last executing test programs: 10.633435015s ago: executing program 1 (id=3253): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x8}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000080)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x70bd29, 0x25dfdbfb, {0xa, 0x80, 0x80, 0x3}, [@RTA_DPORT={0x6, 0x1d, 0x4e21}]}, 0x24}, 0x1, 0x0, 0x0, 0x24040814}, 0x40000) 10.532151944s ago: executing program 1 (id=3257): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r1, &(0x7f0000000340)={0xa, 0xe64, 0x8, @ipv4={'\x00', '\xff\xff', @loopback}, 0x201}, 0x1c) r2 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r2, &(0x7f0000000480)={0xa, 0xe64, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, 0x1000}, 0x1c) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22, 0x7ff, @empty, 0x4cae}, 0x1c) 10.352493154s ago: executing program 1 (id=3261): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000005a0000008500000022000000180100002020702500000000002020200100000000000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00"], 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={0xffffffffffffffff, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x11f3, &(0x7f0000000c00)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, 'z&-', 0x11bd, 0x3a, 0x0, @local, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev={0xfe, 0x80, '\x00', 0x3c}}}}}}}, 0x0) 10.149140824s ago: executing program 1 (id=3267): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000d80)=@delchain={0x1d0, 0x65, 0x300, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2}, {0x0, 0xb}, {0xd}}, [@TCA_RATE={0x6, 0x5, {0xaf, 0x1}}, @TCA_RATE={0x6, 0x5, {0xb, 0x40}}, @filter_kind_options=@f_basic={{0xa}, {0x190, 0x2, [@TCA_BASIC_ACT={0x18c, 0x3, [@m_sample={0x78, 0x17, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0xfffffff9, 0x1ff, 0x7, 0x5, 0x23}}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x1ff}]}, {0x29, 0x6, "64a8416e1a2ad4f08a507ade2030959fbaf47dae3d8c5509c5f67bbd00abca8965993d237d"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_xt={0x110, 0xc, 0x0, 0x0, {{0x7}, {0x28, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}]}, {0xc1, 0x6, "2dbf268a304e872a0d7f589c8901efee8571a53c4f0062991873d363eeca75f7594e303fa6758fe5d09d4f9ffd072918848212ec1896728111b3c61d1de320181a72e0f47ddfe150f87d3d5d6ddc89258e07ea93abbbaa8b9538526f3018c8a1b0e044cee5833db84e522dd97d547504650f4a6186a9bdc8a084ea8dcb9ee2d96d67813c5f9ee6a009727f36b1bb22dc537ebc9f6caf615e577911012fe6258c81fc98b7d7995175bc57ea44b3e48c22ed50be2b49ac4633c89d7f6899"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x40008c5}, 0x82050) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 9.81363417s ago: executing program 1 (id=3273): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) listen(r0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e21, 0x80, @local, 0x10}}, 0x0, 0x0, 0xb, 0x0, "9ecf3315567f14d56a87d134cc409e2a651bbbf6c5048093ffff007c0000000054b71f03985ac33e31d612d976a6efcda8853b8a443050362195dd7dbae51d07384b7c2e694900"}, 0xd8) syz_emit_ethernet(0x63, &(0x7f0000000080)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00b700", 0x2d, 0x6, 0x0, @local, @local, {[], {{0x4e24, 0x1, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x1, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "f4c466ec35e61e92e583dc9b00010100"}]}}, {"dbdad395c4"}}}}}}}, 0x0) 9.602003064s ago: executing program 1 (id=3277): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000600000004000000010000"], 0x0, 0x36}, 0x28) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0xfffe, 0x3000000, @mcast2, 0x4}, 0x1c) write(r0, &(0x7f00000000c0)="8f2a0a65bd8c3a2b0304000e0580a7b6070d63e286a5cefe", 0x5ac) 3.843456164s ago: executing program 3 (id=3391): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000280)=@framed={{0x18, 0x2, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0xffffffff}, [@call={0x85, 0x0, 0x0, 0x2c}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xcee5}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2107, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 3.777815986s ago: executing program 4 (id=3393): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x12}, 0x80, &(0x7f0000000400)=[{&(0x7f00000006c0)="62043c009e0101000001ad2f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e247345af215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872c4801e5d0711b4373c7224ed7a9cbd49d40f82bdb6afc0036824be26fc96e49a70e90797e6caa1b38ddacb3cb2b3eac7c068a185b644582f25edfa3d6a46e2a894ca809a422a6a29bd7145bb6e7992570484d6a710292ea0c3f97b7cbff701684b13c5593262534a7af9eab48f2ca2d74d9a4de", 0xd9}, {&(0x7f0000000c00)="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", 0x112}, {&(0x7f0000000880)="0a985d7879f1", 0x6}], 0x3}, 0x40800) 3.631021345s ago: executing program 0 (id=3395): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'batadv_slave_0\x00', &(0x7f0000000000)=@ethtool_perm_addr={0x4b, 0x8, "4372070500000000"}}) 3.630038069s ago: executing program 3 (id=3396): r0 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xa, 0x0, 0x0) 3.601549537s ago: executing program 4 (id=3397): r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xb}, @multicast1}}}], 0x20}, 0x4008804) recvmsg(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000013c0)=""/4096, 0x1000}], 0x1}, 0x40) 3.534259019s ago: executing program 3 (id=3398): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x14, 0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x61d0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20040024}, 0x40) 3.431842088s ago: executing program 4 (id=3400): write$cgroup_devices(0xffffffffffffffff, 0x0, 0x9) r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000f40)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {}, {}, 0x0, 0x0, 0x0, 0x24}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x535) syz_emit_ethernet(0x66, &(0x7f00000002c0)={@random="6d220af1c166", @empty, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "182325", 0x30, 0x2c, 0x0, @remote, @local, {[@routing={0x84, 0x0, 0x2, 0x1}, @routing={0x3c, 0x4, 0x0, 0xc, 0x0, [@loopback, @private1]}]}}}}}, 0x0) 3.430812848s ago: executing program 0 (id=3401): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03", 0x3}], 0x1}, 0x0) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x4008054) write$nci(r1, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) write$nci(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="5001"], 0x14) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) 3.158570883s ago: executing program 4 (id=3402): r0 = socket$unix(0x1, 0x2, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_INTERFACE(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r1, 0x1, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20044890}, 0x4004000) 2.419748782s ago: executing program 3 (id=3406): r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x12}, 0x80, &(0x7f0000000400)=[{&(0x7f00000006c0)="62043c009e0101000001ad2f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e247345af215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872c4801e5d0711b4373c7224ed7a9cbd49d40f82bdb6afc0036824be26fc96e49a70e90797e6caa1b38ddacb3cb2b3eac7c068a185b644582f25edfa3d6a46e2a894ca809a422a6a29bd7145bb6e7992570484d6a710292ea0c3f97b7cbff701684b13c5593262534a7af9eab48f2ca2d74d9a4de", 0xd9}, {&(0x7f0000000c00)="294f28dfe56d2c8ba23606bc7ecd1f634665cb5bed07bac5684da6eb21da1d6926910c5a0c653b0106869a804dd2a44ce42557b2e32e2bd367e9d01a5e7380cc4fc8e7c9044cc4115b978ca7427d749beaefdf2e48b369cb169ad7b1ced26bb161297c7e56a3e83e91b379c179017f8b4657d1b22eca6bca33036d33e1a684059c53cea91ca6637ac780ab2bcfc22a666cd4e5876f11e9aee4724b7cb59731c97e70ebd7f7483994eb07de2f3c6a9448c3206cff6d290b433f331c2399e99ee3bdecf5689eddc3e549966c1106a933bbc47b65ca6e9d7efbee6e3b1dbe87313111e85336d6890002db17751b6044f964dc90ea466f90856112be7f0a54b39a3f66cc4c39544300093158af39cdde429f50d8", 0x112}, {&(0x7f0000000880)="0a985d7879f1", 0x6}], 0x3}, 0x40800) 2.345045636s ago: executing program 3 (id=3407): socket$unix(0x1, 0x1, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x840) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="400404"], 0x7) 1.449492245s ago: executing program 2 (id=3416): r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x12}, 0x80, &(0x7f0000000400)=[{&(0x7f00000006c0)="62043c009e0101000001ad2f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e247345af215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872c4801e5d0711b4373c7224ed7a9cbd49d40f82bdb6afc0036824be26fc96e49a70e90797e6caa1b38ddacb3cb2b3eac7c068a185b644582f25edfa3d6a46e2a894ca809a422a6a29bd7145bb6e7992570484d6a710292ea0c3f97b7cbff701684b13c5593262534a7af9eab48f2ca2d74d9a4de", 0xd9}, {&(0x7f0000000c00)="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", 0x112}, {&(0x7f0000000880)="0a985d7879f1", 0x6}], 0x3}, 0x40800) 1.421962169s ago: executing program 2 (id=3417): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'veth1_vlan\x00'}) setsockopt$inet6_mreq(r0, 0x29, 0x1c, 0x0, 0x0) 1.39047894s ago: executing program 2 (id=3418): socket$packet(0x11, 0x2, 0x300) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x24, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r3, &(0x7f0000000500)=[{{&(0x7f00000002c0)={0x2, 0x4e20, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000340)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @remote}}}], 0x20}}], 0x1, 0x240080a0) sendmmsg$inet(r3, &(0x7f00000036c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x12) 269.623929ms ago: executing program 0 (id=3419): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x2107, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 269.467286ms ago: executing program 0 (id=3420): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@bridge_dellink={0x24, 0x11, 0x1, 0x0, 0x25dfdbfb, {0x7, 0x0, 0x0, r2}, [@IFLA_AF_SPEC={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000085}, 0x0) 264.741137ms ago: executing program 3 (id=3421): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x144, 0x65, 0x0, 0x0, 0x1000, {0x0, 0x0, 0x0, 0x0, {0x10, 0xfff2}}, [@filter_kind_options=@f_route={{0xa}, {0x114, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x2, 0xfff1}}, @TCA_ROUTE4_ACT={0x108, 0x6, [@m_csum={0x30, 0x8, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_ife={0x50, 0x7, 0x0, 0x0, {{0x8}, {0x10, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @broadcast}]}, {0x19, 0x6, "3c4d628f307b84d62ea02c2a83d6801f55d9f79db5"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x5}}}}, @m_bpf={0x2c, 0x1b, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}, @m_vlan={0x58, 0x11, 0x0, 0x0, {{0x9}, {0x14, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x48e}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x1}]}, {0x1a, 0x6, "5f63f7b81428fa495feea1e2726b3e40e69cac9598e2"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x144}}, 0x0) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x7e}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41, 0xb00}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 246.529213ms ago: executing program 4 (id=3422): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="3f00000000000000280012800b0001006272696467650000180002800c002e00030000000307"], 0x48}}, 0x0) 189.57074ms ago: executing program 2 (id=3423): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000700)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x61}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r1, 0x18000000000002a0, 0x10, 0x0, &(0x7f00000002c0)="d2ff03076003008cb89e08f086dd", 0x0, 0x1001, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 140.511176ms ago: executing program 0 (id=3424): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{r0}, &(0x7f00000002c0), &(0x7f0000000300)='%pi6 \x00'}, 0x20) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000940)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r2, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000180)=ANY=[], 0x0) 131.245986ms ago: executing program 2 (id=3425): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b04000000000000000002000000400004803c0001800b00010065787468647200002c000280080003400000000008000140000000130500020089000000080006400000000108000440000000070900010073797a30000000000900020073797a320000000014000000110001"], 0x94}}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x0, 0x7, 0x40, 0x68, 0x0, 0xf, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010101}, @payload_mcast={{{{{{0x2c, 0x0, 0x0, 0x1, 0x1, 0xb, 0x1, 0x2, 0x1ff, 0x0, 0x3, 0x7, 0x1, 0x1, 0x9, 0x3ff, 0x2, 0x4e23, 0x4e22}, 0x4, 0x1}, 0x2, 0x1}, 0x3}}}}}}}, 0x0) 56.303671ms ago: executing program 2 (id=3426): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x5, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000000085"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x0, 0xffffffffffffff0b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 14.090592ms ago: executing program 0 (id=3427): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'veth1_vlan\x00'}) setsockopt$inet6_mreq(r0, 0x29, 0x1c, 0x0, 0x0) 0s ago: executing program 4 (id=3428): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) kernel console output (not intermixed with test programs): 191.004558][ T49] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 191.138189][T11965] sctp: [Deprecated]: syz.4.1666 (pid 11965) Use of struct sctp_assoc_value in delayed_ack socket option. [ 191.138189][T11965] Use struct sctp_sack_info instead [ 191.154792][ T6200] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 191.289184][ T6200] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 191.454859][ T5934] tipc: Node number set to 134418688 [ 191.526095][T11989] __nla_validate_parse: 24 callbacks suppressed [ 191.526115][T11989] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1671'. [ 191.919170][T12004] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1677'. [ 191.945364][T12006] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1677'. [ 191.968078][T12004] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1677'. [ 192.132239][T12015] lo speed is unknown, defaulting to 1000 [ 192.169917][T12019] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1679'. [ 192.219248][T12020] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1681'. [ 192.252222][T12020] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1681'. [ 192.415473][T12027] netlink: 'syz.4.1683': attribute type 3 has an invalid length. [ 192.468382][T12038] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1686'. [ 192.674036][T12049] No such timeout policy "syz0" [ 192.906434][T12061] x_tables: duplicate underflow at hook 3 [ 192.935439][T12063] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 193.353275][T12069] team_slave_1: left promiscuous mode [ 193.529108][T12090] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 193.624820][T12104] netlink: 'syz.2.1702': attribute type 1 has an invalid length. [ 193.641464][T12069] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 193.680283][T12069] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 193.757859][T12069] tipc: Resetting bearer [ 193.763407][T12069] tipc: Resetting bearer [ 194.012452][T12069] veth1_vlan: left allmulticast mode [ 194.181693][T12104] 8021q: adding VLAN 0 to HW filter on device bond7 [ 194.190110][T12110] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1703'. [ 194.214549][ T6210] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.256887][ T6210] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.266466][ T6210] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.276211][ T6210] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.433012][T12128] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1710'. [ 194.445826][T12124] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 194.453448][T12124] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 194.648385][T12139] ip6gre2: entered promiscuous mode [ 194.662543][T12139] ip6gre2: entered allmulticast mode [ 194.944727][ C1] net_ratelimit: 20 callbacks suppressed [ 194.944746][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.993950][T12160] netlink: 'syz.2.1718': attribute type 10 has an invalid length. [ 195.002022][ T49] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 195.010849][T12160] hsr0: entered promiscuous mode [ 195.016517][T12160] bridge0: port 1(hsr0) entered blocking state [ 195.022984][T12160] bridge0: port 1(hsr0) entered disabled state [ 195.030237][T12160] hsr0: entered allmulticast mode [ 195.035466][T12160] hsr_slave_0: entered allmulticast mode [ 195.041216][T12160] hsr_slave_1: entered allmulticast mode [ 195.107344][ T6212] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 195.224686][ T6200] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 195.334622][ T6210] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 195.438858][T12178] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 195.464957][ T6210] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 195.510884][T12178] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 195.526770][T12184] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 195.574777][ T6210] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 195.590301][T12178] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 