last executing test programs: 3.034611353s ago: executing program 3 (id=10606): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000001840)={0x1, &(0x7f0000001880)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000002c0)="6321a1780e3fe8d9098f1f28f3c1f1895857b6b4afebba414b5998fa7c73702eb715d85b6a7709a53bf91325a9fbf7387371592c3533a8a34a28e9364405bb05cdeedb9ddfbe45a6933c33e5019991d691e8e8817a584f5392630d34c12a00aac5c546266df9fbb755447a0ff32acb32fc4b9c54b7fa15f82a9848478df5354f7158ece711c634aead9f427b8a3e580b3bd0920814473069f285753c945e0baa9072f76c542acf2986649075a243126f6d736b8bfa9a88672388eaa7902fc6c9a3c1b2781d", 0xc5}], 0x1}}], 0x1, 0x20000001) recvmmsg(r0, &(0x7f0000000800)=[{{&(0x7f0000000140)=@generic, 0x80, &(0x7f0000000600)=[{&(0x7f00000001c0)=""/144, 0x90}, {&(0x7f0000000280)=""/192, 0xc0}], 0x2}, 0x7}], 0x1, 0x40, 0x0) 2.355731451s ago: executing program 0 (id=10624): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) sendto$inet6(r0, &(0x7f0000000100)='Y', 0x1, 0x20004001, &(0x7f0000000180)={0xa, 0x4e23, 0xf, @remote, 0x8}, 0x1c) sendmmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0, 0x4001) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000080)={r2, 0x2, 0x1, "fa"}, 0x9) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000040)={r2, 0x2}, 0x8) 2.30439737s ago: executing program 1 (id=10626): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4) setsockopt$inet6_buf(r0, 0x29, 0x3e, &(0x7f00002cef88)="d84f7398", 0x4) sendto$inet6(r0, &(0x7f0000000dc0)="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", 0x4f8, 0x8000, &(0x7f0000000180)={0xa, 0x4e21, 0xf, @dev={0xfe, 0x80, '\x00', 0x12}, 0x6}, 0x1c) sendto$inet6(r0, &(0x7f0000000800)="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"/1450, 0x5de, 0x0, &(0x7f0000000080)={0xa, 0x5e20, 0x9, @mcast2}, 0x1c) 2.263566326s ago: executing program 1 (id=10627): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="05000000070000000700000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, &(0x7f0000000000), &(0x7f0000000180)=r1}, 0x20) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) 2.184502905s ago: executing program 1 (id=10628): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100)=0xb329, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000900), 0x0, 0x12, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 2.09367622s ago: executing program 3 (id=10629): r0 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000040)=0x80000000, 0x4) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0xffffffffffffff50, 0x0, 0x0, &(0x7f00000000c0)=""/10, 0x11}, 0x401}], 0x27, 0x40000102, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c89000c2c0120010000000000000000000000000001fe8000000000000000000000000000aa"], 0x0) 1.409313668s ago: executing program 0 (id=10637): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4) setsockopt$inet6_buf(r0, 0x29, 0x3e, &(0x7f00002cef88)="d84f7398", 0x4) sendto$inet6(r0, &(0x7f0000000dc0)="6d8b510563db73e443be20c32670bcfb68eda45cbef0f5dff53a1b6610bb329af3093a410e588afae7b7b1f7154c9f5f1a40747d1d5d71d8fd0e35abee748c496c165bc2108614e35551fe930ad7c8207f8988b7b7fac4ef3cb174d2186a1c76d29a6e2bd13b311adaf13544fd70d1d81168f99e63d5ff75edd2d26df57f39e740efb6a03328e07a7e0634cd687ac8616d6896f11a5b0c540b3aea160687796b6fdf46b0cd47d39b6ad0182d381af40740312939127a8a4420c4c06d48a8f20eeeaa656f1dd30858d92ae633c308891227241f881a6f89cd47f3c66939f6af7cab5ff850dff2039398f729559ddb0c7fdc11e7ffcd9da75b991e8686d72b0b4b20abd28477ac4c7aa02c892183392be6c6a4a9fbd6ba56d69cdeebd5e855b95907cd59549fc5e4a74210ef7b28e978f873153c14499cb05e8bddaa8508d8218c7193592a663b0f95bf4dd69cc0718b549e56a365558ad4329e667be25f69a8fe9de1757b7a8570a30ca77467782b71d4aa69548201593ac811e1775be9b1a16f9f88e16de982e0f43c5adc8345738c276d5b2ec313b2a898578b375e39fcd4a806882d1e1e350a1cea91639c0923a998a73bbf7fd9d81f0f6d468c785dc7a20e1d3b8a0fa4c1812fbce34ec17ea41129d528395af8846a9ee4e359959d1f675d7266bf79b472cdbcc09273e02c205a803d55630d2f208c8a9dbe1ca416476b33d14083f916061d7bfedf7f17414dbb34f76fdd664a166a2c2cf01628f636c21a667fbc24228c6ada93947115d303ead00f2de030539ec89231dfe2ffd0735d1029d67a0b70e8b6b2b5cab60cbcb65e6ebc19c3999a9a4b196fbf706162c8e5f9e0f05b0740c86e17f0bf2aa1531c6410ec423e336b706465dd280d8522abc665dde5aa63da8b532280c3d88da88810bcaf1305ffca5b5bdd027206cbf8d1bcf83ec81e3e4a2796fee9561e4136021c53328f40e419e22447cd5f637c0726997b32156691ba0af2f901a28b8ae82e9fb37616d9eee4a4376e018f504441b78b52198bc86d82d9fee9a418b0c20f6581d4c60957dad4c0c7d9f6aaa87a68a68bca5f8405315503bbf65bb6ec55bf0a4eac64fa799674a14b3d40be4dc7c0345ba9de5ddffb39526f43561324d9318049ea3f8507d794ab5ab2cd59feab0c827f952f077ec0225732618a5b3480daddf2392210d548a818434fd03b508e37c7017e1a8f9d3b46e715eb45f8e0f39b8daeab9e89eb31c1969f0af6dc9512f60c756cde4697ddf95018a776cda4356e9ba3397b19f9f4008be9dfff2b48e165ca15824f093e6c3adaf01b2bd90fc63c84265a4ee22e73c91e5a356564387eabde00ba35a70aba6a8a8531ee41c6dba878fa44e4879867eaf5d303da78fe743b8a9d3f3c5883c370c59873c8dd1396b7cddff8ae474fdb202b725674db77e9bee30e875df328760fdeddb26a5a46b19d113e32051f03de0a7412283de72e491d61196be7ef091e58f5d008208e80cb6cd15e30d118b7d880a3f15326b0a8c1f998debc50fffebc4a62671a44413a2acb6602bceb9315aee1afe1cf1fa7004bc74610c37aa60aec4fc593412f505292dbf2fbf8eef7f5e752b01442dc5c21d7295ea7142b5bae0dbe2c71339e68f16815e1dd8499bf76ea7cc1e34a8758cc74a9cbabcc10f5246adcb73d9fa9b6370497c438d19b13a2d80686f360da9b3a718f227d074aa9e96e3c38364af48f058c9a10efedfd73db762bcfef6359fcc6e9866fded7298feb73f33e1753c7b306a6fc4c464d5342574e1ecca39b", 0x4f8, 0x8000, &(0x7f0000000180)={0xa, 0x4e21, 0xf, @dev={0xfe, 0x80, '\x00', 0x12}, 0x6}, 0x1c) sendto$inet6(r0, &(0x7f0000000800)="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"/1450, 0x5de, 0x0, &(0x7f0000000080)={0xa, 0x5e20, 0x9, @mcast2}, 0x1c) 1.325887132s ago: executing program 0 (id=10640): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) recvmmsg(r0, &(0x7f0000005f40)=[{{0x0, 0x0, 0x0}, 0xf}], 0x1, 0x0, 0x0) 1.275967961s ago: executing program 1 (id=10641): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000580)={r2, r0, 0x25, 0x0, @val=@netkit}, 0x1c) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000080), &(0x7f00000001c0)=r2}, 0x20) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x1d}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x1, 0x3}}}}}}, 0x0) 1.211289644s ago: executing program 3 (id=10643): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.118952986s ago: executing program 3 (id=10644): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4) setsockopt$inet6_buf(r0, 0x29, 0x3e, &(0x7f00002cef88)="d84f7398", 0x4) sendto$inet6(r0, &(0x7f0000000dc0), 0x0, 0x8000, &(0x7f0000000180)={0xa, 0x4e21, 0xf, @dev={0xfe, 0x80, '\x00', 0x12}, 0x6}, 0x1c) 1.115433806s ago: executing program 1 (id=10645): r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$igmp6(0xa, 0x3, 0x2) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @local}, 0x10) connect$inet(r0, 0x0, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x1fffffd, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x7, 0xfff2}, {0x0, 0xf}}}, 0x24}}, 0x0) 993.568317ms ago: executing program 3 (id=10646): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4e, &(0x7f0000000000)=0x6, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0xfe1d, @loopback={0xe0}, 0x9371}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20004000, &(0x7f00000001c0)={0xa, 0x4e22, 0x40000000, @empty, 0x1}, 0x1c) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002280)={0x0, 0xae}, 0x1, 0x0, 0x0, 0x22004014}, 0x800) 940.598872ms ago: executing program 2 (id=10647): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={0x0}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000180)=ANY=[], 0x8) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000500)="8238", 0x2d}], 0x1}}], 0x1, 0x4400c800) sendto$inet6(r0, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd) 918.998789ms ago: executing program 2 (id=10648): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001d40)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000380)=r0}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000ec0)=ANY=[@ANYBLOB], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r2}, &(0x7f00000002c0), &(0x7f0000000300)=r3}, 0x20) 878.239181ms ago: executing program 2 (id=10649): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x6d207ee5}, 0x8) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000580)}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000000)={0x0, 0x3}, 0x8) 792.635181ms ago: executing program 2 (id=10650): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000880)={@in6={{0xa, 0x4e20, 0x7, @loopback, 0x8}}, 0x0, 0x0, 0x22, 0x0, "bb353738cb473fc7c9f1cf53b6a7b4e24740bd4c0b42a21d7214bf92594925208a0e2f964e654dc534a6324d4993fcf19b2df3ee818a118a7c49462189316d556d2ccd00"}, 0xd8) sendto$inet6(r0, &(0x7f0000000000)="e9b0b9b4", 0x4, 0x20008045, 0x0, 0x0) 787.437274ms ago: executing program 2 (id=10651): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x4, 0xd, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000ff7f00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000220000008500000082000000850000000500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x10, 0x10, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 781.977706ms ago: executing program 1 (id=10652): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000001840)={0x1, &(0x7f0000001880)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000002c0)="6321a1780e3fe8d9098f1f28f3c1f1895857b6b4afebba414b5998fa7c73702eb715d85b6a7709a53bf91325a9fbf7387371592c3533a8a34a28e9364405bb05cdeedb9ddfbe45a6933c33e5019991d691e8e8817a584f5392630d34c12a00aac5c546266df9fbb755447a0ff32acb32fc4b9c54b7fa15f82a9848478df5354f7158ece711c634aead9f427b8a3e580b3bd0920814473069f285753c945e0baa9072f76c542acf2986649075a243126f6d736b8bfa9a88672388eaa7902fc6c9a3c1b2781d", 0xc5}], 0x1}}], 0x1, 0x20000001) recvmmsg(r0, &(0x7f0000000800)=[{{&(0x7f0000000140)=@generic, 0x80, &(0x7f0000000600)=[{&(0x7f00000001c0)=""/144, 0x90}, {&(0x7f0000000280)=""/192, 0xc0}], 0x2}, 0x7}, {{0x0, 0x0, &(0x7f0000000780)}}], 0x2, 0x40, 0x0) 684.673553ms ago: executing program 2 (id=10653): r0 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000040)=0x80000000, 0x4) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0xffffffffffffff50, 0x0, 0x0, &(0x7f00000000c0)=""/10, 0x11}, 0x401}], 0x27, 0x40000102, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c89000c2c0120010000000000000000000000000001fe8000000000000000000000000000aa"], 0x0) 415.788365ms ago: executing program 4 (id=10654): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 361.11651ms ago: executing program 4 (id=10655): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000300000005"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000f91f20207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1, r0}, 0xc) 300.645591ms ago: executing program 0 (id=10656): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd2f8, 0x0, 0x0, 0x0, 0x200020}, [@call={0x85, 0x0, 0x0, 0x6c}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 300.378958ms ago: executing program 4 (id=10657): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f00000003c0)={&(0x7f0000000040)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}}, 0x80, 0x0}, 0x80) 267.299833ms ago: executing program 0 (id=10658): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x6, 0x10, &(0x7f00000003c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x800000e2, 0x0, 0x0, 0x0, 0x2000000}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8006}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x60, '\x00', 0x0, @fallback=0x5c298795369ca04f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000800)={r1, r3, 0x25, 0x2, @val=@tracing={0x0, 0x4}}, 0x20) syz_emit_ethernet(0x0, 0x0, 0x0) 239.886459ms ago: executing program 4 (id=10659): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001d40)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000380)=r0}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r2}, &(0x7f00000002c0), &(0x7f0000000300)=r3}, 0x20) 135.985892ms ago: executing program 4 (id=10660): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x10, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000007910100000000000c300000a000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x2, 0xc4, &(0x7f00000002c0)=""/196}, 0x80) 104.262849ms ago: executing program 4 (id=10661): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r0, 0x0, 0x0}, 0x10) 60.53324ms ago: executing program 3 (id=10662): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100), 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='N,N'], 0x6a) 0s ago: executing program 0 (id=10663): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="010000001a0000000520000007"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000100), 0x3f, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r0, &(0x7f0000000000)="51e15ca1567a35eb8bae0a67f6f59ce529cb37c5ce", &(0x7f0000000180)=""/105}, 0x20) kernel console output (not intermixed with test programs): d_addrs_to_raw+0x10a/0x380 [ 1125.544535][ T2141] ? __pfx_sctp_bind_addrs_to_raw+0x10/0x10 [ 1125.544577][ T2141] sctp_make_init+0x174/0xe00 [ 1125.544600][ T2141] ? is_bpf_text_address+0x292/0x2b0 [ 1125.544621][ T2141] ? is_bpf_text_address+0x26/0x2b0 [ 1125.544650][ T2141] ? __kernel_text_address+0xd/0x30 [ 1125.544674][ T2141] ? __pfx_sctp_make_init+0x10/0x10 [ 1125.544714][ T2141] ? stack_trace_save+0xa9/0x100 [ 1125.544735][ T2141] ? __pfx_stack_trace_save+0x10/0x10 [ 1125.544761][ T2141] sctp_sf_do_prm_asoc+0xd2/0x3f0 [ 1125.544796][ T2141] sctp_do_sm+0x238/0x5cf0 [ 1125.544816][ T2141] ? __pfx_sctp_pname+0x10/0x10 [ 1125.544834][ T2141] ? kasan_save_track+0x4f/0x80 [ 1125.544855][ T2141] ? kasan_save_track+0x3e/0x80 [ 1125.544874][ T2141] ? __kmalloc_cache_noprof+0x31c/0x660 [ 1125.544896][ T2141] ? sctp_sendmsg+0x1b3d/0x2c10 [ 1125.544923][ T2141] ? ___sys_sendmsg+0x2a5/0x360 [ 1125.544941][ T2141] ? __sys_sendmmsg+0x27c/0x4e0 [ 1125.544959][ T2141] ? __x64_sys_sendmmsg+0xa0/0xc0 [ 1125.544985][ T2141] ? do_syscall_64+0x14d/0xf80 [ 1125.545005][ T2141] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1125.545032][ T2141] ? __pfx_sctp_do_sm+0x10/0x10 [ 1125.545101][ T2141] ? __sk_mem_raise_allocated+0x290/0x12c0 [ 1125.545124][ T2141] ? __genradix_ptr+0x1e1/0x220 [ 1125.545149][ T2141] sctp_primitive_ASSOCIATE+0x95/0xc0 [ 1125.545179][ T2141] sctp_sendmsg_to_asoc+0x143d/0x1900 [ 1125.545201][ T2141] ? __asan_memcpy+0x40/0x70 [ 1125.545230][ T2141] ? sctp_assoc_add_peer+0xce1/0x13b0 [ 1125.545271][ T2141] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 1125.545301][ T2141] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1125.545338][ T2141] ? __local_bh_enable_ip+0xd0/0x130 [ 1125.545363][ T2141] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1125.545388][ T2141] ? security_sctp_bind_connect+0x7e/0x2c0 [ 1125.545415][ T2141] sctp_sendmsg+0x1b3d/0x2c10 [ 1125.545459][ T2141] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1125.545491][ T2141] ? aa_sk_perm+0x6d5/0x900 [ 1125.545525][ T2141] ? __pfx_aa_sk_perm+0x10/0x10 [ 1125.545554][ T2141] ? sock_rps_record_flow+0x19/0x350 [ 1125.545588][ T2141] ? inet_sendmsg+0x2f4/0x370 [ 1125.545611][ T2141] ____sys_sendmsg+0x80a/0x9f0 [ 1125.545641][ T2141] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1125.545671][ T2141] ? import_iovec+0x73/0xa0 [ 1125.545705][ T2141] ___sys_sendmsg+0x2a5/0x360 [ 1125.545734][ T2141] ? __pfx____sys_sendmsg+0x10/0x10 [ 1125.545762][ T2141] ? kstrtouint+0x6e/0xe0 [ 1125.545821][ T2141] ? __fget_files+0x2a/0x420 [ 1125.545850][ T2141] ? __fget_files+0x3a0/0x420 [ 1125.545893][ T2141] __sys_sendmmsg+0x27c/0x4e0 [ 1125.545922][ T2141] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1125.545939][ T2141] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1125.545999][ T2141] ? ksys_write+0x242/0x270 [ 1125.546026][ T2141] ? __pfx_ksys_write+0x10/0x10 [ 1125.546057][ T2141] __x64_sys_sendmmsg+0xa0/0xc0 [ 1125.546082][ T2141] do_syscall_64+0x14d/0xf80 [ 1125.546101][ T2141] ? trace_irq_disable+0x3b/0x150 [ 1125.546130][ T2141] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1125.546151][ T2141] ? clear_bhb_loop+0x40/0x90 [ 1125.546178][ T2141] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1125.546198][ T2141] RIP: 0033:0x7fd7b279c799 [ 1125.546220][ T2141] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1125.546239][ T2141] RSP: 002b:00007fd7b3688028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1125.546262][ T2141] RAX: ffffffffffffffda RBX: 00007fd7b2a15fa0 RCX: 00007fd7b279c799 [ 1125.546278][ T2141] RDX: 0000000000000001 RSI: 0000200000000500 RDI: 0000000000000003 [ 1125.546291][ T2141] RBP: 00007fd7b3688090 R08: 0000000000000000 R09: 0000000000000000 [ 1125.546305][ T2141] R10: 0000000004000840 R11: 0000000000000246 R12: 0000000000000002 [ 1125.546317][ T2141] R13: 00007fd7b2a16038 R14: 00007fd7b2a15fa0 R15: 00007fffb27fa9a8 [ 1125.546362][ T2141] [ 1126.095260][ T2147] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8653'. [ 1126.105855][ T2147] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8653'. [ 1126.158531][ T2151] FAULT_INJECTION: forcing a failure. [ 1126.158531][ T2151] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1126.229134][ T2151] CPU: 1 UID: 0 PID: 