last executing test programs: 1.890069003s ago: executing program 1 (id=1745): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="14000000040000000800000006"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000280), &(0x7f00000000c0)}, 0x20) 1.795227874s ago: executing program 3 (id=1746): r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) recvmmsg(r0, &(0x7f0000004800)=[{{0x0, 0x0, 0x0}, 0xc5a4}], 0x1, 0x40000000, 0x0) 1.795089639s ago: executing program 2 (id=1747): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, 0x0, &(0x7f00000002c0)) 1.760350465s ago: executing program 2 (id=1748): r0 = socket$key(0xf, 0x3, 0x2) recvfrom(r0, 0x0, 0xfffffffffffffec7, 0x10120, 0x0, 0x0) 1.713259882s ago: executing program 0 (id=1749): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={0x0, 0x0, 0x1000}, 0x20) 1.651259286s ago: executing program 2 (id=1750): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) recvmsg(r0, &(0x7f0000000440)={&(0x7f0000000100)=@hci, 0x80, 0x0}, 0x2020) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000080)) 1.629816361s ago: executing program 4 (id=1751): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x1234, 0x32}, 0xa, @in6=@loopback, 0x0, 0x1}}, 0xe8) sendto$inet6(r0, &(0x7f0000000200)='tri', 0x3, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 1.55091185s ago: executing program 1 (id=1752): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x3a}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001b80)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 1.470893905s ago: executing program 3 (id=1753): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c02000019000100000003000000220000000000000000000000ffffac1414aa0000000000000000000000000000000000000003000000000200002008000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000000000000000000000000000000000001d00000000000000000000000000000000000002000000000000000000000000dd020000000000000000000000000000000000000000000084010500fe"], 0x23c}}, 0x0) 1.408617707s ago: executing program 0 (id=1754): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fcdbdf2503100000580001800d0001007564703a73797a310000000044000400200001"], 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x0) 1.335297608s ago: executing program 4 (id=1755): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0xa6, &(0x7f00000003c0)=""/166}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map, r0, 0x7}, 0x10) 1.242640792s ago: executing program 1 (id=1756): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000380)={0x6, 0x2000027, 0x20000000, 0x1}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000a0000000c00008008"], 0x20}, 0x1, 0x0, 0x0, 0x200c8805}, 0x0) 1.239670929s ago: executing program 3 (id=1757): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4, @multicast2}, 0x10) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000007f80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x120, 0x801}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000075c0)=[@rights={{0x10}}], 0x10, 0x20000000}}], 0x2, 0x8001) sendmmsg(r0, &(0x7f0000007fc0), 0x400000000000097, 0x0) 1.119610436s ago: executing program 0 (id=1758): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0xfffffffe, 0x0, 0x6, 0x2, 0x2, 0x9, 0x3}}) 1.03513757s ago: executing program 4 (id=1759): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000040}, 0x88c0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="050000000b0000004000000005"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000440), &(0x7f0000000700), 0x1003, r0}, 0x38) 936.667406ms ago: executing program 1 (id=1760): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_TIOCINQ(r0, 0x541b, 0x0) 742.696082ms ago: executing program 0 (id=1761): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x84, r1, 0x1, 0x70bd28, 0x0, {}, [@WGDEVICE_A_PEERS={0x54, 0x8, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "491bc0be1dc1f88092e741a88b64f6dd9218ad21b44b472e44f1d0807ee6675c"}]}, {0x4}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x84}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) 635.413925ms ago: executing program 3 (id=1762): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000280), &(0x7f0000000240)}, 0x20) 635.247849ms ago: executing program 2 (id=1763): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="06000000040000000800000009"], 0x50) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f00000004c0)="df034affffffffffff0000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x4c) 634.795691ms ago: executing program 4 (id=1764): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c40)=ANY=[@ANYBLOB="d40000001b001d0328bd7000fcdbdf25ffffffff000000000000000000000000fe8000000000000000000000000000264e2000014e24040002000000870000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000000000000000100010000000000f4ffffffffffffff04000000000000000200000000000000ba410000000091ad07000000000000000000008000000000ffffff7f0000000003000000000000000400000000000000080000000000000003000000b86b"], 0xd4}}, 0x0) 548.909085ms ago: executing program 1 (id=1765): r0 = socket$netlink(0x10, 0x3, 0x8000000004) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x14, 0x0, 0xb, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x200048c4}, 0x10) 545.197646ms ago: executing program 0 (id=1766): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) r1 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) bind$xdp(r0, &(0x7f0000000040)={0x2c, 0x3, r2, 0x108802}, 0x10) 474.732817ms ago: executing program 3 (id=1767): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x6, 0xc0b, 0x40001, {0x77359400}, {0x0, 0x2710}, {0x0, 0x0, 0x1}, 0x1, @canfd={{}, 0x3f, 0x1, 0x0, 0x0, "645b6048a2e4931133f6d9919fd48557d76811cd874f3c107bbfc1c8831026d40798a2be4cc414e02216198977dc3d41ed0880c64c39e5f4059bae641e515112"}}, 0x80}, 0x1, 0x0, 0x0, 0x100}, 0x0) 445.597284ms ago: executing program 4 (id=1768): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000140)={r1, 0x1, 0x0, @local}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={r1, 0x1, 0x6, @random="d628cc75124a"}, 0x10) 271.444881ms ago: executing program 1 (id=1769): bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) 222.818316ms ago: executing program 0 (id=1770): unshare(0x6a060000) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x70b78, 0x10c23}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0x400}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc, 0x22, 0xbe68}]}}}]}, 0x4c}}, 0x24000010) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x2) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000042}, 0x90) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r3, &(0x7f0000000240), &(0x7f0000000140)=@tcp6=r1}, 0x20) sendmmsg$inet6(r1, &(0x7f0000002440), 0x400, 0x41) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 222.663447ms ago: executing program 2 (id=1771): r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x40, 0x2}}, 0x10) 222.561917ms ago: executing program 3 (id=1772): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000040)="120000001200e7ef007b00000000000000a1", 0x12, 0x4044084, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) recvmmsg(r0, &(0x7f00000037c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2040000, 0x0) 222.51612ms ago: executing program 4 (id=1773): unshare(0x20000400) r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, 0x0, 0x0) 0s ago: executing program 2 (id=1774): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x3, &(0x7f00000001c0)=@framed, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x11}, 0x94) kernel console output (not intermixed with test programs): 109.735599][ T6468] RSP: 002b:00007f4ec6f15028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 109.735621][ T6468] RAX: ffffffffffffffda RBX: 00007f4ec6225fa0 RCX: 00007f4ec5f9e159 [ 109.735636][ T6468] RDX: 0000000000000094 RSI: 0000200000000400 RDI: 0000000000000005 [ 109.735649][ T6468] RBP: 00007f4ec6f15090 R08: 0000000000000000 R09: 0000000000000000 [ 109.735661][ T6468] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 109.735673][ T6468] R13: 00007f4ec6226038 R14: 00007f4ec6225fa0 R15: 00007ffeb2d133c8 [ 109.735705][ T6468] [ 109.770218][ T6465] bridge0: port 4(bond0) entered blocking state [ 109.773561][ T6465] bridge0: port 4(bond0) entered disabled state [ 109.773823][ T6465] bond0: entered allmulticast mode [ 109.773840][ T6465] bond_slave_0: entered allmulticast mode [ 109.773871][ T6465] bond_slave_1: entered allmulticast mode [ 109.790739][ T6465] bond0: entered promiscuous mode [ 109.790763][ T6465] bond_slave_0: entered promiscuous mode [ 109.790953][ T6465] bond_slave_1: entered promiscuous mode [ 109.793749][ T6465] bridge0: port 4(bond0) entered blocking state [ 109.793881][ T6465] bridge0: port 4(bond0) entered forwarding state [ 109.834808][ T6465] netlink: 40 bytes leftover after parsing attributes in process `syz.0.182'. [ 110.094711][ T6465] hsr_slave_1 (unregistering): left promiscuous mode [ 110.505893][ T5618] Bluetooth: hci0: command 0x0c57 tx timeout [ 110.769693][ T6508] FAULT_INJECTION: forcing a failure. [ 110.769693][ T6508] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 110.769725][ T6508] CPU: 1 UID: 0 PID: 6508 Comm: syz.0.195 Not tainted syzkaller #0 PREEMPT(full) [ 110.769746][ T6508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 110.769757][ T6508] Call Trace: [ 110.769765][ T6508] [ 110.769774][ T6508] dump_stack_lvl+0xe8/0x150 [ 110.769807][ T6508] should_fail_ex+0x410/0x560 [ 110.769835][ T6508] _copy_to_user+0x31/0xb0 [ 110.769862][ T6508] bpf_verifier_vlog+0x496/0x900 [ 110.769904][ T6508] bpf_verifier_log_write+0x11d/0x1a0 [ 110.769928][ T6508] ? __might_fault+0xaf/0x130 [ 110.769956][ T6508] ? __pfx_bpf_verifier_log_write+0x10/0x10 [ 110.769978][ T6508] ? __might_fault+0xaf/0x130 [ 110.770009][ T6508] ? bpf_vlog_reset+0x2aa/0x340 [ 110.770031][ T6508] print_insn_state+0x106/0x170 [ 110.770055][ T6508] do_check_common+0x2d55/0x5d30 [ 110.770119][ T6508] ? __pfx_do_check_common+0x10/0x10 [ 110.770144][ T6508] ? __pfx_verbose+0x10/0x10 [ 110.770161][ T6508] ? __pfx_bpf_disasm_kfunc_name+0x10/0x10 [ 110.770193][ T6508] bpf_check+0x2639/0x2e10 [ 110.770226][ T6508] ? ktime_get_with_offset+0x93/0x2d0 [ 110.770251][ T6508] ? __pfx_bpf_check+0x10/0x10 [ 110.770276][ T6508] ? bpf_obj_name_cpy+0x194/0x1e0 [ 110.770309][ T6508] bpf_prog_load+0x14d6/0x1c20 [ 110.770347][ T6508] ? __pfx_bpf_prog_load+0x10/0x10 [ 110.770398][ T6508] __sys_bpf+0xd0d/0xd90 [ 110.770430][ T6508] ? __pfx___sys_bpf+0x10/0x10 [ 110.770465][ T6508] ? __fget_files+0x2a/0x420 [ 110.770512][ T6508] ? ksys_write+0x242/0x270 [ 110.770544][ T6508] ? __pfx_ksys_write+0x10/0x10 [ 110.770579][ T6508] __x64_sys_bpf+0xba/0xd0 [ 110.770603][ T6508] do_syscall_64+0x166/0x520 [ 110.770626][ T6508] ? trace_irq_disable+0x3b/0x140 [ 110.770646][ T6508] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.770666][ T6508] ? clear_bhb_loop+0x70/0xc0 [ 110.770691][ T6508] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.770710][ T6508] RIP: 0033:0x7efe61f9e159 [ 110.770730][ T6508] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 110.770746][ T6508] RSP: 002b:00007efe601f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 110.770769][ T6508] RAX: ffffffffffffffda RBX: 00007efe62225fa0 RCX: 00007efe61f9e159 [ 110.770784][ T6508] RDX: 0000000000000094 RSI: 0000200000000400 RDI: 0000000000000005 [ 110.770796][ T6508] RBP: 00007efe601f6090 R08: 0000000000000000 R09: 0000000000000000 [ 110.770809][ T6508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 110.770821][ T6508] R13: 00007efe62226038 R14: 00007efe62225fa0 R15: 00007ffdd204c938 [ 110.770854][ T6508] [ 111.170020][ T6513] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 111.171375][ T6521] __nla_validate_parse: 2 callbacks suppressed [ 111.171406][ T6521] netlink: 56 bytes leftover after parsing attributes in process `syz.0.199'. [ 111.299160][ T6521] netlink: 20 bytes leftover after parsing attributes in process `syz.0.199'. [ 111.300461][ T6521] netlink: 8 bytes leftover after parsing attributes in process `syz.0.199'. [ 111.570935][ T6538] netlink: 20 bytes leftover after parsing attributes in process `syz.2.203'. [ 111.601497][ T6544] netlink: 4 bytes leftover after parsing attributes in process `syz.4.201'. [ 111.893192][ T6547] oƒs-s!: entered promiscuous mode [ 112.069810][ T6557] openvswitch: netlink: Invalid VLAN frame [ 112.245919][ T6553] ovs-s!: entered promiscuous mode [ 112.537494][ T6572] netlink: 8 bytes leftover after parsing attributes in process `syz.4.210'. [ 112.537530][ T6572] netlink: 'syz.4.210': attribute type 10 has an invalid length. [ 112.537546][ T6572] netlink: 12 bytes leftover after parsing attributes in process `syz.4.210'. [ 112.640691][ T6582] netlink: 8 bytes leftover after parsing attributes in process `syz.4.210'. [ 112.640717][ T6582] netlink: 'syz.4.210': attribute type 10 has an invalid length. [ 112.640727][ T6582] netlink: 12 bytes leftover after parsing attributes in process `syz.4.210'. [ 112.643488][ T6572] geneve2: entered promiscuous mode [ 112.643510][ T6572] geneve2: entered allmulticast mode [ 112.660972][ T6577] netlink: 4 bytes leftover after parsing attributes in process `syz.3.211'. [ 114.565935][ T6618] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 115.279247][ T6643] openvswitch: netlink: Flow key attr not present in new flow. [ 115.345196][ T6673] gretap1: entered promiscuous mode [ 115.518631][ T6670] bridge0: entered promiscuous mode [ 115.518657][ T6670] bridge0: entered allmulticast mode [ 115.742515][ T6711] tipc: Enabling of bearer rejected, media not registered [ 116.201777][ T6726] __nla_validate_parse: 8 callbacks suppressed [ 116.201802][ T6726] netlink: 20 bytes leftover after parsing attributes in process `syz.3.229'. [ 116.522457][ T6730] netlink: 'syz.3.230': attribute type 2 has an invalid length. [ 116.611150][ T6735] netlink: 4 bytes leftover after parsing attributes in process `syz.0.231'. [ 116.684543][ T6737] openvswitch: netlink: IP tunnel dst address not specified [ 116.684582][ T6737] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 117.044589][ T6752] netlink: 132 bytes leftover after parsing attributes in process `syz.2.235'. [ 117.062932][ T6754] netlink: 36 bytes leftover after parsing attributes in process `syz.3.236'. [ 117.067378][ T6749] syzkaller0: entered promiscuous mode [ 117.067401][ T6749] syzkaller0: entered allmulticast mode [ 118.556276][ T6764] netlink: 48 bytes leftover after parsing attributes in process `syz.1.239'. [ 119.338394][ T6767] netlink: 20 bytes leftover after parsing attributes in process `syz.2.240'. [ 119.744005][ T6794] netlink: 132 bytes leftover after parsing attributes in process `syz.3.247'. [ 119.871654][ T6796] netlink: 4 bytes leftover after parsing attributes in process `syz.1.248'. [ 120.174455][ T6810] netlink: 4412 bytes leftover after parsing attributes in process `syz.4.251'. [ 120.232422][ T6813] netlink: 'syz.3.252': attribute type 1 has an invalid length. [ 120.232445][ T6813] netlink: 200 bytes leftover after parsing attributes in process `syz.3.252'. [ 120.360833][ T6819] netlink: 'syz.0.253': attribute type 1 has an invalid length. [ 120.360858][ T6819] netlink: 'syz.0.253': attribute type 3 has an invalid length. [ 120.389491][ T6819] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 122.492055][ T6830] __nla_validate_parse: 2 callbacks suppressed [ 122.492076][ T6830] netlink: 20 bytes leftover after parsing attributes in process `syz.0.255'. [ 122.759105][ T6866] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 122.759141][ T6866] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.832095][ T6870] netlink: 12 bytes leftover after parsing attributes in process `syz.4.262'. [ 122.832124][ T6870] netlink: 12 bytes leftover after parsing attributes in process `syz.4.262'. [ 122.844452][ T6878] netlink: 4 bytes leftover after parsing attributes in process `syz.1.264'. [ 122.887411][ T6874] netlink: 76 bytes leftover after parsing attributes in process `syz.2.263'. [ 123.184478][ T6896] netlink: 4 bytes leftover after parsing attributes in process `syz.0.267'. [ 123.379373][ T6905] netlink: 132 bytes leftover after parsing attributes in process `syz.2.269'. [ 123.403071][ T6908] syzkaller0: entered promiscuous mode [ 123.403095][ T6908] syzkaller0: entered allmulticast mode [ 123.411544][ T6902] netlink: 'syz.1.268': attribute type 1 has an invalid length. [ 123.470841][ T6908] netlink: 28 bytes leftover after parsing attributes in process `syz.4.270'. [ 123.596540][ T1449] IPVS: starting estimator thread 0... [ 123.630148][ T6910] gretap1: entered allmulticast mode [ 123.655885][ T6910] bond1: (slave gretap1): making interface the new active one [ 123.659881][ T6910] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 123.686684][ T6916] IPVS: using max 26 ests per chain, 62400 per kthread [ 123.744902][ T6918] xt_hashlimit: size too large, truncated to 1048576 [ 123.751690][ T31] audit: type=1800 audit(1790272791.052:3): pid=6887 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.265" name="memory.events" dev="tmpfs" ino=305 res=0 errno=0 [ 124.165355][ T6929] netlink: 132 bytes leftover after parsing attributes in process `syz.0.273'. [ 124.188364][ T6929] netlink: 20 bytes leftover after parsing attributes in process `syz.0.273'. [ 124.226132][ T6927] syz_tun: entered allmulticast mode [ 124.294744][ T6927] dvmrp8: entered allmulticast mode [ 124.314981][ T6934] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 124.749980][ T5280] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 124.922096][ T6926] syz_tun: left allmulticast mode [ 125.505490][ T6975] : renamed from bond0 (while UP) [ 125.834954][ T6990] IPVS: sync thread started: state = BACKUP, mcast_ifn = macsec0, syncid = 3, id = 0 [ 125.963085][ T6992] openvswitch: netlink: Message has 8 unknown bytes. [ 125.963126][ T6992] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 126.373658][ T7009] syzkaller0: entered allmulticast mode [ 126.729163][ T7020] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 126.779051][ T7026] gre1: entered promiscuous mode [ 127.199321][ T7048] netlink: 'syz.0.299': attribute type 9 has an invalid length. [ 127.211904][ T7045] syzkaller1: entered promiscuous mode [ 127.211928][ T7045] syzkaller1: entered allmulticast mode [ 127.530942][ T7043] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.889533][ T7079] __nla_validate_parse: 10 callbacks suppressed [ 127.889566][ T7079] netlink: 4 bytes leftover after parsing attributes in process `syz.3.302'. [ 128.766970][ T7091] smbdirect: ib_dev[s`z1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 128.766998][ T7091] smbdirect: ib_dev[s`z1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 128.767021][ T7091] smbdirect: ib_dev[s`z1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 128.769563][ T7091] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 128.828639][ T7091] infiniband s`z1: RDMA CMA: cma_listen_on_dev, error -98 [ 128.894145][ T7093] smbdirect: ib_dev[s`z1] renamed to [sy] [ 130.351428][ T7051] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 130.661357][ T7104] netlink: 132 bytes leftover after parsing attributes in process `syz.0.308'. [ 130.975806][ T7117] tipc: Enabling of bearer rejected, failed to enable media [ 131.017784][ T7117] tipc: Enabling of bearer rejected, failed to enable media [ 131.790657][ T7133] netlink: 4 bytes leftover after parsing attributes in process `syz.2.316'. [ 131.832018][ T7131] netlink: 20 bytes leftover after parsing attributes in process `syz.4.314'. [ 133.150575][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.150647][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.288604][ T7138] netlink: 4912 bytes leftover after parsing attributes in process `syz.0.317'. [ 133.623920][ T7148] netlink: 12 bytes leftover after parsing attributes in process `syz.2.318'. [ 134.473716][ T7170] xt_hashlimit: size too large, truncated to 1048576 [ 134.685645][ T7171] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 134.896953][ T7196] netlink: 4 bytes leftover after parsing attributes in process `syz.4.328'. [ 135.311493][ T7204] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.329'. [ 135.329463][ T7204] netlink: 20 bytes leftover after parsing attributes in process `syz.0.329'. [ 135.401590][ T7205] netlink: 8 bytes leftover after parsing attributes in process `syz.0.329'. [ 135.514875][ T7211] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 135.592771][ T7216] netlink: 'syz.2.333': attribute type 1 has an invalid length. [ 135.911988][ T7229] netlink: 'syz.4.335': attribute type 1 has an invalid length. [ 135.912014][ T7229] netlink: 'syz.4.335': attribute type 2 has an invalid length. [ 136.013673][ T7234] netlink: 104 bytes leftover after parsing attributes in process `syz.0.334'. [ 136.032927][ T7243] netlink: 104 bytes leftover after parsing attributes in process `syz.0.334'. [ 136.253689][ T7247] geneve3: entered promiscuous mode [ 137.111432][ T7274] x_tables: duplicate underflow at hook 1 [ 137.208393][ T7284] netlink: 112 bytes leftover after parsing attributes in process `syz.3.341'. [ 137.258765][ T7280] netlink: 12 bytes leftover after parsing attributes in process `syz.0.344'. [ 137.880682][ T7290] virtio_blk virtio4: 1/0/0 default/read/poll queues [ 137.884140][ T7290] virtio_blk virtio4: [vda] 262144 512-byte logical blocks (134 MB/128 MiB) [ 138.240324][ T7308] netlink: 'syz.2.348': attribute type 1 has an invalid length. [ 138.277781][ T7314] openvswitch: netlink: Flow actions attr not present in new flow. [ 138.417005][ T7308] 8021q: adding VLAN 0 to HW filter on device bond2 [ 138.450686][ T7318] __nla_validate_parse: 4 callbacks suppressed [ 138.450703][ T7318] netlink: 28 bytes leftover after parsing attributes in process `syz.4.352'. [ 138.474920][ T7316] bond2: (slave veth3): Enslaving as an active interface with a down link [ 138.484981][ T7322] netlink: 'syz.3.353': attribute type 1 has an invalid length. [ 138.503244][ T7313] bond1: entered promiscuous mode [ 138.503563][ T7313] 8021q: adding VLAN 0 to HW filter on device bond1 [ 138.504081][ T7314] netlink: 12 bytes leftover after parsing attributes in process `syz.1.350'. [ 138.569285][ T7317] ipvlan2: left promiscuous mode [ 138.569312][ T7317] ipvlan2: left allmulticast mode [ 138.569329][ T7317] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 138.573096][ T7317] 8021q: adding VLAN 0 to HW filter on device bond1 [ 138.576596][ T7317] geneve3: left promiscuous mode [ 138.627027][ T7308] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 138.629436][ T7308] bond2: (slave batadv1): making interface the new active one [ 138.630514][ T7308] batadv1: entered promiscuous mode [ 138.630840][ T7308] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 138.680220][ T7322] 8021q: adding VLAN 0 to HW filter on device bond1 [ 138.746336][ T7322] netlink: 24 bytes leftover after parsing attributes in process `syz.3.353'. [ 138.797665][ T7324] bond1: (slave veth0_to_bond): making interface the new active one [ 138.816100][ T7324] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 138.873698][ T7313] bridge1: entered promiscuous mode [ 138.874193][ T7313] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 138.927308][ T7320] macvlan2: entered promiscuous mode [ 138.927333][ T7320] macvlan2: entered allmulticast mode [ 138.928326][ T7320] bond1: entered promiscuous mode [ 138.928345][ T7320] veth0_to_bond: entered promiscuous mode [ 138.930887][ T7320] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 138.931773][ T7320] bond1: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 138.932264][ T7320] bond1: left promiscuous mode [ 138.932281][ T7320] veth0_to_bond: left promiscuous mode [ 139.036861][ T145] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 139.036899][ T145] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 139.255935][ T7340] netlink: 'syz.3.359': attribute type 1 has an invalid length. [ 139.269294][ T7338] netlink: 'syz.1.358': attribute type 2 has an invalid length. [ 139.370075][ T50] IPVS: starting estimator thread 0... [ 139.408662][ T7340] 8021q: adding VLAN 0 to HW filter on device bond2 [ 139.456248][ T43] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 139.456285][ T43] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 139.458408][ T7348] IPVS: using max 23 ests per chain, 55200 per kthread [ 139.473230][ T43] bond2: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 139.507199][ T12] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 139.507235][ T12] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 139.525274][ T59] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 139.525311][ T59] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 139.534099][ T7356] netlink: 4 bytes leftover after parsing attributes in process `syz.4.362'. [ 139.580039][ T7347] syzkaller0: entered promiscuous mode [ 139.580059][ T7347] syzkaller0: entered allmulticast mode [ 139.604962][ T7347] netlink: 4 bytes leftover after parsing attributes in process `syz.0.361'. [ 139.653719][ T7347] tipc: Started in network mode [ 139.653738][ T7347] tipc: Node identity , cluster identity 4711 [ 139.653755][ T7347] tipc: Failed to obtain node identity [ 139.653783][ T7347] tipc: Enabling of bearer rejected, failed to enable media [ 139.657333][ T7350] tipc: Started in network mode [ 139.657348][ T7350] tipc: Node identity , cluster identity 4711 [ 139.657360][ T7350] tipc: Failed to obtain node identity [ 139.657384][ T7350] tipc: Enabling of bearer rejected, failed to enable media [ 140.258882][ T7384] netlink: 72 bytes leftover after parsing attributes in process `syz.4.370'. [ 140.258912][ T7384] netlink: 72 bytes leftover after parsing attributes in process `syz.4.370'. [ 140.810843][ T7409] netlink: 4 bytes leftover after parsing attributes in process `syz.4.378'. [ 140.931336][ T7405] netlink: 4 bytes leftover after parsing attributes in process `syz.3.376'. [ 141.204500][ T7423] netlink: 8 bytes leftover after parsing attributes in process `syz.2.382'. [ 141.291773][ T7428] netlink: 'syz.1.385': attribute type 1 has an invalid length. [ 141.347032][ T7428] bond0: entered promiscuous mode [ 141.349332][ T7428] 8021q: adding VLAN 0 to HW filter on device bond0 [ 141.388187][ T7429] bond0: (slave bridge2): making interface the new active one [ 141.388212][ T7429] bridge2: entered promiscuous mode [ 141.391142][ T7429] bond0: (slave bridge2): Enslaving as an active interface with an up link [ 141.437138][ T7430] bond0: (slave bridge3): Enslaving as a backup interface with an up link [ 142.133791][ T7439] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.134710][ T7439] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.391488][ T7439] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 142.417501][ T7439] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 142.593286][ T7439] gretap1: left allmulticast mode [ 142.647031][ T12] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 142.647069][ T12] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.647116][ T12] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 142.647140][ T12] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.647170][ T12] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 142.647192][ T12] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.647223][ T12] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 142.647246][ T12] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.169854][ T7513] netlink: 'syz.3.404': attribute type 1 has an invalid length. [ 144.169877][ T7513] __nla_validate_parse: 1 callbacks suppressed [ 144.169888][ T7513] netlink: 244 bytes leftover after parsing attributes in process `syz.3.404'. [ 144.169903][ T7513] NCSI netlink: No device for ifindex 0 [ 144.248309][ T7511] netlink: 96 bytes leftover after parsing attributes in process `syz.0.405'. [ 144.426818][ T7521] netlink: 'syz.3.409': attribute type 11 has an invalid length. [ 144.471289][ T7519] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.471944][ T7519] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.479449][ T7519] bridge0: entered allmulticast mode [ 144.531260][ T7519] bridge_slave_1: left allmulticast mode [ 144.531289][ T7519] bridge_slave_1: left promiscuous mode [ 144.531902][ T7519] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.643784][ T7519] bridge_slave_0: left allmulticast mode [ 144.643817][ T7519] bridge_slave_0: left promiscuous mode [ 144.644656][ T7519] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.018339][ T7531] netlink: 'syz.4.411': attribute type 1 has an invalid length. [ 145.137956][ T7547] netlink: 4 bytes leftover after parsing attributes in process `syz.1.415'. [ 145.152022][ T7527] syzkaller0: entered promiscuous mode [ 145.152047][ T7527] syzkaller0: entered allmulticast mode [ 145.162032][ T145] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 145.162089][ T145] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 145.162121][ T145] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 145.608926][ T7565] netlink: 48 bytes leftover after parsing attributes in process `syz.2.417'. [ 145.643388][ T7566] netlink: 16 bytes leftover after parsing attributes in process `syz.0.419'. [ 147.294594][ T7553] team0 (unregistering): Port device team_slave_0 removed [ 147.316798][ T7553] team0 (unregistering): Port device team_slave_1 removed [ 147.396014][ T7583] netlink: 4 bytes leftover after parsing attributes in process `syz.4.423'. [ 147.445510][ T59] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 147.742546][ T7594] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 147.841188][ T7606] netlink: 4 bytes leftover after parsing attributes in process `syz.3.430'. [ 148.191121][ T7617] ovs-s!: entered promiscuous mode [ 148.213678][ T7619] netlink: 632 bytes leftover after parsing attributes in process `syz.3.433'. [ 148.218997][ T7619] SET target dimension over the limit! [ 148.312958][ T7621] batman_adv: batadv0: Adding interface: macvtap1 [ 148.312978][ T7621] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 148.313004][ T7621] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 148.534036][ T7635] C: renamed from veth1_to_team (while UP) [ 148.549062][ T7635] netlink: 'syz.2.437': attribute type 1 has an invalid length. [ 148.550365][ T7635] netlink: 116 bytes leftover after parsing attributes in process `syz.2.437'. [ 148.551136][ T7635] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 148.929383][ T7643] Cannot find set identified by id 65534 to match [ 148.949394][ T7647] netlink: 'syz.1.441': attribute type 3 has an invalid length. [ 148.949420][ T7647] netlink: 646 bytes leftover after parsing attributes in process `syz.1.441'. [ 149.160842][ T7649] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 149.160869][ T7649] bridge1: entered allmulticast mode [ 149.332472][ T7655] netlink: 4 bytes leftover after parsing attributes in process `syz.1.443'. [ 149.350581][ T7657] netlink: 4 bytes leftover after parsing attributes in process `syz.4.445'. [ 149.686966][ T7670] netlink: 'syz.2.448': attribute type 1 has an invalid length. [ 149.716779][ T7674] netlink: 12 bytes leftover after parsing attributes in process `syz.3.447'. [ 149.723888][ T7670] 8021q: adding VLAN 0 to HW filter on device bond3 [ 149.783438][ T7677] bond3: (slave geneve4): making interface the new active one [ 149.796966][ T7677] bond3: (slave geneve4): Enslaving as an active interface with an up link [ 149.819759][ T7668] netlink: 'syz.3.447': attribute type 1 has an invalid length. [ 149.819784][ T7668] netlink: 224 bytes leftover after parsing attributes in process `syz.3.447'. [ 149.945029][ T12] batadv1: left promiscuous mode [ 150.221957][ T7691] netlink: 'syz.1.453': attribute type 1 has an invalid length. [ 150.311373][ T7693] netlink: 56 bytes leftover after parsing attributes in process `syz.0.454'. [ 150.754131][ T7717] netlink: 'syz.4.460': attribute type 1 has an invalid length. [ 150.828351][ T7717] 8021q: adding VLAN 0 to HW filter on device bond2 [ 150.952147][ T7723] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 151.047955][ T7730] netlink: 36 bytes leftover after parsing attributes in process `syz.2.464'. [ 151.100997][ T7739] netlink: 4 bytes leftover after parsing attributes in process `syz.4.463'. [ 151.346078][ T7749] netlink: 12 bytes leftover after parsing attributes in process `syz.1.467'. [ 151.986828][ T7767] tipc: Started in network mode [ 151.986862][ T7767] tipc: Node identity d61285ba69f4, cluster identity 4711 [ 151.988423][ T7767] tipc: Enabled bearer , priority 0 [ 151.989144][ T7767] syzkaller0: entered promiscuous mode [ 151.991770][ T7767] syzkaller0: entered allmulticast mode [ 152.040639][ T7767] tipc: Resetting bearer [ 152.080633][ T7766] tipc: Resetting bearer [ 152.144316][ T7766] tipc: Disabling bearer [ 152.500869][ T7797] netlink: 4 bytes leftover after parsing attributes in process `syz.1.478'. [ 153.043445][ T7818] netlink: 'syz.3.487': attribute type 4 has an invalid length. [ 153.059703][ T7819] netlink: 112 bytes leftover after parsing attributes in process `syz.0.486'. [ 153.347830][ T7836] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 153.818228][ T7835] bond1 (unregistering): Released all slaves [ 154.054243][ T7854] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 154.172506][ T7845] IPVS: Scheduler module ip_vs_sip not found [ 154.617572][ T7874] @0Ù: renamed from bond_slave_1 (while UP) [ 154.861037][ T7887] __nla_validate_parse: 7 callbacks suppressed [ 154.861059][ T7887] netlink: 4 bytes leftover after parsing attributes in process `syz.2.502'. [ 154.881246][ T7888] openvswitch: netlink: Missing valid actions attribute. [ 154.881291][ T7888] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 155.862374][ T7911] xt_hashlimit: size too large, truncated to 1048576 [ 155.889333][ T7913] xt_hashlimit: size too large, truncated to 1048576 [ 155.908430][ T7914] netlink: 28 bytes leftover after parsing attributes in process `syz.2.508'. [ 156.144638][ T7923] netlink: 220 bytes leftover after parsing attributes in process `syz.4.509'. [ 156.191133][ T7918] gre1: left promiscuous mode [ 156.340449][ T7918] 8021q: adding VLAN 0 to HW filter on device bond3 [ 156.361792][ T6636] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.361936][ T6636] bridge0: port 2(bridge_slave_1) entered forwarding state [ 156.472761][ T1449] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 157.841232][ T7961] netlink: 'syz.3.514': attribute type 61 has an invalid length. [ 157.919042][ T7963] bond0: left allmulticast mode [ 157.919072][ T7963] @0Ù: left allmulticast mode [ 157.942819][ T7963] bond0: left promiscuous mode [ 157.943059][ T7963] @0Ù: left promiscuous mode [ 157.943593][ T7963] bridge0: port 4(bond0) entered disabled state [ 158.095585][ T7977] netlink: 4 bytes leftover after parsing attributes in process `syz.4.518'. [ 158.109789][ T7963] bridge_slave_0: left allmulticast mode [ 158.109819][ T7963] bridge_slave_0: left promiscuous mode [ 158.110032][ T7963] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.227279][ T7963] bridge_slave_1: left allmulticast mode [ 158.227324][ T7963] bridge_slave_1: left promiscuous mode [ 158.228786][ T7963] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.278865][ T7963] vlan2: left promiscuous mode [ 158.278892][ T7963] geneve0: left promiscuous mode [ 158.280942][ T7975] can: request_module (can-proto-0) failed. [ 158.321035][ T7963] bond0: (slave bond_slave_0): Releasing backup interface [ 158.372561][ T7963] bond0: (slave c@0Ù): Releasing backup interface [ 158.831508][ T7963] team0: Port device team_slave_0 removed [ 158.932139][ T7963] team0: Port device team_slave_1 removed [ 158.936380][ T7963] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 158.936405][ T7963] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 158.948348][ T7963] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 158.948373][ T7963] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 158.962411][ T7963] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 159.234436][ T8007] x_tables: duplicate underflow at hook 1 [ 159.839430][ T8027] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 159.935926][ T8037] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 160.503350][ T8060] block nbd0: shutting down sockets [ 160.515356][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 160.548054][ T8068] block nbd1: shutting down sockets [ 160.575881][ T8061] netlink: 28 bytes leftover after parsing attributes in process `syz.1.537'. [ 160.585436][ T8062] netlink: 72 bytes leftover after parsing attributes in process `syz.2.536'. [ 160.621108][ T8062] netlink: 'syz.2.536': attribute type 62 has an invalid length. [ 160.722892][ T8061] netlink: 5396 bytes leftover after parsing attributes in process `syz.1.537'. [ 160.722919][ T8061] openvswitch: netlink: Flow key attr not present in new flow. [ 160.841210][ T8080] netlink: 'syz.1.540': attribute type 10 has an invalid length. [ 160.843320][ T8080] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 160.862091][ T8080] team0: Port device netdevsim1 added [ 160.864430][ T8080] netlink: 'syz.1.540': attribute type 10 has an invalid length. [ 160.919253][ T8083] netlink: 'syz.1.540': attribute type 10 has an invalid length. [ 160.920386][ T8082] netlink: 'syz.1.540': attribute type 10 has an invalid length. [ 161.224741][ T8080] team0: Port device netdevsim1 removed [ 161.250624][ T8080] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 161.264309][ T8080] : (slave netdevsim1): Enslaving as an active interface with an up link [ 161.321381][ T8083] : (slave netdevsim1): Releasing backup interface [ 161.381430][ T8083] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 161.392828][ T8083] team0: Port device netdevsim1 added [ 161.446448][ T8082] team0: Port device netdevsim1 removed [ 161.480793][ T8082] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 161.484689][ T8082] : (slave netdevsim1): Enslaving as an active interface with an up link [ 161.561640][ T8105] netlink: 8 bytes leftover after parsing attributes in process `syz.4.543'. [ 161.561700][ T8105] netlink: 8 bytes leftover after parsing attributes in process `syz.4.543'. [ 161.696094][ T8111] netlink: 'syz.3.544': attribute type 61 has an invalid length. [ 161.899701][ T8122] netlink: 5408 bytes leftover after parsing attributes in process `syz.3.544'. [ 161.899852][ T8122] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 162.503515][ T8138] netlink: 'syz.0.550': attribute type 15 has an invalid length. [ 162.503539][ T8138] netlink: 24 bytes leftover after parsing attributes in process `syz.0.550'. [ 162.838044][ T8146] netlink: 20 bytes leftover after parsing attributes in process `syz.0.553'. [ 163.462083][ T8172] netlink: 4 bytes leftover after parsing attributes in process `syz.2.558'. [ 163.462109][ T8172] netlink: 12 bytes leftover after parsing attributes in process `syz.2.558'. [ 163.762703][ T8179] syzkaller0: entered promiscuous mode [ 163.762730][ T8179] syzkaller0: entered allmulticast mode [ 164.280979][ T8183] netlink: 'syz.1.560': attribute type 12 has an invalid length. [ 166.326155][ T8204] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 166.326195][ T8204] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 166.326233][ T8204] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 166.394363][ T8204] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 167.050221][ T8236] netlink: 36 bytes leftover after parsing attributes in process `syz.1.573'. [ 167.081896][ T8240] syzkaller0: entered promiscuous mode [ 167.081921][ T8240] syzkaller0: entered allmulticast mode [ 167.084047][ T8238] tipc: Started in network mode [ 167.084075][ T8238] tipc: Node identity b2e254a68ae5, cluster identity 4711 [ 167.084310][ T8238] tipc: Enabled bearer , priority 0 [ 167.119927][ T8240] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 167.192255][ T8238] tipc: Resetting bearer [ 167.246328][ T8240] netlink: 12 bytes leftover after parsing attributes in process `syz.4.574'. [ 167.268907][ T8246] netlink: 3 bytes leftover after parsing attributes in process `syz.1.577'. [ 167.876276][ T5625] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 167.911892][ T8234] tipc: Resetting bearer [ 167.949630][ T8234] tipc: Disabling bearer [ 167.951198][ T8271] netlink: 'syz.1.583': attribute type 8 has an invalid length. [ 167.989491][ T8271] netlink: 'syz.1.583': attribute type 21 has an invalid length. [ 168.198648][ T8274] netlink: 4 bytes leftover after parsing attributes in process `syz.1.584'. [ 168.210704][ T8274] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 168.407233][ T8278] smc: net device lo applied user defined pnetid SYZ0 [ 168.552637][ T8284] syz_tun: entered allmulticast mode [ 168.946899][ T8307] block nbd0: shutting down sockets [ 168.987250][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 169.011246][ T8281] syz_tun: left allmulticast mode [ 169.083801][ T8295] xt_l2tp: wrong L2TP version: 0 [ 169.141965][ T8309] netlink: 'syz.3.592': attribute type 1 has an invalid length. [ 169.307455][ T8309] bond4: entered promiscuous mode [ 169.309597][ T8309] 8021q: adding VLAN 0 to HW filter on device bond4 [ 169.310481][ T8309] netlink: 'syz.3.592': attribute type 1 has an invalid length. [ 169.321529][ T8309] netlink: 'syz.3.592': attribute type 1 has an invalid length. [ 169.367219][ T8313] 8021q: adding VLAN 0 to HW filter on device bond4 [ 169.369219][ T8313] bond4: (slave ipip0): The slave device specified does not support setting the MAC address [ 169.369242][ T8313] bond4: (slave ipip0): Setting fail_over_mac to active for active-backup mode [ 169.410113][ T8313] bond4: (slave ipip0): making interface the new active one [ 169.410138][ T8313] ipip0: entered promiscuous mode [ 169.413492][ T8313] bond4: (slave ipip0): Enslaving as an active interface with an up link [ 169.416209][ T8309] netlink: 'syz.3.592': attribute type 1 has an invalid length. [ 169.416493][ T8309] netlink: 'syz.3.592': attribute type 1 has an invalid length. [ 169.416771][ T8309] netlink: 'syz.3.592': attribute type 1 has an invalid length. [ 169.417032][ T8309] netlink: 'syz.3.592': attribute type 1 has an invalid length. [ 169.417256][ T8309] netlink: 'syz.3.592': attribute type 1 has an invalid length. [ 169.430865][ T8309] netlink: 'syz.3.592': attribute type 1 has an invalid length. [ 169.431097][ T8309] netlink: 'syz.3.592': attribute type 1 has an invalid length. [ 169.431307][ T8309] netlink: 'syz.3.592': attribute type 1 has an invalid length. [ 169.471359][ T8326] C: renamed from veth1_to_team (while UP) [ 169.502379][ T8326] netlink: 116 bytes leftover after parsing attributes in process `syz.4.595'. [ 169.504861][ T8326] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 170.092808][ T8344] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.600'. [ 170.110979][ T8344] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.600'. [ 170.162252][ T8346] netlink: 4 bytes leftover after parsing attributes in process `syz.0.603'. [ 170.281165][ T8350] netlink: 16 bytes leftover after parsing attributes in process `syz.1.604'. [ 170.281211][ T8350] netlink: 5 bytes leftover after parsing attributes in process `syz.1.604'. [ 170.911946][ T8369] Cannot find set identified by id 0 to match [ 171.538507][ T8398] netlink: NAT attribute has 8 unknown bytes [ 171.538547][ T8398] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 172.051940][ T8420] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 172.101450][ T5625] Bluetooth: hci4: SCO packet too small [ 172.316365][ T8412] 8021q: adding VLAN 0 to HW filter on device bond4 [ 172.398872][ T8430] __nla_validate_parse: 4 callbacks suppressed [ 172.398894][ T8430] netlink: 16 bytes leftover after parsing attributes in process `syz.3.629'. [ 172.547600][ T8440] netlink: 52 bytes leftover after parsing attributes in process `syz.3.631'. [ 172.599662][ T8441] netlink: 76 bytes leftover after parsing attributes in process `syz.3.631'. [ 172.951286][ T8421] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 172.969254][ T8421] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 173.465828][ T8421] geneve2: left allmulticast mode [ 173.573066][ T8440] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.574508][ T8440] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.612104][ T8441] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.612184][ T8441] bridge0: port 2(bridge_slave_1) entered forwarding state [ 173.612446][ T8441] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.612547][ T8441] bridge0: port 1(bridge_slave_0) entered forwarding state [ 173.626409][ T8441] netlink: 52 bytes leftover after parsing attributes in process `syz.3.631'. [ 173.632144][ T8441] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.632392][ T8441] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.656313][ T6641] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 173.656347][ T6641] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.656380][ T6641] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 173.656401][ T6641] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.656431][ T6641] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 173.656451][ T6641] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.656481][ T6641] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 173.656501][ T6641] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.894003][ T8466] bridge0: port 3(vlan2) entered blocking state [ 173.894213][ T8466] bridge0: port 3(vlan2) entered forwarding state [ 173.904063][ T8466] geneve0: entered promiscuous mode [ 173.908069][ T8466] batman_adv: batadv0: Interface activated: macvtap1 [ 173.910113][ T8466] batman_adv: batadv0: Interface activated: macvtap2 [ 173.940835][ T8478] netlink: 60 bytes leftover after parsing attributes in process `syz.3.634'. [ 173.949985][ T8478] netlink: 4 bytes leftover after parsing attributes in process `syz.3.634'. [ 173.976256][ T8477] netlink: 48 bytes leftover after parsing attributes in process `syz.4.633'. [ 173.996947][ C1] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 174.270964][ T8491] netlink: 20 bytes leftover after parsing attributes in process `syz.3.637'. [ 174.497015][ C1] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 174.584915][ T8507] netlink: 16 bytes leftover after parsing attributes in process `syz.2.640'. [ 174.695993][ T8507] netlink: 24 bytes leftover after parsing attributes in process `syz.2.640'. [ 175.621991][ T8542] validate_nla: 24 callbacks suppressed [ 175.622014][ T8542] netlink: 'syz.0.649': attribute type 1 has an invalid length. [ 175.666797][ T8545] netlink: 'syz.1.650': attribute type 39 has an invalid length. [ 176.213559][ T8567] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 176.213672][ T8567] syzkaller0: linktype set to 8 [ 176.323124][ T8572] hsr_slave_1 (unregistering): left promiscuous mode [ 176.337968][ T8580] netlink: 'syz.3.659': attribute type 1 has an invalid length. [ 176.338281][ T8580] netlink: 'syz.3.659': attribute type 1 has an invalid length. [ 176.634728][ T8596] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 177.131822][ T8626] RDS: rds_bind could not find a transport for fe80::28, load rds_tcp or rds_rdma? [ 177.185430][ T8626] nbd0: detected capacity change from 0 to 63 [ 177.188597][ T8626] block nbd0: NBD_DISCONNECT [ 177.211939][ T8626] block nbd0: Disconnected due to user request. [ 177.211979][ T8626] block nbd0: shutting down sockets [ 177.219050][ T1954] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 177.219131][ T1954] Buffer I/O error on dev nbd0, logical block 0, async page read [ 177.219166][ T1954] Buffer I/O error on dev nbd0, logical block 1, async page read [ 177.219180][ T1954] Buffer I/O error on dev nbd0, logical block 2, async page read [ 177.219193][ T1954] Buffer I/O error on dev nbd0, logical block 3, async page read [ 177.221123][ T1954] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 177.221152][ T1954] Buffer I/O error on dev nbd0, logical block 0, async page read [ 177.221168][ T1954] Buffer I/O error on dev nbd0, logical block 1, async page read [ 177.221181][ T1954] Buffer I/O error on dev nbd0, logical block 2, async page read [ 177.221194][ T1954] Buffer I/O error on dev nbd0, logical block 3, async page read [ 177.221373][ T1954] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 177.221395][ T1954] Buffer I/O error on dev nbd0, logical block 0, async page read [ 177.221409][ T1954] Buffer I/O error on dev nbd0, logical block 1, async page read [ 177.223008][ T1954] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 177.223176][ T1954] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 177.223351][ T1954] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 177.223595][ T1954] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 177.223778][ T1954] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 177.223836][ T5642] ldm_validate_partition_table(): Disk read failed. [ 177.223918][ T1954] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 177.224017][ T1954] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 177.229513][ T5642] Dev nbd0: unable to read RDB block 0 [ 177.232115][ T5642] nbd0: unable to read partition table [ 177.281256][ T5642] ldm_validate_partition_table(): Disk read failed. [ 177.294567][ T5642] Dev nbd0: unable to read RDB block 0 [ 177.304740][ T5642] nbd0: unable to read partition table [ 177.512543][ T8633] netlink: 'syz.1.672': attribute type 1 has an invalid length. [ 177.533037][ T8647] __nla_validate_parse: 11 callbacks suppressed [ 177.533057][ T8647] netlink: 44 bytes leftover after parsing attributes in process `syz.1.672'. [ 177.587137][ T8647] netlink: 'syz.1.672': attribute type 1 has an invalid length. [ 177.876201][ T8660] bond3: option tlb_dynamic_lb: invalid value (128) [ 177.886199][ T8660] bond3 (unregistering): Released all slaves [ 178.450174][ T8685] netlink: 'syz.1.681': attribute type 10 has an invalid length. [ 178.502706][ T8681] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 178.557138][ T8685] team0: Port device dummy0 added [ 178.792709][ T8695] netlink: 'syz.4.688': attribute type 21 has an invalid length. [ 178.986699][ T8707] netlink: 4 bytes leftover after parsing attributes in process `syz.1.690'. [ 179.284921][ T8719] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 179.430205][ T8727] netlink: 'syz.4.694': attribute type 61 has an invalid length. [ 179.448687][ T8727] tun0: tun_chr_ioctl cmd 1074025675 [ 179.448709][ T8727] tun0: persist disabled [ 179.753983][ T8742] netlink: 'syz.0.697': attribute type 1 has an invalid length. [ 179.754008][ T8742] netlink: 12 bytes leftover after parsing attributes in process `syz.0.697'. [ 180.157128][ T8751] netlink: 100 bytes leftover after parsing attributes in process `syz.2.700'. [ 180.281411][ T8762] netlink: 36 bytes leftover after parsing attributes in process `syz.1.702'. [ 180.538192][ T8768] netlink: 4 bytes leftover after parsing attributes in process `syz.3.703'. [ 180.712971][ T8771] netlink: 72 bytes leftover after parsing attributes in process `syz.1.704'. [ 180.713031][ T8771] netlink: 72 bytes leftover after parsing attributes in process `syz.1.704'. [ 180.767929][ T8780] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 181.287427][ T8791] netlink: 8 bytes leftover after parsing attributes in process `syz.3.708'. [ 181.427499][ T8797] netlink: 4 bytes leftover after parsing attributes in process `syz.2.709'. [ 181.843299][ T8804] pim6reg: entered allmulticast mode [ 181.854611][ T8804] pim6reg: left allmulticast mode [ 182.350714][ T8818] batman_adv: batadv0: Adding interface: macvlan2 [ 182.350751][ T8818] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 182.350780][ T8818] batman_adv: batadv0: Interface activated: macvlan2 [ 183.354806][ T8841] syzkaller0: entered promiscuous mode [ 183.354830][ T8841] syzkaller0: entered allmulticast mode [ 183.677095][ T8858] __nla_validate_parse: 2 callbacks suppressed [ 183.677118][ T8858] netlink: 4 bytes leftover after parsing attributes in process `syz.4.723'. [ 183.798003][ T8862] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 183.822555][ C1] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 184.014844][ T8872] netlink: 4 bytes leftover after parsing attributes in process `syz.3.727'. [ 184.014953][ T8872] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 184.014973][ T8872] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 184.017298][ T8872] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 184.017320][ T8872] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 184.274222][ T8843] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 184.589461][ T8881] netlink: 104 bytes leftover after parsing attributes in process `syz.3.730'. [ 184.611658][ T8880] @0Ù: renamed from bond_slave_1 (while UP) [ 184.666505][ C1] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 184.830449][ T8887] Bluetooth: MGMT ver 1.23 [ 184.980670][ T8895] syzkaller0: entered promiscuous mode [ 184.980702][ T8895] syzkaller0: entered allmulticast mode [ 184.985365][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 185.041296][ T8900] batman_adv: batadv0: Adding interface: macvtap1 [ 185.041317][ T8900] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 185.041342][ T8900] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 185.445356][ T8916] netlink: 24 bytes leftover after parsing attributes in process `syz.1.740'. [ 185.445379][ T8916] netlink: 16 bytes leftover after parsing attributes in process `syz.1.740'. [ 185.445394][ T8916] netlink: 24 bytes leftover after parsing attributes in process `syz.1.740'. [ 185.445404][ T8916] netlink: 16 bytes leftover after parsing attributes in process `syz.1.740'. [ 188.073654][ T8931] syzkaller0: entered promiscuous mode [ 188.073681][ T8931] syzkaller0: entered allmulticast mode [ 188.181437][ T8940] netlink: 8 bytes leftover after parsing attributes in process `syz.0.744'. [ 188.466271][ T8959] netlink: 4 bytes leftover after parsing attributes in process `syz.4.749'. [ 188.487149][ T8960] netlink: 4 bytes leftover after parsing attributes in process `syz.4.749'. [ 190.531720][ T8940] vlan3: entered allmulticast mode [ 190.531751][ T8940] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 190.548818][ T8940] bridge0: port 1(vlan3) entered blocking state [ 190.550588][ T8940] bridge0: port 1(vlan3) entered disabled state [ 190.575609][ T8940] vlan3: entered promiscuous mode [ 190.575639][ T8940] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 190.576155][ T8940] vlan2: entered promiscuous mode [ 190.661811][ T8970] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x1b [ 190.679296][ T8970] netlink: 8 bytes leftover after parsing attributes in process `syz.0.751'. [ 190.679332][ T8970] netlink: 12 bytes leftover after parsing attributes in process `syz.0.751'. [ 190.970566][ T8979] netlink: 28 bytes leftover after parsing attributes in process `syz.0.752'. [ 191.079449][ T8982] netlink: 4 bytes leftover after parsing attributes in process `syz.4.753'. [ 191.133399][ T8988] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 191.310783][ T8988] xt_CT: No such helper "netbios-ns" [ 191.369703][ T8982] team0: Port device team_slave_0 removed [ 191.798889][ T8985] bridge0: port 3(vlan2) entered disabled state [ 192.512439][ T8985] batman_adv: batadv0: Interface deactivated: macvtap1 [ 192.527747][ T8985] batman_adv: batadv0: Interface deactivated: macvtap2 [ 192.625798][ T6640] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 192.625834][ T6640] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.625870][ T6640] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 192.625894][ T6640] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.625924][ T6640] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 192.625946][ T6640] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.441826][ T9038] validate_nla: 1 callbacks suppressed [ 193.441848][ T9038] netlink: 'syz.4.763': attribute type 1 has an invalid length. [ 193.540693][ T9043] netlink: 'syz.4.763': attribute type 10 has an invalid length. [ 193.540718][ T9043] netlink: 40 bytes leftover after parsing attributes in process `syz.4.763'. [ 193.896417][ T9038] 8021q: adding VLAN 0 to HW filter on device bond3 [ 193.898042][ T9057] netlink: 12 bytes leftover after parsing attributes in process `syz.1.767'. [ 193.928364][ T9041] bond3: (slave dummy0): making interface the new active one [ 193.933221][ T9041] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 193.933365][ T9043] dummy0: entered promiscuous mode [ 193.937902][ T9043] bond3: (slave dummy0): Releasing active interface [ 194.006356][ T9049] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 194.429182][ T9083] netlink: 'syz.1.773': attribute type 1 has an invalid length. [ 194.429208][ T9083] netlink: 'syz.1.773': attribute type 4 has an invalid length. [ 194.429221][ T9083] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.773'. [ 194.477749][ T9087] netlink: 32 bytes leftover after parsing attributes in process `syz.3.771'. [ 194.589736][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.589802][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.620773][ T9095] ipvlan2: entered promiscuous mode [ 194.951773][ T9107] bond0: left promiscuous mode [ 194.951800][ T9107] bridge2: left promiscuous mode [ 195.135415][ T9072] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 195.504069][ T9128] netlink: 104 bytes leftover after parsing attributes in process `syz.2.780'. [ 196.421422][ T9171] IPVS: set_ctl: invalid protocol: 136 255.255.255.255:20001 [ 196.561465][ T9174] tc_dump_action: action bad kind [ 196.584945][ T9181] netlink: 60 bytes leftover after parsing attributes in process `syz.4.790'. [ 196.714149][ T9186] bridge_slave_0: left allmulticast mode [ 196.714181][ T9186] bridge_slave_0: left promiscuous mode [ 196.714473][ T9186] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.745666][ T9186] bridge_slave_1: left allmulticast mode [ 196.745693][ T9186] bridge_slave_1: left promiscuous mode [ 196.746023][ T9186] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.788312][ T9186] bond0: (slave bond_slave_0): Releasing backup interface [ 196.791002][ T9193] netlink: 20 bytes leftover after parsing attributes in process `syz.1.791'. [ 196.816830][ T9186] bond0: (slave bond_slave_1): Releasing backup interface [ 196.834267][ T9186] team0: Port device team_slave_1 removed [ 196.834702][ T9186] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 196.862517][ T9178] netlink: 12 bytes leftover after parsing attributes in process `syz.3.789'. [ 196.876107][ T9186] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 196.894197][ T9186] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 196.894652][ T9189] netlink: 20 bytes leftover after parsing attributes in process `syz.0.792'. [ 196.894963][ T9192] netlink: 20 bytes leftover after parsing attributes in process `syz.0.792'. [ 196.921660][ T9186] netlink: 4 bytes leftover after parsing attributes in process `syz.4.793'. [ 197.031207][ T9186] netlink: 4 bytes leftover after parsing attributes in process `syz.4.793'. [ 197.615960][ T9226] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 197.648591][ T9226] syzkaller1: entered promiscuous mode [ 197.648617][ T9226] syzkaller1: entered allmulticast mode [ 197.672191][ T9226] trusted_key: syz.0.799 sent an empty control message without MSG_MORE. [ 198.730894][ T9253] netlink: 104 bytes leftover after parsing attributes in process `syz.4.804'. [ 199.003155][ T9264] syz_tun: entered allmulticast mode [ 199.244631][ T9273] netlink: 32 bytes leftover after parsing attributes in process `syz.2.807'. [ 199.244660][ T9273] netlink: 8 bytes leftover after parsing attributes in process `syz.2.807'. [ 199.402591][ T9270] netlink: Unknown nat attribute (0) [ 199.402633][ T9270] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 199.523171][ T9286] openvswitch: netlink: IP tunnel attribute has 5393 unknown bytes. [ 199.541602][ T9273] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 199.833932][ T9293] bond4: entered promiscuous mode [ 199.833949][ T9293] bond4: entered allmulticast mode [ 200.211575][ T9299] ipvlan3: entered promiscuous mode [ 200.248297][ T9299] bond0: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 200.248326][ T9299] bond0: (slave ipvlan3): The slave device specified does not support setting the MAC address [ 200.248501][ T9299] bond0: (slave ipvlan3): Error -95 calling set_mac_address [ 200.942860][ T9315] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 200.972724][ T9315] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 200.991945][ T9315] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 201.012288][ T9315] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 201.035608][ T9315] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 201.051944][ T9315] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 201.053141][ T9315] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 201.094889][ T9311] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 201.127092][ T9315] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 201.145665][ T9315] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 201.151469][ T9311] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 201.182941][ T9311] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 201.192922][ T9311] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 201.233282][ T9311] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 201.246336][ T9311] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 201.251174][ T9311] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 201.254075][ T9311] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 201.265881][ T9311] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 201.285261][ T9311] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 201.299838][ T9311] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 201.302775][ T9315] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 201.326830][ T9315] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 201.328287][ T9315] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 201.329572][ T9315] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 201.330857][ T9315] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 201.333073][ T9315] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 