195.658043][T12178] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 195.698137][ T6212] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 195.772101][ T6210] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 195.810426][ T6210] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 195.820273][ T49] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 195.840031][ T49] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 195.893335][T12201] veth0: entered promiscuous mode [ 195.930741][ T49] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 195.954675][T12200] veth0: left promiscuous mode [ 196.187411][T12222] ip6tnl3: entered allmulticast mode [ 196.337948][T12231] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 196.345283][T12231] IPv6: NLM_F_CREATE should be set when creating new route [ 196.357029][T12231] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 196.364302][T12231] IPv6: NLM_F_CREATE should be set when creating new route [ 196.782877][T12246] __nla_validate_parse: 19 callbacks suppressed [ 196.782897][T12246] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1743'. [ 196.933833][T12250] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1744'. [ 196.943620][T12250] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1744'. [ 196.983889][T12250] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1744'. [ 197.081945][T12256] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1746'. [ 197.126193][T12259] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1747'. [ 197.135793][T12254] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1746'. [ 197.138920][T12260] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1748'. [ 197.165457][T12260] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1748'. [ 197.190475][T12259] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1747'. [ 197.358300][T12268] netlink: 'syz.3.1750': attribute type 23 has an invalid length. [ 197.441402][T12270] tipc: Resetting bearer [ 198.729855][T12366] gretap1: entered promiscuous mode [ 198.743249][T12366] batman_adv: batadv0: Adding interface: gretap1 [ 198.750916][T12366] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1532. [ 198.772312][T12366] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 198.897945][T12369] netlink: 'syz.2.1775': attribute type 298 has an invalid length. [ 199.316456][T12387] bridge0: port 1(macsec0) entered blocking state [ 199.343123][T12387] bridge0: port 1(macsec0) entered disabled state [ 199.389160][T12387] macsec0: entered allmulticast mode [ 199.415800][T12387] veth1_macvtap: entered allmulticast mode [ 199.447298][T12387] macsec0: entered promiscuous mode [ 199.487788][T12387] bridge0: port 1(macsec0) entered blocking state [ 199.494592][T12387] bridge0: port 1(macsec0) entered forwarding state [ 199.714213][T12403] wg1: entered promiscuous mode [ 199.730454][T12403] wg1: entered allmulticast mode [ 199.866559][T12410] netlink: 'syz.3.1789': attribute type 14 has an invalid length. [ 199.893721][T12410] netlink: 'syz.3.1789': attribute type 12 has an invalid length. [ 199.994702][ C1] net_ratelimit: 30 callbacks suppressed [ 199.994721][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.008961][ T6200] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 200.124573][ T6200] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 200.234783][ T6200] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 200.344908][ T6212] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 200.454587][ T6212] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 200.604551][T10963] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 200.662292][T12447] tipc: Enabling of bearer rejected, failed to enable media [ 200.725509][ T6200] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 200.758485][T12451] pim6reg: entered allmulticast mode [ 200.766921][T12451] pim6reg: left allmulticast mode [ 200.844172][T12455] netlink: 'syz.0.1804': attribute type 9 has an invalid length. [ 200.854753][ T6212] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 200.964580][ T6212] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 200.998706][T12463] pim6reg: entered allmulticast mode [ 201.005793][T12463] pim6reg: left allmulticast mode [ 201.167969][T12470] netlink: 'syz.0.1808': attribute type 2 has an invalid length. [ 201.946050][T12502] __nla_validate_parse: 14 callbacks suppressed [ 201.946070][T12502] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1815'. [ 201.995446][T12502] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 202.000108][T12504] sit2: entered allmulticast mode [ 202.004125][T12502] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 202.018376][T12502] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 202.522315][T12518] tipc: Started in network mode [ 202.528090][T12518] tipc: Node identity 080211000001, cluster identity 4711 [ 202.535691][T12518] tipc: Enabled bearer , priority 0 [ 202.545396][T12518] netlink: 'syz.2.1824': attribute type 10 has an invalid length. [ 202.569641][T12518] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 202.600731][T12518] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 202.764422][T12528] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1828'. [ 202.780791][T12528] 8021q: VLANs not supported on nlmon0 [ 202.879155][T12511] netlink: 'syz.4.1821': attribute type 5 has an invalid length. [ 203.168881][T12549] lo speed is unknown, defaulting to 1000 [ 203.222820][T12557] netlink: 'syz.1.1836': attribute type 11 has an invalid length. [ 203.355900][T12566] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1837'. [ 203.433384][T12564] netlink: 'syz.1.1839': attribute type 13 has an invalid length. [ 203.441381][T12564] netlink: 'syz.1.1839': attribute type 27 has an invalid length. [ 203.483739][T12568] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1839'. [ 203.630210][T12578] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1844'. [ 203.654907][ T5959] tipc: Node number set to 134418688 [ 203.743680][T12587] netlink: 'syz.2.1847': attribute type 13 has an invalid length. [ 203.747926][T12593] netlink: 211856 bytes leftover after parsing attributes in process `syz.0.1846'. [ 203.785077][T12587] netlink: 'syz.2.1847': attribute type 17 has an invalid length. [ 203.846562][T12600] netlink: 208568 bytes leftover after parsing attributes in process `syz.3.1851'. [ 203.861679][T12600] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1851'. [ 203.934413][T12587] bridge0: port 1(hsr0) entered blocking state [ 203.940753][T12587] bridge0: port 1(hsr0) entered forwarding state [ 203.958382][T12587] bridge0: left allmulticast mode [ 204.006120][T12607] netlink: 'syz.0.1852': attribute type 4 has an invalid length. [ 204.049929][T12607] netlink: 'syz.0.1852': attribute type 4 has an invalid length. [ 204.538058][T12607] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 204.768437][T12607] veth1_macvtap: left allmulticast mode [ 204.794409][T12607] bridge0: port 1(macsec0) entered disabled state [ 205.024604][ C1] net_ratelimit: 25 callbacks suppressed [ 205.024622][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.095170][T12640] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1859'. [ 205.119875][T12640] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1859'. [ 205.138855][T12629] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 205.157480][T12631] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 205.173307][T12631] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 205.224390][ T49] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 205.251635][ T49] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.291741][ T49] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 205.318755][ T49] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.338944][T12643] tipc: Enabling of bearer rejected, failed to enable media [ 205.357396][ T49] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 205.382837][ T49] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.432374][ T49] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 205.460503][ T49] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.499271][T12651] netlink: 'syz.3.1858': attribute type 10 has an invalid length. [ 206.648471][T12722] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 206.655963][T12722] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 206.843965][T12738] bond4: entered promiscuous mode [ 206.850906][T12738] 8021q: adding VLAN 0 to HW filter on device bond4 [ 206.912995][T12738] bond0: (slave batadv_slave_0): Error: Device can not be enslaved while up [ 206.982367][T12738] 8021q: adding VLAN 0 to HW filter on device bond4 [ 207.041050][T12738] bond4: (slave vti0): The slave device specified does not support setting the MAC address [ 207.059235][T12738] bond4: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 207.094329][T12738] bond4: (slave vti0): making interface the new active one [ 207.115867][T12738] vti0: entered promiscuous mode [ 207.134282][T12738] bond4: (slave vti0): Enslaving as an active interface with an up link [ 207.238875][T12764] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 207.251178][T12766] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode [ 207.259404][T12766] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode [ 207.349321][T12769] bond5: option all_slaves_active: invalid value (13) [ 207.369270][ T29] audit: type=1800 audit(1773758388.234:7): pid=12774 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1892" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1841 res=0 errno=0 [ 207.533805][T12769] bond5 (unregistering): Released all slaves [ 207.765960][T12796] __nla_validate_parse: 9 callbacks suppressed [ 207.765986][T12796] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.1900'. [ 207.882174][T12802] lo speed is unknown, defaulting to 1000 [ 207.896127][T12805] validate_nla: 2 callbacks suppressed [ 207.896145][T12805] netlink: 'syz.0.1903': attribute type 7 has an invalid length. [ 207.955599][T12805] netlink: 'syz.0.1903': attribute type 8 has an invalid length. [ 207.971184][T12810] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1905'. [ 208.388620][T12829] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1908'. [ 208.435445][T12823] block nbd0: server does not support multiple connections per device. [ 208.475721][T12823] block nbd0: shutting down sockets [ 208.508458][T12829] 8021q: adding VLAN 0 to HW filter on device bond8 [ 208.653928][T12825] tipc: Resetting bearer [ 209.086519][T12866] netpci0: tun_chr_ioctl cmd 1074025678 [ 209.092298][T12866] netpci0: group set to 0 [ 209.126771][T12880] Bluetooth: MGMT ver 1.23 [ 209.348469][T12899] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1927'. [ 209.375070][T12901] netlink: 'syz.0.1928': attribute type 89 has an invalid length. [ 209.539469][T12915] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1932'. [ 209.561306][T12915] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1932'. [ 209.574912][T12915] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1932'. [ 209.596225][T12915] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1932'. [ 209.606766][T12915] netlink: 'syz.4.1932': attribute type 6 has an invalid length. [ 209.651616][T12917] lo speed is unknown, defaulting to 1000 [ 209.733651][T12927] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1934'. [ 209.749419][T12927] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1934'. [ 209.766801][T12927] netlink: 'syz.1.1934': attribute type 6 has an invalid length. [ 209.939759][T12943] netlink: 'syz.1.1939': attribute type 32 has an invalid length. [ 209.999389][T12943] bond6: option coupled_control: invalid value (40) [ 210.015987][T12943] bond6 (unregistering): Released all slaves [ 210.064757][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.229389][T12952] vlan0: entered allmulticast mode [ 210.238374][T12952] gretap0: entered allmulticast mode [ 210.558876][T12965] lo speed is unknown, defaulting to 1000 [ 210.945989][ T29] audit: type=1800 audit(1773758391.814:8): pid=12982 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1950" name="memory.events" dev="tmpfs" ino=1902 res=0 errno=0 [ 211.088896][T12977] lo speed is unknown, defaulting to 1000 [ 211.415718][T13012] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 212.083863][T13050] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 212.180392][T13052] netlink: 'syz.4.1969': attribute type 13 has an invalid length. [ 212.355976][T13070] ip6tnl5: entered allmulticast mode [ 212.401897][T13050] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 212.499167][T13050] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 212.574869][T13085] netlink: 'syz.1.1981': attribute type 21 has an invalid length. [ 212.596533][T13050] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 212.630478][T13085] netlink: 'syz.1.1981': attribute type 6 has an invalid length. [ 212.716392][ T49] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 212.767951][ T49] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 212.802866][ T49] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 212.863212][T10963] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 212.877951][T13102] __nla_validate_parse: 11 callbacks suppressed [ 212.877969][T13102] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1987'. [ 212.922924][T13102] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1987'. [ 212.944621][T13102] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1987'. [ 212.985611][T13110] lo: entered allmulticast mode [ 213.003357][T13105] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1988'. [ 213.069485][T13105] 8021q: adding VLAN 0 to HW filter on device bond9 [ 213.121794][T13105] macsec1: entered promiscuous mode [ 213.127220][T13105] bond9: entered promiscuous mode [ 213.164648][T13105] bond9: left promiscuous mode [ 213.249917][T13127] x_tables: duplicate underflow at hook 1 [ 213.360676][T13135] FAULT_INJECTION: forcing a failure. [ 213.360676][T13135] name failslab, interval 1, probability 0, space 0, times 0 [ 213.403745][T13135] CPU: 1 UID: 0 PID: 13135 Comm: syz.4.2001 Not tainted syzkaller #0 PREEMPT(full) [ 213.403787][T13135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 213.403797][T13135] Call Trace: [ 213.403804][T13135] [ 213.403811][T13135] dump_stack_lvl+0xe8/0x150 [ 213.403840][T13135] should_fail_ex+0x412/0x560 [ 213.403867][T13135] should_failslab+0xa8/0x100 [ 213.403890][T13135] __kvmalloc_node_noprof+0x178/0x8a0 [ 213.403911][T13135] ? bpf_test_run_xdp_live+0x223/0x1cf0 [ 213.403936][T13135] ? __kvmalloc_node_noprof+0x393/0x8a0 [ 213.403960][T13135] bpf_test_run_xdp_live+0x223/0x1cf0 [ 213.403988][T13135] ? bpf_dispatcher_change_prog+0xae0/0xd70 [ 213.404022][T13135] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 213.404054][T13135] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 213.404098][T13135] ? 0xffffffffa0201a5c [ 213.404137][T13135] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 213.404169][T13135] ? _copy_from_user+0x94/0xb0 [ 213.404193][T13135] ? bpf_test_init+0x113/0x150 [ 213.404212][T13135] ? xdp_convert_md_to_buff+0x5b/0x330 [ 213.404236][T13135] bpf_prog_test_run_xdp+0x81c/0x1160 [ 213.404272][T13135] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 213.404297][T13135] ? __fget_files+0x2a/0x420 [ 213.404324][T13135] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 213.404346][T13135] bpf_prog_test_run+0x2c7/0x340 [ 213.404366][T13135] __sys_bpf+0x643/0x950 [ 213.404391][T13135] ? __pfx___sys_bpf+0x10/0x10 [ 213.404429][T13135] ? ksys_write+0x242/0x270 [ 213.404450][T13135] ? __pfx_ksys_write+0x10/0x10 [ 213.404473][T13135] __x64_sys_bpf+0x7c/0x90 [ 213.404493][T13135] do_syscall_64+0x14d/0xf80 [ 213.404516][T13135] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.404532][T13135] ? clear_bhb_loop+0x40/0x90 [ 213.404551][T13135] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.404565][T13135] RIP: 0033:0x7f589cb9c799 [ 213.404581][T13135] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 213.404594][T13135] RSP: 002b:00007f589da4a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 213.404612][T13135] RAX: ffffffffffffffda RBX: 00007f589ce15fa0 RCX: 00007f589cb9c799 [ 213.404624][T13135] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 213.404633][T13135] RBP: 00007f589da4a090 R08: 0000000000000000 R09: 0000000000000000 [ 213.404643][T13135] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 213.404653][T13135] R13: 00007f589ce16038 R14: 00007f589ce15fa0 R15: 00007ffdc1f607e8 [ 213.404679][T13135] [ 213.751270][T13144] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2004'. [ 213.835561][T13149] dvmrp1: entered allmulticast mode [ 214.055658][T13158] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2009'. [ 214.203791][T13175] FAULT_INJECTION: forcing a failure. [ 214.203791][T13175] name failslab, interval 1, probability 0, space 0, times 0 [ 214.242419][T13175] CPU: 1 UID: 0 PID: 13175 Comm: syz.4.2015 Not tainted syzkaller #0 PREEMPT(full) [ 214.242446][T13175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 214.242456][T13175] Call Trace: [ 214.242463][T13175] [ 214.242471][T13175] dump_stack_lvl+0xe8/0x150 [ 214.242499][T13175] should_fail_ex+0x412/0x560 [ 214.242526][T13175] should_failslab+0xa8/0x100 [ 214.242551][T13175] __kmalloc_cache_node_noprof+0x8a/0x6b0 [ 214.242571][T13175] ? trace_kmalloc+0x2a/0x110 [ 214.242586][T13175] ? page_pool_create_percpu+0x76/0xb80 [ 214.242611][T13175] page_pool_create_percpu+0x76/0xb80 [ 214.242630][T13175] ? __kvmalloc_node_noprof+0x393/0x8a0 [ 214.242655][T13175] bpf_test_run_xdp_live+0x23d/0x1cf0 [ 214.242693][T13175] ? bpf_dispatcher_change_prog+0xae0/0xd70 [ 214.242727][T13175] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 214.242754][T13175] ? __pfx_autoremove_wake_function+0x10/0x10 [ 214.242777][T13175] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 214.242820][T13175] ? 