last executing test programs: 17.715112367s ago: executing program 4 (id=2640): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x11, 0x15, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000500180100002020692500000000002020206b1a00fe00000000bfa100000000000007010000f8fffdffb702000008000000b703000000000000650000000600000085100000010000009500000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x63}, 0x94) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x14, 0x28, 0x9, 0x2, 0x25dfdbff, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0xe41d24db441637ff}, 0x44080) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'gretap0\x00'}) (async, rerun: 64) syz_genetlink_get_family_id$nl802154(&(0x7f0000000380), r0) (rerun: 64) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000003c0)={'wpan1\x00'}) (async) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x54, r1, 0x1, 0x70bd2a, 0x25dfdbf8, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0302}}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0202}}, @NL802154_ATTR_EXTENDED_ADDR={0xc}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x448c4}, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f00000001c0)={[{0x2d, 'blkio'}]}, 0x7) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000200000000000000000000030000000002000000020000000000000000000000000000010500f000080000000000000001000005000000000000000002"], 0x0, 0x5a}, 0x28) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), 0xffffffffffffffff) 17.359922753s ago: executing program 4 (id=2644): r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1802000080ffffff0000000000000000850000003600000085000000080000009500"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000a80)={r3, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x42, &(0x7f0000000140)={@multicast, @local, @val={@void, {0x8100, 0x7, 0x0, 0x2}}, {@ipv6={0x86dd, @udp={0x0, 0x6, "010700", 0x8, 0x11, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], {0x0, 0x4e22, 0x8}}}}}}, 0x0) connect$inet6(r0, &(0x7f0000000240)={0xa, 0xffff, 0x4462, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xd38f}, 0x1c) ioctl$XFS_IOC_PATH_TO_HANDLE(r4, 0xc0385869, &(0x7f0000000400)={r1, &(0x7f0000000300)='syz_tun\x00', 0x0, &(0x7f0000000340)={@align=0x8000000000000001, {0x9, 0x400, 0xa, 0x7}}, 0x4, &(0x7f0000000380)={@_ha_fsid}, &(0x7f00000003c0)=0x5}) sendmsg$IPCTNL_MSG_CT_GET_DYING(r5, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, 0x6, 0x1, 0x301, 0x0, 0x0, {0x5, 0x0, 0x5}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x40) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000040008002000128008000100736974001400028005000a0000000000060008000b000000"], 0x40}}, 0x4010) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x11, &(0x7f00000000c0)=0x20002, 0x4) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) sendto$inet(r7, 0x0, 0x0, 0x20000010, &(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) recvmsg(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000000180)=""/103, 0x67}], 0x3}, 0x400002e1) sendmsg$FOU_CMD_ADD(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01002dbd7000000000000100000008000600e0000001050004000100000008000b"], 0x2c}, 0x1, 0x0, 0x0, 0x20048091}, 0x601) sendmmsg$inet6(r0, &(0x7f0000005700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002\x00'/30, @ANYRES32=0x0, @ANYBLOB="0000000018"], 0x40}}], 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000000200)={'IDLETIMER\x00'}, &(0x7f00000002c0)=0x1e) 15.720894851s ago: executing program 4 (id=2647): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000f9dbdf250100000008000100", @ANYRES32=r2, @ANYBLOB="400002803c00010024000100656e61626c6564000000000000000000000026000000000000000000000000000500030006"], 0x5c}, 0x1, 0x400000000000000, 0x0, 0x90}, 0x4040094) 14.729285316s ago: executing program 4 (id=2655): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r1) sendmsg$IEEE802154_LLSEC_SETPARAMS(r1, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000001280)=ANY=[@ANYBLOB='\vF\a|', @ANYRES16=r2, @ANYBLOB="0100b1bd7000fbdbdf25250000000a0001007770616e3000000005002b000300000005002e00fb00000005002b0001000000"], 0x38}, 0x1, 0x0, 0x0, 0x2004c800}, 0x20000014) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r3, 0x0) (async) r4 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="14000000040000000800000006"], 0x48) (async) r5 = socket$inet6(0xa, 0x3, 0x6) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01010000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000002e680000000c0a01030000000000000000070000080900020073797a31000000000900010073797a30000000003c0003803800008008000340000000022c000b80140001800c000100636f756e74657200040001"], 0xec}}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r4, &(0x7f0000000280), &(0x7f0000001840)=@udp6=r5}, 0x20) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f00000002c0)=0x2, 0x2) 14.547524929s ago: executing program 4 (id=2657): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg$kcm(r1, &(0x7f0000005140)={0x0, 0x14, &(0x7f0000005000)=[{&(0x7f0000000340)=""/182, 0xb6}], 0x1}, 0x100b6) 13.59448952s ago: executing program 4 (id=2663): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r2}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg$kcm(r1, &(0x7f0000005140)={0x0, 0x0, 0x0}, 0x100b6) 12.791091431s ago: executing program 3 (id=2673): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f00000001c0)=@raw=[@call={0x85, 0x0, 0x0, 0x50}, @exit], &(0x7f0000000180)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0xfffffffffffffffe, 0x0) 11.951524448s ago: executing program 2 (id=2684): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x11, &(0x7f0000000300)=[{&(0x7f00000006c0)="d800000018007b18e00212ba0d8105040a0a1100fe0f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b01602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5", 0xd2}, {&(0x7f00000004c0)="f80ec2e2badd", 0x6}], 0x2, 0x0, 0x0, 0x2663}, 0x0) 11.914212247s ago: executing program 3 (id=2685): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@ipv6_delroute={0x30, 0x19, 0x1, 0x70bd2a, 0x25dfdbfd, {0xa, 0x14, 0x1c, 0x0, 0xff, 0x1, 0xc8, 0xb, 0x3e00}, [@RTA_OIF={0x8, 0x1e}, @RTA_MULTIPATH={0xc, 0x9, {0x3, 0x10}}]}, 0x30}, 0x1, 0x0, 0x0, 0x30000000}, 0x20000880) 11.832401662s ago: executing program 2 (id=2686): connect$unix(0xffffffffffffffff, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x46, &(0x7f0000000000)={@multicast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x64, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x19}}, @time_exceeded={0x5, 0xea452954ff7d0934, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0xd, 0x1, 0x1, @dev={0xac, 0x14, 0x14, 0x9a}, @remote}, "001863714ab99043"}}}}}, 0x0) 11.720798257s ago: executing program 3 (id=2687): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000980)={0x6}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)={0x18, 0x52, 0x1, 0x0, 0x4, {0x2}, [@typed={0x4, 0x1, 0x0, 0x0, @binary}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 11.687125234s ago: executing program 2 (id=2689): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000390400000000fbdbdf2500000000", @ANYRES32=r2, @ANYBLOB="010f0000419a04002000128008000100736974001400028008000300ac1414"], 0x40}}, 0x0) socket$packet(0x11, 0x3, 0x300) sendto$packet(r0, &(0x7f0000000400)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, r2, 0x1, 0x4, 0x6, @local}, 0x14) 11.440727466s ago: executing program 1 (id=2691): r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000180)=0x80000001, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xf, 0xf, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x346aeffd, 0x0, 0x0, 0x0, 0x3}, {{}, {}, {}, {0x85, 0x0, 0x0, 0xbb}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0xba}}}, 0x0, 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) syz_emit_ethernet(0x32, &(0x7f0000001140)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x24, 0x66, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@timestamp={0x44, 0x4, 0x8d}]}}, {0x1, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) 11.128330087s ago: executing program 3 (id=2694): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)={0x58, r1, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x4}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "9ea2d32815a5b100"/20}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x806}, 0x0) 10.641064695s ago: executing program 0 (id=2695): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@setlink={0x28, 0x13, 0x1, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, 0x12a0e, 0x409}, [@IFLA_MASTER={0x8, 0xa, r1}]}, 0x28}, 0x1, 0x0, 0x0, 0x34004c01}, 0x8804) 10.607010381s ago: executing program 2 (id=2696): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x259fdafd, {0x0, 0x0, 0x0, r6, {0xc, 0xc}, {0x1, 0xfff1}, {0x0, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 10.52576815s ago: executing program 1 (id=2697): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000002f80)=[{{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000300)="99", 0x1}], 0x1}}], 0x1, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000280)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000400)={0x93de, 0x1, 0x0, 0x3, 0x1ff, 0x7, 0xdff8, 0xb, r1}, 0x20) 10.41169532s ago: executing program 1 (id=2698): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x4e22, @remote}, 0xa) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f00000002c0)={0x0, 'batadv0\x00', 0x1}, 0x18) 9.775464634s ago: executing program 0 (id=2699): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000280)={'dummy0\x00', &(0x7f0000000100)=@ethtool_sset_info={0x2a, 0x2, 0xfffffffffffffffa}}) 9.704332893s ago: executing program 1 (id=2700): r0 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010000000000fedb2fe35a1d000008000300", @ANYRES32=r3], 0x1c}}, 0x0) 9.530177143s ago: executing program 0 (id=2701): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetlb.1GB.usage_in_bytes\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x11, '\x00', 0x0, @sk_lookup, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2000000, 0x46, 0x0, 0x0, 0x0, 0x3}, 0xe) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func={0x0, 0x0, 0x0, 0xc, 0x1}]}}, 0x0, 0x26}, 0x28) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r3, &(0x7f0000000400), &(0x7f0000000280)=""/113}, 0x20) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4) sendmsg$kcm(r0, &(0x7f0000002480)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000e00)="e6aa32d992d8a2500450a2cccb8d93473349242af364b2b1b2c8e76fa26376fab03e8832a2cb5a5fcfb1ae163e925630e6a841d8810aa931d441659a54b8bc2ccf739424c6ea9ce59d041cd86436280d9c3b366162d37eb30f137d659b26a796843c26519c9fc2328257cd08307a51d0c230a90adc03cbf1250e8dd3b0f7d61231e1ffeed6db8ecb1164f3bbc6072326301909408211cc0514b673c7cfc5146f809c06c2a868c9f0822fa83c036d4aedac918d52a1bdde9482b617378bb73d8eb1123ee708a41561cc0af96b5fb1fabba78aa4b56c9ff4f0bd15e5a64590484b71d5e3ce874e1f8bc4c4a114d66c4ec8a82fc419071af20c14d72e782f5e818547528151de192fc19aeb69af4454b3e22d2614250002bb36817d92d4d688f0eb179726b8ddf413c185f0feca2240b014fe91f8682b52ee81f92e3d0366c01830b26aaa5bc56eeb38c93a6c5d6e8ae03b4042de611aacdc2a4198f91e158219ca52b2870c038afe6360605013fa75f800cd7f25bbee435f0e04d902ff5fd55f92ad58ae3f2f7ca1e22ba34d04363f19fd9673707a5ade769008dc1f2d0b4c39c600a38edf22be6de1f283f7dd7f38abf124c0c5d0a929bfce22c888f9da4e89eec650a8adaa33b21b2f693ae41bcd409592c386993b58c0716010b61543714b170a0aa815d73d2ba6df2571cc53b134335d28630bfedb1e06679d2831d1cb0729c890b640b974a32a60c4240b8082e1b014828c0b743202a2ecc33d0d68e9e578b90cd21abb31865901b440f2daf086014bd81a484e505602298f3740c7e3103eca00dc1b2be2077a641dc3f82fd3baeb76fa9fb7aa27a7fa4507fa88f7c42bc6e6721c703abcfce17ae365c5aba8ca4d1377dd7a70b53cb12b47cff277716fa93f56b1c88649a32ebfb3f04091b505463bef312f49d8ae7623913ea1bcf36be8702b973665f6c4139425b484633359d5023604f1b2a0717cf56fe9930326cf302e4a11616f6c5c4225f0d0b9742b1e4c1f6f5b85b17524d729bd3deadcf2df717692b15c75c924d2d554cb7c1d66977c30144b", 