last executing test programs: 1.529885299s ago: executing program 2 (id=3468): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000159000/0x1000)=nil, 0x1000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) mmap(&(0x7f000000b000/0x4000)=nil, 0x4000, 0x1000005, 0x8012, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000858000/0x2000)=nil, 0x2000, 0x2000004, 0x12, r1, 0xc08ba000) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x2000) 1.473026728s ago: executing program 2 (id=3470): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000a00)=@mangle={'mangle\x00', 0x1f, 0x6, 0x578, 0x1a0, 0x3f8, 0x2b8, 0x0, 0xd0, 0x518, 0x518, 0x518, 0x518, 0x518, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x10}, [0xffffffff, 0xffffffff, 0x7f000101, 0xff000000], [0xffffff00, 0xffffffff, 0xff000000, 0xff000000], 'pimreg\x00', 'veth1_to_bridge\x00', {}, {}, 0xfd, 0xff, 0x2, 0x8}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x5, 0x5}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x5}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@loopback, @ipv4=@private=0xa010101, 0x21, 0x3b, 0x200}}}, {{@uncond, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@hbh={{0x48}, {0x9, 0x2, 0x1, [0x8, 0xff, 0x10, 0x1, 0x2800, 0xc, 0xfffb, 0xff93, 0x7, 0x0, 0x81, 0x6, 0x0, 0x5, 0x7f, 0x200], 0x10}}]}, @HL={0x28, 'HL\x00', 0x0, {0x1, 0x2}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x3, 0x2, 0x17c, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5d8) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f00000000c0)=0xd95, 0x4019e2060d4e3ac7) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000d80), 0x36f, 0x20102, 0x0) 1.405821523s ago: executing program 1 (id=3472): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) sendto(r0, &(0x7f00000002c0)='%', 0x300000, 0x0, 0x0, 0x0) 1.353843153s ago: executing program 2 (id=3473): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x810}], 0x1, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001bc0)=ANY=[], 0x11a0}, 0x1, 0x0, 0x0, 0x8040}, 0x8080) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) 1.280576648s ago: executing program 2 (id=3476): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x6a) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) sendfile(r3, r2, 0x0, 0xf2) 1.259321238s ago: executing program 4 (id=3477): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @sock_ops}, 0x94) r0 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000340)={r0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x10, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000580)="d8001c00180081064e81f782db44fd56170d12a0b9b545c7", 0x18}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000040)={r1}) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e3, &(0x7f0000000180)={r0, r2}) 1.228406924s ago: executing program 0 (id=3478): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, 0x9, 0x6, 0x3, 0x0, 0x0, {0xa, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x24018800}, 0x24000810) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000020000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x880) 1.057780698s ago: executing program 4 (id=3480): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x80000, {0x0, 0x0, 0x0, r3, {}, {0xffe6, 0xb}, {0xffe0, 0x3}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_TARGET={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) 928.810836ms ago: executing program 0 (id=3482): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'wlc\x00', 0x1, 0x4, 0x72}, 0x2c) r1 = socket$kcm(0xa, 0x2, 0x0) r2 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x1, 0xcd}}, 0x44) syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 928.250264ms ago: executing program 2 (id=3483): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) 817.034399ms ago: executing program 0 (id=3484): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1a3, 0x655c, 0x4, 0x40, 0x7fffffff, 0x7fffffff, 0x80, 0xffffffff, 0x1}}}}]}, 0x58}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0x8, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x2}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4080}, 0x4000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 816.31093ms ago: executing program 4 (id=3486): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80800) setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f0000000940)=0x1000008, 0x4) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmmsg$unix(r1, &(0x7f0000001780)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000580)=""/223, 0xdf}], 0x1}}], 0x1, 0x42, 0x0) 743.714771ms ago: executing program 0 (id=3488): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) bind$bt_hci(r1, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x18) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) 617.945282ms ago: executing program 0 (id=3489): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) sendmsg$inet(r2, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f00000002c0)=r0}, 0x20) recvmsg$unix(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000340)=""/229, 0xec1}], 0x1}, 0x0) 612.993227ms ago: executing program 3 (id=3490): recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000480)=""/29, 0x1d}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@deltclass={0x24, 0x29, 0x200, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {}, {0x3, 0xfff3}, {0xfff2, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x8000) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000440)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd2c, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x81}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000084}, 0x8890) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 588.873391ms ago: executing program 0 (id=3491): r0 = socket$kcm(0x29, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r2 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1}) sendmsg$kcm(r0, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x100000}], 0x1}, 0x0) close(r0) 508.484864ms ago: executing program 3 (id=3492): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)={0x20, 0x2d, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}, [@typed={0xc, 0xc, 0x0, 0x0, @u64=0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x4000804) 456.97367ms ago: executing program 1 (id=3493): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000640)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x11}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0x3}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8, 0x11, 0x1}]}}]}, 0x3c}}, 0x0) 314.06872ms ago: executing program 1 (id=3494): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xfffb, 0x4}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_u32={{0x8}, {0x20, 0x2, [@TCA_U32_LINK={0x8}, @TCA_U32_SEL={0x14, 0x5, {0xb, 0x0, 0x0, 0xe60, 0xc, 0x9, 0x0, 0x2}}]}}]}, 0x4c}}, 0x24000000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0x1c}}, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 313.848729ms ago: executing program 4 (id=3495): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000940)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd25, 0xa000, {0x0, 0x0, 0x0, r3, {0xe, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x14, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 269.563884ms ago: executing program 1 (id=3496): sendmsg$IPSET_CMD_GET_BYINDEX(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x1c, 0xf, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x240408c0}, 0xc0) r0 = socket$inet6(0xa, 0x3, 0x3c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x5000, 0x0, @loopback, 0x5}, 0x1c) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) 257.390718ms ago: executing program 3 (id=3497): syz_open_procfs$namespace(0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000084000000060a010400000000000000000100000008000b40000000005c0004802c000180090001007866726d000000001c0002800800024000000004050003000000000008000140000000092c00018008000100636d7000200002800c00038005000100ac000000080001400000000c08000240000000000900010073797a300000000014000000110001"], 0xf8}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 201.672018ms ago: executing program 3 (id=3498): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x15}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) r2 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r2, &(0x7f0000000800)=[{{&(0x7f0000000280)={0xa, 0x0, 0x2, @mcast2, 0x9}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000000100)="8000102e7577d401", 0x8}], 0x1}}], 0x1, 0x40000000) 126.030694ms ago: executing program 4 (id=3499): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a", 0x15}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f000019"], 0xfe33) 125.880764ms ago: executing program 1 (id=3500): syz_genetlink_get_family_id$nl802154(&(0x7f0000000900), 0xffffffffffffffff) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000000600)=""/108, 0x6c}, {&(0x7f0000000180)=""/256, 0x100}], 0x2}, 0x60}], 0x1, 0x10042, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x63, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0xe, 0x3}, {0x6}, {0x4, 0x8}}}, 0x24}}, 0x40004) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) 125.631733ms ago: executing program 3 (id=3501): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=@newtfilter={0xe4, 0x2c, 0xd27, 0x2, 0x0, {0x0, 0x0, 0x0, r1, {0x5, 0x9}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0xb8, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0xc, 0x6}}, @TCA_U32_SEL={0xa4, 0x5, {0x7, 0x2, 0x9, 0x0, 0x8, 0x200, 0x9, 0x2, [{0xffff0001, 0xffff, 0x9, 0x7}, {0xe, 0x2c3, 0xb526, 0x110}, {0xc, 0x6, 0xfffff65d, 0x4000002}, {0x3, 0xc, 0x3ff, 0x6}, {0x7, 0x5b, 0x8, 0x6}, {0x4, 0x7, 0x0, 0x4}, {0x6, 0x4, 0x7, 0x4}, {0x4, 0x2, 0xffff6d1b, 0x3}, {0x3, 0x1, 0xaf, 0x401}]}}, @TCA_U32_LINK={0x8, 0x3, 0x1}]}}]}, 0xe4}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 60.621417ms ago: executing program 4 (id=3502): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="0100009f000000000000000088a8600081"], 0x3a) 25.044164ms ago: executing program 1 (id=3503): socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="600000001800dd8d000000000000000002000000ff0000060000000008000500ac1414bb08001e0069"], 0x60}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000029"], 0xb8}}, 0x4004) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a"], 0xb8}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x7}}, 0xb8}}, 0x10) 7.412703ms ago: executing program 2 (id=3504): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000009c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r3, {0x7, 0x9}, {}, {0xc, 0x9}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_EMATCHES={0x10, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x60006010}, 0x200008c2) 0s ago: executing program 3 (id=3505): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0xfffc, @multicast2}, 0x2}}, 0x2e) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) close(0x4) 0s ago: executing program 1 (id=3506): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x40000c0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in6=@private1, 0x0, 0x4}]}]}, 0xfc}}, 0x0) r1 = socket(0x2, 0x3, 0x6) bind$inet(r1, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f00000000c0)=0x6, 0x4) sendto$inet(r1, 0x0, 0x0, 0x48812, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) kernel console output (not intermixed with test programs): state [ 80.803220][ T1340] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.810410][ T1340] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.843380][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.850594][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.890069][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.897266][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.000310][ T5866] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.195727][ T5866] veth0_vlan: entered promiscuous mode [ 81.251941][ T5866] veth1_vlan: entered promiscuous mode [ 81.273407][ T5872] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.444388][ T5866] veth0_macvtap: entered promiscuous mode [ 81.494069][ T5866] veth1_macvtap: entered promiscuous mode [ 81.614745][ T5864] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.658048][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.685755][ T5878] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.705500][ T5863] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.729448][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.744164][ T5864] veth0_vlan: entered promiscuous mode [ 81.777803][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.817196][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.845051][ T5864] veth1_vlan: entered promiscuous mode [ 81.876244][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.898657][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.009091][ T5863] veth0_vlan: entered promiscuous mode [ 82.026023][ T5878] veth0_vlan: entered promiscuous mode [ 82.071033][ T5863] veth1_vlan: entered promiscuous mode [ 82.119649][ T5878] veth1_vlan: entered promiscuous mode [ 82.144230][ T5864] veth0_macvtap: entered promiscuous mode [ 82.153433][ T5872] veth0_vlan: entered promiscuous mode [ 82.204879][ T5864] veth1_macvtap: entered promiscuous mode [ 82.222699][ T3549] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.237191][ T3549] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.263569][ T5863] veth0_macvtap: entered promiscuous mode [ 82.286150][ T5872] veth1_vlan: entered promiscuous mode [ 82.295161][ T5863] veth1_macvtap: entered promiscuous mode [ 82.315766][ T3549] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.327615][ T5879] Bluetooth: hci4: command tx timeout [ 82.330417][ T5878] veth0_macvtap: entered promiscuous mode [ 82.343098][ T3549] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.350307][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.364196][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.386207][ T5878] veth1_macvtap: entered promiscuous mode [ 82.396630][ T5879] Bluetooth: hci0: command tx timeout [ 82.402074][ T51] Bluetooth: hci3: command tx timeout [ 82.402097][ T5875] Bluetooth: hci2: command tx timeout [ 82.408127][ T51] Bluetooth: hci1: command tx timeout [ 82.422933][ T1340] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.441964][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.458786][ T1340] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.471888][ T1340] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.494701][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.499006][ T5866] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 82.534669][ T1340] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.544055][ T1340] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.559775][ T5878] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.578299][ T1340] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.587480][ T1340] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.611214][ T5878] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.664558][ T1340] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.694778][ T5872] veth0_macvtap: entered promiscuous mode [ 82.712435][ T5872] veth1_macvtap: entered promiscuous mode [ 82.762494][ T3012] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.771644][ T3012] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.832270][ T3012] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.852094][ T3012] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.898863][ T5872] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.914872][ T1340] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.927567][ T5872] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.945858][ T1340] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.009381][ T2914] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.046248][ T3012] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.059909][ T2914] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.084006][ T3012] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.084272][ T2914] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.096257][ T3012] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.109861][ T2914] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.132644][ T3012] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.154839][ T5994] netlink: 'syz.2.8': attribute type 23 has an invalid length. [ 83.209298][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.236143][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.330541][ T3523] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.376030][ T3523] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.448223][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.456067][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.673900][ T3012] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.686729][ T2914] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.694567][ T2914] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.702567][ T3012] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.995619][ T6013] nbd: must specify a device to reconfigure [ 84.397208][ T51] Bluetooth: hci4: command tx timeout [ 84.477593][ T5879] Bluetooth: hci3: command tx timeout [ 84.480710][ T5875] Bluetooth: hci1: command tx timeout [ 84.483049][ T5879] Bluetooth: hci0: command tx timeout [ 84.494141][ T51] Bluetooth: hci2: command tx timeout [ 85.250588][ T6063] tipc: Enabling of bearer rejected, failed to enable media [ 85.291794][ T6067] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 85.488199][ T6072] xt_socket: unknown flags 0xe4 [ 85.563931][ T6065] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.572152][ T6065] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.720056][ T6084] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 85.813670][ T6065] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 86.170831][ T6102] vlan2: entered allmulticast mode [ 86.183120][ T6102] bond0: entered allmulticast mode [ 86.223904][ T6102] bond_slave_0: entered allmulticast mode [ 86.253114][ T6102] bond_slave_1: entered allmulticast mode [ 86.317132][ C0] Illegal XDP return value 16128 on prog (id 4) dev bond0, expect packet loss! [ 86.402444][ T6114] netlink: 'syz.2.59': attribute type 1 has an invalid length. [ 86.728815][ T120] cfg80211: failed to load regulatory.db [ 86.757894][ T6126] : entered promiscuous mode [ 87.884144][ T6173] netlink: 8 bytes leftover after parsing attributes in process `syz.0.87'. [ 87.924510][ T6173] netlink: 4 bytes leftover after parsing attributes in process `syz.0.87'. [ 87.951485][ T6173] netlink: 'syz.0.87': attribute type 14 has an invalid length. [ 87.980015][ T6173] netlink: 'syz.0.87': attribute type 13 has an invalid length. [ 88.367741][ T6190] netlink: 165 bytes leftover after parsing attributes in process `syz.3.93'. [ 88.826873][ T6215] netlink: 240 bytes leftover after parsing attributes in process `syz.3.106'. [ 88.971917][ T6223] netlink: 24 bytes leftover after parsing attributes in process `syz.1.108'. [ 89.262201][ T6235] warning: `syz.3.115' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 90.249937][ T6271] netlink: 12 bytes leftover after parsing attributes in process `syz.4.133'. [ 90.586905][ T6289] netlink: 100 bytes leftover after parsing attributes in process `syz.4.140'. [ 91.153710][ T6315] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 91.356775][ T51] Bluetooth: hci4: command tx timeout [ 91.854405][ T6344] Bluetooth: MGMT ver 1.23 [ 92.361579][ T6371] netlink: 8 bytes leftover after parsing attributes in process `syz.1.181'. [ 92.374641][ T6371] netlink: 8 bytes leftover after parsing attributes in process `syz.1.181'. [ 92.644376][ T6386] netlink: 16 bytes leftover after parsing attributes in process `syz.4.189'. [ 92.886346][ T6398] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 93.199264][ T6413] netlink: 4 bytes leftover after parsing attributes in process `syz.0.202'. [ 93.648654][ T6435] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 93.656090][ T6435] IPv6: NLM_F_CREATE should be set when creating new route [ 93.663457][ T6435] IPv6: NLM_F_CREATE should be set when creating new route [ 93.670720][ T6435] IPv6: NLM_F_CREATE should be set when creating new route [ 93.753476][ T6435] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 93.786497][ T6435] Zero length message leads to an empty skb [ 93.959733][ T6449] netlink: 8 bytes leftover after parsing attributes in process `syz.1.218'. [ 94.720558][ T6479] netlink: 24 bytes leftover after parsing attributes in process `syz.1.233'. [ 95.112442][ T6497] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 95.277202][ T6507] netlink: 40 bytes leftover after parsing attributes in process `syz.3.245'. [ 95.288367][ T6506] IPVS: ip_vs_add_dest(): server weight less than zero [ 95.297423][ T5942] IPVS: starting estimator thread 0... [ 95.305699][ T6508] netlink: 'syz.1.247': attribute type 1 has an invalid length. [ 95.333589][ T6508] netlink: 204 bytes leftover after parsing attributes in process `syz.1.247'. [ 95.386656][ T6509] IPVS: using max 37 ests per chain, 88800 per kthread [ 95.539337][ T6519] netlink: 'syz.1.251': attribute type 2 has an invalid length. [ 95.625863][ T6523] netlink: 8 bytes leftover after parsing attributes in process `syz.0.254'. [ 96.050792][ T6544] xt_l2tp: missing protocol rule (udp|l2tpip) [ 96.204611][ T6552] sit1: entered promiscuous mode [ 96.229569][ T6552] sit1: entered allmulticast mode [ 96.629135][ T5927] IPVS: starting estimator thread 0... [ 96.736626][ T6576] IPVS: using max 33 ests per chain, 79200 per kthread [ 96.765636][ T6582] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 97.107520][ T6594] vcan0: entered allmulticast mode [ 97.459881][ T6599] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.468180][ T6599] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.670624][ T6599] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 97.879674][ T6622] netlink: 'syz.1.299': attribute type 1 has an invalid length. [ 97.926573][ T6622] netlink: 12 bytes leftover after parsing attributes in process `syz.1.299'. [ 98.797991][ T6663] netlink: 16 bytes leftover after parsing attributes in process `syz.2.318'. [ 100.638260][ T6754] netlink: 'syz.4.360': attribute type 2 has an invalid length. [ 100.862250][ T6768] netlink: 76 bytes leftover after parsing attributes in process `syz.4.367'. [ 101.942366][ T6818] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 102.430211][ T6843] netlink: 8 bytes leftover after parsing attributes in process `syz.0.404'. [ 102.441349][ T6844] netlink: 24 bytes leftover after parsing attributes in process `syz.2.403'. [ 102.480649][ T6847] syz.1.405 uses obsolete (PF_INET,SOCK_PACKET) [ 102.790096][ T6861] openvswitch: netlink: IPv4 frag type 255 is out of range max 2 [ 102.872935][ T6864] netlink: 'syz.1.414': attribute type 1 has an invalid length. [ 102.914332][ T6864] netlink: 216 bytes leftover after parsing attributes in process `syz.1.414'. [ 103.432909][ T6891] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 103.969098][ T6922] netlink: 14 bytes leftover after parsing attributes in process `syz.4.442'. [ 105.396882][ T6983] IPVS: fo: FWM 3 0x00000003 - no destination available [ 105.908747][ T7011] netlink: 20 bytes leftover after parsing attributes in process `syz.4.484'. [ 107.034373][ T7068] tipc: Started in network mode [ 107.076692][ T7068] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 107.097462][ T7068] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 107.119458][ T7068] tipc: Enabled bearer , priority 10 [ 107.188535][ T7072] netlink: 24 bytes leftover after parsing attributes in process `syz.1.515'. [ 107.346651][ T7081] netlink: 32 bytes leftover after parsing attributes in process `syz.3.519'. [ 107.382028][ T7081] netlink: 32 bytes leftover after parsing attributes in process `syz.3.519'. [ 107.641927][ T7097] netlink: 8 bytes leftover after parsing attributes in process `syz.0.527'. [ 108.237411][ T43] tipc: Node number set to 1 [ 108.729284][ T7147] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 110.476606][ T5879] Bluetooth: hci0: command 0x0c1a tx timeout [ 110.476814][ T51] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 110.714588][ T7248] xt_limit: Overflow, try lower: 271964/0 [ 111.133198][ T7270] netlink: 'syz.2.608': attribute type 10 has an invalid length. [ 111.211444][ T7270] team0: Device ipvlan1 failed to register rx_handler [ 111.357438][ T7279] netlink: 12 bytes leftover after parsing attributes in process `syz.4.613'. [ 111.651900][ T7293] netlink: 'syz.1.619': attribute type 3 has an invalid length. [ 111.781657][ T7299] block nbd4: not configured, cannot reconfigure [ 112.340923][ T7328] netlink: 100 bytes leftover after parsing attributes in process `syz.3.635'. [ 114.433245][ T7423] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.681'. [ 114.440883][ T7424] netlink: 256 bytes leftover after parsing attributes in process `syz.1.682'. [ 114.502618][ T7424] unsupported nlmsg_type 40 [ 114.561398][ T7430] bridge0: port 3(veth0_to_bridge) entered blocking state [ 114.598468][ T7430] bridge0: port 3(veth0_to_bridge) entered disabled state [ 114.605919][ T7430] veth0_to_bridge: entered allmulticast mode [ 114.659603][ T7430] veth0_to_bridge: entered promiscuous mode [ 114.684254][ T7430] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 114.694999][ T7437] netlink: 'syz.2.688': attribute type 2 has an invalid length. [ 114.722157][ T7430] bridge0: port 3(veth0_to_bridge) entered blocking state [ 114.729624][ T7430] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 115.081501][ T7454] atomic_op ffff8880572e9198 conn xmit_atomic 0000000000000000 [ 115.184494][ T7458] netlink: 'syz.4.699': attribute type 1 has an invalid length. [ 115.670465][ T7483] netlink: 4 bytes leftover after parsing attributes in process `syz.2.711'. [ 116.073722][ T7498] pim6reg: entered allmulticast mode [ 116.097128][ T7507] pim6reg: left allmulticast mode [ 116.282959][ T7512] netlink: 212364 bytes leftover after parsing attributes in process `syz.0.725'. [ 116.362438][ T7512] openvswitch: netlink: Message has 5 unknown bytes. [ 117.287220][ T7561] netlink: 28 bytes leftover after parsing attributes in process `syz.3.748'. [ 117.599712][ T7578] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 117.643708][ T7580] netlink: 'syz.2.757': attribute type 29 has an invalid length. [ 117.663254][ T7580] netlink: 'syz.2.757': attribute type 29 has an invalid length. [ 117.980083][ T7596] netlink: 12 bytes leftover after parsing attributes in process `syz.0.764'. [ 118.016355][ T7596] netlink: 12 bytes leftover after parsing attributes in process `syz.0.764'. [ 118.214667][ T7606] netlink: 216 bytes leftover after parsing attributes in process `syz.2.770'. [ 118.252397][ T7606] netlink: 8 bytes leftover after parsing attributes in process `syz.2.770'. [ 118.622884][ T7622] netlink: 4 bytes leftover after parsing attributes in process `syz.0.778'. [ 119.077370][ T7641] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 120.628709][ T7719] netlink: 'syz.1.819': attribute type 33 has an invalid length. [ 121.276305][ T7742] netlink: 4 bytes leftover after parsing attributes in process `syz.1.828'. [ 121.299440][ T7742] netlink: 176 bytes leftover after parsing attributes in process `syz.1.828'. [ 121.309022][ T7742] netlink: 'syz.1.828': attribute type 5 has an invalid length. [ 121.627895][ T7758] Bluetooth: MGMT ver 1.23 [ 121.837845][ T7765] xt_policy: too many policy elements [ 122.340009][ T7788] sctp: [Deprecated]: syz.3.850 (pid 7788) Use of int in maxseg socket option. [ 122.340009][ T7788] Use struct sctp_assoc_value instead [ 122.521606][ T7796] netlink: 248 bytes leftover after parsing attributes in process `syz.2.854'. [ 122.563041][ T7796] NCSI netlink: No device for ifindex 0 [ 122.786208][ T7808] xt_time: unknown flags 0xf4 [ 123.050849][ T7825] netlink: 32 bytes leftover after parsing attributes in process `syz.3.868'. [ 123.157119][ T7829] netlink: 'syz.0.870': attribute type 13 has an invalid length. [ 123.167102][ T7832] netlink: 4 bytes leftover after parsing attributes in process `syz.4.872'. [ 123.192840][ T7829] veth0_macvtap: left promiscuous mode [ 123.247453][ T7829] macvtap0: entered allmulticast mode [ 123.278293][ T7829] macvtap0: refused to change device tx_queue_len [ 123.373983][ T7841] netlink: 'syz.4.875': attribute type 2 has an invalid length. [ 123.405296][ T7841] netlink: 'syz.4.875': attribute type 2 has an invalid length. [ 123.646851][ T7852] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 124.068157][ T7874] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 124.241824][ T7880] xt_l2tp: missing protocol rule (udp|l2tpip) [ 124.460533][ T7889] openvswitch: netlink: VXLAN extension message has 11 unknown bytes. [ 124.521330][ T7894] netlink: 11 bytes leftover after parsing attributes in process `syz.0.901'. [ 124.671531][ T7898] xt_HMARK: proto mask must be zero with L3 mode [ 124.731790][ T7904] netlink: 20 bytes leftover after parsing attributes in process `syz.0.906'. [ 125.030227][ T7917] netlink: 'syz.4.912': attribute type 7 has an invalid length. [ 125.752549][ T7952] netlink: 'syz.3.929': attribute type 1 has an invalid length. [ 125.777378][ T7952] netlink: 236 bytes leftover after parsing attributes in process `syz.3.929'. [ 126.331619][ T7972] xt_socket: unknown flags 0x50 [ 126.520240][ T7983] openvswitch: netlink: IPv6 tunnel dst address is zero [ 126.711797][ T7991] netlink: 'syz.3.946': attribute type 2 has an invalid length. [ 126.803268][ T7994] team0: Device vti0 is of different type [ 127.404298][ T8021] netlink: 44 bytes leftover after parsing attributes in process `syz.0.962'. [ 127.439654][ T8021] netlink: 43 bytes leftover after