last executing test programs: 38.009443425s ago: executing program 2 (id=3061): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x1}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x2, 0x2, 0x5, 0x4, 0x854b, 0xd8}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0xf}, {0xfffd, 0xb}, {0xffff, 0x3}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x240040e0}, 0x200040d0) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f0000000140)="ba", 0x1, 0x20008040, &(0x7f0000000080)={0x11, 0x8100, r5, 0x1, 0x7, 0x6, @multicast}, 0x14) 37.613463387s ago: executing program 2 (id=3066): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) 37.561356859s ago: executing program 2 (id=3067): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)={0x74, r1, 0x101, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x4000, 0x0, 0x4, 0x0, {0x329, 0xf70, 0x0, 0x319, 0x0, 0x0, 0x0, 0x1, 0x1}, 0xf, 0xa, 0x48}}, @NL80211_ATTR_SSID={0x5, 0x34, @random="a9"}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}], @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x2, 0x2, 0x1, 0x0, {0x800, 0x0, 0x0, 0x3c0, 0x0, 0x1, 0x0, 0x2}, 0x1, 0x2009, 0x3}}]}, 0x74}, 0x1, 0x0, 0x0, 0x4890}, 0x4010) 37.388250756s ago: executing program 2 (id=3069): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TARGET_INFO={0x2c, 0x3, "7339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c70000fffffffffffffff5000000000000"}, @NFTA_TARGET_NAME={0x8, 0x1, 'TEE\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 28.38586615s ago: executing program 0 (id=3185): close(0x3) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0x8) 28.27335155s ago: executing program 0 (id=3187): close(0x3) 28.173259417s ago: executing program 0 (id=3189): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x8, &(0x7f0000000040)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r0}, &(0x7f0000000140), &(0x7f0000000200)=r1}, 0x20) 28.086265171s ago: executing program 0 (id=3192): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)={0x44, 0xa, 0x6, 0x101, 0xd000000, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_LINENO={0x8}]}, 0x44}}, 0x0) 27.948859092s ago: executing program 0 (id=3195): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB='-'], 0x27) 27.813449343s ago: executing program 0 (id=3198): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="5000000002060108000034e4000000000000000805000400000000000900020073797a3100000000050005000200000016000300686173683a6e65742c706f72742c6e65740000000500010007"], 0x50}, 0x1, 0x0, 0x0, 0x20044000}, 0x8042) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) recvmsg(r2, &(0x7f000000c1c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001500)=""/4099, 0x1003}, {&(0x7f000000bec0)=""/27, 0x1b}], 0x2}, 0x40002022) 26.963576197s ago: executing program 2 (id=3071): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@newtfilter={0x54, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xd, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0xd4ec, 0x8, 0x1b62}, {0x0, 0x6, 0x4}}}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000814}, 0x0) 26.202271531s ago: executing program 2 (id=3210): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) r1 = socket$inet(0x2, 0x3, 0x1) getpid() r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)={0x68, 0x2, 0x6, 0x5, 0x0, 0x0, {0x4, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x9}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x6}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x90}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x68}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0xff03, 0x0) sendmsg$inet(r1, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0xffff, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000830b040a0101027f00000100000000001c"], 0x40}, 0x82815ec4260f45e2) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, 0x0, 0x0) 12.786106424s ago: executing program 32 (id=3198): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="5000000002060108000034e4000000000000000805000400000000000900020073797a3100000000050005000200000016000300686173683a6e65742c706f72742c6e65740000000500010007"], 0x50}, 0x1, 0x0, 0x0, 0x20044000}, 0x8042) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) recvmsg(r2, &(0x7f000000c1c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001500)=""/4099, 0x1003}, {&(0x7f000000bec0)=""/27, 0x1b}], 0x2}, 0x40002022) 12.773107561s ago: executing program 4 (id=3322): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x9c}}, 0x0) 12.681254806s ago: executing program 4 (id=3323): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0xfffffffffffffdd0, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), r1) sendmsg$SMC_PNETID_DEL(r2, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x84, r3, 0x2, 0x70bd28, 0x25dfdbff, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x800}, 0x90) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="c0000000000101040000000000000000020000000800074000000000240002800c00028005000100000000001400018008000100ac1414bb080002007f000001240001801400018008000100e000000208000200ac1414000c00028005000100000000005c00068008000100ff"], 0xc0}}, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000002e00010026bdf000fcdbdf250400000004000d8008000c"], 0x20}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 11.959861667s ago: executing program 4 (id=3327): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0xffffffffffffffff, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=@ipv6_newnexthop={0x18, 0x68, 0x1, 0x3, 0x2}, 0x18}, 0x1, 0x0, 0x0, 0x1}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x24000044) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x42, &(0x7f0000000280)}, &(0x7f0000002100)=0x10) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5800000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000300012800b00010067656e6576650000200002801400070020010000000000000000000000000000080001000100000008000a00", @ANYRES32], 0x58}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) 11.093131466s ago: executing program 33 (id=3210): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) r1 = socket$inet(0x2, 0x3, 0x1) getpid() r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)={0x68, 0x2, 0x6, 0x5, 0x0, 0x0, {0x4, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x9}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x6}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x90}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x68}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0xff03, 0x0) sendmsg$inet(r1, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0xffff, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000830b040a0101027f00000100000000001c"], 0x40}, 0x82815ec4260f45e2) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, 0x0, 0x0) 9.04722672s ago: executing program 4 (id=3339): unshare(0x24020400) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x66960000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b36, &(0x7f0000000000)={'wlan1\x00'}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="580100001000030400"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES64=r3], 0x158}, 0x1, 0xba01, 0x0, 0x14084}, 0x44) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000100)=ANY=[@ANYRESHEX=r0, @ANYRES8=0x0, @ANYRES32=r2], 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x2f, &(0x7f0000000040), 0x3b) r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r1, 0x0, 0x25, 0x16, @void}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000000c0)={r4, r5, 0x4}, 0x10) 8.789741602s ago: executing program 4 (id=3341): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x2000000000000061) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000240)="db2d", 0x2}, {&(0x7f0000000400)}], 0x2}}], 0x1, 0x24040015) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) 8.584908812s ago: executing program 4 (id=3343): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}}, 0x20044080) r1 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.794709538s ago: executing program 1 (id=3366): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000080)=[{{0x1, 0x0, 0x0, 0x1}, {0x1, 0x1, 0x1}}, {{0x4, 0x1, 0x1}, {0x0, 0x0, 0x0, 0x1}}], 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) (async) write(r0, &(0x7f0000000000)="374898a9e6894c944001ef9676041de9b1c06365959beb3804fde4a7ef88f2286bc30beb", 0x24) (async) r3 = socket$can_raw(0x1d, 0x3, 0x1) sendmmsg$inet(r3, &(0x7f0000008e00)=[{{&(0x7f0000004680)={0x2, 0x0, @dev}, 0x10, &(0x7f0000004980)=[{&(0x7f00000046c0)="52bf2dd8d7127f6a18190cdba5", 0xd}], 0x1}}], 0x1, 0x0) (async) bind$can_raw(r1, &(0x7f0000000200)={0x1d, r2}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r2, {0xffff, 0xf}, {0xf, 0xa}, {0x3, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x4004000}, 0x80) 2.668864221s ago: executing program 3 (id=3367): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x3, 0xc, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 2.610563801s ago: executing program 3 (id=3368): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000000)=0x7ffe, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0xa, @empty, 0x9}, 0x1c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) syz_emit_ethernet(0xf87, &(0x7f0000001180)={@local, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0xf51, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, @local, {[@routing={0x84}], "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"}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r7, {0xb, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x7f, 0xffffffffffffffff, 0xc9d, 0xd155}, 0x5f}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4894}, 0x2) close(r5) socket(0x40000000015, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r8, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r7, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0000000025c10200000088125ce882cbf400930bf4533f00429c65112a093bbf60b85bcb06", 0x2e}], 0x1}, 0x4005) sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0xb, @loopback, 0x1}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000140)='2', 0x1}], 0x1}}], 0x1, 0x8000) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r9, &(0x7f0000000140)={0xa, 0x4e23, 0x100002, @ipv4={'\x00', '\xff\xff', @local}, 0xffff}, 0x1c) sendmmsg$inet6(r9, &(0x7f0000000680)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0xab, @loopback, 0x8}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000900)='2', 0x1}], 0x1}}], 0x1, 0x20000014) shutdown(r9, 0x1) 2.448966739s ago: executing program 1 (id=3369): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x56, r2}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 2.139606183s ago: executing program 1 (id=3370): r0 = socket$can_raw(0x1d, 0x3, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000020000000000000091108f00000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x90) sendmsg$can_raw(r0, &(0x7f0000000240)={&(0x7f0000000780), 0x6, &(0x7f0000000200)={&(0x7f0000000140)=@can={{}, 0x0, 0x0, 0x0, 0x0, "5b7ba3698f28aaf0"}, 0x10}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) sendmsg$can_raw(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@can={{0x0, 0x1, 0x0, 0x1}, 0x4, 0x3, 0x0, 0x0, "75d621976197a68b"}, 0x10}, 0x1, 0x0, 0x0, 0x6000045}, 0x80) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf2501"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_netdev_private(r5, 0x8947, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000280)) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, r6) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000500)={@private, @multicast1, 0x0}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000700)={'gretap0\x00', &(0x7f0000000580)={'sit0\x00', 0x0, 0x7, 0x10, 0x7, 0x8, {{0x36, 0x4, 0x1, 0xd, 0xd8, 0x67, 0x0, 0x4f, 0xb920c973d6887edf, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@ssrr={0x89, 0x23, 0x73, [@multicast1, @loopback, @multicast2, @remote, @loopback, @remote, @broadcast, @multicast1]}, @timestamp_prespec={0x44, 0x44, 0xd3, 0x3, 0x0, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}, {@rand_addr=0x64010100, 0x80000000}, {@private=0xa010101, 0x81}, {@broadcast, 0xaf6}, {@rand_addr=0x64010101, 0xd258}, {@private=0xa010100, 0xf}, {@dev={0xac, 0x14, 0x14, 0x12}, 0x9}, {@broadcast, 0x1}]}, @ra={0x94, 0x4}, @cipso={0x86, 0x6, 0x1}, @ssrr={0x89, 0x7, 0x25, [@rand_addr=0x64010102]}, @cipso={0x86, 0x49, 0x3, [{0x7, 0xb, "724acc35b799fee73d"}, {0x1, 0x6, "864a9ad3"}, {0x6, 0xe, "73e6d14fea2dae6829110d61"}, {0x2, 0x2}, {0x0, 0x12, "c149747062e8fd8e8b650c9b34ee1e0f"}, {0x0, 0x2}, {0x2, 0x4, "1f15"}, {0x6, 0x4, "d025"}, {0x2, 0x6, "c3454362"}]}, @rr={0x7, 0x3, 0x93}]}}}}}) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000005a80)={&(0x7f0000000340), 0xc, &(0x7f0000005a40)={&(0x7f00000037c0)=ANY=[@ANYBLOB='`\"\x00\x00', @ANYRES16=0x0, @ANYBLOB="11082cbd7000fedbdf2508000000400001801400020073797a6b616c6c65723000000000000008000300010000000800030076f6076908000100", @ANYRES32=0x0, @ANYBLOB="080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="3012018008000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r9, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000300030000000c0001800800030002000000"], 0x2260}, 0x1, 0x0, 0x0, 0x20000001}, 0x81) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x6c, 0x30, 0x1, 0x70bd29, 0x0, {}, [{0x58, 0x1, [@m_bpf={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0x10000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x50, 0x3, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8}, @CTA_TIMEOUT_SCTP_CLOSED={0x8}, @CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8}, @CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8}, @CTA_TIMEOUT_SCTP_SHUTDOWN_SENT={0xffffffffffffff7c}]}]}, 0x50}}, 0x0) recvmmsg(r4, &(0x7f0000003780)=[{{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000040)=""/108, 0x6c}], 0x1}, 0x4}], 0x1, 0x2000, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r2, 0x1, 0x14, 0x15, {{0x2}, {@val={0x8, 0x3, r3}, @void}}}, 0x28}}, 0x0) 1.917876258s ago: executing program 1 (id=3371): r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r3) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0xff23, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYRESOCT=r2, @ANYRES16=r4, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r5], 0x1c}, 0x1, 0x0, 0x0, 0x20000810}, 0x400c054) write$nci(r1, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03", 0x3}], 0x1}, 0x0) write$nci(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="5001"], 0x14) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYRES16=0x0], 0x48}}, 0x400400c0) sendmmsg$alg(r6, &(0x7f00000000c0), 0x492492492492627, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r7}, 0x10) syz_emit_ethernet(0x82, &(0x7f0000000000)={@multicast, @empty, @val, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "5f1060", 0x44, 0x2f, 0x0, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x100}, {}, {0x8, 0x88be, 0x86ddffff}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7}}}}}}}}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newtaction={0x9c, 0x30, 0x48b, 0x0, 0x0, {}, [{0x88, 0x1, [@m_ctinfo={0x30, 0x2, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{}, @multicast2, @remote}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x9c}}, 0x0) sendmsg$can_bcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="0500"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001000000000017b4e79dead7374f44dfaa000000"], 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x8000) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x6, 0x0, 0x0, {}, {0x77359400}, {}, 0x1, @can={{}, 0x3, 0x2}}, 0x48}}, 0x0) 1.859324989s ago: executing program 5 (id=3320): syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x9c, 0x0, @wg}}}}}, 0x0) syz_emit_ethernet(0x9e, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x7c, 0x0, @wg=@data={0x4, 0x0, 0x0, "0000000000000000000000000000000000000000000007ffffff00"/100}}}}}}, 0x0) 1.632701728s ago: executing program 5 (id=3372): setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x11, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0x9, 0x4) setsockopt$RDS_RECVERR(0xffffffffffffffff, 0x114, 0x5, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="02011400012918000e1a80009f0001143f11002f0600ac141430e0000003808a8972bd0b72e41082b1a3d206", @ANYBLOB="363d60be312a894a0ad8b1847ecd706f971fd8ba38e2dcccbc09c00700e2aeacc799fc70e1a37aab31c9c653530627fd6245fa47050af6"], 0xdd12}], 0x1, 0x0, 0x0, 0x4000007}, 0x4000) 1.474781013s ago: executing program 1 (id=3373): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000180)=0xdf9, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000000)="bf", 0x1, 0x20040045, &(0x7f0000000140)={0xa, 0x4001, 0xfffb, @loopback, 0xfffffffd}, 0x1c) 1.466275822s ago: executing program 6 (id=3332): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0, 0x4100}, 0xac}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000480)=""/92, 0x95}, {&(0x7f00000018c0)=""/4108, 0x100c}, {&(0x7f0000001680)=""/109, 0x6d}, {&(0x7f0000001740)=""/72, 0x48}, {&(0x7f00000005c0)=""/61, 0x3d}], 0x5}, 0x7}, {{0x0, 0x3c, 0x0}, 0xd3a7}, {{0x0, 0x0, 0x0}, 0x80000}, {{0x0, 0x0, 0x0}, 0x8000005}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0x10001}, {{0x0, 0x0, 0x0}, 0xa9e5}], 0x9, 0x2000, 0x0) 1.412441923s ago: executing program 3 (id=3374): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x8, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x25}, [@jmp={0x6, 0x0, 0x7, 0x0, 0x0, 0x1, 0x25}, @exit, @cb_func={0x18, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0xf3ff}, @exit]}, &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x807}, 0x94) 1.410698939s ago: executing program 5 (id=3375): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x20000884) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0xf503, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r5, {0x6}, {}, {0xfff2, 0x1}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x2, '\x00', 0x9, 0x0, 0x3, 0xfffffffd}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040098}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffbddc, {0x0, 0x0, 0x0, r2, {0xfff1}, {0x6, 0xfff1}, {0xfff2, 0x1}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x2, '\x00', 0x9, 0x0, 0x3, 0xfffffffd}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040098}, 0x880) 1.259355985s ago: executing program 6 (id=3376): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x1, 0x8001, 0x6}, 0x10) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (fail_nth: 2) 1.257823829s ago: executing program 1 (id=3377): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="54000000020601030000000000000000000000000900020073797a30000000000500010006000000050005800000000005000400000000000c00078008000600000000010d000300686173683a6d616300"], 0x54}}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000400)={0x0, r0}, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYRES16=r0], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0x1c, 0x0, &(0x7f0000000100)="b9ffddc1ddcccdde75537d538906dfff70bf2dfe443b1b5e2a9080f3", 0x0, 0x600, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x7}, @NFTA_CHAIN_HOOK={0x4}]}], {0x14}}, 0x80}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000080)={0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e20, 0x3, 'nq\x00', 0x8, 0x2, 0x73}, 0x2c) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001580)=ANY=[@ANYBLOB="600000000206030000000000b8791fa80000000014000780080012400000000005001500010000000500010006000000050005000200000005000400000000000900020073797a310000000012000300686173683a6e65742c706f7274"], 0x60}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x40d0}, 