201.340000][ T9311] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 201.367728][ T9311] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 201.381476][ T9311] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 201.390004][ T9311] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 201.391253][ T9311] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 201.394330][ T9315] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 201.403114][ T9315] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 201.410951][ T9315] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 201.419777][ T9315] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 201.423673][ T9315] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 201.430083][ T9315] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 201.434755][ T9315] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 201.440249][ T9315] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 201.448739][ T9315] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 201.458409][ T9315] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 201.466991][ T9315] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 201.489771][ T9315] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 201.494503][ T9315] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 201.502968][ T9315] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 201.509754][ T9315] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 201.557344][ T9315] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 201.561999][ T9315] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 201.564785][ T9315] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 201.578762][ T9315] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 201.585717][ T9315] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 201.587076][ T9315] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 201.592380][ T9315] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 201.611794][ T9315] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 201.625408][ T9315] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 201.638783][ T9315] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 201.682462][ T9315] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 201.696692][ T9315] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 201.708767][ T9315] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 201.714985][ T9315] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 201.731788][ T9315] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 201.744541][ T9315] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 201.751120][ T9315] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 201.759351][ T9335] __nla_validate_parse: 3 callbacks suppressed [ 201.759371][ T9335] netlink: 4 bytes leftover after parsing attributes in process `syz.4.822'. [ 201.767772][ T9315] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 201.783621][ T9315] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 201.791900][ T5622] Bluetooth: hci1: command 0x0406 tx timeout [ 201.791922][ T52] Bluetooth: hci2: command 0x0406 tx timeout [ 201.791944][ T5622] Bluetooth: hci3: command 0x0406 tx timeout [ 201.833937][ T9315] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 201.854738][ T9315] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 201.859238][ T9315] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 201.874039][ T9315] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 201.881167][ T9315] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 201.888786][ T9315] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 201.923958][ T9315] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 201.932908][ T9315] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 201.939096][ T9315] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 201.950711][ T9315] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 202.082750][ T9348] netlink: 28 bytes leftover after parsing attributes in process `syz.3.824'. [ 202.091722][ T9346] netlink: 28 bytes leftover after parsing attributes in process `syz.3.824'. [ 202.098108][ T9346] netlink: 4 bytes leftover after parsing attributes in process `syz.3.824'. [ 202.762058][ T9368] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 202.768307][ T9374] netlink: Conntrack attr has 8 unknown bytes [ 202.768342][ T9374] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 203.668709][ T9373] netlink: 12 bytes leftover after parsing attributes in process `syz.1.832'. [ 203.777958][ T9389] netlink: 56 bytes leftover after parsing attributes in process `syz.0.836'. [ 204.111204][ T9397] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.111357][ T9397] bridge0: port 2(bridge_slave_1) entered forwarding state [ 204.111701][ T9397] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.111844][ T9397] bridge0: port 1(bridge_slave_0) entered forwarding state [ 204.452378][ T9398] netlink: 4 bytes leftover after parsing attributes in process `syz.3.839'. [ 204.578056][ T9411] syzkaller0: entered promiscuous mode [ 204.578084][ T9411] syzkaller0: entered allmulticast mode [ 204.950639][ T9433] netlink: 12 bytes leftover after parsing attributes in process `syz.3.844'. [ 205.264731][ T9429] bond0: (slave gtp0): The slave device specified does not support setting the MAC address [ 205.286208][ T9429] bond0: (slave gtp0): Error -95 calling set_mac_address [ 205.478652][ T9441] dvmrp8: entered allmulticast mode [ 206.025179][ T5625] Bluetooth: hci2: command 0x0406 tx timeout [ 206.025511][ T5630] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 206.302571][ T9474] sctp: Trying to GSO but underlying device doesn't support it. [ 206.699823][ T9484] x_tables: duplicate underflow at hook 2 [ 208.911186][ T9503] netlink: 'syz.3.860': attribute type 1 has an invalid length. [ 208.986288][ T5630] Bluetooth: hci4: link tx timeout [ 208.986445][ T5630] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 209.506001][ T9482] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 209.531365][ T9482] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 209.911831][ T9503] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 209.917588][ T6642] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 209.917626][ T6642] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.917650][ T6642] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 209.917689][ T6642] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 209.917723][ T6642] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.917745][ T6642] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 209.917780][ T6642] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 209.917802][ T6642] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.917824][ T6642] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 210.105997][ T9506] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 210.106044][ T9506] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 210.106062][ T9506] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 210.217432][ T13] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 210.217469][ T13] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.217493][ T13] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 210.489610][ T9529] netlink: 220 bytes leftover after parsing attributes in process `syz.4.868'. [ 210.507579][ T9530] netlink: 'syz.3.867': attribute type 3 has an invalid length. [ 210.519256][ T9530] netlink: 'syz.3.867': attribute type 3 has an invalid length. [ 210.526942][ T9530] netlink: 16 bytes leftover after parsing attributes in process `syz.3.867'. [ 210.682488][ T9545] netlink: 4 bytes leftover after parsing attributes in process `syz.0.873'. [ 210.855955][ T9545] veth3: entered allmulticast mode [ 210.860364][ T9554] netlink: 4 bytes leftover after parsing attributes in process `syz.4.872'. [ 211.065598][ T5630] Bluetooth: hci4: command 0x0406 tx timeout [ 211.097798][ T9563] netlink: 'syz.2.874': attribute type 1 has an invalid length. [ 211.138784][ T9563] 8021q: adding VLAN 0 to HW filter on device bond5 [ 211.139365][ T9562] syzkaller0: entered promiscuous mode [ 211.139384][ T9562] syzkaller0: entered allmulticast mode [ 211.164787][ T9562] 0: reclassify loop, rule prio 0, protocol 800 [ 211.966852][ T9580] sctp: [Deprecated]: syz.4.881 (pid 9580) Use of struct sctp_assoc_value in delayed_ack socket option. [ 211.966852][ T9580] Use struct sctp_sack_info instead [ 212.821721][ T9591] netlink: 12 bytes leftover after parsing attributes in process `syz.4.884'. [ 212.892578][ T9593] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 213.208417][ T9608] netlink: 4 bytes leftover after parsing attributes in process `syz.4.889'. [ 213.551198][ T9547] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 213.828724][ T9613] ip6erspan0: entered promiscuous mode [ 213.868791][ T9616] bridge6: entered promiscuous mode [ 213.868855][ T9616] bridge6: entered allmulticast mode [ 214.251652][ T43] IPVS: starting estimator thread 0... [ 214.287341][ T9638] netlink: 16 bytes leftover after parsing attributes in process `syz.1.899'. [ 214.345463][ T9636] IPVS: using max 26 ests per chain, 62400 per kthread [ 214.581861][ T6636] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 214.581889][ T6636] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 214.682941][ T9648] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 214.934444][ T9663] netlink: 4 bytes leftover after parsing attributes in process `syz.2.906'. [ 215.571859][ T9682] netlink: 32 bytes leftover after parsing attributes in process `syz.0.911'. [ 215.884985][ T9693] netlink: 132 bytes leftover after parsing attributes in process `syz.4.915'. [ 215.979686][ T9700] ieee802154 phy0 wpan0: encryption failed: -22 [ 216.091036][ T9708] netlink: 20 bytes leftover after parsing attributes in process `syz.1.919'. [ 216.213886][ T9713] netlink: 8 bytes leftover after parsing attributes in process `syz.3.921'. [ 216.213917][ T9713] netlink: 8 bytes leftover after parsing attributes in process `syz.3.921'. [ 216.289473][ T9711] netlink: 16 bytes leftover after parsing attributes in process `syz.0.920'. [ 216.289801][ T9711] netlink: 'syz.0.920': attribute type 16 has an invalid length. [ 216.339630][ T9718] netlink: 8 bytes leftover after parsing attributes in process `syz.3.921'. [ 216.339662][ T9718] netlink: 8 bytes leftover after parsing attributes in process `syz.3.921'. [ 216.985791][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 217.241650][ T9754] netlink: 4 bytes leftover after parsing attributes in process `syz.1.927'. [ 218.237633][ T9792] bridge_slave_1 (unregistering): left allmulticast mode [ 218.237655][ T9792] bridge_slave_1 (unregistering): left promiscuous mode [ 218.237722][ T9792] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.072089][ T9745] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 220.088181][ T9794] netlink: 59 bytes leftover after parsing attributes in process `syz.1.935'. [ 221.070867][ T9821] __nla_validate_parse: 1 callbacks suppressed [ 221.070893][ T9821] netlink: 4 bytes leftover after parsing attributes in process `syz.2.943'. [ 221.165758][ T9802] netlink: 8 bytes leftover after parsing attributes in process `syz.3.938'. [ 221.166294][ T9801] netlink: 8 bytes leftover after parsing attributes in process `syz.3.938'. [ 221.631054][ T9827] syzkaller0: entered promiscuous mode [ 221.631082][ T9827] syzkaller0: entered allmulticast mode [ 221.672069][ T9827] tipc: Enabled bearer , priority 0 [ 221.722562][ T9827] tipc: Resetting bearer [ 221.746821][ T9826] tipc: Resetting bearer [ 221.811114][ T9831] netlink: 32 bytes leftover after parsing attributes in process `syz.3.946'. [ 221.890342][ T9826] tipc: Disabling bearer [ 221.988511][ T9831] netlink: 8 bytes leftover after parsing attributes in process `syz.3.946'. [ 222.090448][ T9834] syzkaller0: entered promiscuous mode [ 222.090476][ T9834] syzkaller0: entered allmulticast mode [ 222.314693][ T9847] IPVS: sync thread started: state = BACKUP, mcast_ifn = macsec0, syncid = 3, id = 0 [ 222.548923][ T9853] netlink: 60 bytes leftover after parsing attributes in process `syz.1.951'. [ 222.560281][ T9853] netlink: 4 bytes leftover after parsing attributes in process `syz.1.951'. [ 222.767457][ T9862] IPv6: NLM_F_CREATE should be specified when creating new route [ 222.767591][ T9862] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 222.767603][ T9862] IPv6: NLM_F_CREATE should be set when creating new route [ 222.767647][ T9862] IPv6: NLM_F_CREATE should be set when creating new route [ 222.767674][ T9862] IPv6: NLM_F_CREATE should be set when creating new route [ 223.073584][ T9875] netlink: 4 bytes leftover after parsing attributes in process `syz.0.958'. [ 223.215374][ T13] tipc: Subscription rejected, illegal request [ 223.245888][ T9865] vlan3: entered promiscuous mode [ 223.245913][ T9865] ip6gretap0: entered promiscuous mode [ 223.294144][ T9881] netlink: 12 bytes leftover after parsing attributes in process `syz.2.960'. [ 223.422369][ T9881] netlink: 'syz.2.960': attribute type 1 has an invalid length. [ 223.665736][ T9881] netlink: 64 bytes leftover after parsing attributes in process `syz.2.960'. [ 225.799190][ T9928] team0 (unregistering): Port device team_slave_0 removed [ 225.824590][ T9928] team0 (unregistering): Port device team_slave_1 removed [ 225.834717][ T9928] team0 (unregistering): Port device dummy0 removed [ 226.103893][ T9942] __nla_validate_parse: 4 callbacks suppressed [ 226.103927][ T9942] netlink: 8 bytes leftover after parsing attributes in process `syz.0.977'. [ 226.297544][ T9951] netlink: 'syz.0.981': attribute type 49 has an invalid length. [ 226.389761][ T9955] netlink: 32 bytes leftover after parsing attributes in process `syz.4.979'. [ 227.309501][ T9978] netlink: 8 bytes leftover after parsing attributes in process `syz.2.990'. [ 227.309541][ T9978] netlink: 4 bytes leftover after parsing attributes in process `syz.2.990'. [ 227.372146][ T9981] netlink: 8 bytes leftover after parsing attributes in process `syz.2.990'. [ 227.372183][ T9981] netlink: 4 bytes leftover after parsing attributes in process `syz.2.990'. [ 227.510971][ T9980] netlink: 48 bytes leftover after parsing attributes in process `syz.4.991'. [ 227.618462][ T9980] netlink: 8 bytes leftover after parsing attributes in process `syz.4.991'. [ 227.618498][ T9980] netlink: 48 bytes leftover after parsing attributes in process `syz.4.991'. [ 227.655601][ T6636] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 4352 - 0 [ 227.675870][ T59] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 4352 - 0 [ 227.679337][ T1449] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 4352 - 0 [ 227.679382][ T1449] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 4352 - 0 [ 227.840792][ T9992] netlink: 20 bytes leftover after parsing attributes in process `syz.1.993'. [ 227.893463][ T9991] No such timeout policy "s" [ 227.893483][ T9991] netlink: Failed to associated timeout policy 's' [ 228.126012][ T9998] tipc: Enabling of bearer rejected, failed to enable media [ 228.147210][T10007] netlink: 'syz.0.997': attribute type 1 has an invalid length. [ 228.148258][T10007] syzkaller1: entered promiscuous mode [ 228.148279][T10007] syzkaller1: entered allmulticast mode [ 228.328061][T10009] netlink: 'syz.4.998': attribute type 11 has an invalid length. [ 228.574968][T10014] ovs-system: entered promiscuous mode [ 228.671034][T10026] xt_IDLETIMER: label is empty or not nul-terminated [ 229.251178][T10033] bond2 (unregistering): Released all slaves [ 229.649747][T10065] x_tables: ip_tables: REJECT.0 target: invalid size 