2151 Comm: syz.4.8658 Not tainted syzkaller #0 PREEMPT(full) [ 1126.229165][ T2151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1126.229177][ T2151] Call Trace: [ 1126.229187][ T2151] [ 1126.229196][ T2151] dump_stack_lvl+0xe8/0x150 [ 1126.229233][ T2151] should_fail_ex+0x412/0x560 [ 1126.229266][ T2151] _copy_from_user+0x2d/0xb0 [ 1126.229299][ T2151] get_user_ifreq+0x6b/0x180 [ 1126.229327][ T2151] inet_ioctl+0x356/0x560 [ 1126.229353][ T2151] ? __pfx_inet_ioctl+0x10/0x10 [ 1126.229400][ T2151] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1126.229434][ T2151] sock_do_ioctl+0x101/0x320 [ 1126.229462][ T2151] ? __pfx_sock_do_ioctl+0x10/0x10 [ 1126.229484][ T2151] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1126.229526][ T2151] sock_ioctl+0x5c6/0x7f0 [ 1126.229554][ T2151] ? __pfx_sock_ioctl+0x10/0x10 [ 1126.229578][ T2151] ? __fget_files+0x2a/0x420 [ 1126.229607][ T2151] ? __fget_files+0x3a0/0x420 [ 1126.229635][ T2151] ? __fget_files+0x2a/0x420 [ 1126.229669][ T2151] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1126.229697][ T2151] ? __pfx_sock_ioctl+0x10/0x10 [ 1126.229721][ T2151] __se_sys_ioctl+0xfc/0x170 [ 1126.229748][ T2151] do_syscall_64+0x14d/0xf80 [ 1126.229768][ T2151] ? trace_irq_disable+0x3b/0x150 [ 1126.229805][ T2151] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1126.229827][ T2151] ? clear_bhb_loop+0x40/0x90 [ 1126.229853][ T2151] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1126.229872][ T2151] RIP: 0033:0x7fd7b279c799 [ 1126.229892][ T2151] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1126.229910][ T2151] RSP: 002b:00007fd7b3688028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1126.229932][ T2151] RAX: ffffffffffffffda RBX: 00007fd7b2a15fa0 RCX: 00007fd7b279c799 [ 1126.229946][ T2151] RDX: 0000200000000d80 RSI: 000000000000891b RDI: 0000000000000003 [ 1126.229959][ T2151] RBP: 00007fd7b3688090 R08: 0000000000000000 R09: 0000000000000000 [ 1126.229971][ T2151] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1126.229983][ T2151] R13: 00007fd7b2a16038 R14: 00007fd7b2a15fa0 R15: 00007fffb27fa9a8 [ 1126.230016][ T2151] [ 1126.574054][ T2162] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode [ 1126.616128][ T2162] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode [ 1127.012953][ T2182] netlink: 204 bytes leftover after parsing attributes in process `syz.4.8671'. [ 1127.033243][ T2182] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8671'. [ 1127.106517][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1127.114596][ C1] lec:lec_tx_timeout: lec0 [ 1127.322797][ T2189] netlink: 6 bytes leftover after parsing attributes in process `syz.3.8674'. [ 1127.335795][T24444] net_ratelimit: 127 callbacks suppressed [ 1127.335816][T24444] bond10: (slave bridge8): failed to get link speed/duplex [ 1127.349592][T24444] bond16: (slave bridge8): failed to get link speed/duplex [ 1127.358521][ T2189] netlink: 43 bytes leftover after parsing attributes in process `syz.3.8674'. [ 1127.377117][T24444] bond13: (slave bridge6): failed to get link speed/duplex [ 1127.396819][T24444] bond15: (slave bridge6): failed to get link speed/duplex [ 1127.417357][T24444] bond5: (slave .`): failed to get link speed/duplex [ 1127.465621][T24439] bond10: (slave bridge8): failed to get link speed/duplex [ 1127.507112][T24439] bond13: (slave bridge6): failed to get link speed/duplex [ 1127.528149][T24439] bond15: (slave bridge6): failed to get link speed/duplex [ 1127.537420][T24439] bond16: (slave bridge8): failed to get link speed/duplex [ 1127.548116][T24442] bond5: (slave .`): failed to get link speed/duplex [ 1127.734230][ T2206] netlink: 'syz.0.8679': attribute type 5 has an invalid length. [ 1127.907694][ T2212] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8681'. [ 1127.927780][ T2212] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8681'. [ 1128.426920][ T2231] netlink: 'syz.1.8689': attribute type 13 has an invalid length. [ 1128.535640][ T2233] FAULT_INJECTION: forcing a failure. [ 1128.535640][ T2233] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1128.550717][T17067] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1128.601022][ T2233] CPU: 1 UID: 0 PID: 2233 Comm: syz.3.8690 Not tainted syzkaller #0 PREEMPT(full) [ 1128.601051][ T2233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1128.601062][ T2233] Call Trace: [ 1128.601070][ T2233] [ 1128.601080][ T2233] dump_stack_lvl+0xe8/0x150 [ 1128.601115][ T2233] should_fail_ex+0x412/0x560 [ 1128.601147][ T2233] _copy_from_user+0x2d/0xb0 [ 1128.601176][ T2233] ___sys_sendmsg+0x1c6/0x360 [ 1128.601201][ T2233] ? __pfx____sys_sendmsg+0x10/0x10 [ 1128.601257][ T2233] ? __fget_files+0x2a/0x420 [ 1128.601283][ T2233] ? __fget_files+0x3a0/0x420 [ 1128.601319][ T2233] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1128.601341][ T2233] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1128.601369][ T2233] ? __pfx_ksys_write+0x10/0x10 [ 1128.601402][ T2233] do_syscall_64+0x14d/0xf80 [ 1128.601419][ T2233] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1128.601437][ T2233] ? clear_bhb_loop+0x40/0x90 [ 1128.601460][ T2233] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1128.601478][ T2233] RIP: 0033:0x7f60c8d9c799 [ 1128.601496][ T2233] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1128.601513][ T2233] RSP: 002b:00007f60c9c96028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1128.601533][ T2233] RAX: ffffffffffffffda RBX: 00007f60c9015fa0 RCX: 00007f60c8d9c799 [ 1128.601547][ T2233] RDX: 0000000000000080 RSI: 0000200000000340 RDI: 0000000000000004 [ 1128.601559][ T2233] RBP: 00007f60c9c96090 R08: 0000000000000000 R09: 0000000000000000 [ 1128.601571][ T2233] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1128.601582][ T2233] R13: 00007f60c9016038 R14: 00007f60c9015fa0 R15: 00007ffc1cb71e58 [ 1128.601613][ T2233] [ 1129.607586][T17067] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1129.925371][ T2250] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8695'. [ 1130.896218][ T2294] FAULT_INJECTION: forcing a failure. [ 1130.896218][ T2294] name failslab, interval 1, probability 0, space 0, times 0 [ 1130.947130][ T2294] CPU: 1 UID: 0 PID: 2294 Comm: syz.4.8709 Not tainted syzkaller #0 PREEMPT(full) [ 1130.947162][ T2294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1130.947174][ T2294] Call Trace: [ 1130.947184][ T2294] [ 1130.947193][ T2294] dump_stack_lvl+0xe8/0x150 [ 1130.947231][ T2294] should_fail_ex+0x412/0x560 [ 1130.947271][ T2294] should_failslab+0xa8/0x100 [ 1130.947300][ T2294] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 1130.947326][ T2294] ? __alloc_skb+0x1d0/0x7d0 [ 1130.947353][ T2294] ? __local_bh_enable_ip+0xd0/0x130 [ 1130.947386][ T2294] __alloc_skb+0x1d0/0x7d0 [ 1130.947421][ T2294] _sctp_make_chunk+0x59/0x290 [ 1130.947453][ T2294] sctp_make_init+0x5e3/0xe00 [ 1130.947476][ T2294] ? is_bpf_text_address+0x292/0x2b0 [ 1130.947513][ T2294] ? __pfx_sctp_make_init+0x10/0x10 [ 1130.947553][ T2294] ? stack_trace_save+0xa9/0x100 [ 1130.947575][ T2294] ? __pfx_stack_trace_save+0x10/0x10 [ 1130.947602][ T2294] sctp_sf_do_prm_asoc+0xd2/0x3f0 [ 1130.947639][ T2294] sctp_do_sm+0x238/0x5cf0 [ 1130.947660][ T2294] ? __pfx_sctp_pname+0x10/0x10 [ 1130.947679][ T2294] ? kasan_save_track+0x4f/0x80 [ 1130.947699][ T2294] ? kasan_save_track+0x3e/0x80 [ 1130.947721][ T2294] ? __kmalloc_cache_noprof+0x31c/0x660 [ 1130.947744][ T2294] ? sctp_sendmsg+0x1b3d/0x2c10 [ 1130.947780][ T2294] ? ___sys_sendmsg+0x2a5/0x360 [ 1130.947798][ T2294] ? __sys_sendmmsg+0x27c/0x4e0 [ 1130.947816][ T2294] ? __x64_sys_sendmmsg+0xa0/0xc0 [ 1130.947835][ T2294] ? do_syscall_64+0x14d/0xf80 [ 1130.947854][ T2294] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1130.947883][ T2294] ? __pfx_sctp_do_sm+0x10/0x10 [ 1130.947953][ T2294] ? __sk_mem_raise_allocated+0x290/0x12c0 [ 1130.947976][ T2294] ? __genradix_ptr+0x1e1/0x220 [ 1130.948007][ T2294] sctp_primitive_ASSOCIATE+0x95/0xc0 [ 1130.948043][ T2294] sctp_sendmsg_to_asoc+0x143d/0x1900 [ 1130.948071][ T2294] ? __asan_memcpy+0x40/0x70 [ 1130.948100][ T2294] ? sctp_assoc_add_peer+0xce1/0x13b0 [ 1130.948147][ T2294] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 1130.948177][ T2294] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1130.948215][ T2294] ? __local_bh_enable_ip+0xd0/0x130 [ 1130.948239][ T2294] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1130.948264][ T2294] ? security_sctp_bind_connect+0x7e/0x2c0 [ 1130.948291][ T2294] sctp_sendmsg+0x1b3d/0x2c10 [ 1130.948339][ T2294] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1130.948373][ T2294] ? aa_sk_perm+0x6d5/0x900 [ 1130.948408][ T2294] ? __pfx_aa_sk_perm+0x10/0x10 [ 1130.948437][ T2294] ? sock_rps_record_flow+0x19/0x350 [ 1130.948474][ T2294] ? inet_sendmsg+0x2f4/0x370 [ 1130.948499][ T2294] ____sys_sendmsg+0x80a/0x9f0 [ 1130.948532][ T2294] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1130.948565][ T2294] ? import_iovec+0x73/0xa0 [ 1130.948601][ T2294] ___sys_sendmsg+0x2a5/0x360 [ 1130.948631][ T2294] ? __pfx____sys_sendmsg+0x10/0x10 [ 1130.948658][ T2294] ? kstrtouint+0x6e/0xe0 [ 1130.948716][ T2294] ? __fget_files+0x2a/0x420 [ 1130.948745][ T2294] ? __fget_files+0x3a0/0x420 [ 1130.948797][ T2294] __sys_sendmmsg+0x27c/0x4e0 [ 1130.948826][ T2294] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1130.948844][ T2294] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1130.948898][ T2294] ? ksys_write+0x242/0x270 [ 1130.948924][ T2294] ? __pfx_ksys_write+0x10/0x10 [ 1130.948955][ T2294] __x64_sys_sendmmsg+0xa0/0xc0 [ 1130.948980][ T2294] do_syscall_64+0x14d/0xf80 [ 1130.948998][ T2294] ? trace_irq_disable+0x3b/0x150 [ 1130.949026][ T2294] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1130.949047][ T2294] ? clear_bhb_loop+0x40/0x90 [ 1130.949074][ T2294] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1130.949095][ T2294] RIP: 0033:0x7fd7b279c799 [ 1130.949116][ T2294] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1130.949134][ T2294] RSP: 002b:00007fd7b3688028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1130.949158][ T2294] RAX: ffffffffffffffda RBX: 00007fd7b2a15fa0 RCX: 00007fd7b279c799 [ 1130.949173][ T2294] RDX: 0000000000000001 RSI: 0000200000000500 RDI: 0000000000000003 [ 1130.949186][ T2294] RBP: 00007fd7b3688090 R08: 0000000000000000 R09: 0000000000000000 [ 1130.949199][ T2294] R10: 0000000004000840 R11: 0000000000000246 R12: 0000000000000002 [ 1130.949213][ T2294] R13: 00007fd7b2a16038 R14: 00007fd7b2a15fa0 R15: 00007fffb27fa9a8 [ 1130.949250][ T2294] [ 1132.333254][ T2331] ip6t_srh: unknown srh invflags 4000 [ 1132.417146][T24452] net_ratelimit: 136 callbacks suppressed [ 1132.417169][T24452] bond16: (slave bridge8): failed to get link speed/duplex [ 1132.468328][T24452] bond15: (slave bridge6): failed to get link speed/duplex [ 1132.489755][T24452] bond13: (slave bridge6): failed to get link speed/duplex [ 1132.537453][T24454] bond18: (slave ip6gretap1): failed to get link speed/duplex [ 1132.569297][T24439] bond16: (slave bridge8): failed to get link speed/duplex [ 1132.636728][T24439] bond10: (slave bridge8): failed to get link speed/duplex [ 1132.656672][T24439] bond13: (slave bridge6): failed to get link speed/duplex [ 1132.691685][ T2335] lo speed is unknown, defaulting to 1000 [ 1132.707272][T24451] bond15: (slave bridge6): failed to get link speed/duplex [ 1132.731265][T24451] bond5: (slave .`): failed to get link speed/duplex [ 1132.759149][T24451] bond16: (slave bridge8): failed to get link speed/duplex [ 1133.350286][ T2363] x_tables: unsorted entry at hook 2 [ 1133.844363][ T2367] lo speed is unknown, defaulting to 1000 [ 1133.871348][ T2335] lo speed is unknown, defaulting to 1000 [ 1133.884560][ T2335] lo speed is unknown, defaulting to 1000 [ 1134.148053][ T2369] netlink: 5 bytes leftover after parsing attributes in process `syz.3.8731'. [ 1134.454963][ T2367] lo speed is unknown, defaulting to 1000 [ 1134.597103][ T2367] lo speed is unknown, defaulting to 1000 [ 1134.682351][ T2388] netlink: 72 bytes leftover after parsing attributes in process `syz.3.8739'. [ 1134.740237][ T2390] lo: Caught tx_queue_len zero misconfig [ 1134.756209][ T2390] sch_fq: defrate 0 ignored. [ 1134.769840][ T2388] x_tables: unsorted entry at hook 2 [ 1135.189446][ T2400] lo speed is unknown, defaulting to 1000 [ 1135.325627][ T2404] x_tables: unsorted entry at hook 2 [ 1135.709613][ T2416] FAULT_INJECTION: forcing a failure. [ 1135.709613][ T2416] name failslab, interval 1, probability 0, space 0, times 0 [ 1135.753691][ T2416] CPU: 1 UID: 0 PID: 2416 Comm: syz.0.8745 Not tainted syzkaller #0 PREEMPT(full) [ 1135.753721][ T2416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1135.753735][ T2416] Call Trace: [ 1135.753744][ T2416] [ 1135.753753][ T2416] dump_stack_lvl+0xe8/0x150 [ 1135.753788][ T2416] should_fail_ex+0x412/0x560 [ 1135.753820][ T2416] should_failslab+0xa8/0x100 [ 1135.753849][ T2416] __kmalloc_cache_noprof+0x88/0x660 [ 1135.753871][ T2416] ? __sctp_v6_cmp_addr+0x3d4/0x510 [ 1135.753896][ T2416] ? sctp_add_bind_addr+0x8c/0x370 [ 1135.753927][ T2416] sctp_add_bind_addr+0x8c/0x370 [ 1135.753956][ T2416] sctp_copy_local_addr_list+0x314/0x4f0 [ 1135.753986][ T2416] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 1135.754009][ T2416] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1135.754036][ T2416] ? sctp_v6_is_any+0x64/0x80 [ 1135.754062][ T2416] ? sctp_copy_one_addr+0x93/0x360 [ 1135.754090][ T2416] sctp_bind_addr_copy+0xb3/0x3c0 [ 1135.754115][ T2416] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1135.754143][ T2416] sctp_connect_new_asoc+0x2ff/0x6b0 [ 1135.754177][ T2416] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1135.754220][ T2416] ? __local_bh_enable_ip+0xd0/0x130 [ 1135.754245][ T2416] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1135.754269][ T2416] ? security_sctp_bind_connect+0x7e/0x2c0 [ 1135.754296][ T2416] sctp_sendmsg+0x1528/0x2c10 [ 1135.754343][ T2416] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1135.754376][ T2416] ? aa_sk_perm+0x6d5/0x900 [ 1135.754411][ T2416] ? __pfx_aa_sk_perm+0x10/0x10 [ 1135.754440][ T2416] ? sock_rps_record_flow+0x19/0x350 [ 1135.754469][ T2416] ? __pfx_inet_sendmsg+0x10/0x10 [ 1135.754491][ T2416] ? inet_sendmsg+0x2f4/0x370 [ 1135.754509][ T2416] ? __pfx_inet_sendmsg+0x10/0x10 [ 1135.754529][ T2416] __sys_sendto+0x5de/0x710 [ 1135.754563][ T2416] ? __pfx___sys_sendto+0x10/0x10 [ 1135.754589][ T2416] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1135.754627][ T2416] ? __fget_files+0x3a0/0x420 [ 1135.754671][ T2416] ? ksys_write+0x242/0x270 [ 1135.754706][ T2416] ? __pfx_ksys_write+0x10/0x10 [ 1135.754736][ T2416] __x64_sys_sendto+0xde/0x100 [ 1135.754771][ T2416] do_syscall_64+0x14d/0xf80 [ 1135.754791][ T2416] ? trace_irq_disable+0x3b/0x150 [ 1135.754819][ T2416] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1135.754840][ T2416] ? clear_bhb_loop+0x40/0x90 [ 1135.754867][ T2416] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1135.754886][ T2416] RIP: 0033:0x7f171459c799 [ 1135.754907][ T2416] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1135.754925][ T2416] RSP: 002b:00007f171553a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1135.754948][ T2416] RAX: ffffffffffffffda RBX: 00007f1714815fa0 RCX: 00007f171459c799 [ 1135.754963][ T2416] RDX: 0000000000000001 RSI: 0000200000000840 RDI: 0000000000000003 [ 1135.754977][ T2416] RBP: 00007f171553a090 R08: 0000200000000340 R09: 000000000000001c [ 1135.754989][ T2416] R10: 0000000000065055 R11: 0000000000000246 R12: 0000000000000002 [ 1135.755002][ T2416] R13: 00007f1714816038 R14: 00007f1714815fa0 R15: 00007ffd991454d8 [ 1135.755040][ T2416] [ 1136.516198][ T2400] lo speed is unknown, defaulting to 1000 [ 1136.567420][ T2400] lo speed is unknown, defaulting to 1000 [ 1136.905401][ T2450] netlink: 'syz.1.8751': attribute type 10 has an invalid length. [ 1136.937427][ T2450] netlink: 228 bytes leftover after parsing attributes in process `syz.1.8751'. [ 1137.170357][ T2460] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8755'. [ 1137.202556][ T2460] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8755'. [ 1137.467059][T24439] net_ratelimit: 163 callbacks suppressed [ 1137.467085][T24439] bond18: (slave ip6gretap1): failed to get link speed/duplex [ 1137.757428][T24442] bond5: (slave .`): failed to get link speed/duplex [ 1137.797667][T24442] bond15: (slave bridge6): failed to get link speed/duplex [ 1138.206945][T24442] bond5: (slave .`): failed to get link speed/duplex [ 1138.243561][ T2496] IPVS: set_ctl: invalid protocol: 2 224.0.0.1:20003 [ 1138.254926][T24442] bond13: (slave bridge6): failed to get link speed/duplex [ 1138.298897][T24442] bond18: (slave ip6gretap1): failed to get link speed/duplex [ 1138.347013][T24442] bond15: (slave bridge6): failed to get link speed/duplex [ 1138.364390][T24444] bond10: (slave bridge8): failed to get link speed/duplex [ 1138.382996][T24444] bond5: (slave .