parsing attributes in process `syz.0.962'. [ 127.495119][ T8021] netlink: 'syz.0.962': attribute type 5 has an invalid length. [ 127.541332][ T8021] netlink: 43 bytes leftover after parsing attributes in process `syz.0.962'. [ 128.307655][ T8062] tipc: Enabling of bearer rejected, media not registered [ 128.583255][ T8073] gretap0: entered promiscuous mode [ 128.643065][ T8073] vlan2: entered promiscuous mode [ 129.688862][ T8130] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.1014'. [ 129.725658][ T8130] netlink: zone id is out of range [ 129.750837][ T8130] netlink: get zone limit has 8 unknown bytes [ 131.156049][ T8194] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1043'. [ 131.336923][ T8202] team_slave_0: entered promiscuous mode [ 131.343208][ T8202] team_slave_1: entered promiscuous mode [ 131.423469][ T8202] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 131.434175][ T8208] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1051'. [ 131.443681][ T8202] team0: Device macvtap1 is already an upper device of the team interface [ 131.499635][ T8202] team_slave_0: left promiscuous mode [ 131.505163][ T8202] team_slave_1: left promiscuous mode [ 131.544266][ T8212] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1053'. [ 131.897080][ T8225] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1060'. [ 131.950874][ T8225] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1060'. [ 131.964488][ T8225] netlink: 'syz.3.1060': attribute type 5 has an invalid length. [ 131.979621][ T8225] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1060'. [ 132.100239][ T8232] netlink: 'syz.1.1063': attribute type 29 has an invalid length. [ 132.118512][ T8235] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 132.164117][ T8238] netlink: 277 bytes leftover after parsing attributes in process `syz.2.1066'. [ 132.807420][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.813941][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.106013][ T8283] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1087'. [ 133.851336][ T8317] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1103'. [ 134.150156][ T8335] nbd: must specify a size in bytes for the device [ 134.765883][ T8366] team0: Device vti0 is of different type [ 134.788155][ T8368] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 135.070081][ T8382] netlink: 'syz.3.1135': attribute type 18 has an invalid length. [ 135.166643][ T1340] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 135.177227][ T3012] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 135.194409][ T3549] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 135.225592][ T3549] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 136.159854][ T8437] netlink: 'syz.3.1162': attribute type 1 has an invalid length. [ 136.442588][ T8450] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1168'. [ 136.712829][ T8455] IPVS: Scheduler module ip_vs_sip not found [ 136.892488][ T8474] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1179'. [ 136.982462][ T8477] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 137.277251][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 137.289585][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 137.301909][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 137.314233][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 137.326583][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 137.338923][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 137.351283][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 137.363597][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 137.375908][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 137.932953][ T8503] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1191'. [ 138.101053][ T8501] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1191'. [ 138.663542][ T8516] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1198'. [ 138.711206][ T8516] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1198'. [ 139.796789][ C0] net_ratelimit: 7050 callbacks suppressed [ 139.796808][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 139.814975][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 139.827328][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 139.839682][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 139.851515][ T8548] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 139.851988][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 139.872818][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 139.885806][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 139.898150][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 139.910516][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 140.210768][ T8552] sock: sock_timestamping_bind_phc: sock not bind to device [ 140.711664][ T8567] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1221'. [ 142.673794][ T8613] netlink: 'syz.2.1242': attribute type 1 has an invalid length. [ 144.347547][ T8647] Bluetooth: MGMT ver 1.23 [ 144.807138][ C0] net_ratelimit: 11931 callbacks suppressed [ 144.807160][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 144.827322][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 144.840563][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 144.853825][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 144.867107][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 144.880315][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 144.893565][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 144.906864][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 144.920133][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 144.933370][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 145.740881][ T8679] netlink: 'syz.4.1272': attribute type 2 has an invalid length. [ 146.407674][ T5879] Bluetooth: hci2: command 0x0401 tx timeout [ 146.415196][ T51] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 147.145299][ C0] sched: DL replenish lagged too much [ 149.816747][ C0] net_ratelimit: 10104 callbacks suppressed [ 149.816767][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 149.835934][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 149.848366][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6e:45:11:65:81:dd, vlan:0) [ 149.860748][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 149.873133][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 149.887987][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 149.900404][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6e:45:11:65:81:dd, vlan:0) [ 149.912875][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 149.925270][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 149.938544][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 154.372069][ T8803] netlink: 'syz.3.1332': attribute type 58 has an invalid length. [ 154.447233][ T8803] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1332'. [ 154.826750][ C0] net_ratelimit: 8370 callbacks suppressed [ 154.826768][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 154.845930][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 154.858414][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6e:45:11:65:81:dd, vlan:0) [ 154.871956][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 154.884949][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 154.898219][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 154.910660][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6e:45:11:65:81:dd, vlan:0) [ 154.923062][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 154.935486][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 154.948669][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 156.869845][ T8860] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1358'. [ 156.935125][ T8848] "syz.3.1356" (8848) uses obsolete ecb(arc4) skcipher [ 157.347582][ T8868] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1363'. [ 159.837110][ C0] net_ratelimit: 8019 callbacks suppressed [ 159.837128][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 159.855769][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6e:45:11:65:81:dd, vlan:0) [ 159.868140][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 159.880566][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 159.893822][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 159.906255][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6e:45:11:65:81:dd, vlan:0) [ 159.918623][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 159.931053][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 159.944261][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 159.956816][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6e:45:11:65:81:dd, vlan:0) [ 160.610686][ T8946] netlink: 'syz.1.1396': attribute type 1 has an invalid length. [ 160.694021][ T8946] netlink: 'syz.1.1396': attribute type 3 has an invalid length. [ 160.797991][ T8946] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1396'. [ 161.653934][ T8971] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1407'. [ 161.727163][ T8971] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1407'. [ 161.736142][ T8971] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1407'. [ 161.973736][ T8979] netlink: 'syz.1.1411': attribute type 1 has an invalid length. [ 162.465648][ T8988] pimreg3: entered allmulticast mode [ 162.538019][ T8991] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1413'. [ 164.846554][ C0] net_ratelimit: 8133 callbacks suppressed [ 164.846572][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6e:45:11:65:81:dd, vlan:0) [ 164.864859][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 164.877271][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 164.891016][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 164.903435][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6e:45:11:65:81:dd, vlan:0) [ 164.915817][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 164.928220][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 164.941485][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 164.955082][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6e:45:11:65:81:dd, vlan:0) [ 164.967607][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 165.933719][ T9077] xt_l2tp: invalid flags combination: 0 [ 166.478055][ T9089] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1462'. [ 166.548143][ T9091] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.1463'. [ 166.915377][ T43] IPVS: starting estimator thread 0... [ 167.036724][ T9103] IPVS: using max 27 ests per chain, 64800 per kthread [ 167.748274][ T9125] netlink: 'syz.1.1480': attribute type 1 has an invalid length. [ 167.793167][ T9125] netlink: 212 bytes leftover after parsing attributes in process `syz.1.1480'. [ 167.857253][ T9125] netlink: 'syz.1.1480': attribute type 1 has an invalid length. [ 168.598480][ T9142] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1487'. [ 169.158267][ T9154] tipc: Enabling not permitted [ 169.200241][ T9154] tipc: Enabling of bearer rejected, failed to enable media [ 169.323739][ T9159] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1495'. [ 169.856963][ C0] net_ratelimit: 8529 callbacks suppressed [ 169.856982][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 169.877550][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 169.890893][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6e:45:11:65:81:dd, vlan:0) [ 169.903518][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 169.916190][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 169.930112][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 169.942808][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6e:45:11:65:81:dd, vlan:0) [ 169.955528][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 169.968255][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 169.982324][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 171.719773][ T9214] netlink: 'syz.0.1521': attribute type 62 has an invalid length. [ 173.354607][ T9242] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.1533'. [ 174.223435][ T9256] netlink: 'syz.3.1539': attribute type 1 has an invalid length. [ 174.866743][ C0] net_ratelimit: 8696 callbacks suppressed [ 174.866761][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6e:45:11:65:81:dd, vlan:0) [ 174.885081][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 174.897511][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 174.910745][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 174.923168][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6e:45:11:65:81:dd, vlan:0) [ 174.935576][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 174.947999][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 174.961349][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 174.973762][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6e:45:11:65:81:dd, vlan:0) [ 174.986134][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 175.482053][ T9281] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1552'. [ 175.946133][ T9296] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1557'. [ 176.016226][ T9298] rdma_op ffff8880579921f0 conn xmit_rdma 0000000000000000 [ 176.143250][ T9296] macsec1: entered promiscuous mode [ 176.182556][ T9296] bridge0: entered promiscuous mode [ 176.259851][ T9296] macsec1: entered allmulticast mode [ 176.347473][ T9296] bridge0: entered allmulticast mode [ 176.399159][ T9296] bridge0: port 3(macsec1) entered blocking state [ 176.482800][ T9296] bridge0: port 3(macsec1) entered disabled state [ 176.652454][ T9296] bridge0: left allmulticast mode [ 176.687321][ T9296] bridge0: left promiscuous mode [ 177.861844][ T9334] pim6reg527: entered allmulticast mode [ 179.681607][ T9368] tipc: Started in network mode [ 179.764241][ T9368] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 179.814147][ T9368] tipc: Enabled bearer , priority 0 [ 179.877088][ C0] net_ratelimit: 8813 callbacks suppressed [ 179.877106][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 179.895456][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6e:45:11:65:81:dd, vlan:0) [ 179.907870][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 179.920327][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 179.933700][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 179.947530][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6e:45:11:65:81:dd, vlan:0) [ 179.959977][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 179.972539][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 179.985796][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 179.998268][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6e:45:11:65:81:dd, vlan:0) [ 180.927707][ T980] tipc: Node number set to 11578026 [ 181.644652][ T9406] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.1610'. [ 183.544864][ T9447] netlink: 'syz.0.1630': attribute