0x40000) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)={0x64, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x3c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010100}}, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0xfffffffffffffff9}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast1}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 1.177171979s ago: executing program 3 (id=3378): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x12, 0x1, 0x4, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x2}, 0x4) setsockopt$packet_int(r1, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) syz_emit_ethernet(0x2a, &(0x7f0000000080)=ANY=[], 0x0) 1.176527082s ago: executing program 5 (id=3379): r0 = socket$can_raw(0x1d, 0x3, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000020000000000000091108f00000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x90) sendmsg$can_raw(r0, &(0x7f0000000240)={&(0x7f0000000780), 0x6, &(0x7f0000000200)={&(0x7f0000000140)=@can={{}, 0x0, 0x0, 0x0, 0x0, "5b7ba3698f28aaf0"}, 0x10}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) sendmsg$can_raw(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@can={{0x0, 0x1, 0x0, 0x1}, 0x4, 0x3, 0x0, 0x0, "75d621976197a68b"}, 0x10}, 0x1, 0x0, 0x0, 0x6000045}, 0x80) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf2501"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_netdev_private(r5, 0x8947, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000280)) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, r6) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000500)={@private, @multicast1, 0x0}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000700)={'gretap0\x00', &(0x7f0000000580)={'sit0\x00', 0x0, 0x7, 0x10, 0x7, 0x8, {{0x35, 0x4, 0x1, 0xd, 0xd4, 0x67, 0x0, 0x4f, 0xb920c973d6887edf, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@ssrr={0x89, 0x23, 0x73, [@multicast1, @loopback, @multicast2, @remote, @loopback, @remote, @broadcast, @multicast1]}, @timestamp_prespec={0x44, 0x44, 0xd3, 0x3, 0x0, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}, {@rand_addr=0x64010100, 0x80000000}, {@private=0xa010101, 0x81}, {@broadcast, 0xaf6}, {@rand_addr=0x64010101, 0xd258}, {@private=0xa010100, 0xf}, {@dev={0xac, 0x14, 0x14, 0x12}, 0x9}, {@broadcast, 0x1}]}, @cipso={0x86, 0x6, 0x1}, @ssrr={0x89, 0x7, 0x25, [@rand_addr=0x64010102]}, @cipso={0x86, 0x49, 0x3, [{0x7, 0xb, "724acc35b799fee73d"}, {0x1, 0x6, "864a9ad3"}, {0x6, 0xe, "73e6d14fea2dae6829110d61"}, {0x2, 0x2}, {0x0, 0x12, "c149747062e8fd8e8b650c9b34ee1e0f"}, {0x0, 0x2}, {0x2, 0x4, "1f15"}, {0x6, 0x4, "d025"}, {0x2, 0x6, "c3454362"}]}, @rr={0x7, 0x3, 0x93}]}}}}}) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000005a80)={&(0x7f0000000340), 0xc, &(0x7f0000005a40)={&(0x7f00000037c0)=ANY=[@ANYBLOB='`\"\x00\x00', @ANYRES16=0x0, @ANYBLOB="11082cbd7000fedbdf2508000000400001801400020073797a6b616c6c65723000000000000008000300010000000800030076f6076908000100", @ANYRES32=0x0, @ANYBLOB="080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="3012018008000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r9, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000300030000000c0001800800030002000000"], 0x2260}, 0x1, 0x0, 0x0, 0x20000001}, 0x81) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x6c, 0x30, 0x1, 0x70bd29, 0x0, {}, [{0x58, 0x1, [@m_bpf={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0x10000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x50, 0x3, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8}, @CTA_TIMEOUT_SCTP_CLOSED={0x8}, @CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8}, @CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8}, @CTA_TIMEOUT_SCTP_SHUTDOWN_SENT={0xffffffffffffff7c}]}]}, 0x50}}, 0x0) recvmmsg(r4, &(0x7f0000003780)=[{{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000040)=""/108, 0x6c}], 0x1}, 0x4}], 0x1, 0x2000, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r2, 0x1, 0x14, 0x15, {{0x2}, {@val={0x8, 0x3, r3}, @void}}}, 0x28}}, 0x0) 723.743191ms ago: executing program 6 (id=3380): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0xd) r1 = socket$kcm(0x2, 0xa, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r0, &(0x7f0000003240)={@val={0x8, 0x800}, @val={0x5, 0x0, 0x2, 0xe7b6, 0x14, 0x2}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x2c, 0xfc0, 0x64, 0x0, 0x3, 0x6, 0x0, @private=0xa010100, @multicast1}, {{0x4e20, 0x4e28, 0x41424344, 0x41424344, 0x1, 0x0, 0xa, 0x10, 0x7, 0x0, 0x8, {[@md5sig={0x13, 0x12, "e61e00"}]}}, {"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"}}}}, 0xfce) 701.567926ms ago: executing program 5 (id=3381): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x8001, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}, {0x0, 0x0, 0x0, 0x800, 0x7}, {0x0, 0x0, 0xe6}, 0x0, 0x0, 0x0, 0x0, 0x2}, {{@in=@remote, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x25dfdbfc, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8, 0x4}, {0x0, 0x8}}}, 0xb8}}, 0x0) (fail_nth: 6) 394.384547ms ago: executing program 3 (id=3382): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a68010000000a01030000000000000000006400000900010073797a30000000006800060099b6770cba4b96d54e0564fd3c29e674a6c6be9a0295878f456b889ac018bc219c81c9372d53b32694e190b7df65b5b446607b201c2fc4b8e2de353661987744188fe1f37a67a472f667adffb0a44f6a6ef555777e87b5a9f79b4b79363dece9ee9c28dd690006008301f0dfeff0619747d132396e4b37ad571180f66e9e5f6f88d8a432e3d5c27fe0a7eba19570ecf7514b6d116494fe6ae662fa12a42d95f777e9127c7ecf7aa6b7923483deedfce5cae91d4b7214a8499f5e175d933e68cf800b2a82927d602120babbaa4d0000000c000440000000000000000365000600a80f2f2108305d71c694fc24d3421d6574273a64dd17588dcda7987e8604c6c4f7113836d86465a827066acdfa1180c5758cb9e80a8f9e37a6181e9027386ffe29431b612e8de28fd5e36c9785ed2a3c0e599ef02bffe176bde8f1d348d071ec4900000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000054000000060a010400000000000000000100060008000b40000000000900010073797a30000000002c0004802800018008000100666962001c00028008000340000000010800014000000002080002400000000114000000110001"], 0x224}}, 0x0) 137.30316ms ago: executing program 5 (id=3383): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x800) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket(0x2b, 0x1, 0x1) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_generic(r2, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x5) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r3 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) connect$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @host}, 0x10) accept4$tipc(r1, &(0x7f0000000140), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x800) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) close(r0) (async) socket(0x2b, 0x1, 0x1) (async) socket(0x10, 0x3, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, 0x0, 0x0) (async) sendmsg$nl_generic(r2, 0x0, 0x0) (async) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async) listen(r1, 0x5) (async) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) (async) socket$inet_smc(0x2b, 0x1, 0x0) (async) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async) connect$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @host}, 0x10) (async) accept4$tipc(r1, &(0x7f0000000140), 0x0, 0x0) (async) 376.29µs ago: executing program 6 (id=3384): socket$inet(0x2, 0x3, 0x6) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)}], 0x1) 0s ago: executing program 3 (id=3385): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, 0x0, 0x4000000) sendmsg$nl_generic(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x4888}, 0x4040) recvmmsg(r0, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000001c0)=""/217, 0xd9}, {&(0x7f0000000980)=""/90, 0x5a}, {&(0x7f0000000f00)=""/231, 0xe7}, {&(0x7f00000006c0)=""/137, 0x89}, {&(0x7f0000001840)=""/4104, 0x1008}], 0x5}, 0x70001}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x77}, {{0x0, 0x0, 0x0}, 0x3}], 0x4, 0x102, 0x0) kernel console output (not intermixed with test programs): 212.495738][T12261] _copy_from_user+0x2d/0xb0 [ 212.495761][T12261] ___sys_recvmsg+0x175/0x590 [ 212.495785][T12261] ? __pfx____sys_recvmsg+0x10/0x10 [ 212.495807][T12261] ? __fget_files+0x2a/0x420 [ 212.495855][T12261] do_recvmmsg+0x334/0x800 [ 212.495881][T12261] ? __pfx_do_recvmmsg+0x10/0x10 [ 212.495910][T12261] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 212.495946][T12261] __x64_sys_recvmmsg+0x198/0x250 [ 212.495967][T12261] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 212.496001][T12261] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.496020][T12261] do_syscall_64+0x174/0x580 [ 212.496036][T12261] ? trace_irq_disable+0x3b/0x140 [ 212.496061][T12261] ? clear_bhb_loop+0x40/0x90 [ 212.496082][T12261] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.496099][T12261] RIP: 0033:0x7f9bb639ce59 [ 212.496115][T12261] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 212.496129][T12261] RSP: 002b:00007f9bb45ee028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 212.496147][T12261] RAX: ffffffffffffffda RBX: 00007f9bb6615fa0 RCX: 00007f9bb639ce59 [ 212.496159][T12261] RDX: 0000000000000009 RSI: 0000200000000d80 RDI: 0000000000000003 [ 212.496170][T12261] RBP: 00007f9bb45ee090 R08: 0000000000000000 R09: 0000000000000000 [ 212.496181][T12261] R10: 0000000000002000 R11: 0000000000000246 R12: 0000000000000001 [ 212.496191][T12261] R13: 00007f9bb6616038 R14: 00007f9bb6615fa0 R15: 00007ffe1b4f4488 [ 212.496221][T12261] [ 212.842726][T12272] veth0_to_bond: entered allmulticast mode [ 212.860189][T12275] netlink: 1204 bytes leftover after parsing attributes in process `syz.1.2037'. [ 212.944882][T12281] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2038'. [ 212.960769][T12272] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2036'. [ 212.983460][T12281] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2038'. [ 212.997590][T12281] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2038'. [ 213.006086][T12288] netlink: 'syz.2.2041': attribute type 1 has an invalid length. [ 213.010012][T12281] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2038'. [ 213.265904][T12307] FAULT_INJECTION: forcing a failure. [ 213.265904][T12307] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 213.291398][T12308] netlink: 112 bytes leftover after parsing attributes in process `syz.3.2047'. [ 213.308277][T12307] CPU: 0 UID: 0 PID: 12307 Comm: syz.2.2046 Not tainted syzkaller #0 PREEMPT(full) [ 213.308303][T12307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 213.308314][T12307] Call Trace: [ 213.308320][T12307] [ 213.308328][T12307] dump_stack_lvl+0xe8/0x150 [ 213.308353][T12307] should_fail_ex+0x412/0x560 [ 213.308377][T12307] _copy_to_iter+0x589/0x17d0 [ 213.308411][T12307] ? __pfx__copy_to_iter+0x10/0x10 [ 213.308429][T12307] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 213.308454][T12307] ? lockdep_hardirqs_on+0x7a/0x110 [ 213.308470][T12307] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 213.308492][T12307] ? __skb_try_recv_datagram+0x3d4/0x4d0 [ 213.308516][T12307] __skb_datagram_iter+0xf8/0x980 [ 213.308536][T12307] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 213.308563][T12307] skb_copy_datagram_iter+0xb5/0x240 [ 213.308586][T12307] netlink_recvmsg+0x2c3/0xa50 [ 213.308620][T12307] ? __pfx_netlink_recvmsg+0x10/0x10 [ 213.308649][T12307] ? __lock_acquire+0x6b5/0x2cf0 [ 213.308667][T12307] ? aa_sock_msg_perm+0xf1/0x1b0 [ 213.308694][T12307] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 213.308715][T12307] ? security_socket_recvmsg+0x7e/0x2c0 [ 213.308735][T12307] ? __pfx_netlink_recvmsg+0x10/0x10 [ 213.308760][T12307] sock_recvmsg+0x172/0x1b0 [ 213.308782][T12307] ____sys_recvmsg+0x1e6/0x4a0 [ 213.308809][T12307] ? __pfx_____sys_recvmsg+0x10/0x10 [ 213.308842][T12307] ? import_iovec+0x73/0xa0 [ 213.308866][T12307] ___sys_recvmsg+0x215/0x590 [ 213.308890][T12307] ? __pfx____sys_recvmsg+0x10/0x10 [ 213.308912][T12307] ? __fget_files+0x2a/0x420 [ 213.308950][T12307] ? __fget_files+0x3a0/0x420 [ 213.308987][T12307] do_recvmmsg+0x334/0x800 [ 213.309013][T12307] ? __pfx_do_recvmmsg+0x10/0x10 [ 213.309043][T12307] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 213.309078][T12307] __x64_sys_recvmmsg+0x198/0x250 [ 213.309103][T12307] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 213.309129][T12307] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.309149][T12307] do_syscall_64+0x174/0x580 [ 213.309166][T12307] ? trace_irq_disable+0x3b/0x140 [ 213.309190][T12307] ? clear_bhb_loop+0x40/0x90 [ 213.309211][T12307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.309229][T12307] RIP: 0033:0x7fdc85d9ce59 [ 213.309249][T12307] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 213.309263][T12307] RSP: 002b:00007fdc86b6f028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 213.309283][T12307] RAX: ffffffffffffffda RBX: 00007fdc86015fa0 RCX: 00007fdc85d9ce59 [ 213.309299][T12307] RDX: 0000000000000004 RSI: 0000200000000a00 RDI: 0000000000000003 [ 213.309310][T12307] RBP: 00007fdc86b6f090 R08: 0000000000000000 R09: 0000000000000000 [ 213.309321][T12307] R10: 0000000000000102 R11: 0000000000000246 R12: 0000000000000001 [ 213.309331][T12307] R13: 00007fdc86016038 R14: 00007fdc86015fa0 R15: 00007ffdff733a38 [ 213.309365][T12307] [ 213.684496][T12275] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 213.692758][T12275] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 213.762293][T12332] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2057'. [ 213.915526][T12341] xt_hashlimit: size too large, truncated to 1048576 [ 214.343778][T12364] netlink: 'syz.4.2065': attribute type 1 has an invalid length. [ 214.609121][T12386] IPVS: set_ctl: invalid protocol: 44 172.30.0.3:20001 [ 215.011670][T12413] netlink: 'syz.0.2077': attribute type 1 has an invalid length. [ 215.020058][T12417] openvswitch: netlink: Flow actions attr not present in new flow. [ 215.080044][T12413] netlink: 'syz.0.2077': attribute type 4 has an invalid length. [ 215.218763][T12427] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 215.292727][T12428] 8021q: adding VLAN 0 to HW filter on device bond8 [ 215.328793][T12428] bond8: entered promiscuous mode [ 215.340646][T12428] bond8: entered allmulticast mode [ 215.420935][T12444] IPVS: set_ctl: invalid protocol: 115 172.30.1.1:20003 [ 215.762696][ T29] audit: type=1804 audit(1780017196.633:3): pid=12465 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2094" name="/newroot/411/cgroup.controllers" dev="tmpfs" ino=2097 res=1 errno=0 [ 215.797458][T12462] FAULT_INJECTION: forcing a failure. [ 215.797458][T12462] name failslab, interval 1, probability 0, space 0, times 0 [ 215.810229][ T29] audit: type=1800 audit(1780017196.663:4): pid=12465 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2094" name="cgroup.controllers" dev="tmpfs" ino=2097 res=0 errno=0 [ 215.847049][T12462] CPU: 1 UID: 0 PID: 12462 Comm: syz.2.2097 Not tainted syzkaller #0 PREEMPT(full) [ 215.847075][T12462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 215.847086][T12462] Call Trace: [ 215.847093][T12462] [ 215.847101][T12462] dump_stack_lvl+0xe8/0x150 [ 215.847126][T12462] should_fail_ex+0x412/0x560 [ 215.847152][T12462] should_failslab+0xa8/0x100 [ 215.847169][T12462] ? skb_clone+0x212/0x3a0 [ 215.847187][T12462] kmem_cache_alloc_noprof+0x87/0x650 [ 215.847210][T12462] ? sk_filter_trim_cap+0x19e/0xce0 [ 215.847237][T12462] skb_clone+0x212/0x3a0 [ 215.847259][T12462] __netlink_deliver_tap+0x404/0x850 [ 215.847296][T12462] ? netlink_deliver_tap+0x2e/0x1b0 [ 215.847322][T12462] netlink_deliver_tap+0x19c/0x1b0 [ 215.847348][T12462] netlink_dump+0x8ed/0xe10 [ 215.847383][T12462] ? __pfx_netlink_dump+0x10/0x10 [ 215.847417][T12462] ? netlink_recvmsg+0x5d6/0xa50 [ 215.847438][T12462] ? kmem_cache_free+0x182/0x650 [ 215.847468][T12462] netlink_recvmsg+0x690/0xa50 [ 215.847503][T12462] ? __pfx_netlink_recvmsg+0x10/0x10 [ 215.847532][T12462] ? __lock_acquire+0x6b5/0x2cf0 [ 215.847556][T12462] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 215.847577][T12462] ? security_socket_recvmsg+0x7e/0x2c0 [ 215.847598][T12462] ? __pfx_netlink_recvmsg+0x10/0x10 [ 215.847624][T12462] sock_recvmsg_nosec+0x10c/0x140 [ 215.847649][T12462] ____sys_recvmsg+0x3e3/0x4a0 [ 215.847685][T12462] ? __pfx_____sys_recvmsg+0x10/0x10 [ 215.847719][T12462] ? import_iovec+0x73/0xa0 [ 215.847745][T12462] ___sys_recvmsg+0x215/0x590 [ 215.847769][T12462] ? __pfx____sys_recvmsg+0x10/0x10 [ 215.847792][T12462] ? __fget_files+0x2a/0x420 [ 215.847845][T12462] do_recvmmsg+0x334/0x800 [ 215.847873][T12462] ? __pfx_do_recvmmsg+0x10/0x10 [ 215.847903][T12462] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 215.847942][T12462] __x64_sys_recvmmsg+0x198/0x250 [ 215.847966][T12462] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 215.847994][T12462] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.848014][T12462] do_syscall_64+0x174/0x580 [ 215.848031][T12462] ? trace_irq_disable+0x3b/0x140 [ 215.848055][T12462] ? clear_bhb_loop+0x40/0x90 [ 215.848077][T12462] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.848095][T12462] RIP: 0033:0x7fdc85d9ce59 [ 215.848111][T12462] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 215.848125][T12462] RSP: 002b:00007fdc86b6f028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 215.848144][T12462] RAX: ffffffffffffffda RBX: 00007fdc86015fa0 RCX: 00007fdc85d9ce59 [ 215.848157][T12462] RDX: 0000000000000009 RSI: 0000200000000d80 RDI: 0000000000000003 [ 215.848168][T12462] RBP: 00007fdc86b6f090 R08: 0000000000000000 R09: 0000000000000000 [ 215.848178][T12462] R10: 0000000000002000 R11: 0000000000000246 R12: 0000000000000002 [ 215.848188][T12462] R13: 00007fdc86016038 R14: 00007fdc86015fa0 R15: 00007ffdff733a38 [ 215.848219][T12462] [ 215.899812][T12470] netlink: 'syz.3.2100': attribute type 18 has an invalid length. [ 216.278382][T12484] 8021q: adding VLAN 0 to HW filter on device bond8 [ 216.292401][T12484] bond8: entered promiscuous mode [ 216.297869][T12484] bond8: entered allmulticast mode [ 216.676902][T12518] __nla_validate_parse: 21 callbacks suppressed [ 216.676923][T12518] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2112'. [ 216.722908][T12520] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2114'. [ 217.235917][T12545] openvswitch: netlink: IPv4 tun info is not correct [ 217.613353][T12564] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2131'. [ 217.646168][T12564] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.657891][T12564] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2131'. [ 217.667386][T12564] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.674581][T12564] bridge0: port 2(bridge_slave_1) entered forwarding state [ 217.686497][T12564] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2131'. [ 217.697548][T12562] netlink: 'syz.0.2130': attribute type 9 has an invalid length. [ 217.730427][T12564] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.462325][T12605] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 218.526408][T12620] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2147'. [ 218.553159][T12620] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2147'. [ 218.751744][T12628] netlink: 'syz.0.2152': attribute type 1 has an invalid length. [ 218.793111][T12632] syzkaller0: entered promiscuous mode [ 218.804410][T12632] syzkaller0: entered allmulticast mode [ 218.951603][T12634] vlan0: entered promiscuous mode [ 218.970664][T12634] geneve1: entered promiscuous mode [ 218.992106][T12634] vlan0: entered allmulticast mode [ 218.998075][T12634] geneve1: entered allmulticast mode [ 219.046423][T12625] netlink: 'syz.2.2151': attribute type 1 has an invalid length. [ 219.217182][T12625] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2151'. [ 