`): failed to get link speed/duplex [ 1138.439573][T24444] bond13: (slave bridge6): failed to get link speed/duplex [ 1138.550975][ T2513] netlink: 'syz.3.8767': attribute type 10 has an invalid length. [ 1138.568247][ T2513] netlink: 228 bytes leftover after parsing attributes in process `syz.3.8767'. [ 1139.289698][ T2545] netlink: 72 bytes leftover after parsing attributes in process `syz.3.8773'. [ 1139.313250][ T2545] netlink: 72 bytes leftover after parsing attributes in process `syz.3.8773'. [ 1139.456710][ T2537] lo speed is unknown, defaulting to 1000 [ 1139.744226][ T2556] tipc: Enabled bearer , priority 0 [ 1139.948723][ T2556] syzkaller0: entered promiscuous mode [ 1139.954506][ T2556] syzkaller0: entered allmulticast mode [ 1139.961649][ T2556] tipc: Resetting bearer [ 1140.056022][ T2554] tipc: Resetting bearer [ 1142.602352][ T2554] tipc: Disabling bearer [ 1142.620492][T24446] net_ratelimit: 33 callbacks suppressed [ 1142.620512][T24446] bond10: (slave bridge8): failed to get link speed/duplex [ 1142.654337][ T2537] lo speed is unknown, defaulting to 1000 [ 1142.667523][T24442] bond15: (slave bridge6): failed to get link speed/duplex [ 1142.756864][ T2537] lo speed is unknown, defaulting to 1000 [ 1142.786084][T24446] bond18: (slave ip6gretap1): failed to get link speed/duplex [ 1142.866911][T24439] bond10: (slave bridge8): failed to get link speed/duplex [ 1142.886135][T24439] bond16: (slave bridge8): failed to get link speed/duplex [ 1142.906865][T24454] bond5: (slave .`): failed to get link speed/duplex [ 1142.913637][T24454] bond15: (slave bridge6): failed to get link speed/duplex [ 1142.946892][T24439] bond18: (slave ip6gretap1): failed to get link speed/duplex [ 1142.977121][T24439] bond10: (slave bridge8): failed to get link speed/duplex [ 1142.997639][T24454] bond16: (slave bridge8): failed to get link speed/duplex [ 1143.039521][ T2587] netlink: 'syz.2.8787': attribute type 1 has an invalid length. [ 1143.151128][ T2597] FAULT_INJECTION: forcing a failure. [ 1143.151128][ T2597] name failslab, interval 1, probability 0, space 0, times 0 [ 1143.199659][ T2597] CPU: 1 UID: 0 PID: 2597 Comm: syz.2.8790 Not tainted syzkaller #0 PREEMPT(full) [ 1143.199696][ T2597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1143.199709][ T2597] Call Trace: [ 1143.199719][ T2597] [ 1143.199728][ T2597] dump_stack_lvl+0xe8/0x150 [ 1143.199763][ T2597] should_fail_ex+0x412/0x560 [ 1143.199796][ T2597] should_failslab+0xa8/0x100 [ 1143.199823][ T2597] __kmalloc_cache_noprof+0x88/0x660 [ 1143.199843][ T2597] ? __sctp_v6_cmp_addr+0x1e6/0x510 [ 1143.199868][ T2597] ? sctp_add_bind_addr+0x8c/0x370 [ 1143.199898][ T2597] sctp_add_bind_addr+0x8c/0x370 [ 1143.200057][ T2597] sctp_copy_local_addr_list+0x314/0x4f0 [ 1143.200100][ T2597] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 1143.200123][ T2597] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1143.200149][ T2597] ? sctp_v6_is_any+0x64/0x80 [ 1143.200175][ T2597] ? sctp_copy_one_addr+0x93/0x360 [ 1143.200202][ T2597] sctp_bind_addr_copy+0xb3/0x3c0 [ 1143.200228][ T2597] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1143.200255][ T2597] sctp_connect_new_asoc+0x2ff/0x6b0 [ 1143.200288][ T2597] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1143.200322][ T2597] ? __local_bh_enable_ip+0xd0/0x130 [ 1143.200345][ T2597] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1143.200367][ T2597] ? security_sctp_bind_connect+0x7e/0x2c0 [ 1143.200392][ T2597] sctp_sendmsg+0x1528/0x2c10 [ 1143.200435][ T2597] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1143.200465][ T2597] ? aa_sk_perm+0x6d5/0x900 [ 1143.200497][ T2597] ? __pfx_aa_sk_perm+0x10/0x10 [ 1143.200524][ T2597] ? sock_rps_record_flow+0x19/0x350 [ 1143.200558][ T2597] ? inet_sendmsg+0x2f4/0x370 [ 1143.200580][ T2597] ____sys_sendmsg+0x80a/0x9f0 [ 1143.200610][ T2597] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1143.200638][ T2597] ? import_iovec+0x73/0xa0 [ 1143.200670][ T2597] ___sys_sendmsg+0x2a5/0x360 [ 1143.200695][ T2597] ? __pfx____sys_sendmsg+0x10/0x10 [ 1143.200721][ T2597] ? kstrtouint+0x6e/0xe0 [ 1143.200779][ T2597] ? __fget_files+0x2a/0x420 [ 1143.200807][ T2597] ? __fget_files+0x3a0/0x420 [ 1143.200850][ T2597] __sys_sendmmsg+0x27c/0x4e0 [ 1143.200879][ T2597] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1143.200897][ T2597] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1143.200950][ T2597] ? ksys_write+0x242/0x270 [ 1143.200988][ T2597] ? __pfx_ksys_write+0x10/0x10 [ 1143.201018][ T2597] __x64_sys_sendmmsg+0xa0/0xc0 [ 1143.201040][ T2597] do_syscall_64+0x14d/0xf80 [ 1143.201058][ T2597] ? trace_irq_disable+0x3b/0x150 [ 1143.201087][ T2597] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1143.201109][ T2597] ? clear_bhb_loop+0x40/0x90 [ 1143.201135][ T2597] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1143.201156][ T2597] RIP: 0033:0x7f3ebab9c799 [ 1143.201179][ T2597] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1143.201197][ T2597] RSP: 002b:00007f3ebb994028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1143.201220][ T2597] RAX: ffffffffffffffda RBX: 00007f3ebae15fa0 RCX: 00007f3ebab9c799 [ 1143.201236][ T2597] RDX: 0000000000000001 RSI: 0000200000000500 RDI: 0000000000000003 [ 1143.201249][ T2597] RBP: 00007f3ebb994090 R08: 0000000000000000 R09: 0000000000000000 [ 1143.201262][ T2597] R10: 0000000004000840 R11: 0000000000000246 R12: 0000000000000002 [ 1143.201275][ T2597] R13: 00007f3ebae16038 R14: 00007f3ebae15fa0 R15: 00007ffd276c1e98 [ 1143.201312][ T2597] [ 1143.635416][ T2600] netlink: 52 bytes leftover after parsing attributes in process `syz.0.8794'. [ 1143.666976][ T2600] netlink: 44 bytes leftover after parsing attributes in process `syz.0.8794'. [ 1143.756932][ T2610] netlink: 452 bytes leftover after parsing attributes in process `syz.4.8795'. [ 1143.851244][ T2614] FAULT_INJECTION: forcing a failure. [ 1143.851244][ T2614] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1143.900839][ T2614] CPU: 0 UID: 0 PID: 2614 Comm: syz.3.8796 Not tainted syzkaller #0 PREEMPT(full) [ 1143.900876][ T2614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1143.900889][ T2614] Call Trace: [ 1143.900899][ T2614] [ 1143.900908][ T2614] dump_stack_lvl+0xe8/0x150 [ 1143.900943][ T2614] should_fail_ex+0x412/0x560 [ 1143.900984][ T2614] _copy_from_iter+0x1d3/0x1670 [ 1143.901018][ T2614] ? rcu_is_watching+0x15/0xb0 [ 1143.901054][ T2614] ? __pfx__copy_from_iter+0x10/0x10 [ 1143.901092][ T2614] ? netlink_sendmsg+0x650/0xb40 [ 1143.901119][ T2614] ? skb_put+0x11b/0x210 [ 1143.901155][ T2614] netlink_sendmsg+0x6c0/0xb40 [ 1143.901194][ T2614] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1143.901226][ T2614] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1143.901255][ T2614] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1143.901283][ T2614] ____sys_sendmsg+0x972/0x9f0 [ 1143.901316][ T2614] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1143.901347][ T2614] ? import_iovec+0x73/0xa0 [ 1143.901382][ T2614] ___sys_sendmsg+0x2a5/0x360 [ 1143.901411][ T2614] ? __pfx____sys_sendmsg+0x10/0x10 [ 1143.901474][ T2614] ? __fget_files+0x2a/0x420 [ 1143.901504][ T2614] ? __fget_files+0x3a0/0x420 [ 1143.901545][ T2614] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1143.901570][ T2614] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1143.901603][ T2614] ? __pfx_ksys_write+0x10/0x10 [ 1143.901640][ T2614] do_syscall_64+0x14d/0xf80 [ 1143.901661][ T2614] ? trace_irq_disable+0x3b/0x150 [ 1143.901690][ T2614] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1143.901712][ T2614] ? clear_bhb_loop+0x40/0x90 [ 1143.901737][ T2614] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1143.901759][ T2614] RIP: 0033:0x7f60c8d9c799 [ 1143.901779][ T2614] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1143.901798][ T2614] RSP: 002b:00007f60c9c96028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1143.901822][ T2614] RAX: ffffffffffffffda RBX: 00007f60c9015fa0 RCX: 00007f60c8d9c799 [ 1143.901837][ T2614] RDX: 0000000000000080 RSI: 0000200000000340 RDI: 0000000000000004 [ 1143.901850][ T2614] RBP: 00007f60c9c96090 R08: 0000000000000000 R09: 0000000000000000 [ 1143.901863][ T2614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1143.901876][ T2614] R13: 00007f60c9016038 R14: 00007f60c9015fa0 R15: 00007ffc1cb71e58 [ 1143.901912][ T2614] [ 1145.147825][ T2659] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8811'. [ 1145.514960][ T2664] lo speed is unknown, defaulting to 1000 [ 1145.812853][ T2664] lo speed is unknown, defaulting to 1000 [ 1145.821301][ T2664] lo speed is unknown, defaulting to 1000 [ 1146.446703][ T2698] ip6tnl0: Caught tx_queue_len zero misconfig [ 1147.092118][T12299] lec:lec_start_xmit: lec0:No lecd attached [ 1147.612538][ T2736] veth7: entered promiscuous mode [ 1147.617716][ T2736] veth9: entered promiscuous mode [ 1147.622862][ T2736] veth13: entered promiscuous mode [ 1147.660666][ T2736] team0: Device macsec0 is already an upper device of the team interface [ 1147.680041][ T2736] veth7: left promiscuous mode [ 1147.684909][ T2736] veth9: left promiscuous mode [ 1147.689818][ T2736] veth13: left promiscuous mode [ 1147.807233][T24446] net_ratelimit: 140 callbacks suppressed [ 1147.807256][T24446] bond16: (slave bridge8): failed to get link speed/duplex [ 1147.837324][T24454] bond18: (slave ip6gretap1): failed to get link speed/duplex [ 1147.865292][T24454] bond10: (slave bridge8): failed to get link speed/duplex [ 1147.943597][T24454] bond15: (slave bridge6): failed to get link speed/duplex [ 1147.978362][T24454] bond18: (slave ip6gretap1): failed to get link speed/duplex [ 1148.008573][T24454] bond16: (slave bridge8): failed to get link speed/duplex [ 1148.015879][T24454] bond5: (slave .`): failed to get link speed/duplex [ 1148.047128][T24454] bond10: (slave bridge8): failed to get link speed/duplex [ 1148.077625][T24454] bond15: (slave bridge6): failed to get link speed/duplex [ 1148.098294][T24454] bond18: (slave ip6gretap1): failed to get link speed/duplex [ 1148.303179][ T2769] netlink: 'syz.3.8832': attribute type 1 has an invalid length. [ 1148.517843][ T2769] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8832'. [ 1148.543435][ T2769] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1148.570066][ T2769] sctp: [Deprecated]: syz.3.8832 (pid 2769) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1148.570066][ T2769] Use struct sctp_sack_info instead [ 1149.138304][ T2801] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.8838'. [ 1150.206753][ T29] audit: type=1800 audit(1772854126.873:20): pid=2821 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.8840" name="memory.events" dev="tmpfs" ino=9246 res=0 errno=0 [ 1150.719907][ T2854] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8850'. [ 1150.739394][ T2857] netlink: 'syz.1.8848': attribute type 1 has an invalid length. [ 1150.747998][ T2854] netlink: 'syz.0.8850': attribute type 7 has an invalid length. [ 1150.757280][ T2857] netlink: 96 bytes leftover after parsing attributes in process `syz.1.8848'. [ 1150.766026][ T2854] netlink: 'syz.0.8850': attribute type 8 has an invalid length. [ 1150.788681][ T2857] netlink: 658 bytes leftover after parsing attributes in process `syz.1.8848'. [ 1150.796851][ T2854] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8850'. [ 1150.821634][ T2857] netlink: 1 bytes leftover after parsing attributes in process `syz.1.8848'. [ 1151.042053][ T2866] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8852'. [ 1151.109631][ T2868] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1151.135238][ T2874] netlink: 76 bytes leftover after parsing attributes in process `syz.0.8852'. [ 1151.165544][ T2874] netlink: 'syz.0.8852': attribute type 2 has an invalid length. [ 1151.180515][ T2868] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1151.240479][ T2879] netlink: 'syz.0.8852': attribute type 2 has an invalid length. [ 1151.258906][ T2874] !9: entered promiscuous mode [ 1151.276969][ T2879] !9: left promiscuous mode [ 1151.296099][ T2877] FAULT_INJECTION: forcing a failure. [ 1151.296099][ T2877] name failslab, interval 1, probability 0, space 0, times 0 [ 1151.322674][ T2877] CPU: 1 UID: 0 PID: 2877 Comm: syz.4.8854 Not tainted syzkaller #0 PREEMPT(full) [ 1151.322701][ T2877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1151.322714][ T2877] Call Trace: [ 1151.322722][ T2877] [ 1151.322731][ T2877] dump_stack_lvl+0xe8/0x150 [ 1151.322765][ T2877] should_fail_ex+0x412/0x560 [ 1151.322797][ T2877] should_failslab+0xa8/0x100 [ 1151.322825][ T2877] __kmalloc_node_track_caller_noprof+0xeb/0x7b0 [ 1151.322847][ T2877] ? __kasan_kmalloc+0x93/0xb0 [ 1151.322869][ T2877] ? __request_module+0x2ec/0x660 [ 1151.322895][ T2877] ? __kmalloc_cache_noprof+0x31c/0x660 [ 1151.322920][ T2877] kstrdup+0x42/0x100 [ 1151.322948][ T2877] __request_module+0x2ec/0x660 [ 1151.322981][ T2877] ? __pfx___request_module+0x10/0x10 [ 1151.323023][ T2877] ? apparmor_capable+0x126/0x170 [ 1151.323061][ T2877] ? capable+0x88/0xe0 [ 1151.323086][ T2877] ? dev_load+0x21/0x1f0 [ 1151.323117][ T2877] devinet_ioctl+0x138/0x1b30 [ 1151.323158][ T2877] ? __pfx_devinet_ioctl+0x10/0x10 [ 1151.323190][ T2877] ? get_user_ifreq+0x12b/0x180 [ 1151.323215][ T2877] inet_ioctl+0x391/0x560 [ 1151.323237][ T2877] ? __pfx_inet_ioctl+0x10/0x10 [ 1151.323282][ T2877] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1151.323313][ T2877] sock_do_ioctl+0x101/0x320 [ 1151.323339][ T2877] ? __pfx_sock_do_ioctl+0x10/0x10 [ 1151.323359][ T2877] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1151.323395][ T2877] sock_ioctl+0x5c6/0x7f0 [ 1151.323418][ T2877] ? __pfx_sock_ioctl+0x10/0x10 [ 1151.323439][ T2877] ? __fget_files+0x2a/0x420 [ 1151.323463][ T2877] ? __fget_files+0x3a0/0x420 [ 1151.323487][ T2877] ? __fget_files+0x2a/0x420 [ 1151.323515][ T2877] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1151.323538][ T2877] ? __pfx_sock_ioctl+0x10/0x10 [ 1151.323557][ T2877] __se_sys_ioctl+0xfc/0x170 [ 1151.323580][ T2877] do_syscall_64+0x14d/0xf80 [ 1151.323597][ T2877] ? trace_irq_disable+0x3b/0x150 [ 1151.323621][ T2877] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1151.323639][ T2877] ? clear_bhb_loop+0x40/0x90 [ 1151.323661][ T2877] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1151.323685][ T2877] RIP: 0033:0x7fd7b279c799 [ 1151.323706][ T2877] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1151.323722][ T2877] RSP: 002b:00007fd7b3688028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1151.323745][ T2877] RAX: ffffffffffffffda RBX: 00007fd7b2a15fa0 RCX: 00007fd7b279c799 [ 1151.323759][ T2877] RDX: 0000200000000d80 RSI: 000000000000891b RDI: 0000000000000003 [ 1151.323772][ T2877] RBP: 00007fd7b3688090 R08: 0000000000000000 R09: 0000000000000000 [ 1151.323784][ T2877] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1151.323795][ T2877] R13: 00007fd7b2a16038 R14: 00007fd7b2a15fa0 R15: 00007fffb27fa9a8 [ 1151.323826][ T2877] [ 1151.813340][ T2882] netlink: 'syz.4.8855': attribute type 10 has an invalid length. [ 1151.838641][ T2882] netlink: 228 bytes leftover after parsing attributes in process `syz.4.8855'. [ 1152.106976][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1152.115056][ C1] lec:lec_tx_timeout: lec0 [ 1152.612404][ T2906] netlink: 'syz.0.8863': attribute type 1 has an invalid length. [ 1152.632139][ T2906] netlink: 228 bytes leftover after parsing attributes in process `syz.0.8863'. [ 1152.675823][ T2906] netlink: 6 bytes leftover after parsing attributes in process `syz.0.8863'. [ 1152.846796][T24451] net_ratelimit: 175 callbacks suppressed [ 1152.846823][T24451] bond10: (slave bridge8): failed to get link speed/duplex [ 1152.876993][T24451] bond5: (slave .`): failed to get link speed/duplex [ 1152.918103][T24452] bond18: (slave ip6gretap1): failed to get link speed/duplex [ 1152.938803][T24452] bond16: (slave bridge8): failed to get link speed/duplex [ 1152.958081][T24452] bond15: (slave bridge6): failed to get link speed/duplex [ 1152.966642][T24452] bond10: (slave bridge8): failed to get link speed/duplex [ 1153.006582][T24452] bond5: (slave .`): failed to get link speed/duplex [ 1153.026585][T24452] bond18: (slave ip6gretap1): failed to get link speed/duplex [ 1153.057767][T24451] bond16: (slave bridge8): failed to get link speed/duplex [ 1153.079704][ T2915] siw: device registration error -23 [ 1153.086920][ T2915] bond10: left promiscuous mode [ 1153.106340][ T2915] gtp1: left promiscuous mode [ 1153.128165][ T2915] bond12: left promiscuous mode [ 1153.146881][ T2915] bond13: left promiscuous mode [ 1153.163598][ T2915] bridge6: left promiscuous mode [ 1153.196989][T24451] bond10: (slave bridge8): failed to get link speed/duplex [ 1153.298630][ T2921] netlink: 'syz.2.8869': attribute type 10 has an invalid length. [ 1154.068291][ T2958] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 1154.459768][ T2972] netlink: 'syz.1.8886': attribute type 10 has an invalid length. [ 1154.768854][ T2986] netlink: 'syz.2.8891': attribute type 9 has an invalid length. [ 1155.036207][ T2999] netlink: 'syz.0.8897': attribute type 3 has an invalid length. [ 1155.248966][ T3009] lo speed is unknown, defaulting to 1000 [ 1155.566817][ T3026] netlink: 'syz.3.8902': attribute type 10 has an invalid length. [ 1155.887159][ T3009] lo speed is unknown, defaulting to 1000 [ 1155.895102][ T3009] lo speed is unknown, defaulting to 1000 [ 1156.017494][ T3036] __nla_validate_parse: 14 callbacks suppressed [ 1156.017515][ T3036] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8905'. [ 1156.218718][ T3047] netlink: 44 bytes leftover after parsing attributes in process `syz.0.8907'. [ 1156.625142][ T3059] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1156.956328][ T3072] xt_hashlimit: max too large, truncated to 1048576 [ 1157.282769][ T3064] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8914'. [ 1157.389167][ T3083] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8919'. [ 1157.595028][ T3089] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8921'. [ 1157.961670][T24439] net_ratelimit: 159 callbacks suppressed [ 1157.961695][T24439] bond10: (slave bridge8): failed to get link speed/duplex [ 1158.029011][T24439] bond16: (slave bridge8): failed to get link speed/duplex [ 1158.076011][T24439] bond15: (slave bridge6): failed to get link speed/duplex [ 1158.084455][T24439] bond18: (slave ip6gretap1): failed to get link speed/duplex [ 1158.169600][T24439] bond16: (slave bridge8): failed to get link speed/duplex [ 1158.197059][T24439] bond5: (slave .