to HW filter on device bond8 [ 397.790155][T16674] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 397.792804][T16766] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2875'. [ 397.828985][T16674] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 397.880994][T16760] bridge9: entered promiscuous mode [ 397.887327][T16760] bridge9: entered allmulticast mode [ 397.894929][T16760] bond8: (slave bridge9): Enslaving as a backup interface with an up link [ 397.925167][T16760] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2875'. [ 397.944798][T16760] netlink: 'syz.1.2875': attribute type 30 has an invalid length. [ 397.954683][T16760] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2875'. [ 397.964181][ T8952] bond8: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 398.016660][T16674] 8021q: adding VLAN 0 to HW filter on device bond0 [ 398.025784][ T5184] Bluetooth: hci3: command tx timeout [ 398.051894][T16674] 8021q: adding VLAN 0 to HW filter on device team0 [ 398.068263][ T6506] bridge0: port 1(bridge_slave_0) entered blocking state [ 398.075484][ T6506] bridge0: port 1(bridge_slave_0) entered forwarding state [ 398.092320][ T8952] bridge0: port 2(bridge_slave_1) entered blocking state [ 398.099513][ T8952] bridge0: port 2(bridge_slave_1) entered forwarding state [ 398.112557][ T6506] bond8: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 398.475146][T16674] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 398.551166][T16674] veth0_vlan: entered promiscuous mode [ 398.571244][T16674] veth1_vlan: entered promiscuous mode [ 398.626041][T16674] veth0_macvtap: entered promiscuous mode [ 398.647910][T16674] veth1_macvtap: entered promiscuous mode [ 398.681644][T16674] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 398.706195][T16674] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 398.754496][ T8952] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.768136][ T8952] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.795467][ T8952] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.820339][ T8952] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.060947][ T6508] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 399.080346][ T6508] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 399.101203][T16828] sctp: [Deprecated]: syz.4.2897 (pid 16828) Use of int in max_burst socket option deprecated. [ 399.101203][T16828] Use struct sctp_assoc_value instead [ 399.164172][ T6506] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 399.175431][ T6506] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 399.348032][T16843] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2903'. [ 399.357669][T16843] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2903'. [ 399.689174][T16857] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1514) ! [ 399.802958][T16865] batadv0 speed is unknown, defaulting to 1000 [ 399.845065][T16865] lo speed is unknown, defaulting to 1000 [ 399.912018][T16870] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 400.096358][ T5184] Bluetooth: hci3: command tx timeout [ 400.258868][T16888] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2926'. [ 400.310847][T16894] bridge_slave_1: default FDB implementation only supports local addresses [ 401.549960][T16967] bridge_slave_1: default FDB implementation only supports local addresses [ 401.901973][ T5871] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 401.911948][ T5871] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 401.922291][ T5871] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 401.930948][ T5871] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 401.942467][ T5871] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 402.012180][T16982] batadv0 speed is unknown, defaulting to 1000 [ 402.044137][T16982] lo speed is unknown, defaulting to 1000 [ 402.171612][T16998] sctp: [Deprecated]: syz.4.2976 (pid 16998) Use of int in max_burst socket option deprecated. [ 402.171612][T16998] Use struct sctp_assoc_value instead [ 402.188568][ T5871] Bluetooth: hci3: command tx timeout [ 402.207658][T16999] bridge_slave_1: default FDB implementation only supports local addresses [ 402.341229][T16982] chnl_net:caif_netlink_parms(): no params