0xffffffffa0201a5c [ 214.242859][T13175] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 214.242893][T13175] ? _copy_from_user+0x94/0xb0 [ 214.242918][T13175] ? bpf_test_init+0x113/0x150 [ 214.242938][T13175] ? xdp_convert_md_to_buff+0x5b/0x330 [ 214.242964][T13175] bpf_prog_test_run_xdp+0x81c/0x1160 [ 214.242999][T13175] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 214.243026][T13175] ? __fget_files+0x2a/0x420 [ 214.243054][T13175] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 214.243079][T13175] bpf_prog_test_run+0x2c7/0x340 [ 214.243100][T13175] __sys_bpf+0x643/0x950 [ 214.243134][T13175] ? __pfx___sys_bpf+0x10/0x10 [ 214.243173][T13175] ? ksys_write+0x242/0x270 [ 214.243194][T13175] ? __pfx_ksys_write+0x10/0x10 [ 214.243220][T13175] __x64_sys_bpf+0x7c/0x90 [ 214.243244][T13175] do_syscall_64+0x14d/0xf80 [ 214.243268][T13175] ? trace_irq_disable+0x3b/0x150 [ 214.243289][T13175] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.243306][T13175] ? clear_bhb_loop+0x40/0x90 [ 214.243327][T13175] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.243343][T13175] RIP: 0033:0x7f589cb9c799 [ 214.243360][T13175] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 214.243375][T13175] RSP: 002b:00007f589da4a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 214.243394][T13175] RAX: ffffffffffffffda RBX: 00007f589ce15fa0 RCX: 00007f589cb9c799 [ 214.243406][T13175] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 214.243418][T13175] RBP: 00007f589da4a090 R08: 0000000000000000 R09: 0000000000000000 [ 214.243431][T13175] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 214.243442][T13175] R13: 00007f589ce16038 R14: 00007f589ce15fa0 R15: 00007ffdc1f607e8 [ 214.243471][T13175] [ 214.576993][T13182] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.2014'. [ 214.955824][T13204] syzkaller1: entered promiscuous mode [ 214.961359][T13204] syzkaller1: entered allmulticast mode [ 214.973052][T13204] netlink: 'syz.0.2020': attribute type 11 has an invalid length. [ 215.058021][T13207] netlink: 88 bytes leftover after parsing attributes in process `syz.2.2021'. [ 215.104686][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.255218][T13194] xt_HMARK: proto mask must be zero with L3 mode [ 215.363563][T13226] veth1: entered promiscuous mode [ 215.371021][T13226] veth1: left promiscuous mode [ 215.489241][T13232] tipc: Enabling of bearer rejected, already enabled [ 215.591486][T13244] openvswitch: netlink: EtherType 50a is less than min 600 [ 215.599115][T13244] netlink: 232 bytes leftover after parsing attributes in process `syz.1.2029'. [ 215.981554][T13270] lo speed is unknown, defaulting to 1000 [ 215.998734][T13270] lo speed is unknown, defaulting to 1000 [ 216.017725][T13270] lo speed is unknown, defaulting to 1000 [ 216.047700][T13270] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 216.089790][T13270] lo speed is unknown, defaulting to 1000 [ 216.098553][T13270] lo speed is unknown, defaulting to 1000 [ 216.111416][T13270] lo speed is unknown, defaulting to 1000 [ 216.120590][T13270] lo speed is unknown, defaulting to 1000 [ 216.150084][T13270] lo speed is unknown, defaulting to 1000 [ 216.163756][T13276] 8021q: VLANs not supported on syzkaller1 [ 216.183048][T13276] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2041'. [ 216.286151][T13281] syzkaller0: entered promiscuous mode [ 216.293616][T13281] syzkaller0: entered allmulticast mode [ 216.380313][T13283] 8021q: adding VLAN 0 to HW filter on device bond10 [ 216.668483][T13297] netem: incorrect ge model size [ 216.673856][T13297] netem: change failed [ 216.718816][T13297] 0ªX¹¦À: renamed from caif0 [ 216.741958][T13297] 0ªX¹¦À: entered allmulticast mode [ 216.751455][T13297] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 217.477397][T13352] netlink: 'syz.3.2060': attribute type 6 has an invalid length. [ 217.789172][T13358] geneve2: entered promiscuous mode [ 217.955535][T13360] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 217.967801][T13360] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.009149][T13359] xt_socket: unknown flags 0x50 [ 218.063982][T13360] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 218.079609][T13360] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.178711][T13372] __nla_validate_parse: 15 callbacks suppressed [ 218.178732][T13372] netlink: 88 bytes leftover after parsing attributes in process `syz.4.2068'. [ 218.210228][T13360] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 218.244895][T13360] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.340986][T13360] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 218.352584][T13360] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.503930][ T6200] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 218.526126][ T6200] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.567530][ T6200] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 218.585230][ T6200] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.617164][ T6200] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 218.627603][ T6200] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.639167][T13392] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2074'. [ 218.650456][T13392] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2074'. [ 218.660103][T13392] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2074'. [ 218.674769][T13392] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2074'. [ 218.685174][T13392] netlink: 'syz.4.2074': attribute type 6 has an invalid length. [ 218.746178][ T6216] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 218.754430][ T6216] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.879783][T13397] netlink: 'syz.3.2075': attribute type 3 has an invalid length. [ 218.916301][T13397] netlink: 'syz.3.2075': attribute type 3 has an invalid length. [ 219.061313][T13401] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2076'. [ 219.483205][T13429] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2082'. [ 219.506044][T13429] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2082'. [ 219.515735][T13429] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2082'. [ 219.564911][T13429] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2082'. [ 219.756354][T13439] netlink: 'syz.1.2086': attribute type 6 has an invalid length. [ 219.955121][T13457] 1ªX¹¦À: renamed from 60ªX¹¦À [ 219.979476][T13457] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 220.144643][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.735400][T13468] xt_l2tp: missing protocol rule (udp|l2tpip) [ 220.952941][T13477] 0: reclassify loop, rule prio 0, protocol 700 [ 221.241853][T13486] C: left promiscuous mode [ 221.253406][T13486] team0 (unregistering): Port device C removed [ 221.263344][T13486] team_slave_1: left promiscuous mode [ 221.272055][T13486] team0 (unregistering): Port device team_slave_1 removed [ 221.287221][T10963] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 221.305143][ T6216] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 221.313740][ T6216] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 221.324069][ T6216] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 221.721696][T13499] netlink: 'syz.0.2103': attribute type 2 has an invalid length. [ 221.735611][T13499] : entered promiscuous mode [ 221.797555][T13499] lo speed is unknown, defaulting to 1000 [ 222.436947][T13534] netlink: 'syz.0.2112': attribute type 11 has an invalid length. [ 223.039541][T13564] netlink: 'syz.1.2121': attribute type 6 has an invalid length. [ 223.335515][T13580] tipc: Enabled bearer , priority 0 [ 223.359061][T13577] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 223.371327][T13577] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 223.380734][T13577] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 223.389358][T13577] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 223.397794][T13580] syzkaller0: entered promiscuous mode [ 223.397817][T13580] syzkaller0: entered allmulticast mode [ 223.399536][T13580] tipc: Resetting bearer [ 223.419900][T13589] __nla_validate_parse: 119 callbacks suppressed [ 223.419918][T13589] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2127'. [ 223.436539][T13585] lo speed is unknown, defaulting to 1000 [ 223.496434][T13592] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2126'. [ 223.518555][T13592] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 223.527564][T13592] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 223.529119][T13579] tipc: Resetting bearer [ 223.545213][T13592] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 223.556194][T13592] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 223.614794][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.233388][T13607] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2132'. [ 224.242618][T13607] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2132'. [ 225.182844][T13579] tipc: Disabling bearer [ 225.188812][ C1] net_ratelimit: 4 callbacks suppressed [ 225.188826][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.322817][T13609] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2133'. [ 225.337384][T13609] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2133'. [ 225.358765][T13609] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2133'. [ 225.376477][T13613] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2135'. [ 225.526248][T13625] 8021q: VLANs not supported on vcan0 [ 225.783635][T13648] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2144'. [ 225.831460][T13649] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2142'. [ 225.850402][T13641] lo speed is unknown, defaulting to 1000 [ 226.236569][T13662] netlink: 'syz.3.2147': attribute type 1 has an invalid length. [ 226.568659][T13687] syzkaller0: entered promiscuous mode [ 226.574369][T13687] syzkaller0: entered allmulticast mode [ 227.600709][T13746] ipvlan2: entered promiscuous mode [ 227.606181][T13746] ipvlan2: entered allmulticast mode [ 227.611681][T13746] vlan1: entered allmulticast mode [ 227.620260][T13746] veth0_vlan: entered allmulticast mode [ 227.827356][T13749] 8021q: VLANs not supported on nlmon0 [ 228.153976][T13769] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 228.162915][T13769] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 228.403876][T13779] hsr_slave_0: left promiscuous mode [ 228.446917][T13779] hsr_slave_1: left promiscuous mode [ 228.484330][T13781] __nla_validate_parse: 8 callbacks suppressed [ 228.484347][T13781] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2177'. [ 228.516923][T13781] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2177'. [ 228.550811][T13782] netlink: 'syz.2.2177': attribute type 4 has an invalid length. [ 228.564554][T13782] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2177'. [ 228.596622][T13782] .`: renamed from bond0 [ 228.638431][T13793] netlink: 'syz.0.2181': attribute type 21 has an invalid length. [ 228.656648][T13793] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2181'. [ 228.684888][T13793] netlink: 'syz.0.2181': attribute type 4 has an invalid length. [ 228.704074][T13793] netlink: 'syz.0.2181': attribute type 5 has an invalid length. [ 228.728259][T13795] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2182'. [ 228.745558][T13793] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2181'. [ 229.008636][T13816] netlink: 'syz.2.2187': attribute type 6 has an invalid length. [ 229.362353][T13828] lo speed is unknown, defaulting to 1000 [ 229.712122][T13850] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2194'. [ 229.771341][T13850] ip6gretap0: entered promiscuous mode [ 229.795610][T13850] ip6gretap0: left promiscuous mode [ 229.875169][T13861] netlink: 'syz.2.2197': attribute type 1 has an invalid length. [ 229.888873][T13861] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2197'. [ 229.956732][T13863] syzkaller1: entered promiscuous mode [ 229.962263][T13863] syzkaller1: entered allmulticast mode [ 229.997440][T13863] erspan0: entered promiscuous mode [ 230.023310][T13863] 8021q: adding VLAN 0 to HW filter on device team0 [ 230.034897][T13863] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 230.098507][T13868] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2199'. [ 230.143441][T13877] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.2203'. [ 230.251415][T13885] netlink: 'syz.4.2206': attribute type 1 has an invalid length. [ 230.356050][T13887] netlink: 'syz.4.2207': attribute type 1 has an invalid length. [ 230.382726][T13887] 8021q: adding VLAN 0 to HW filter on device bond2 [ 230.405269][T13887] bond2: (slave veth9): Enslaving as an active interface with a down link [ 230.444355][T13887] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 230.452148][T13887] bond2: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 230.880474][T13912] tipc: Enabled bearer , priority 0 [ 230.889371][T13912] syzkaller0: entered promiscuous mode [ 230.903111][T13912] syzkaller0: entered allmulticast mode [ 230.949264][T13912] tipc: Resetting bearer [ 230.987234][T13911] tipc: Resetting bearer [ 231.003794][T13916] netlink: 'syz.1.2215': attribute type 1 has an invalid length. [ 231.025239][T13911] tipc: Disabling bearer [ 231.054399][T13920] syzkaller1: entered promiscuous mode [ 231.060177][T13920] syzkaller1: entered allmulticast mode [ 231.801623][T13970] netlink: 'syz.4.2229': attribute type 17 has an invalid length. [ 231.815246][T13970] bond0: option all_slaves_active: invalid value (6) [ 232.500132][T14018] bond3: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 232.603476][T14018] bond3 (unregistering): Released all slaves [ 233.360250][T14072] lo speed is unknown, defaulting to 1000 [ 233.512410][T14082] IPVS: set_ctl: invalid protocol: 47 10.1.1.0:20003 [ 233.579576][T14089] __nla_validate_parse: 21 callbacks suppressed [ 233.579594][T14089] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2263'. [ 233.646268][T14096] netlink: 'syz.3.2266': attribute type 1 has an invalid length. [ 233.659377][ T980] IPVS: starting estimator thread 0... [ 233.754910][T14097] IPVS: using max 35 ests per chain, 84000 per kthread [ 233.880166][T14100] bond5: (slave gretap1): making interface the new active one [ 233.895616][T14100] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 233.942651][T14096] vlan1: entered allmulticast mode [ 233.950403][T14096] bond5: entered allmulticast mode [ 233.956546][T14096] gretap1: entered allmulticast mode [ 233.963440][T14096] bond5: (slave vlan1): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 234.458615][T14134] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2278'. [ 234.681606][T14145] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2281'. [ 234.723055][T14145] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2281'. [ 234.941680][T14152] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2283'. [ 235.052475][T14155] bond6: Removing last ns target with arp_interval on [ 235.237270][T14175] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2288'. [ 235.248085][T14170] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2287'. [ 235.481258][T14204] netlink: 'syz.0.2296': attribute type 4 has an invalid length. [ 235.644414][T14211] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2299'. [ 235.662187][T14212] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2299'. [ 235.733603][T14219] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2301'. [ 236.076404][T14246] Bluetooth: hci4: Opcode 0x0401 failed: -22 [ 236.303539][T14267] IPVS: set_ctl: invalid protocol: 115 172.30.1.2:20004 [ 236.337385][T14268] IPVS: set_ctl: invalid protocol: 115 172.30.1.2:20004 [ 236.383592][T14274] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 236.437655][T14276] netlink: 'syz.1.2319': attribute type 12 has an invalid length. [ 236.640728][T14287] lo speed is unknown, defaulting to 1000 [ 236.691287][T14293] tipc: New replicast peer: 0.0.0.0 [ 236.697438][T14293] tipc: Enabled bearer , priority 10 [ 236.716219][T14293] tipc: New replicast peer: 172.30.1.3 [ 236.766277][T14292] lo speed is unknown, defaulting to 1000 [ 236.915103][T14296] lo speed is unknown, defaulting to 1000 [ 237.276501][T14326] netlink: 'syz.1.2332': attribute type 2 has an invalid length. [ 237.495903][T14335] netlink: 'syz.4.2337': attribute type 2 has an invalid length. [ 239.392855][T14447] __nla_validate_parse: 14 callbacks suppressed [ 239.392877][T14447] netlink: 112 bytes leftover after parsing attributes in process `syz.3.2376'. [ 