`): failed to get link speed/duplex [ 1158.226617][T24439] bond15: (slave bridge6): failed to get link speed/duplex [ 1158.255388][ T3099] lo speed is unknown, defaulting to 1000 [ 1158.267155][T24452] bond10: (slave bridge8): failed to get link speed/duplex [ 1158.308421][T24452] bond18: (slave ip6gretap1): failed to get link speed/duplex [ 1158.347209][T24452] bond5: (slave .`): failed to get link speed/duplex [ 1158.502644][ T3099] lo speed is unknown, defaulting to 1000 [ 1158.510724][ T3099] lo speed is unknown, defaulting to 1000 [ 1159.177533][ T3134] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8931'. [ 1159.201799][ T3133] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8936'. [ 1159.320618][ T3140] netlink: 332 bytes leftover after parsing attributes in process `syz.0.8938'. [ 1159.330968][ T3140] netlink: 'syz.0.8938': attribute type 9 has an invalid length. [ 1159.339661][ T3140] netlink: 108 bytes leftover after parsing attributes in process `syz.0.8938'. [ 1159.351938][ T3140] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8938'. [ 1159.438790][ T3136] netlink: 'syz.3.8937': attribute type 10 has an invalid length. [ 1159.690964][ T3146] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not filter [ 1160.482613][ T3171] ip6_vti0: Caught tx_queue_len zero misconfig [ 1160.919764][ T3201] ip6t_srh: unknown srh invflags 4000 [ 1161.193833][ T3214] ip6tnl3: entered promiscuous mode [ 1161.213152][ T3214] ip6tnl3: entered allmulticast mode [ 1161.229295][ T3217] __nla_validate_parse: 3 callbacks suppressed [ 1161.229318][ T3217] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8957'. [ 1161.258496][ T3209] lo speed is unknown, defaulting to 1000 [ 1161.603615][ T3209] lo speed is unknown, defaulting to 1000 [ 1161.620184][ T3209] lo speed is unknown, defaulting to 1000 [ 1162.354539][ T3242] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8967'. [ 1162.447767][ T3244] veth23: entered promiscuous mode [ 1162.457459][ T3244] veth23: entered allmulticast mode [ 1162.464215][ T3244] team0: Port device veth23 added [ 1162.899458][ T3248] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8969'. [ 1163.017077][T24451] net_ratelimit: 154 callbacks suppressed [ 1163.017099][T24451] bond16: (slave bridge8): failed to get link speed/duplex [ 1163.037230][T24451] bond5: (slave .`): failed to get link speed/duplex [ 1163.056970][T24446] bond18: (slave ip6gretap1): failed to get link speed/duplex [ 1163.088978][T24452] bond15: (slave bridge6): failed to get link speed/duplex [ 1163.124506][T24452] bond10: (slave bridge8): failed to get link speed/duplex [ 1163.150325][T24452] bond5: (slave .`): failed to get link speed/duplex [ 1163.177082][T24452] bond16: (slave bridge8): failed to get link speed/duplex [ 1163.217422][T24451] bond18: (slave ip6gretap1): failed to get link speed/duplex [ 1163.267571][T24452] bond10: (slave bridge8): failed to get link speed/duplex [ 1163.292558][T24452] bond15: (slave bridge6): failed to get link speed/duplex [ 1163.559901][ T3281] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8979'. [ 1163.692618][ T3285] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8981'. [ 1163.836381][ T3292] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8983'. [ 1163.873875][ T3292] bridge0: entered promiscuous mode [ 1163.880017][ T3292] macsec0: entered promiscuous mode [ 1163.888778][ T3292] bridge0: port 1(macsec0) entered blocking state [ 1163.895483][ T3292] bridge0: port 1(macsec0) entered disabled state [ 1163.905946][ T3292] macsec0: entered allmulticast mode [ 1163.911945][ T3292] bridge0: entered allmulticast mode [ 1163.929131][ T3292] macsec0: left allmulticast mode [ 1163.934543][ T3292] bridge0: left allmulticast mode [ 1163.949192][ T3292] bridge0: left promiscuous mode [ 1164.329883][ T3312] netlink: 'syz.1.8991': attribute type 10 has an invalid length. [ 1164.346528][ T3312] netlink: 228 bytes leftover after parsing attributes in process `syz.1.8991'. [ 1164.622525][ T3332] sctp: [Deprecated]: syz.1.8999 (pid 3332) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1164.622525][ T3332] Use struct sctp_sack_info instead [ 1164.655563][ T3332] sctp: [Deprecated]: syz.1.8999 (pid 3332) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1164.655563][ T3332] Use struct sctp_sack_info instead [ 1165.038034][ T3345] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9001'. [ 1165.087282][ T3348] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1165.109895][ T3348] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1165.332485][ T3356] bond5: left promiscuous mode [ 1165.338563][ T3356] geneve2: left promiscuous mode [ 1165.345173][ T3356] veth9: left promiscuous mode [ 1165.357689][ T3356] bond6: left promiscuous mode [ 1165.367819][ T3356] bond10: left promiscuous mode [ 1165.375416][ T3356] bond11: left promiscuous mode [ 1165.382759][ T3356] geneve4: left promiscuous mode [ 1165.393523][ T3356] team0: left promiscuous mode [ 1165.399121][ T3356] veth23: left promiscuous mode [ 1165.598583][ T3366] netlink: 36 bytes leftover after parsing attributes in process `syz.3.9011'. [ 1165.810801][ T3375] netlink: 52 bytes leftover after parsing attributes in process `syz.1.9014'. [ 1165.828670][ T3376] netlink: 'syz.2.9012': attribute type 5 has an invalid length. [ 1166.351103][ T3402] netlink: 'syz.4.9020': attribute type 1 has an invalid length. [ 1166.384347][ T3404] x_tables: duplicate underflow at hook 2 [ 1166.492707][ T3402] bond14: entered promiscuous mode [ 1166.507402][ T3410] IPv6: Can't replace route, no match found [ 1166.523588][ T3410] IPv6: Can't replace route, no match found [ 1166.534474][ T3402] 8021q: adding VLAN 0 to HW filter on device bond14 [ 1166.579424][ T3410] 8021q: adding VLAN 0 to HW filter on device bond14 [ 1166.587816][ T3410] bond14: (slave wireguard0): The slave device specified does not support setting the MAC address [ 1166.608438][ T3410] bond14: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 1166.641715][ T3410] bond14: (slave wireguard0): making interface the new active one [ 1166.658192][ T3410] wireguard0: entered promiscuous mode [ 1166.676299][ T3410] bond14: (slave wireguard0): Enslaving as an active interface with an up link [ 1166.720574][ T3406] bond14: (slave wireguard1): The slave device specified does not support setting the MAC address [ 1166.744410][ T3418] __nla_validate_parse: 1 callbacks suppressed [ 1166.744433][ T3418] netlink: 36 bytes leftover after parsing attributes in process `syz.0.9023'. [ 1166.783904][ T3406] bond14: (slave wireguard1): Enslaving as a backup interface with an up link [ 1166.905562][ T3425] netlink: 36 bytes leftover after parsing attributes in process `syz.3.9024'. [ 1167.023092][ T3432] veth0_to_bridge: entered promiscuous mode [ 1167.045834][ T3432] veth0_to_bridge: left promiscuous mode [ 1167.055284][ T3428] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9026'. [ 1167.062992][ T3433] netlink: 452 bytes leftover after parsing attributes in process `syz.0.9028'. [ 1167.109293][ T3428] tipc: Enabled bearer , priority 0 [ 1167.140422][ T3428] syzkaller0: entered promiscuous mode [ 1167.145950][ T3428] syzkaller0: entered allmulticast mode [ 1167.185619][ T3427] tipc: Resetting bearer [ 1167.266352][ T3427] tipc: Disabling bearer [ 1167.467791][ T3450] lo speed is unknown, defaulting to 1000 [ 1167.616189][ T3454] netlink: 36 bytes leftover after parsing attributes in process `syz.2.9033'. [ 1167.726206][ T3461] netlink: 'syz.1.9035': attribute type 5 has an invalid length. [ 1167.839421][ T3464] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1167.882019][ T3464] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1167.885227][ T5826] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1167.903840][ T5826] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1167.913017][ T5826] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1167.923403][ T5826] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1167.937570][ T5826] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1167.974514][ T3464] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1168.000279][ T5841] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1168.008499][ T5841] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1168.015917][ T5841] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1168.024867][ T5841] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1168.035659][ T5841] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1168.088959][T24452] net_ratelimit: 164 callbacks suppressed [ 1168.088982][T24452] bond18: (slave ip6gretap1): failed to get link speed/duplex [ 1168.143856][ T3464] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1168.180156][ T3464] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1168.210055][ T3464] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1168.357821][T24454] bond5: (slave .`): failed to get link speed/duplex [ 1168.364939][ T3450] lo speed is unknown, defaulting to 1000 [ 1168.380546][ T3464] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1168.400058][ T3464] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1168.439763][ T3482] openvswitch: netlink: Tunnel attr 6 has unexpected len 1 expected 0 [ 1168.449517][ T3464] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1168.493449][ T3450] lo speed is unknown, defaulting to 1000 [ 1168.496124][T24454] bond5: (slave .`): failed to get link speed/duplex [ 1168.526994][T24454] bond10: (slave bridge8): failed to get link speed/duplex [ 1168.534390][T24454] bond16: (slave bridge8): failed to get link speed/duplex [ 1168.562094][ T3467] lo speed is unknown, defaulting to 1000 [ 1168.604312][ T3464] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1168.645296][ T3464] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1168.665992][ T3464] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1168.746977][T24454] bond5: (slave .`): failed to get link speed/duplex [ 1168.774551][ T3489] netlink: 'syz.1.9041': attribute type 1 has an invalid length. [ 1168.776607][T24454] bond16: (slave bridge8): failed to get link speed/duplex [ 1168.801789][ T3486] netlink: 36 bytes leftover after parsing attributes in process `syz.4.9040'. [ 1168.957541][ T3490] bond19: (slave bridge11): making interface the new active one [ 1168.969431][ T3490] bond19: (slave bridge11): Enslaving as an active interface with an up link [ 1169.025671][T24454] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1169.055207][T24454] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 1169.075328][T24454] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 1169.137406][ T3467] lo speed is unknown, defaulting to 1000 [ 1169.154723][T24454] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1169.165628][T24454] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 1169.174985][T24454] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 1169.198444][ T3467] lo speed is unknown, defaulting to 1000 [ 1169.248639][T24454] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1169.267146][T24454] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 1169.285689][T24454] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 1169.307363][T24454] bond15: (slave bridge6): failed to get link speed/duplex [ 1169.322657][T24454] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1169.331477][T24454] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 1169.357042][T24454] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 1169.507589][T24454] bond18: (slave ip6gretap1): failed to get link speed/duplex [ 1170.018966][ T3467] chnl_net:caif_netlink_parms(): no params data found [ 1170.087370][ T5841] Bluetooth: hci5: command tx timeout [ 1170.109137][ T3467] bridge0: port 1(bridge_slave_0) entered blocking state [ 1170.116877][ T3467] bridge0: port 1(bridge_slave_0) entered disabled state [ 1170.124181][ T3467] bridge_slave_0: entered allmulticast mode [ 1170.132326][ T3467] bridge_slave_0: entered promiscuous mode [ 1170.141075][ T3467] bridge0: port 2(bridge_slave_1) entered blocking state [ 1170.148565][ T3467] bridge0: port 2(bridge_slave_1) entered disabled state [ 1170.155760][ T3467] bridge_slave_1: entered allmulticast mode [ 1170.163474][ T3467] bridge_slave_1: entered promiscuous mode [ 1170.200010][ T3467] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1170.212105][ T3467] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1170.245286][ T3467] team0: Port device team_slave_0 added [ 1170.253434][ T3467] team0: Port device team_slave_1 added [ 1170.277852][ T3467] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1170.284833][ T3467] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1170.311020][ T3467] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1170.323010][ T3467] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1170.331036][ T3467] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1170.357341][ T3467] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1170.403949][ T3467] hsr_slave_0: entered promiscuous mode [ 1170.410885][ T3467] hsr_slave_1: entered promiscuous mode [ 1170.792149][ T3467] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1170.802524][ T3467] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1170.812655][ T3467] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1170.823592][ T3467] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1170.853866][ T3467] bridge0: port 2(bridge_slave_1) entered blocking state [ 1170.861019][ T3467] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1170.868613][ T3467] bridge0: port 1(bridge_slave_0) entered blocking state [ 1170.875722][ T3467] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1170.929271][ T3467] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1170.944855][T24442] bridge0: port 1(bridge_slave_0) entered disabled state [ 1170.955831][T24442] bridge0: port 2(bridge_slave_1) entered disabled state [ 1170.973329][ T3467] 8021q: adding VLAN 0 to HW filter on device team0 [ 1170.986941][T24454] bridge0: port 1(bridge_slave_0) entered blocking state [ 1170.994086][T24454] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1171.009499][T24446] bridge0: port 2(bridge_slave_1) entered blocking state [ 1171.016684][T24446] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1171.199869][ T3467] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1171.243051][ T3467] veth0_vlan: entered promiscuous mode [ 1171.254838][ T3467] veth1_vlan: entered promiscuous mode [ 1171.285680][ T3467] veth0_macvtap: entered promiscuous mode [ 1171.297217][ T3467] veth1_macvtap: entered promiscuous mode [ 1171.318730][ T3467] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1171.333422][ T3467] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1171.348903][T24446] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1171.358324][T24446] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1171.392391][T24446] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1171.403234][T24446] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1171.468441][T24446] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1171.477183][T24446] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1171.518593][T24446] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1171.527190][T24446] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1172.167006][ T5841] Bluetooth: hci5: command tx timeout [ 1173.097334][T24446] net_ratelimit: 119 callbacks suppressed [ 1173.097359][T24446] bond10: (slave bridge8): failed to get link speed/duplex [ 1173.117122][T24446] bond18: (slave ip6gretap1): failed to get link speed/duplex [ 1173.136682][T24442] bond16: (slave bridge8): failed to get link speed/duplex [ 1173.186807][T24454] bond15: (slave bridge6): failed to get link speed/duplex [ 1173.194089][T24454] bond5: (slave .`): failed to get link speed/duplex [ 1173.217195][T24446] bond10: (slave bridge8): failed to get link speed/duplex [ 1173.227158][T24446] bond18: (slave ip6gretap1): failed to get link speed/duplex [ 1173.247034][T24442] bond16: (slave bridge8): failed to get link speed/duplex [ 1173.297129][T24442] bond15: (slave bridge6): failed to get link speed/duplex [ 1173.307107][T24442] bond5: (slave .