data found [ 402.492493][T16982] bridge0: port 1(bridge_slave_0) entered blocking state [ 402.500855][T16982] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.512248][T16982] bridge_slave_0: entered allmulticast mode [ 402.522202][T16982] bridge_slave_0: entered promiscuous mode [ 402.532617][T16982] bridge0: port 2(bridge_slave_1) entered blocking state [ 402.540337][T16982] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.551532][T16982] bridge_slave_1: entered allmulticast mode [ 402.559776][T16982] bridge_slave_1: entered promiscuous mode [ 402.605823][T16982] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 402.619604][T16982] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 402.678276][T16982] team0: Port device team_slave_0 added [ 402.690203][T17022] team0: Device macvlan2 is already an upper device of the team interface [ 402.706722][T16982] team0: Port device team_slave_1 added [ 402.739131][T16982] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 402.747039][T16982] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 402.774211][T16982] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 402.788461][T16982] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 402.795684][T16982] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 402.828191][T16982] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 402.930127][T16982] hsr_slave_0: entered promiscuous mode [ 402.939193][T16982] hsr_slave_1: entered promiscuous mode [ 402.946691][T16982] debugfs: 'hsr0' already exists in 'hsr' [ 402.952553][T16982] Cannot create hsr debugfs directory [ 403.737385][T16982] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 403.753018][T16982] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 403.777504][T16982] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 403.797502][T16982] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 403.987012][T16982] 8021q: adding VLAN 0 to HW filter on device bond0 [ 404.023945][ T5871] Bluetooth: hci1: command tx timeout [ 404.037458][T16982] 8021q: adding VLAN 0 to HW filter on device team0 [ 404.053917][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 404.061440][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 404.111538][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 404.118729][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 404.254082][ T5871] Bluetooth: hci3: command tx timeout [ 404.569578][T16982] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 404.698328][T16982] veth0_vlan: entered promiscuous mode [ 404.719054][T16982] veth1_vlan: entered promiscuous mode [ 404.819239][T16982] veth0_macvtap: entered promiscuous mode [ 404.844526][T16982] veth1_macvtap: entered promiscuous mode [ 404.878592][T16982] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 404.892994][T17134] tap0: tun_chr_ioctl cmd 2147767521 [ 404.917341][T16982] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 404.935368][ T6506] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.946281][ T6506] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.964879][ T6506] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.975983][ T6506] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.108408][ T8952] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 405.129320][ T8952] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 405.171543][T11177] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 405.182615][T11177] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 405.195476][T17147] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3041'. [ 405.620790][T17161] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3049'. [ 406.095093][ T5871] Bluetooth: hci1: command tx timeout [ 406.607477][ T5184] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 406.639203][ T5184] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 406.648604][ T5184] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 406.666089][ T5184] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 406.694039][ T5184] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 406.837710][T17183] batadv0 speed is unknown, defaulting to 1000 [ 406.866000][T17183] lo speed is unknown, defaulting to 1000 [ 407.208919][T17183] chnl_net:caif_netlink_parms(): no