219.323560][T12639] 8021q: adding VLAN 0 to HW filter on device bond10 [ 219.333490][T12659] netlink: 'syz.4.2160': attribute type 178 has an invalid length. [ 219.347622][T12639] bond9: (slave bond10): making interface the new active one [ 219.357092][T12639] bond9: (slave bond10): Enslaving as an active interface with an up link [ 219.376772][T12649] bond9: (slave gretap1): Enslaving as a backup interface with an up link [ 219.387997][T12625] 8021q: adding VLAN 0 to HW filter on device bond9 [ 219.400765][T12661] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2160'. [ 219.742246][T12669] : entered promiscuous mode [ 219.834295][T12673] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 219.878107][T12676] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2166'. [ 220.251552][T12694] openvswitch: netlink: Message has 4 unknown bytes. [ 220.535302][T12705] netlink: 'syz.4.2177': attribute type 10 has an invalid length. [ 220.622222][T12705] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 220.672290][T12705] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 221.400808][T12744] netlink: 'syz.1.2192': attribute type 11 has an invalid length. [ 221.694663][T12769] __nla_validate_parse: 4 callbacks suppressed [ 221.694680][T12769] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2203'. [ 221.722318][T12771] FAULT_INJECTION: forcing a failure. [ 221.722318][T12771] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 221.752416][T12771] CPU: 0 UID: 0 PID: 12771 Comm: syz.3.2204 Not tainted syzkaller #0 PREEMPT(full) [ 221.752462][T12771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 221.752484][T12771] Call Trace: [ 221.752491][T12771] [ 221.752499][T12771] dump_stack_lvl+0xe8/0x150 [ 221.752524][T12771] should_fail_ex+0x412/0x560 [ 221.752547][T12771] _copy_from_user+0x2d/0xb0 [ 221.752569][T12771] ___sys_recvmsg+0x175/0x590 [ 221.752592][T12771] ? __pfx____sys_recvmsg+0x10/0x10 [ 221.752615][T12771] ? __fget_files+0x2a/0x420 [ 221.752665][T12771] do_recvmmsg+0x334/0x800 [ 221.752691][T12771] ? __pfx_do_recvmmsg+0x10/0x10 [ 221.752721][T12771] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 221.752756][T12771] __x64_sys_recvmmsg+0x198/0x250 [ 221.752778][T12771] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 221.752805][T12771] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.752824][T12771] do_syscall_64+0x174/0x580 [ 221.752840][T12771] ? trace_irq_disable+0x3b/0x140 [ 221.752862][T12771] ? clear_bhb_loop+0x40/0x90 [ 221.752882][T12771] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.752899][T12771] RIP: 0033:0x7feea739ce59 [ 221.752915][T12771] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 221.752929][T12771] RSP: 002b:00007feea8255028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 221.752947][T12771] RAX: ffffffffffffffda RBX: 00007feea7615fa0 RCX: 00007feea739ce59 [ 221.752960][T12771] RDX: 0000000000000009 RSI: 0000200000000d80 RDI: 0000000000000003 [ 221.752971][T12771] RBP: 00007feea8255090 R08: 0000000000000000 R09: 0000000000000000 [ 221.752982][T12771] R10: 0000000000002000 R11: 0000000000000246 R12: 0000000000000001 [ 221.752993][T12771] R13: 00007feea7616038 R14: 00007feea7615fa0 R15: 00007ffd30373bf8 [ 221.753023][T12771] [ 221.964546][T12769] 8021q: adding VLAN 0 to HW filter on device bond9 [ 221.973564][T12774] bond9: entered promiscuous mode [ 221.978956][T12774] bond9: entered allmulticast mode [ 222.018969][T12781] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2207'. [ 222.334595][T12797] xt_TCPMSS: Only works on TCP SYN packets [ 222.343491][T12799] openvswitch: netlink: VXLAN extension 1 has unexpected len 8 expected 4 [ 222.448112][T12803] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 222.474771][T12805] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2218'. [ 222.531897][T12812] netlink: 'syz.2.2220': attribute type 1 has an invalid length. [ 222.591443][T12817] netlink: 'syz.4.2221': attribute type 11 has an invalid length. [ 222.887346][T12827] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2227'. [ 222.967493][T12841] openvswitch: netlink: VXLAN extension 1 has unexpected len 8 expected 4 [ 223.210406][T12848] netlink: 'syz.4.2233': attribute type 11 has an invalid length. [ 223.233259][T12848] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2233'. [ 223.253997][T12852] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2235'. [ 223.282182][T12852] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2235'. [ 223.502103][T12863] netlink: get zone limit has 4 unknown bytes [ 223.786323][T12879] FAULT_INJECTION: forcing a failure. [ 223.786323][T12879] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 223.809077][T12879] CPU: 1 UID: 0 PID: 12879 Comm: syz.3.2247 Not tainted syzkaller #0 PREEMPT(full) [ 223.809102][T12879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 223.809113][T12879] Call Trace: [ 223.809119][T12879] [ 223.809127][T12879] dump_stack_lvl+0xe8/0x150 [ 223.809152][T12879] should_fail_ex+0x412/0x560 [ 223.809176][T12879] _copy_from_user+0x2d/0xb0 [ 223.809198][T12879] ___sys_sendmsg+0x1c6/0x360 [ 223.809215][T12879] ? __lock_acquire+0x6b5/0x2cf0 [ 223.809238][T12879] ? __pfx____sys_sendmsg+0x10/0x10 [ 223.809290][T12879] ? __fget_files+0x2a/0x420 [ 223.809310][T12879] ? __fget_files+0x3a0/0x420 [ 223.809340][T12879] __x64_sys_sendmsg+0x1bd/0x2a0 [ 223.809360][T12879] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 223.809387][T12879] ? __pfx_ksys_write+0x10/0x10 [ 223.809419][T12879] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.809437][T12879] do_syscall_64+0x174/0x580 [ 223.809455][T12879] ? trace_irq_disable+0x3b/0x140 [ 223.809476][T12879] ? clear_bhb_loop+0x40/0x90 [ 223.809496][T12879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.809514][T12879] RIP: 0033:0x7feea739ce59 [ 223.809530][T12879] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 223.809544][T12879] RSP: 002b:00007feea8255028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 223.809562][T12879] RAX: ffffffffffffffda RBX: 00007feea7615fa0 RCX: 00007feea739ce59 [ 223.809574][T12879] RDX: 0000000000000800 RSI: 0000200000000100 RDI: 0000000000000004 [ 223.809585][T12879] RBP: 00007feea8255090 R08: 0000000000000000 R09: 0000000000000000 [ 223.809596][T12879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 223.809605][T12879] R13: 00007feea7616038 R14: 00007feea7615fa0 R15: 00007ffd30373bf8 [ 223.809631][T12879] [ 223.863542][T12883] FAULT_INJECTION: forcing a failure. [ 223.863542][T12883] name failslab, interval 1, probability 0, space 0, times 0 [ 224.027144][T12888] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2250'. [ 224.029314][T12883] CPU: 0 UID: 0 PID: 12883 Comm: syz.4.2249 Not tainted syzkaller #0 PREEMPT(full) [ 224.029338][T12883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 224.029349][T12883] Call Trace: [ 224.029355][T12883] [ 224.029362][T12883] dump_stack_lvl+0xe8/0x150 [ 224.029388][T12883] should_fail_ex+0x412/0x560 [ 224.029412][T12883] should_failslab+0xa8/0x100 [ 224.029429][T12883] ? skb_clone+0x212/0x3a0 [ 224.029446][T12883] kmem_cache_alloc_noprof+0x87/0x650 [ 224.029468][T12883] ? sk_filter_trim_cap+0x19e/0xce0 [ 224.029494][T12883] skb_clone+0x212/0x3a0 [ 224.029514][T12883] __netlink_deliver_tap+0x404/0x850 [ 224.029549][T12883] ? netlink_deliver_tap+0x2e/0x1b0 [ 224.029575][T12883] netlink_deliver_tap+0x19c/0x1b0 [ 224.029600][T12883] netlink_dump+0x8ed/0xe10 [ 224.029636][T12883] ? __pfx_netlink_dump+0x10/0x10 [ 224.029671][T12883] ? netlink_recvmsg+0x5d6/0xa50 [ 224.029692][T12883] ? kmem_cache_free+0x182/0x650 [ 224.029721][T12883] netlink_recvmsg+0x690/0xa50 [ 224.029753][T12883] ? __pfx_netlink_recvmsg+0x10/0x10 [ 224.029780][T12883] ? __lock_acquire+0x6b5/0x2cf0 [ 224.029809][T12883] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 224.029829][T12883] ? security_socket_recvmsg+0x7e/0x2c0 [ 224.029849][T12883] ? __pfx_netlink_recvmsg+0x10/0x10 [ 224.029873][T12883] sock_recvmsg_nosec+0x10c/0x140 [ 224.029897][T12883] ____sys_recvmsg+0x3e3/0x4a0 [ 224.029924][T12883] ? __pfx_____sys_recvmsg+0x10/0x10 [ 224.029955][T12883] ? import_iovec+0x73/0xa0 [ 224.029979][T12883] ___sys_recvmsg+0x215/0x590 [ 224.030002][T12883] ? __pfx____sys_recvmsg+0x10/0x10 [ 224.030023][T12883] ? __fget_files+0x2a/0x420 [ 224.030072][T12883] do_recvmmsg+0x334/0x800 [ 224.030098][T12883] ? __pfx_do_recvmmsg+0x10/0x10 [ 224.030127][T12883] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 224.030162][T12883] __x64_sys_recvmmsg+0x198/0x250 [ 224.030182][T12883] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 224.030208][T12883] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.030227][T12883] do_syscall_64+0x174/0x580 [ 224.030245][T12883] ? clear_bhb_loop+0x40/0x90 [ 224.030265][T12883] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.030287][T12883] RIP: 0033:0x7ff71919ce59 [ 224.030303][T12883] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 224.030317][T12883] RSP: 002b:00007ff719f8d028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 224.030335][T12883] RAX: ffffffffffffffda RBX: 00007ff719415fa0 RCX: 00007ff71919ce59 [ 224.030347][T12883] RDX: 0000000000000009 RSI: 0000200000000d80 RDI: 0000000000000003 [ 224.030357][T12883] RBP: 00007ff719f8d090 R08: 0000000000000000 R09: 0000000000000000 [ 224.030368][T12883] R10: 0000000000002000 R11: 0000000000000246 R12: 0000000000000002 [ 224.030378][T12883] R13: 00007ff719416038 R14: 00007ff719415fa0 R15: 00007ffd6dd341d8 [ 224.030407][T12883] [ 224.088547][T12890] tc_dump_action: action bad kind [ 224.333639][T12901] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2255'. [ 224.637450][T12915] FAULT_INJECTION: forcing a failure. [ 224.637450][T12915] name failslab, interval 1, probability 0, space 0, times 0 [ 224.650818][T12915] CPU: 1 UID: 0 PID: 12915 Comm: syz.2.2262 Not tainted syzkaller #0 PREEMPT(full) [ 224.650842][T12915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 224.650852][T12915] Call Trace: [ 224.650859][T12915] [ 224.650867][T12915] dump_stack_lvl+0xe8/0x150 [ 224.650892][T12915] should_fail_ex+0x412/0x560 [ 224.650915][T12915] should_failslab+0xa8/0x100 [ 224.650935][T12915] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 224.650959][T12915] ? __alloc_skb+0x186/0x7d0 [ 224.650981][T12915] ? __alloc_skb+0x1d0/0x7d0 [ 224.651000][T12915] ? __local_bh_enable_ip+0xd0/0x130 [ 224.651023][T12915] __alloc_skb+0x1d0/0x7d0 [ 224.651051][T12915] netlink_sendmsg+0x5d4/0xb40 [ 224.651085][T12915] ? __pfx_netlink_sendmsg+0x10/0x10 [ 224.651113][T12915] ? aa_sock_msg_perm+0xf1/0x1b0 [ 224.651139][T12915] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 224.651164][T12915] ____sys_sendmsg+0x972/0x9f0 [ 224.651182][T12915] ? __might_fault+0xaf/0x130 [ 224.651209][T12915] ? __pfx_____sys_sendmsg+0x10/0x10 [ 224.651235][T12915] ? import_iovec+0x73/0xa0 [ 224.651259][T12915] ___sys_sendmsg+0x2a5/0x360 [ 224.651284][T12915] ? __lock_acquire+0x6b5/0x2cf0 [ 224.651306][T12915] ? __pfx____sys_sendmsg+0x10/0x10 [ 224.651357][T12915] ? __fget_files+0x2a/0x420 [ 224.651376][T12915] ? __fget_files+0x3a0/0x420 [ 224.651415][T12915] __x64_sys_sendmsg+0x1bd/0x2a0 [ 224.651435][T12915] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 224.651460][T12915] ? __pfx_ksys_write+0x10/0x10 [ 224.651493][T12915] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.651512][T12915] do_syscall_64+0x174/0x580 [ 224.651530][T12915] ? trace_irq_disable+0x3b/0x140 [ 224.651554][T12915] ? clear_bhb_loop+0x40/0x90 [ 224.651576][T12915] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.651593][T12915] RIP: 0033:0x7fdc85d9ce59 [ 224.651609][T12915] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 224.651623][T12915] RSP: 002b:00007fdc86b6f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 224.651641][T12915] RAX: ffffffffffffffda RBX: 00007fdc86015fa0 RCX: 00007fdc85d9ce59 [ 224.651654][T12915] RDX: 0000000000000800 RSI: 0000200000000100 RDI: 0000000000000004 [ 224.651663][T12915] RBP: 00007fdc86b6f090 R08: 0000000000000000 R09: 0000000000000000 [ 224.651674][T12915] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 224.651684][T12915] R13: 00007fdc86016038 R14: 00007fdc86015fa0 R15: 00007ffdff733a38 [ 224.651714][T12915] [ 225.261051][T12940] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2271'. [ 225.314543][T12940] xfrm1: entered promiscuous mode [ 225.353123][T12940] xfrm1: entered allmulticast mode [ 225.386415][T12940] netlink: 'syz.4.2271': attribute type 7 has an invalid length. [ 225.543391][T12963] FAULT_INJECTION: forcing a failure. [ 225.543391][T12963] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 225.590056][T12963] CPU: 0 UID: 0 PID: 12963 Comm: syz.0.2276 Not tainted syzkaller #0 PREEMPT(full) [ 225.590081][T12963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 225.590092][T12963] Call Trace: [ 225.590099][T12963] [ 225.590106][T12963] dump_stack_lvl+0xe8/0x150 [ 225.590130][T12963] should_fail_ex+0x412/0x560 [ 225.590155][T12963] _copy_from_iter+0x1d3/0x1670 [ 225.590177][T12963] ? rcu_is_watching+0x15/0xb0 [ 225.590204][T12963] ? __pfx__copy_from_iter+0x10/0x10 [ 225.590230][T12963] ? netlink_sendmsg+0x650/0xb40 [ 225.590254][T12963] ? skb_put+0x11b/0x210 [ 225.590282][T12963] netlink_sendmsg+0x6c0/0xb40 [ 225.590320][T12963] ? __pfx_netlink_sendmsg+0x10/0x10 [ 225.590345][T12963] ? aa_sock_msg_perm+0xf1/0x1b0 [ 225.590368][T12963] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 225.590391][T12963] ____sys_sendmsg+0x972/0x9f0 [ 225.590406][T12963] ? __might_fault+0xaf/0x130 [ 225.590429][T12963] ? __pfx_____sys_sendmsg+0x10/0x10 [ 225.590452][T12963] ? import_iovec+0x73/0xa0 [ 225.590473][T12963] ___sys_sendmsg+0x2a5/0x360 [ 225.590486][T12963] ? __lock_acquire+0x6b5/0x2cf0 [ 225.590505][T12963] ? __pfx____sys_sendmsg+0x10/0x10 [ 225.590546][T12963] ? __fget_files+0x2a/0x420 [ 225.590564][T12963] ? __fget_files+0x3a0/0x420 [ 225.590592][T12963] __x64_sys_sendmsg+0x1bd/0x2a0 [ 225.590612][T12963] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 225.590635][T12963] ? __pfx_ksys_write+0x10/0x10 [ 225.590663][T12963] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.590681][T12963] do_syscall_64+0x174/0x580 [ 225.590696][T12963] ? trace_irq_disable+0x3b/0x140 [ 225.590719][T12963] ? clear_bhb_loop+0x40/0x90 [ 225.590739][T12963] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.590755][T12963] RIP: 0033:0x7fa203b9ce59 [ 225.590771][T12963] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 225.590785][T12963] RSP: 002b:00007fa204a0e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 225.590803][T12963] RAX: ffffffffffffffda RBX: 00007fa203e15fa0 RCX: 00007fa203b9ce59 [ 225.590816][T12963] RDX: 0000000000000800 RSI: 0000200000000100 RDI: 0000000000000004 [ 225.590827][T12963] RBP: 00007fa204a0e090 R08: 0000000000000000 R09: 0000000000000000 [ 225.590838][T12963] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 225.590848][T12963] R13: 00007fa203e16038 R14: 00007fa203e15fa0 R15: 00007fffa8f3a038 [ 225.590877][T12963] [ 225.616626][T12972] sctp: [Deprecated]: syz.2.2280 (pid 12972) Use of int in max_burst socket option. [ 225.616626][T12972] Use struct sctp_assoc_value instead [ 225.689309][T12975] x_tables: unsorted underflow at hook 4 [ 225.764363][T12972] siw: device registration error -23 [ 226.632634][T13014] C speed is unknown, defaulting to 1000 [ 226.657732][T13014] wg1 speed is unknown, defaulting to 1000 [ 226.667395][T12973] xt_TPROXY: Can be used only with -p tcp or -p udp [ 226.923416][T13027] __nla_validate_parse: 7 callbacks suppressed [ 226.923434][T13027] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2293'. [ 227.391449][T13044] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 227.416343][T13044] Cannot find set identified by id 3 to match [ 227.445833][T13044] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2299'. [ 227.542711][T13054] netlink: 'syz.4.2300': attribute type 10 has an invalid length. [ 227.564150][T13056] FAULT_INJECTION: forcing a failure. [ 227.564150][T13056] name failslab, interval 1, probability 0, space 0, times 0 [ 227.565801][T13054] team0: Port device dummy0 added [ 227.582263][T13056] CPU: 0 UID: 0 PID: 13056 Comm: syz.3.2302 Not tainted syzkaller #0 PREEMPT(full) [ 227.582286][T13056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 227.582295][T13056] Call Trace: [ 227.582302][T13056] [ 227.582309][T13056] dump_stack_lvl+0xe8/0x150 [ 227.582333][T13056] should_fail_ex+0x412/0x560 [ 227.582356][T13056] should_failslab+0xa8/0x100 [ 227.582369][T13056] ? skb_clone+0x212/0x3a0 [ 227.582383][T13056] kmem_cache_alloc_noprof+0x87/0x650 [ 227.582404][T13056] ? __netlink_lookup+0xc6/0x8b0 [ 227.582424][T13056] skb_clone+0x212/0x3a0 [ 227.582444][T13056] __netlink_deliver_tap+0x404/0x850 [ 227.582492][T13056] ? netlink_deliver_tap+0x2e/0x1b0 [ 227.582519][T13056] netlink_deliver_tap+0x19c/0x1b0 [ 227.582543][T13056] netlink_unicast+0x730/0x8e0 [ 227.582577][T13056] netlink_sendmsg+0x813/0xb40 [ 227.582611][T13056] ? __pfx_netlink_sendmsg+0x10/0x10 [ 227.582640][T13056] ? aa_sock_msg_perm+0xf1/0x1b0 [ 227.582667][T13056] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 227.582693][T13056] ____sys_sendmsg+0x972/0x9f0 [ 227.582710][T13056] ? __might_fault+0xaf/0x130 [ 227.582737][T13056] ? __pfx_____sys_sendmsg+0x10/0x10 [ 227.582762][T13056] ? import_iovec+0x73/0xa0 [ 227.582787][T13056] ___sys_sendmsg+0x2a5/0x360 [ 227.582803][T13056] ? __lock_acquire+0x6b5/0x2cf0 [ 227.582826][T13056] ? __pfx____sys_sendmsg+0x10/0x10 [ 227.582880][T13056] ? __fget_files+0x2a/0x420 [ 227.582900][T13056] ? __fget_files+0x3a0/0x420 [ 227.582930][T13056] __x64_sys_sendmsg+0x1bd/0x2a0 [ 227.582950][T13056] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 227.582977][T13056] ? __pfx_ksys_write+0x10/0x10 [ 227.583008][T13056] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.583027][T13056] do_syscall_64+0x174/0x580 [ 227.583044][T13056] ? trace_irq_disable+0x3b/0x140 [ 227.583067][T13056] ? clear_bhb_loop+0x40/0x90 [ 227.583089][T13056] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.583105][T13056] RIP: 0033:0x7feea739ce59 [ 227.583122][T13056] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 227.583135][T13056] RSP: 002b:00007feea8234028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 227.583154][T13056] RAX: ffffffffffffffda RBX: 00007feea7616090 RCX: 00007feea739ce59 [ 227.583166][T13056] RDX: 0000000000000800 RSI: 0000200000000100 RDI: 0000000000000004 [ 227.583177][T13056] RBP: 00007feea8234090 R08: 0000000000000000 R09: 0000000000000000 [ 227.583187][T13056] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 227.583197][T13056] R13: 00007feea7616128 R14: 00007feea7616090 R15: 00007ffd30373bf8 [ 227.583227][T13056] [ 227.611525][T13047] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2300'. [ 228.221121][T13071] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2309'. [ 228.426680][T13087] IPVS: set_ctl: invalid protocol: 0 100.1.1.2:20001 [ 228.662151][T13104] FAULT_INJECTION: forcing a failure. [ 228.662151][T13104] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 228.670150][T13107] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 68:55:44:f4:6c:3f [ 228.693142][T13104] CPU: 0 UID: 0 PID: 13104 Comm: syz.4.2320 Not tainted syzkaller #0 PREEMPT(full) [ 228.693169][T13104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 228.693180][T13104] Call Trace: [ 228.693187][T13104] [ 228.693195][T13104] dump_stack_lvl+0xe8/0x150 [ 228.693221][T13104] should_fail_ex+0x412/0x560 [ 228.693245][T13104] _copy_from_user+0x2d/0xb0 [ 228.693267][T13104] ___sys_recvmsg+0x175/0x590 [ 228.693291][T13104] ? __pfx____sys_recvmsg+0x10/0x10 [ 228.693310][T13104] ? __fget_files+0x2a/0x420 [ 228.693354][T13104] do_recvmmsg+0x334/0x800 [ 228.693377][T13104] ? __pfx_do_recvmmsg+0x10/0x10 [ 228.693402][T13104] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 228.693434][T13104] __x64_sys_recvmmsg+0x198/0x250 [ 228.693453][T13104] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 228.693475][T13104] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.693491][T13104] do_syscall_64+0x174/0x580 [ 228.693507][T13104] ? trace_irq_disable+0x3b/0x140 [ 228.693529][T13104] ? clear_bhb_loop+0x40/0x90 [ 228.693548][T13104] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.693563][T13104] RIP: 0033:0x7ff71919ce59 [ 228.693578][T13104] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 228.693591][T13104] RSP: 002b:00007ff719f8d028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 228.693608][T13104] RAX: ffffffffffffffda RBX: 00007ff719415fa0 RCX: 00007ff71919ce59 [ 228.693619][T13104] RDX: 0000000000000004 RSI: 0000200000000a00 RDI: 0000000000000003 [ 228.693630][T13104] RBP: 00007ff719f8d090 R08: 0000000000000000 R09: 0000000000000000 [ 228.693639][T13104] R10: 0000000000000102 R11: 0000000000000246 R12: 0000000000000002 [ 228.693649][T13104] R13: 00007ff719416038 R14: 00007ff719415fa0 R15: 00007ffd6dd341d8 [ 228.693676][T13104] [ 229.050984][T13115] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 229.168611][T13123] FAULT_INJECTION: forcing a failure. [ 229.168611][T13123] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 229.211627][T13123] CPU: 0 UID: 0 PID: 13123 Comm: syz.2.2330 Not tainted syzkaller #0 PREEMPT(full) [ 229.211652][T13123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 229.211662][T13123] Call Trace: [ 229.211668][T13123] [ 229.211675][T13123] dump_stack_lvl+0xe8/0x150 [ 229.211702][T13123] should_fail_ex+0x412/0x560 [ 229.211727][T13123] _copy_from_user+0x2d/0xb0 [ 229.211750][T13123] csum_and_copy_from_iter_full+0x1e7/0x1f00 [ 229.211796][T13123] ? __pfx_csum_and_copy_from_iter_full+0x10/0x10 [ 229.211828][T13123] ? rcu_is_watching+0x15/0xb0 [ 229.211849][T13123] ? trace_kmem_cache_alloc+0x29/0xe0 [ 229.211875][T13123] ip_generic_getfrag+0x149/0x2d0 [ 229.211899][T13123] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 229.211922][T13123] ? __alloc_skb+0x4e5/0x7d0 [ 229.211943][T13123] ? skb_put+0x11b/0x210 [ 229.211969][T13123] __ip6_append_data+0x39cd/0x3f60 [ 229.212018][T13123] ? __pfx_raw6_getfrag+0x10/0x10 [ 229.212050][T13123] ? ip6_mtu+0x7d/0x490 [ 229.212079][T13123] ? __pfx___ip6_append_data+0x10/0x10 [ 229.212104][T13123] ? ip6_setup_cork+0x544/0xf30 [ 229.212129][T13123] ? ip6_append_data+0x1b7/0x280 [ 229.212156][T13123] ip6_append_data+0x10f/0x280 [ 229.212183][T13123] ? __pfx_raw6_getfrag+0x10/0x10 [ 229.212203][T13123] rawv6_sendmsg+0x12d3/0x18e0 [ 229.212236][T13123] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 229.212267][T13123] ? aa_sk_perm+0x6d5/0x900 [ 229.212299][T13123] ? __pfx_aa_sk_perm+0x10/0x10 [ 229.212325][T13123] ? sock_rps_record_flow+0x19/0x350 [ 229.212347][T13123] ? inet_sendmsg+0x2f4/0x370 [ 229.212364][T13123] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 229.212398][T13123] ____sys_sendmsg+0x80a/0x9f0 [ 229.212415][T13123] ? __might_fault+0xaf/0x130 [ 229.212443][T13123] ? __pfx_____sys_sendmsg+0x10/0x10 [ 229.212469][T13123] ? import_iovec+0x73/0xa0 [ 229.212493][T13123] ___sys_sendmsg+0x2a5/0x360 [ 229.212510][T13123] ? __lock_acquire+0x6b5/0x2cf0 [ 229.212533][T13123] ? __pfx____sys_sendmsg+0x10/0x10 [ 229.212587][T13123] ? __fget_files+0x2a/0x420 [ 229.212608][T13123] ? __fget_files+0x3a0/0x420 [ 229.212639][T13123] __x64_sys_sendmsg+0x1bd/0x2a0 [ 229.212660][T13123] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 229.212687][T13123] ? __pfx_ksys_write+0x10/0x10 [ 229.212720][T13123] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.212740][T13123] do_syscall_64+0x174/0x580 [ 229.212758][T13123] ? trace_irq_disable+0x3b/0x140 [ 229.212782][T13123] ? clear_bhb_loop+0x40/0x90 [ 229.212803][T13123] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.212821][T13123] RIP: 0033:0x7fdc85d9ce59 [ 229.212837][T13123] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 229.212851][T13123] RSP: 002b:00007fdc86b6f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 229.212870][T13123] RAX: ffffffffffffffda RBX: 00007fdc86015fa0 RCX: 00007fdc85d9ce59 [ 229.212883][T13123] RDX: 0000000000044004 RSI: 00002000000000c0 RDI: 0000000000000003 [ 229.212894][T13123] RBP: 00007fdc86b6f090 R08: 0000000000000000 R09: 0000000000000000 [ 229.212904][T13123] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 229.212914][T13123] R13: 00007fdc86016038 R14: 00007fdc86015fa0 R15: 00007ffdff733a38 [ 229.212945][T13123] [ 229.232262][T13126] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2329'. [ 229.467957][T13134] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2329'. [ 229.497835][T13132] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 229.585939][T13132] team0: Failed to send port change of device batadv2 via netlink (err -105) [ 229.608287][T13132] team0: Failed to send options change via netlink (err -105) [ 229.616209][T13132] team0: Port device batadv2 added [ 229.653337][T13140] FAULT_INJECTION: forcing a failure. [ 229.653337][T13140] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 229.688036][T13140] CPU: 1 UID: 0 PID: 13140 Comm: syz.0.2335 Not tainted syzkaller #0 PREEMPT(full) [ 229.688060][T13140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 229.688071][T13140] Call Trace: [ 229.688079][T13140] [ 229.688087][T13140] dump_stack_lvl+0xe8/0x150 [ 229.688112][T13140] should_fail_ex+0x412/0x560 [ 229.688137][T13140] _copy_from_user+0x2d/0xb0 [ 229.688159][T13140] ___sys_recvmsg+0x175/0x590 [ 229.688183][T13140] ? __pfx____sys_recvmsg+0x10/0x10 [ 229.688206][T13140] ? __fget_files+0x2a/0x420 [ 229.688256][T13140] do_recvmmsg+0x334/0x800 [ 229.688283][T13140] ? __pfx_do_recvmmsg+0x10/0x10 [ 229.688310][T13140] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 229.688347][T13140] __x64_sys_recvmmsg+0x198/0x250 [ 229.688368][T13140] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 229.688395][T13140] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.688414][T13140] do_syscall_64+0x174/0x580 [ 229.688431][T13140] ? trace_irq_disable+0x3b/0x140 [ 229.688455][T13140] ? clear_bhb_loop+0x40/0x90 [ 229.688476][T13140] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.688494][T13140] RIP: 0033:0x7fa203b9ce59 [ 229.688510][T13140] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 229.688524][T13140] RSP: 002b:00007fa204a0e028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 229.688544][T13140] RAX: ffffffffffffffda RBX: 00007fa203e15fa0 RCX: 00007fa203b9ce59 [ 229.688557][T13140] RDX: 0000000000000004 RSI: 0000200000000a00 RDI: 0000000000000003 [ 229.688568][T13140] RBP: 00007fa204a0e090 R08: 0000000000000000 R09: 0000000000000000 [ 229.688579][T13140] R10: 0000000000000102 R11: 0000000000000246 R12: 0000000000000002 [ 229.688590][T13140] R13: 00007fa203e16038 R14: 00007fa203e15fa0 R15: 00007fffa8f3a038 [ 229.688619][T13140] [ 230.164534][T13161] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2341'. [ 230.355788][T13175] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2346'. [ 230.422629][T13179] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2347'. [ 230.444312][T13179] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2347'. [ 230.498865][T13182] bond10: option all_slaves_active: invalid value (222) [ 230.507713][T13182] bond10 (unregistering): Released all slaves [ 231.267192][T13235] netlink: 'syz.3.2363': attribute type 29 has an invalid length. [ 231.283523][T13235] netlink: 'syz.3.2363': attribute type 29 has an invalid length. [ 231.517060][T13254] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 231.548947][T13253] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 231.963965][T13278] 8021q: adding VLAN 0 to HW filter on device bond9 [ 231.986768][T13289] openvswitch: netlink: IP tunnel TTL not specified. [ 232.311174][T13307] __nla_validate_parse: 11 callbacks suppressed [ 232.311193][T13307] netlink: 136 bytes leftover after parsing attributes in process `syz.4.2387'. [ 232.353986][T13307] netlink: 8904 bytes leftover after parsing attributes in process `syz.4.2387'. [ 232.396730][T13312] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2389'. [ 232.429189][ C0] vcan0: j1939_tp_rxtimer: 0xffff888078b3c400: rx timeout, send abort [ 232.590207][T13320] syzkaller0: entered promiscuous mode [ 232.598839][T13320] syzkaller0: entered allmulticast mode [ 232.606705][T13322] : renamed from bond0 (while UP) [ 232.929459][ C0] vcan0: j1939_tp_rxtimer: 0xffff888078b3f400: rx timeout, send abort [ 232.937983][ C0] vcan0: j1939_tp_rxtimer: 0xffff888078b3c400: abort rx timeout. Force session deactivation [ 233.164614][T13352] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 233.261077][T13347] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2401'. [ 233.425209][T13374] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2405'. [ 233.439443][ C0] vcan0: j1939_tp_rxtimer: 0xffff888078b3f400: abort rx timeout. Force session deactivation [ 235.163168][T13362] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2405'. [ 235.284203][T13385] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2411'. [ 235.371803][T13393] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2413'. [ 235.663055][T13410] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2422'. [ 235.663638][T13408] xt_hashlimit: size too large, truncated to 1048576 [ 235.690528][T13410] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2422'. [ 235.861042][T13426] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 235.904783][T13405] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.912027][T13405] bridge0: port 1(bridge_slave_0) entered forwarding state [ 236.038150][T13405] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 236.058129][T13424] netlink: 'syz.4.2424': attribute type 1 has an invalid length. [ 236.069531][T13425] netlink: 'syz.4.2424': attribute type 1 has an invalid length. [ 236.079408][T12946] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.086686][T12946] bridge0: port 2(bridge_slave_1) entered forwarding state [ 236.431128][T13456] 8021q: adding VLAN 0 to HW filter on device bond10 [ 236.520152][T13452] bond10: entered promiscuous mode [ 236.534499][T13452] bond10: entered allmulticast mode [ 236.577746][T13447] nbd0: detected capacity change from 0 to 127 [ 236.642615][ T5642] block nbd0: Receive control failed (result -32) [ 236.721949][ T5648] block nbd0: Dead connection, failed to find a fallback [ 236.760603][ T5648] block nbd0: shutting down sockets [ 236.781732][ T5648] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 236.804577][ T5648] Buffer I/O error on dev nbd0, logical block 0, async page read [ 236.830764][ T5648] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 236.854096][ T5648] Buffer I/O error on dev nbd0, logical block 1, async page read [ 236.870703][ T5648] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 236.896457][ T5648] Buffer I/O error on dev nbd0, logical block 2, async page read [ 236.915689][ T5648] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 236.932997][T13481] bridge2: port 1(vlan1) entered blocking state [ 236.941798][T13484] Bluetooth: MGMT ver 1.23 [ 236.947039][T13481] bridge2: port 1(vlan1) entered disabled state [ 236.953377][ T5648] Buffer I/O error on dev nbd0, logical block 3, async page read [ 236.964244][T13481] vlan1: entered allmulticast mode [ 236.985928][T13481] bridge2: entered allmulticast mode [ 236.988257][ T5648] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 237.028309][ T5648] Buffer I/O error on dev nbd0, logical block 0, async page read [ 237.029303][T13481] vlan1: left allmulticast mode [ 237.062506][ T5648] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 237.067938][T13481] bridge2: left allmulticast mode [ 237.072895][ T5648] Buffer I/O error on dev nbd0, logical block 1, async page read [ 237.084793][ T5648] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 237.115262][ T5648] Buffer I/O error on dev nbd0, logical block 2, async page read [ 237.145794][ T5648] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 237.172780][ T5648] Buffer I/O error on dev nbd0, logical block 3, async page read [ 237.195927][ T5648] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 237.221761][ T5648] Buffer I/O error on dev nbd0, logical block 0, async page read [ 237.240951][ T5648] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 237.266894][ T5648] Buffer I/O error on dev nbd0, logical block 1, async page read [ 237.322593][ T5648] ldm_validate_partition_table(): Disk read failed. [ 237.349866][ T5648] Dev nbd0: unable to read RDB block 0 [ 237.369795][ T5648] nbd0: unable to read partition table [ 237.413296][ T5648] ldm_validate_partition_table(): Disk read failed. [ 237.430846][ T5648] Dev nbd0: unable to read RDB block 0 [ 237.459014][ T5648] nbd0: unable to read partition table [ 237.469896][T13505] __nla_validate_parse: 12 callbacks suppressed [ 237.469913][T13505] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2448'. [ 237.514225][T13499] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 237.631612][T13519] netlink: 'syz.2.2453': attribute type 10 has an invalid length. [ 237.701700][T13519] 8021q: adding VLAN 0 to HW filter on device team0 [ 237.727997][T13519] bond0: (slave team0): Enslaving as an active interface with an up link [ 237.916694][T13529] syzkaller1: entered promiscuous mode [ 237.933877][T13529] syzkaller1: entered allmulticast mode [ 237.977691][T13539] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 238.023347][T13550] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2460'. [ 238.125587][T13554] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2461'. [ 238.167796][T13554] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2461'. [ 238.233223][T13554] syzkaller0: entered promiscuous mode [ 238.241174][T13554] syzkaller0: entered allmulticast mode [ 238.249903][T13559] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2461'. [ 238.257755][T13562] syzkaller0: entered promiscuous mode [ 238.259383][T13559] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2461'. [ 238.269055][T13562] syzkaller0: entered allmulticast mode [ 238.306294][T13554] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2461'. [ 240.269629][T13584] IPVS: set_ctl: invalid protocol: 50 172.20.20.187:20004 [ 240.369838][T13584] syzkaller0: entered promiscuous mode [ 240.382179][T13584] syzkaller0: entered allmulticast mode [ 240.848755][T13621] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode [ 240.856997][T13619] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2483'. [ 240.868110][T13621] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode [ 240.883223][T13621] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2482'. [ 241.134182][T13637] netlink: 'syz.3.2489': attribute type 16 has an invalid length. [ 241.167427][T13637] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2489'. [ 241.177456][T13642] netlink: 'syz.2.2491': attribute type 1 has an invalid length. [ 241.235258][T13640] netlink: 'syz.4.2490': attribute type 3 has an invalid length. [ 241.302683][T13637] veth0_macvtap: entered allmulticast mode [ 241.343529][T13647] bond11: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 241.407413][T13653] veth5: entered promiscuous mode [ 241.436052][T13653] bond11: (slave veth5): Enslaving as a backup interface with a down link [ 241.461553][ T65] bond11: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 241.463014][T13642] 8021q: adding VLAN 0 to HW filter on device bond11 [ 241.540952][T13653] netlink: 'syz.2.2491': attribute type 3 has an invalid length. [ 241.636934][ T9813] bond11: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 242.254886][T13712] netlink: 'syz.0.2516': attribute type 4 has an invalid length. [ 242.281082][T13712] netlink: 'syz.0.2516': attribute type 1 has an invalid length. [ 242.635940][T13740] __nla_validate_parse: 8 callbacks suppressed [ 242.635961][T13740] netlink: 232 bytes leftover after parsing attributes in process `syz.3.2522'. [ 242.651554][T13741] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2525'. [ 242.776728][T13741] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2525'. [ 242.879671][T13753] tipc: Enabling of bearer rejected, media not registered [ 242.993326][T13760] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 243.027199][T13763] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2532'. [ 243.037258][T13765] netlink: 'syz.3.2530': attribute type 4 has an invalid length. [ 243.042654][T13763] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2532'. [ 243.080585][T13757] veth9: entered allmulticast mode [ 243.139903][T13770] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2533'. [ 243.202371][T13770] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2533'. [ 243.439777][T13788] ieee802154 phy0 wpan0: encryption failed: -22 [ 243.508787][T13791] netlink: 'syz.0.2542': attribute type 1 has an invalid length. [ 243.525586][T13792] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2541'. [ 243.651631][T13791] bond22: entered promiscuous mode [ 243.702099][T13791] 8021q: adding VLAN 0 to HW filter on device bond22 [ 244.052042][T13828] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2554'. [ 244.078243][T13828] netlink: 'syz.0.2554': attribute type 3 has an invalid length. [ 244.098030][T13832] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 244.195580][T13834] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2558'. [ 244.371608][T13845] veth1_to_bridge: entered allmulticast mode [ 244.382955][ T29] audit: type=1800 audit(1780017225.253:5): pid=13848 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2561" name="memory.events" dev="tmpfs" ino=2751 res=0 errno=0 [ 244.645786][T13865] vxcan0: tx drop: invalid sa for name 0x0000000000000002 [ 244.656339][T13866] vxcan0: tx drop: invalid sa for name 0x0000000000000002 [ 244.766410][T13873] netlink: Conntrack attr has 4 unknown bytes [ 244.771124][T13872] netlink: Conntrack attr has 4 unknown bytes [ 246.085478][T13940] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 246.256828][T13950] netlink: 'syz.2.2600': attribute type 3 has an invalid length. [ 246.786593][T13977] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 246.794670][T13977] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 246.858244][T13977] hsr_slave_0: left promiscuous mode [ 246.916984][T13977] hsr_slave_1: left promiscuous mode [ 247.171947][T13994] netlink: 'syz.1.2612': attribute type 1 has an invalid length. [ 247.220206][T13994] bond7: entered promiscuous mode [ 247.226723][T13994] 8021q: adding VLAN 0 to HW filter on device bond7 [ 247.288059][T14001] openvswitch: netlink: Multiple metadata blocks provided [ 247.297125][T13994] bond7: (slave bridge8): making interface the new active one [ 247.318014][T13994] bridge8: entered promiscuous mode [ 247.335613][T13994] bond7: (slave bridge8): Enslaving as an active interface with an up link [ 247.719093][T14022] openvswitch: netlink: Tunnel attr 78 out of range max 16 [ 247.843883][T14025] netlink: 'syz.1.2621': attribute type 12 has an invalid length. [ 247.860194][T14026] syzkaller0: entered promiscuous mode [ 247.866036][T14026] syzkaller0: entered allmulticast mode [ 247.908126][T14027] netlink: 'syz.1.2621': attribute type 83 has an invalid length. [ 247.965865][T14029] __nla_validate_parse: 15 callbacks suppressed [ 247.965884][T14029] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2623'. [ 247.997687][T14029] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2623'. [ 