0x2f3}], 0x1}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)="d80000001800810804008e4a20b03957ad685373", 0x14}], 0x1, 0x0, 0x0, 0x6000}, 0x6000800) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f7d28344b904020000", 0x2}], 0x1}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x33fe0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0x2ee0}], 0x13, 0x0, 0x0, 0x10000000}, 0x12cd) 9.440012226s ago: executing program 3 (id=2702): r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e21}}, 0x24) sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[{0x18, 0x110, 0x1, "e4"}], 0x18, 0xe000}, 0x5}], 0x1, 0x0) 9.41129329s ago: executing program 2 (id=2703): socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x7, 0x4) bind$inet(r0, 0x0, 0x0) close(0x5) 9.364323771s ago: executing program 0 (id=2704): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1, 0xf, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014002000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000900)=r3, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd2f, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}}, 0x24}}, 0x44080) 9.234000581s ago: executing program 2 (id=2705): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) r1 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r1, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x810, 0x0, 0x0) 9.048017095s ago: executing program 3 (id=2706): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) recvmmsg(r0, &(0x7f0000006e80)=[{{0x0, 0x0, &(0x7f0000001940)=[{&(0x7f0000001580)=""/89, 0x59}, {0x0}], 0x2}, 0x6}], 0x1, 0x10020, 0x0) syz_emit_ethernet(0x6f, &(0x7f0000007600)={@random="d3f34746b238", @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x61, 0x0, 0x0, 0xfd, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x4e20, 0x4d, 0x0, @opaque="a90e0dd8d3511c97ddce90792e3a40491d037f720597c76fb6e2d968061de69e04c2de512968ab6e2cf664c7ffd408d49d398a738c110526613934897b014acb03d4e7abcf"}}}}}, 0x0) 8.773426507s ago: executing program 0 (id=2707): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x38, r1, 0x1, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x51}, 0x4008850) 8.665184129s ago: executing program 1 (id=2708): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000340)={0x1, 0x80000004}, 0x8) sendmmsg$inet6(r0, &(0x7f0000005700)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @mcast2, 0xd}, 0x1c, 0x0}}], 0x1, 0x4004800) 8.333567723s ago: executing program 0 (id=2709): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r1], 0x90}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f00000000c0), 0x492492492492627, 0x0) 0s ago: executing program 1 (id=2710): syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x7, 0x20, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) kernel console output (not intermixed with test programs): 0.0.2:0 - no destination available [ 276.345145][T12132] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1846'. [ 276.877509][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 277.126616][T12160] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 277.225531][T12165] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 277.276680][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 277.519900][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 277.595052][T12178] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1859'. [ 277.674041][T12181] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 277.981187][T12195] syzkaller0: refused to change device tx_queue_len [ 278.000989][T12195] netlink: 'syz.0.1862': attribute type 1 has an invalid length. [ 278.210509][T12202] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 278.316458][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 278.690314][T12223] netlink: 'syz.2.1867': attribute type 1 has an invalid length. [ 278.956868][T12238] tipc: Enabling of bearer rejected, already enabled [ 279.070520][T12245] SET target dimension over the limit! [ 279.093500][T12241] syzkaller0: entered promiscuous mode [ 279.103668][T12241] syzkaller0: entered allmulticast mode [ 279.245235][T12249] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1878'. [ 279.356575][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 279.487659][T12261] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1883'. [ 279.575199][T12265] lo speed is unknown, defaulting to 1000 [ 279.640636][T12265] lo speed is unknown, defaulting to 1000 [ 279.655543][T12269] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1886'. [ 279.667250][T12265] lo speed is unknown, defaulting to 1000 [ 279.683810][T12269] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1886'. [ 280.046511][T12265] infiniband syz1: set active [ 280.052630][T12265] infiniband syz1: added lo [ 280.079838][T12265] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 