8 (kernel) != (user) 0 [ 229.888714][T10076] netlink: 'syz.3.1014': attribute type 1 has an invalid length. [ 231.368144][T10138] ip_tables: iptables: counters copy to user failed while replacing table [ 231.512864][T10127] macvtap0: entered promiscuous mode [ 231.512892][T10127] batadv0: entered promiscuous mode [ 231.513134][T10127] macvtap0: entered allmulticast mode [ 231.513148][T10127] batadv0: entered allmulticast mode [ 231.541070][T10127] 8021q: adding VLAN 0 to HW filter on device macvtap0 [ 231.542980][T10143] __nla_validate_parse: 15 callbacks suppressed [ 231.543003][T10143] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1027'. [ 231.578479][T10127] batadv0: left allmulticast mode [ 231.578510][T10127] batadv0: left promiscuous mode [ 231.910462][T10154] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1031'. [ 232.194824][T10163] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1034'. [ 233.298816][T10208] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1042'. [ 233.453040][T10223] Bluetooth: MGMT ver 1.23 [ 233.824704][T10241] IPv6: sit2: Disabled Multicast RS [ 234.032210][T10207] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 235.845174][T10187] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 235.877824][T10243] netlink: 'syz.4.1045': attribute type 1 has an invalid length. [ 236.270306][T10269] batman_adv: batadv0: Adding interface: wlan0 [ 236.270327][T10269] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 236.270360][T10269] batman_adv: batadv0: Interface activated: wlan0 [ 236.321195][T10269] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 236.336792][T10269] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 236.534009][T10272] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1053'. [ 236.534137][T10272] openvswitch: netlink: Missing valid actions attribute. [ 236.816922][T10286] bond5: entered promiscuous mode [ 236.816948][T10286] bond5: entered allmulticast mode [ 236.843967][T10291] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1059'. [ 237.258046][T10302] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 237.367059][T10302] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 237.566252][T10313] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1064'. [ 237.710988][T10321] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1066'. [ 237.782784][T10317] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1065'. [ 237.810612][T10321] macvlan3: entered promiscuous mode [ 237.810637][T10321] macvlan3: entered allmulticast mode [ 237.811712][T10321] bond5: entered promiscuous mode [ 237.833297][T10321] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 237.834538][T10321] bond5: left promiscuous mode [ 237.941586][T10324] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 237.942325][T10324] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 237.947931][T10324] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 237.972134][T10330] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1068'. [ 238.112817][T10330] bond7: Invalid ad_actor_system MAC address. [ 238.112843][T10330] bond7: option ad_actor_system: invalid value (7) [ 238.134137][T10330] bond7 (unregistering): Released all slaves [ 238.478314][T10350] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1072'. [ 238.584028][T10356] FAULT_INJECTION: forcing a failure. [ 238.584028][T10356] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 238.584064][T10356] CPU: 0 UID: 0 PID: 10356 Comm: syz.1.1074 Not tainted syzkaller #0 PREEMPT(full) [ 238.584091][T10356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 238.584103][T10356] Call Trace: [ 238.584112][T10356] [ 238.584121][T10356] dump_stack_lvl+0xe8/0x150 [ 238.584156][T10356] should_fail_ex+0x410/0x560 [ 238.584251][T10356] _copy_from_user+0x2d/0xb0 [ 238.584303][T10356] ___sys_sendmsg+0x1c6/0x360 [ 238.584358][T10356] ? __lock_acquire+0x747/0x2de0 [ 238.584385][T10356] ? __pfx____sys_sendmsg+0x10/0x10 [ 238.584450][T10356] ? __fget_files+0x2a/0x420 [ 238.584477][T10356] ? __fget_files+0x3a2/0x420 [ 238.584515][T10356] __x64_sys_sendmsg+0x1b1/0x290 [ 238.584545][T10356] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 238.584593][T10356] do_syscall_64+0x166/0x520 [ 238.584647][T10356] ? trace_irq_disable+0x3b/0x140 [ 238.584667][T10356] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.584688][T10356] ? clear_bhb_loop+0x70/0xc0 [ 238.584711][T10356] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.584731][T10356] RIP: 0033:0x7f06d039e159 [ 238.584751][T10356] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 238.584769][T10356] RSP: 002b:00007f06d12d0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 238.584792][T10356] RAX: ffffffffffffffda RBX: 00007f06d0625fa0 RCX: 00007f06d039e159 [ 238.584807][T10356] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000006 [ 238.584820][T10356] RBP: 00007f06d12d0090 R08: 0000000000000000 R09: 0000000000000000 [ 238.584833][T10356] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 238.584846][T10356] R13: 00007f06d0626038 R14: 00007f06d0625fa0 R15: 00007ffdaa529248 [ 238.584879][T10356] [ 238.839577][T10362] sctp: [Deprecated]: syz.4.1075 (pid 10362) Use of struct sctp_assoc_value in delayed_ack socket option. [ 238.839577][T10362] Use struct sctp_sack_info instead [ 239.839984][T10392] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1083'. [ 239.904155][T10402] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1086'. [ 239.904181][T10402] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1086'. [ 240.131857][T10407] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 240.179268][T10385] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1081'. [ 240.234716][T10417] syzkaller0: entered promiscuous mode [ 240.234744][T10417] syzkaller0: entered allmulticast mode [ 240.253293][T10417] xt_hashlimit: size too large, truncated to 1048576 [ 241.123964][T10442] tipc: Enabling of bearer rejected, failed to enable media [ 241.475325][T10459] IPVS: set_ctl: invalid protocol: 58 172.20.20.187:20001 [ 241.562503][ T12] nci: nci_rx_work: unknown MT 0x5 [ 241.751974][T10462] hsr_slave_0 (unregistering): left promiscuous mode [ 242.574839][T10488] netlink: 'syz.2.1102': attribute type 9 has an invalid length. [ 244.181509][T10450] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 244.940219][T10538] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 244.980479][T10538] __nla_validate_parse: 2 callbacks suppressed [ 244.980502][T10538] netlink: 660 bytes leftover after parsing attributes in process `syz.2.1109'. [ 245.383664][T10553] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1113'. [ 245.523920][T10558] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1114'. [ 245.669401][T10558] geneve6: entered promiscuous mode [ 246.179950][T10587] IPVS: length: 77 != 24 [ 246.891895][T10602] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1125'. [ 247.553293][T10625] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1130'. [ 248.210507][T10647] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1137'. [ 248.232521][ T31] audit: type=1804 audit(1790272915.532:4): pid=10651 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1139" name="/newroot/238/cgroup.controllers" dev="tmpfs" ino=1242 res=1 errno=0 [ 248.265251][ T31] audit: type=1800 audit(1790272915.562:5): pid=10651 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1139" name="cgroup.controllers" dev="tmpfs" ino=1242 res=0 errno=0 [ 248.271283][T10647] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1137'. [ 248.272876][ T31] audit: type=1804 audit(1790272915.572:6): pid=10651 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.1139" name="/newroot/238/cgroup.controllers" dev="tmpfs" ino=1242 res=1 errno=0 [ 249.002605][T10668] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1146'. [ 249.091006][T10668] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1146'. [ 249.322667][T10685] IPVS: sync thread started: state = BACKUP, mcast_ifn = macsec0, syncid = 3, id = 0 [ 249.323802][T10676] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 40 [ 249.556805][T10690] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1154'. [ 249.918046][T10690] bond7: Removing last ns target with arp_interval on [ 249.967478][T10698] bond8: Removing last ns target with arp_interval on [ 250.109635][T10711] ipvlan1: entered promiscuous mode [ 250.109680][T10711] ipvlan1: entered allmulticast mode [ 250.109693][T10711] veth0_vlan: entered allmulticast mode [ 250.342763][T10724] __nla_validate_parse: 3 callbacks suppressed [ 250.342787][T10724] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1160'. [ 250.342808][T10724] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1160'. [ 250.342824][T10724] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1160'. [ 250.603539][T10733] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1161'. [ 250.603568][T10733] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1161'. [ 250.604515][T10736] syzkaller1: entered promiscuous mode [ 250.604538][T10736] syzkaller1: entered allmulticast mode [ 250.712914][T10729] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1163'. [ 250.724381][T10729] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1163'. [ 250.862678][T10739] ieee802154 phy1 wpan1: encryption failed: -22 [ 250.878051][T10739] netlink: 198796 bytes leftover after parsing attributes in process `syz.3.1165'. [ 250.878080][T10739] netlink: 'syz.3.1165': attribute type 2 has an invalid length. [ 251.387049][T10758] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1170'. [ 251.391171][T10758] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1170'. [ 251.983017][T10784] netlink: 'syz.1.1173': attribute type 2 has an invalid length. [ 252.892018][T10819] ip_tables: iptables: counters copy to user failed while replacing table [ 252.892269][T10824] ip_tables: iptables: counters copy to user failed while replacing table [ 253.946213][T10850] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.947875][T10850] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.171388][T10856] netlink: 'syz.1.1187': attribute type 4 has an invalid length. [ 254.177759][T10856] netlink: 'syz.1.1187': attribute type 4 has an invalid length. [ 254.772888][T10865] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.773553][T10865] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.773792][T10865] bridge_slave_0: entered allmulticast mode [ 254.805321][T10865] bridge_slave_0: entered promiscuous mode [ 254.872317][T10872] ipvlan2: entered promiscuous mode [ 254.885731][T10877] bridge_slave_0: left allmulticast mode [ 254.885761][T10877] bridge_slave_0: left promiscuous mode [ 254.886106][T10877] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.930174][T10913] __nla_validate_parse: 5 callbacks suppressed [ 255.930198][T10913] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1201'. [ 255.930217][T10913] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1201'. [ 255.956157][T10913] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1201'. [ 256.029777][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.234740][T10951] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1210'. [ 257.408998][T10968] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1213'. [ 257.911591][T10985] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1218'. [ 257.911637][T10985] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 257.940383][T10985] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1218'. [ 257.940428][T10985] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 258.184748][T10993] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1219'. [ 258.326348][T10994] netlink: 'syz.2.1220': attribute type 10 has an invalid length. [ 258.326383][T10994] syz_tun: entered promiscuous mode [ 258.331720][T10995] netlink: 'syz.2.1220': attribute type 10 has an invalid length. [ 258.368775][T10994] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 258.552404][T11000] tipc: Started in network mode [ 258.552424][T11000] tipc: Node identity , cluster identity 4711 [ 258.552440][T11000] tipc: Failed to obtain node identity [ 258.552469][T11000] tipc: Enabling of bearer rejected, failed to enable media [ 258.559789][T11000] syzkaller0: entered promiscuous mode [ 258.559810][T11000] syzkaller0: entered allmulticast mode [ 258.895757][T11023] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 258.941676][T11023] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1226'. [ 258.962824][T11017] syzkaller0: entered promiscuous mode [ 258.962848][T11017] syzkaller0: entered allmulticast mode [ 258.981041][T11017] netlink: 'syz.2.1224': attribute type 2 has an invalid length. [ 259.087852][T11027] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 259.097975][T11017] : entered promiscuous mode [ 259.184947][T11029] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1228'. [ 259.778888][T11048] FAULT_INJECTION: forcing a failure. [ 259.778888][T11048] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 259.778922][T11048] CPU: 0 UID: 0 PID: 11048 Comm: syz.2.1233 Not tainted syzkaller #0 PREEMPT(full) [ 259.778944][T11048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 259.778957][T11048] Call Trace: [ 259.778965][T11048] [ 259.778974][T11048] dump_stack_lvl+0xe8/0x150 [ 259.779009][T11048] should_fail_ex+0x410/0x560 [ 259.779039][T11048] _copy_to_user+0x31/0xb0 [ 259.779068][T11048] simple_read_from_buffer+0xe1/0x170 [ 259.779103][T11048] proc_fail_nth_read+0x1bb/0x230 [ 259.779133][T11048] ? common_file_perm+0x20e/0x2b0 [ 259.779224][T11048] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 259.779257][T11048] ? rw_verify_area+0x24a/0x4c0 [ 259.779286][T11048] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 259.779317][T11048] vfs_read+0x213/0xa80 [ 259.779352][T11048] ? __pfx___mutex_lock+0x10/0x10 [ 259.779427][T11048] ? __pfx_vfs_read+0x10/0x10 [ 259.779459][T11048] ? __fget_files+0x2a/0x420 [ 259.779491][T11048] ? __fget_files+0x3a2/0x420 [ 259.779517][T11048] ? __fget_files+0x2a/0x420 [ 259.779555][T11048] ksys_read+0x150/0x270 [ 259.779586][T11048] ? __pfx_ksys_read+0x10/0x10 [ 259.779629][T11048] do_syscall_64+0x166/0x520 [ 259.779651][T11048] ? trace_irq_disable+0x3b/0x140 [ 259.779676][T11048] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.779697][T11048] ? clear_bhb_loop+0x70/0xc0 [ 259.779720][T11048] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.779741][T11048] RIP: 0033:0x7f5efd75e98e [ 259.779761][T11048] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 259.779778][T11048] RSP: 002b:00007f5efe602fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 259.779801][T11048] RAX: ffffffffffffffda RBX: 00007f5efe6036c0 RCX: 00007f5efd75e98e [ 259.779816][T11048] RDX: 000000000000000f RSI: 00007f5efe6030a0 RDI: 0000000000000004 [ 259.779829][T11048] RBP: 00007f5efe603090 R08: 0000000000000000 R09: 0000000000000000 [ 259.779842][T11048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 259.779854][T11048] R13: 00007f5efda26038 R14: 00007f5efda25fa0 R15: 00007fff808d0be8 [ 259.779889][T11048] [ 260.908228][T11085] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 261.023560][T11089] __nla_validate_parse: 8 callbacks suppressed [ 261.023577][T11089] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1246'. [ 261.121660][T11089] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1246'. [ 261.209421][T11089] syzkaller1: entered promiscuous mode [ 261.209446][T11089] syzkaller1: entered allmulticast mode [ 261.348312][T11094] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1248'. [ 