248.011515][T14029] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2623'. [ 248.210727][T14040] Cannot find add_set index 46338 as target [ 248.402776][T14051] netlink: 84 bytes leftover after parsing attributes in process `syz.4.2629'. [ 248.544713][T14059] netlink: 212344 bytes leftover after parsing attributes in process `syz.2.2631'. [ 248.604479][T14059] netlink: 212344 bytes leftover after parsing attributes in process `syz.2.2631'. [ 248.733738][T14069] xfrm2: entered allmulticast mode [ 248.946005][T14077] netlink: 'syz.2.2636': attribute type 1 has an invalid length. [ 249.161962][T14086] tipc: New replicast peer: 0.0.0.0 [ 249.177764][T14086] tipc: Enabled bearer , priority 10 [ 249.316783][T14103] netlink: 'syz.2.2641': attribute type 5 has an invalid length. [ 249.346534][T14103] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2641'. [ 249.552785][T14115] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2648'. [ 249.799180][T14126] 8021q: adding VLAN 0 to HW filter on device bond0 [ 249.813570][T14129] tipc: Started in network mode [ 249.823473][T14129] tipc: Node identity ac14140f, cluster identity 4711 [ 249.831775][T14129] tipc: Enabled bearer , priority 10 [ 249.843048][T14131] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2655'. [ 249.900416][T14141] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2656'. [ 249.923590][T14141] FAULT_INJECTION: forcing a failure. [ 249.923590][T14141] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 249.985895][T14141] CPU: 1 UID: 0 PID: 14141 Comm: syz.0.2656 Not tainted syzkaller #0 PREEMPT(full) [ 249.985920][T14141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 249.985944][T14141] Call Trace: [ 249.985951][T14141] [ 249.985958][T14141] dump_stack_lvl+0xe8/0x150 [ 249.985983][T14141] should_fail_ex+0x412/0x560 [ 249.986005][T14141] _copy_to_user+0x31/0xb0 [ 249.986029][T14141] simple_read_from_buffer+0xe1/0x170 [ 249.986055][T14141] proc_fail_nth_read+0x1bb/0x230 [ 249.986079][T14141] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 249.986101][T14141] ? rw_verify_area+0x2a6/0x4d0 [ 249.986122][T14141] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 249.986145][T14141] vfs_read+0x20c/0xa70 [ 249.986173][T14141] ? __pfx___mutex_lock+0x10/0x10 [ 249.986192][T14141] ? __pfx_vfs_read+0x10/0x10 [ 249.986216][T14141] ? __fget_files+0x2a/0x420 [ 249.986239][T14141] ? __fget_files+0x3a0/0x420 [ 249.986257][T14141] ? __fget_files+0x2a/0x420 [ 249.986284][T14141] ksys_read+0x150/0x270 [ 249.986308][T14141] ? __pfx_ksys_read+0x10/0x10 [ 249.986343][T14141] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.986362][T14141] do_syscall_64+0x174/0x580 [ 249.986379][T14141] ? trace_irq_disable+0x3b/0x140 [ 249.986402][T14141] ? clear_bhb_loop+0x40/0x90 [ 249.986422][T14141] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.986437][T14141] RIP: 0033:0x7fa203b5d68e [ 249.986452][T14141] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 249.986463][T14141] RSP: 002b:00007fa2049ecfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 249.986481][T14141] RAX: ffffffffffffffda RBX: 00007fa2049ed6c0 RCX: 00007fa203b5d68e [ 249.986493][T14141] RDX: 000000000000000f RSI: 00007fa2049ed0a0 RDI: 0000000000000009 [ 249.986502][T14141] RBP: 00007fa2049ed090 R08: 0000000000000000 R09: 0000000000000000 [ 249.986512][T14141] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 249.986521][T14141] R13: 00007fa203e16128 R14: 00007fa203e16090 R15: 00007fffa8f3a038 [ 249.986549][T14141] [ 250.247473][ T5630] tipc: Node number set to 3187654503 [ 250.876210][T14192] netlink: 'syz.1.2675': attribute type 1 has an invalid length. [ 250.904996][ T5630] tipc: Node number set to 2886997007 [ 251.371721][T14225] netlink: 'syz.0.2686': attribute type 1 has an invalid length. [ 251.427103][T14225] 8021q: adding VLAN 0 to HW filter on device bond23 [ 251.465412][T14231] bond23: (slave gretap0): making interface the new active one [ 251.506785][T14231] bond23: (slave gretap0): Enslaving as an active interface with an up link [ 252.012608][T14249] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 252.057915][T14249] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 252.087988][T14249] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 252.121587][T14249] IPv6: Can't replace route, no match found [ 252.383434][T14257] hsr0: entered promiscuous mode [ 252.452774][T14262] bridge_slave_1: left allmulticast mode [ 252.470240][T14262] bridge_slave_1: left promiscuous mode [ 252.485163][T14262] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.528899][T14262] bridge_slave_0: left allmulticast mode [ 252.544973][T14262] bridge_slave_0: left promiscuous mode [ 252.557117][T14262] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.669259][T14275] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 3, id = 0 [ 254.307627][T14346] : renamed from bridge0 [ 254.842372][T14379] bridge0: entered allmulticast mode [ 254.866853][T14379] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 255.614202][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 257.111421][T14428] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 257.145740][T14431] __nla_validate_parse: 8 callbacks suppressed [ 257.145759][T14431] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2772'. [ 257.174946][T14431] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2772'. [ 257.297458][T14440] xt_CT: You must specify a L4 protocol and not use inversions on it [ 257.361231][T14444] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2779'. [ 257.655855][T14464] bridge0: entered promiscuous mode [ 257.664665][T14464] bridge0: entered allmulticast mode [ 258.068608][T14483] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 260.317322][T14627] netlink: 'syz.0.2859': attribute type 3 has an invalid length. [ 260.327242][T14628] netlink: 'syz.1.2862': attribute type 1 has an invalid length. [ 260.343311][T14627] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2859'. [ 260.526670][T14642] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2868'. [ 260.832249][T14665] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2877'. [ 261.033230][T14679] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2885'. [ 261.126241][T14683] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 261.304045][T14692] netlink: 'syz.4.2888': attribute type 1 has an invalid length. [ 261.321778][T14694] mac80211_hwsim hwsim10 syzkaller0: left promiscuous mode [ 261.349201][T14694] mac80211_hwsim hwsim10 syzkaller0: left allmulticast mode [ 261.949268][ T5634] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 261.961455][ T5634] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 261.972819][ T5634] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 261.993134][ T5634] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 262.002849][ T5634] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 262.069021][ T5642] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 262.078013][ T5642] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 262.087188][ T5642] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 262.097056][ T5642] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 262.104693][ T5642] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 262.758448][ T5783] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 262.791443][ T5783] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.045644][ T5783] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 263.070446][ T5783] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.162790][T14720] C speed is unknown, defaulting to 1000 [ 263.171995][T14720] wg1 speed is unknown, defaulting to 1000 [ 263.207594][ T5783] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 263.230268][ T5783] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.380772][ T5783] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 263.406913][ T5783] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.164968][ T5642] Bluetooth: hci5: command tx timeout [ 264.751145][ T5292] 8021q: adding VLAN 0 to HW filter on device eth1 [ 266.245259][ T5642] Bluetooth: hci5: command tx timeout [ 266.324629][ T5783] bond7 (unregistering): (slave gretap1): Releasing active interface [ 266.431566][ T5783] bond0 (unregistering): (slave geneve2): Releasing active interface [ 266.446819][ T5783] geneve2 (unregistering): left allmulticast mode [ 266.598758][T14902] netlink: 'syz.0.2971': attribute type 10 has an invalid length. [ 266.650393][T14903] netlink: 'syz.0.2971': attribute type 10 has an invalid length. [ 266.674048][ T5783]  (unregistering): Released all slaves [ 266.689811][ T5783] bond1 (unregistering): Released all slaves [ 266.704139][ T5783] bond2 (unregistering): Released all slaves [ 266.729608][ T5783] bond0 (unregistering): Released all slaves [ 266.743604][ T5783] bond3 (unregistering): Released all slaves [ 266.763578][ T5783] bond4 (unregistering): Released all slaves [ 266.779885][ T5783] bond5 (unregistering): Released all slaves [ 266.794020][ T5783] bond6 (unregistering): Released all slaves [ 266.812813][ T5783] bond7 (unregistering): Released all slaves [ 266.834780][ T5783] bond8 (unregistering): Released all slaves [ 266.877053][ T5783] bond9 (unregistering): Released all slaves [ 266.903535][ T5783] bond10 (unregistering): Released all slaves [ 266.939810][ T808] wg1 speed is unknown, defaulting to 1000 [ 266.948220][ T808] syz2: Port: 1 Link DOWN [ 266.965729][T14892] bridge_slave_1: left allmulticast mode [ 266.980350][T14892] bridge_slave_1: left promiscuous mode [ 267.000101][T14892] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.192228][T14902] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 267.207455][T14903] team0: Device bond0 is already an upper device of the team interface [ 267.239448][T14913] netlink: 'syz.2.2974': attribute type 10 has an invalid length. [ 267.261205][ T5783] : left promiscuous mode [ 267.368877][ T5783] IPVS: stopping backup sync thread 10235 ... [ 267.401511][T14720] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.410434][T14720] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.418746][T14720] bridge_slave_0: entered allmulticast mode [ 267.435810][T14720] bridge_slave_0: entered promiscuous mode [ 267.455945][T14720] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.467930][T14720] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.508102][T14720] bridge_slave_1: entered allmulticast mode [ 267.526968][T14720] bridge_slave_1: entered promiscuous mode [ 267.582795][T14928] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2979'. [ 267.650593][T14933] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 267.734340][T14923] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 267.758825][T14923] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 267.790576][T14923] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 267.831653][T14939] netlink: zone id is out of range [ 267.852019][T14939] netlink: zone id is out of range [ 267.862599][T14720] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 267.867091][T14939] netlink: zone id is out of range [ 267.906411][T14720] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 267.914960][T14940] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 267.921728][T14939] netlink: zone id is out of range [ 267.952587][T14939] netlink: zone id is out of range [ 267.953364][T14940] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 268.004184][T14939] netlink: zone id is out of range [ 268.050901][T14939] netlink: zone id is out of range [ 268.087133][T14939] netlink: zone id is out of range [ 268.209174][T14720] team0: Port device team_slave_0 added [ 268.238683][T14720] team0: Port device team_slave_1 added [ 268.327744][ T5642] Bluetooth: hci5: command tx timeout [ 268.381138][T14720] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 268.388365][T14720] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 268.415314][T14720] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 268.574262][T14966] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2989'. [ 268.587446][T14720] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 268.609614][T14720] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 268.635763][T14720] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 268.651844][T14962] netlink: 'syz.0.2987': attribute type 8 has an invalid length. [ 268.653562][ T5292] 8021q: adding VLAN 0 to HW filter on device eth2 [ 268.831022][T14720] hsr_slave_0: entered promiscuous mode [ 268.850347][T14720] hsr_slave_1: entered promiscuous mode [ 268.865818][T14720] debugfs: 'hsr0' already exists in 'hsr' [ 268.874304][T14720] Cannot create hsr debugfs directory [ 268.888832][T14979] mac80211_hwsim hwsim6 wlan1: entered promiscuous mode [ 269.164005][ T5783] veth1_vlan: left promiscuous mode [ 269.173936][ T5783] veth0_vlan: left promiscuous mode [ 269.799468][ T9804] smbdirect: ib_dev[syz2] removed [ 269.917257][ T5292] 8021q: adding VLAN 0 to HW filter on device eth3 [ 270.406841][ T5642] Bluetooth: hci5: command tx timeout [ 270.429927][T15045] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3013'. [ 271.184352][T15084] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3025'. [ 271.622274][T14720] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 271.662925][T14720] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 271.683032][T14720] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 271.714636][T14720] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 271.737980][T14720] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 271.799993][T14720] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 271.825729][T14720] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 271.858862][T15119] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3032'. [ 271.883605][T14720] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 272.119418][T14720] 8021q: adding VLAN 0 to HW filter on device bond0 [ 272.161771][T14720] 8021q: adding VLAN 0 to HW filter on device team0 [ 272.190056][ T9804] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.197322][ T9804] bridge0: port 1(bridge_slave_0) entered forwarding state [ 272.222469][ T9804] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.229773][ T9804] bridge0: port 2(bridge_slave_1) entered forwarding state [ 272.302075][T15143] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3039'. [ 272.358262][T15146] netlink: 'syz.2.3040': attribute type 3 has an invalid length. [ 272.672888][T15163] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3044'. [ 273.158776][T14720] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 273.282829][T15196] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3053'. [ 273.344118][T14720] veth0_vlan: entered promiscuous mode [ 273.388995][T15198] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 273.399406][T15198] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 273.441991][T14720] veth1_vlan: entered promiscuous mode [ 273.529502][T14720] veth0_macvtap: entered promiscuous mode [ 273.576391][T14720] veth1_macvtap: entered promiscuous mode [ 273.643614][T14720] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 273.704008][T14720] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 273.738968][T15220] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3060'. [ 273.789231][ T5783] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.820612][ T5783] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.843569][ T5783] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.865443][ T5783] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.101967][ T5783] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 274.131638][ T5783] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 274.204347][ T9804] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 274.224543][ T9804] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 274.981316][ T5634] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 275.000813][ T5634] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 275.010437][ T5634] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 275.023995][ T5634] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 275.034083][ T5634] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 275.227525][T15281] syzkaller0: entered promiscuous mode [ 275.260518][T15281] syzkaller0: entered allmulticast mode [ 275.292238][T15283] net_ratelimit: 2 callbacks suppressed [ 275.292258][T15283] TC_ACT_REPEAT abuse ? [ 275.836206][T15298] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3081'. [ 275.948698][T15304] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3082'. [ 276.002466][T15304] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3082'. [ 277.141586][ T5642] Bluetooth: hci2: command tx timeout [ 278.279243][T15273] C speed is unknown, defaulting to 1000 [ 278.869421][T15377] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3103'. [ 278.959381][T15379] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 279.140481][T15393] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3110'. [ 279.159461][T15273] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.178133][T15273] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.192777][T15273] bridge_slave_0: entered allmulticast mode [ 279.206122][ T5642] Bluetooth: hci2: command tx timeout [ 279.217040][T15273] bridge_slave_0: entered promiscuous mode [ 279.244506][T15273] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.258780][T15273] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.278343][T15273] bridge_slave_1: entered allmulticast mode [ 279.301033][T15273] bridge_slave_1: entered promiscuous mode [ 279.426694][T15273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 279.464668][T15410] dvmrp8: entered allmulticast mode [ 279.477038][T15273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 279.543232][T15273] team0: Port device team_slave_0 added [ 279.651907][T15416] mac80211_hwsim hwsim32 wlan1: entered promiscuous mode [ 279.675011][T15273] team0: Port device team_slave_1 added [ 279.817732][T15273] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 279.825398][T15273] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 279.859676][T15273] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 279.915807][T15273] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 279.934775][T15273] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 279.961761][T15273] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 280.061068][ T9] IPVS: starting estimator thread 0... [ 280.165967][T15444] IPVS: using max 30 ests per chain, 72000 per kthread [ 280.241214][T15273] hsr_slave_0: entered promiscuous mode [ 280.248840][T15273] hsr_slave_1: entered promiscuous mode [ 280.256881][T15273] debugfs: 'hsr0' already exists in 'hsr' [ 280.266131][T15273] Cannot create hsr debugfs directory [ 280.335971][T15453] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.343724][T15453] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.423034][T15453] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 280.440054][T15453] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 280.521277][T15450] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 280.532032][T15450] tipc: Enabled bearer , priority 10 [ 280.599970][ T9811] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.617597][ T9811] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.630839][ T9811] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.645993][ T9811] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.655724][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 280.901029][T15475] netlink: 'syz.0.3144': attribute type 11 has an invalid length. [ 