type 11 has an invalid length. [ 183.851639][ T9455] netlink: 'syz.4.1634': attribute type 3 has an invalid length. [ 184.368962][ T9465] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1639'. [ 184.467150][ T9465] nbd: illegal input index -8454144 [ 184.886971][ C0] net_ratelimit: 8802 callbacks suppressed [ 184.886990][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 184.905303][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6e:45:11:65:81:dd, vlan:0) [ 184.917683][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 184.930601][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 184.943857][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 184.956288][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6e:45:11:65:81:dd, vlan:0) [ 184.968713][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 184.981126][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 184.994401][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 185.006938][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6e:45:11:65:81:dd, vlan:0) [ 189.077178][ T9573] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1692'. [ 189.896569][ C0] net_ratelimit: 8491 callbacks suppressed [ 189.896589][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6e:45:11:65:81:dd, vlan:0) [ 189.914856][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 189.927288][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 189.940632][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 189.953109][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6e:45:11:65:81:dd, vlan:0) [ 189.965524][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 189.977971][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 189.991267][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 190.003756][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6e:45:11:65:81:dd, vlan:0) [ 190.016272][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 191.861107][ T9635] veth1_macvtap: left promiscuous mode [ 191.904269][ T9635] macsec0: entered promiscuous mode [ 191.959821][ T9635] macsec0: entered allmulticast mode [ 192.039320][ T9639] veth1_macvtap: entered promiscuous mode [ 192.071498][ T9639] veth1_macvtap: entered allmulticast mode [ 192.084704][ T9639] macsec0: left promiscuous mode [ 192.093398][ T9639] macsec0: left allmulticast mode [ 192.099578][ T9639] veth1_macvtap: left allmulticast mode [ 192.113727][ T9641] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1724'. [ 192.543485][ T9650] tipc: Enabling of bearer rejected, failed to enable media [ 193.467463][ T9670] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1733'. [ 193.993293][ T30] audit: type=1800 audit(1757431829.952:2): pid=9681 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1740" name="memory.events" dev="tmpfs" ino=1850 res=0 errno=0 [ 194.207121][ T30] audit: type=1804 audit(1757431829.972:3): pid=9681 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1740" name="/newroot/366/memory.events" dev="tmpfs" ino=1850 res=1 errno=0 [ 194.261096][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.268214][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.906691][ C0] net_ratelimit: 8176 callbacks suppressed [ 194.906710][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 194.925936][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 194.938558][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6e:45:11:65:81:dd, vlan:0) [ 194.951010][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 194.963449][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 194.976808][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 194.989268][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6e:45:11:65:81:dd, vlan:0) [ 194.996325][ T9702] IPVS: Error connecting to the multicast addr [ 195.001692][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 195.002104][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 195.033556][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 195.549888][ T9715] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.1756'. [ 196.457281][ T9734] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1764'. [ 197.396307][ T9753] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1773'. [ 197.744327][ T9759] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 197.875421][ T9759] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 199.177844][ T9794] netlink: 348 bytes leftover after parsing attributes in process `syz.3.1794'. [ 199.916594][ C0] net_ratelimit: 8577 callbacks suppressed [ 199.916614][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 199.934896][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 199.947329][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 199.961161][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 199.973611][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6e:45:11:65:81:dd, vlan:0) [ 199.986080][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 199.998608][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 200.011027][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 200.024281][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 200.036764][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6e:45:11:65:81:dd, vlan:0) [ 200.934342][ T9837] smc: net device erspan0 applied user defined pnetid SYZ0 [ 201.061186][ T9844] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1812'. [ 201.440427][ T5869] Bluetooth: hci2: command 0x0401 tx timeout [ 201.447149][ T5185] Bluetooth: hci1: command 0x0406 tx timeout [ 201.453190][ T5185] Bluetooth: hci3: command 0x0406 tx timeout [ 202.384956][ T9872] net veth1_virt_wifi .: renamed from virt_wifi0 [ 203.939258][ T9907] netlink: 204 bytes leftover after parsing attributes in process `syz.1.1848'. [ 204.926702][ C0] net_ratelimit: 9105 callbacks suppressed [ 204.926722][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 204.945641][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 204.958230][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 204.971510][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 204.983948][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6e:45:11:65:81:dd, vlan:0) [ 204.996386][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 205.008810][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 205.021254][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 205.034521][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 205.047003][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6e:45:11:65:81:dd, vlan:0) [ 206.171603][ T9962] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1869'. [ 209.349002][T10035] netlink: 'syz.1.1905': attribute type 1 has an invalid length. [ 209.937630][ C0] net_ratelimit: 8883 callbacks suppressed [ 209.937654][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 209.955948][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6e:45:11:65:81:dd, vlan:0) [ 209.968427][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 209.980889][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 209.993318][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 210.006196][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 210.018705][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 210.032400][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 210.044993][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6e:45:11:65:81:dd, vlan:0) [ 210.057523][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 211.750472][ T30] audit: type=1107 audit(1757431847.732:4): pid=10086 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ً5%UA٠0ltݕ/ 6򊨊' [ 211.829359][T10091] tipc: Enabling of bearer rejected, failed to enable media [ 214.017699][T10143] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1957'. [ 214.101693][T10143] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1957'. [ 214.472385][T10149] xt_l2tp: unknown flags: 10 [ 214.946524][ C0] net_ratelimit: 7754 callbacks suppressed [ 214.946544][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 214.967178][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 214.979700][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6e:45:11:65:81:dd, vlan:0) [ 214.992132][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 215.004552][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 215.016989][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 215.029442][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6e:45:11:65:81:dd, vlan:0) [ 215.042291][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 215.054757][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 215.068400][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 215.494180][T10172] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1971'. [ 216.798976][ T5875] Bluetooth: hci4: command 0x0406 tx timeout [ 217.433520][T10198] wireguard: wg2: Could not create IPv4 socket [ 217.919656][T10209] netlink: 1036 bytes leftover after parsing attributes in process `syz.1.1988'. [ 217.996152][T10209] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 219.957410][ C0] net_ratelimit: 9153 callbacks suppressed [ 219.957428][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 219.975832][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6e:45:11:65:81:dd, vlan:0) [ 219.988245][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 220.000684][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 220.013085][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 220.025547][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6e:45:11:65:81:dd, vlan:0) [ 220.038397][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 220.051463][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 220.065120][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 220.077543][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6e:45:11:65:81:dd, vlan:0) [ 220.515776][T10253] bridge_slave_0: invalid flags given to default FDB implementation [ 221.890176][T10275] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2019'. [ 223.050876][T10299] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2031'. [ 223.127165][T10299] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2031'. [ 224.264848][T10324] netlink: 'syz.0.2043': attribute type 1 has an invalid length. [ 224.592193][T10325] netlink: 'syz.3.2044': attribute type 1 has an invalid length. [ 224.966627][ C0] net_ratelimit: 9264 callbacks suppressed [ 224.966645][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 224.984994][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 224.997411][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 225.001858][T10338] netlink: 'syz.4.2049': attribute type 4 has an invalid length. [ 225.009978][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6e:45:11:65:81:dd, vlan:0) [ 225.010725][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 225.011150][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 225.055748][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 225.068182][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6e:45:11:65:81:dd, vlan:0) [ 225.080527][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 225.093690][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 225.095920][T10342] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2051'. [ 225.306765][T10342] bridge_slave_1: left allmulticast mode [ 225.312452][T10342] bridge_slave_1: left promiscuous mode [ 225.414045][T10342] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.554388][T10342] bridge_slave_0: left allmulticast mode [ 225.580734][T10342] bridge_slave_0: left promiscuous mode [ 225.637506][T10342] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.809685][T10352] netlink: 'syz.1.2056': attribute type 28 has an invalid length. [ 225.875103][T10352] netlink: 'syz.1.2056': attribute type 3 has an invalid length. [ 225.957774][T10352] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2056'. [ 225.994835][ T5235] udevd[5235]: worker [7000] terminated by signal 33 (Unknown signal 33) [ 226.046239][ T5235] udevd[5235]: worker [7000] failed while handling '/devices/virtual/block/loop3' [ 227.556365][T10385] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2072'. [ 227.789221][T10388] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2073'. [ 228.673204][T10408] tipc: New replicast peer: 255.255.255.255 [ 228.764513][T10408] tipc: Enabled bearer , priority 10 [ 229.191083][T10418] netlink: 'syz.3.2087': attribute type 83 has an invalid length. [ 229.976578][ C0] net_ratelimit: 8839 callbacks suppressed [ 229.976598][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 229.994817][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 230.007220][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6e:45:11:65:81:dd, vlan:0) [ 230.020074][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 230.032502][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 230.045978][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 230.058380][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6e:45:11:65:81:dd, vlan:0) [ 230.070766][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 230.083183][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 230.095565][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 230.868639][T10453] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2105'. [ 231.247567][T10461] netlink: 160 bytes leftover after parsing attributes in process `syz.0.2108'. [ 231.448227][T10464] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2110'. [ 232.277121][T10487] netlink: 'syz.4.2120': attribute type 11 has an invalid length. [ 232.522884][T10489] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2121'. [ 232.973331][T10491] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.669042][T10491] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.934722][T10510] batman_adv: batadv0: Adding interface: ipvlan2 [ 233.954748][T10510] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.017883][T10510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.063317][T10510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.088851][T10510] batman_adv: batadv0: Not using interface ipvlan2 (retrying later): interface not active [ 234.228681][T10491] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.381602][T10514] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 234.633069][T10491] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.837806][T10528] netlink: 'syz.1.2140': attribute type 1 has an invalid length. [ 234.845564][T10528] netlink: 'syz.1.2140': attribute type 10 has an invalid length. [ 234.901445][T10528] netlink: 236 bytes leftover after parsing attributes in process `syz.1.2140'. [ 234.986896][ C0] net_ratelimit: 9145 callbacks suppressed [ 234.986914][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 235.005179][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 235.018743][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 