239.446658][T14447] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2376'. [ 239.459133][T14447] Bluetooth: MGMT ver 1.23 [ 239.496240][T14451] batadv0: entered promiscuous mode [ 239.541445][T14458] netlink: 436 bytes leftover after parsing attributes in process `syz.0.2381'. [ 239.576970][T14458] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2381'. [ 239.607651][T14458] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2381'. [ 240.008248][T14493] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2394'. [ 240.067860][T14499] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2396'. [ 240.107105][T14499] netlink: 108 bytes leftover after parsing attributes in process `syz.3.2396'. [ 240.118918][T14502] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2397'. [ 240.206391][T14510] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2397'. [ 240.258583][T14511] syzkaller0: entered promiscuous mode [ 240.264242][T14511] syzkaller0: entered allmulticast mode [ 241.055891][T14518] netlink: 'syz.2.2402': attribute type 2 has an invalid length. [ 243.288412][T14539] bridge0: entered allmulticast mode [ 243.592493][T14561] netlink: 'syz.3.2414': attribute type 1 has an invalid length. [ 243.619872][T14561] netlink: 'syz.3.2414': attribute type 1 has an invalid length. [ 243.630963][T14561] netlink: 'syz.3.2414': attribute type 1 has an invalid length. [ 243.639838][T14561] netlink: 'syz.3.2414': attribute type 1 has an invalid length. [ 243.648442][T14561] netlink: 'syz.3.2414': attribute type 1 has an invalid length. [ 243.657065][T14561] netlink: 'syz.3.2414': attribute type 1 has an invalid length. [ 243.667269][T14561] netlink: 'syz.3.2414': attribute type 1 has an invalid length. [ 243.677565][T14561] netlink: 'syz.3.2414': attribute type 1 has an invalid length. [ 243.678224][T14567] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 243.685802][T14561] netlink: 'syz.3.2414': attribute type 1 has an invalid length. [ 243.717706][T14557] lo speed is unknown, defaulting to 1000 [ 244.125474][T14593] syzkaller1: entered promiscuous mode [ 244.132213][T14593] syzkaller1: entered allmulticast mode [ 244.327796][T14604] tipc: Enabling of bearer rejected, already enabled [ 244.399508][T14614] lo speed is unknown, defaulting to 1000 [ 244.508369][T14618] __nla_validate_parse: 3 callbacks suppressed [ 244.508385][T14618] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2429'. [ 244.668841][T14629] sctp: [Deprecated]: syz.4.2431 (pid 14629) Use of struct sctp_assoc_value in delayed_ack socket option. [ 244.668841][T14629] Use struct sctp_sack_info instead [ 244.868130][T14636] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2436'. [ 245.017033][T14648] IPVS: set_ctl: invalid protocol: 115 172.20.20.187:20002 [ 245.190590][T14661] x_tables: duplicate underflow at hook 2 [ 245.474326][T14676] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 245.475330][T14673] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2444'. [ 245.488423][T14677] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2445'. [ 245.591105][T14680] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2446'. [ 245.625905][T14680] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2446'. [ 245.676537][ T6216] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 245.677138][T14680] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2446'. [ 245.686111][ T6216] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 245.708441][T14680] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2446'. [ 245.710251][ T6216] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 245.731340][ T6216] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 246.157736][T14729] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 246.171740][T14729] : entered promiscuous mode [ 246.321194][T14742] lo speed is unknown, defaulting to 1000 [ 246.323710][T14746] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2467'. [ 246.395966][T14746] A link change request failed with some changes committed already. Interface gre2 may have been left with an inconsistent configuration, please check. [ 246.752151][T14758] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2469'. [ 246.809014][T14758] validate_nla: 37 callbacks suppressed [ 246.809034][T14758] netlink: 'syz.4.2469': attribute type 2 has an invalid length. [ 246.831183][T14758] netlink: 'syz.4.2469': attribute type 1 has an invalid length. [ 246.907066][T14761] Cannot find map_set index 135 as target [ 247.411555][T14801] syzkaller0: entered promiscuous mode [ 247.421397][T14801] syzkaller0: entered allmulticast mode [ 247.946948][T14842] netlink: 'syz.0.2487': attribute type 21 has an invalid length. [ 248.284843][T14862] lo speed is unknown, defaulting to 1000 [ 248.413767][T14871] veth0: Caught tx_queue_len zero misconfig [ 248.657341][T14879] lo speed is unknown, defaulting to 1000 [ 248.691734][T14881] lo speed is unknown, defaulting to 1000 [ 248.870303][ T5829] block nbd0: Receive control failed (result -32) [ 248.987846][T14903] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 249.458125][T14915] lo speed is unknown, defaulting to 1000 [ 250.120440][T14949] netlink: 'syz.0.2525': attribute type 58 has an invalid length. [ 250.139141][T14949] __nla_validate_parse: 9 callbacks suppressed [ 250.139158][T14949] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2525'. [ 250.160125][T14947] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2524'. [ 250.193228][T14955] netlink: 'syz.2.2527': attribute type 1 has an invalid length. [ 250.380866][T14963] lo speed is unknown, defaulting to 1000 [ 250.411646][T14964] lo speed is unknown, defaulting to 1000 [ 250.558288][T14970] lo speed is unknown, defaulting to 1000 [ 250.629374][ T8491] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.948054][T14987] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2537'. [ 251.036448][T14985] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2536'. [ 251.046329][T14985] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2536'. [ 251.064247][T14985] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2536'. [ 251.142313][T14987] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 251.281148][T14994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.298196][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.521538][T15014] netlink: 'syz.0.2544': attribute type 1 has an invalid length. [ 251.745798][T15030] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2549'. [ 251.782877][T15030] ipt_REJECT: ECHOREPLY no longer supported. [ 251.790760][T15030] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2549'. [ 252.261540][T15046] sctp: [Deprecated]: syz.0.2553 (pid 15046) Use of int in max_burst socket option. [ 252.261540][T15046] Use struct sctp_assoc_value instead [ 252.279576][T15046] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2553'. [ 252.350134][T15051] FAULT_INJECTION: forcing a failure. [ 252.350134][T15051] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 252.364552][T15051] CPU: 1 UID: 0 PID: 15051 Comm: syz.1.2555 Not tainted syzkaller #0 PREEMPT(full) [ 252.364576][T15051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 252.364599][T15051] Call Trace: [ 252.364607][T15051] [ 252.364613][T15051] dump_stack_lvl+0xe8/0x150 [ 252.364640][T15051] should_fail_ex+0x412/0x560 [ 252.364665][T15051] _copy_to_user+0x31/0xb0 [ 252.364691][T15051] bpf_prog_test_run_raw_tp+0x511/0x6c0 [ 252.364719][T15051] ? __pfx_bpf_prog_test_run_raw_tp+0x10/0x10 [ 252.364741][T15051] ? __fget_files+0x2a/0x420 [ 252.364769][T15051] ? __pfx_bpf_prog_test_run_raw_tp+0x10/0x10 [ 252.364788][T15051] bpf_prog_test_run+0x2c7/0x340 [ 252.364803][T15051] __sys_bpf+0x643/0x950 [ 252.364826][T15051] ? __pfx___sys_bpf+0x10/0x10 [ 252.364847][T15051] ? ksys_write+0x242/0x270 [ 252.364859][T15051] ? __pfx_ksys_write+0x10/0x10 [ 252.364873][T15051] __x64_sys_bpf+0x7c/0x90 [ 252.364886][T15051] do_syscall_64+0x14d/0xf80 [ 252.364899][T15051] ? trace_irq_disable+0x3b/0x150 [ 252.364913][T15051] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.364922][T15051] ? clear_bhb_loop+0x40/0x90 [ 252.364934][T15051] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.364944][T15051] RIP: 0033:0x7fe9feb9c799 [ 252.364954][T15051] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 252.364963][T15051] RSP: 002b:00007fe9ff9e3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 252.364975][T15051] RAX: ffffffffffffffda RBX: 00007fe9fee15fa0 RCX: 00007fe9feb9c799 [ 252.364982][T15051] RDX: 000000000000000c RSI: 0000200000000080 RDI: 000000000000000a [ 252.364987][T15051] RBP: 00007fe9ff9e3090 R08: 0000000000000000 R09: 0000000000000000 [ 252.364993][T15051] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 252.364998][T15051] R13: 00007fe9fee16038 R14: 00007fe9fee15fa0 R15: 00007fff269ddff8 [ 252.365014][T15051] [ 252.692565][T15061] netlink: 'syz.1.2558': attribute type 1 has an invalid length. [ 252.781047][T15061] bond7: (slave veth7): Enslaving as an active interface with a down link [ 252.837526][T15061] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2558'. [ 252.851549][T15070] bond7: (slave veth9): Enslaving as an active interface with a down link [ 252.901355][T15061] 8021q: adding VLAN 0 to HW filter on device bond7 [ 252.959764][T15079] netem: change failed [ 252.971887][T15079] netlink: 'syz.0.2564': attribute type 1 has an invalid length. [ 253.065048][T15097] FAULT_INJECTION: forcing a failure. [ 253.065048][T15097] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 253.083589][T15097] CPU: 1 UID: 0 PID: 15097 Comm: syz.4.2568 Not tainted syzkaller #0 PREEMPT(full) [ 253.083614][T15097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 253.083624][T15097] Call Trace: [ 253.083631][T15097] [ 253.083638][T15097] dump_stack_lvl+0xe8/0x150 [ 253.083666][T15097] should_fail_ex+0x412/0x560 [ 253.083693][T15097] _copy_to_user+0x31/0xb0 [ 253.083720][T15097] simple_read_from_buffer+0xe1/0x170 [ 253.083749][T15097] proc_fail_nth_read+0x1bb/0x230 [ 253.083776][T15097] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 253.083803][T15097] ? rw_verify_area+0x2a6/0x4d0 [ 253.083820][T15097] ? __fget_files+0x2a/0x420 [ 253.083842][T15097] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 253.083867][T15097] vfs_read+0x20c/0xa70 [ 253.083883][T15097] ? fdget_pos+0x246/0x320 [ 253.083911][T15097] ? __pfx___mutex_lock+0x10/0x10 [ 253.083936][T15097] ? __pfx_vfs_read+0x10/0x10 [ 253.083955][T15097] ? __fget_files+0x2a/0x420 [ 253.083983][T15097] ? __fget_files+0x3a0/0x420 [ 253.084005][T15097] ? __fget_files+0x2a/0x420 [ 253.084036][T15097] ksys_read+0x150/0x270 [ 253.084057][T15097] ? __pfx_ksys_read+0x10/0x10 [ 253.084086][T15097] do_syscall_64+0x14d/0xf80 [ 253.084110][T15097] ? trace_irq_disable+0x3b/0x150 [ 253.084133][T15097] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.084150][T15097] ? clear_bhb_loop+0x40/0x90 [ 253.084172][T15097] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.084189][T15097] RIP: 0033:0x7f589cb5cfce [ 253.084205][T15097] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 253.084220][T15097] RSP: 002b:00007f589da49fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 253.084238][T15097] RAX: ffffffffffffffda RBX: 00007f589da4a6c0 RCX: 00007f589cb5cfce [ 253.084251][T15097] RDX: 000000000000000f RSI: 00007f589da4a0a0 RDI: 0000000000000006 [ 253.084262][T15097] RBP: 00007f589da4a090 R08: 0000000000000000 R09: 0000000000000000 [ 253.084272][T15097] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 253.084282][T15097] R13: 00007f589ce16038 R14: 00007f589ce15fa0 R15: 00007ffdc1f607e8 [ 253.084312][T15097] [ 253.373324][T15104] bond0: (slave bond_slave_1): Device is not bonding slave [ 253.404745][T15104] bond0: option active_slave: invalid value (bond_slave_1) [ 253.416538][T15104] bond0 (unregistering): Released all slaves [ 253.458080][T15113] xt_hashlimit: size too large, truncated to 1048576 [ 253.502296][T15110] batadv0: entered promiscuous mode [ 253.519728][T15110] batadv0: left promiscuous mode [ 253.786715][T15145] netlink: 'syz.0.2581': attribute type 20 has an invalid length. [ 253.841104][T15145] netlink: 'syz.0.2581': attribute type 20 has an invalid length. [ 253.845337][ T6212] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 253.892965][ T6212] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 253.923560][ T6212] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 253.938506][ T6212] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 254.158585][T15161] bond0: (slave bond_slave_1): Device is not bonding slave [ 254.167649][T15176] netlink: 'syz.4.2589': attribute type 21 has an invalid length. [ 254.174659][T15161] bond0: option active_slave: invalid value (bond_slave_1) [ 254.194112][T15178] netlink: 'syz.4.2589': attribute type 21 has an invalid length. [ 254.194290][T15161] bond0 (unregistering): Released all slaves [ 254.234144][T15176] netlink: 'syz.4.2589': attribute type 4 has an invalid length. [ 254.245549][T15177] IPVS: Unknown mcast interface: vcan0 [ 254.251581][T15178] netlink: 'syz.4.2589': attribute type 4 has an invalid length. [ 254.362213][T15186] macsec0: entered promiscuous mode [ 254.378526][T15186] macsec0: left promiscuous mode [ 254.458858][T15196] netlink: 'syz.3.2594': attribute type 10 has an invalid length. [ 254.467574][T15196] dummy0: entered promiscuous mode [ 254.475534][T15196] bridge0: port 3(dummy0) entered blocking state [ 254.482844][T15196] bridge0: port 3(dummy0) entered disabled state [ 254.491440][T15196] dummy0: entered allmulticast mode [ 254.499238][T15196] bridge0: port 3(dummy0) entered blocking state [ 254.505826][T15196] bridge0: port 3(dummy0) entered forwarding state [ 254.635009][T15207] netlink: 'syz.3.2598': attribute type 11 has an invalid length. [ 254.643119][T15207] netlink: 'syz.3.2598': attribute type 4 has an invalid length. [ 254.682772][T15210] bond10: entered promiscuous mode [ 254.688469][T15210] 8021q: adding VLAN 0 to HW filter on device bond10 [ 254.728467][T15210] 8021q: adding VLAN 0 to HW filter on device bond10 [ 254.735864][T15210] bond10: (slave vti0): The slave device specified does not support setting the MAC address [ 254.747845][T15210] bond10: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 254.760327][T15210] bond10: (slave vti0): making interface the new active one [ 254.769436][T15210] vti0: entered promiscuous mode [ 254.776688][T15210] bond10: (slave vti0): Enslaving as an active interface with an up link [ 255.336679][T15242] __nla_validate_parse: 13 callbacks suppressed [ 255.336710][T15242] netlink: 276 bytes leftover after parsing attributes in process `syz.1.2608'. [ 255.667479][ T1302] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.678543][ T1302] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.500858][T15290] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 256.604238][ T29] audit: type=1800 audit(1773758437.464:9): pid=15284 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2617" name="memory.events" dev="tmpfs" ino=2801 res=0 errno=0 [ 256.648074][T15299] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.2623'. [ 256.745754][T15306] tunl0: Caught tx_queue_len zero misconfig [ 257.008553][T15322] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2628'. [ 257.098158][T15322] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2628'. [ 257.194742][T15328] sctp: [Deprecated]: syz.4.2631 (pid 15328) Use of struct sctp_assoc_value in delayed_ack socket option. [ 257.194742][T15328] Use struct sctp_sack_info instead [ 257.213417][T15332] netlink: 712 bytes leftover after parsing attributes in process `syz.0.2633'. [ 257.223297][T15332] netlink: 5504 bytes leftover after parsing attributes in process `syz.0.2633'. [ 257.241215][T15332] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2633'. [ 257.254251][T15328] tipc: Enabling of bearer rejected, already enabled [ 257.265562][T15328] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2631'. [ 257.280038][T15337] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2634'. [ 257.304206][T15337] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2634'. [ 257.326865][T15337] tc_dump_action: action bad kind [ 257.791044][T15364] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 257.878056][T15376] openvswitch: netlink: Actions may not be safe on all matching packets [ 258.164554][T15402] tipc: Enabling of bearer rejected, already enabled [ 258.887682][T15438] validate_nla: 1 callbacks suppressed [ 258.887700][T15438] netlink: 'syz.2.2662': attribute type 10 has an invalid length. [ 258.999491][T15438] team0: Port device dummy0 added [ 259.213124][T15453] lo speed is unknown, defaulting to 1000 [ 259.274935][T15454] lo speed is unknown, defaulting to 1000 [ 259.405620][T15464] netlink: 'syz.4.2669': attribute type 5 has an invalid length. [ 260.100364][ T29] audit: type=1804 audit(1773758440.964:10): pid=15496 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2677" name="/newroot/540/memory.events" dev="tmpfs" ino=2778 res=1 errno=0 [ 260.135839][T15496] netlink: 'syz.2.2677': attribute type 1 has an invalid length. [ 260.164603][ T29] audit: type=1800 audit(1773758440.964:11): pid=15496 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2677" name="memory.events" dev="tmpfs" ino=2778 