280.095203][T12265] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 280.112958][T12265] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 280.160617][ T42] lo speed is unknown, defaulting to 1000 [ 280.214342][T12265] RDS/IB: syz1: added [ 280.239628][T12265] smc: adding ib device syz1 with port count 1 [ 280.274212][T12265] smc: ib device syz1 port 1 has no pnetid [ 280.303696][ T42] lo speed is unknown, defaulting to 1000 [ 280.325951][T12265] lo speed is unknown, defaulting to 1000 [ 280.396427][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 280.661760][T12265] lo speed is unknown, defaulting to 1000 [ 281.155616][T12265] lo speed is unknown, defaulting to 1000 [ 281.436682][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 281.643513][T12265] lo speed is unknown, defaulting to 1000 [ 281.753956][T12326] sch_tbf: burst 823 is lower than device syzkaller0 mtu (1514) ! [ 281.773936][T12326] syzkaller0: entered promiscuous mode [ 281.787779][T12326] syzkaller0: entered allmulticast mode [ 281.998196][ C1] batman_adv: batadv1: adding TT local entry aa:aa:aa:aa:aa:0c to non-existent VLAN 2 [ 282.078117][T12331] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1904'. [ 282.097779][T12331] tipc: Enabling of bearer rejected, failed to enable media [ 282.191424][T12265] lo speed is unknown, defaulting to 1000 [ 282.478908][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 282.631480][T12353] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 283.091110][T12367] xt_SECMARK: invalid mode: 4 [ 283.198167][T12370] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1916'. [ 283.305925][T12373] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1917'. [ 283.319627][T12370] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1916'. [ 283.362301][T12373] n: the hash_elasticity option has been deprecated and is always 16 [ 283.380702][T12376] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1917'. [ 283.386513][T12373] n: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 283.458176][T12376] n: the hash_elasticity option has been deprecated and is always 16 [ 283.484951][T12376] n: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 283.516701][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 283.574123][T12386] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1919'. [ 283.589209][T12387] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1921'. [ 283.609459][T12387] openvswitch: netlink: Missing key (keys=40, expected=100) [ 283.618330][T12374] lo speed is unknown, defaulting to 1000 [ 283.731252][T12374] lo speed is unknown, defaulting to 1000 [ 283.798640][T12392] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1922'. [ 284.290213][T12407] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 284.556635][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 284.932067][T12439] Cannot find map_set index 0 as target [ 285.185564][T12445] pim6reg: entered allmulticast mode [ 285.217774][T12447] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1941'. [ 285.596657][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 285.711301][T12457] FAULT_INJECTION: forcing a failure. [ 285.711301][T12457] name failslab, interval 1, probability 0, space 0, times 0 [ 285.724002][T12457] CPU: 0 UID: 0 PID: 12457 Comm: syz.0.1946 Not tainted syzkaller #0 PREEMPT(full) [ 285.724027][T12457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 285.724038][T12457] Call Trace: [ 285.724053][T12457] [ 285.724061][T12457] dump_stack_lvl+0xe8/0x150 [ 285.724093][T12457] should_fail_ex+0x40c/0x560 [ 285.724127][T12457] should_failslab+0xa8/0x100 [ 285.724154][T12457] kmem_cache_alloc_bulk_noprof+0x8b/0x7b0 [ 285.724180][T12457] ? pfn_valid+0x125/0x4c0 [ 285.724205][T12457] ? pfn_valid+0x125/0x4c0 [ 285.724229][T12457] ? pfn_valid+0x125/0x4c0 [ 285.724257][T12457] bpf_test_run_xdp_live+0x16e9/0x1c20 [ 285.724294][T12457] ? bpf_test_run_xdp_live+0x43e/0x1c20 [ 285.724328][T12457] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 285.724354][T12457] ? 0xffffffffa02057c0 [ 285.724416][T12457] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 285.724449][T12457] ? _copy_from_user+0x94/0xb0 [ 285.724471][T12457] ? bpf_test_init+0x113/0x150 [ 285.724493][T12457] ? xdp_convert_md_to_buff+0x5b/0x330 [ 285.724518][T12457] bpf_prog_test_run_xdp+0x7d8/0x11d0 [ 285.724557][T12457] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 285.724586][T12457] ? __fget_files+0x2a/0x420 [ 285.724614][T12457] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 285.724639][T12457] bpf_prog_test_run+0x2c5/0x340 [ 285.724669][T12457] __sys_bpf+0xa22/0xd90 [ 285.724701][T12457] ? __pfx___sys_bpf+0x10/0x10 [ 285.724736][T12457] ? __fget_files+0x2a/0x420 [ 285.724777][T12457] ? ksys_write+0x242/0x270 [ 285.724806][T12457] ? __pfx_ksys_write+0x10/0x10 [ 285.724869][T12457] __x64_sys_bpf+0xba/0xd0 [ 285.724895][T12457] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.724916][T12457] do_syscall_64+0x174/0x580 [ 285.724935][T12457] ? trace_irq_disable+0x3b/0x140 [ 285.724959][T12457] ? clear_bhb_loop+0x40/0x90 [ 285.724981][T12457] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.725000][T12457] RIP: 0033:0x7ff4c819de59 [ 285.725017][T12457] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 285.725033][T12457] RSP: 002b:00007ff4c9100028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 285.725059][T12457] RAX: ffffffffffffffda RBX: 00007ff4c8425fa0 RCX: 00007ff4c819de59 [ 285.725073][T12457] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 285.725085][T12457] RBP: 00007ff4c9100090 R08: 0000000000000000 R09: 0000000000000000 [ 