235.031211][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6e:45:11:65:81:dd, vlan:0) [ 235.043637][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 235.056203][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 235.068552][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 235.080934][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6e:45:11:65:81:dd, vlan:0) [ 235.093743][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 235.106174][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 235.421552][T10540] syz.2.2146: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 235.523263][T10540] CPU: 1 UID: 0 PID: 10540 Comm: syz.2.2146 Not tainted syzkaller #0 PREEMPT(full) [ 235.523313][T10540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 235.523343][T10540] Call Trace: [ 235.523352][T10540] [ 235.523361][T10540] dump_stack_lvl+0x189/0x250 [ 235.523394][T10540] ? __pfx_dump_stack_lvl+0x10/0x10 [ 235.523415][T10540] ? __pfx__printk+0x10/0x10 [ 235.523438][T10540] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 235.523458][T10540] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 235.523480][T10540] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 235.523502][T10540] warn_alloc+0x214/0x310 [ 235.523536][T10540] ? stack_depot_save_flags+0x40/0x860 [ 235.523562][T10540] ? __pfx_warn_alloc+0x10/0x10 [ 235.523589][T10540] ? kasan_save_track+0x4f/0x80 [ 235.523611][T10540] ? xskq_create+0x56/0x170 [ 235.523633][T10540] ? xsk_init_queue+0xb0/0x110 [ 235.523652][T10540] ? xsk_setsockopt+0x4dc/0x8d0 [ 235.523670][T10540] ? do_sock_setsockopt+0x17c/0x1b0 [ 235.523686][T10540] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 235.523702][T10540] ? do_syscall_64+0xfa/0x3b0 [ 235.523717][T10540] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.523743][T10540] __vmalloc_node_range_noprof+0x125/0x12f0 [ 235.523790][T10540] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 235.523817][T10540] ? __kasan_kmalloc+0x93/0xb0 [ 235.523841][T10540] vmalloc_user_noprof+0xad/0xf0 [ 235.523863][T10540] ? xskq_create+0xbf/0x170 [ 235.523882][T10540] xskq_create+0xbf/0x170 [ 235.523903][T10540] xsk_init_queue+0xb0/0x110 [ 235.523926][T10540] xsk_setsockopt+0x4dc/0x8d0 [ 235.523949][T10540] ? __pfx_xsk_setsockopt+0x10/0x10 [ 235.523971][T10540] ? __pfx_aa_sk_perm+0x10/0x10 [ 235.523998][T10540] ? aa_sock_opt_perm+0xff/0x1b0 [ 235.524017][T10540] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 235.524034][T10540] ? __pfx_xsk_setsockopt+0x10/0x10 [ 235.524057][T10540] do_sock_setsockopt+0x17c/0x1b0 [ 235.524081][T10540] __x64_sys_setsockopt+0x13f/0x1b0 [ 235.524105][T10540] do_syscall_64+0xfa/0x3b0 [ 235.524119][T10540] ? lockdep_hardirqs_on+0x9c/0x150 [ 235.524141][T10540] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.524158][T10540] ? clear_bhb_loop+0x60/0xb0 [ 235.524179][T10540] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.524197][T10540] RIP: 0033:0x7f0c5b78ebe9 [ 235.524221][T10540] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 235.524233][T10540] RSP: 002b:00007f0c5c576038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 235.524251][T10540] RAX: ffffffffffffffda RBX: 00007f0c5b9c5fa0 RCX: 00007f0c5b78ebe9 [ 235.524262][T10540] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 235.524271][T10540] RBP: 00007f0c5b811e19 R08: 0000000000000004 R09: 0000000000000000 [ 235.524279][T10540] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 235.524289][T10540] R13: 00007f0c5b9c6038 R14: 00007f0c5b9c5fa0 R15: 00007fffc230fb38 [ 235.524318][T10540] [ 235.862241][T10540] Mem-Info: [ 235.865401][T10540] active_anon:5683 inactive_anon:0 isolated_anon:0 [ 235.865401][T10540] active_file:3140 inactive_file:39902 isolated_file:0 [ 235.865401][T10540] unevictable:768 dirty:257 writeback:0 [ 235.865401][T10540] slab_reclaimable:10350 slab_unreclaimable:98438 [ 235.865401][T10540] mapped:29106 shmem:1357 pagetables:1130 [ 235.865401][T10540] sec_pagetables:0 bounce:0 [ 235.865401][T10540] kernel_misc_reclaimable:0 [ 235.865401][T10540] free:1324784 free_pcp:16619 free_cma:0 [ 235.912652][T10540] Node 0 active_anon:22732kB inactive_anon:0kB active_file:12560kB inactive_file:159408kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116424kB dirty:1028kB writeback:0kB shmem:3892kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12044kB pagetables:4412kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 235.945998][T10540] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:108kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 235.977534][T10540] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 236.007459][T10540] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 236.014471][T10540] Node 0 DMA32 free:1396448kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:22684kB inactive_anon:0kB active_file:12560kB inactive_file:157832kB unevictable:1536kB writepending:1028kB present:3129332kB managed:2557432kB mlocked:0kB bounce:0kB free_pcp:44880kB local_pcp:21400kB free_cma:0kB [ 236.047887][T10540] lowmem_reserve[]: 0 0 1 1 1 [ 236.052628][T10540] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1576kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 236.083049][T10540] lowmem_reserve[]: 0 0 0 0 0 [ 236.088318][T10540] Node 1 Normal free:3887116kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:21420kB local_pcp:8012kB free_cma:0kB [ 236.122019][T10540] lowmem_reserve[]: 0 0 0 0 0 [ 236.127299][T10540] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 236.141359][T10540] Node 0 DMA32: 189*4kB (M) 957*8kB (UME) 684*16kB (UME) 282*32kB (UME) 99*64kB (UME) 41*128kB (UME) 12*256kB (UM) 17*512kB (UME) 17*1024kB (UM) 12*2048kB (UM) 318*4096kB (UM) = 1396252kB [ 236.161352][T10540] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 236.174249][T10540] Node 1 Normal: 119*4kB (U) 42*8kB (UME) 18*16kB (UME) 48*32kB (UME) 13*64kB (UME) 3*128kB (UM) 3*256kB (ME) 3*512kB (ME) 2*1024kB (ME) 2*2048kB (UE) 946*4096kB (M) = 3887116kB [ 236.273574][ T13] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.330634][ T13] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.339783][T10540] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 236.411777][ T13] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.430009][T10540] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 236.476754][ T13] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.597172][T10540] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 236.785738][T10540] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 236.888814][T10540] 44397 total pagecache pages [ 236.927215][T10540] 0 pages in swap cache [ 236.954505][T10540] Free swap = 124996kB [ 236.984621][T10540] Total swap = 124996kB [ 237.034753][T10540] 2097051 pages RAM [ 237.090786][T10540] 0 pages HighMem/MovableOnly [ 237.095502][T10540] 425667 pages reserved [ 237.139378][T10540] 0 pages cma reserved [ 237.537764][T10568] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2158'. [ 239.996581][ C0] net_ratelimit: 8716 callbacks suppressed [ 239.996600][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 240.014948][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6e:45:11:65:81:dd, vlan:0) [ 240.027804][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 240.040900][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 240.054432][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 240.066889][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6e:45:11:65:81:dd, vlan:0) [ 240.079290][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 240.091783][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 240.104201][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 240.116702][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6e:45:11:65:81:dd, vlan:0) [ 242.268326][T10677] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2204'. [ 242.427446][T10682] team0: Cannot enslave team device to itself [ 242.617509][T10685] sctp: [Deprecated]: syz.1.2206 (pid 10685) Use of int in maxseg socket option. [ 242.617509][T10685] Use struct sctp_assoc_value instead [ 243.790379][ T5879] block nbd1: Receive control failed (result -32) [ 244.590227][T10733] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2229'. [ 244.980635][T10742] veth1_macvtap: left promiscuous mode [ 245.006633][ C0] net_ratelimit: 8803 callbacks suppressed [ 245.006653][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6e:45:11:65:81:dd, vlan:0) [ 245.024883][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 245.037310][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 245.049747][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 245.062171][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6e:45:11:65:81:dd, vlan:0) [ 245.075061][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 245.087485][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 245.101037][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 245.113438][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6e:45:11:65:81:dd, vlan:0) [ 245.125858][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 245.633786][T10756] netlink: 'syz.4.2241': attribute type 1 has an invalid length. [ 245.711170][T10756] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2241'. [ 246.188790][T10768] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2247'. [ 246.571420][T10768] macvtap1: entered promiscuous mode [ 246.583206][T10768] vlan0: entered promiscuous mode [ 246.591897][T10768] macvtap1: entered allmulticast mode [ 246.612513][T10768] vlan0: entered allmulticast mode [ 246.623069][T10768] veth0_vlan: entered allmulticast mode [ 247.482759][T10793] netlink: 'syz.3.2260': attribute type 8 has an invalid length. [ 249.971436][T10844] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2284'. [ 250.016801][ C0] net_ratelimit: 8874 callbacks suppressed [ 250.016821][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6e:45:11:65:81:dd, vlan:0) [ 250.035460][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 250.047976][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 250.061511][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 250.073962][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6e:45:11:65:81:dd, vlan:0) [ 250.086344][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 250.098773][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 250.111179][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 250.123636][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6e:45:11:65:81:dd, vlan:0) [ 250.136749][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 255.026659][ C0] net_ratelimit: 12873 callbacks suppressed [ 255.026680][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 255.044992][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6e:45:11:65:81:dd, vlan:0) [ 255.057284][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 255.069681][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 255.081930][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 255.094271][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6e:45:11:65:81:dd, vlan:0) [ 255.107041][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 255.119469][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 255.132710][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 255.144901][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6e:45:11:65:81:dd, vlan:0) [ 255.685025][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.695269][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 260.036580][ C0] net_ratelimit: 14903 callbacks suppressed [ 260.036601][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6e:45:11:65:81:dd, vlan:0) [ 260.054942][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 260.067424][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 260.079789][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 260.092206][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6e:45:11:65:81:dd, vlan:0) [ 260.105046][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 260.117455][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 260.130869][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 260.147631][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6e:45:11:65:81:dd, vlan:0) [ 260.160056][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 260.408897][T10871] sch_tbf: burst 8 is lower than device ip6tnl0 mtu (1452) ! [ 261.302914][T10898] block nbd2: not configured, cannot reconfigure [ 261.641791][T10902] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2309'. [ 261.942623][T10912] netlink: 'syz.1.2312': attribute type 16 has an invalid length. [ 262.044014][T10912] netlink: 'syz.1.2312': attribute type 17 has an invalid length. [ 262.137685][T10909] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.240150][T10909] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.501257][T10942] veth0: entered promiscuous mode [ 263.579612][T10940] veth0: left promiscuous mode [ 264.007605][T10952] netlink: 'syz.4.2331': attribute type 5 has an invalid length. [ 264.144307][T10955] wg1: entered promiscuous mode [ 264.189402][T10955] wg1: entered allmulticast mode [ 264.259251][T10958] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2336'. [ 265.046661][ C0] net_ratelimit: 8700 callbacks suppressed [ 265.046680][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 265.064898][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 265.078519][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 265.090977][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6e:45:11:65:81:dd, vlan:0) [ 265.103383][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 265.115815][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 265.128201][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 265.140722][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6e:45:11:65:81:dd, vlan:0) [ 265.153580][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 265.166035][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 265.968199][T10995] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2354'. [ 267.898284][T11033] netlink: 'syz.3.2370': attribute type 1 has an invalid length. [ 267.906048][T11033] netlink: 172 bytes leftover after parsing attributes in process `syz.3.2370'. [ 268.982957][T11055] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2380'. [ 269.440033][T11066] netlink: 'syz.1.2385': attribute type 1 has an invalid length. [ 269.491964][T11066] netlink: 172 bytes leftover after parsing attributes in process `syz.1.2385'. [ 269.791922][T11073] netlink: 165 bytes leftover after parsing attributes in process `syz.3.2389'. [ 270.056947][ C0] net_ratelimit: 8743 callbacks suppressed [ 270.056965][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 270.075201][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 270.088699][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 270.101091][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6e:45:11:65:81:dd, vlan:0) [ 