`): failed to get link speed/duplex [ 1174.246999][ T5841] Bluetooth: hci5: command tx timeout [ 1176.328092][ T5841] Bluetooth: hci5: command tx timeout [ 1177.533160][ T1298] lec:lec_start_xmit: lec0:No lecd attached [ 1178.117398][T24439] net_ratelimit: 215 callbacks suppressed [ 1178.117424][T24439] bond10: (slave bridge8): failed to get link speed/duplex [ 1178.147155][T24446] bond18: (slave ip6gretap1): failed to get link speed/duplex [ 1178.157104][T24446] bond15: (slave bridge6): failed to get link speed/duplex [ 1178.187144][T24454] bond16: (slave bridge8): failed to get link speed/duplex [ 1178.207182][T24454] bond5: (slave .`): failed to get link speed/duplex [ 1178.237026][T24446] bond10: (slave bridge8): failed to get link speed/duplex [ 1178.257172][T24454] bond18: (slave ip6gretap1): failed to get link speed/duplex [ 1178.267040][T24454] bond15: (slave bridge6): failed to get link speed/duplex [ 1178.297049][T24454] bond16: (slave bridge8): failed to get link speed/duplex [ 1178.317125][T24454] bond5: (slave .`): failed to get link speed/duplex [ 1183.046533][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5510 ms [ 1183.054679][ C1] lec:lec_tx_timeout: lec0 [ 1183.147233][T24446] net_ratelimit: 215 callbacks suppressed [ 1183.147257][T24446] bond10: (slave bridge8): failed to get link speed/duplex [ 1183.167100][T24446] bond15: (slave bridge6): failed to get link speed/duplex [ 1183.177024][T24446] bond18: (slave ip6gretap1): failed to get link speed/duplex [ 1183.197170][T24446] bond16: (slave bridge8): failed to get link speed/duplex [ 1183.217187][T24446] bond5: (slave .`): failed to get link speed/duplex [ 1183.267156][T24439] bond10: (slave bridge8): failed to get link speed/duplex [ 1183.290841][T24439] bond15: (slave bridge6): failed to get link speed/duplex [ 1183.327230][T24454] bond16: (slave bridge8): failed to get link speed/duplex [ 1183.354219][T24454] bond18: (slave ip6gretap1): failed to get link speed/duplex [ 1183.379311][T24454] bond5: (slave .`): failed to get link speed/duplex [ 1183.386252][ T3520] netlink: 'syz.4.9046': attribute type 8 has an invalid length. [ 1183.425796][ T3520] sch_fq: defrate 0 ignored. [ 1183.449345][ T3527] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1183.497699][ T3528] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9045'. [ 1183.706259][ T5826] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1183.729445][ T5826] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1183.740009][ T5826] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1183.749133][ T5826] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1183.758074][ T5826] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1183.839854][ T3533] lo speed is unknown, defaulting to 1000 [ 1184.058893][ T3549] netlink: 'syz.3.9049': attribute type 5 has an invalid length. [ 1184.454987][T24452] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1184.484425][T24452] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1184.526100][ T3533] lo speed is unknown, defaulting to 1000 [ 1184.615018][ T3533] lo speed is unknown, defaulting to 1000 [ 1184.625725][T24452] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1184.649379][T24452] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1184.702581][ T3563] lo speed is unknown, defaulting to 1000 [ 1184.712367][ T3570] netlink: 36 bytes leftover after parsing attributes in process `syz.0.9053'. [ 1184.878752][T24452] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1184.933124][T24452] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1185.053103][ T3563] lo speed is unknown, defaulting to 1000 [ 1185.078193][T24452] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1185.291108][T24452] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1185.391454][ T3581] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9056'. [ 1185.408576][ T3581] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9056'. [ 1185.845424][ T3563] lo speed is unknown, defaulting to 1000 [ 1185.849639][ T5841] Bluetooth: hci2: command tx timeout [ 1185.960108][ T3581] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9056'. [ 1185.969970][ T3581] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9056'. [ 1186.392127][ T3600] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9058'. [ 1186.656132][T24452] pimreg: left allmulticast mode [ 1187.105853][T24452] bond18 (unregistering): (slave ip6gretap1): Removing an active aggregator [ 1187.120278][T24452] bond18 (unregistering): (slave ip6gretap1): Releasing backup interface [ 1187.208928][ T3629] netlink: 'syz.2.9064': attribute type 5 has an invalid length. [ 1187.394853][ T29] audit: type=1800 audit(1772854164.053:21): pid=3611 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.9060" name="memory.events" dev="tmpfs" ino=9462 res=0 errno=0 [ 1187.492557][T24452] bond2 (unregistering): (slave gretap1): Releasing active interface [ 1187.576063][T24452] bond4 (unregistering): (slave geneve3): Releasing active interface [ 1187.927290][ T5841] Bluetooth: hci2: command tx timeout [ 1187.993226][T24452] bond15 (unregistering): (slave bridge6): Removing an active aggregator [ 1188.002471][T24452] bond15 (unregistering): (slave bridge6): Releasing backup interface [ 1188.011541][T24452] bond15 (unregistering): (slave bridge6): the permanent HWaddr of slave - d6:5f:f1:63:4a:78 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 1188.031123][T24452] bridge6 (unregistering): left allmulticast mode [ 1188.080500][T24452] bond15 (unregistering): (slave bridge7): Releasing backup interface [ 1188.091740][T24452] bridge7 (unregistering): left allmulticast mode [ 1188.140612][T24452] bond16 (unregistering): (slave bridge8): Removing an active aggregator [ 1188.150183][T24452] bond16 (unregistering): (slave bridge8): Releasing backup interface [ 1188.159002][T24452] bond16 (unregistering): (slave bridge8): the permanent HWaddr of slave - 02:b2:91:ec:83:7f - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 1188.182665][T24452] bridge8 (unregistering): left allmulticast mode [ 1188.231007][T24452] bond16 (unregistering): (slave bridge9): Releasing backup interface [ 1188.240305][T24452] bridge9 (unregistering): left allmulticast mode [ 1188.371073][T24452] bond19 (unregistering): (slave bridge11): Releasing active interface [ 1188.435938][T24452] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1188.448435][T24452] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1188.460218][T24452] bond0 (unregistering): Released all slaves [ 1188.472531][T24452] bond1 (unregistering): Released all slaves [ 1188.485898][T24452] bond2 (unregistering): Released all slaves [ 1188.504386][T24452] bond3 (unregistering): (slave batadv1): Releasing active interface [ 1188.512886][T24452] batadv1: left allmulticast mode [ 1188.527841][T24452] bond3 (unregistering): Released all slaves [ 1188.541889][T24452] bond4 (unregistering): Released all slaves [ 1188.556812][T24452] bond5 (unregistering): Released all slaves [ 1188.572704][T24452] bond6 (unregistering): Released all slaves [ 1188.586118][T24452] bond7 (unregistering): Released all slaves [ 1188.600899][T24452] bond8 (unregistering): Released all slaves [ 1188.617054][T24452] bond9 (unregistering): Released all slaves [ 1188.633861][T24452] bond10 (unregistering): Released all slaves [ 1188.665483][T24452] bond11 (unregistering): Released all slaves [ 1188.680643][T24452] bond12 (unregistering): Released all slaves [ 1188.694199][T24452] bond13 (unregistering): Released all slaves [ 1188.708245][T24452] bond14 (unregistering): Released all slaves [ 1188.722182][T24452] bond15 (unregistering): Released all slaves [ 1188.742696][T24452] bond16 (unregistering): Released all slaves [ 1188.767601][T24452] bond17 (unregistering): Released all slaves [ 1188.782418][T24452] bond18 (unregistering): Released all slaves [ 1188.801013][T24452] bond19 (unregistering): Released all slaves [ 1188.908568][ T3644] net_ratelimit: 54 callbacks suppressed [ 1188.908593][ T3644] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1189.121930][T24454] bond5: (slave .`): failed to get link speed/duplex [ 1189.151548][T24452] : left promiscuous mode [ 1189.337600][T24454] bond10: (slave bridge8): failed to get link speed/duplex [ 1189.367901][T24444] bond5: (slave .`): failed to get link speed/duplex [ 1189.396305][T24452] tipc: Disabling bearer [ 1189.420692][T24452] tipc: Disabling bearer [ 1189.426336][T24452] tipc: Left network mode [ 1189.590402][ T3533] chnl_net:caif_netlink_parms(): no params data found [ 1189.649038][ T3658] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9069'. [ 1189.797983][ T3669] sctp: [Deprecated]: syz.0.9072 (pid 3669) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1189.797983][ T3669] Use struct sctp_sack_info instead [ 1190.009582][ T5841] Bluetooth: hci2: command tx timeout [ 1190.339487][ T29] audit: type=1800 audit(1772854167.003:22): pid=3675 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.9074" name="memory.events" dev="tmpfs" ino=9488 res=0 errno=0 [ 1190.360098][T24451] bond5: (slave .`): failed to get link speed/duplex [ 1190.360167][T24451] bond10: (slave bridge8): failed to get link speed/duplex [ 1190.645527][ T3691] netlink: 'syz.2.9075': attribute type 5 has an invalid length. [ 1190.940763][ T3533] bridge0: port 1(bridge_slave_0) entered blocking state [ 1190.973559][ T3533] bridge0: port 1(bridge_slave_0) entered disabled state [ 1190.998995][ T3533] bridge_slave_0: entered allmulticast mode [ 1191.020055][ T3533] bridge_slave_0: entered promiscuous mode [ 1191.040219][ T3533] bridge0: port 2(bridge_slave_1) entered blocking state [ 1191.068401][ T3533] bridge0: port 2(bridge_slave_1) entered disabled state [ 1191.078620][ T3533] bridge_slave_1: entered allmulticast mode [ 1191.090322][ T3533] bridge_slave_1: entered promiscuous mode [ 1191.172040][T24451] bond10: (slave bridge8): failed to get link speed/duplex [ 1191.224662][ T3700] sysfs: cannot create duplicate filename '/class/ieee80211/π,xb)% ]3DL̥!' [ 1191.238247][ T3700] CPU: 1 UID: 0 PID: 3700 Comm: syz.3.9077 Not tainted syzkaller #0 PREEMPT(full) [ 1191.238277][ T3700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1191.238291][ T3700] Call Trace: [ 1191.238301][ T3700] [ 1191.238311][ T3700] dump_stack_lvl+0xe8/0x150 [ 1191.238358][ T3700] sysfs_warn_dup+0x8e/0xa0 [ 1191.238391][ T3700] sysfs_do_create_link_sd+0xc0/0x110 [ 1191.238425][ T3700] device_add_class_symlinks+0x1cf/0x240 [ 1191.238456][ T3700] device_add+0x475/0xb70 [ 1191.238486][ T3700] wiphy_register+0x1d73/0x2d50 [ 1191.238537][ T3700] ? __pfx_wiphy_register+0x10/0x10 [ 1191.238564][ T3700] ? __pfx_netdev_run_todo+0x10/0x10 [ 1191.238591][ T3700] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 1191.238635][ T3700] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 1191.238685][ T3700] ieee80211_register_hw+0x35f0/0x42c0 [ 1191.238729][ T3700] ? ieee80211_register_hw+0x1501/0x42c0 [ 1191.238768][ T3700] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 1191.238814][ T3700] ? __hrtimer_setup+0x181/0x200 [ 1191.238843][ T3700] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1191.238873][ T3700] mac80211_hwsim_new_radio+0x3334/0x5b60 [ 1191.238936][ T3700] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1191.238959][ T3700] ? kstrndup+0xbf/0x160 [ 1191.239000][ T3700] hwsim_new_radio_nl+0xf6a/0x1c00 [ 1191.239055][ T3700] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1191.239093][ T3700] ? rcu_is_watching+0x15/0xb0 [ 1191.239124][ T3700] ? trace_kmalloc+0x2a/0x110 [ 1191.239157][ T3700] ? __nla_parse+0x40/0x60 [ 1191.239203][ T3700] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 1191.239239][ T3700] genl_family_rcv_msg_doit+0x22a/0x330 [ 1191.239273][ T3700] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1191.239315][ T3700] ? bpf_lsm_capable+0x9/0x20 [ 1191.239345][ T3700] ? security_capable+0x7e/0x2c0 [ 1191.239381][ T3700] genl_rcv_msg+0x61c/0x7a0 [ 1191.239415][ T3700] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1191.239437][ T3700] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1191.239462][ T3700] ? __lock_acquire+0x6b5/0x2cf0 [ 1191.239507][ T3700] netlink_rcv_skb+0x232/0x4b0 [ 1191.239539][ T3700] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1191.239564][ T3700] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1191.239617][ T3700] ? down_read+0x272/0x2e0 [ 1191.239640][ T3700] ? genl_rcv+0xd/0x40 [ 1191.239665][ T3700] genl_rcv+0x28/0x40 [ 1191.239693][ T3700] netlink_unicast+0x80f/0x9b0 [ 1191.239733][ T3700] ? __pfx_netlink_unicast+0x10/0x10 [ 1191.239763][ T3700] ? netlink_sendmsg+0x650/0xb40 [ 1191.239791][ T3700] ? skb_put+0x11b/0x210 [ 1191.239828][ T3700] netlink_sendmsg+0x813/0xb40 [ 1191.239871][ T3700] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1191.239907][ T3700] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1191.239935][ T3700] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1191.239964][ T3700] ____sys_sendmsg+0x972/0x9f0 [ 1191.239984][ T3700] ? futex_unqueue+0x211/0x240 [ 1191.240022][ T3700] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1191.240057][ T3700] ? import_iovec+0x73/0xa0 [ 1191.240096][ T3700] ___sys_sendmsg+0x2a5/0x360 [ 1191.240128][ T3700] ? __pfx____sys_sendmsg+0x10/0x10 [ 1191.240160][ T3700] ? futex_wait+0x29a/0x380 [ 1191.240229][ T3700] ? __fget_files+0x2a/0x420 [ 1191.240261][ T3700] ? __fget_files+0x3a0/0x420 [ 1191.240307][ T3700] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1191.240333][ T3700] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1191.240369][ T3700] ? rcu_is_watching+0x15/0xb0 [ 1191.240417][ T3700] do_syscall_64+0x14d/0xf80 [ 1191.240439][ T3700] ? trace_irq_disable+0x3b/0x150 [ 1191.240470][ T3700] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1191.240494][ T3700] ? clear_bhb_loop+0x40/0x90 [ 1191.240522][ T3700] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1191.240544][ T3700] RIP: 0033:0x7f60c8d9c799 [ 1191.240568][ T3700] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1191.240587][ T3700] RSP: 002b:00007f60c9c96028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1191.240611][ T3700] RAX: ffffffffffffffda RBX: 00007f60c9015fa0 RCX: 00007f60c8d9c799 [ 1191.240627][ T3700] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004 [ 1191.240642][ T3700] RBP: 00007f60c8e32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1191.240656][ T3700] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1191.240678][ T3700] R13: 00007f60c9016038 R14: 00007f60c9015fa0 R15: 00007ffc1cb71e58 [ 1191.240718][ T3700] [ 1191.782699][T24439] tipc: Resetting bearer [ 1191.842745][ T3533] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1191.924241][ T3533] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1192.087384][ T5841] Bluetooth: hci2: command tx timeout [ 1192.120472][T24454] bond10: (slave bridge8): failed to get link speed/duplex [ 1192.269216][T24454] bond10: (slave bridge8): failed to get link speed/duplex [ 1192.320522][ T3533] team0: Port device team_slave_0 added [ 1192.334907][ T3533] team0: Port device team_slave_1 added [ 1192.355744][ T3729] netlink: 452 bytes leftover after parsing attributes in process `syz.4.9082'. [ 1192.378418][ T3732] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9084'. [ 1192.547538][ T3747] netlink: 'syz.2.9085': attribute type 83 has an invalid length. [ 1192.570204][T24439] bond5: (slave .`): failed to get link speed/duplex [ 1192.611003][ T3533] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1192.662358][ T3533] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1192.737503][ T3533] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1192.745151][ T3755] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 1192.797755][ T3533] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1192.804937][ T3533] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1192.853083][ T29] audit: type=1800 audit(1772854169.513:23): pid=3748 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.9086" name="memory.events" dev="tmpfs" ino=91 res=0 errno=0 [ 1192.861608][ T3533] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1193.087374][ T3533] hsr_slave_0: entered promiscuous mode [ 1193.115148][ T3533] hsr_slave_1: entered promiscuous mode [ 1193.138832][ T3533] debugfs: 'hsr0' already exists in 'hsr' [ 1193.144909][ T3533] Cannot create hsr debugfs directory [ 1193.182037][ T3734] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1193.327101][ T3764] sctp: [Deprecated]: syz.3.9088 (pid 3764) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1193.327101][ T3764] Use struct sctp_sack_info instead [ 1193.419390][ T3766] netlink: 52 bytes leftover after parsing attributes in process `syz.4.9089'. [ 1193.483197][ T3772] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9089'. [ 1193.720733][ T3766] gtp1: left allmulticast mode [ 1193.758177][ T3766] bond13: left allmulticast mode [ 1193.763365][ T3766] bridge6: left allmulticast mode [ 1193.889820][ T3766] bond14: left promiscuous mode [ 1193.894929][ T3766] wireguard0: left promiscuous mode [ 1193.974551][ T3786] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9093'. [ 1194.041914][ T3775] lo speed is unknown, defaulting to 1000 [ 1194.206952][ T3792] netlink: 452 bytes leftover after parsing attributes in process `syz.3.9094'. [ 1194.217438][T24439] net_ratelimit: 3 callbacks suppressed [ 1194.217462][T24439] bond5: (slave .