params data found [ 407.461986][T17183] bridge0: port 1(bridge_slave_0) entered blocking state [ 407.476131][T17183] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.484367][T17183] bridge_slave_0: entered allmulticast mode [ 407.492160][T17183] bridge_slave_0: entered promiscuous mode [ 407.502106][T17183] bridge0: port 2(bridge_slave_1) entered blocking state [ 407.510789][T17183] bridge0: port 2(bridge_slave_1) entered disabled state [ 407.520353][T17183] bridge_slave_1: entered allmulticast mode [ 407.529259][T17183] bridge_slave_1: entered promiscuous mode [ 407.653118][T17183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 407.693021][T17183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 407.749987][T17244] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3085'. [ 407.779342][T17183] team0: Port device team_slave_0 added [ 407.798048][T17183] team0: Port device team_slave_1 added [ 407.904474][T17183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 407.916963][T17183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 407.948377][T17183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 407.982733][T17183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 408.041840][T17183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 408.125082][T17183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 408.175135][ T5871] Bluetooth: hci1: command tx timeout [ 408.235479][T17269] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3098'. [ 408.303071][T17183] hsr_slave_0: entered promiscuous mode [ 408.332690][T17183] hsr_slave_1: entered promiscuous mode [ 408.354504][T17183] debugfs: 'hsr0' already exists in 'hsr' [ 408.360246][T17183] Cannot create hsr debugfs directory [ 408.743610][ T5871] Bluetooth: hci5: command tx timeout [ 408.852774][T17183] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 408.913523][T17183] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 408.999229][T17183] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 409.079198][T17183] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 409.315638][T17183] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 409.338405][T17183] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 409.361196][T17183] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 409.379942][T17183] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 409.597591][T17183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 409.641639][T17183] 8021q: adding VLAN 0 to HW filter on device team0 [ 409.687238][T11177] bridge0: port 1(bridge_slave_0) entered blocking state [ 409.694411][T11177] bridge0: port 1(bridge_slave_0) entered forwarding state [ 409.732401][T11177] bridge0: port 2(bridge_slave_1) entered blocking state [ 409.739574][T11177] bridge0: port 2(bridge_slave_1) entered forwarding state [ 409.916519][T17366] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 410.248917][T17183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 410.257887][ T5871] Bluetooth: hci1: command tx timeout [ 410.362767][T17183] veth0_vlan: entered promiscuous mode [ 410.380929][T17183] veth1_vlan: entered promiscuous mode [ 410.434849][T17183] veth0_macvtap: entered promiscuous mode [ 410.454300][T17183] veth1_macvtap: entered promiscuous mode [ 410.484922][T17183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 410.517997][T17183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 410.540851][T11177] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.550681][T11177] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.616413][ T8952] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.626523][ T8952] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.731170][T11177] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 410.744738][T11177] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 410.820274][ T5871] Bluetooth: hci5: command tx timeout [ 410.830217][T11177] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 410.838984][T11177] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 411.107591][T17422] batadv0 speed is unknown, defaulting to 1000 [ 411.151229][T17422] lo speed is unknown, defaulting to 1000 [ 411.489703][ T5184] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 