285.725096][T12457] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 285.725108][T12457] R13: 00007ff4c8426038 R14: 00007ff4c8425fa0 R15: 00007ffcc9dfd878 [ 285.725139][T12457] [ 286.159368][T12463] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1948'. [ 286.636426][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 286.808096][T12494] FAULT_INJECTION: forcing a failure. [ 286.808096][T12494] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 286.830617][T12494] CPU: 1 UID: 0 PID: 12494 Comm: syz.2.1957 Not tainted syzkaller #0 PREEMPT(full) [ 286.830643][T12494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 286.830653][T12494] Call Trace: [ 286.830660][T12494] [ 286.830667][T12494] dump_stack_lvl+0xe8/0x150 [ 286.830697][T12494] should_fail_ex+0x40c/0x560 [ 286.830727][T12494] _copy_to_user+0x31/0xb0 [ 286.830751][T12494] generic_map_lookup_batch+0xa93/0xeb0 [ 286.830782][T12494] ? __pfx_generic_map_lookup_batch+0x10/0x10 [ 286.830800][T12494] ? __fget_files+0x2a/0x420 [ 286.830827][T12494] ? __pfx_generic_map_lookup_batch+0x10/0x10 [ 286.830848][T12494] bpf_map_do_batch+0x27f/0x630 [ 286.830872][T12494] ? bpf_lsm_bpf+0x9/0x20 [ 286.830893][T12494] ? security_bpf+0x7e/0x2d0 [ 286.830916][T12494] __sys_bpf+0xa9f/0xd90 [ 286.830947][T12494] ? __pfx___sys_bpf+0x10/0x10 [ 286.830976][T12494] ? __fget_files+0x2a/0x420 [ 286.831011][T12494] ? ksys_write+0x242/0x270 [ 286.831038][T12494] ? __pfx_ksys_write+0x10/0x10 [ 286.831064][T12494] __x64_sys_bpf+0xba/0xd0 [ 286.831082][T12494] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.831101][T12494] do_syscall_64+0x174/0x580 [ 286.831120][T12494] ? trace_irq_disable+0x3b/0x140 [ 286.831142][T12494] ? clear_bhb_loop+0x40/0x90 [ 286.831161][T12494] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.831177][T12494] RIP: 0033:0x7f9348f9de59 [ 286.831192][T12494] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 286.831207][T12494] RSP: 002b:00007f9349e68028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 286.831226][T12494] RAX: ffffffffffffffda RBX: 00007f9349225fa0 RCX: 00007f9348f9de59 [ 286.831240][T12494] RDX: 0000000000000038 RSI: 00002000000003c0 RDI: 0000000000000018 [ 286.831251][T12494] RBP: 00007f9349e68090 R08: 0000000000000000 R09: 0000000000000000 [ 286.831260][T12494] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 286.831270][T12494] R13: 00007f9349226038 R14: 00007f9349225fa0 R15: 00007ffe415044f8 [ 286.831294][T12494] [ 287.150807][T12503] FAULT_INJECTION: forcing a failure. [ 287.150807][T12503] name failslab, interval 1, probability 0, space 0, times 0 [ 287.168571][T12503] CPU: 0 UID: 0 PID: 12503 Comm: syz.2.1961 Not tainted syzkaller #0 PREEMPT(full) [ 287.168598][T12503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 287.168609][T12503] Call Trace: [ 287.168617][T12503] [ 287.168624][T12503] dump_stack_lvl+0xe8/0x150 [ 287.168657][T12503] should_fail_ex+0x40c/0x560 [ 287.168691][T12503] should_failslab+0xa8/0x100 [ 287.168721][T12503] __kmalloc_cache_noprof+0xa8/0x660 [ 287.168745][T12503] ? __kmalloc_cache_noprof+0x150/0x660 [ 287.168767][T12503] ? sctp_add_bind_addr+0x8c/0x370 [ 287.168794][T12503] ? sctp_add_bind_addr+0x8c/0x370 [ 287.168828][T12503] sctp_add_bind_addr+0x8c/0x370 [ 287.168861][T12503] sctp_copy_local_addr_list+0x31a/0x4e0 [ 287.168893][T12503] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 287.168923][T12503] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 287.168954][T12503] ? sctp_v6_is_any+0x64/0x80 [ 287.168974][T12503] ? sctp_copy_one_addr+0x93/0x360 [ 287.169006][T12503] sctp_bind_addr_copy+0xb3/0x3c0 [ 287.169035][T12503] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 287.169073][T12503] sctp_connect_new_asoc+0x2ff/0x6b0 [ 287.169099][T12503] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 287.169127][T12503] ? __local_bh_enable_ip+0xd0/0x130 [ 287.169148][T12503] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 287.169169][T12503] ? security_sctp_bind_connect+0x7e/0x2c0 [ 287.169195][T12503] sctp_sendmsg+0x159b/0x2d00 [ 287.169232][T12503] ? __pfx_sctp_sendmsg+0x10/0x10 [ 287.169259][T12503] ? aa_sk_perm+0x6d5/0x900 [ 287.169290][T12503] ? __might_fault+0xaf/0x130 [ 287.169315][T12503] ? sock_rps_record_flow+0x19/0x350 [ 287.169338][T12503] ? inet_sendmsg+0x298/0x320 [ 287.169359][T12503] ? __pfx_inet_sendmsg+0x10/0x10 [ 287.169378][T12503] sock_sendmsg_nosec+0x10e/0x180 [ 287.169409][T12503] __sys_sendto+0x408/0x5a0 [ 287.169430][T12503] ? ksys_write+0x1e6/0x270 [ 287.169462][T12503] ? __pfx___sys_sendto+0x10/0x10 [ 287.169480][T12503] ? __mutex_unlock_slowpath+0x731/0x900 [ 287.169531][T12503] ? __pfx_ksys_write+0x10/0x10 [ 287.169564][T12503] __x64_sys_sendto+0xde/0x100 [ 287.169586][T12503] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.169610][T12503] do_syscall_64+0x174/0x580 [ 287.169629][T12503] ? trace_irq_disable+0x3b/0x140 [ 287.169653][T12503] ? clear_bhb_loop+0x40/0x90 [ 287.169676][T12503] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.169695][T12503] RIP: 0033:0x7f9348f9de59 [ 287.169713][T12503] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 287.169729][T12503] RSP: 002b:00007f9349e68028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 287.169749][T12503] RAX: ffffffffffffffda RBX: 00007f9349225fa0 RCX: 00007f9348f9de59 [ 287.169763][T12503] RDX: 0000000000000001 RSI: 0000200000000280 RDI: 0000000000000003 [ 287.169775][T12503] RBP: 00007f9349e68090 R08: 0000200000000040 R09: 000000000000001c [ 287.169788][T12503] R10: 00000000200400d0 R11: 0000000000000246 R12: 0000000000000002 [ 287.169799][T12503] R13: 00007f9349226038 R14: 00007f9349225fa0 R15: 00007ffe415044f8 [ 