280.924999][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 280.963809][T15480] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3145'. [ 281.007704][T15480] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3145'. [ 281.233262][T15273] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 281.248894][T15273] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.285097][ T5642] Bluetooth: hci2: command tx timeout [ 281.454887][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 281.532892][T15510] netlink: 'syz.4.3160': attribute type 41 has an invalid length. [ 281.538769][T15273] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 281.568431][T15273] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.734646][T15273] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 281.740476][T15524] netlink: 'syz.4.3165': attribute type 2 has an invalid length. [ 281.754077][T15524] netlink: 'syz.4.3165': attribute type 2 has an invalid length. [ 281.761989][T15273] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.834405][T15529] syz.1.3167: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 281.872712][T15529] CPU: 0 UID: 0 PID: 15529 Comm: syz.1.3167 Not tainted syzkaller #0 PREEMPT(full) [ 281.872740][T15529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 281.872753][T15529] Call Trace: [ 281.872761][T15529] [ 281.872769][T15529] dump_stack_lvl+0xe8/0x150 [ 281.872799][T15529] warn_alloc+0x249/0x340 [ 281.872830][T15529] ? stack_trace_save+0xa9/0x100 [ 281.872862][T15529] ? __pfx_warn_alloc+0x10/0x10 [ 281.872898][T15529] ? kasan_save_track+0x4f/0x80 [ 281.872924][T15529] ? kasan_save_track+0x3e/0x80 [ 281.872950][T15529] ? __kasan_kmalloc+0x93/0xb0 [ 281.872975][T15529] ? __kmalloc_cache_noprof+0x31c/0x660 [ 281.873002][T15529] ? xskq_create+0x56/0x170 [ 281.873028][T15529] ? xsk_setsockopt+0x603/0x990 [ 281.873052][T15529] ? do_sock_setsockopt+0x17c/0x1b0 [ 281.873080][T15529] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 281.873107][T15529] ? do_syscall_64+0x174/0x580 [ 281.873130][T15529] __vmalloc_node_range_noprof+0x132/0x1750 [ 281.873200][T15529] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 281.873237][T15529] ? __kasan_kmalloc+0x93/0xb0 [ 281.873272][T15529] vmalloc_user_noprof+0xad/0xe0 [ 281.873299][T15529] ? xskq_create+0xbf/0x170 [ 281.873327][T15529] xskq_create+0xbf/0x170 [ 281.873358][T15529] xsk_init_queue+0x8a/0xe0 [ 281.873387][T15529] xsk_setsockopt+0x603/0x990 [ 281.873415][T15529] ? __pfx_xsk_setsockopt+0x10/0x10 [ 281.873442][T15529] ? __pfx_aa_sk_perm+0x10/0x10 [ 281.873469][T15529] ? __fget_files+0x2a/0x420 [ 281.873491][T15529] ? aa_sock_opt_perm+0xff/0x1a0 [ 281.873522][T15529] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 281.873548][T15529] ? __pfx_xsk_setsockopt+0x10/0x10 [ 281.873573][T15529] do_sock_setsockopt+0x17c/0x1b0 [ 281.873607][T15529] __x64_sys_setsockopt+0x13d/0x1b0 [ 281.873638][T15529] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.873657][T15529] do_syscall_64+0x174/0x580 [ 281.873673][T15529] ? trace_irq_disable+0x3b/0x140 [ 281.873700][T15529] ? clear_bhb_loop+0x40/0x90 [ 281.873723][T15529] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.873741][T15529] RIP: 0033:0x7f9bb639ce59 [ 281.873757][T15529] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 281.873773][T15529] RSP: 002b:00007f9bb45ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 281.873791][T15529] RAX: ffffffffffffffda RBX: 00007f9bb6615fa0 RCX: 00007f9bb639ce59 [ 281.873805][T15529] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000004 [ 281.873817][T15529] RBP: 00007f9bb6432d6f R08: 0000000000000004 R09: 0000000000000000 [ 281.873829][T15529] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 281.873841][T15529] R13: 00007f9bb6616038 R14: 00007f9bb6615fa0 R15: 00007ffe1b4f4488 [ 281.873872][T15529] [ 281.874299][T15529] Mem-Info: [ 282.155957][T15529] active_anon:6082 inactive_anon:0 isolated_anon:0 [ 282.155957][T15529] active_file:3693 inactive_file:40038 isolated_file:0 [ 282.155957][T15529] unevictable:768 dirty:84 writeback:0 [ 282.155957][T15529] slab_reclaimable:11239 slab_unreclaimable:104396 [ 282.155957][T15529] mapped:29671 shmem:1289 pagetables:1414 [ 282.155957][T15529] sec_pagetables:0 bounce:0 [ 282.155957][T15529] kernel_misc_reclaimable:0 [ 282.155957][T15529] free:1322271 free_pcp:8101 free_cma:0 [ 282.201953][T15273] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 282.207926][T15529] Node 0 active_anon:24328kB inactive_anon:0kB active_file:14772kB inactive_file:159940kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:118684kB dirty:336kB writeback:0kB shmem:3620kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14320kB pagetables:5520kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 282.212482][T15273] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.250959][T15529] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:212kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 282.297315][T15529] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 282.327964][T15529] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 282.334043][T15529] Node 0 DMA32 free:1331680kB boost:0kB min:34188kB low:42732kB high:51276kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24328kB inactive_anon:0kB active_file:14772kB inactive_file:159940kB unevictable:1536kB writepending:336kB zspages:0kB present:3129332kB managed:2552800kB mlocked:0kB bounce:0kB free_pcp:33016kB local_pcp:17368kB free_cma:0kB [ 282.370464][T15529] lowmem_reserve[]: 0 0 0 0 0 [ 282.375306][T15529] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:680kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 282.408609][T15529] lowmem_reserve[]: 0 0 0 0 0 [ 282.419240][T15529] Node 1 Normal free:3941788kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:212kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 282.453271][T15529] lowmem_reserve[]: 0 0 0 0 0 [ 282.458308][T15529] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 282.471468][T15529] Node 0 DMA32: 5048*4kB (UE) 3028*8kB (UME) 1740*16kB (UME) 579*32kB (UME) 346*64kB (UME) 263*128kB (UME) 205*256kB (UM) 84*512kB (UME) 74*1024kB (U) 33*2048kB (UME) 231*4096kB (UM) = 1331616kB [ 282.485022][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 282.495567][T15529] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 282.509976][T15529] Node 1 Normal: 1*4kB (U) 3*8kB (UM) 10*16kB (UM) 7*32kB (UM) 8*64kB (UM) 4*128kB (UM) 2*256kB (M) 3*512kB (UM) 2*1024kB (UM) 2*2048kB (U) 960*4096kB (M) = 3941788kB [ 282.518584][T15273] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 282.530329][T15529] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 282.543385][T15529] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 282.547205][T15273] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 282.554478][T15529] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 282.561642][T15273] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 282.578649][T15529] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 282.588164][T15529] 45016 total pagecache pages [ 282.593001][T15529] 0 pages in swap cache [ 282.593041][T15273] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 282.597309][T15529] Free swap = 124996kB [ 282.597321][T15529] Total swap = 124996kB [ 282.597332][T15529] 2097051 pages RAM [ 282.597340][T15529] 0 pages HighMem/MovableOnly [ 282.597348][T15529] 427066 pages reserved [ 282.597356][T15529] 0 pages cma reserved [ 282.633037][T15273] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 282.644268][T15273] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 282.655792][T15273] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 282.686694][T15273] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 282.794598][T15273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 282.830268][T15553] netlink: 'syz.1.3175': attribute type 1 has an invalid length. [ 282.862949][T15273] 8021q: adding VLAN 0 to HW filter on device team0 [ 282.879161][ T65] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.886332][ T65] bridge0: port 1(bridge_slave_0) entered forwarding state [ 282.919625][ T9813] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.926858][ T9813] bridge0: port 2(bridge_slave_1) entered forwarding state [ 283.365494][ T5642] Bluetooth: hci2: command tx timeout [ 283.524960][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 283.695044][T15601] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3193'. [ 283.784652][T15273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 283.900862][T15273] veth0_vlan: entered promiscuous mode [ 283.948009][T15273] veth1_vlan: entered promiscuous mode [ 284.031094][T15273] veth0_macvtap: entered promiscuous mode [ 284.056808][T15273] veth1_macvtap: entered promiscuous mode [ 284.114179][T15273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 284.152547][T15273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 284.211452][ T65] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.227208][ T65] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.239823][ T65] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.250054][ T65] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.446810][ T9804] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 284.470565][ T9804] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 284.522363][ T5783] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 284.542317][ T5783] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 284.564999][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 285.604903][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 285.872456][ T5634] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 285.885904][ T5634] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 285.898383][ T5634] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 285.907400][ T5634] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 285.919430][ T5634] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 286.591572][T15682] C speed is unknown, defaulting to 1000 [ 286.645122][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 287.301973][T15682] bridge0: port 1(bridge_slave_0) entered blocking state [ 287.318042][T15682] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.325846][T15682] bridge_slave_0: entered allmulticast mode [ 287.335773][T15682] bridge_slave_0: entered promiscuous mode [ 287.348854][T15682] bridge0: port 2(bridge_slave_1) entered blocking state [ 287.356280][T15682] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.363639][T15682] bridge_slave_1: entered allmulticast mode [ 287.372306][T15682] bridge_slave_1: entered promiscuous mode [ 287.626317][T15682] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 287.684931][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 287.797236][T15682] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 287.946623][T15682] team0: Port device team_slave_0 added [ 287.965670][T15682] team0: Port device team_slave_1 added [ 288.015362][ T5634] Bluetooth: hci3: command tx timeout [ 288.039289][T15682] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 288.047625][T15682] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 288.075075][T15682] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 288.089366][T15682] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 288.096905][T15682] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 288.124396][T15682] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 288.218281][T15682] hsr_slave_0: entered promiscuous mode [ 288.226894][T15682] hsr_slave_1: entered promiscuous mode [ 288.234624][T15682] debugfs: 'hsr0' already exists in 'hsr' [ 288.241012][T15682] Cannot create hsr debugfs directory [ 288.562079][T15682] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 288.578573][T15682] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.591558][T15682] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 288.724878][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 288.774437][T15682] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 288.806022][T15682] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.821375][T15682] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 288.960772][T15682] : (slave netdevsim1): Releasing backup interface [ 289.010727][T15682] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 289.059598][T15682] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.092507][T15682] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 289.220320][T15777] syzkaller0: entered promiscuous mode [ 289.235028][T15777] syzkaller0: entered allmulticast mode [ 289.370193][T15682] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 289.381352][T15682] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.392916][T15682] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 289.768840][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 290.097176][ T5634] Bluetooth: hci3: command tx timeout [ 290.805124][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 291.844891][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 291.872682][T15787] pimreg: entered allmulticast mode [ 292.045495][T15682] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 292.071770][T15682] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 292.092582][T15682] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 292.128038][T15682] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 292.139058][T15682] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 292.157959][T15682] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 292.176548][T15682] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 292.184520][ T5634] Bluetooth: hci3: command tx timeout [ 292.198711][T15682] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 292.329077][T15805] netlink: 'syz.1.3259': attribute type 1 has an invalid length. [ 292.443028][T15682] 8021q: adding VLAN 0 to HW filter on device bond0 [ 292.501062][T15682] 8021q: adding VLAN 0 to HW filter on device team0 [ 292.536003][T12946] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.543202][T12946] bridge0: port 1(bridge_slave_0) entered forwarding state [ 292.567884][T12946] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.575100][T12946] bridge0: port 2(bridge_slave_1) entered forwarding state [ 292.689920][T15813] syzkaller0: entered promiscuous mode [ 292.704563][T15813] syzkaller0: entered allmulticast mode [ 292.884950][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 293.509498][T15840] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3273'. [ 293.527413][T15840] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3273'. [ 293.820373][T15682] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 293.924904][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 293.971531][T15855] pim6reg: entered allmulticast mode [ 294.249176][ T5634] Bluetooth: hci3: command tx timeout [ 294.329721][T15869] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3281'. [ 294.517550][T15682] veth0_vlan: entered promiscuous mode [ 294.547691][T15682] veth1_vlan: entered promiscuous mode [ 294.622260][T15682] veth0_macvtap: entered promiscuous mode [ 294.657983][T15682] veth1_macvtap: entered promiscuous mode [ 294.682466][T15876] IPVS: persistence engine module ip_vs_pe_À not found [ 294.702385][T15682] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 294.730123][T15682] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 294.763920][ T5783] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.795116][ T5783] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.813758][ T5783] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.854250][ T5783] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.964915][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 295.015952][T12952] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 295.034582][T12952] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 295.106261][T12952] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 295.124101][T12952] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 295.140793][T15888] netlink: 'syz.3.3288': attribute type 49 has an invalid length. [ 295.223501][T15888] ip6gretap0: entered promiscuous mode [ 295.235048][T15888] ip6gretap0: entered allmulticast mode [ 296.004937][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 296.160221][ T5642] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 296.182621][ T5642] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 296.193499][ T5642] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 296.211100][ T5642] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 296.220195][ T5642] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 296.276025][T15924] mac80211_hwsim hwsim36 wlan1: entered promiscuous mode [ 296.707956][T15943] netlink: 'syz.3.3303': attribute type 1 has an invalid length. [ 296.836211][T15943] bond1: entered promiscuous mode [ 296.841763][T15943] 8021q: adding VLAN 0 to HW filter on device bond1 [ 296.861890][T15949] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3304'. [ 297.045007][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 297.396089][T15922] C speed is unknown, defaulting to 1000 [ 297.541279][T15973] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 297.559205][T15973] bond1 (unregistering): Released all slaves [ 298.084962][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 298.334962][ T5642] Bluetooth: hci1: command tx timeout [ 298.507582][T15922] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.529483][T15922] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.547039][T15922] bridge_slave_0: entered allmulticast mode [ 298.566411][T15922] bridge_slave_0: entered promiscuous mode [ 298.587847][T15922] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.618431][T15922] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.635360][T15922] bridge_slave_1: entered allmulticast mode [ 298.653698][T15922] bridge_slave_1: entered promiscuous mode [ 298.699398][T15922] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 298.727400][T15922] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 298.873157][T15922] team0: Port device team_slave_0 added [ 298.906912][T15922] team0: Port device team_slave_1 added [ 299.001470][T15922] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 299.016612][T15922] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 299.063952][T15922] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 299.089087][T16025] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3323'. [ 299.101127][T16025] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3323'. [ 299.118555][T16028] netlink: 80 bytes leftover after parsing attributes in process `syz.4.3323'. [ 299.125391][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 299.166014][T15922] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 299.176261][T15922] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 299.215637][T15922] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 299.219739][ T5634] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 299.241709][ T5634] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 299.249905][ T5634] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 299.262106][ T5634] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 299.270319][ T5634] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 299.462584][T15922] hsr_slave_0: entered promiscuous mode [ 299.475358][T15922] hsr_slave_1: entered promiscuous mode [ 299.482095][T15922] debugfs: 'hsr0' already exists in 'hsr' [ 299.488592][T15922] Cannot create hsr debugfs directory [ 299.954521][T16056] FAULT_INJECTION: forcing a failure. [ 299.954521][T16056] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 