`): failed to get link speed/duplex [ 1194.274868][T24446] bond10: (slave bridge8): failed to get link speed/duplex [ 1194.368735][ T3796] netlink: 36 bytes leftover after parsing attributes in process `syz.4.9095'. [ 1194.421293][ T3799] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9096'. [ 1194.641296][ T3775] lo speed is unknown, defaulting to 1000 [ 1194.647323][T24439] bond10: (slave bridge8): failed to get link speed/duplex [ 1194.647372][T24439] bond5: (slave .`): failed to get link speed/duplex [ 1194.689506][ T3775] lo speed is unknown, defaulting to 1000 [ 1195.052150][T24439] bond5: (slave .`): failed to get link speed/duplex [ 1195.106829][T24446] bond10: (slave bridge8): failed to get link speed/duplex [ 1195.145190][ T3817] netlink: 'syz.3.9101': attribute type 6 has an invalid length. [ 1195.171912][ T3817] netlink: 232 bytes leftover after parsing attributes in process `syz.3.9101'. [ 1195.229610][ T3822] netlink: 5252 bytes leftover after parsing attributes in process `syz.3.9101'. [ 1195.448969][T24446] bond10: (slave bridge8): failed to get link speed/duplex [ 1195.716898][ T3826] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1195.770130][T17055] lo speed is unknown, defaulting to 1000 [ 1195.786198][T17055] syz2: Port: 1 Link ACTIVE [ 1196.156611][T24454] bond10: (slave bridge8): failed to get link speed/duplex [ 1196.243383][ T3845] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9106'. [ 1196.297374][T24454] bond5: (slave .`): failed to get link speed/duplex [ 1196.501236][T24452] hsr_slave_0: left promiscuous mode [ 1196.515835][T24452] hsr_slave_1: left promiscuous mode [ 1196.553904][T24452] team0 (unregistering): Port device veth13 removed [ 1196.743138][T24452] team0 (unregistering): Port device veth9 removed [ 1196.792619][T24452] team0 (unregistering): Port device veth7 removed [ 1197.188753][T24452] team0 (unregistering): Port device team_slave_1 removed [ 1197.193723][ T3876] netlink: 36 bytes leftover after parsing attributes in process `syz.3.9111'. [ 1197.531465][ T3865] netlink: 'syz.2.9110': attribute type 15 has an invalid length. [ 1197.760312][ T3883] block nbd1: Unsupported socket: should be TCP or UNIX. [ 1197.971368][ T3533] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1198.084019][ T3533] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1198.144251][ T3533] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1198.254532][ T3533] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1198.330423][ T3895] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9116'. [ 1198.605614][T24452] IPVS: stop unused estimator thread 0... [ 1198.699171][ T3915] netlink: 'syz.4.9117': attribute type 5 has an invalid length. [ 1199.267040][T24439] net_ratelimit: 10 callbacks suppressed [ 1199.267064][T24439] bond10: (slave bridge8): failed to get link speed/duplex [ 1199.289004][T24451] bond5: (slave .`): failed to get link speed/duplex [ 1199.401598][ T3533] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1199.431579][ T3935] netlink: 'syz.3.9119': attribute type 6 has an invalid length. [ 1199.450853][T24439] bond5: (slave .`): failed to get link speed/duplex [ 1199.452163][ T3935] netlink: 232 bytes leftover after parsing attributes in process `syz.3.9119'. [ 1199.517175][T24454] bond10: (slave bridge8): failed to get link speed/duplex [ 1199.541864][ T3533] 8021q: adding VLAN 0 to HW filter on device team0 [ 1199.558036][ T3938] netlink: 5252 bytes leftover after parsing attributes in process `syz.3.9119'. [ 1199.604141][T24442] bridge0: port 1(bridge_slave_0) entered blocking state [ 1199.611445][T24442] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1199.666997][T24451] bond5: (slave .`): failed to get link speed/duplex [ 1199.735262][T24444] bridge0: port 2(bridge_slave_1) entered blocking state [ 1199.742516][T24444] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1200.248249][T24439] bond5: (slave .`): failed to get link speed/duplex [ 1200.255038][T24439] bond10: (slave bridge8): failed to get link speed/duplex [ 1200.356674][T24452] bond5: (slave .`): failed to get link speed/duplex [ 1200.431373][T24439] bond10: (slave bridge8): failed to get link speed/duplex [ 1200.477328][T24452] bond5: (slave .`): failed to get link speed/duplex [ 1200.517403][ T3973] netlink: 'syz.3.9126': attribute type 4 has an invalid length. [ 1201.051687][ T3533] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1201.326239][ T3533] veth0_vlan: entered promiscuous mode [ 1201.399449][ T3533] veth1_vlan: entered promiscuous mode [ 1201.579821][ T3533] veth0_macvtap: entered promiscuous mode [ 1201.616958][ T3533] veth1_macvtap: entered promiscuous mode [ 1201.704873][ T3533] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1201.760294][ T3533] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1201.805066][T24439] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1201.819682][T24439] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1201.894240][T24439] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1201.908527][ T4038] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9147'. [ 1201.916711][T24439] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1202.330165][T24446] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1202.363260][T24446] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1202.410596][ T4064] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9155'. [ 1202.431442][T24439] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1202.452453][T24439] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1202.576352][ T4071] netlink: 'syz.3.9157': attribute type 15 has an invalid length. [ 1203.034007][ T5826] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1203.061851][ T5826] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1203.071866][ T5826] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1203.096159][ T5826] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1203.131782][ T5826] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1203.323683][ T4085] lo speed is unknown, defaulting to 1000 [ 1203.915327][ T4085] lo speed is unknown, defaulting to 1000 [ 1203.930410][ T4085] lo speed is unknown, defaulting to 1000 [ 1204.028887][ T4124] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9174'. [ 1204.354405][T24445] net_ratelimit: 57 callbacks suppressed [ 1204.354430][T24445] bond5: (slave .`): failed to get link speed/duplex [ 1204.458449][T24445] bond10: (slave bridge8): failed to get link speed/duplex [ 1204.794173][T24444] bond10: (slave bridge8): failed to get link speed/duplex [ 1205.048415][T24445] bond5: (slave .`): failed to get link speed/duplex [ 1205.067134][T24445] bond10: (slave bridge8): failed to get link speed/duplex [ 1205.196989][ T4085] chnl_net:caif_netlink_parms(): no params data found [ 1205.212146][ T5841] Bluetooth: hci0: command tx timeout [ 1205.524713][ T4085] bridge0: port 1(bridge_slave_0) entered blocking state [ 1205.535213][ T4085] bridge0: port 1(bridge_slave_0) entered disabled state [ 1205.543233][ T4085] bridge_slave_0: entered allmulticast mode [ 1205.553128][ T4085] bridge_slave_0: entered promiscuous mode [ 1205.562760][ T4085] bridge0: port 2(bridge_slave_1) entered blocking state [ 1205.570667][ T4085] bridge0: port 2(bridge_slave_1) entered disabled state [ 1205.578034][ T4085] bridge_slave_1: entered allmulticast mode [ 1205.585634][ T4085] bridge_slave_1: entered promiscuous mode [ 1205.639599][ T4085] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1205.654416][ T4085] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1205.713011][ T4085] team0: Port device team_slave_0 added [ 1205.732954][ T4085] team0: Port device team_slave_1 added [ 1205.769602][T17049] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1205.838998][T24445] bond10: (slave bridge8): failed to get link speed/duplex [ 1205.846298][T24445] bond5: (slave .`): failed to get link speed/duplex [ 1205.887796][ T4085] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1205.894809][ T4085] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1205.924123][ T4085] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1205.952295][ T4085] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1205.960972][ T4085] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1205.988794][ T4085] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1206.110393][ T4085] hsr_slave_0: entered promiscuous mode [ 1206.118815][ T4085] hsr_slave_1: entered promiscuous mode [ 1206.125614][ T4085] debugfs: 'hsr0' already exists in 'hsr' [ 1206.132556][ T4085] Cannot create hsr debugfs directory [ 1206.249127][T24439] bond10: (slave bridge8): failed to get link speed/duplex [ 1206.298582][ T4215] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1206.438897][ T4085] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1206.453013][ T4085] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1206.463481][ T4085] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1206.520325][ T4217] syzkaller0: entered promiscuous mode [ 1206.525924][ T4217] syzkaller0: entered allmulticast mode [ 1206.571622][ T4085] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1206.593632][ T4085] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1206.604389][ T4085] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1206.693658][ T4085] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1206.704541][ T4085] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1206.715181][ T4085] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1206.801685][ T4085] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1206.846649][ T4085] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1206.866513][ T4085] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1207.261178][ T4085] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1207.289349][ T5841] Bluetooth: hci0: command tx timeout [ 1207.312034][ T4085] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1207.348625][ T4085] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1207.416750][ T4085] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1207.503178][ T4253] syzkaller0: entered promiscuous mode [ 1207.527066][ T4253] syzkaller0: entered allmulticast mode [ 1207.960415][ T4085] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1208.015181][ T4085] 8021q: adding VLAN 0 to HW filter on device team0 [ 1208.060398][T24442] bridge0: port 1(bridge_slave_0) entered blocking state [ 1208.067661][T24442] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1208.112974][T24446] bridge0: port 2(bridge_slave_1) entered blocking state [ 1208.120258][T24446] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1208.162209][ T4278] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1208.355908][ T4296] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1208.625067][ T4309] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9247'. [ 1208.641095][ T4085] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1208.763945][ T4085] veth0_vlan: entered promiscuous mode [ 1208.815003][ T4085] veth1_vlan: entered promiscuous mode [ 1208.865821][ T4085] veth0_macvtap: entered promiscuous mode [ 1208.878779][ T4085] veth1_macvtap: entered promiscuous mode [ 1208.925211][ T4085] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1208.938745][ T4319] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9251'. [ 1208.945999][ T4085] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1208.996321][ T4319] bridge0: port 1(macvlan0) entered blocking state [ 1209.004868][ T4319] bridge0: port 1(macvlan0) entered disabled state [ 1209.013829][ T4319] macvlan0: entered allmulticast mode [ 1209.024490][ T4319] macvlan0: left allmulticast mode [ 1209.057078][T24446] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1209.066079][T24446] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1209.121340][T24446] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1209.147544][T24446] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1209.163179][ T4325] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9255'. [ 1209.203397][ T4325] ni: the hash_elasticity option has been deprecated and is always 16 [ 1209.238375][ T4325] ni: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1209.239002][ T4330] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9255'. [ 1209.312483][ T4330] ni: the hash_elasticity option has been deprecated and is always 16 [ 1209.323922][ T4330] ni: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1209.361420][T24442] net_ratelimit: 38 callbacks suppressed [ 1209.361445][T24442] bond10: (slave bridge8): failed to get link speed/duplex [ 1209.376376][ T5841] Bluetooth: hci0: command tx timeout [ 1209.431560][ T4329] lo speed is unknown, defaulting to 1000 [ 1209.459484][T24442] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1209.477278][T24442] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1209.498426][T24444] bond5: (slave .`): failed to get link speed/duplex [ 1209.539653][T24452] bond10: (slave bridge8): failed to get link speed/duplex [ 1209.573380][T24452] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1209.587639][T24452] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1209.608540][T24446] bond5: (slave .`): failed to get link speed/duplex [ 1209.667291][T24444] bond10: (slave bridge8): failed to get link speed/duplex [ 1209.737666][T24446] bond5: (slave .`): failed to get link speed/duplex [ 1209.797866][T24442] bond10: (slave bridge8): failed to get link speed/duplex [ 1209.964771][ T4329] lo speed is unknown, defaulting to 1000 [ 1209.967393][T24446] bond5: (slave .`): failed to get link speed/duplex [ 1210.015498][ T4329] lo speed is unknown, defaulting to 1000 [ 1210.069007][T24446] bond10: (slave bridge8): failed to get link speed/duplex [ 1210.114787][ T4352] netlink: 'syz.0.9265': attribute type 4 has an invalid length. [ 1210.127706][T24446] bond5: (slave .`): failed to get link speed/duplex [ 1210.182143][ T4354] netlink: 'syz.0.9265': attribute type 4 has an invalid length. [ 1210.191932][T12299] lec:lec_start_xmit: lec0:No lecd attached [ 1210.551063][ T5826] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1210.562979][ T5826] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1210.573269][ T5826] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1210.595716][ T5826] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1210.604020][ T5826] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1210.653432][ T4365] lo speed is unknown, defaulting to 1000 [ 1211.198618][ T4365] lo speed is unknown, defaulting to 1000 [ 1211.230563][ T4365] lo speed is unknown, defaulting to 1000 [ 1211.450183][ T5841] Bluetooth: hci0: command tx timeout [ 1212.662820][ T5841] Bluetooth: hci4: command tx timeout [ 1212.953938][ T4365] chnl_net:caif_netlink_parms(): no params data found [ 1213.196270][ T4365] bridge0: port 1(bridge_slave_0) entered blocking state [ 1213.204136][ T4365] bridge0: port 1(bridge_slave_0) entered disabled state [ 1213.214269][ T4365] bridge_slave_0: entered allmulticast mode [ 1213.225300][ T4365] bridge_slave_0: entered promiscuous mode [ 1213.235772][ T4365] bridge0: port 2(bridge_slave_1) entered blocking state [ 1213.243697][ T4365] bridge0: port 2(bridge_slave_1) entered disabled state [ 1213.251421][ T4365] bridge_slave_1: entered allmulticast mode [ 1213.272061][ T4365] bridge_slave_1: entered promiscuous mode [ 1213.317636][ T4365] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1213.332564][ T4365] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1213.442637][ T4365] team0: Port device team_slave_0 added [ 1213.455357][ T4365] team0: Port device team_slave_1 added [ 1213.550713][ T4365] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1213.566855][ T4365] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1213.641814][ T4365] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1213.677765][ T4365] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1213.694718][ T4365] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1213.757106][ T4365] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1213.864377][ T4365] hsr_slave_0: entered promiscuous mode [ 1213.872800][ T4365] hsr_slave_1: entered promiscuous mode [ 1213.881800][ T4365] debugfs: 'hsr0' already exists in 'hsr' [ 1213.888198][ T4365] Cannot create hsr debugfs directory [ 1214.279517][ T4365] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1214.294171][ T4365] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1214.321655][ T4365] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1214.467065][T24439] net_ratelimit: 37 callbacks suppressed [ 1214.467093][T24439] bond5: (slave .`): failed to get link speed/duplex [ 1214.507468][T24439] bond10: (slave bridge8): failed to get link speed/duplex [ 1214.542185][ T4365] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1214.569187][ T4365] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1214.590205][ T4365] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1214.637409][T24444] bond5: (slave .`): failed to get link speed/duplex [ 1214.656951][T24439] bond10: (slave bridge8): failed to get link speed/duplex [ 1214.689877][ T4365] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1214.708034][ T4365] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1214.729629][ T4365] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1214.731363][ T5841] Bluetooth: hci4: command tx timeout [ 1214.769589][T24452] bond5: (slave .