411.499578][ T5184] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 411.508757][ T5184] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 411.520135][ T5184] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 411.529223][ T5184] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 411.685326][T17431] batadv0 speed is unknown, defaulting to 1000 [ 411.697003][T17431] lo speed is unknown, defaulting to 1000 [ 412.088003][T17431] chnl_net:caif_netlink_parms(): no params data found [ 412.269351][T17431] bridge0: port 1(bridge_slave_0) entered blocking state [ 412.277399][T17431] bridge0: port 1(bridge_slave_0) entered disabled state [ 412.285882][T17431] bridge_slave_0: entered allmulticast mode [ 412.295225][T17431] bridge_slave_0: entered promiscuous mode [ 412.307800][T17431] bridge0: port 2(bridge_slave_1) entered blocking state [ 412.315447][T17431] bridge0: port 2(bridge_slave_1) entered disabled state [ 412.322625][T17431] bridge_slave_1: entered allmulticast mode [ 412.335920][T17431] bridge_slave_1: entered promiscuous mode [ 412.418135][T17431] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 412.430910][T17431] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 412.527958][T17431] team0: Port device team_slave_0 added [ 412.546613][T17431] team0: Port device team_slave_1 added [ 412.626778][T17431] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 412.634500][T17431] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 412.672494][T17431] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 412.725391][T17431] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 412.742565][T17431] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 412.774478][T17431] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 412.834318][T17493] sctp: [Deprecated]: syz.2.3195 (pid 17493) Use of int in max_burst socket option deprecated. [ 412.834318][T17493] Use struct sctp_assoc_value instead [ 412.894922][ T5184] Bluetooth: hci5: command tx timeout [ 412.939892][T17431] hsr_slave_0: entered promiscuous mode [ 412.947809][T17431] hsr_slave_1: entered promiscuous mode [ 412.955900][T17431] debugfs: 'hsr0' already exists in 'hsr' [ 412.962861][T17431] Cannot create hsr debugfs directory [ 413.327879][T17520] sctp: [Deprecated]: syz.2.3208 (pid 17520) Use of int in max_burst socket option deprecated. [ 413.327879][T17520] Use struct sctp_assoc_value instead [ 413.351943][T17431] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 413.481206][T17431] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 413.556465][T17431] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 413.618849][ T5184] Bluetooth: hci2: command tx timeout [ 413.666119][T17431] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 413.750516][T17547] sctp: [Deprecated]: syz.3.3221 (pid 17547) Use of int in max_burst socket option deprecated. [ 413.750516][T17547] Use struct sctp_assoc_value instead [ 413.976767][T17431] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 413.999976][T17431] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 414.026163][T17431] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 414.054343][T17431] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 414.219431][T17431] 8021q: adding VLAN 0 to HW filter on device bond0 [ 414.272443][T17431] 8021q: adding VLAN 0 to HW filter on device team0 [ 414.290131][ T6508] bridge0: port 1(bridge_slave_0) entered blocking state [ 414.297302][ T6508] bridge0: port 1(bridge_slave_0) entered forwarding state [ 414.345361][ T6506] bridge0: port 2(bridge_slave_1) entered blocking state [ 414.352481][ T6506] bridge0: port 2(bridge_slave_1) entered forwarding state [ 414.772679][T17431] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 414.978237][ T5184] Bluetooth: hci5: command tx timeout [ 415.517369][T17631] sctp: [Deprecated]: syz.0.3251 (pid 17631) Use of int in max_burst socket option deprecated. [ 415.517369][T17631] Use struct sctp_assoc_value instead [ 415.601389][T17431] veth0_vlan: entered promiscuous mode [ 415.625074][T17431] veth1_vlan: entered promiscuous mode [ 415.691006][T17431] veth0_macvtap: entered promiscuous mode [ 415.698107][ T5184] Bluetooth: hci2: command tx timeout [ 