287.169831][T12503] [ 287.538788][T12505] gre0: left promiscuous mode [ 287.543554][T12505] gre0: left allmulticast mode [ 287.563279][T12507] FAULT_INJECTION: forcing a failure. [ 287.563279][T12507] name failslab, interval 1, probability 0, space 0, times 0 [ 287.563661][T12505] dummy0: left promiscuous mode [ 287.576007][T12507] CPU: 0 UID: 0 PID: 12507 Comm: syz.2.1963 Not tainted syzkaller #0 PREEMPT(full) [ 287.576031][T12507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 287.576041][T12507] Call Trace: [ 287.576050][T12507] [ 287.576058][T12507] dump_stack_lvl+0xe8/0x150 [ 287.576088][T12507] should_fail_ex+0x40c/0x560 [ 287.576122][T12507] should_failslab+0xa8/0x100 [ 287.576150][T12507] __kmalloc_cache_noprof+0xa8/0x660 [ 287.576172][T12507] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 287.576198][T12507] ? __kmalloc_cache_noprof+0x150/0x660 [ 287.576219][T12507] ? sctp_add_bind_addr+0x8c/0x370 [ 287.576245][T12507] ? sctp_add_bind_addr+0x8c/0x370 [ 287.576277][T12507] sctp_add_bind_addr+0x8c/0x370 [ 287.576309][T12507] sctp_copy_local_addr_list+0x31a/0x4e0 [ 287.576342][T12507] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 287.576370][T12507] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 287.576399][T12507] ? sctp_v6_is_any+0x64/0x80 [ 287.576419][T12507] ? sctp_copy_one_addr+0x93/0x360 [ 287.576450][T12507] sctp_bind_addr_copy+0xb3/0x3c0 [ 287.576478][T12507] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 287.576506][T12507] sctp_connect_new_asoc+0x2ff/0x6b0 [ 287.576531][T12507] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 287.576559][T12507] ? __local_bh_enable_ip+0xd0/0x130 [ 287.576578][T12507] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 287.576598][T12507] ? security_sctp_bind_connect+0x7e/0x2c0 [ 287.576623][T12507] sctp_sendmsg+0x159b/0x2d00 [ 287.576659][T12507] ? __pfx_sctp_sendmsg+0x10/0x10 [ 287.576686][T12507] ? aa_sk_perm+0x6d5/0x900 [ 287.576715][T12507] ? __might_fault+0xaf/0x130 [ 287.576739][T12507] ? sock_rps_record_flow+0x19/0x350 [ 287.576761][T12507] ? inet_sendmsg+0x298/0x320 [ 287.576781][T12507] ? __pfx_inet_sendmsg+0x10/0x10 [ 287.576799][T12507] sock_sendmsg_nosec+0x10e/0x180 [ 287.576830][T12507] __sys_sendto+0x408/0x5a0 [ 287.576856][T12507] ? ksys_write+0x1e6/0x270 [ 287.576886][T12507] ? __pfx___sys_sendto+0x10/0x10 [ 287.576904][T12507] ? __mutex_unlock_slowpath+0x731/0x900 [ 287.576952][T12507] ? __pfx_ksys_write+0x10/0x10 [ 287.576984][T12507] __x64_sys_sendto+0xde/0x100 [ 287.577005][T12507] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.577026][T12507] do_syscall_64+0x174/0x580 [ 287.577046][T12507] ? trace_irq_disable+0x3b/0x140 [ 287.577068][T12507] ? clear_bhb_loop+0x40/0x90 [ 287.577090][T12507] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.577108][T12507] RIP: 0033:0x7f9348f9de59 [ 287.577127][T12507] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 287.577142][T12507] RSP: 002b:00007f9349e68028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 287.577161][T12507] RAX: ffffffffffffffda RBX: 00007f9349225fa0 RCX: 00007f9348f9de59 [ 287.577175][T12507] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000003 [ 287.577185][T12507] RBP: 00007f9349e68090 R08: 0000200000000280 R09: 000000000000001c [ 287.577198][T12507] R10: 0000000000000081 R11: 0000000000000246 R12: 0000000000000002 [ 287.577209][T12507] R13: 00007f9349226038 R14: 00007f9349225fa0 R15: 00007ffe415044f8 [ 287.577239][T12507] [ 287.676499][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 287.698480][T12505] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 287.699880][ T42] lo speed is unknown, defaulting to 1000 [ 288.174925][T12522] __nla_validate_parse: 2 callbacks suppressed [ 288.174943][T12522] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1969'. [ 288.472283][T12541] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1965'. [ 288.517481][T12532] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1972'. [ 288.545169][T12532] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1972'. [ 288.574410][T12544] netlink: 'syz.0.1975': attribute type 4 has an invalid length. [ 288.600230][T12544] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1975'. [ 288.716476][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 288.825076][T12561] xt_hashlimit: max too large, truncated to 1048576 [ 288.912104][T12566] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1981'. [ 288.955589][T12568] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1982'. [ 289.067757][T12574] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1976'. [ 289.076959][T12574] hsr_slave_0: left promiscuous mode [ 289.083202][T12574] hsr_slave_1: left promiscuous mode [ 289.189556][T12578] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1986'. [ 289.302656][T12586] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 289.450498][T12593] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1991'. [ 289.553400][T12596] geneve2: entered promiscuous mode [ 289.756673][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 289.809514][T12606] x_tables: duplicate entry at hook 1 [ 290.143419][T12620] SET target dimension over the limit! [ 290.263129][T12626] netlink: 'syz.2.2005': attribute type 49 has an invalid length. [ 290.555440][ T48] nci: nci_rx_work: unknown MT 0x1 [ 290.592832][T12648] netlink: 'syz.4.2010': attribute type 10 has an invalid length. [ 290.626619][T12648] team0: Port device dummy0 added [ 290.635685][T12648] netlink: 'syz.4.2010': attribute type 10 has an invalid length. [ 290.704990][T12653] raw_sendmsg: syz.4.2013 forgot to set AF_INET. Fix it! [ 