res=0 errno=0 [ 260.209988][ T29] audit: type=1804 audit(1773758441.004:12): pid=15497 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.2677" name="/newroot/540/memory.events" dev="tmpfs" ino=2778 res=1 errno=0 [ 260.520264][T15508] bond7: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 260.536147][T15508] bond7: (slave lo): Enslaving as an active interface with an up link [ 260.547820][T15508] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 261.014658][T15522] xt_hashlimit: size too large, truncated to 1048576 [ 261.021602][T15522] xt_hashlimit: overflow, try lower: 0/0 [ 261.030675][T15522] syz_tun: entered allmulticast mode [ 261.060417][T15521] syz_tun: left allmulticast mode [ 261.575664][T15543] netlink: 'syz.2.2690': attribute type 1 has an invalid length. [ 261.712206][T15554] xt_hashlimit: size too large, truncated to 1048576 [ 261.753211][T15564] netlink: 'syz.2.2696': attribute type 1 has an invalid length. [ 261.771428][T15564] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 261.952557][T15577] __nla_validate_parse: 9 callbacks suppressed [ 261.952578][T15577] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2699'. [ 261.997965][T15578] lo speed is unknown, defaulting to 1000 [ 262.090861][T15572] bridge6: entered promiscuous mode [ 262.102025][T15572] bridge6: entered allmulticast mode [ 262.791078][T15618] FAULT_INJECTION: forcing a failure. [ 262.791078][T15618] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 262.857110][T15618] CPU: 0 UID: 0 PID: 15618 Comm: syz.4.2707 Not tainted syzkaller #0 PREEMPT(full) [ 262.857135][T15618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 262.857145][T15618] Call Trace: [ 262.857152][T15618] [ 262.857160][T15618] dump_stack_lvl+0xe8/0x150 [ 262.857189][T15618] should_fail_ex+0x412/0x560 [ 262.857215][T15618] _copy_from_user+0x2d/0xb0 [ 262.857241][T15618] ___sys_recvmsg+0x175/0x590 [ 262.857259][T15618] ? get_pid_task+0x20/0x1f0 [ 262.857282][T15618] ? get_pid_task+0x20/0x1f0 [ 262.857310][T15618] ? __pfx____sys_recvmsg+0x10/0x10 [ 262.857349][T15618] ? __fget_files+0x3a0/0x420 [ 262.857380][T15618] __x64_sys_recvmsg+0x1ba/0x2a0 [ 262.857401][T15618] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 262.857427][T15618] ? __pfx_ksys_write+0x10/0x10 [ 262.857454][T15618] do_syscall_64+0x14d/0xf80 [ 262.857477][T15618] ? trace_irq_disable+0x3b/0x150 [ 262.857499][T15618] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.857516][T15618] ? clear_bhb_loop+0x40/0x90 [ 262.857534][T15618] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.857549][T15618] RIP: 0033:0x7f589cb9c799 [ 262.857564][T15618] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 262.857577][T15618] RSP: 002b:00007f589da29028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 262.857594][T15618] RAX: ffffffffffffffda RBX: 00007f589ce16090 RCX: 00007f589cb9c799 [ 262.857604][T15618] RDX: 0000000000000101 RSI: 0000200000000080 RDI: 0000000000000004 [ 262.857614][T15618] RBP: 00007f589da29090 R08: 0000000000000000 R09: 0000000000000000 [ 262.857623][T15618] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 262.857633][T15618] R13: 00007f589ce16128 R14: 00007f589ce16090 R15: 00007ffdc1f607e8 [ 262.857656][T15618] [ 263.053544][T15623] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2708'. [ 263.093846][T15578] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2698'. [ 263.857467][ T29] audit: type=1804 audit(1773758444.724:13): pid=15630 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2711" name="/newroot/556/cgroup.controllers" dev="tmpfs" ino=2864 res=1 errno=0 [ 263.888212][T15632] netlink: 'syz.2.2710': attribute type 1 has an invalid length. [ 263.921475][ T29] audit: type=1800 audit(1773758444.724:14): pid=15630 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2711" name="cgroup.controllers" dev="tmpfs" ino=2864 res=0 errno=0 [ 263.991010][T15636] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2710'. [ 264.014232][T15632] bond12: entered promiscuous mode [ 264.024879][T15632] 8021q: adding VLAN 0 to HW filter on device bond12 [ 264.082922][T15644] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2715'. [ 264.097169][T15636] bond12: (slave bridge7): making interface the new active one [ 264.143652][T15649] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2715'. [ 264.155252][T15636] bridge7: entered promiscuous mode [ 264.162351][T15636] bond12: (slave bridge7): Enslaving as an active interface with an up link [ 264.220303][T15653] netlink: 'syz.4.2716': attribute type 1 has an invalid length. [ 264.234674][T15653] netlink: 'syz.4.2716': attribute type 4 has an invalid length. [ 264.246860][T15653] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.2716'. [ 264.269566][T15650] netlink: 'syz.4.2716': attribute type 1 has an invalid length. [ 264.294985][T15650] netlink: 'syz.4.2716': attribute type 4 has an invalid length. [ 264.295080][T15660] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2717'. [ 264.302745][T15650] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.2716'. [ 264.323214][T15650] syzkaller1: left promiscuous mode [ 264.334750][T15650] syzkaller1: left allmulticast mode [ 264.513899][T15670] lo speed is unknown, defaulting to 1000 [ 264.603618][T15676] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2724'. [ 264.818385][T15687] syzkaller0: entered promiscuous mode [ 264.843149][T15687] syzkaller0: entered allmulticast mode [ 264.849842][T15686] netlink: 'syz.2.2726': attribute type 1 has an invalid length. [ 265.528631][T15699] syzkaller1: entered promiscuous mode [ 265.534344][T15699] syzkaller1: entered allmulticast mode [ 265.858802][T15712] tipc: Resetting bearer [ 265.891583][T15712] batadv1: entered promiscuous mode [ 265.916161][T15712] batadv1: entered allmulticast mode [ 265.963180][T15717] lo speed is unknown, defaulting to 1000 [ 266.227770][T15721] lo speed is unknown, defaulting to 1000 [ 268.138455][T15740] veth7: entered promiscuous mode [ 269.674590][T15741] veth9: entered promiscuous mode [ 270.266534][T15802] FAULT_INJECTION: forcing a failure. [ 270.266534][T15802] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 270.280341][T15802] CPU: 0 UID: 0 PID: 15802 Comm: syz.2.2756 Not tainted syzkaller #0 PREEMPT(full) [ 270.280366][T15802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 270.280377][T15802] Call Trace: [ 270.280384][T15802] [ 270.280391][T15802] dump_stack_lvl+0xe8/0x150 [ 270.280419][T15802] should_fail_ex+0x412/0x560 [ 270.280446][T15802] _copy_from_user+0x2d/0xb0 [ 270.280473][T15802] __sys_bpf+0x229/0x950 [ 270.280501][T15802] ? __pfx___sys_bpf+0x10/0x10 [ 270.280540][T15802] ? ksys_write+0x242/0x270 [ 270.280562][T15802] ? __pfx_ksys_write+0x10/0x10 [ 270.280588][T15802] __x64_sys_bpf+0x7c/0x90 [ 270.280611][T15802] do_syscall_64+0x14d/0xf80 [ 270.280635][T15802] ? trace_irq_disable+0x3b/0x150 [ 270.280659][T15802] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.280676][T15802] ? clear_bhb_loop+0x40/0x90 [ 270.280698][T15802] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.280715][T15802] RIP: 0033:0x7f8c4659c799 [ 270.280731][T15802] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 270.280746][T15802] RSP: 002b:00007f8c47417028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 270.280765][T15802] RAX: ffffffffffffffda RBX: 00007f8c46816090 RCX: 00007f8c4659c799 [ 270.280778][T15802] RDX: 0000000000000070 RSI: 00002000000000c0 RDI: 0000000000000005 [ 270.280789][T15802] RBP: 00007f8c47417090 R08: 0000000000000000 R09: 0000000000000000 [ 270.280800][T15802] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 270.280809][T15802] R13: 00007f8c46816128 R14: 00007f8c46816090 R15: 00007ffc213c05d8 [ 270.280837][T15802] [ 270.538407][T15814] __nla_validate_parse: 3 callbacks suppressed [ 270.538426][T15814] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2761'. [ 270.578908][T15816] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2762'. [ 270.600206][T15819] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2763'. [ 270.639690][T15816] xt_recent: Unsupported userspace flags (000000b1) [ 270.696486][T15817] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 270.980554][T15831] delete_channel: no stack [ 271.023254][T15844] netlink: 'syz.0.2770': attribute type 1 has an invalid length. [ 271.055804][T15846] bond7: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 271.069034][T15846] bond7 (unregistering): Released all slaves [ 271.424096][T15837] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2768'. [ 271.447542][T15837] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2768'. [ 271.450840][T15856] FAULT_INJECTION: forcing a failure. [ 271.450840][T15856] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 271.471641][T15837] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2768'. [ 271.479842][T15856] CPU: 0 UID: 0 PID: 15856 Comm: syz.3.2773 Not tainted syzkaller #0 PREEMPT(full) [ 271.479868][T15856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 271.479879][T15856] Call Trace: [ 271.479886][T15856] [ 271.479894][T15856] dump_stack_lvl+0xe8/0x150 [ 271.479923][T15856] should_fail_ex+0x412/0x560 [ 271.479949][T15856] _copy_to_user+0x31/0xb0 [ 271.479976][T15856] simple_read_from_buffer+0xe1/0x170 [ 271.480004][T15856] proc_fail_nth_read+0x1bb/0x230 [ 271.480031][T15856] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 271.480057][T15856] ? rw_verify_area+0x2a6/0x4d0 [ 271.480074][T15856] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 271.480098][T15856] vfs_read+0x20c/0xa70 [ 271.480114][T15856] ? fdget_pos+0x246/0x320 [ 271.480147][T15856] ? __pfx___mutex_lock+0x10/0x10 [ 271.480172][T15856] ? __pfx_vfs_read+0x10/0x10 [ 271.480197][T15856] ? __fget_files+0x2a/0x420 [ 271.480223][T15856] ? __fget_files+0x3a0/0x420 [ 271.480245][T15856] ? __fget_files+0x2a/0x420 [ 271.480276][T15856] ksys_read+0x150/0x270 [ 271.480296][T15856] ? __pfx_ksys_read+0x10/0x10 [ 271.480323][T15856] do_syscall_64+0x14d/0xf80 [ 271.480347][T15856] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.480364][T15856] ? clear_bhb_loop+0x40/0x90 [ 271.480385][T15856] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.480401][T15856] RIP: 0033:0x7f47c515cfce [ 271.480418][T15856] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 271.480433][T15856] RSP: 002b:00007f47c60c2fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 271.480451][T15856] RAX: ffffffffffffffda RBX: 00007f47c60c36c0 RCX: 00007f47c515cfce [ 271.480464][T15856] RDX: 000000000000000f RSI: 00007f47c60c30a0 RDI: 0000000000000013 [ 271.480475][T15856] RBP: 00007f47c60c3090 R08: 0000000000000000 R09: 0000000000000000 [ 271.480486][T15856] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 271.480496][T15856] R13: 00007f47c5416038 R14: 00007f47c5415fa0 R15: 00007ffd6928d9b8 [ 271.480524][T15856] [ 271.694499][T15837] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2768'. [ 271.750467][T15863] netlink: 'syz.4.2776': attribute type 3 has an invalid length. [ 271.758646][T15863] netlink: 'syz.4.2776': attribute type 1 has an invalid length. [ 271.774583][T15863] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2776'. [ 271.801696][T15868] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2775'. [ 272.096873][T15866] bridge0: port 3(dummy0) entered disabled state [ 272.103432][T15866] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.111136][T15866] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.428376][T15866] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 272.456200][T15866] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 272.877866][T15868] team0 (unregistering): Port device team_slave_0 removed [ 272.888339][T15868] team0 (unregistering): Port device team_slave_1 removed [ 272.931328][T15863] bond3: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 272.944372][T15863] bond3 (unregistering): Released all slaves [ 272.960901][T15874] workqueue: Failed to create a rescuer kthread for wq "bond13": -EINTR [ 272.973537][ T6216] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 273.001247][ T6216] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.012051][ T6216] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 273.021005][ T6216] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.032238][ T6216] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 273.041896][ T6216] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.050726][ T6216] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 273.060454][ T6216] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.112804][T15886] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2780'. [ 273.182986][T15893] macsec1: entered promiscuous mode [ 273.188894][T15893] macsec1: entered allmulticast mode [ 273.210894][T15886] tipc: Enabled bearer , priority 0 [ 273.219196][T15886] syzkaller0: entered promiscuous mode [ 273.225328][T15886] syzkaller0: entered allmulticast mode [ 273.257790][T15885] tipc: Resetting bearer [ 273.295568][T15885] tipc: Disabling bearer [ 273.395139][T15903] tipc: Enabling of bearer rejected, already enabled [ 273.426472][T15911] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 273.578336][T15920] netlink: 'syz.1.2790': attribute type 13 has an invalid length. [ 273.586381][T15920] netlink: 'syz.1.2790': attribute type 17 has an invalid length. [ 273.644396][T15920] sit0: left promiscuous mode [ 273.685075][T15920] bridge0: left allmulticast mode [ 273.695044][T15920] 1ªX¹¦À: left allmulticast mode [ 273.704640][T15920] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 273.766707][T15922] 8021q: adding VLAN 0 to HW filter on device bond11 [ 273.785455][T15926] vlan0: entered allmulticast mode [ 273.988624][T15944] netlink: 'syz.4.2798': attribute type 1 has an invalid length. [ 274.010113][T15944] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 274.100549][T15959] tipc: Enabled bearer , priority 0 [ 274.247434][T15968] netlink: 'syz.2.2804': attribute type 13 has an invalid length. [ 274.416590][T15976] lo speed is unknown, defaulting to 1000 [ 274.594916][T15948] tipc: Disabling bearer [ 274.887108][T15989] netlink: 'syz.1.2811': attribute type 4 has an invalid length. [ 275.296766][T16014] mac80211_hwsim hwsim10 syzkaller0: Caught tx_queue_len zero misconfig [ 275.627261][T16002] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 275.708230][T16027] __nla_validate_parse: 8 callbacks suppressed [ 275.708250][T16027] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2818'. [ 275.724734][T16027] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2818'. [ 275.735937][T16027] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2818'. [ 275.747203][T16027] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2818'. [ 275.758851][T16027] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.2818'. [ 275.856908][T16030] lo speed is unknown, defaulting to 1000 [ 275.915239][T16034] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2821'. [ 275.935543][T16037] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2822'. [ 275.945481][T16037] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2822'. [ 275.954927][T16037] tc_dump_action: action bad kind [ 275.967833][T16034] vlan2: entered promiscuous mode [ 275.974486][T16034] bridge0: entered promiscuous mode [ 276.082384][T16041] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2824'. [ 276.209693][T16052] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2826'. [ 276.424573][T16057] netlink: 'syz.3.2827': attribute type 13 has an invalid length. [ 276.570334][T16072] atomic_op ffff888032c3c198 conn xmit_atomic 0000000000000000 [ 277.326671][T16110] bond13: entered promiscuous mode [ 277.332052][T16110] bond13: entered allmulticast mode [ 277.338211][T16110] 8021q: adding VLAN 0 to HW filter on device bond13 [ 277.896236][T16136] netlink: 'syz.2.2849': attribute type 1 has an invalid length. [ 277.983077][T16136] bond13: entered promiscuous mode [ 278.039924][T16136] 8021q: adding VLAN 0 to HW filter on device bond13 [ 278.128600][T16140] 8021q: adding VLAN 0 to HW filter on device bond14 [ 278.157066][T16140] bond13: (slave bond14): making interface the new active one [ 278.174575][T16140] bond14: entered promiscuous mode [ 278.204919][T16140] bond13: (slave bond14): Enslaving as an active interface with an up link [ 278.785876][T16174] netlink: 'syz.1.2858': attribute type 3 has an invalid length. [ 278.878868][T16172] lo speed is unknown, defaulting to 1000 [ 279.126649][T16190] netlink: 'syz.3.2864': attribute type 10 has an invalid length. [ 279.287243][T16190] dummy0: left allmulticast mode [ 279.296982][T16190] dummy0: left promiscuous mode [ 279.329117][T16190] bridge0: port 3(dummy0) entered disabled state [ 279.368442][T16190] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 279.485366][ T5840] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 279.498359][ T5840] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 279.506939][ T5840] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 279.515538][ T5840] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 279.523483][ T5840] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 279.575363][ T5829] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 279.592894][T16217] mac80211_hwsim hwsim9 syzkaller0: left allmulticast mode [ 279.600984][T16217] tipc: Resetting bearer [ 279.612470][ T5829] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 279.622992][ T5829] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 279.639404][ T5829] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 279.649040][ T5829] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 279.776164][T16228] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 279.801945][T16212] lo speed is unknown, defaulting to 1000 [ 279.963955][ T49] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 280.068342][ T49] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 280.141926][T16242] netlink: 'syz.2.2880': attribute type 22 has an invalid length. [ 280.150912][T16242] netlink: 'syz.2.2880': attribute type 1 has an invalid length. [ 280.192324][ T49] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 280.230144][T16242] syzkaller1: entered promiscuous mode [ 280.236635][T16242] syzkaller1: entered allmulticast mode [ 280.258809][ T49] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 280.368365][T16212] chnl_net:caif_netlink_parms(): no params data found [ 280.461090][ T6216] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 280.518473][ T6216] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 280.558260][ T6210] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 280.654339][ T6216] netdevsim netdevsim0 eth4: set [1, 0] type 2 family 0 port 20000 - 0 [ 280.667921][ T6210] tipc: Resetting bearer [ 280.681039][T16212] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.694726][T16212] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.712143][T16212] bridge_slave_0: entered allmulticast mode [ 280.724718][T16212] bridge_slave_0: entered promiscuous mode [ 280.737063][T16212] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.754615][T16212] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.761877][T16212] bridge_slave_1: entered allmulticast mode [ 280.796231][T16212] bridge_slave_1: entered promiscuous mode [ 280.810422][ T49] macsec0: left promiscuous mode [ 280.823061][ T49] bridge0: port 1(macsec0) entered disabled state [ 280.993111][ T49] bond4 (unregistering): (slave ip6gretap1): Removing an active aggregator [ 281.009964][ T49] bond4 (unregistering): (slave ip6gretap1): Releasing backup interface [ 281.095441][T16270] __nla_validate_parse: 20 callbacks suppressed [ 281.095459][T16270] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2885'. [ 281.130438][ T49] bond10 (unregistering): (slave vti0): Releasing backup interface [ 281.152371][ T49] vti0 (unregistering): left promiscuous mode [ 281.245671][ T49] bond5 (unregistering): (slave gretap2): Releasing active interface [ 281.274378][T16274] netlink: 'syz.1.2886': attribute type 3 has an invalid length. [ 281.282717][T16274] netlink: 61211 bytes leftover after parsing attributes in process `syz.1.2886'. [ 281.450033][ T49] bond6 (unregistering): (slave bridge3): Releasing backup interface [ 281.458503][ T49] bridge3 (unregistering): left promiscuous mode [ 281.498147][ T49] bond8 (unregistering): (slave bridge4): Releasing active interface [ 281.619217][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 281.629559][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 281.639267][ T49] bond0 (unregistering): Released all slaves [ 281.649237][ T49] bond1 (unregistering): Released all slaves [ 281.664002][ T49] bond2 (unregistering): Released all slaves [ 281.676845][ T49] bond3 (unregistering): Released all slaves [ 281.689634][ T49] bond4 (unregistering): Released all slaves [ 281.703790][ T49] bond5 (unregistering): Released all slaves [ 281.719252][ T49] bond6 (unregistering): Released all slaves [ 281.737718][ T49] bond7 (unregistering): (slave lo): Releasing backup interface [ 281.745630][ T5840] Bluetooth: hci5: command tx timeout [ 281.753704][ T49] bond7 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 281.766302][ T49] bond7 (unregistering): Released all slaves [ 281.780818][ T49] bond8 (unregistering): Released all slaves [ 281.793252][ T49] bond9 (unregistering): Released all slaves [ 281.807980][ T49] bond10 (unregistering): Released all slaves [ 281.822958][ T49] bond11 (unregistering): Released all slaves [ 281.838947][ T49] bond12 (unregistering): Released all slaves [ 281.851516][ T49] bond13 (unregistering): Released all slaves [ 281.964327][T16212] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 282.021793][ T49] : left promiscuous mode [ 282.085464][T16284] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 282.150814][T16212] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 282.226134][ T49] tipc: Left network mode [ 282.298347][T16212] team0: Port device team_slave_0 added [ 282.325014][T16212] team0: Port device team_slave_1 added [ 282.383675][T16212] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 282.391363][T16308] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2896'. [ 282.405547][T16212] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 282.504185][T16212] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 282.543691][T16212] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 282.571202][T16212] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 282.600144][T16317] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2898'. [ 282.609842][T16318] netlink: 'syz.3.2897': attribute type 4 has an invalid length. [ 282.616897][T16212] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 282.664084][T16323] netlink: 'syz.3.2897': attribute type 4 has an invalid length. [ 282.872222][T16212] hsr_slave_0: entered promiscuous mode [ 282.894304][T16212] hsr_slave_1: entered promiscuous mode [ 282.914004][T16325] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2899'. [ 283.277550][T16355] dvmrp1: entered allmulticast mode [ 283.361107][T16359] x_tables: duplicate underflow at hook 2 [ 283.808709][T16365] netlink: 'syz.1.2909': attribute type 13 has an invalid length. [ 283.824796][ T5840] Bluetooth: hci5: command tx timeout [ 283.875564][T16365] netlink: 'syz.1.2909': attribute type 17 has an invalid length. [ 284.335527][T16365] 8021q: adding VLAN 0 to HW filter on device team0 [ 284.344013][T16365] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 284.360995][ T6216] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 284.377338][ T6216] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 284.409276][ T6216] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 284.432994][T16212] netdevsim netdevsim0 eth4 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 284.476841][ T6216] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 284.493225][T16378] lo speed is unknown, defaulting to 1000 [ 284.532675][T16212] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 284.569806][T16393] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2913'. [ 284.579290][T16393] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2913'. [ 284.629210][T16395] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2913'. [ 284.652325][T16212] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 284.682327][T16401] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2913'. [ 284.683708][T16393] batadv1: entered promiscuous mode [ 284.697229][T16393] batadv1: entered allmulticast mode [ 284.703295][T16393] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 284.757920][T16395] 8021q: adding VLAN 0 to HW filter on device bond3 [ 284.779178][T16401] macsec2: entered promiscuous mode [ 284.784750][T16401] bond3: entered promiscuous mode [ 284.790064][T16401] macsec2: entered allmulticast mode [ 284.795694][T16401] bond3: entered allmulticast mode [ 284.802006][T16401] bond3: left allmulticast mode [ 284.807092][T16401] bond3: left promiscuous mode [ 284.833235][T16212] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 284.985088][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 285.002758][T16407] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2916'. [ 285.324700][T16413] mac80211_hwsim hwsim10 syzkaller0: left promiscuous mode [ 285.331971][T16413] mac80211_hwsim hwsim10 syzkaller0: left allmulticast mode [ 285.366771][T16413] tipc: Resetting bearer [ 285.398540][T16414] bridge6: entered promiscuous mode [ 285.410163][T16414] bridge6: entered allmulticast mode [ 285.425326][T16404] lo speed is unknown, defaulting to 1000 [ 285.443475][ T13] tipc: Resetting bearer [ 285.486665][T16410] lo speed is unknown, defaulting to 1000 [ 285.696238][T16212] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 285.731166][T16212] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 285.820402][T16212] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 285.894280][T16212] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 285.905425][ T5840] Bluetooth: hci5: command tx timeout [ 286.077612][T16456] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 286.148358][ T49] IPVS: stop unused estimator thread 0... [ 286.212051][T16451] lo speed is unknown, defaulting to 1000 [ 286.316886][T16472] netlink: 'syz.2.2925': attribute type 1 has an invalid length. [ 286.324868][T16472] netlink: 'syz.2.2925': attribute type 1 has an invalid length. [ 286.332610][T16472] netlink: 'syz.2.2925': attribute type 1 has an invalid length. [ 286.655512][T16484] netlink: 'syz.4.2928': attribute type 3 has an invalid length. [ 286.665358][T16484] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2928'. [ 286.679015][T16484] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2928'. [ 286.731409][T16212] 8021q: adding VLAN 0 to HW filter on device bond0 [ 286.881133][T16212] 8021q: adding VLAN 0 to HW filter on device team0 [ 286.910721][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.917984][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 286.953571][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.960783][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 287.435597][T16513] lo speed is unknown, defaulting to 1000 [ 287.842009][T16212] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 287.880405][T16548] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2939'. [ 287.918031][T16548] hsr_slave_1 (unregistering): left promiscuous mode [ 287.984862][ T5840] Bluetooth: hci5: command tx timeout [ 287.993523][T16212] veth0_vlan: entered promiscuous mode [ 288.012322][T16212] veth1_vlan: entered promiscuous mode [ 288.050309][T16212] veth0_macvtap: entered promiscuous mode [ 288.063513][T16212] veth1_macvtap: entered promiscuous mode [ 288.090427][T16212] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 288.109225][T16212] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 288.122938][T16552] netlink: 'syz.1.2941': attribute type 1 has an invalid length. [ 288.127682][ T6200] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.166760][ T6200] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.247632][T16552] bond8: entered promiscuous mode [ 288.253435][T16552] 8021q: adding VLAN 0 to HW filter on device bond8 [ 288.297819][ T6212] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.325238][ T6212] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.426253][T16552] bond8: (slave bridge8): making interface the new active one [ 288.433770][T16552] bridge8: entered promiscuous mode [ 288.451793][T16552] bridge8: left promiscuous mode [ 288.603351][ T6200] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 288.612759][ T6200] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 288.676313][ T6212] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 288.687033][ T6212] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 288.780735][T16584] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 288.790469][T16574] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 288.815610][T16583] syzkaller0: entered promiscuous mode [ 288.837961][T16583] syzkaller0: entered allmulticast mode [ 288.860399][T16591] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2949'. [ 288.892057][T16591] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2949'. [ 288.947058][T16598] openvswitch: netlink: IPv4 tunnel dst address is zero [ 289.771404][ T5829] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 289.796503][ T5829] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 289.812952][ T5829] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 289.845221][ T5829] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 289.863160][ T5829] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 290.819371][T16593] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 290.974713][T16604] lo speed is unknown, defaulting to 1000 [ 291.202370][T16630] netlink: 'syz.0.2958': attribute type 6 has an invalid length. [ 291.212954][T16630] netlink: 'syz.0.2958': attribute type 7 has an invalid length. [ 291.222888][T16630] netlink: 'syz.0.2958': attribute type 8 has an invalid length. [ 291.377015][T16640] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2960'. [ 291.412151][T16641] syzkaller0: entered promiscuous mode [ 291.419348][T16641] syzkaller0: entered allmulticast mode [ 291.443002][T16604] chnl_net:caif_netlink_parms(): no params data found [ 291.526290][T16650] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2962'. [ 291.879605][ T7236] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 291.894829][ T7236] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 291.982892][T16676] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2965'. [ 291.984873][ T5840] Bluetooth: hci2: command tx timeout [ 292.031247][ T6198] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 292.053648][T16681] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2963'. [ 292.232829][T16681] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 292.254998][ T6198] netdevsim netdevsim4 eth4: set [1, 0] type 2 family 0 port 20000 - 0 [ 292.280154][T16672] lo speed is unknown, defaulting to 1000 [ 292.296904][T16604] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.304199][T16604] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.324316][T16604] bridge_slave_0: entered allmulticast mode [ 292.332712][T16604] bridge_slave_0: entered promiscuous mode [ 292.369948][ T6200] dvmrp0: left allmulticast mode [ 292.378815][ T6200] dvmrp1: left allmulticast mode [ 292.607485][ T6200] batman_adv: batadv0: Removing interface: gretap1 [ 292.922471][ T6200] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 292.932776][ T6200] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 292.943130][ T6200] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 292.953316][ T6200] bond0 (unregistering): Released all slaves [ 292.965900][ T6200] bond1 (unregistering): Released all slaves [ 292.979020][ T6200] bond2 (unregistering): (slave veth9): Releasing active interface [ 292.988624][ T6200] bond2 (unregistering): Released all slaves [ 293.004925][ T6200] bond3 (unregistering): Released all slaves [ 293.018152][T16604] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.028145][T16604] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.035866][T16604] bridge_slave_1: entered allmulticast mode [ 293.043726][T16604] bridge_slave_1: entered promiscuous mode [ 293.172425][ T6200] tipc: Disabling bearer [ 293.202861][ T6200] tipc: Left network mode [ 293.227175][T16604] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 293.257666][T16604] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 293.338909][ T6200] IPVS: stopping backup sync thread 11559 ... [ 293.480026][T16604] team0: Port device team_slave_0 added [ 293.501210][T16604] team0: Port device team_slave_1 added [ 293.662986][T16604] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 293.679183][T16604] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 293.711882][T16604] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 293.732332][T16604] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 293.744207][T16604] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 293.770861][T16604] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 293.980965][T16604] hsr_slave_0: entered promiscuous mode [ 294.006969][T16604] hsr_slave_1: entered promiscuous mode [ 294.013421][T16604] debugfs: 'hsr0' already exists in 'hsr' [ 294.025847][T16604] Cannot create hsr debugfs directory [ 294.066812][ T5840] Bluetooth: hci2: command tx timeout [ 294.088891][T16747] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2981'. [ 294.563413][T16767] netlink: 'syz.0.2980': attribute type 9 has an invalid length. [ 294.670310][ T6200] hsr_slave_0: left promiscuous mode [ 294.686395][ T6200] hsr_slave_1: left promiscuous mode [ 294.698770][ T6200] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 294.732315][ T6200] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 295.513623][T16783] syzkaller0: entered promiscuous mode [ 295.524692][T16783] syzkaller0: entered allmulticast mode [ 295.559561][T16604] netdevsim netdevsim4 eth4 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 295.639562][T16809] tipc: Failed to remove unknown binding: 66,0,0/0:1141561511/1141561512 [ 295.652909][T16811] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2994'. [ 295.675064][T16811] netlink: 'syz.2.2994': attribute type 5 has an invalid length. [ 295.696330][T16774] lo speed is unknown, defaulting to 1000 [ 