415.718881][T17431] veth1_macvtap: entered promiscuous mode [ 415.747801][T17431] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 415.765190][T17431] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 415.889111][ T6506] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.902794][ T6506] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.925463][ T6506] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.951288][ T6506] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.121771][ T6506] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 416.151508][ T6506] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 416.227716][T11177] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 416.252991][T11177] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 416.635490][T17683] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3277'. [ 417.223062][T17718] syzkaller0: entered promiscuous mode [ 417.229326][T17718] syzkaller0: entered allmulticast mode [ 417.252936][T17720] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3295'. [ 417.438104][T17731] sctp: [Deprecated]: syz.2.3300 (pid 17731) Use of int in max_burst socket option deprecated. [ 417.438104][T17731] Use struct sctp_assoc_value instead [ 417.775727][ T5184] Bluetooth: hci2: command tx timeout [ 417.953649][ T5871] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 417.986385][ T5871] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 417.999363][ T5871] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 418.009802][ T5871] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 418.024058][ T5871] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 419.635788][T17740] batadv0 speed is unknown, defaulting to 1000 [ 419.674990][T17740] lo speed is unknown, defaulting to 1000 [ 419.855414][ T5184] Bluetooth: hci2: command tx timeout [ 420.096180][ T5184] Bluetooth: hci4: command tx timeout [ 420.165180][T17740] chnl_net:caif_netlink_parms(): no params data found [ 420.545052][T17740] bridge0: port 1(bridge_slave_0) entered blocking state [ 420.562090][T17740] bridge0: port 1(bridge_slave_0) entered disabled state [ 420.580072][T17740] bridge_slave_0: entered allmulticast mode [ 420.709010][T17740] bridge_slave_0: entered promiscuous mode [ 420.756748][T17740] bridge0: port 2(bridge_slave_1) entered blocking state [ 420.781218][T17740] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.803871][T17740] bridge_slave_1: entered allmulticast mode [ 420.811609][T17740] bridge_slave_1: entered promiscuous mode [ 420.969867][T17740] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 420.984450][T17740] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 421.094717][T17740] team0: Port device team_slave_0 added [ 421.104694][T17740] team0: Port device team_slave_1 added [ 421.167322][T17740] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 421.177165][T17740] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 421.234160][T17740] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 421.249203][T17740] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 421.258808][T17740] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 421.286477][T17740] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 421.408181][T17740] hsr_slave_0: entered promiscuous mode [ 421.419610][T17740] hsr_slave_1: entered promiscuous mode [ 421.429486][T17740] debugfs: 'hsr0' already exists in 'hsr' [ 421.436069][T17740] Cannot create hsr debugfs directory [ 422.175560][ T5184] Bluetooth: hci4: command tx timeout [ 422.326379][T17914] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3380'. [ 422.470890][T17740] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 422.527494][T17740] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 422.550368][T17740] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 422.590101][T17740] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 422.858866][T17740] 8021q: adding VLAN 0 to HW filter on device bond0 [ 422.908462][T17740] 8021q: adding VLAN 0 to HW filter on device team0 [ 422.965388][ T8944] bridge0: port 1(bridge_slave_0) entered blocking state [ 422.972532][ T8944] bridge0: port 1(bridge_slave_0) entered forwarding state [ 423.001834][ T8944] bridge0: port 