270.113442][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 270.125930][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 270.138287][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 270.150676][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6e:45:11:65:81:dd, vlan:0) [ 270.163448][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 270.175858][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 271.016033][T11101] netlink: 'syz.3.2402': attribute type 1 has an invalid length. [ 271.080182][T11101] netlink: 172 bytes leftover after parsing attributes in process `syz.3.2402'. [ 271.164423][T11101] netlink: 'syz.3.2402': attribute type 1 has an invalid length. [ 272.995719][T11140] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2418'. [ 273.816130][T11155] netlink: 100 bytes leftover after parsing attributes in process `syz.2.2425'. [ 274.354611][T11168] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2431'. [ 274.510575][T11175] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2434'. [ 274.732791][T11179] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2435'. [ 275.066819][ C0] net_ratelimit: 8284 callbacks suppressed [ 275.066838][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 275.085052][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 275.097461][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6e:45:11:65:81:dd, vlan:0) [ 275.110275][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 275.122719][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 275.136164][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 275.148555][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6e:45:11:65:81:dd, vlan:0) [ 275.160926][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 275.173359][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 275.185754][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 277.109287][T11227] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2458'. [ 279.769473][T11289] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2487'. [ 280.077003][ C0] net_ratelimit: 9145 callbacks suppressed [ 280.077020][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 280.095239][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 280.108718][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 280.121115][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6e:45:11:65:81:dd, vlan:0) [ 280.133482][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 280.145871][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 280.158236][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 280.170663][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6e:45:11:65:81:dd, vlan:0) [ 280.183460][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 280.195898][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 280.293525][T11305] netlink: 576 bytes leftover after parsing attributes in process `syz.3.2494'. [ 281.569583][T11328] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.2505'. [ 282.074367][T11337] netlink: 71 bytes leftover after parsing attributes in process `syz.1.2509'. [ 284.112248][T11386] netlink: 152064 bytes leftover after parsing attributes in process `syz.1.2533'. [ 285.086977][ C0] net_ratelimit: 9540 callbacks suppressed [ 285.086995][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 285.105210][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6e:45:11:65:81:dd, vlan:0) [ 285.117586][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 285.129955][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 285.142341][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 285.154730][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6e:45:11:65:81:dd, vlan:0) [ 285.167507][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 285.179884][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 285.193409][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 285.205893][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6e:45:11:65:81:dd, vlan:0) [ 285.384662][ T980] IPVS: starting estimator thread 0... [ 285.497321][T11423] IPVS: using max 27 ests per chain, 64800 per kthread [ 286.233868][T11442] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2558'. [ 286.314383][T11442] netlink: 'syz.0.2558': attribute type 1 has an invalid length. [ 286.358963][T11442] netlink: 'syz.0.2558': attribute type 2 has an invalid length. [ 286.642270][T11453] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2562'. [ 286.684303][T11453] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2562'. [ 286.755602][T11458] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2562'. [ 286.836537][T11456] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 288.545685][T11503] tipc: Started in network mode [ 288.581462][T11503] tipc: Node identity ac1414aa, cluster identity 4711 [ 288.636262][T11503] tipc: Enabled bearer , priority 10 [ 289.272255][T11524] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2593'. [ 289.343044][T11524] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2593'. [ 289.363267][T11518] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2591'. [ 289.757290][ T24] tipc: Node number set to 2886997162 [ 290.096476][ C0] net_ratelimit: 9262 callbacks suppressed [ 290.096494][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 290.115766][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 290.128508][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6e:45:11:65:81:dd, vlan:0) [ 290.140956][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 290.153413][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 290.165826][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 290.178250][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6e:45:11:65:81:dd, vlan:0) [ 290.191150][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 290.203631][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 290.217198][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 292.162376][T11600] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2628'. [ 292.588775][T11611] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.2633'. [ 293.404985][T11635] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2644'. [ 293.473868][T11635] netlink: 'syz.4.2644': attribute type 1 has an invalid length. [ 293.507349][T11635] netlink: 'syz.4.2644': attribute type 2 has an invalid length. [ 294.058401][T11655] netlink: 'syz.1.2653': attribute type 10 has an invalid length. [ 294.105662][T11655] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2653'. [ 294.221686][T11655] dummy0: entered promiscuous mode [ 294.309795][T11655] bridge0: port 3(dummy0) entered blocking state [ 294.342843][T11655] bridge0: port 3(dummy0) entered disabled state [ 294.377616][T11655] dummy0: entered allmulticast mode [ 294.536086][T11655] bridge0: port 3(dummy0) entered blocking state [ 294.542600][T11655] bridge0: port 3(dummy0) entered forwarding state [ 295.106660][ C0] net_ratelimit: 8589 callbacks suppressed [ 295.106678][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 295.125059][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 295.138535][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 295.150911][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6e:45:11:65:81:dd, vlan:0) [ 295.163302][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 295.175663][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 295.188032][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 295.200467][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6e:45:11:65:81:dd, vlan:0) [ 295.213291][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 295.225706][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 295.389383][T11686] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2667'. [ 295.458065][T11687] netlink: 'syz.1.2666': attribute type 10 has an invalid length. [ 295.474552][T11686] gtp1: entered promiscuous mode [ 295.483123][T11686] gtp1: entered allmulticast mode [ 295.515812][T11687] bridge0: port 2(bridge_slave_1) entered disabled state [ 295.541493][T11687] bridge_slave_1: left allmulticast mode [ 295.555485][T11687] bridge_slave_1: left promiscuous mode [ 295.563052][T11687] bridge0: port 2(bridge_slave_1) entered disabled state [ 295.610234][T11687] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 296.401103][T11717] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2678'. [ 296.470393][T11717] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2678'. [ 296.744419][T11723] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2681'. [ 296.796253][T11727] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2683'. [ 297.308893][T11741] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 297.832085][T11764] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2689'. [ 300.116616][ C0] net_ratelimit: 8243 callbacks suppressed [ 300.116636][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 300.134907][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 300.147419][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6e:45:11:65:81:dd, vlan:0) [ 300.160458][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 300.172778][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 300.186234][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 300.198467][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6e:45:11:65:81:dd, vlan:0) [ 300.211076][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 300.223544][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 300.235993][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 301.442456][T11831] macvtap1: entered promiscuous mode [ 301.473705][T11831] vlan0: entered promiscuous mode [ 301.508188][T11831] team0: Device macvtap1 failed to register rx_handler [ 301.531270][T11831] vlan0: left promiscuous mode [ 301.687943][T11817] syzkaller1: entered promiscuous mode [ 301.698605][T11817] syzkaller1: entered allmulticast mode [ 301.959495][T11837] syzkaller1: entered promiscuous mode [ 302.002310][T11837] syzkaller1: entered allmulticast mode [ 303.352733][T11879] syzkaller1: entered promiscuous mode [ 303.384229][T11879] syzkaller1: entered allmulticast mode [ 304.474950][T11918] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2742'. [ 304.633520][T11918] dummy0: entered promiscuous mode [ 304.682095][T11918] batadv_slave_1: entered promiscuous mode [ 305.126675][ C0] net_ratelimit: 8750 callbacks suppressed [ 305.126694][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 305.145079][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 305.157519][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 305.169919][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6e:45:11:65:81:dd, vlan:0) [ 305.182476][T11931] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2747'. [ 305.182705][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 305.203752][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 305.217153][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 305.229535][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6e:45:11:65:81:dd, vlan:0) [ 305.241891][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 305.254285][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 305.586266][T11942] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2752'. [ 306.535722][T11964] sctp: [Deprecated]: syz.0.2761 (pid 11964) Use of struct sctp_assoc_value in delayed_ack socket option. [ 306.535722][T11964] Use struct sctp_sack_info instead [ 308.477398][T12010] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 308.559751][T12010] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 309.973394][T12044] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2795'. [ 310.024145][T12051] veth0: entered promiscuous mode [ 310.091696][T12050] veth0: left promiscuous mode [ 310.137025][ C0] net_ratelimit: 8628 callbacks suppressed [ 310.137043][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 310.155339][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6e:45:11:65:81:dd, vlan:0) [ 310.167837][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 310.180409][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 310.192836][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 310.205388][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6e:45:11:65:81:dd, vlan:0) [ 310.218386][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 310.230863][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 310.244742][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 310.257327][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6e:45:11:65:81:dd, vlan:0) [ 310.527424][T12065] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.2807'. [ 310.538924][T12066] netlink: 'syz.0.2806': attribute type 17 has an invalid length. [ 310.538945][T12066] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2806'. [ 310.538971][T12066] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2806'. [ 310.802032][T12076] hsr0 speed is unknown, defaulting to 1000 [ 310.853307][T12076] hsr0 speed is unknown, defaulting to 1000 [ 310.891065][T12076] hsr0 speed is unknown, defaulting to 1000 [ 311.029966][T12076] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 311.213397][T12086] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.2815'. [ 311.283029][T12076] hsr0 speed is unknown, defaulting to 1000 [ 311.338484][T12076] hsr0 speed is unknown, defaulting to 1000 [ 311.389655][T12076] hsr0 speed is unknown, defaulting to 1000 [ 311.442149][T12076] hsr0 speed is unknown, defaulting to 1000 [ 311.491532][T12076] hsr0 speed is unknown, defaulting to 1000 [ 312.078299][T12091] nbd: device at index 2 is going down [ 312.420044][T12112] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2826'. [ 312.633908][T12117] netlink: 27 bytes leftover after parsing attributes in process `syz.4.2828'. [ 313.815687][T12152] netlink: 'syz.1.2845': attribute type 4 has an invalid length. [ 314.152947][T12171] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2850'. [ 315.147325][ C0] net_ratelimit: 8743 callbacks suppressed [ 315.147345][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 315.165619][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6e:45:11:65:81:dd, vlan:0) [ 315.178032][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 315.190468][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 315.202908][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 315.215326][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6e:45:11:65:81:dd, vlan:0) [ 315.228125][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 315.240496][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 315.254084][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 315.266631][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6e:45:11:65:81:dd, vlan:0) [ 315.409144][T12192] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2861'. [ 315.431562][T12192] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2861'. [ 