`): failed to get link speed/duplex [ 1214.796638][T24452] bond10: (slave bridge8): failed to get link speed/duplex [ 1214.815238][ T4365] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1214.839456][ T4365] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1214.854255][ T4365] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1214.906629][T24439] bond5: (slave .`): failed to get link speed/duplex [ 1214.917540][T24439] bond10: (slave bridge8): failed to get link speed/duplex [ 1215.176630][T24452] bond10: (slave bridge8): failed to get link speed/duplex [ 1215.183977][T24452] bond5: (slave .`): failed to get link speed/duplex [ 1215.200025][ T4365] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1215.207176][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1215.215270][ C1] lec:lec_tx_timeout: lec0 [ 1215.233065][ T4365] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1215.248012][ T4365] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1215.284027][ T4365] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1215.493153][ T4365] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1215.530806][ T4365] 8021q: adding VLAN 0 to HW filter on device team0 [ 1215.562789][T24452] bridge0: port 1(bridge_slave_0) entered blocking state [ 1215.570032][T24452] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1215.603805][T24452] bridge0: port 2(bridge_slave_1) entered blocking state [ 1215.611047][T24452] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1216.017436][ T4574] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9348'. [ 1216.039118][ T4574] lo: Master is either lo or non-ether device [ 1216.074946][ T4577] syzkaller0: entered promiscuous mode [ 1216.087513][ T4577] syzkaller0: entered allmulticast mode [ 1216.503814][ T4365] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1216.662706][ T4365] veth0_vlan: entered promiscuous mode [ 1216.702156][ T4365] veth1_vlan: entered promiscuous mode [ 1216.808293][ T5841] Bluetooth: hci4: command tx timeout [ 1216.816468][ T4365] veth0_macvtap: entered promiscuous mode [ 1216.848272][ T4365] veth1_macvtap: entered promiscuous mode [ 1216.873564][ T4365] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1216.905950][ T4365] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1216.928841][T24446] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1216.960925][T24446] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1217.005913][T24446] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1217.032527][T24446] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1217.322116][T24442] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1217.352724][T24442] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1217.455839][T24444] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1217.481685][T24444] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1218.149380][ T5826] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1218.166364][ T5826] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1218.187489][ T5826] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1218.201243][ T5826] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1218.210428][ T5826] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1218.266067][ T4659] lo speed is unknown, defaulting to 1000 [ 1218.689319][ T4676] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1218.856387][ T4659] lo speed is unknown, defaulting to 1000 [ 1218.882180][ T4659] lo speed is unknown, defaulting to 1000 [ 1218.894017][ T5841] Bluetooth: hci4: command tx timeout [ 1219.506951][T24446] net_ratelimit: 56 callbacks suppressed [ 1219.506976][T24446] bond10: (slave bridge8): failed to get link speed/duplex [ 1219.609526][T24445] bond5: (slave .`): failed to get link speed/duplex [ 1220.248042][ T5841] Bluetooth: hci1: command tx timeout [ 1220.618204][T24452] tipc: Disabling bearer [ 1220.701739][T24452] bond3 (unregistering): (slave bridge1): Removing an active aggregator [ 1220.724742][T24452] bond3 (unregistering): (slave bridge1): Releasing backup interface [ 1220.736289][T24452] bond3 (unregistering): (slave bridge1): the permanent HWaddr of slave - 26:73:d8:f2:f0:e9 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 1220.850432][T24452] bond3 (unregistering): (slave bridge2): Releasing backup interface [ 1221.082246][T24452] bond13 (unregistering): (slave bridge6): Removing an active aggregator [ 1221.092956][T24452] bond13 (unregistering): (slave bridge6): Releasing backup interface [ 1221.125142][ T4776] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9439'. [ 1221.883448][T24452] bond1 (unregistering): Released all slaves [ 1221.904258][T24452] bond2 (unregistering): Released all slaves [ 1221.926052][T24452] bond3 (unregistering): Released all slaves [ 1221.950286][T24452] bond4 (unregistering): Released all slaves [ 1221.980934][T24452] bond5 (unregistering): Released all slaves [ 1222.003911][T24452] bond6 (unregistering): Released all slaves [ 1222.032551][T24452] bond7 (unregistering): Released all slaves [ 1222.071774][T24452] bond0 (unregistering): Released all slaves [ 1222.100928][T24452] bond8 (unregistering): Released all slaves [ 1222.137501][T24452] bond9 (unregistering): (slave veth11): Releasing active interface [ 1222.149020][T24452] bond9 (unregistering): Released all slaves [ 1222.179419][T24452] bond10 (unregistering): Released all slaves [ 1222.205667][T24452] bond11 (unregistering): Released all slaves [ 1222.222905][T24452] bond12 (unregistering): Released all slaves [ 1222.245150][T24452] bond13 (unregistering): Released all slaves [ 1222.263296][T24452] bond14 (unregistering): (slave wireguard0): Releasing backup interface [ 1222.276179][T24452] bond14 (unregistering): (slave wireguard1): Releasing backup interface [ 1222.285840][T24452] bond14 (unregistering): Released all slaves [ 1222.329102][ T5841] Bluetooth: hci1: command tx timeout [ 1222.367335][T24439] bond10: (slave bridge8): failed to get link speed/duplex [ 1222.541931][ T4778] gre1: entered promiscuous mode [ 1222.611283][T24442] bond5: (slave .`): failed to get link speed/duplex [ 1222.638218][T24442] bond10: (slave bridge8): failed to get link speed/duplex [ 1222.677884][T24452] : left promiscuous mode [ 1222.790034][T24452] tipc: Left network mode [ 1222.817343][T24439] bond10: (slave bridge8): failed to get link speed/duplex [ 1222.871369][T24439] bond5: (slave .`): failed to get link speed/duplex [ 1222.926836][T24442] bond10: (slave bridge8): failed to get link speed/duplex [ 1223.032010][T24444] bond5: (slave .`): failed to get link speed/duplex [ 1223.147074][T24454] bond10: (slave bridge8): failed to get link speed/duplex [ 1223.223327][T24452] IPVS: stopping master sync thread 10570 ... [ 1223.483886][ T4659] chnl_net:caif_netlink_parms(): no params data found [ 1224.186329][T24452] batman_adv: batadv0: Removing interface: vlan3 [ 1224.407481][ T5841] Bluetooth: hci1: command tx timeout [ 1224.498065][ T4659] bridge0: port 1(bridge_slave_0) entered blocking state [ 1224.505276][ T4659] bridge0: port 1(bridge_slave_0) entered disabled state [ 1224.543776][ T4659] bridge_slave_0: entered allmulticast mode [ 1224.561917][ T4659] bridge_slave_0: entered promiscuous mode [ 1224.613636][T24454] net_ratelimit: 5 callbacks suppressed [ 1224.613659][T24454] bond10: (slave bridge8): failed to get link speed/duplex [ 1224.650339][ T4659] bridge0: port 2(bridge_slave_1) entered blocking state [ 1224.679394][ T4659] bridge0: port 2(bridge_slave_1) entered disabled state [ 1224.688359][ T4659] bridge_slave_1: entered allmulticast mode [ 1224.708793][ T4659] bridge_slave_1: entered promiscuous mode [ 1224.908480][ T4870] bridge0: port 1(bridge_slave_0) entered disabled state [ 1224.919523][ T4870] bridge0: port 2(bridge_slave_1) entered disabled state [ 1225.451573][ T4659] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1225.537047][T24446] bond10: (slave bridge8): failed to get link speed/duplex [ 1225.589908][ T4659] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1225.835530][ T4659] team0: Port device team_slave_0 added [ 1225.861144][ T4659] team0: Port device team_slave_1 added [ 1226.075845][ T4659] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1226.112307][ T4659] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1226.211473][ T4659] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1226.244028][ T4659] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1226.275697][ T4659] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1226.345582][ T4934] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1226.374603][ T4659] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1226.486917][ T5841] Bluetooth: hci1: command tx timeout [ 1226.612935][ T4659] hsr_slave_0: entered promiscuous mode [ 1226.679722][ T4659] hsr_slave_1: entered promiscuous mode [ 1226.686328][ T4659] debugfs: 'hsr0' already exists in 'hsr' [ 1226.708494][ T4659] Cannot create hsr debugfs directory [ 1226.783986][T24452] hsr_slave_0: left promiscuous mode [ 1226.808206][T24452] hsr_slave_1: left promiscuous mode [ 1226.815174][T24452] batman_adv: batadv0: Removing interface: ipvlan2 [ 1226.875594][T24452] batman_adv: batadv0: Removing interface: ipvlan3 [ 1226.905015][T24452] batman_adv: batadv0: Removing interface: ipvlan4 [ 1226.958601][T24452] batman_adv: batadv0: Removing interface: ipvlan5 [ 1226.977421][T24452] batman_adv: batadv0: Removing interface: ipvlan6 [ 1227.003824][T24452] batman_adv: batadv0: Removing interface: ipvlan7 [ 1227.037585][T24452] batman_adv: batadv0: Removing interface: ipvlan8 [ 1227.088490][T24452] batman_adv: batadv0: Removing interface: ipvlan9 [ 1227.117478][T24452] batman_adv: batadv0: Removing interface: ipvlan10 [ 1227.164646][T24452] batman_adv: batadv0: Removing interface: ipvlan11 [ 1227.189880][T24452] batman_adv: batadv0: Removing interface: ipvlan12 [ 1227.205816][T24452] batman_adv: batadv0: Removing interface: ipvlan13 [ 1227.212854][ T4965] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1227.238382][T24452] batman_adv: batadv0: Removing interface: ipvlan14 [ 1227.269728][T24452] batman_adv: batadv0: Removing interface: ipvlan0 [ 1227.289360][T24452] batman_adv: batadv0: Removing interface: ipvlan1 [ 1227.314864][T24452] batman_adv: batadv0: Removing interface: ipvlan15 [ 1227.877888][ T4989] sctp: [Deprecated]: syz.2.9521 (pid 4989) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1227.877888][ T4989] Use struct sctp_sack_info instead [ 1228.352927][T24446] smc: removing ib device syz0 [ 1228.364042][T24439] bond5: (slave .`): failed to get link speed/duplex [ 1229.017957][T24454] bond5: (slave .`): failed to get link speed/duplex [ 1229.149431][T24442] bond5: (slave .`): failed to get link speed/duplex [ 1229.348749][T24444] bond5: (slave .`): failed to get link speed/duplex [ 1229.406636][T24454] bond10: (slave bridge8): failed to get link speed/duplex [ 1229.811576][ T5046] sctp: [Deprecated]: syz.3.9546 (pid 5046) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1229.811576][ T5046] Use struct sctp_sack_info instead [ 1229.829942][T24439] bond10: (slave bridge8): failed to get link speed/duplex [ 1229.880405][T24444] bond5: (slave .`): failed to get link speed/duplex [ 1230.141565][T24454] bond10: (slave bridge8): failed to get link speed/duplex [ 1230.207630][T24442] bond5: (slave .`): failed to get link speed/duplex [ 1230.527232][T24454] bond5: (slave .`): failed to get link speed/duplex [ 1230.534043][T24454] bond10: (slave bridge8): failed to get link speed/duplex [ 1230.636571][T24454] bond5: (slave .`): failed to get link speed/duplex [ 1230.690140][T24454] bond10: (slave bridge8): failed to get link speed/duplex [ 1230.766967][T24439] bond5: (slave .`): failed to get link speed/duplex [ 1231.009810][ T5087] sctp: [Deprecated]: syz.3.9561 (pid 5087) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1231.009810][ T5087] Use struct sctp_sack_info instead [ 1231.076321][T24442] bond10: (slave bridge8): failed to get link speed/duplex [ 1231.651240][ T5104] syzkaller0: entered promiscuous mode [ 1231.696899][ T5104] syzkaller0: entered allmulticast mode [ 1231.828649][ T5119] netlink: 7 bytes leftover after parsing attributes in process `syz.0.9572'. [ 1232.221784][ T4659] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1232.294520][ T4659] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1232.353359][ T4659] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1232.385480][ T4659] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1232.672839][ T4659] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1232.751047][ T4659] 8021q: adding VLAN 0 to HW filter on device team0 [ 1232.785518][T24439] bridge0: port 1(bridge_slave_0) entered blocking state [ 1232.792835][T24439] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1232.885463][T24442] bridge0: port 2(bridge_slave_1) entered blocking state [ 1232.892718][T24442] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1233.794730][T24452] IPVS: stop unused estimator thread 0... [ 1233.820851][ T4659] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1233.979609][T24452] dummy0: left allmulticast mode [ 1233.987911][T24452] bridge0: port 1(dummy0) entered disabled state [ 1235.110389][ T5257] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1236.146229][ T5294] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1236.825371][T24452] bond9 (unregistering): (slave bridge7): Releasing active interface [ 1236.904281][T24452] bond10 (unregistering): (slave bridge8): Removing an active aggregator [ 1236.955422][T24452] bond10 (unregistering): (slave bridge8): Releasing backup interface [ 1237.007515][T24452] bridge8 (unregistering): left allmulticast mode [ 1237.091993][T24452] bond12 (unregistering): (slave bridge9): Releasing active interface [ 1237.410029][T24452] bond0 (unregistering): Released all slaves [ 1237.435848][T24452] bond1 (unregistering): (slave lo): Releasing backup interface [ 1237.445384][T24452] bond1 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 1237.480000][T24452] bond1 (unregistering): Released all slaves [ 1237.540543][T24452] bond2 (unregistering): Released all slaves [ 1237.562861][T24452] bond3 (unregistering): Released all slaves [ 1237.602171][T24452] bond4 (unregistering): Released all slaves [ 1237.664485][T24452] bond5 (unregistering): Released all slaves [ 1237.704768][T24452] bond6 (unregistering): Released all slaves [ 1237.734958][T24452] bond7 (unregistering): Released all slaves [ 1237.782799][T24452] bond8 (unregistering): Released all slaves [ 1237.824908][T24452] bond9 (unregistering): Released all slaves [ 1237.864016][T24452] bond10 (unregistering): Released all slaves [ 1237.904317][T24452] bond11 (unregistering): (slave batadv0): Releasing active interface [ 1237.921682][T24452] batadv0: left promiscuous mode [ 1237.939777][T24452] batadv0: left allmulticast mode [ 1237.948503][T24452] bond11 (unregistering): Released all slaves [ 1237.977929][T24452] bond12 (unregistering): Released all slaves [ 1238.028835][T24452] bond13 (unregistering): Released all slaves [ 1238.077047][T24442] net_ratelimit: 29 callbacks suppressed [ 1238.077071][T24442] bond5: (slave .`): failed to get link speed/duplex [ 1238.236919][T24442] bond5: (slave .`): failed to get link speed/duplex [ 1238.367156][ T5369] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9647'. [ 1238.418573][T24452] !: left promiscuous mode [ 1238.491282][T24446] bond5: (slave .`): failed to get link speed/duplex [ 1238.536526][T24452] M: left promiscuous mode [ 1238.607787][T24446] bond5: (slave .`): failed to get link speed/duplex [ 1238.749107][T24446] bond5: (slave .`): failed to get link speed/duplex [ 1238.883182][ T4659] veth0_vlan: entered promiscuous mode [ 1238.925300][ T4659] veth1_vlan: entered promiscuous mode [ 1238.987539][ T1298] lec:lec_start_xmit: lec0:No lecd attached [ 1238.993764][T24444] bond5: (slave .`): failed to get link speed/duplex [ 1239.043873][ T4659] veth0_macvtap: entered promiscuous mode [ 1239.057525][ T4659] veth1_macvtap: entered promiscuous mode [ 1239.154886][ T4659] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1239.186998][T24446] bond5: (slave .`): failed to get link speed/duplex [ 1239.204281][ T4659] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1239.322270][T24452] tipc: Disabling bearer [ 1239.359268][T24452] tipc: Disabling bearer [ 1239.446225][T24452] tipc: Left network mode [ 1239.446631][T24454] bond5: (slave .`): failed to get link speed/duplex [ 1239.525340][T24442] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1239.594406][T24454] bond5: (slave .`): failed to get link speed/duplex [ 1239.626306][T24442] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1239.702441][T24442] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1239.748553][T24442] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1239.827469][T24439] bond5: (slave .