2(bridge_slave_1) entered blocking state [ 423.009019][ T8944] bridge0: port 2(bridge_slave_1) entered forwarding state [ 423.125690][T17953] batadv0 speed is unknown, defaulting to 1000 [ 423.164528][T17953] lo speed is unknown, defaulting to 1000 [ 423.762510][T17994] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3411'. [ 423.887862][T17740] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 424.049627][T17740] veth0_vlan: entered promiscuous mode [ 424.068104][T17740] veth1_vlan: entered promiscuous mode [ 424.162973][T17740] veth0_macvtap: entered promiscuous mode [ 424.208870][T17740] veth1_macvtap: entered promiscuous mode [ 424.260136][T17740] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 424.268043][ T5184] Bluetooth: hci4: command tx timeout [ 424.286816][T17740] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 424.311171][T11179] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.363101][T11179] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.392457][ T6506] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.467072][ T6506] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.637491][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 424.654033][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 424.764116][T11179] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 424.771949][T11179] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 426.335320][ T5184] Bluetooth: hci4: command tx timeout [ 426.883767][T18107] IPv4: Oversized IP packet from 127.0.0.1 [ 426.890950][ C1] IPv4: Oversized IP packet from 127.0.0.1 [ 427.204418][T18127] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3472'. [ 427.986785][T18179] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3498'. [ 428.513731][T18208] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3513'. [ 428.862215][T18233] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3525'. [ 429.076536][T18247] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 429.363381][T18269] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3543'. [ 429.476373][T18275] sock: sock_timestamping_bind_phc: sock not bind to device [ 429.719054][T18288] batadv0 speed is unknown, defaulting to 1000 [ 429.750020][T18288] lo speed is unknown, defaulting to 1000 [ 429.946755][T18302] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3558'. [ 430.458311][T18339] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3576'. [ 430.891867][T18364] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3589'. [ 432.104697][T18445] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3628'. [ 432.886301][T18495] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3651'. [ 433.257808][T18515] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3660'. [ 434.297772][T18573] IPv6: NLM_F_CREATE should be specified when creating new route [ 436.297703][T18700] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 438.153091][T18822] pimreg: tun_chr_ioctl cmd 2148553947 [ 438.919471][T18878] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3835'. [ 439.186214][T18894] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3843'. [ 439.241342][T18898] netlink: 168 bytes leftover after parsing attributes in process `syz.2.3845'. [ 439.348816][T18900] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 439.460319][T18908] netlink: 'syz.2.3851': attribute type 27 has an invalid length. [ 439.565872][T18908] bridge0: port 2(bridge_slave_1) entered disabled state [ 439.573669][T18908] bridge0: port 1(bridge_slave_0) entered disabled state [ 439.738022][T18908] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 439.766548][T18908] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 439.939978][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.126754][ T8944] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.175336][ T8944] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.194821][ T6508] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.223910][ T6508] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.721430][T19053] netlink: 308 bytes leftover after parsing attributes in process `syz.1.3914'. [ 444.868265][T19174] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3970'. [ 