290.796432][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 291.222264][T12633] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 291.541762][T12687] bridge0: port 3(batadv0) entered disabled state [ 291.592388][T12687] batadv0 (unregistering): left allmulticast mode [ 291.632157][T12687] batadv0 (unregistering): left promiscuous mode [ 291.667291][T12687] bridge0: port 3(batadv0) entered disabled state [ 291.836585][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 292.152090][T12730] FAULT_INJECTION: forcing a failure. [ 292.152090][T12730] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 292.169548][T12730] CPU: 1 UID: 0 PID: 12730 Comm: syz.0.2041 Not tainted syzkaller #0 PREEMPT(full) [ 292.169573][T12730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 292.169592][T12730] Call Trace: [ 292.169599][T12730] [ 292.169606][T12730] dump_stack_lvl+0xe8/0x150 [ 292.169638][T12730] should_fail_ex+0x40c/0x560 [ 292.169672][T12730] _copy_to_user+0x31/0xb0 [ 292.169695][T12730] generic_map_lookup_batch+0xa39/0xeb0 [ 292.169729][T12730] ? __pfx_generic_map_lookup_batch+0x10/0x10 [ 292.169749][T12730] ? __fget_files+0x2a/0x420 [ 292.169775][T12730] ? __pfx_generic_map_lookup_batch+0x10/0x10 [ 292.169797][T12730] bpf_map_do_batch+0x27f/0x630 [ 292.169821][T12730] ? bpf_lsm_bpf+0x9/0x20 [ 292.169841][T12730] ? security_bpf+0x7e/0x2d0 [ 292.169866][T12730] __sys_bpf+0xa9f/0xd90 [ 292.169896][T12730] ? __pfx___sys_bpf+0x10/0x10 [ 292.169931][T12730] ? __fget_files+0x2a/0x420 [ 292.169967][T12730] ? ksys_write+0x242/0x270 [ 292.169995][T12730] ? __pfx_ksys_write+0x10/0x10 [ 292.170025][T12730] __x64_sys_bpf+0xba/0xd0 [ 292.170045][T12730] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.170064][T12730] do_syscall_64+0x174/0x580 [ 292.170083][T12730] ? trace_irq_disable+0x3b/0x140 [ 292.170104][T12730] ? clear_bhb_loop+0x40/0x90 [ 292.170126][T12730] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.170145][T12730] RIP: 0033:0x7ff4c819de59 [ 292.170163][T12730] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 292.170179][T12730] RSP: 002b:00007ff4c9100028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 292.170199][T12730] RAX: ffffffffffffffda RBX: 00007ff4c8425fa0 RCX: 00007ff4c819de59 [ 292.170211][T12730] RDX: 0000000000000038 RSI: 00002000000003c0 RDI: 0000000000000018 [ 292.170222][T12730] RBP: 00007ff4c9100090 R08: 0000000000000000 R09: 0000000000000000 [ 292.170234][T12730] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 292.170245][T12730] R13: 00007ff4c8426038 R14: 00007ff4c8425fa0 R15: 00007ffcc9dfd878 [ 292.170275][T12730] [ 292.876848][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 292.909066][T12759] netlink: 'syz.2.2049': attribute type 1 has an invalid length. [ 293.310792][T12780] xt_hashlimit: size too large, truncated to 1048576 [ 293.725113][T12787] tipc: Enabling of bearer rejected, already enabled [ 293.843126][T12789] __nla_validate_parse: 13 callbacks suppressed [ 293.843145][T12789] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2060'. [ 293.866195][T12789] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2060'. [ 293.889997][T12789] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2060'. [ 293.916952][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 294.956418][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 295.270330][T12794] xt_SECMARK: invalid mode: 4 [ 295.275765][T12793] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2063'. [ 295.552634][T12804] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2066'. [ 295.605171][T12808] xt_hashlimit: size too large, truncated to 1048576 [ 295.760495][T12818] syzkaller1: entered promiscuous mode [ 295.785813][T12818] syzkaller1: entered allmulticast mode [ 295.987392][T12826] netlink: 212 bytes leftover after parsing attributes in process `syz.2.2074'. [ 295.997069][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 296.004513][T12826] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2074'. [ 296.014710][T12826] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2074'. [ 296.082050][T12828] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2075'. [ 296.244001][T12836] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2077'. [ 296.564763][T12848] lo speed is unknown, defaulting to 1000 [ 296.572900][T12848] lo speed is unknown, defaulting to 1000 [ 296.635448][T12854] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 297.036435][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 297.071541][ T809] IPVS: starting estimator thread 0... [ 297.168236][T12872] IPVS: using max 32 ests per chain, 76800 per kthread [ 297.241089][T12879] FAULT_INJECTION: forcing a failure. [ 297.241089][T12879] name failslab, interval 1, probability 0, space 0, times 0 [ 297.277979][T12879] CPU: 1 UID: 0 PID: 12879 Comm: syz.1.2095 Not tainted syzkaller #0 PREEMPT(full) [ 297.278006][T12879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 297.278016][T12879] Call Trace: [ 297.278024][T12879] [ 297.278032][T12879] dump_stack_lvl+0xe8/0x150 [ 297.278063][T12879] should_fail_ex+0x40c/0x560 [ 297.278095][T12879] should_failslab+0xa8/0x100 [ 297.278121][T12879] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 297.278142][T12879] ? skb_clone+0x212/0x3a0 [ 297.278164][T12879] ? skb_clone+0x212/0x3a0 [ 297.278193][T12879] skb_clone+0x212/0x3a0 [ 297.278218][T12879] __netlink_deliver_tap+0x413/0x860 [ 297.278251][T12879] ? netlink_deliver_tap+0x2e/0x1b0 [ 297.278274][T12879] netlink_deliver_tap+0x19c/0x1b0 [ 297.278299][T12879] netlink_unicast+0x77f/0x940 [ 297.278329][T12879] netlink_sendmsg+0x813/0xb40 [ 