315.615966][T12200] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2865'. [ 315.674131][T12202] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.2866'. [ 316.089566][T12211] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2870'. [ 316.122825][T12211] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2870'. [ 316.173761][T12211] netlink: 'syz.3.2870': attribute type 7 has an invalid length. [ 317.130906][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.137942][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.028207][T12253] netlink: 'syz.1.2886': attribute type 1 has an invalid length. [ 318.074549][T12253] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2886'. [ 318.148653][T12253] netlink: 'syz.1.2886': attribute type 2 has an invalid length. [ 318.215105][T12253] netlink: 'syz.1.2886': attribute type 1 has an invalid length. [ 319.041792][T12285] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2901'. [ 319.192075][T12291] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2901'. [ 319.501144][T12301] netlink: 'syz.3.2907': attribute type 21 has an invalid length. [ 319.542634][T12301] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2907'. [ 319.590618][T12301] netlink: 'syz.3.2907': attribute type 21 has an invalid length. [ 319.630028][T12305] netlink: 'syz.1.2910': attribute type 10 has an invalid length. [ 319.703793][T12305] netlink: 'syz.1.2910': attribute type 1 has an invalid length. [ 320.156605][ C0] net_ratelimit: 9143 callbacks suppressed [ 320.156624][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 320.174858][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6e:45:11:65:81:dd, vlan:0) [ 320.187742][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 320.200185][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 320.213703][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 320.226146][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6e:45:11:65:81:dd, vlan:0) [ 320.238565][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 320.250928][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 320.263357][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 320.275774][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 320.596187][T12332] __nla_validate_parse: 4 callbacks suppressed [ 320.596207][T12332] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.2920'. [ 320.918458][T12344] netlink: 'syz.2.2926': attribute type 1 has an invalid length. [ 321.136353][T12344] 8021q: adding VLAN 0 to HW filter on device bond1 [ 321.413592][T12348] 8021q: adding VLAN 0 to HW filter on device bond1 [ 321.445631][T12348] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 321.472194][T12348] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 321.505747][T12364] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2932'. [ 323.116312][T12397] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2943'. [ 323.732574][T12414] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2952'. [ 323.774658][T12414] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2952'. [ 323.873168][T11754] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 323.914182][T11754] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 323.958685][T11754] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 324.010050][T11754] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 324.788569][T12446] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2963'. [ 325.166630][ C0] net_ratelimit: 8994 callbacks suppressed [ 325.166651][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 325.184889][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6e:45:11:65:81:dd, vlan:0) [ 325.197341][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 325.209734][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 325.222169][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 325.234563][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 325.246968][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6e:45:11:65:81:dd, vlan:0) [ 325.259896][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 325.272313][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 325.285798][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 325.724863][T12465] netlink: 51 bytes leftover after parsing attributes in process `syz.3.2973'. [ 326.805640][T12494] netlink: 'syz.1.2984': attribute type 1 has an invalid length. [ 327.010772][T12494] bond1: entered promiscuous mode [ 327.031995][T12494] 8021q: adding VLAN 0 to HW filter on device bond1 [ 327.104285][T12497] 8021q: adding VLAN 0 to HW filter on device bond1 [ 327.105372][T12502] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2989'. [ 327.115057][T12497] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 327.115081][T12497] bond1: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 327.246843][T12505] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2988'. [ 327.745424][T12497] bond1: (slave wireguard0): making interface the new active one [ 327.768191][T12497] wireguard0: entered promiscuous mode [ 327.946894][T12497] bond1: (slave wireguard0): Enslaving as an active interface with an up link [ 328.081713][T12517] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2995'. [ 329.061192][T12544] hsr0 speed is unknown, defaulting to 1000 [ 329.326147][ T13] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x1 [ 330.025892][T12578] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.3017'. [ 330.176797][ C0] net_ratelimit: 8727 callbacks suppressed [ 330.176819][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 330.195061][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 330.208514][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 330.220974][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6e:45:11:65:81:dd, vlan:0) [ 330.233341][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 330.245736][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 330.258127][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 330.270535][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 330.282931][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6e:45:11:65:81:dd, vlan:0) [ 330.292480][T12586] netlink: 9 bytes leftover after parsing attributes in process `syz.1.3019'. [ 330.295662][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 330.442757][T12586] gretap0: entered promiscuous mode [ 331.382189][T12600] syzkaller1: entered promiscuous mode [ 331.412395][T12600] syzkaller1: entered allmulticast mode [ 331.784184][T12617] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3030'. [ 331.843254][T12617] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3030'. [ 332.378123][T12617] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3030'. [ 332.384707][T12628] gretap0: left promiscuous mode [ 332.405828][T12617] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3030'. [ 332.849608][T12638] netlink: 'syz.1.3039': attribute type 1 has an invalid length. [ 332.907674][T12638] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3039'. [ 332.961211][T12638] netlink: 'syz.1.3039': attribute type 2 has an invalid length. [ 333.012934][T12638] netlink: 'syz.1.3039': attribute type 1 has an invalid length. [ 333.412023][T12651] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3046'. [ 333.810089][T12662] netlink: 'syz.0.3051': attribute type 7 has an invalid length. [ 335.187349][ C0] net_ratelimit: 8291 callbacks suppressed [ 335.187370][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 335.205605][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6e:45:11:65:81:dd, vlan:0) [ 335.217996][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 335.230345][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 335.242763][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 335.255155][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 335.267538][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6e:45:11:65:81:dd, vlan:0) [ 335.269753][T12697] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3067'. [ 335.280356][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 335.280787][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 335.282161][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 335.321181][T12697] veth0_to_bridge: left allmulticast mode [ 335.345610][T12697] veth0_to_bridge: left promiscuous mode [ 335.363529][T12697] bridge0: port 3(veth0_to_bridge) entered disabled state [ 335.410007][T12700] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3068'. [ 335.436404][T12697] bridge_slave_1: left allmulticast mode [ 335.445551][T12697] bridge_slave_1: left promiscuous mode [ 335.451650][T12697] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.458685][T12705] trusted_key: syz.3.3071 sent an empty control message without MSG_MORE. [ 335.474602][T12697] bridge_slave_0: left allmulticast mode [ 335.481418][T12697] bridge_slave_0: left promiscuous mode [ 335.491516][T12697] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.546290][T12766] netlink: 'syz.3.3096': attribute type 16 has an invalid length. [ 336.574157][T12768] netlink: 212288 bytes leftover after parsing attributes in process `syz.4.3097'. [ 336.584800][T12766] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3096'. [ 336.654168][T12770] syzkaller1: entered promiscuous mode [ 336.660459][T12770] syzkaller1: entered allmulticast mode [ 336.852626][T12783] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3104'. [ 337.512180][T12834] netlink: 'syz.2.3125': attribute type 5 has an invalid length. [ 338.142564][T12865] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3140'. [ 338.253944][T12871] netlink: 'syz.3.3141': attribute type 2 has an invalid length. [ 338.305705][T12871] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3141'. [ 338.349976][T12871] nbd: must specify a device to reconfigure [ 338.364501][T12877] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3144'. [ 338.566887][T12877] team0 (unregistering): Port device team_slave_0 removed [ 338.583073][T12877] team0 (unregistering): Port device team_slave_1 removed [ 338.610350][T12884] netlink: 'syz.0.3147': attribute type 9 has an invalid length. [ 338.620689][T12884] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3147'. [ 338.635080][T12884] netlink: 'syz.0.3147': attribute type 9 has an invalid length. [ 338.649299][T12884] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3147'. [ 338.780158][T12889] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 338.870670][T12898] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3154'. [ 339.622889][T12942] !: renamed from dummy0 (while UP) [ 340.236745][T12958] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3181'. [ 340.460594][T12971] unknown channel width for channel at 909000KHz? [ 340.468862][T12971] unknown channel width for channel at 909000KHz? [ 340.551525][T12978] netlink: 'syz.0.3190': attribute type 30 has an invalid length. [ 340.823704][T12988] syzkaller1: entered promiscuous mode [ 340.830248][T12988] syzkaller1: entered allmulticast mode [ 341.088422][T13002] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.3201'. [ 341.226331][T13010] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3205'. [ 341.335684][T13017] netlink: 'syz.1.3207': attribute type 14 has an invalid length. [ 341.351589][T13017] netlink: 'syz.1.3207': attribute type 14 has an invalid length. [ 341.637805][T13036] syzkaller1: entered promiscuous mode [ 341.643578][T13036] syzkaller1: entered allmulticast mode [ 341.911393][T13050] __nla_validate_parse: 4 callbacks suppressed [ 341.911411][T13050] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3222'. [ 341.933274][T13052] netlink: 'syz.1.3223': attribute type 10 has an invalid length. [ 341.943151][T13052] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3223'. [ 341.949079][T13050] erspan0: entered promiscuous mode [ 341.958991][T13050] macvtap1: entered promiscuous mode [ 341.964469][T13050] macvtap1: entered allmulticast mode [ 341.970148][T13050] erspan0: entered allmulticast mode [ 341.984999][T13050] erspan0: left allmulticast mode [ 342.000613][T13050] erspan0: left promiscuous mode [ 342.511539][T13072] bridge0: port 3(dummy0) entered disabled state [ 342.774134][T13072] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 342.825218][T13072] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 342.894961][T13098] netlink: 92 bytes leftover after parsing attributes in process `syz.0.3241'. [ 342.949297][T13072] bond1: left promiscuous mode [ 342.954834][T13072] wireguard0: left promiscuous mode [ 342.992539][ T1340] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.019386][ T1340] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.122334][ T1340] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.157801][ T1340] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.503193][T13127] netlink: 'syz.1.3254': attribute type 1 has an invalid length. [ 343.536769][T13127] netlink: 'syz.1.3254': attribute type 2 has an invalid length. [ 343.556412][T13127] netlink: 'syz.1.3254': attribute type 1 has an invalid length. [ 343.577813][T13127] netlink: 'syz.1.3254': attribute type 2 has an invalid length. [ 343.749334][T13136] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3258'. [ 343.764262][T13136] netlink: 'syz.4.3258': attribute type 12 has an invalid length. [ 343.781556][ T1340] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 343.781619][T13136] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3258'. [ 343.790349][ T1340] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 343.807606][T13136] netlink: 'syz.4.3258': attribute type 12 has an invalid length. [ 343.820466][ T1340] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 343.830491][ T1340] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 344.380829][T13161] netlink: 'syz.3.3268': attribute type 4 has an invalid length. [ 344.393002][T13161] netlink: 'syz.3.3268': attribute type 4 has an invalid length. [ 344.734128][T13183] netlink: 220 bytes leftover after parsing attributes in process `syz.3.3277'. [ 344.745071][T13183] netlink: 220 bytes leftover after parsing attributes in process `syz.3.3277'. [ 347.236976][T13271] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3313'. [ 347.660300][T13296] netlink: 240 bytes leftover after parsing attributes in process `syz.0.3322'. [ 348.845057][T13338] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3336'. [ 350.015196][T13392] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3358'. [ 350.669892][T13421] netlink: 'syz.3.3370': attribute type 29 has an invalid length. [ 350.707184][T13421] netlink: 'syz.3.3370': attribute type 29 has an invalid length. [ 350.746121][T13421] netlink: 500 bytes leftover after parsing attributes in process `syz.3.3370'. [ 350.903584][T13434] netlink: 'syz.1.3377': attribute type 1 has an invalid length. [ 351.045518][T13440] bond2: (slave gretap1): making interface the new active one [ 