`): failed to get link speed/duplex [ 1239.918812][ T5423] sctp: [Deprecated]: syz.1.9663 (pid 5423) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1239.918812][ T5423] Use struct sctp_sack_info instead [ 1240.073458][T24445] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1240.092816][T24445] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1240.215573][T24445] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1240.240456][T24445] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1240.932630][ T5459] sctp: [Deprecated]: syz.4.9674 (pid 5459) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1240.932630][ T5459] Use struct sctp_sack_info instead [ 1241.619809][ T5498] sctp: [Deprecated]: syz.1.9688 (pid 5498) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1241.619809][ T5498] Use struct sctp_sack_info instead [ 1242.384435][T24452] hsr_slave_0: left promiscuous mode [ 1242.398476][T24452] hsr_slave_1: left promiscuous mode [ 1243.648524][T24442] net_ratelimit: 16 callbacks suppressed [ 1243.648550][T24442] bond5: (slave .`): failed to get link speed/duplex [ 1243.798753][T24442] bond5: (slave .`): failed to get link speed/duplex [ 1243.945613][T24446] bond5: (slave .`): failed to get link speed/duplex [ 1243.970383][ T5592] netlink: 'syz.3.9728': attribute type 41 has an invalid length. [ 1244.090507][T24446] bond5: (slave .`): failed to get link speed/duplex [ 1244.090729][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5100 ms [ 1244.105308][ C1] lec:lec_tx_timeout: lec0 [ 1244.217523][T24452] IPVS: stop unused estimator thread 0... [ 1244.237718][T24445] bond5: (slave .`): failed to get link speed/duplex [ 1244.398992][ T5613] bridge0: port 1(bridge_slave_0) entered disabled state [ 1244.417244][ T5613] bridge0: port 2(bridge_slave_1) entered disabled state [ 1244.560020][ T5617] netlink: 7 bytes leftover after parsing attributes in process `syz.3.9738'. [ 1244.756560][T24454] bond5: (slave .`): failed to get link speed/duplex [ 1244.897062][T24454] bond5: (slave .`): failed to get link speed/duplex [ 1245.006562][T24445] bond5: (slave .`): failed to get link speed/duplex [ 1245.117039][T24454] bond5: (slave .`): failed to get link speed/duplex [ 1245.236726][T24452] bond5: (slave .`): failed to get link speed/duplex [ 1246.565058][ T5724] bond1: option arp_all_targets: invalid value (18446744073709551612) [ 1246.586121][ T5724] bond1 (unregistering): Released all slaves [ 1246.813850][ T5740] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9792'. [ 1248.727320][T24454] net_ratelimit: 28 callbacks suppressed [ 1248.727344][T24454] bond5: (slave .`): failed to get link speed/duplex [ 1248.887428][T24445] bond5: (slave .`): failed to get link speed/duplex [ 1249.006988][T24454] bond5: (slave .`): failed to get link speed/duplex [ 1249.119613][T24444] bond5: (slave .`): failed to get link speed/duplex [ 1249.247626][T24444] bond5: (slave .`): failed to get link speed/duplex [ 1249.370813][T24445] bond5: (slave .`): failed to get link speed/duplex [ 1249.495586][T24452] bond5: (slave .`): failed to get link speed/duplex [ 1249.619690][T24452] bond5: (slave .`): failed to get link speed/duplex [ 1249.661845][ T5918] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9867'. [ 1249.697097][ T5918] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9867'. [ 1249.724580][ T5918] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9867'. [ 1249.752713][ T5924] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9869'. [ 1249.761797][T24446] bond5: (slave .`): failed to get link speed/duplex [ 1249.877317][T24446] bond5: (slave .`): failed to get link speed/duplex [ 1250.267976][ T5947] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1253.114496][ T6058] bond1: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 1253.162151][ T6058] bond1 (unregistering): Released all slaves [ 1253.335972][ T6073] netlink: 27 bytes leftover after parsing attributes in process `syz.3.9937'. [ 1253.337594][ T6075] xt_hashlimit: size too large, truncated to 1048576 [ 1253.723172][ T6089] xt_hashlimit: max too large, truncated to 1048576 [ 1253.819304][T24454] net_ratelimit: 32 callbacks suppressed [ 1253.819328][T24454] bond5: (slave .`): failed to get link speed/duplex [ 1253.956337][T24454] bond5: (slave .`): failed to get link speed/duplex [ 1254.089383][T24454] bond5: (slave .`): failed to get link speed/duplex [ 1254.217262][T24454] bond5: (slave .`): failed to get link speed/duplex [ 1254.337617][T24445] bond5: (slave .`): failed to get link speed/duplex [ 1254.391403][ T6129] xt_hashlimit: max too large, truncated to 1048576 [ 1254.447224][T24444] bond5: (slave .`): failed to get link speed/duplex [ 1254.587648][T24445] bond5: (slave .`): failed to get link speed/duplex [ 1254.707336][T24446] bond5: (slave .`): failed to get link speed/duplex [ 1254.827071][T24445] bond5: (slave .`): failed to get link speed/duplex [ 1254.940664][T24445] bond5: (slave .`): failed to get link speed/duplex [ 1255.268356][ T6162] xt_hashlimit: max too large, truncated to 1048576 [ 1258.856617][T24454] net_ratelimit: 34 callbacks suppressed [ 1258.856643][T24454] bond5: (slave .`): failed to get link speed/duplex [ 1258.874243][ T6358] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10067'. [ 1258.976663][T24445] bond5: (slave .`): failed to get link speed/duplex [ 1259.100757][T24445] bond5: (slave .`): failed to get link speed/duplex [ 1259.231701][T24445] bond5: (slave .`): failed to get link speed/duplex [ 1259.362180][T24446] bond5: (slave .`): failed to get link speed/duplex [ 1259.479989][T24445] bond5: (slave .`): failed to get link speed/duplex [ 1259.619115][T24445] bond5: (slave .`): failed to get link speed/duplex [ 1259.736657][T24445] bond5: (slave .`): failed to get link speed/duplex [ 1259.856595][T24445] bond5: (slave .`): failed to get link speed/duplex [ 1259.980530][T24454] bond5: (slave .`): failed to get link speed/duplex [ 1260.280408][ T6435] netlink: 27 bytes leftover after parsing attributes in process `syz.2.10104'. [ 1261.123847][ T6478] netlink: 27 bytes leftover after parsing attributes in process `syz.3.10125'. [ 1262.557190][ T6528] bridge0: port 1(bridge_slave_0) entered disabled state [ 1262.575440][ T6528] bridge0: port 2(bridge_slave_1) entered disabled state [ 1263.881759][T24442] net_ratelimit: 31 callbacks suppressed [ 1263.881785][T24442] bond5: (slave .`): failed to get link speed/duplex [ 1264.027019][T24446] bond5: (slave .`): failed to get link speed/duplex [ 1264.158917][T24454] bond5: (slave .`): failed to get link speed/duplex [ 1264.287027][T24442] bond5: (slave .`): failed to get link speed/duplex [ 1264.320827][ T6618] pim6reg1: entered promiscuous mode [ 1264.342328][ T6618] pim6reg1: entered allmulticast mode [ 1264.416664][T24445] bond5: (slave .`): failed to get link speed/duplex [ 1264.527367][T24454] bond5: (slave .`): failed to get link speed/duplex [ 1264.659760][T24452] bond5: (slave .`): failed to get link speed/duplex [ 1264.800255][ T6642] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1264.841231][T24454] bond5: (slave .`): failed to get link speed/duplex [ 1264.960403][T24454] bond5: (slave .`): failed to get link speed/duplex [ 1268.917208][T24446] net_ratelimit: 34 callbacks suppressed [ 1268.917232][T24446] bond5: (slave .`): failed to get link speed/duplex [ 1269.039926][T24446] bond5: (slave .`): failed to get link speed/duplex [ 1269.157076][T24446] bond5: (slave .`): failed to get link speed/duplex [ 1269.277426][T24446] bond5: (slave .`): failed to get link speed/duplex [ 1269.394800][T24442] bond5: (slave .`): failed to get link speed/duplex [ 1269.427481][ T6867] netlink: 7 bytes leftover after parsing attributes in process `syz.2.10305'. [ 1269.506997][T24455] bond5: (slave .`): failed to get link speed/duplex [ 1269.520044][ T6869] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1269.630416][T24455] bond5: (slave .`): failed to get link speed/duplex [ 1269.747085][T24452] bond5: (slave .`): failed to get link speed/duplex [ 1269.859495][T24455] bond5: (slave .`): failed to get link speed/duplex [ 1269.976574][T24455] bond5: (slave .`): failed to get link speed/duplex [ 1271.795059][ T6957] netlink: 27 bytes leftover after parsing attributes in process `syz.2.10342'. [ 1271.828369][ T6959] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 1272.250015][ T6986] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1272.971232][ T7009] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10365'. [ 1274.024279][T24454] net_ratelimit: 35 callbacks suppressed [ 1274.024304][T24454] bond5: (slave .`): failed to get link speed/duplex [ 1274.148129][T24454] bond5: (slave .`): failed to get link speed/duplex [ 1274.257195][T24445] bond5: (slave .`): failed to get link speed/duplex [ 1274.315606][T12299] lec:lec_start_xmit: lec0:No lecd attached [ 1274.376808][T24445] bond5: (slave .`): failed to get link speed/duplex [ 1274.491146][T24445] bond5: (slave .`): failed to get link speed/duplex [ 1274.607055][T24452] bond5: (slave .`): failed to get link speed/duplex [ 1274.717033][T24446] bond5: (slave .`): failed to get link speed/duplex [ 1274.826851][T24445] bond5: (slave .`): failed to get link speed/duplex [ 1274.940136][T24445] bond5: (slave .`): failed to get link speed/duplex [ 1275.069269][T24445] bond5: (slave .`): failed to get link speed/duplex [ 1275.452348][ T7133] netlink: 'syz.1.10423': attribute type 1 has an invalid length. [ 1275.544596][ T7133] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1275.621801][ T7141] bond1: (slave gretap1): making interface the new active one [ 1275.668875][ T7141] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 1276.440775][ T7192] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1277.565448][ T7233] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10468'. [ 1277.582804][ T7233] ip6gre1: entered promiscuous mode [ 1277.592115][ T7233] ip6gre1: entered allmulticast mode [ 1277.602458][ T7233] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1277.802503][ T7244] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10473'. [ 1278.245743][ T7267] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1278.569044][T24446] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1278.592696][T24446] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1278.601348][T17049] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1278.616718][T17049] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1278.767219][T17055] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1279.015359][ T7317] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10503'. [ 1279.110018][T24442] net_ratelimit: 33 callbacks suppressed [ 1279.110042][T24442] bond5: (slave .`): failed to get link speed/duplex [ 1279.277060][T24452] bond5: (slave .`): failed to get link speed/duplex [ 1279.397687][T24442] bond5: (slave .`): failed to get link speed/duplex [ 1279.506707][T24442] bond5: (slave .`): failed to get link speed/duplex [ 1279.626635][T24442] bond5: (slave .`): failed to get link speed/duplex [ 1279.739769][T24452] bond5: (slave .`): failed to get link speed/duplex [ 1279.856527][T24445] bond5: (slave .`): failed to get link speed/duplex [ 1279.966573][T24452] bond5: (slave .`): failed to get link speed/duplex [ 1280.087245][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5770 ms [ 1280.095356][ C1] lec:lec_tx_timeout: lec0 [ 1280.106775][T24445] bond5: (slave .`): failed to get link speed/duplex [ 1280.237229][T24454] bond5: (slave .`): failed to get link speed/duplex [ 1281.640816][ T7449] netlink: 27 bytes leftover after parsing attributes in process `syz.2.10563'. [ 1281.788786][ T7456] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1282.336638][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1284.156966][T24442] net_ratelimit: 34 callbacks suppressed [ 1284.156992][T24442] bond5: (slave .`): failed to get link speed/duplex [ 1284.287873][T24454] bond5: (slave .`): failed to get link speed/duplex [ 1284.396961][T24442] bond5: (slave .`): failed to get link speed/duplex [ 1284.508362][T24452] bond5: (slave .`): failed to get link speed/duplex [ 1284.616672][T24452] bond5: (slave .`): failed to get link speed/duplex [ 1284.736970][T24446] bond5: (slave .`): failed to get link speed/duplex [ 1284.848044][T24446] bond5: (slave .`): failed to get link speed/duplex [ 1284.959808][T24446] bond5: (slave .`): failed to get link speed/duplex [ 1285.077676][T24452] bond5: (slave .`): failed to get link speed/duplex [ 1285.219393][T24442] bond5: (slave .`): failed to get link speed/duplex [ 1285.332405][ T7627] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10645'. [ 1286.342832][ T7665] [ 1286.345703][ T7665] ============================= [ 1286.350851][ T7665] WARNING: suspicious RCU usage [ 1286.355806][ T7665] syzkaller #0 Not tainted [ 1286.360296][ T7665] ----------------------------- [ 1286.365172][ T7665] kernel/events/callchain.c:163 suspicious rcu_dereference_check() usage! [ 1286.373851][ T7665] [ 1286.373851][ T7665] other info that might help us debug this: [ 1286.373851][ T7665] [ 1286.384175][ T7665] [ 1286.384175][ T7665] rcu_scheduler_active = 2, debug_locks = 1 [ 1286.392343][ T7665] 1 lock held by syz.4.10661/7665: [ 1286.397554][ T7665] #0: ffffffff8e7604d8 (rcu_tasks_trace_srcu_struct){....}-{0:0}, at: rcu_read_lock_trace+0x25/0x110 [ 1286.409277][ T7665] [ 1286.409277][ T7665] stack backtrace: [ 1286.415203][ T7665] CPU: 0 UID: 0 PID: 7665 Comm: syz.4.10661 Not tainted syzkaller #0 PREEMPT(full) [ 1286.415235][ T7665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1286.415249][ T7665] Call Trace: [ 1286.415259][ T7665] [ 1286.415270][ T7665] dump_stack_lvl+0xe8/0x150 [ 1286.415307][ T7665] lockdep_rcu_suspicious+0x13f/0x1d0 [ 1286.415344][ T7665] get_callchain_entry+0x2b6/0x3c0 [ 1286.415383][ T7665] get_perf_callchain+0xd5/0x880 [ 1286.415424][ T7665] ? __pfx_get_perf_callchain+0x10/0x10 [ 1286.415460][ T7665] ? futex_unqueue+0x22/0x240 [ 1286.415485][ T7665] ? futex_unqueue+0x22/0x240 [ 1286.415507][ T7665] ? futex_unqueue+0x22/0x240 [ 1286.415540][ T7665] __bpf_get_stack+0x445/0xab0 [ 1286.415585][ T7665] ? __pfx___bpf_get_stack+0x10/0x10 [ 1286.415633][ T7665] bpf_get_stack+0x33/0x50 [ 1286.415663][ T7665] ? bpf_prog_42db8cfdf50901c9+0x46/0x4e [ 1286.415686][ T7665] bpf_get_stack_raw_tp+0x1a9/0x220 [ 1286.415724][ T7665] bpf_prog_42db8cfdf50901c9+0x46/0x4e [ 1286.415747][ T7665] bpf_prog_run_pin_on_cpu+0x3b4/0x470 [ 1286.415783][ T7665] bpf_prog_test_run_syscall+0x318/0x4c0 [ 1286.415813][ T7665] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10 [ 1286.415842][ T7665] ? __fget_files+0x2a/0x420 [ 1286.415877][ T7665] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10 [ 1286.415911][ T7665] bpf_prog_test_run+0x2c7/0x340 [ 1286.415938][ T7665] __sys_bpf+0x643/0x950 [ 1286.415984][ T7665] ? __pfx___sys_bpf+0x10/0x10 [ 1286.416042][ T7665] ? rcu_is_watching+0x15/0xb0 [ 1286.416084][ T7665] __x64_sys_bpf+0x7c/0x90 [ 1286.416116][ T7665] do_syscall_64+0x14d/0xf80 [ 1286.416137][ T7665] ? trace_irq_disable+0x3b/0x150 [ 1286.416169][ T7665] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1286.416191][ T7665] ? clear_bhb_loop+0x40/0x90 [ 1286.416220][ T7665] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1286.416244][ T7665] RIP: 0033:0x7f066ef9c799 [ 1286.416265][ T7665] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1286.416285][ T7665] RSP: 002b:00007f066fdf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1286.416309][ T7665] RAX: ffffffffffffffda RBX: 00007f066f215fa0 RCX: 00007f066ef9c799 [ 1286.416326][ T7665] RDX: 0000000000000010 RSI: 0000200000000740 RDI: 000000000000000a [ 1286.416341][ T7665] RBP: 00007f066f032bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1286.416355][ T7665] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1286.416369][ T7665] R13: 00007f066f216038 R14: 00007f066f215fa0 R15: 00007ffe18cbf968 [ 1286.416406][ T7665] [ 1289.266804][T24439] net_ratelimit: 33 callbacks suppressed [ 1289.266830][T24439] bond5: (slave .`): failed to get link speed/duplex [ 1289.386905][T24445] bond5: (slave .`): failed to get link speed/duplex [ 1289.497270][T24454] bond5: (slave .`): failed to get link speed/duplex [ 1289.606957][T24445] bond5: (slave .`): failed to get link speed/duplex [ 1289.716937][T24439] bond5: (slave .`): failed to get link speed/duplex [ 1289.826984][T24445] bond5: (slave .`): failed to get link speed/duplex [ 1289.937046][T24439] bond5: (slave .`): failed to get link speed/duplex [ 1290.046966][T24454] bond5: (slave .`): failed to get link speed/duplex [ 1290.167794][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1290.171973][T24454] bond5: (slave .`): failed to get link speed/duplex [ 1290.286878][T24442] bond5: (slave .`): failed to get link speed/duplex [ 1292.246523][ T5826] Bluetooth: hci5: command 0x0406 tx timeout [ 1294.316635][T24452] net_ratelimit: 35 callbacks suppressed [ 1294.316662][T24452] bond5: (slave .`): failed to get link speed/duplex [ 1294.447050][T24452] bond5: (slave .`): failed to get link speed/duplex [ 1294.556939][T24454] bond5: (slave .`): failed to get link speed/duplex [ 1294.666908][T24442] bond5: (slave .`): failed to get link speed/duplex [ 1294.776862][T24442] bond5: (slave .`): failed to get link speed/duplex [ 1294.896875][T24442] bond5: (slave .`): failed to get link speed/duplex [ 1295.006978][T24442] bond5: (slave .`): failed to get link speed/duplex [ 1295.116905][T24442] bond5: (slave .`): failed to get link speed/duplex [ 1295.226562][T24454] bond5: (slave .`): failed to get link speed/duplex [ 1295.336910][T24439] bond5: (slave .`): failed to get link speed/duplex