299.996066][T16056] CPU: 0 UID: 0 PID: 16056 Comm: syz.3.3329 Not tainted syzkaller #0 PREEMPT(full) [ 299.996091][T16056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 299.996103][T16056] Call Trace: [ 299.996109][T16056] [ 299.996118][T16056] dump_stack_lvl+0xe8/0x150 [ 299.996141][T16056] should_fail_ex+0x412/0x560 [ 299.996166][T16056] _copy_to_user+0x31/0xb0 [ 299.996189][T16056] simple_read_from_buffer+0xe1/0x170 [ 299.996216][T16056] proc_fail_nth_read+0x1bb/0x230 [ 299.996242][T16056] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 299.996266][T16056] ? rw_verify_area+0x2a6/0x4d0 [ 299.996289][T16056] ? tun_chr_write_iter+0x18a/0x200 [ 299.996313][T16056] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 299.996340][T16056] vfs_read+0x20c/0xa70 [ 299.996368][T16056] ? __pfx___mutex_lock+0x10/0x10 [ 299.996385][T16056] ? __pfx_vfs_read+0x10/0x10 [ 299.996405][T16056] ? __fget_files+0x2a/0x420 [ 299.996425][T16056] ? __fget_files+0x3a0/0x420 [ 299.996440][T16056] ? __fget_files+0x2a/0x420 [ 299.996469][T16056] ksys_read+0x150/0x270 [ 299.996494][T16056] ? __pfx_ksys_read+0x10/0x10 [ 299.996526][T16056] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.996544][T16056] do_syscall_64+0x174/0x580 [ 299.996561][T16056] ? trace_irq_disable+0x3b/0x140 [ 299.996586][T16056] ? clear_bhb_loop+0x40/0x90 [ 299.996608][T16056] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.996625][T16056] RIP: 0033:0x7f1f6115d68e [ 299.996642][T16056] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 299.996655][T16056] RSP: 002b:00007f1f620f3fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 299.996675][T16056] RAX: ffffffffffffffda RBX: 00007f1f620f46c0 RCX: 00007f1f6115d68e [ 299.996688][T16056] RDX: 000000000000000f RSI: 00007f1f620f40a0 RDI: 0000000000000004 [ 299.996699][T16056] RBP: 00007f1f620f4090 R08: 0000000000000000 R09: 0000000000000000 [ 299.996710][T16056] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 299.996720][T16056] R13: 00007f1f61416038 R14: 00007f1f61415fa0 R15: 00007ffcb7dd9358 [ 299.996749][T16056] [ 300.218685][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 300.410261][ T5642] Bluetooth: hci1: command tx timeout [ 300.426406][T16029] C speed is unknown, defaulting to 1000 [ 300.643950][T15922] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 300.695909][T15922] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.790302][ T5634] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 300.808373][ T5634] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 300.818712][ T5634] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 300.831330][ T5634] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 300.838366][T16077] netlink: 'syz.3.3334': attribute type 1 has an invalid length. [ 300.849132][ T5634] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 301.040929][T15922] bond0: (slave netdevsim1): Releasing backup interface [ 301.067058][T15922] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 301.077506][T15922] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.273700][T15922] netdevsim netdevsim1  (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 301.283920][T15922] netdevsim netdevsim1  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.285051][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 301.366232][ T5634] Bluetooth: hci0: command tx timeout [ 301.770077][T16074] C speed is unknown, defaulting to 1000 [ 301.998799][T15922] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 302.011646][T15922] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 302.043868][T15922] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 302.056997][T15922] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 302.096754][T15922] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 302.112072][T15922] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 302.120724][T16029] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.129166][T16029] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.138083][T16029] bridge_slave_0: entered allmulticast mode [ 302.146594][T16029] bridge_slave_0: entered promiscuous mode [ 302.163734][T15922] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 302.185608][T15922] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 302.209361][T16029] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.221445][T16029] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.229419][T16029] bridge_slave_1: entered allmulticast mode [ 302.237814][T16029] bridge_slave_1: entered promiscuous mode [ 302.325122][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 302.369768][T16029] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 302.401369][T16029] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 302.523293][ T5634] Bluetooth: hci1: command tx timeout [ 302.574599][T16029] team0: Port device team_slave_0 added [ 302.595846][T16029] team0: Port device team_slave_1 added [ 302.738307][T16029] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 302.752753][T16029] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 302.784377][T16029] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 302.827970][T16029] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 302.842390][T16029] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 302.884978][ T5634] Bluetooth: hci6: command tx timeout [ 302.922461][T16029] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 303.136951][T16074] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.146008][T16074] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.153386][T16074] bridge_slave_0: entered allmulticast mode [ 303.161544][T16074] bridge_slave_0: entered promiscuous mode [ 303.180478][T16029] hsr_slave_0: entered promiscuous mode [ 303.188668][T16029] hsr_slave_1: entered promiscuous mode [ 303.195508][T16029] debugfs: 'hsr0' already exists in 'hsr' [ 303.201354][T16029] Cannot create hsr debugfs directory [ 303.208179][T16074] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.216735][T16074] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.224118][T16074] bridge_slave_1: entered allmulticast mode [ 303.232357][T16074] bridge_slave_1: entered promiscuous mode [ 303.358880][T16074] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 303.368528][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 303.394178][T16074] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 303.445313][ T5634] Bluetooth: hci0: command tx timeout [ 303.490773][T16074] team0: Port device team_slave_0 added [ 303.526440][T16074] team0: Port device team_slave_1 added [ 303.627712][T16074] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 303.636198][T16074] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 303.665772][T16074] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 303.693548][T15922] 8021q: adding VLAN 0 to HW filter on device bond0 [ 303.718524][T16074] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 303.738541][T16074] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 303.771767][T16074] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 303.899178][T15922] 8021q: adding VLAN 0 to HW filter on device team0 [ 304.018326][T12946] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.025554][T12946] bridge0: port 1(bridge_slave_0) entered forwarding state [ 304.053559][T16074] hsr_slave_0: entered promiscuous mode [ 304.067592][T16074] hsr_slave_1: entered promiscuous mode [ 304.079132][T16074] debugfs: 'hsr0' already exists in 'hsr' [ 304.090565][T16074] Cannot create hsr debugfs directory [ 304.192045][T12946] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.199235][T12946] bridge0: port 2(bridge_slave_1) entered forwarding state [ 304.304569][T16148] syzkaller0: entered promiscuous mode [ 304.311989][T16148] syzkaller0: entered allmulticast mode [ 304.405352][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 304.447228][T16029] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 304.476700][T16029] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 304.519982][T16029] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 304.529585][T16150] netlink: 'syz.3.3347': attribute type 1 has an invalid length. [ 304.532480][T16029] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 304.549119][T16029] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 304.561858][T16029] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 304.565473][ T5634] Bluetooth: hci1: command tx timeout [ 304.580854][T16029] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 304.596549][T16029] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 304.796569][T16157] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 304.965075][ T5634] Bluetooth: hci6: command tx timeout [ 305.319861][T16029] 8021q: adding VLAN 0 to HW filter on device bond0 [ 305.330946][T16074] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 305.342513][T16074] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 305.352010][T16074] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 305.364231][T16074] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 305.376102][T16074] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 305.399559][T16074] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 305.421665][T16074] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 305.445872][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 305.454073][T16074] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 305.513914][T16029] 8021q: adding VLAN 0 to HW filter on device team0 [ 305.527025][ T5634] Bluetooth: hci0: command tx timeout [ 305.558828][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.566137][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 305.624198][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.631451][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 305.867928][T16074] 8021q: adding VLAN 0 to HW filter on device bond0 [ 305.928333][T16074] 8021q: adding VLAN 0 to HW filter on device team0 [ 305.957375][T12946] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.964572][T12946] bridge0: port 1(bridge_slave_0) entered forwarding state [ 305.989486][T15922] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 306.003999][T12946] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.011260][T12946] bridge0: port 2(bridge_slave_1) entered forwarding state [ 306.211695][T15922] veth0_vlan: entered promiscuous mode [ 306.272762][T15922] veth1_vlan: entered promiscuous mode [ 306.392466][T15922] veth0_macvtap: entered promiscuous mode [ 306.436711][T15922] veth1_macvtap: entered promiscuous mode [ 306.463044][T16195] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3353'. [ 306.484047][T15922] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 306.485090][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 306.498937][T16195] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3353'. [ 306.542381][T15922] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 306.588870][T12952] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.611312][T12952] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.639553][T12952] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.658654][ T137] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.961379][T16029] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 307.002776][T12952] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 307.032181][T12952] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 307.046311][ T5634] Bluetooth: hci6: command tx timeout [ 307.141352][T16210] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3355'. [ 307.181277][T12952] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 307.213888][T12952] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 307.390953][T16074] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 307.525092][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 307.605023][ T5634] Bluetooth: hci0: command tx timeout [ 307.678979][T16228] netlink: 'syz.1.3358': attribute type 1 has an invalid length. [ 307.743027][T16228] bond1: entered promiscuous mode [ 307.749429][T16231] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.3359'. [ 307.756533][T16228] 8021q: adding VLAN 0 to HW filter on device bond1 [ 308.042119][T16241] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3360'. [ 308.074250][T16029] veth0_vlan: entered promiscuous mode [ 308.137805][T16243] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3361'. [ 308.170163][T16243] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3361'. [ 308.219541][T16029] veth1_vlan: entered promiscuous mode [ 308.241205][T16241] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3360'. [ 308.364744][T16074] veth0_vlan: entered promiscuous mode [ 308.422194][T16029] veth0_macvtap: entered promiscuous mode [ 308.478733][T16029] veth1_macvtap: entered promiscuous mode [ 308.513163][T16074] veth1_vlan: entered promiscuous mode [ 308.565072][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 308.622088][T16029] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 308.631788][T16259] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3364'. [ 308.685623][T16029] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 308.723757][T16259] ip6gretap0: entered promiscuous mode [ 308.737260][T16259] ip6gretap0: entered allmulticast mode [ 308.772782][T12946] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.797753][T12946] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.854148][T12946] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.881969][T12946] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.919379][T16267] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3366'. [ 308.950527][T16074] veth0_macvtap: entered promiscuous mode [ 309.066426][T16074] veth1_macvtap: entered promiscuous mode [ 309.136393][ T5634] Bluetooth: hci6: command tx timeout [ 309.233525][T16074] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 309.237152][T16275] netlink: 'syz.1.3369': attribute type 1 has an invalid length. [ 309.299970][T16275] bond2: entered promiscuous mode [ 309.308408][T16275] 8021q: adding VLAN 0 to HW filter on device bond2 [ 309.323515][T16273] syzkaller0: entered promiscuous mode [ 309.329978][T16273] syzkaller0: entered allmulticast mode [ 309.351980][T16074] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 309.389467][ T9811] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 309.427593][ T9811] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 309.474287][ T35] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.514257][ T35] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.535919][ T35] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.558038][ T9811] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 309.568015][ T35] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.577978][ T9811] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 309.605772][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 309.786622][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 309.806280][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 309.937496][ T9804] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 309.956985][ T9804] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 310.464053][T16308] FAULT_INJECTION: forcing a failure. [ 310.464053][T16308] name failslab, interval 1, probability 0, space 0, times 0 [ 310.518010][T16308] CPU: 0 UID: 0 PID: 16308 Comm: syz.6.3376 Not tainted syzkaller #0 PREEMPT(full) [ 310.518034][T16308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 310.518043][T16308] Call Trace: [ 310.518050][T16308] [ 310.518057][T16308] dump_stack_lvl+0xe8/0x150 [ 310.518083][T16308] should_fail_ex+0x412/0x560 [ 310.518109][T16308] should_failslab+0xa8/0x100 [ 310.518129][T16308] __kmalloc_cache_noprof+0x88/0x660 [ 310.518156][T16308] ? sctp_association_new+0x89/0x25e0 [ 310.518185][T16308] sctp_association_new+0x89/0x25e0 [ 310.518210][T16308] ? sctp_has_association+0x1cd/0x1f0 [ 310.518233][T16308] ? sctp_has_association+0x2f/0x1f0 [ 310.518258][T16308] ? __ipv6_addr_type+0x247/0x2f0 [ 310.518280][T16308] sctp_connect_new_asoc+0x2e4/0x6b0 [ 310.518314][T16308] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 310.518337][T16308] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 310.518358][T16308] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 310.518378][T16308] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 310.518400][T16308] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 310.518424][T16308] ? security_sctp_bind_connect+0x7e/0x2c0 [ 310.518449][T16308] sctp_sendmsg+0x1576/0x2c50 [ 310.518486][T16308] ? __pfx_sctp_sendmsg+0x10/0x10 [ 310.518510][T16308] ? aa_sk_perm+0x6d5/0x900 [ 310.518533][T16308] ? __might_fault+0xaf/0x130 [ 310.518561][T16308] ? __pfx_aa_sk_perm+0x10/0x10 [ 310.518588][T16308] ? sock_rps_record_flow+0x19/0x350 [ 310.518607][T16308] ? __pfx_inet_sendmsg+0x10/0x10 [ 310.518627][T16308] ? inet_sendmsg+0x2f4/0x370 [ 310.518644][T16308] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 310.518665][T16308] ? __pfx_inet_sendmsg+0x10/0x10 [ 310.518684][T16308] __sys_sendto+0x5de/0x710 [ 310.518711][T16308] ? __pfx___sys_sendto+0x10/0x10 [ 310.518731][T16308] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 310.518765][T16308] ? __fget_files+0x3a0/0x420 [ 310.518798][T16308] ? ksys_write+0x242/0x270 [ 310.518822][T16308] ? __pfx_ksys_write+0x10/0x10 [ 310.518851][T16308] __x64_sys_sendto+0xde/0x100 [ 310.518875][T16308] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.518895][T16308] do_syscall_64+0x174/0x580 [ 310.518912][T16308] ? trace_irq_disable+0x3b/0x140 [ 310.518940][T16308] ? clear_bhb_loop+0x40/0x90 [ 310.518962][T16308] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.518980][T16308] RIP: 0033:0x7f3246d9ce59 [ 310.518997][T16308] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 310.519011][T16308] RSP: 002b:00007f3247c44028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 310.519031][T16308] RAX: ffffffffffffffda RBX: 00007f3247015fa0 RCX: 00007f3246d9ce59 [ 310.519043][T16308] RDX: 0000000000034000 RSI: 0000200000847fff RDI: 0000000000000003 [ 310.519054][T16308] RBP: 00007f3247c44090 R08: 000020000005ffe4 R09: 000000000000001c [ 310.519065][T16308] R10: 00000000000000e0 R11: 0000000000000246 R12: 0000000000000001 [ 310.519076][T16308] R13: 00007f3247016038 R14: 00007f3247015fa0 R15: 00007ffd8d6240e8 [ 310.519107][T16308] [ 310.822265][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 310.953101][T16316] FAULT_INJECTION: forcing a failure. [ 310.953101][T16316] name failslab, interval 1, probability 0, space 0, times 0 [ 310.967814][T16316] CPU: 0 UID: 0 PID: 16316 Comm: syz.5.3381 Not tainted syzkaller #0 PREEMPT(full) [ 310.967841][T16316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 310.967851][T16316] Call Trace: [ 310.967860][T16316] [ 310.967868][T16316] dump_stack_lvl+0xe8/0x150 [ 310.967894][T16316] should_fail_ex+0x412/0x560 [ 310.967917][T16316] ? xfrm_policy_inexact_alloc_bin+0x147/0x1b50 [ 310.967943][T16316] should_failslab+0xa8/0x100 [ 310.967964][T16316] __kmalloc_cache_noprof+0x88/0x660 [ 310.967989][T16316] ? xfrm_policy_inexact_alloc_bin+0x993/0x1b50 [ 310.968011][T16316] ? xfrm_policy_inexact_alloc_bin+0x147/0x1b50 [ 310.968035][T16316] ? xfrm_policy_inexact_alloc_bin+0x147/0x1b50 [ 310.968060][T16316] xfrm_policy_inexact_alloc_bin+0x993/0x1b50 [ 310.968085][T16316] ? xfrm_policy_inexact_alloc_bin+0x147/0x1b50 [ 310.968110][T16316] ? do_raw_spin_lock+0x12b/0x2f0 [ 310.968133][T16316] ? xfrm_policy_insert+0xa2/0x940 [ 310.968158][T16316] ? policy_hash_bysel+0x139/0x950 [ 310.968181][T16316] xfrm_policy_inexact_insert+0x1e/0x180 [ 310.968204][T16316] xfrm_policy_insert+0x116/0x940 [ 