295.720177][T16604] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 295.892194][T16604] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 296.145309][ T5840] Bluetooth: hci2: command tx timeout [ 296.160528][T16604] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 296.257341][ T6200] IPVS: stop unused estimator thread 0... [ 296.457955][T16604] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 296.473121][T16604] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 296.502292][T16604] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 296.536895][T16604] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 296.699222][T16604] 8021q: adding VLAN 0 to HW filter on device bond0 [ 296.754245][T16604] 8021q: adding VLAN 0 to HW filter on device team0 [ 296.786157][ T7236] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.793320][ T7236] bridge0: port 1(bridge_slave_0) entered forwarding state [ 296.833915][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.841189][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 297.416707][T16604] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 297.889707][T16604] veth0_vlan: entered promiscuous mode [ 297.910430][T16604] veth1_vlan: entered promiscuous mode [ 297.951731][T16604] veth0_macvtap: entered promiscuous mode [ 297.963763][T16604] veth1_macvtap: entered promiscuous mode [ 298.008390][T16604] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 298.032417][T16604] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 298.062849][ T35] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.072753][ T35] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.085576][ T35] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.110059][ T35] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.225387][ T5840] Bluetooth: hci2: command tx timeout [ 298.272328][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 298.291041][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 298.373475][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 298.393626][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 298.995470][ T5829] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 299.008567][ T5829] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 299.017140][ T5829] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 299.029087][ T5829] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 299.049935][ T5829] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 299.167343][T16980] netlink: 'syz.1.3043': attribute type 30 has an invalid length. [ 299.225263][T16972] lo speed is unknown, defaulting to 1000 [ 299.690397][T17008] netlink: 'syz.0.3054': attribute type 30 has an invalid length. [ 299.737990][T16972] chnl_net:caif_netlink_parms(): no params data found [ 299.970089][T17019] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 300.128708][T16972] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.138834][T16972] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.147589][T16972] bridge_slave_0: entered allmulticast mode [ 300.155429][T16972] bridge_slave_0: entered promiscuous mode [ 300.165723][T16972] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.173046][T16972] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.180959][T16972] bridge_slave_1: entered allmulticast mode [ 300.188877][T16972] bridge_slave_1: entered promiscuous mode [ 300.206627][T17039] netlink: 'syz.4.3068': attribute type 30 has an invalid length. [ 300.229009][T16972] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 300.242058][T16972] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 300.301329][T16972] team0: Port device team_slave_0 added [ 300.321096][T16972] team0: Port device team_slave_1 added [ 300.332703][T17048] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 300.415457][T16972] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 300.426519][T16972] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 300.461149][T16972] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 300.478643][T16972] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 300.486599][T16972] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 300.533145][T16972] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 300.603585][T16972] hsr_slave_0: entered promiscuous mode [ 300.610712][T16972] hsr_slave_1: entered promiscuous mode [ 300.618008][T16972] debugfs: 'hsr0' already exists in 'hsr' [ 300.623951][T16972] Cannot create hsr debugfs directory [ 300.833490][T16972] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.910897][T16972] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.037302][T16972] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.106093][ T5840] Bluetooth: hci0: command tx timeout [ 301.208822][T16972] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.401236][T17091] batadv_slave_1: entered promiscuous mode [ 301.418740][T17089] batadv_slave_1: left promiscuous mode [ 301.458566][T17087] syzkaller0: tun_chr_ioctl cmd 1074025678 [ 301.468092][T17087] syzkaller0: group set to 0 [ 301.473390][T17087] syzkaller0: tun_chr_ioctl cmd 35111 [ 301.564995][T16972] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 301.586081][T16972] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 301.605074][T16972] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 301.624788][T16972] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 301.807773][T16972] 8021q: adding VLAN 0 to HW filter on device bond0 [ 301.843075][T16972] 8021q: adding VLAN 0 to HW filter on device team0 [ 301.857981][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.865173][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 301.883427][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.890657][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 302.201987][T16972] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 302.290243][T16972] veth0_vlan: entered promiscuous mode [ 302.311230][T16972] veth1_vlan: entered promiscuous mode [ 302.370396][T17144] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3112'. [ 302.372612][T16972] veth0_macvtap: entered promiscuous mode [ 302.433127][T17146] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 302.450762][T16972] veth1_macvtap: entered promiscuous mode [ 302.507467][T16972] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 302.546462][T16972] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 302.580503][ T6198] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.610198][ T6198] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.638766][ T6198] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.664917][ T6198] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.832325][T17165] gre1: entered promiscuous mode [ 302.930471][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 302.960001][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 302.978212][T17160] lo speed is unknown, defaulting to 1000 [ 303.077180][ T6217] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 303.096280][ T6217] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 303.184880][ T5840] Bluetooth: hci0: command tx timeout [ 303.493342][T17197] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3133'. [ 303.705658][T17204] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3138'. [ 303.731720][T17204] netlink: 'syz.0.3138': attribute type 10 has an invalid length. [ 303.771511][ T5829] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 303.781284][ T5829] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 303.790434][ T5829] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 303.798990][ T5829] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 303.807872][ T5829] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 304.257475][T17205] lo speed is unknown, defaulting to 1000 [ 304.388813][T17224] xt_hashlimit: size too large, truncated to 1048576 [ 304.418070][T17224] xt_hashlimit: max too large, truncated to 1048576 [ 304.634270][T17235] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3151'. [ 304.921596][T17253] lo speed is unknown, defaulting to 1000 [ 304.929028][T17205] chnl_net:caif_netlink_parms(): no params data found [ 305.189544][ T6198] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 305.262481][ T6198] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 305.271001][ T5840] Bluetooth: hci0: command tx timeout [ 305.350904][ T7236] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 305.468494][ T7236] netdevsim netdevsim3 eth4: set [1, 0] type 2 family 0 port 20000 - 0 [ 305.537171][ T35] bridge_slave_1: left allmulticast mode [ 305.542861][ T35] bridge_slave_1: left promiscuous mode [ 305.571097][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.904766][ T5840] Bluetooth: hci3: command tx timeout [ 306.095234][ T35] bridge_slave_0: left allmulticast mode [ 306.119569][ T35] bridge_slave_0: left promiscuous mode [ 306.151222][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.204669][ T35] dvmrp1: left allmulticast mode [ 306.333578][ T35] bond4 (unregistering): (slave vti0): Releasing backup interface [ 306.348881][ T35] vti0 (unregistering): left promiscuous mode [ 306.388324][ T35] bond5 (unregistering): (slave gretap1): Releasing active interface [ 306.397617][ T35] gretap1 (unregistering): left allmulticast mode [ 306.638175][ T35] bond3 (unregistering): (slave bridge4): Releasing backup interface [ 306.646542][ T35] bridge4 (unregistering): left promiscuous mode [ 306.819148][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 306.830309][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 306.840366][ T35] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 306.852965][ T35] bond0 (unregistering): Released all slaves [ 306.863979][ T35] bond1 (unregistering): Released all slaves [ 306.877307][ T35] bond2 (unregistering): Released all slaves [ 306.893332][ T35] bond3 (unregistering): Released all slaves [ 306.907351][ T35] bond4 (unregistering): Released all slaves [ 306.929927][ T35] bond5 (unregistering): Released all slaves [ 306.942043][ T35] bond6 (unregistering): Released all slaves [ 306.954655][T17205] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.962083][T17205] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.969643][T17205] bridge_slave_0: entered allmulticast mode [ 306.977024][T17205] bridge_slave_0: entered promiscuous mode [ 307.021787][T17329] syzkaller0: entered promiscuous mode [ 307.029820][T17329] syzkaller0: entered allmulticast mode [ 307.061976][T17205] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.072466][T17205] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.093186][T17205] bridge_slave_1: entered allmulticast mode [ 307.101817][T17205] bridge_slave_1: entered promiscuous mode [ 307.127029][T17340] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3184'. [ 307.161396][ T35] m1Ie5èÿá: left promiscuous mode [ 307.255324][T17344] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 307.321826][ T35] hmac(sha224): left promiscuous mode [ 307.345516][ T5840] Bluetooth: hci0: command tx timeout [ 307.440437][T17205] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 307.461669][T17205] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 307.518707][T17205] team0: Port device team_slave_0 added [ 307.540318][T17205] team0: Port device team_slave_1 added [ 307.623486][T17360] netlink: 'syz.4.3188': attribute type 10 has an invalid length. [ 307.634867][ T35] tipc: Left network mode [ 307.659855][T17360] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3188'. [ 307.661002][T17358] syzkaller0: entered promiscuous mode [ 307.706468][T17358] syzkaller0: entered allmulticast mode [ 307.724053][T17360] ip_vti0: Master is either lo or non-ether device [ 307.747885][T17205] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 307.760414][T17205] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 307.809160][T17205] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 307.830464][T17205] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 307.850781][T17205] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 307.921330][T17205] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 307.984622][ T5840] Bluetooth: hci3: command tx timeout [ 308.222943][T17205] hsr_slave_0: entered promiscuous mode [ 308.255646][T17205] hsr_slave_1: entered promiscuous mode [ 308.272054][T17205] debugfs: 'hsr0' already exists in 'hsr' [ 308.281628][T17205] Cannot create hsr debugfs directory [ 308.685445][ T35] hsr_slave_0: left promiscuous mode [ 308.696832][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 308.710215][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 309.281906][T17205] netdevsim netdevsim3 eth4 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 309.558575][T17205] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 309.650379][T17454] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3219'. [ 309.719745][T17205] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 309.909274][T17205] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 309.985307][ T35] IPVS: stop unused estimator thread 0... [ 310.065391][ T5840] Bluetooth: hci3: command tx timeout [ 310.090122][T17476] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 310.420438][T17205] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 310.455180][T17205] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 310.494211][T17205] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 310.520748][T17205] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 310.661280][T17205] 8021q: adding VLAN 0 to HW filter on device bond0 [ 310.712780][T17205] 8021q: adding VLAN 0 to HW filter on device team0 [ 310.739916][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.747117][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 310.766295][T17512] netlink: 'syz.4.3237': attribute type 1 has an invalid length. [ 310.797142][ T79] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.804384][ T79] bridge0: port 2(bridge_slave_1) entered forwarding state [ 310.868760][T17512] 8021q: adding VLAN 0 to HW filter on device bond1 [ 310.951451][T17518] bond1: (slave dummy0): making interface the new active one [ 310.987166][T17518] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 311.048104][T17530] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3240'. [ 311.048781][T17512] bond1 (unregistering): (slave dummy0): Releasing active interface [ 311.071772][T17512] bond1 (unregistering): Released all slaves [ 311.639047][T17205] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 311.782081][T17205] veth0_vlan: entered promiscuous mode [ 311.832462][T17205] veth1_vlan: entered promiscuous mode [ 311.938484][T17205] veth0_macvtap: entered promiscuous mode [ 311.958534][T17205] veth1_macvtap: entered promiscuous mode [ 312.021520][T17205] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 312.059128][T17205] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 312.109776][ T35] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.146839][ T5840] Bluetooth: hci3: command tx timeout [ 312.164940][ T35] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.185070][ T35] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.199096][ T35] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.442972][ T6198] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 312.474387][ T6198] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 312.577030][T17616] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3274'. [ 312.586556][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 312.604264][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 312.783975][T17628] ip6tnl1: entered promiscuous mode [ 313.266796][T17654] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3289'. [ 313.351271][ T5829] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 313.363947][ T5829] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 313.373779][ T5829] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 313.381948][ T5829] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 313.390689][ T5829] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 313.452170][T17658] lo speed is unknown, defaulting to 1000 [ 313.974647][T17686] netlink: 'syz.4.3298': attribute type 10 has an invalid length. [ 314.305255][T17686] 8021q: adding VLAN 0 to HW filter on device team0 [ 314.319665][T17686] bond0: (slave team0): Enslaving as an active interface with an up link [ 314.348692][T17658] chnl_net:caif_netlink_parms(): no params data found [ 314.381417][T17697] macvlan1: entered promiscuous mode [ 314.446182][T17698] macvlan1: entered allmulticast mode [ 314.461186][T17698] veth1_vlan: entered allmulticast mode [ 314.715968][T17658] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.723351][T17658] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.731177][T17658] bridge_slave_0: entered allmulticast mode [ 314.744257][T17658] bridge_slave_0: entered promiscuous mode [ 314.762089][T17658] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.779778][T17658] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.801885][T17658] bridge_slave_1: entered allmulticast mode [ 314.809304][ T8491] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.810725][T17658] bridge_slave_1: entered promiscuous mode [ 