261.666844][T11102] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.682540][T11102] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1250'. [ 261.830725][T11104] syzkaller1: entered promiscuous mode [ 261.830752][T11104] syzkaller1: entered allmulticast mode [ 261.927962][T11109] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1253'. [ 261.959684][T11109] openvswitch: netlink: Tunnel attr 12300 out of range max 16 [ 262.411540][T11132] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1260'. [ 262.618479][T11139] syzkaller0: entered promiscuous mode [ 262.618504][T11139] syzkaller0: entered allmulticast mode [ 262.773915][T11149] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1262'. [ 262.789261][T11149] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1262'. [ 262.793322][T11149] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1262'. [ 265.097963][T11177] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1271'. [ 265.235206][T11122] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 266.092933][T11218] __nla_validate_parse: 1 callbacks suppressed [ 266.092969][T11218] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1279'. [ 266.476797][T11226] netlink: 'syz.0.1282': attribute type 1 has an invalid length. [ 266.518729][T11226] 8021q: adding VLAN 0 to HW filter on device bond2 [ 266.588009][T11231] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1284'. [ 266.588039][T11231] openvswitch: netlink: Key type 1798 is out of range max 32 [ 267.020667][T11237] netlink: 120 bytes leftover after parsing attributes in process `syz.1.1286'. [ 267.020863][T11237] netlink: 120 bytes leftover after parsing attributes in process `syz.1.1286'. [ 267.053694][T11240] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1287'. [ 267.293764][T11249] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1288'. [ 268.300486][T11284] netlink: 'syz.2.1297': attribute type 23 has an invalid length. [ 268.419952][T11291] ip6t_rt: `--rt-type 0' required before `--rt-0-*' [ 269.103366][T11284] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 269.136844][T11313] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1302'. [ 269.262313][T11317] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1301'. [ 269.302312][T11321] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1304'. [ 269.303307][T11321] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1304'. [ 269.697532][T11328] syzkaller0: entered promiscuous mode [ 269.697559][T11328] syzkaller0: entered allmulticast mode [ 269.711993][T11328] tipc: Started in network mode [ 269.712024][T11328] tipc: Node identity 7635a6817b74, cluster identity 4711 [ 269.712503][T11328] tipc: Enabled bearer , priority 0 [ 269.723077][T11328] tipc: Resetting bearer [ 269.760356][T11326] tipc: Resetting bearer [ 269.899954][T11326] tipc: Disabling bearer [ 269.934699][T11334] openvswitch: netlink: Mixed IPv4 and IPv6 tunnel attributes [ 270.360784][T11352] x_tables: duplicate underflow at hook 2 [ 270.366878][T11352] netlink: 'syz.0.1315': attribute type 2 has an invalid length. [ 270.924804][T11369] bridge0: port 3(vlan3) entered blocking state [ 270.924936][T11369] bridge0: port 3(vlan3) entered disabled state [ 270.943341][T11369] vlan3: entered allmulticast mode [ 270.943367][T11369] geneve0: entered allmulticast mode [ 270.980220][T11369] vlan3: entered promiscuous mode [ 270.980244][T11369] geneve0: entered promiscuous mode [ 271.109174][T11379] __nla_validate_parse: 5 callbacks suppressed [ 271.109197][T11379] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1325'. [ 271.522831][ T6640] nci: nci_rx_work: unknown MT 0x6 [ 271.572019][T11395] netlink: 'syz.2.1326': attribute type 4 has an invalid length. [ 271.572046][T11395] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1326'. [ 271.589120][T11395] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 271.802660][T11406] syz_tun: entered allmulticast mode [ 272.280071][T11402] syz_tun: left allmulticast mode [ 272.748508][T11435] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1338'. [ 272.748678][T11435] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1338'. [ 272.748838][T11435] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1338'. [ 272.748989][T11435] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1338'. [ 272.749137][T11435] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1338'. [ 272.749283][T11435] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1338'. [ 272.749440][T11435] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1338'. [ 272.749586][T11435] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1338'. [ 273.868783][ T5625] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 274.306676][T11387] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 274.399124][T11450] netlink: 'syz.4.1343': attribute type 2 has an invalid length. [ 274.622124][T11459] openvswitch: netlink: Key type 9220 is out of range max 32 [ 274.690963][T11462] openvswitch: netlink: Key type 9220 is out of range max 32 [ 274.914766][T11471] batman_adv: batadv0: Adding interface: macvlan2 [ 274.914788][T11471] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 274.914820][T11471] batman_adv: batadv0: Interface activated: macvlan2 [ 275.659894][T11495] bridge0: entered allmulticast mode [ 276.056314][T11500] xt_MASQUERADE: bad rangesize 20224 [ 276.219860][T11513] __nla_validate_parse: 8 callbacks suppressed [ 276.219883][T11513] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1358'. [ 276.973091][T11536] raw_sendmsg: syz.4.1363 forgot to set AF_INET. Fix it! [ 277.042959][T11540] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 277.462065][T11557] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1371'. [ 277.610094][T11561] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1372'. [ 277.806256][T11565] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1374'. [ 277.860076][T11565] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1374'. [ 278.423960][T11579] syzkaller0: left promiscuous mode [ 278.423986][T11579] syzkaller0: left allmulticast mode [ 278.463748][T11586] macsec0: entered promiscuous mode [ 278.466803][T11586] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1382'. [ 278.484931][T11586] macsec0 (unregistering): left promiscuous mode [ 278.899758][T11595] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 278.900984][T11595] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 279.163279][T11606] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 279.212653][T11606] 8021q: adding VLAN 0 to HW filter on device ipvlan4 [ 279.228455][T11606] netlink: 279 bytes leftover after parsing attributes in process `syz.2.1388'. [ 279.229676][T11606] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1388'. [ 279.361581][T11612] netlink: 'syz.1.1389': attribute type 2 has an invalid length. [ 280.368550][T11640] bond4: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 280.420212][T11640] bond4: (slave lo): Enslaving as an active interface with an up link [ 280.420504][T11640] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 280.779858][T11657] ip_tables: iptables: counters copy to user failed while replacing table [ 280.872168][T11657] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 280.872198][T11657] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 280.874650][T11659] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1404'. [ 280.923469][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.923494][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.970961][T11659] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 281.057947][T11663] Cannot find del_set index 4 as target [ 281.257912][T11669] veth1_to_team: entered promiscuous mode [ 281.284490][T11669] veth1_to_team: left promiscuous mode [ 281.342704][T11673] netlink: 'syz.1.1409': attribute type 1 has an invalid length. [ 281.613390][T11681] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1413'. [ 281.713868][T11679] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1411'. [ 282.000112][T11685] x_tables: unsorted entry at hook 1 [ 282.121201][T11693] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1418'. [ 282.673398][T11711] Bluetooth: hci0: invalid length 0, exp 2 for type 18 [ 282.954481][T11725] netlink: 'syz.3.1424': attribute type 11 has an invalid length. [ 282.954751][T11726] netlink: 'syz.3.1424': attribute type 11 has an invalid length. [ 282.988866][T11721] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1423'. [ 283.019158][T11725] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1424'. [ 283.020195][T11726] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1424'. [ 283.065890][ T5625] Bluetooth: hci3: command 0x0406 tx timeout [ 283.119361][T11721] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1423'. [ 283.317548][T11734] netlink: 'syz.3.1424': attribute type 5 has an invalid length. [ 283.320211][T11735] netlink: 'syz.3.1424': attribute type 5 has an invalid length. [ 283.416839][T11739] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1426'. [ 283.452640][T11736] netlink: 'syz.2.1427': attribute type 12 has an invalid length. [ 283.556094][T11743] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.1428'. [ 283.561985][T11743] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.1428'. [ 283.841326][ T31] audit: type=1804 audit(1790272951.142:7): pid=11755 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1431" name="/newroot/275/cgroup.controllers" dev="tmpfs" ino=1431 res=1 errno=0 [ 283.841506][ T31] audit: type=1800 audit(1790272951.142:8): pid=11755 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1431" name="cgroup.controllers" dev="tmpfs" ino=1431 res=0 errno=0 [ 283.848450][ T31] audit: type=1800 audit(1790272951.142:9): pid=11755 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1431" name="cgroup.controllers" dev="tmpfs" ino=1431 res=0 errno=0 [ 285.074410][T11793] x_tables: duplicate underflow at hook 1 [ 285.292309][T11810] netlink: 'syz.2.1440': attribute type 1 has an invalid length. [ 285.818271][T11824] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 286.720884][T11858] dvmrp0: entered allmulticast mode [ 286.745754][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 286.790132][T11861] dvmrp1: entered allmulticast mode [ 287.132594][T11875] syzkaller0: entered promiscuous mode [ 287.132619][T11875] syzkaller0: entered allmulticast mode [ 287.251443][T11884] tipc: Failed to remove unknown binding: 66,0,0/0:715818348/715818350 [ 287.251477][T11884] tipc: Failed to remove unknown binding: 66,0,0/0:715818348/715818349 [ 287.252167][T11885] tipc: Failed to remove unknown binding: 66,0,0/0:715818348/715818350 [ 287.252192][T11885] tipc: Failed to remove unknown binding: 66,0,0/0:715818348/715818349 [ 287.779497][T11891] netlink: NAT attribute has 8 unknown bytes [ 287.779538][T11891] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 287.969573][T11906] netlink: 'syz.4.1463': attribute type 1 has an invalid length. [ 288.076763][T11899] __nla_validate_parse: 7 callbacks suppressed [ 288.076790][T11899] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1461'. [ 288.234092][T11913] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1464'. [ 288.239014][T11906] bond6: entered promiscuous mode [ 288.239451][T11906] 8021q: adding VLAN 0 to HW filter on device bond6 [ 288.358373][T11911] veth3: entered allmulticast mode [ 288.381705][T11911] bond6: (slave veth3): making interface the new active one [ 288.381732][T11911] veth3: entered promiscuous mode [ 288.406176][T11911] bond6: (slave veth3): Enslaving as an active interface with an up link [ 288.820463][T11933] netlink: 300 bytes leftover after parsing attributes in process `syz.3.1468'. [ 289.260099][T11947] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1472'. [ 291.197393][T12013] netlink: 'syz.4.1484': attribute type 2 has an invalid length. [ 291.197418][T12013] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1484'. [ 291.335479][T12014] netlink: 'syz.4.1484': attribute type 10 has an invalid length. [ 291.335516][T12014] dummy0: left promiscuous mode [ 291.368037][T12014] team0: Port device dummy0 added [ 291.549979][T12037] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1489'. [ 291.550008][T12037] IPVS: Unknown mcast interface: vcan0 [ 291.580607][T12038] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1489'. [ 291.580637][T12038] IPVS: Unknown mcast interface: vcan0 [ 291.601176][T12037] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1489'. [ 291.672485][T12037] veth1_to_team: entered promiscuous mode [ 291.673981][T12037] gretap0: entered promiscuous mode [ 291.689456][T12037] hsr1: entered promiscuous mode [ 291.897990][T12052] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1493'. [ 292.239152][T12058] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1495'. [ 292.275503][ T1035] netdevsim netdevsim2 netdevsim0: set [0, 1] type 1 family 0 port 8472 - 0 [ 292.275750][ T1035] netdevsim netdevsim2 netdevsim1: set [0, 1] type 1 family 0 port 8472 - 0 [ 292.275810][ T1035] netdevsim netdevsim2 netdevsim2: set [0, 1] type 1 family 0 port 8472 - 0 [ 292.275844][ T1035] netdevsim netdevsim2 netdevsim3: set [0, 1] type 1 family 0 port 8472 - 0 [ 295.437697][T12091] netlink: 'syz.4.1502': attribute type 4 has an invalid length. [ 295.465349][T12089] netlink: 'syz.4.1502': attribute type 4 has an invalid length. [ 295.554384][T12100] __nla_validate_parse: 1 callbacks suppressed [ 295.554406][T12100] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1504'. [ 295.884834][T12109] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1507'. [ 296.464836][T12131] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1514'. [ 296.464865][T12131] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1514'. [ 296.464880][T12131] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1514'. [ 296.540259][T12131] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1514'. [ 296.611280][T12142] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1517'. [ 296.713409][T12145] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 296.906671][T12157] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1521'. [ 296.957037][T12160] netlink: 236 bytes leftover after parsing attributes in process `syz.0.1520'. [ 296.957069][T12160] netlink: 236 bytes leftover after parsing attributes in process `syz.0.1520'. [ 297.007940][T12160] ip_tables: iptables: counters copy to user failed while replacing table [ 297.109382][T12158] ip_tables: iptables: counters copy to user failed while replacing table [ 297.152897][T12167] netlink: 'syz.1.1525': attribute type 322 has an invalid length. [ 297.715525][T12181] syzkaller1: entered promiscuous mode [ 297.715551][T12181] syzkaller1: entered allmulticast mode [ 297.744939][T12184] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 40 [ 298.164086][T12204] pimreg: entered allmulticast mode [ 298.180841][T12204] syzkaller1: entered allmulticast mode [ 298.713280][T12228] ip_tables: iptables: counters copy to user failed while replacing table [ 299.372230][T12254] Bluetooth: MGMT ver 1.23 [ 299.795240][T12265] ip_tables: iptables: counters copy to user failed while replacing table [ 299.944687][T12265] netlink: 'syz.3.1551': attribute type 12 has an invalid length. [ 300.004239][T12274] netlink: 'syz.0.1555': attribute type 1 has an invalid length. [ 300.194840][ T6640] wlan1: Trigger new scan to find an IBSS to join [ 300.716840][T12295] IPVS: Unknown mcast interface: macsec0 [ 300.989949][T12305] __nla_validate_parse: 11 callbacks suppressed [ 300.989973][T12305] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1566'. [ 301.279768][T12318] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1570'. [ 