351.056880][T13440] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 351.281167][T13460] netlink: 'syz.2.3383': attribute type 10 has an invalid length. [ 351.697696][T13484] only policy match revision 0 supported [ 351.697717][T13484] unable to load match [ 351.735463][T13487] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3397'. [ 351.752549][T13487] bridge_slave_1: left allmulticast mode [ 351.777304][T13487] bridge_slave_1: left promiscuous mode [ 351.783230][T13487] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.795063][T13487] bridge_slave_0: left allmulticast mode [ 351.801774][T13487] bridge_slave_0: left promiscuous mode [ 351.810588][T13487] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.490867][T13525] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3414'. [ 352.553557][T13525] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3414'. [ 352.871263][T13543] syz_tun: entered allmulticast mode [ 352.879471][T13542] syz_tun: left allmulticast mode [ 353.104323][T13552] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3425'. [ 353.114065][T13552] netlink: 'syz.1.3425': attribute type 7 has an invalid length. [ 353.128365][T13552] netlink: 'syz.1.3425': attribute type 8 has an invalid length. [ 353.138791][T13552] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3425'. [ 353.597864][T13570] netlink: 'syz.0.3433': attribute type 4 has an invalid length. [ 353.945046][T13584] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3440'. [ 354.155103][T13595] netlink: 'syz.3.3444': attribute type 7 has an invalid length. [ 354.166912][T13595] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3444'. [ 354.419287][T13612] netlink: 9 bytes leftover after parsing attributes in process `syz.4.3453'. [ 354.599688][T13617] net_ratelimit: 71 callbacks suppressed [ 354.599717][T13617] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 354.807488][ T5942] page_pool_release_retry() stalled pool shutdown: id 37, 1 inflight 60 sec [ 355.350810][T13666] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3478'. [ 355.433992][T13666] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 355.484822][T13666] bond1: (slave vcan1): Error -95 calling set_mac_address [ 355.725683][T13687] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3484'. [ 355.739434][T13687] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3484'. [ 356.102967][T13704] netlink: 'syz.3.3492': attribute type 12 has an invalid length. [ 356.440036][T13721] netlink: 'syz.4.3499': attribute type 1 has an invalid length. [ 356.444959][T13723] openvswitch: netlink: IP tunnel TTL not specified. [ 356.447991][T13721] netlink: 'syz.4.3499': attribute type 4 has an invalid length. [ 356.647517][T13734] ================================================================== [ 356.655617][T13734] BUG: KASAN: slab-use-after-free in xfrm_state_find+0x2cf2/0x5400 [ 356.663521][T13734] Read of size 1 at addr ffff88805a1e8330 by task syz.1.3506/13734 [ 356.671410][T13734] [ 356.673726][T13734] CPU: 0 UID: 0 PID: 13734 Comm: syz.1.3506 Not tainted syzkaller #0 PREEMPT(full) [ 356.673740][T13734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 356.673754][T13734] Call Trace: [ 356.673760][T13734] [ 356.673765][T13734] dump_stack_lvl+0x189/0x250 [ 356.673781][T13734] ? __kasan_check_byte+0x12/0x40 [ 356.673797][T13734] ? __pfx_dump_stack_lvl+0x10/0x10 [ 356.673808][T13734] ? lock_release+0x4b/0x3e0 [ 356.673823][T13734] ? __virt_addr_valid+0x4a5/0x5c0 [ 356.673836][T13734] print_report+0xca/0x240 [ 356.673846][T13734] ? xfrm_state_find+0x2cf2/0x5400 [ 356.673855][T13734] kasan_report+0x118/0x150 [ 356.673868][T13734] ? xfrm_state_find+0x2cf2/0x5400 [ 356.673884][T13734] xfrm_state_find+0x2cf2/0x5400 [ 356.673900][T13734] ? __lock_acquire+0xab9/0xd20 [ 356.673938][T13734] ? xfrm_state_find+0x1da/0x5400 [ 356.673957][T13734] ? __pfx_xfrm_state_find+0x10/0x10 [ 356.673972][T13734] xfrm_resolve_and_create_bundle+0x768/0x2f80 [ 356.673991][T13734] ? xfrm_policy_lookup_bytype+0x2a7/0x1250 [ 356.674004][T13734] ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10 [ 356.674017][T13734] ? xfrm_policy_lookup_bytype+0x123/0x1250 [ 356.674031][T13734] ? xfrm_policy_lookup_bytype+0x11ef/0x1250 [ 356.674050][T13734] ? xfrm_expand_policies+0x41f/0x6a0 [ 356.674063][T13734] xfrm_lookup_with_ifid+0x58a/0x1a70 [ 356.674076][T13734] ? __pfx_xfrm_lookup_with_ifid+0x10/0x10 [ 356.674090][T13734] xfrm_lookup_route+0x3c/0x1c0 [ 356.674102][T13734] raw_sendmsg+0x1039/0x18b0 [ 356.674116][T13734] ? __pfx_raw_sendmsg+0x10/0x10 [ 356.674131][T13734] ? aa_sk_perm+0x81e/0x950 [ 356.674145][T13734] ? __pfx_aa_sk_perm+0x10/0x10 [ 356.674158][T13734] ? tomoyo_socket_sendmsg_permission+0x216/0x300 [ 356.674169][T13734] ? sock_rps_record_flow+0x19/0x410 [ 356.674182][T13734] ? inet_sendmsg+0x2f4/0x370 [ 356.674193][T13734] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 356.674205][T13734] __sock_sendmsg+0x19c/0x270 [ 356.674219][T13734] __sys_sendto+0x3bd/0x520 [ 356.674228][T13734] ? __pfx___sys_sendto+0x10/0x10 [ 356.674236][T13734] ? do_futex+0x333/0x420 [ 356.674256][T13734] ? rcu_is_watching+0x15/0xb0 [ 356.674267][T13734] __x64_sys_sendto+0xde/0x100 [ 356.674277][T13734] do_syscall_64+0xfa/0x3b0 [ 356.674286][T13734] ? lockdep_hardirqs_on+0x9c/0x150 [ 356.674299][T13734] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.674308][T13734] ? clear_bhb_loop+0x60/0xb0 [ 356.674318][T13734] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.674326][T13734] RIP: 0033:0x7f8b3678ebe9 [ 356.674337][T13734] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 356.674345][T13734] RSP: 002b:00007f8b37682038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 356.674356][T13734] RAX: ffffffffffffffda RBX: 00007f8b369c5fa0 RCX: 00007f8b3678ebe9 [ 356.674364][T13734] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 356.674370][T13734] RBP: 00007f8b36811e19 R08: 0000200000000000 R09: 0000000000000010 [ 356.674377][T13734] R10: 0000000000048812 R11: 0000000000000246 R12: 0000000000000000 [ 356.674383][T13734] R13: 00007f8b369c6038 R14: 00007f8b369c5fa0 R15: 00007ffe361eab78 [ 356.674394][T13734] [ 356.674397][T13734] [ 356.987208][T13734] Allocated by task 10027: [ 356.991613][T13734] kasan_save_track+0x3e/0x80 [ 356.996279][T13734] __kasan_slab_alloc+0x6c/0x80 [ 357.001122][T13734] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 357.006659][T13734] xfrm_state_alloc+0x24/0x2f0 [ 357.011418][T13734] pfkey_add+0x6e4/0x2e00 [ 357.015735][T13734] pfkey_sendmsg+0xbfb/0x1090 [ 357.020422][T13734] __sock_sendmsg+0x21c/0x270 [ 357.025086][T13734] ____sys_sendmsg+0x505/0x830 [ 357.029837][T13734] ___sys_sendmsg+0x21f/0x2a0 [ 357.034502][T13734] __x64_sys_sendmsg+0x19b/0x260 [ 357.039441][T13734] do_syscall_64+0xfa/0x3b0 [ 357.043927][T13734] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.049804][T13734] [ 357.052108][T13734] Freed by task 120: [ 357.055982][T13734] kasan_save_track+0x3e/0x80 [ 357.060654][T13734] kasan_save_free_info+0x46/0x50 [ 357.065674][T13734] __kasan_slab_free+0x5b/0x80 [ 357.070435][T13734] kmem_cache_free+0x18f/0x400 [ 357.075192][T13734] xfrm_state_gc_task+0x52d/0x6b0 [ 357.080201][T13734] process_scheduled_works+0xae1/0x17b0 [ 357.085726][T13734] worker_thread+0x8a0/0xda0 [ 357.090294][T13734] kthread+0x70e/0x8a0 [ 357.094345][T13734] ret_from_fork+0x3fc/0x770 [ 357.098919][T13734] ret_from_fork_asm+0x1a/0x30 [ 357.103671][T13734] [ 357.105975][T13734] The buggy address belongs to the object at ffff88805a1e8000 [ 357.105975][T13734] which belongs to the cache xfrm_state of size 928 [ 357.119924][T13734] The buggy address is located 816 bytes inside of [ 357.119924][T13734] freed 928-byte region [ffff88805a1e8000, ffff88805a1e83a0) [ 357.133712][T13734] [ 357.136032][T13734] The buggy address belongs to the physical page: [ 357.142432][T13734] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5a1e8 [ 357.151189][T13734] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 357.159680][T13734] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 357.167302][T13734] page_type: f5(slab) [ 357.171270][T13734] raw: 00fff00000000040 ffff88801b3e2280 dead000000000122 0000000000000000 [ 357.179838][T13734] raw: 0000000000000000 00000000000f000f 00000000f5000000 0000000000000000 [ 357.188407][T13734] head: 00fff00000000040 ffff88801b3e2280 dead000000000122 0000000000000000 [ 357.197062][T13734] head: 0000000000000000 00000000000f000f 00000000f5000000 0000000000000000 [ 357.205714][T13734] head: 00fff00000000002 ffffea0001687a01 00000000ffffffff 00000000ffffffff [ 357.214377][T13734] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 357.223034][T13734] page dumped because: kasan: bad access detected [ 357.229449][T13734] page_owner tracks the page as allocated [ 357.235161][T13734] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6823, tgid 6821 (syz.1.394), ts 101994189367, free_ts 101890023732 [ 357.254341][T13734] post_alloc_hook+0x240/0x2a0 [ 357.259112][T13734] get_page_from_freelist+0x21e4/0x22c0 [ 357.264656][T13734] __alloc_frozen_pages_noprof+0x181/0x370 [ 357.270448][T13734] alloc_pages_mpol+0x232/0x4a0 [ 357.275289][T13734] allocate_slab+0x8a/0x370 [ 357.279775][T13734] ___slab_alloc+0xbeb/0x1420 [ 357.284445][T13734] kmem_cache_alloc_noprof+0x283/0x3c0 [ 357.289919][T13734] xfrm_state_alloc+0x24/0x2f0 [ 357.294676][T13734] __find_acq_core+0x8a7/0x1c00 [ 357.299530][T13734] xfrm_find_acq+0x78/0xa0 [ 357.303944][T13734] xfrm_alloc_userspi+0x6b3/0xc90 [ 357.308969][T13734] xfrm_user_rcv_msg+0x7a0/0xab0 [ 357.313911][T13734] netlink_rcv_skb+0x205/0x470 [ 357.318672][T13734] xfrm_netlink_rcv+0x79/0x90 [ 357.323350][T13734] netlink_unicast+0x82c/0x9e0 [ 357.328121][T13734] netlink_sendmsg+0x805/0xb30 [ 357.332870][T13734] page last free pid 5864 tgid 5864 stack trace: [ 357.339180][T13734] __free_frozen_pages+0xbc4/0xd30 [ 357.344284][T13734] __slab_free+0x303/0x3c0 [ 357.348683][T13734] qlist_free_all+0x97/0x140 [ 357.353350][T13734] kasan_quarantine_reduce+0x148/0x160 [ 357.358811][T13734] __kasan_slab_alloc+0x22/0x80 [ 357.363661][T13734] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 357.369104][T13734] vm_area_dup+0x2b/0x680 [ 357.373455][T13734] dup_mmap+0x90c/0x1ac0 [ 357.377686][T13734] copy_mm+0x13c/0x4b0 [ 357.381740][T13734] copy_process+0x1706/0x3c00 [ 357.386399][T13734] kernel_clone+0x21e/0x840 [ 357.390886][T13734] __x64_sys_clone+0x18b/0x1e0 [ 357.395633][T13734] do_syscall_64+0xfa/0x3b0 [ 357.400120][T13734] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.405999][T13734] [ 357.408305][T13734] Memory state around the buggy address: [ 357.413920][T13734] ffff88805a1e8200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 357.421967][T13734] ffff88805a1e8280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 357.430006][T13734] >ffff88805a1e8300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 357.438140][T13734] ^ [ 357.443775][T13734] ffff88805a1e8380: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc [ 357.451833][T13734] ffff88805a1e8400: fc fc fc fc fc fc fc fc 00 00 00 00 00 00 00 00 [ 357.459888][T13734] ================================================================== [ 357.488426][T13734] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 357.495656][T13734] CPU: 1 UID: 0 PID: 13734 Comm: syz.1.3506 Not tainted syzkaller #0 PREEMPT(full) [ 357.505028][T13734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 357.515091][T13734] Call Trace: [ 357.518376][T13734] [ 357.521310][T13734] dump_stack_lvl+0x99/0x250 [ 357.525913][T13734] ? __asan_memcpy+0x40/0x70 [ 357.530511][T13734] ? __pfx_dump_stack_lvl+0x10/0x10 [ 357.535724][T13734] ? __pfx__printk+0x10/0x10 [ 357.540340][T13734] vpanic+0x281/0x750 [ 357.544331][T13734] ? preempt_schedule+0xae/0xc0 [ 357.549195][T13734] ? __pfx_vpanic+0x10/0x10 [ 357.553707][T13734] ? preempt_schedule_common+0x83/0xd0 [ 357.559176][T13734] ? preempt_schedule+0xae/0xc0 [ 357.564040][T13734] ? __pfx_preempt_schedule+0x10/0x10 [ 357.569407][T13734] panic+0xb9/0xc0 [ 357.573113][T13734] ? __pfx_panic+0x10/0x10 [ 357.577523][T13734] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 357.583430][T13734] ? xfrm_state_find+0x2cf2/0x5400 [ 357.588528][T13734] check_panic_on_warn+0x89/0xb0 [ 357.593459][T13734] ? xfrm_state_find+0x2cf2/0x5400 [ 357.598577][T13734] end_report+0x78/0x160 [ 357.602816][T13734] kasan_report+0x129/0x150 [ 357.607306][T13734] ? xfrm_state_find+0x2cf2/0x5400 [ 357.612402][T13734] xfrm_state_find+0x2cf2/0x5400 [ 357.617320][T13734] ? __lock_acquire+0xab9/0xd20 [ 357.622161][T13734] ? xfrm_state_find+0x1da/0x5400 [ 357.627182][T13734] ? __pfx_xfrm_state_find+0x10/0x10 [ 357.632455][T13734] xfrm_resolve_and_create_bundle+0x768/0x2f80 [ 357.638603][T13734] ? xfrm_policy_lookup_bytype+0x2a7/0x1250 [ 357.644484][T13734] ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10 [ 357.651076][T13734] ? xfrm_policy_lookup_bytype+0x123/0x1250 [ 357.656955][T13734] ? xfrm_policy_lookup_bytype+0x11ef/0x1250 [ 357.662937][T13734] ? xfrm_expand_policies+0x41f/0x6a0 [ 357.668387][T13734] xfrm_lookup_with_ifid+0x58a/0x1a70 [ 357.673749][T13734] ? __pfx_xfrm_lookup_with_ifid+0x10/0x10 [ 357.679553][T13734] xfrm_lookup_route+0x3c/0x1c0 [ 357.684398][T13734] raw_sendmsg+0x1039/0x18b0 [ 357.688991][T13734] ? __pfx_raw_sendmsg+0x10/0x10 [ 357.693924][T13734] ? aa_sk_perm+0x81e/0x950 [ 357.698423][T13734] ? __pfx_aa_sk_perm+0x10/0x10 [ 357.703266][T13734] ? tomoyo_socket_sendmsg_permission+0x216/0x300 [ 357.709670][T13734] ? sock_rps_record_flow+0x19/0x410 [ 357.714960][T13734] ? inet_sendmsg+0x2f4/0x370 [ 357.719629][T13734] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 357.724901][T13734] __sock_sendmsg+0x19c/0x270 [ 357.729576][T13734] __sys_sendto+0x3bd/0x520 [ 357.734063][T13734] ? __pfx___sys_sendto+0x10/0x10 [ 357.739077][T13734] ? do_futex+0x333/0x420 [ 357.743400][T13734] ? rcu_is_watching+0x15/0xb0 [ 357.748150][T13734] __x64_sys_sendto+0xde/0x100 [ 357.752899][T13734] do_syscall_64+0xfa/0x3b0 [ 357.757388][T13734] ? lockdep_hardirqs_on+0x9c/0x150 [ 357.762582][T13734] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.768641][T13734] ? clear_bhb_loop+0x60/0xb0 [ 357.773309][T13734] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.779351][T13734] RIP: 0033:0x7f8b3678ebe9 [ 357.783760][T13734] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 357.803355][T13734] RSP: 002b:00007f8b37682038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 357.811767][T13734] RAX: ffffffffffffffda RBX: 00007f8b369c5fa0 RCX: 00007f8b3678ebe9 [ 357.819783][T13734] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 357.827742][T13734] RBP: 00007f8b36811e19 R08: 0000200000000000 R09: 0000000000000010 [ 357.835703][T13734] R10: 0000000000048812 R11: 0000000000000246 R12: 0000000000000000 [ 357.843676][T13734] R13: 00007f8b369c6038 R14: 00007f8b369c5fa0 R15: 00007ffe361eab78 [ 357.851653][T13734] [ 357.854930][T13734] Kernel Offset: disabled [ 357.859258][T13734] Rebooting in 86400 seconds..