314.874072][T17658] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 314.894983][T17658] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 315.020877][ T35] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 315.067773][T17658] team0: Port device team_slave_0 added [ 315.100452][T17658] team0: Port device team_slave_1 added [ 315.115253][ T35] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 315.249902][ T35] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 315.266399][ T35] netdevsim netdevsim1 eth4: set [1, 0] type 2 family 0 port 20000 - 0 [ 315.291028][T17658] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 315.304577][T17658] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 315.349638][T17658] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 315.368903][T17658] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 315.383650][T17658] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 315.424781][ T5840] Bluetooth: hci4: command tx timeout [ 315.444608][T17658] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 315.514667][ T6217] bridge_slave_1: left allmulticast mode [ 315.564147][ T6217] bridge_slave_1: left promiscuous mode [ 315.577046][ T6217] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.642587][ T6217] bridge_slave_0: left allmulticast mode [ 315.663774][ T6217] bridge_slave_0: left promiscuous mode [ 315.702104][ T6217] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.282598][ T6217] batman_adv: batadv0: Removing interface: gretap1 [ 316.547919][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 316.836614][ T6217] bond1 (unregistering): Released all slaves [ 316.849121][ T6217] bond2 (unregistering): Released all slaves [ 316.867489][ T6217] bond0 (unregistering): Released all slaves [ 316.892889][T17838] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3361'. [ 316.903960][ T6217] bond3 (unregistering): Released all slaves [ 316.917299][ T6217] bond4 (unregistering): Released all slaves [ 316.930916][ T6217] bond5 (unregistering): Released all slaves [ 316.948886][ T6217] bond6 (unregistering): Released all slaves [ 316.965474][ T6217] bond7 (unregistering): (slave veth7): Releasing active interface [ 316.976519][ T6217] bond7 (unregistering): (slave veth9): Releasing active interface [ 316.989218][ T6217] bond7 (unregistering): Released all slaves [ 317.003239][ T6217] bond8 (unregistering): Released all slaves [ 317.089887][T17658] hsr_slave_0: entered promiscuous mode [ 317.125051][T17658] hsr_slave_1: entered promiscuous mode [ 317.131470][ T1302] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.142347][ T1302] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.152479][T17658] debugfs: 'hsr0' already exists in 'hsr' [ 317.161880][T17658] Cannot create hsr debugfs directory [ 317.288566][ T6217] : left promiscuous mode [ 317.461678][ T6217] tipc: Disabling bearer [ 317.479646][ T6217] tipc: Left network mode [ 317.511937][ T5840] Bluetooth: hci4: command tx timeout [ 317.990146][T17658] netdevsim netdevsim1 eth4 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 318.118157][T17658] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 318.287043][T17658] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 318.567215][T17658] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 318.996468][T17936] netlink: 'syz.2.3399': attribute type 25 has an invalid length. [ 319.070397][T17936] netlink: 'syz.2.3399': attribute type 3 has an invalid length. [ 319.084503][T17936] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3399'. [ 319.243632][T17957] netlink: 'syz.4.3402': attribute type 10 has an invalid length. [ 319.268553][ T6217] hsr_slave_0: left promiscuous mode [ 319.289717][ T6217] hsr_slave_1: left promiscuous mode [ 319.300559][ T6217] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 319.311150][ T6217] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 319.590599][ T5840] Bluetooth: hci4: command tx timeout [ 319.866569][ T6217] team0 (unregistering): Port device team_slave_1 removed [ 320.093986][T17957] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 320.133172][T17981] lo speed is unknown, defaulting to 1000 [ 320.368157][ T6217] IPVS: stop unused estimator thread 0... [ 320.523166][T18007] lo speed is unknown, defaulting to 1000 [ 320.669343][T18014] syzkaller0: entered promiscuous mode [ 320.675007][T18014] syzkaller0: entered allmulticast mode [ 321.664676][ T5840] Bluetooth: hci4: command tx timeout [ 321.936469][T17941] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 321.955957][T17658] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 322.009031][T17658] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 322.072925][T17658] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 322.097278][T17658] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 322.109771][T18031] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3422'. [ 322.328818][T18049] [ 322.331458][T18049] ============================= [ 322.336719][T18049] WARNING: suspicious RCU usage [ 322.341772][T18049] syzkaller #0 Not tainted [ 322.347081][T18049] ----------------------------- [ 322.351940][T18049] kernel/events/callchain.c:163 suspicious rcu_dereference_check() usage! [ 322.362340][T18049] [ 322.362340][T18049] other info that might help us debug this: [ 322.362340][T18049] [ 322.373076][T18049] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 322.373076][T18049] rcu_scheduler_active = 2, debug_locks = 1 [ 322.381775][T18049] 1 lock held by syz.4.3428/18049: [ 322.388360][T18049] #0: ffffffff8e75e618 (rcu_tasks_trace_srcu_struct){....}-{0:0}, at: rcu_read_lock_trace+0x25/0x110 [ 322.400024][T18049] [ 322.400024][T18049] stack backtrace: [ 322.406353][T18049] CPU: 1 UID: 0 PID: 18049 Comm: syz.4.3428 Not tainted syzkaller #0 PREEMPT(full) [ 322.406381][T18049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 322.406395][T18049] Call Trace: [ 322.406402][T18049] [ 322.406411][T18049] dump_stack_lvl+0xe8/0x150 [ 322.406444][T18049] lockdep_rcu_suspicious+0x13f/0x1d0 [ 322.406479][T18049] get_callchain_entry+0x2b6/0x3c0 [ 322.406514][T18049] get_perf_callchain+0xd5/0x880 [ 322.406551][T18049] ? __pfx_get_perf_callchain+0x10/0x10 [ 322.406588][T18049] ? __pfx___resched_curr+0x10/0x10 [ 322.406619][T18049] __bpf_get_stack+0x445/0xab0 [ 322.406668][T18049] ? __pfx___bpf_get_stack+0x10/0x10 [ 322.406711][T18049] bpf_get_stack+0x33/0x50 [ 322.406738][T18049] ? bpf_prog_e8e6327ccf46c9a7+0x46/0x4e [ 322.406759][T18049] bpf_get_stack_raw_tp+0x1a9/0x220 [ 322.406798][T18049] bpf_prog_e8e6327ccf46c9a7+0x46/0x4e [ 322.406818][T18049] bpf_prog_run_pin_on_cpu+0x142/0x470 [ 322.406855][T18049] bpf_prog_test_run_syscall+0x318/0x4c0 [ 322.406916][T18049] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10 [ 322.406946][T18049] ? __fget_files+0x2a/0x420 [ 322.406981][T18049] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10 [ 322.407017][T18049] bpf_prog_test_run+0x2c7/0x340 [ 322.407040][T18049] __sys_bpf+0x643/0x950 [ 322.407073][T18049] ? __pfx___sys_bpf+0x10/0x10 [ 322.407123][T18049] ? rcu_is_watching+0x15/0xb0 [ 322.407159][T18049] __x64_sys_bpf+0x7c/0x90 [ 322.407187][T18049] do_syscall_64+0x14d/0xf80 [ 322.407223][T18049] ? trace_irq_disable+0x3b/0x150 [ 322.407252][T18049] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.407273][T18049] ? clear_bhb_loop+0x40/0x90 [ 322.407302][T18049] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.407322][T18049] RIP: 0033:0x7fc10d19c799 [ 322.407347][T18049] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 322.407365][T18049] RSP: 002b:00007fc10b3f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 322.407387][T18049] RAX: ffffffffffffffda RBX: 00007fc10d415fa0 RCX: 00007fc10d19c799 [ 322.407402][T18049] RDX: 000000000000000c RSI: 00002000000004c0 RDI: 000000000000000a [ 322.407415][T18049] RBP: 00007fc10d232c99 R08: 0000000000000000 R09: 0000000000000000 [ 322.407428][T18049] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 322.407445][T18049] R13: 00007fc10d416038 R14: 00007fc10d415fa0 R15: 00007fff1f2b3c38 [ 322.407479][T18049] [ 322.513792][T17658] 8021q: adding VLAN 0 to HW filter on device bond0 [ 323.599870][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.722624][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.778051][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.833195][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.918056][ T6198] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 323.937078][ T79] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 323.962856][ T79] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 323.987206][ T79] netdevsim netdevsim0 eth4: set [1, 0] type 2 family 0 port 20000 - 0 [ 323.995975][ T13] bridge_slave_1: left allmulticast mode [ 324.001634][ T13] bridge_slave_1: left promiscuous mode [ 324.007776][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.019698][ T13] bridge_slave_0: left promiscuous mode [ 324.027937][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.339257][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 324.352229][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 324.362661][ T13] bond0 (unregistering): Released all slaves [ 324.616573][ T13] hsr_slave_0: left promiscuous mode [ 324.622633][ T13] hsr_slave_1: left promiscuous mode [ 324.629944][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 324.637711][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 324.649009][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 324.656774][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 324.676069][ T13] veth1_macvtap: left promiscuous mode [ 324.681829][ T13] veth0_macvtap: left promiscuous mode [ 324.689870][ T13] veth1_vlan: left promiscuous mode [ 324.698327][ T13] veth0_vlan: left promiscuous mode [ 324.924578][ T13] team0 (unregistering): Port device team_slave_1 removed [ 324.938180][ T13] team0 (unregistering): Port device team_slave_0 removed [ 325.426398][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 325.542582][ T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.604336][ T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.668850][ T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.725588][ T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.827006][ T35] netdevsim netdevsim2 eth5: set [1, 0] type 2 family 0 port 20000 - 0 [ 325.847272][ T6198] netdevsim netdevsim2 eth6: set [1, 0] type 2 family 0 port 20000 - 0 [ 325.880552][ T6198] netdevsim netdevsim2 eth7: set [1, 0] type 2 family 0 port 20000 - 0 [ 325.898968][ T6198] netdevsim netdevsim2 eth8: set [1, 0] type 2 family 0 port 20000 - 0 [ 326.182636][ T6198] netdevsim netdevsim1 eth9: set [1, 0] type 2 family 0 port 20000 - 0 [ 326.214536][ T6198] netdevsim netdevsim1 eth10: set [1, 0] type 2 family 0 port 20000 - 0 [ 326.250284][ T6198] netdevsim netdevsim1 eth11: set [1, 0] type 2 family 0 port 20000 - 0 [ 326.279498][ T49] netdevsim netdevsim1 eth12: set [1, 0] type 2 family 0 port 20000 - 0 [ 326.315641][ T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.367396][ T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.433735][ T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.496377][ T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.573341][ T6198] netdevsim netdevsim4 eth13: set [1, 0] type 2 family 0 port 20000 - 0 [ 326.612645][ T6198] netdevsim netdevsim4 eth14: set [1, 0] type 2 family 0 port 20000 - 0 [ 326.622811][ T6198] netdevsim netdevsim4 eth15: set [1, 0] type 2 family 0 port 20000 - 0 [ 326.643981][ T6198] netdevsim netdevsim4 eth16: set [1, 0] type 2 family 0 port 20000 - 0 [ 326.691600][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.759524][ T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.816990][ T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.892882][ T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.003141][ T35] netdevsim netdevsim3 eth17: set [1, 0] type 2 family 0 port 20000 - 0 [ 327.037092][ T35] netdevsim netdevsim3 eth18: set [1, 0] type 2 family 0 port 20000 - 0 [ 327.047239][ T35] netdevsim netdevsim3 eth19: set [1, 0] type 2 family 0 port 20000 - 0 [ 327.069872][ T35] netdevsim netdevsim3 eth20: set [1, 0] type 2 family 0 port 20000 - 0 [ 327.085613][ T13] bridge_slave_1: left allmulticast mode [ 327.092602][ T13] bridge_slave_1: left promiscuous mode [ 327.098560][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.109450][ T13] bridge_slave_0: left allmulticast mode [ 327.116940][ T13] bridge_slave_0: left promiscuous mode [ 327.122745][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.135545][ T13] bridge_slave_1: left allmulticast mode [ 327.141230][ T13] bridge_slave_1: left promiscuous mode [ 327.147735][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.158843][ T13] bridge_slave_0: left allmulticast mode [ 327.164703][ T13] bridge_slave_0: left promiscuous mode [ 327.170469][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.189637][ T13] bridge_slave_1: left allmulticast mode [ 327.196167][ T13] bridge_slave_1: left promiscuous mode [ 327.202020][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.213335][ T13] bridge_slave_0: left allmulticast mode [ 327.219822][ T13] bridge_slave_0: left promiscuous mode [ 327.230568][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.242216][ T13] bridge_slave_1: left allmulticast mode [ 327.248216][ T13] bridge_slave_1: left promiscuous mode [ 327.253947][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.266310][ T13] bridge_slave_0: left allmulticast mode [ 327.271995][ T13] bridge_slave_0: left promiscuous mode [ 327.279517][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.572592][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 327.583407][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 327.593175][ T13] bond0 (unregistering): Released all slaves [ 327.739942][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 327.750900][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 327.760782][ T13] bond0 (unregistering): Released all slaves [ 327.891803][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 327.902422][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 327.913536][ T13] bond0 (unregistering): (slave team0): Releasing backup interface [ 327.923350][ T13] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 327.939010][ T13] bond0 (unregistering): Released all slaves [ 328.033147][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 328.043417][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 328.055117][ T13] bond0 (unregistering): Released all slaves [ 328.756515][ T13] hsr_slave_0: left promiscuous mode [ 328.774455][ T13] hsr_slave_1: left promiscuous mode [ 328.780476][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 328.790745][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 328.799057][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 328.806690][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 328.822479][ T13] hsr_slave_0: left promiscuous mode [ 328.828877][ T13] hsr_slave_1: left promiscuous mode [ 328.836901][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 328.845944][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 328.861630][ T13] hsr_slave_0: left promiscuous mode [ 328.867932][ T13] hsr_slave_1: left promiscuous mode [ 328.873990][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 328.882057][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 328.890524][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 328.898354][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 328.912968][ T13] hsr_slave_0: left promiscuous mode [ 328.919505][ T13] hsr_slave_1: left promiscuous mode [ 328.925997][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 328.933448][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 328.942291][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 328.951537][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 328.974863][ T13] veth1_macvtap: left promiscuous mode [ 328.980392][ T13] veth0_macvtap: left promiscuous mode [ 328.988346][ T13] veth1_vlan: left allmulticast mode [ 328.993999][ T13] veth1_vlan: left promiscuous mode [ 328.999580][ T13] veth0_vlan: left promiscuous mode [ 329.006591][ T13] veth1_macvtap: left promiscuous mode [ 329.012106][ T13] veth0_macvtap: left promiscuous mode [ 329.017828][ T13] veth1_vlan: left promiscuous mode [ 329.023121][ T13] veth0_vlan: left promiscuous mode [ 329.032895][ T13] veth1_macvtap: left promiscuous mode [ 329.038995][ T13] veth0_macvtap: left promiscuous mode [ 329.044738][ T13] veth1_vlan: left promiscuous mode [ 329.050037][ T13] veth0_vlan: left promiscuous mode [ 329.348671][ T13] team0 (unregistering): Port device team_slave_1 removed [ 329.361791][ T13] team0 (unregistering): Port device team_slave_0 removed [ 329.540575][ T13] team0 (unregistering): Port device team_slave_1 removed [ 329.554025][ T13] team0 (unregistering): Port device team_slave_0 removed [ 329.722244][ T13] team0 (unregistering): Port device team_slave_1 removed [ 329.745496][ T13] team0 (unregistering): Port device team_slave_0 removed [ 329.933748][ T13] team0 (unregistering): Port device team_slave_1 removed [ 329.951764][ T13] team0 (unregistering): Port device team_slave_0 removed