310.968234][T16316] xfrm_add_policy+0x30f/0x820 [ 310.968271][T16316] ? __pfx_xfrm_add_policy+0x10/0x10 [ 310.968290][T16316] ? apparmor_capable+0x126/0x170 [ 310.968315][T16316] ? __nla_parse+0x40/0x60 [ 310.968342][T16316] xfrm_user_rcv_msg+0x7ae/0xc40 [ 310.968369][T16316] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 310.968424][T16316] ? __pfx___mutex_trylock_common+0x10/0x10 [ 310.968449][T16316] ? rcu_is_watching+0x15/0xb0 [ 310.968471][T16316] ? trace_contention_end+0x3d/0x140 [ 310.968495][T16316] ? __mutex_lock+0x319/0x1550 [ 310.968522][T16316] netlink_rcv_skb+0x232/0x4b0 [ 310.968548][T16316] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 310.968571][T16316] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 310.968612][T16316] ? netlink_deliver_tap+0x2e/0x1b0 [ 310.968636][T16316] ? netlink_deliver_tap+0x2e/0x1b0 [ 310.968663][T16316] xfrm_netlink_rcv+0x79/0x90 [ 310.968684][T16316] netlink_unicast+0x75c/0x8e0 [ 310.968719][T16316] netlink_sendmsg+0x813/0xb40 [ 310.968753][T16316] ? __pfx_netlink_sendmsg+0x10/0x10 [ 310.968781][T16316] ? aa_sock_msg_perm+0xf1/0x1b0 [ 310.968807][T16316] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 310.968834][T16316] ____sys_sendmsg+0x972/0x9f0 [ 310.968851][T16316] ? __might_fault+0xaf/0x130 [ 310.968881][T16316] ? __pfx_____sys_sendmsg+0x10/0x10 [ 310.968913][T16316] ? import_iovec+0x73/0xa0 [ 310.968939][T16316] ___sys_sendmsg+0x2a5/0x360 [ 310.968953][T16316] ? __lock_acquire+0x6b5/0x2cf0 [ 310.968972][T16316] ? __pfx____sys_sendmsg+0x10/0x10 [ 310.969013][T16316] ? __fget_files+0x2a/0x420 [ 310.969032][T16316] ? __fget_files+0x3a0/0x420 [ 310.969058][T16316] __x64_sys_sendmsg+0x1bd/0x2a0 [ 310.969077][T16316] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 310.969100][T16316] ? __pfx_ksys_write+0x10/0x10 [ 310.969130][T16316] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.969147][T16316] do_syscall_64+0x174/0x580 [ 310.969160][T16316] ? trace_irq_disable+0x3b/0x140 [ 310.969183][T16316] ? clear_bhb_loop+0x40/0x90 [ 310.969203][T16316] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.969219][T16316] RIP: 0033:0x7fc45579ce59 [ 310.969236][T16316] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 310.969250][T16316] RSP: 002b:00007fc45669b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 310.969279][T16316] RAX: ffffffffffffffda RBX: 00007fc455a15fa0 RCX: 00007fc45579ce59 [ 310.969289][T16316] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000004 [ 310.969300][T16316] RBP: 00007fc45669b090 R08: 0000000000000000 R09: 0000000000000000 [ 310.969309][T16316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 310.969319][T16316] R13: 00007fc455a16038 R14: 00007fc455a15fa0 R15: 00007ffe3cdd86b8 [ 310.969346][T16316] [ 311.798141][T16324] [ 311.800525][T16324] ====================================================== [ 311.807551][T16324] WARNING: possible circular locking dependency detected [ 311.814572][T16324] syzkaller #0 Not tainted [ 311.818972][T16324] ------------------------------------------------------ [ 311.825970][T16324] syz.5.3383/16324 is trying to acquire lock: [ 311.832017][T16324] ffff888068f0d568 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}, at: __flush_work+0x100/0xc50 [ 311.843490][T16324] [ 311.843490][T16324] but task is already holding lock: [ 311.850841][T16324] ffff888068f0d9e0 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x255/0x560 [ 311.859797][T16324] [ 311.859797][T16324] which lock already depends on the new lock. [ 311.859797][T16324] [ 311.870184][T16324] [ 311.870184][T16324] the existing dependency chain (in reverse order) is: [ 311.879183][T16324] [ 311.879183][T16324] -> #1 (sk_lock-AF_SMC/1){+.+.}-{0:0}: [ 311.886902][T16324] lock_sock_nested+0x41/0x100 [ 311.892177][T16324] smc_listen_out+0x109/0x3e0 [ 311.897359][T16324] smc_listen_work+0x813/0x13f0 [ 311.902716][T16324] process_scheduled_works+0xb5d/0x1860 [ 311.908766][T16324] worker_thread+0xa53/0xfc0 [ 311.913866][T16324] kthread+0x389/0x470 [ 311.918444][T16324] ret_from_fork+0x514/0xb70 [ 311.923542][T16324] ret_from_fork_asm+0x1a/0x30 [ 311.928909][T16324] [ 311.928909][T16324] -> #0 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}: [ 311.939067][T16324] __lock_acquire+0x15a5/0x2cf0 [ 311.944442][T16324] lock_acquire+0x106/0x350 [ 311.949542][T16324] __flush_work+0x700/0xc50 [ 311.954555][T16324] __cancel_work_sync+0xbe/0x110 [ 311.960010][T16324] smc_clcsock_release+0x60/0xf0 [ 311.965481][T16324] __smc_release+0x66b/0x7e0 [ 311.970591][T16324] smc_close_non_accepted+0xd5/0x1f0 [ 311.976389][T16324] smc_close_active+0xb67/0xf10 [ 311.981755][T16324] __smc_release+0x8d/0x7e0 [ 311.986770][T16324] smc_release+0x2ce/0x560 [ 311.991696][T16324] sock_close+0xc3/0x240 [ 311.996446][T16324] __fput+0x44f/0xa60 [ 312.000936][T16324] task_work_run+0x1d9/0x270 [ 312.006042][T16324] do_exit+0x70f/0x22c0 [ 312.010707][T16324] do_group_exit+0x21b/0x2d0 [ 312.015895][T16324] __x64_sys_exit_group+0x3f/0x40 [ 312.021433][T16324] x64_sys_call+0x221a/0x2240 [ 312.026622][T16324] do_syscall_64+0x174/0x580 [ 312.031733][T16324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.038131][T16324] [ 312.038131][T16324] other info that might help us debug this: [ 312.038131][T16324] [ 312.048347][T16324] Possible unsafe locking scenario: [ 312.048347][T16324] [ 312.055866][T16324] CPU0 CPU1 [ 312.061304][T16324] ---- ---- [ 312.066657][T16324] lock(sk_lock-AF_SMC/1); [ 312.071156][T16324] lock((work_completion)(&new_smc->smc_listen_work)); [ 312.080690][T16324] lock(sk_lock-AF_SMC/1); [ 312.087708][T16324] lock((work_completion)(&new_smc->smc_listen_work)); [ 312.094632][T16324] [ 312.094632][T16324] *** DEADLOCK *** [ 312.094632][T16324] [ 312.102758][T16324] 3 locks held by syz.5.3383/16324: [ 312.107945][T16324] #0: ffff88807651b040 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 312.118120][T16324] #1: ffff888068f0d9e0 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x255/0x560 [ 312.127609][T16324] #2: ffffffff8e95cce0 (rcu_read_lock){....}-{1:3}, at: __flush_work+0x100/0xc50 [ 312.137034][T16324] [ 312.137034][T16324] stack backtrace: [ 312.142910][T16324] CPU: 0 UID: 0 PID: 16324 Comm: syz.5.3383 Not tainted syzkaller #0 PREEMPT(full) [ 312.142926][T16324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 312.142936][T16324] Call Trace: [ 312.142943][T16324] [ 312.142948][T16324] dump_stack_lvl+0xe8/0x150 [ 312.142965][T16324] print_circular_bug+0x2e1/0x300 [ 312.142983][T16324] check_noncircular+0x12e/0x150 [ 312.143001][T16324] __lock_acquire+0x15a5/0x2cf0 [ 312.143017][T16324] ? do_raw_spin_lock+0x12b/0x2f0 [ 312.143039][T16324] ? __flush_work+0x100/0xc50 [ 312.143053][T16324] lock_acquire+0x106/0x350 [ 312.143065][T16324] ? __flush_work+0x100/0xc50 [ 312.143082][T16324] ? __flush_work+0x100/0xc50 [ 312.143095][T16324] __flush_work+0x700/0xc50 [ 312.143109][T16324] ? __flush_work+0x100/0xc50 [ 312.143122][T16324] ? __flush_work+0x100/0xc50 [ 312.143137][T16324] ? __pfx___flush_work+0x10/0x10 [ 312.143151][T16324] ? __pfx_wq_barrier_func+0x10/0x10 [ 312.143171][T16324] ? __cancel_work_sync+0x5c/0x110 [ 312.143187][T16324] __cancel_work_sync+0xbe/0x110 [ 312.143202][T16324] smc_clcsock_release+0x60/0xf0 [ 312.143217][T16324] __smc_release+0x66b/0x7e0 [ 312.143235][T16324] ? __local_bh_enable_ip+0xd0/0x130 [ 312.143250][T16324] smc_close_non_accepted+0xd5/0x1f0 [ 312.143269][T16324] smc_close_active+0xb67/0xf10 [ 312.143284][T16324] ? __pfx_sock_def_readable+0x10/0x10 [ 312.143300][T16324] __smc_release+0x8d/0x7e0 [ 312.143317][T16324] ? __local_bh_enable_ip+0xd0/0x130 [ 312.143332][T16324] smc_release+0x2ce/0x560 [ 312.143350][T16324] sock_close+0xc3/0x240 [ 312.143365][T16324] ? __pfx_sock_close+0x10/0x10 [ 312.143378][T16324] __fput+0x44f/0xa60 [ 312.143398][T16324] task_work_run+0x1d9/0x270 [ 312.143416][T16324] ? __pfx_task_work_run+0x10/0x10 [ 312.143432][T16324] ? do_raw_spin_unlock+0xf5/0x210 [ 312.143451][T16324] do_exit+0x70f/0x22c0 [ 312.143469][T16324] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 312.143489][T16324] ? __pfx_do_exit+0x10/0x10 [ 312.143504][T16324] ? preempt_schedule_thunk+0x16/0x30 [ 312.143521][T16324] ? preempt_schedule_common+0x82/0xd0 [ 312.143540][T16324] ? preempt_schedule_thunk+0x16/0x30 [ 312.143558][T16324] do_group_exit+0x21b/0x2d0 [ 312.143575][T16324] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.143589][T16324] __x64_sys_exit_group+0x3f/0x40 [ 312.143605][T16324] x64_sys_call+0x221a/0x2240 [ 312.143620][T16324] do_syscall_64+0x174/0x580 [ 312.143633][T16324] ? trace_irq_disable+0x3b/0x140 [ 312.143651][T16324] ? clear_bhb_loop+0x40/0x90 [ 312.143666][T16324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.143679][T16324] RIP: 0033:0x7fc45579ce59 [ 312.143692][T16324] Code: Unable to access opcode bytes at 0x7fc45579ce2f. [ 312.143698][T16324] RSP: 002b:00007ffe3cdd8238 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 312.143713][T16324] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00007fc45579ce59 [ 312.143722][T16324] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 000000000000000b [ 312.143730][T16324] RBP: 000000000000177b R08: 00007ffe3cdd86b7 R09: 000000000000000b [ 312.143739][T16324] R10: 00007fc455a15fa0 R11: 0000000000000246 R12: 0000000000000003 [ 312.143748][T16324] R13: 00007fc455a1627c R14: 00007fc455a16278 R15: 00007fc455a16270 [ 312.143763][T16324] [ 312.452775][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 312.982189][ T35] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.125462][ T35] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.181641][ T35] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.232820][ T35] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.333090][ T35] bridge_slave_1: left allmulticast mode [ 313.346815][ T35] bridge_slave_1: left promiscuous mode [ 313.353475][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.364951][ T35] bridge_slave_0: left allmulticast mode [ 313.370769][ T35] bridge_slave_0: left promiscuous mode [ 313.378745][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.388680][T15608] Set syz1 is full, maxelem 65536 reached [ 313.525095][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 313.605540][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 313.644039][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 313.664535][ T35] bond0 (unregistering): Released all slaves [ 313.741556][T15608] syz_tun (unregistering): left allmulticast mode [ 313.756115][T15608] syz_tun (unregistering): left promiscuous mode [ 313.770491][T15608] bridge0: port 4(syz_tun) entered disabled state [ 314.187109][ T35] hsr_slave_0: left promiscuous mode [ 314.209947][ T35] hsr_slave_1: left promiscuous mode [ 314.215965][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 314.223360][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 314.250474][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 314.258234][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 314.279680][ T35] veth1_macvtap: left promiscuous mode [ 314.296506][ T35] veth0_macvtap: left promiscuous mode [ 314.308077][ T35] veth1_vlan: left promiscuous mode [ 314.322134][ T35] veth0_vlan: left promiscuous mode [ 314.532257][ T35] team0 (unregistering): Port device team_slave_1 removed [ 314.554216][ T35] team0 (unregistering): Port device team_slave_0 removed [ 314.566551][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 314.637367][ T5292] 8021q: adding VLAN 0 to HW filter on device eth1 [ 315.040744][ T35] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.114931][ T35] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.138158][ T5292] 8021q: adding VLAN 0 to HW filter on device eth2 [ 315.194020][ T35] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.229266][T15678] Set syz1 is full, maxelem 65536 reached [ 315.242418][ T35] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.364557][ T35] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.441207][ T35] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.508216][ T35] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.548851][ T5292] 8021q: adding VLAN 0 to HW filter on device eth4 [ 315.581225][ T35] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.604989][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 315.699063][ T35] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.752130][ T35] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.819629][ T5292] 8021q: adding VLAN 0 to HW filter on device eth3 [ 315.832013][ T35] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.870117][ T35] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.971791][ T35] bridge_slave_1: left allmulticast mode [ 315.977551][ T35] bridge_slave_1: left promiscuous mode [ 315.983261][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.992093][ T35] bridge_slave_0: left allmulticast mode [ 315.999908][ T35] bridge_slave_0: left promiscuous mode [ 316.006108][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.018083][ T35] bridge_slave_1: left allmulticast mode [ 316.023767][ T35] bridge_slave_1: left promiscuous mode [ 316.029747][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.039750][ T35] bridge_slave_0: left allmulticast mode [ 316.045774][ T35] bridge_slave_0: left promiscuous mode [ 316.051502][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.068406][ T35] bridge_slave_1: left allmulticast mode [ 316.074092][ T35] bridge_slave_1: left promiscuous mode [ 316.079952][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.088761][ T35] bridge_slave_0: left allmulticast mode [ 316.094452][ T35] bridge_slave_0: left promiscuous mode [ 316.102750][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.227543][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 316.237667][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 316.247291][ T35] bond0 (unregistering): Released all slaves [ 316.377934][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 316.388102][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 316.397728][ T35] bond0 (unregistering): Released all slaves [ 316.406201][ T35] bond1 (unregistering): Released all slaves [ 316.415909][ T35] bond2 (unregistering): Released all slaves [ 316.509990][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 316.521437][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 316.531900][ T35] bond0 (unregistering): Released all slaves [ 316.540396][ T5292] 8021q: adding VLAN 0 to HW filter on device eth5 [ 316.645095][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 316.823018][ T5292] 8021q: adding VLAN 0 to HW filter on device eth6 [ 317.024595][ T35] hsr_slave_0: left promiscuous mode [ 317.030653][ T35] hsr_slave_1: left promiscuous mode [ 317.037069][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 317.044492][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 317.053149][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.062307][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 317.070123][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 317.083915][ T35] hsr_slave_0: left promiscuous mode [ 317.090145][ T35] hsr_slave_1: left promiscuous mode [ 317.096694][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 317.104172][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 317.112914][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 317.120431][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 317.133129][ T35] hsr_slave_0: left promiscuous mode [ 317.139625][ T35] hsr_slave_1: left promiscuous mode [ 317.145499][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 317.152989][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 317.160704][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 317.168586][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 317.182245][ T35] veth1_macvtap: left promiscuous mode [ 317.187962][ T35] veth0_macvtap: left promiscuous mode [ 317.193459][ T35] veth1_vlan: left promiscuous mode [ 317.198744][ T35] veth0_vlan: left promiscuous mode [ 317.204496][ T35] veth1_macvtap: left promiscuous mode [ 317.210098][ T35] veth0_macvtap: left promiscuous mode [ 317.215779][ T35] veth1_vlan: left promiscuous mode [ 317.221042][ T35] veth0_vlan: left promiscuous mode [ 317.227699][ T35] veth1_macvtap: left promiscuous mode [ 317.233212][ T35] veth0_macvtap: left promiscuous mode [ 317.238850][ T35] veth1_vlan: left promiscuous mode [ 317.244298][ T35] veth0_vlan: left promiscuous mode [ 317.387690][ T35] team0 (unregistering): Port device team_slave_1 removed [ 317.399421][ T35] team0 (unregistering): Port device team_slave_0 removed [ 317.495228][ T35] team0 (unregistering): Port device team_slave_1 removed [ 317.513213][ T35] team0 (unregistering): Port device team_slave_0 removed [ 317.605962][ T35] team0 (unregistering): Port device team_slave_1 removed [ 317.618782][ T35] team0 (unregistering): Port device team_slave_0 removed [ 317.661321][ T5292] 8021q: adding VLAN 0 to HW filter on device eth7 [ 317.685021][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 318.019738][ T5292] 8021q: adding VLAN 0 to HW filter on device eth8 [ 318.303892][ T5292] 8021q: adding VLAN 0 to HW filter on device eth9 [ 318.421799][ T35] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.463163][ T35] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.530979][ T35] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.548563][ T5292] 8021q: adding VLAN 0 to HW filter on device eth10 [ 318.580932][ T35] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.648609][ T35] bridge_slave_1: left allmulticast mode [ 318.654343][ T35] bridge_slave_1: left promiscuous mode [ 318.663022][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.671860][ T35] bridge_slave_0: left allmulticast mode [ 318.678020][ T35] bridge_slave_0: left promiscuous mode [ 318.683751][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.724940][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 318.828296][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 318.839098][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 318.849170][ T35] bond0 (unregistering): Released all slaves [ 318.864576][ T5292] 8021q: adding VLAN 0 to HW filter on device eth11 [ 319.056566][ T35] hsr_slave_0: left promiscuous mode [ 319.062612][ T35] hsr_slave_1: left promiscuous mode [ 319.068911][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 319.076722][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 319.084526][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 319.092807][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 319.104691][ T35] veth1_macvtap: left promiscuous mode [ 319.110665][ T35] veth0_macvtap: left promiscuous mode [ 319.116285][ T35] veth1_vlan: left promiscuous mode [ 319.121604][ T35] veth0_vlan: left promiscuous mode [ 319.201790][ T35] team0 (unregistering): Port device team_slave_1 removed [ 319.216368][ T35] team0 (unregistering): Port device team_slave_0 removed [ 319.254275][ T5292] 8021q: adding VLAN 0 to HW filter on device eth12 [ 319.618618][ T5292] 8021q: adding VLAN 0 to HW filter on device eth13 [ 319.764946][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 319.840735][ T5292] 8021q: adding VLAN 0 to HW filter on device eth14 [ 320.037960][ T5292] 8021q: adding VLAN 0 to HW filter on device eth15 [ 320.238937][ T5292] 8021q: adding VLAN 0 to HW filter on device eth16 [ 320.443957][ T5292] 8021q: adding VLAN 0 to HW filter on device eth17 [ 320.644938][ T5292] 8021q: adding VLAN 0 to HW filter on device eth18 [ 320.804895][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 320.874379][ T5292] 8021q: adding VLAN 0 to HW filter on device eth19 [ 321.083399][ T5292] 8021q: adding VLAN 0 to HW filter on device eth20