301.279798][T12318] openvswitch: netlink: Flow actions attr not present in new flow. [ 301.367442][T12313] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1570'. [ 301.937790][T12336] IPVS: Unknown mcast interface: macsec0 [ 302.323399][T12349] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1581'. [ 302.392001][T12354] netlink: 'syz.2.1582': attribute type 10 has an invalid length. [ 302.392028][T12354] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1582'. [ 302.425556][T12354] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 302.460997][ T5625] Bluetooth: hci4: unexpected event for opcode 0x203d [ 302.461450][T12354] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1582'. [ 302.463305][T12354] xt_NETMAP: bad rangesize 37. [ 302.544079][T12357] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1583'. [ 302.751491][T12357] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1583'. [ 302.886599][T12362] batman_adv: batadv0: Interface deactivated: macvlan2 [ 303.230507][T12041] wlan1: Trigger new scan to find an IBSS to join [ 303.570769][T12376] IPVS: Unknown mcast interface: macsec0 [ 303.675397][T12380] siw: device registration error -23 [ 303.736298][T12377] smbdirect: ib_dev[s`z1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 303.736336][T12377] smbdirect: ib_dev[s`z1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 303.736370][T12377] smbdirect: ib_dev[s`z1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 303.798543][T12377] infiniband s`z1: RDMA CMA: cma_listen_on_dev, error -98 [ 304.240889][T12405] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1593'. [ 304.561903][T12421] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1595'. [ 304.751682][ T1417] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 305.043092][T12429] xt_hashlimit: size too large, truncated to 1048576 [ 305.142973][T12431] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 305.336611][T12422] netlink: 'syz.0.1595': attribute type 1 has an invalid length. [ 305.337140][T12422] workqueue: Failed to create a rescuer kthread for wq "phy3": -EINTR [ 305.692470][T12441] tipc: Enabling of bearer rejected, failed to enable media [ 305.832329][T12441] vlan5: entered promiscuous mode [ 305.832355][T12441] team0: entered promiscuous mode [ 305.832369][T12441] dummy0: entered promiscuous mode [ 306.318526][T12465] __nla_validate_parse: 1 callbacks suppressed [ 306.318550][T12465] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1607'. [ 306.390274][T12465] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1607'. [ 306.406444][T12464] RDS: rds_bind could not find a transport for 2001::1, load rds_tcp or rds_rdma? [ 306.900413][T12485] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1611'. [ 307.757307][T12510] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1617'. [ 308.250127][T12522] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1621'. [ 308.478733][T12533] netlink: 'syz.4.1622': attribute type 1 has an invalid length. [ 308.478780][T12533] netlink: 'syz.4.1622': attribute type 1 has an invalid length. [ 308.695849][T12540] A link change request failed with some changes committed already. Interface veth0_to_team may have been left with an inconsistent configuration, please check. [ 308.831239][T12535] pim6reg1: entered promiscuous mode [ 308.831265][T12535] pim6reg1: entered allmulticast mode [ 309.520741][T12554] bond3: option active_slave: mode dependency failed, not supported in mode balance-xor(2) [ 309.521548][T12563] netlink: 276 bytes leftover after parsing attributes in process `syz.4.1629'. [ 309.558124][T12554] bond3 (unregistering): Released all slaves [ 309.938372][T12581] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1632'. [ 309.938539][T12581] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1632'. [ 309.938675][T12581] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1632'. [ 309.938789][T12581] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1632'. [ 310.595409][T12601] vlan3: entered promiscuous mode [ 310.595436][T12601] syz_tun: entered promiscuous mode [ 310.610638][T12607] veth0: entered promiscuous mode [ 311.414199][T12629] FAULT_INJECTION: forcing a failure. [ 311.414199][T12629] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 311.414236][T12629] CPU: 0 UID: 0 PID: 12629 Comm: syz.4.1643 Not tainted syzkaller #0 PREEMPT(full) [ 311.414260][T12629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 311.414272][T12629] Call Trace: [ 311.414280][T12629] [ 311.414289][T12629] dump_stack_lvl+0xe8/0x150 [ 311.414325][T12629] should_fail_ex+0x410/0x560 [ 311.414356][T12629] _copy_to_iter+0x59c/0x1810 [ 311.414458][T12629] ? __pfx__copy_to_iter+0x10/0x10 [ 311.414483][T12629] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 311.414511][T12629] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 311.414533][T12629] ? __skb_try_recv_datagram+0x3de/0x4e0 [ 311.414617][T12629] __skb_datagram_iter+0xf8/0x980 [ 311.414645][T12629] ? __pfx_sk_busy_loop_end+0x10/0x10 [ 311.414737][T12629] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 311.414776][T12629] skb_copy_datagram_iter+0xb5/0x240 [ 311.414810][T12629] netlink_recvmsg+0x2b9/0xa50 [ 311.414864][T12629] ? __pfx_netlink_recvmsg+0x10/0x10 [ 311.414892][T12629] ? lock_acquire+0x115/0x350 [ 311.414916][T12629] ? aa_sock_msg_perm+0x144/0x210 [ 311.414945][T12629] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 311.414970][T12629] ? security_socket_recvmsg+0x7e/0x2c0 [ 311.415039][T12629] ? __pfx_netlink_recvmsg+0x10/0x10 [ 311.415060][T12629] sock_recvmsg+0x196/0x1e0 [ 311.415086][T12629] ____sys_recvmsg+0x1e6/0x4a0 [ 311.415124][T12629] ? __pfx_____sys_recvmsg+0x10/0x10 [ 311.415168][T12629] ? import_iovec+0x73/0xa0 [ 311.415197][T12629] ___sys_recvmsg+0x213/0x5a0 [ 311.415230][T12629] ? __pfx____sys_recvmsg+0x10/0x10 [ 311.415263][T12629] ? lock_acquire+0x115/0x350 [ 311.415302][T12629] ? __fget_files+0x3a2/0x420 [ 311.415340][T12629] do_recvmmsg+0x31a/0x7f0 [ 311.415375][T12629] ? __pfx_do_recvmmsg+0x10/0x10 [ 311.415413][T12629] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 311.415438][T12629] ? __fget_files+0x3a2/0x420 [ 311.415478][T12629] __x64_sys_recvmmsg+0x198/0x250 [ 311.415510][T12629] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 311.415548][T12629] do_syscall_64+0x166/0x520 [ 311.415572][T12629] ? trace_irq_disable+0x3b/0x140 [ 311.415594][T12629] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.415615][T12629] ? clear_bhb_loop+0x70/0xc0 [ 311.415639][T12629] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.415659][T12629] RIP: 0033:0x7fc6b419e159 [ 311.415679][T12629] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 311.415695][T12629] RSP: 002b:00007fc6b4fa8028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 311.415718][T12629] RAX: ffffffffffffffda RBX: 00007fc6b4425fa0 RCX: 00007fc6b419e159 [ 311.415733][T12629] RDX: 0000000000000007 RSI: 00002000000006c0 RDI: 0000000000000003 [ 311.415746][T12629] RBP: 00007fc6b4fa8090 R08: 0000000000000000 R09: 0000000000000000 [ 311.415757][T12629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 311.415768][T12629] R13: 00007fc6b4426038 R14: 00007fc6b4425fa0 R15: 00007fff1c70f718 [ 311.415802][T12629] [ 311.792987][T12607] veth0: left promiscuous mode [ 312.166664][ T8445] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 312.607952][T12662] __nla_validate_parse: 65 callbacks suppressed [ 312.607976][T12662] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1655'. [ 312.785329][ T8445] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 312.932628][T12674] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1661'. [ 312.959426][T12674] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1661'. [ 313.013846][T12677] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1660'. [ 313.113736][T12680] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1664'. [ 313.113761][T12680] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1664'. [ 313.209701][T12683] IPv6: NLM_F_CREATE should be specified when creating new route [ 313.290668][T12680] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1664'. [ 313.634579][T12694] ip_tables: iptables: counters copy to user failed while replacing table [ 313.664002][T12696] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.664185][T12696] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.664330][T12696] bridge_slave_0: entered allmulticast mode [ 313.689020][T12696] bridge_slave_0: entered promiscuous mode [ 313.698472][T12696] bridge_slave_0: left allmulticast mode [ 313.698520][T12696] bridge_slave_0: left promiscuous mode [ 313.698816][T12696] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.772047][T12696] bridge0 (unregistering): left allmulticast mode [ 313.853453][T12700] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1668'. [ 314.237940][T12708] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1671'. [ 314.304784][T12708] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1671'. [ 316.216912][T12749] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 316.236750][T12769] bridge0: port 2(vlan4) entered blocking state [ 316.236879][T12769] bridge0: port 2(vlan4) entered disabled state [ 316.237037][T12769] vlan4: entered allmulticast mode [ 316.283311][T12769] vlan4: entered promiscuous mode [ 317.468167][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.543752][T12807] bond6: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 317.576213][T12807] bond6 (unregistering): Released all slaves [ 317.753422][T12824] IPVS: Unknown mcast interface: macsec0 [ 317.853451][T12826] __nla_validate_parse: 13 callbacks suppressed [ 317.853477][T12826] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1707'. [ 318.334424][T12846] netlink: 'syz.0.1714': attribute type 3 has an invalid length. [ 318.870809][T12870] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1719'. [ 319.050918][T12876] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1721'. [ 319.457563][T12895] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1727'. [ 319.569871][T12900] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1727'. [ 320.806467][T12927] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 320.824892][ T31] audit: type=1804 audit(1790272988.122:10): pid=12925 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1732" name="/newroot/340/cgroup.controllers" dev="tmpfs" ino=1777 res=1 errno=0 [ 320.825213][ T31] audit: type=1800 audit(1790272988.122:11): pid=12925 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1732" name="cgroup.controllers" dev="tmpfs" ino=1777 res=0 errno=0 [ 320.897513][T12932] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 320.967674][T12931] batman_adv: batadv0: Adding interface: syzkaller0 [ 320.967692][T12931] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 320.967718][T12931] batman_adv: batadv0: Interface activated: syzkaller0 [ 321.164455][T12949] netlink: 'syz.1.1738': attribute type 4 has an invalid length. [ 321.173128][T12931] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1735'. [ 321.298811][T12928] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 321.445328][T12928] batman_adv: batadv0: Removing interface: syzkaller0 [ 322.310247][T12983] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1754'. [ 322.310270][T12983] tipc: Invalid UDP bearer configuration [ 322.310314][T12983] tipc: Enabling of bearer rejected, failed to enable media [ 322.546474][T12989] Dead loop on virtual device bond4 (net 40), fix it urgently! [ 322.548286][T12989] Dead loop on virtual device bond4 (net 40), fix it urgently! [ 322.572243][T12989] Dead loop on virtual device bond4 (net 40), fix it urgently! [ 322.594958][T12989] Dead loop on virtual device bond4 (net 40), fix it urgently! [ 322.603238][T12989] Dead loop on virtual device bond4 (net 40), fix it urgently! [ 322.605286][T12989] Dead loop on virtual device bond4 (net 40), fix it urgently! [ 322.630169][T12989] Dead loop on virtual device bond4 (net 40), fix it urgently! [ 322.630768][T12989] Dead loop on virtual device bond4 (net 40), fix it urgently! [ 322.997007][T13002] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1764'. [ 323.222491][T13013] batadv_slave_1: entered promiscuous mode [ 323.239728][T13011] batadv_slave_1: left promiscuous mode [ 323.491104][T13020] [ 323.494696][T13020] ============================= [ 323.500325][T13020] WARNING: suspicious RCU usage [ 323.505473][T13020] syzkaller #0 Not tainted [ 323.509919][T13020] ----------------------------- [ 323.514896][T13020] kernel/events/callchain.c:163 suspicious rcu_dereference_check() usage! [ 323.524018][T13020] [ 323.524018][T13020] other info that might help us debug this: [ 323.524018][T13020] [ 323.534541][T13020] [ 323.534541][T13020] rcu_scheduler_active = 2, debug_locks = 1 [ 323.542758][T13020] locks held by syz.1.1769/13020: 1, last CPU#0: [ 323.549291][T13020] #0: ffffffff8ed5cad8 (rcu_tasks_trace_srcu_struct){....}-{0:0}, at: rcu_read_lock_trace+0x25/0x110 [ 323.560568][T13020] [ 323.560568][T13020] stack backtrace: [ 323.566619][T13020] CPU: 0 UID: 0 PID: 13020 Comm: syz.1.1769 Not tainted syzkaller #0 PREEMPT(full) [ 323.576109][T13020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 323.586199][T13020] Call Trace: [ 323.589597][T13020] [ 323.592555][T13020] dump_stack_lvl+0xe8/0x150 [ 323.597192][T13020] lockdep_rcu_suspicious+0x140/0x1d0 [ 323.602612][T13020] get_callchain_entry+0x2b7/0x3c0 [ 323.607769][T13020] get_perf_callchain+0xd5/0x880 [ 323.612759][T13020] ? __pfx_get_perf_callchain+0x10/0x10 [ 323.618355][T13020] ? __lock_acquire+0x747/0x2de0 [ 323.623341][T13020] __bpf_get_stack+0x375/0xae0 [ 323.628162][T13020] ? __pfx___bpf_get_stack+0x10/0x10 [ 323.633524][T13020] ? __lock_acquire+0x747/0x2de0 [ 323.638517][T13020] ? lock_acquire+0x115/0x350 [ 323.643231][T13020] ? bpf_prog_42db8cfdf50901c9+0x46/0x4e [ 323.648902][T13020] bpf_get_stack_raw_tp+0x1a4/0x210 [ 323.654157][T13020] bpf_prog_42db8cfdf50901c9+0x46/0x4e [ 323.659661][T13020] bpf_prog_run_pin_on_cpu+0x14f/0x4c0 [ 323.665248][T13020] bpf_prog_test_run_syscall+0x324/0x4c0 [ 323.670924][T13020] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10 [ 323.677209][T13020] ? __fget_files+0x2a/0x420 [ 323.681953][T13020] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10 [ 323.688161][T13020] bpf_prog_test_run+0x2c5/0x340 [ 323.693152][T13020] __sys_bpf+0xa22/0xd90 [ 323.697467][T13020] ? __pfx___sys_bpf+0x10/0x10 [ 323.702284][T13020] ? do_futex+0x458/0x4e0 [ 323.706693][T13020] ? rcu_is_watching+0x16/0xb0 [ 323.711511][T13020] __x64_sys_bpf+0xba/0xd0 [ 323.715959][T13020] do_syscall_64+0x166/0x520 [ 323.720571][T13020] ? trace_irq_disable+0x3b/0x140 [ 323.725622][T13020] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.731720][T13020] ? clear_bhb_loop+0x70/0xc0 [ 323.736430][T13020] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.742349][T13020] RIP: 0033:0x7f06d039e159 [ 323.746793][T13020] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 323.766419][T13020] RSP: 002b:00007f06d12d0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 323.774870][T13020] RAX: ffffffffffffffda RBX: 00007f06d0625fa0 RCX: 00007f06d039e159 [ 323.782862][T13020] RDX: 000000000000000c RSI: 00002000000004c0 RDI: 000000000000000a [ 323.790855][T13020] RBP: 00007f06d043506b R08: 0000000000000000 R09: 0000000000000000 [ 323.798849][T13020] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 323.806844][T13020] R13: 00007f06d0626038 R14: 00007f06d0625fa0 R15: 00007ffdaa529248 [ 323.814853][T13020] [ 332.825778][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!