445.290528][T19203] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3983'. [ 445.320205][T19203] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3983'. [ 446.130408][T19250] 8021q: adding VLAN 0 to HW filter on device team0 [ 446.147131][T19250] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 451.118026][ T6508] dvmrp8 (unregistering): left allmulticast mode [ 451.187505][ T6508] bond2 (unregistering): (slave geneve2): Releasing active interface [ 452.799832][ T6508] bond0 (unregistering): (slave 30): Releasing backup interface [ 452.809944][ T6508] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 452.820930][ T6508] bond0 (unregistering): Released all slaves [ 452.918002][ T6508] bond1 (unregistering): Released all slaves [ 452.936907][ T6508] bond2 (unregistering): Released all slaves [ 453.060778][ T6508] bond3 (unregistering): (slave veth7): Releasing active interface [ 453.072211][ T6508] bond3 (unregistering): Released all slaves [ 453.159900][ T6508] bond4 (unregistering): Released all slaves [ 453.171877][T19511] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4131'. [ 453.364429][ T6508] tipc: Disabling bearer [ 453.392007][ T6508] tipc: Disabling bearer [ 453.429470][ T6508] tipc: Left network mode [ 453.656834][T19615] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4180'. [ 453.670698][T19619] netlink: 'syz.2.4181': attribute type 27 has an invalid length. [ 454.056413][T19637] netlink: 84 bytes leftover after parsing attributes in process `syz.2.4190'. [ 454.203967][ T6508] hsr_slave_0: left promiscuous mode [ 454.225464][ T6508] hsr_slave_1: left promiscuous mode [ 454.232936][ T6508] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 454.272209][ T6508] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 454.620921][T19670] netlink: 84 bytes leftover after parsing attributes in process `syz.0.4203'. [ 454.960658][ T6508] team0 (unregistering): Port device team_slave_1 removed [ 455.001231][ T6508] team0 (unregistering): Port device team_slave_0 removed [ 455.340548][T19646] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4193'. [ 457.090276][ T6508] IPVS: stop unused estimator thread 0... [ 457.378678][ T6508] ------------[ cut here ]------------ [ 457.384722][ T6508] WARNING: CPU: 0 PID: 6508 at fs/proc/proc_sysctl.c:1558 retire_sysctl_set+0x48/0x60 [ 457.395113][ T6508] Modules linked in: [ 457.399473][ T6508] CPU: 0 UID: 0 PID: 6508 Comm: kworker/u8:12 Not tainted syzkaller #0 PREEMPT(full) [ 457.410440][ T6508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 457.421885][ T6508] Workqueue: netns cleanup_net SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 457.427819][ T6508] RIP: 0010:retire_sysctl_set+0x48/0x60 [ 457.434155][ T6508] Code: 00 fc ff df 80 3c 08 00 74 08 48 89 df e8 90 e9 c6 ff 48 83 3b 00 75 0c e8 d5 67 63 ff 5b c3 cc cc cc cc cc e8 c9 67 63 ff 90 <0f> 0b 90 5b c3 cc cc cc cc cc 66 66 66 66 66 2e 0f 1f 84 00 00 00 [ 457.455105][ T6508] RSP: 0018:ffffc9001cb078d0 EFLAGS: 00010293 [ 457.461769][ T6508] RAX: ffffffff825c46f7 RBX: ffff888031db02e0 RCX: ffff888055b28000 [ 457.470046][ T6508] RDX: 0000000000000000 RSI: ffffffff8dba022c RDI: ffff888031db0280 [ 457.479016][ T6508] RBP: ffffc9001cb079b0 R08: ffffffff8fa30637 R09: 1ffffffff1f460c6 [ 457.487134][ T6508] R10: dffffc0000000000 R11: ffffffff8b30ad40 R12: ffffffff8f82e780 [ 457.495172][ T6508] R13: 1ffff92003960f40 R14: ffffffff8f82e760 R15: ffff888031db00a8 [ 457.503158][ T6508] FS: 0000000000000000(0000) GS:ffff888125c39000(0000) knlGS:0000000000000000 [ 457.512807][ T6508] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 457.520499][ T6508] CR2: 000000110c24bda3 CR3: 0000000074592000 CR4: 00000000003526f0 [ 457.529051][ T6508] Call Trace: [ 457.532345][ T6508] [ 457.536213][ T6508] ops_undo_list+0x49a/0x990 [ 457.540831][ T6508] ? __pfx_ops_undo_list+0x10/0x10 [ 457.546441][ T6508] ? do_raw_spin_unlock+0x122/0x240 [ 457.551663][ T6508] cleanup_net+0x4c5/0x800 [ 457.556617][ T6508] ? __pfx_cleanup_net+0x10/0x10 [ 457.561575][ T6508] ? _raw_spin_unlock_irq+0x23/0x50 [ 457.567254][ T6508] ? process_scheduled_works+0x9ef/0x17b0 [ 457.572997][ T6508] ? process_scheduled_works+0x9ef/0x17b0 [ 457.579222][ T6508] process_scheduled_works+0xae1/0x17b0 [ 457.585303][ T6508] ? __pfx_process_scheduled_works+0x10/0x10 [ 457.591325][ T6508] worker_thread+0x8a0/0xda0 [ 457.596452][ T6508] kthread+0x70e/0x8a0 [ 457.600543][ T6508] ? __pfx_worker_thread+0x10/0x10 [ 457.606177][ T6508] ? __pfx_kthread+0x10/0x10 [ 457.611478][ T6508] ? _raw_spin_unlock_irq+0x23/0x50 [ 457.617894][ T6508] ? lockdep_hardirqs_on+0x9c/0x150 [ 457.623108][ T6508] ? __pfx_kthread+0x10/0x10 [ 457.628221][ T6508] ret_from_fork+0x439/0x7d0 [ 457.632828][ T6508] ? __pfx_ret_from_fork+0x10/0x10 [ 457.638499][ T6508] ? __switch_to_asm+0x39/0x70 [ 457.643844][ T6508] ? __switch_to_asm+0x33/0x70 [ 457.648624][ T6508] ? __pfx_kthread+0x10/0x10 [ 457.653740][ T6508] ret_from_fork_asm+0x1a/0x30 [ 457.658535][ T6508] [ 457.661568][ T6508] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 457.668846][ T6508] CPU: 0 UID: 0 PID: 6508 Comm: kworker/u8:12 Not tainted syzkaller #0 PREEMPT(full) [ 457.678392][ T6508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 457.688447][ T6508] Workqueue: netns cleanup_net [ 457.693212][ T6508] Call Trace: [ 457.696479][ T6508] [ 457.699396][ T6508] dump_stack_lvl+0x99/0x250 [ 457.703977][ T6508] ? __asan_memcpy+0x40/0x70 [ 457.708563][ T6508] ? __pfx_dump_stack_lvl+0x10/0x10 [ 457.713761][ T6508] ? __pfx__printk+0x10/0x10 [ 457.718372][ T6508] vpanic+0x281/0x750 [ 457.722347][ T6508] ? __pfx__printk+0x10/0x10 [ 457.726931][ T6508] ? __pfx_vpanic+0x10/0x10 [ 457.731425][ T6508] ? is_bpf_text_address+0x292/0x2b0 [ 457.736713][ T6508] panic+0xb9/0xc0 [ 457.740425][ T6508] ? __pfx_panic+0x10/0x10 [ 457.744843][ T6508] __warn+0x31b/0x4b0 [ 457.748811][ T6508] ? retire_sysctl_set+0x48/0x60 [ 457.753737][ T6508] ? retire_sysctl_set+0x48/0x60 [ 457.758661][ T6508] report_bug+0x2be/0x4f0 [ 457.762974][ T6508] ? retire_sysctl_set+0x48/0x60 [ 457.767900][ T6508] ? retire_sysctl_set+0x48/0x60 [ 457.772828][ T6508] ? retire_sysctl_set+0x4a/0x60 [ 457.777752][ T6508] handle_bug+0x84/0x160 [ 457.781987][ T6508] exc_invalid_op+0x1a/0x50 [ 457.786478][ T6508] asm_exc_invalid_op+0x1a/0x20 [ 457.791316][ T6508] RIP: 0010:retire_sysctl_set+0x48/0x60 [ 457.796852][ T6508] Code: 00 fc ff df 80 3c 08 00 74 08 48 89 df e8 90 e9 c6 ff 48 83 3b 00 75 0c e8 d5 67 63 ff 5b c3 cc cc cc cc cc e8 c9 67 63 ff 90 <0f> 0b 90 5b c3 cc cc cc cc cc 66 66 66 66 66 2e 0f 1f 84 00 00 00 [ 457.816445][ T6508] RSP: 0018:ffffc9001cb078d0 EFLAGS: 00010293 [ 457.822501][ T6508] RAX: ffffffff825c46f7 RBX: ffff888031db02e0 RCX: ffff888055b28000 [ 457.830459][ T6508] RDX: 0000000000000000 RSI: ffffffff8dba022c RDI: ffff888031db0280 [ 457.838418][ T6508] RBP: ffffc9001cb079b0 R08: ffffffff8fa30637 R09: 1ffffffff1f460c6 [ 457.846376][ T6508] R10: dffffc0000000000 R11: ffffffff8b30ad40 R12: ffffffff8f82e780 [ 457.854334][ T6508] R13: 1ffff92003960f40 R14: ffffffff8f82e760 R15: ffff888031db00a8 [ 457.862296][ T6508] ? __pfx_sysctl_net_exit+0x10/0x10 [ 457.867575][ T6508] ? retire_sysctl_set+0x47/0x60 [ 457.872512][ T6508] ops_undo_list+0x49a/0x990 [ 457.877096][ T6508] ? __pfx_ops_undo_list+0x10/0x10 [ 457.882207][ T6508] ? do_raw_spin_unlock+0x122/0x240 [ 457.887396][ T6508] cleanup_net+0x4c5/0x800 [ 457.891812][ T6508] ? __pfx_cleanup_net+0x10/0x10 [ 457.896753][ T6508] ? _raw_spin_unlock_irq+0x23/0x50 [ 457.901938][ T6508] ? process_scheduled_works+0x9ef/0x17b0 [ 457.907652][ T6508] ? process_scheduled_works+0x9ef/0x17b0 [ 457.913370][ T6508] process_scheduled_works+0xae1/0x17b0 [ 457.918945][ T6508] ? __pfx_process_scheduled_works+0x10/0x10 [ 457.924941][ T6508] worker_thread+0x8a0/0xda0 [ 457.929545][ T6508] kthread+0x70e/0x8a0 [ 457.933610][ T6508] ? __pfx_worker_thread+0x10/0x10 [ 457.938725][ T6508] ? __pfx_kthread+0x10/0x10 [ 457.943315][ T6508] ? _raw_spin_unlock_irq+0x23/0x50 [ 457.948500][ T6508] ? lockdep_hardirqs_on+0x9c/0x150 [ 457.953686][ T6508] ? __pfx_kthread+0x10/0x10 [ 457.958266][ T6508] ret_from_fork+0x439/0x7d0 [ 457.962844][ T6508] ? __pfx_ret_from_fork+0x10/0x10 [ 457.967952][ T6508] ? __switch_to_asm+0x39/0x70 [ 457.972707][ T6508] ? __switch_to_asm+0x33/0x70 [ 457.977458][ T6508] ? __pfx_kthread+0x10/0x10 [ 457.982038][ T6508] ret_from_fork_asm+0x1a/0x30 [ 457.986804][ T6508] [ 457.990060][ T6508] Kernel Offset: disabled [ 457.994368][ T6508] Rebooting in 86400 seconds..