297.278361][T12879] ? __pfx_netlink_sendmsg+0x10/0x10 [ 297.278388][T12879] ? aa_sock_msg_perm+0xf1/0x1b0 [ 297.278418][T12879] ? __pfx_netlink_sendmsg+0x10/0x10 [ 297.278441][T12879] sock_sendmsg_nosec+0x13a/0x180 [ 297.278472][T12879] ____sys_sendmsg+0x54e/0x850 [ 297.278501][T12879] ? __pfx_____sys_sendmsg+0x10/0x10 [ 297.278533][T12879] ? import_iovec+0x73/0xa0 [ 297.278559][T12879] ___sys_sendmsg+0x2a5/0x360 [ 297.278581][T12879] ? __lock_acquire+0x683/0x2cf0 [ 297.278610][T12879] ? __pfx____sys_sendmsg+0x10/0x10 [ 297.278669][T12879] ? __fget_files+0x2a/0x420 [ 297.278691][T12879] ? __fget_files+0x3a2/0x420 [ 297.278733][T12879] __x64_sys_sendmsg+0x1b1/0x290 [ 297.278759][T12879] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 297.278800][T12879] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.278821][T12879] do_syscall_64+0x174/0x580 [ 297.278843][T12879] ? clear_bhb_loop+0x40/0x90 [ 297.278867][T12879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.278885][T12879] RIP: 0033:0x7f2b4c19de59 [ 297.278903][T12879] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 297.278919][T12879] RSP: 002b:00007f2b4d079028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 297.278940][T12879] RAX: ffffffffffffffda RBX: 00007f2b4c425fa0 RCX: 00007f2b4c19de59 [ 297.278953][T12879] RDX: 0000000000000014 RSI: 0000200000001640 RDI: 000000000000000a [ 297.278965][T12879] RBP: 00007f2b4d079090 R08: 0000000000000000 R09: 0000000000000000 [ 297.278977][T12879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 297.278988][T12879] R13: 00007f2b4c426038 R14: 00007f2b4c425fa0 R15: 00007ffd1f449e58 [ 297.279020][T12879] [ 297.704567][T12882] bond6: (slave syz_tun): Releasing backup interface [ 297.725526][T12882] bond9: (slave syz_tun): Enslaving as an active interface with an up link [ 298.076766][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 298.334075][T12911] sch_tbf: burst 823 is lower than device syzkaller0 mtu (1514) ! [ 298.361301][T12911] syzkaller0: entered promiscuous mode [ 298.379457][T12911] syzkaller0: entered allmulticast mode [ 298.618660][T12916] Cannot find add_set index 0 as target [ 298.739365][T12921] FAULT_INJECTION: forcing a failure. [ 298.739365][T12921] name failslab, interval 1, probability 0, space 0, times 0 [ 298.752378][T12921] CPU: 0 UID: 0 PID: 12921 Comm: syz.4.2110 Not tainted syzkaller #0 PREEMPT(full) [ 298.752404][T12921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 298.752415][T12921] Call Trace: [ 298.752423][T12921] [ 298.752431][T12921] dump_stack_lvl+0xe8/0x150 [ 298.752465][T12921] should_fail_ex+0x40c/0x560 [ 298.752498][T12921] should_failslab+0xa8/0x100 [ 298.752527][T12921] __kmalloc_cache_noprof+0xa8/0x660 [ 298.752552][T12921] ? __kmalloc_cache_noprof+0x150/0x660 [ 298.752574][T12921] ? sctp_add_bind_addr+0x8c/0x370 [ 298.752600][T12921] ? sctp_add_bind_addr+0x8c/0x370 [ 298.752633][T12921] sctp_add_bind_addr+0x8c/0x370 [ 298.752666][T12921] sctp_copy_local_addr_list+0x31a/0x4e0 [ 298.752698][T12921] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 298.752727][T12921] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 298.752759][T12921] ? sctp_v6_is_any+0x64/0x80 [ 298.752780][T12921] ? sctp_copy_one_addr+0x93/0x360 [ 298.752812][T12921] sctp_bind_addr_copy+0xb3/0x3c0 [ 298.752841][T12921] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 298.752870][T12921] sctp_connect_new_asoc+0x2ff/0x6b0 [ 298.752896][T12921] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 298.752926][T12921] ? __local_bh_enable_ip+0xd0/0x130 [ 298.752945][T12921] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 298.752966][T12921] ? security_sctp_bind_connect+0x7e/0x2c0 [ 298.752991][T12921] sctp_sendmsg+0x159b/0x2d00 [ 298.753028][T12921] ? __pfx_sctp_sendmsg+0x10/0x10 [ 298.753057][T12921] ? aa_sk_perm+0x6d5/0x900 [ 298.753086][T12921] ? __might_fault+0xaf/0x130 [ 298.753111][T12921] ? sock_rps_record_flow+0x19/0x350 [ 298.753140][T12921] ? inet_sendmsg+0x298/0x320 [ 298.753162][T12921] ? __pfx_inet_sendmsg+0x10/0x10 [ 298.753180][T12921] sock_sendmsg_nosec+0x10e/0x180 [ 298.753211][T12921] __sys_sendto+0x408/0x5a0 [ 298.753231][T12921] ? ksys_write+0x1e6/0x270 [ 298.753265][T12921] ? __pfx___sys_sendto+0x10/0x10 [ 298.753284][T12921] ? __mutex_unlock_slowpath+0x731/0x900 [ 298.753335][T12921] ? __pfx_ksys_write+0x10/0x10 [ 298.753369][T12921] __x64_sys_sendto+0xde/0x100 [ 298.753391][T12921] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.753411][T12921] do_syscall_64+0x174/0x580 [ 298.753433][T12921] ? clear_bhb_loop+0x40/0x90 [ 298.753456][T12921] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.753475][T12921] RIP: 0033:0x7f3fc6b9de59 [ 298.753493][T12921] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 298.753508][T12921] RSP: 002b:00007f3fc7a4f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 298.753527][T12921] RAX: ffffffffffffffda RBX: 00007f3fc6e25fa0 RCX: 00007f3fc6b9de59 [ 298.753541][T12921] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000003 [ 298.753553][T12921] RBP: 00007f3fc7a4f090 R08: 0000200000000280 R09: 000000000000001c [ 298.753565][T12921] R10: 0000000000000081 R11: 0000000000000246 R12: 0000000000000002 [ 298.753576][T12921] R13: 00007f3fc6e26038 R14: 00007f3fc6e25fa0 R15: 00007fff326ef4c8 [ 298.753608][T12921] [ 299.116460][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 299.181725][T12923] __nla_validate_parse: 8 callbacks suppressed [ 299.181742][T12923] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2111'. [ 299.299597][T12929] syzkaller0: entered promiscuous mode [ 299.305241][T12929] syzkaller0: entered allmulticast mode [ 299.317958][T12930] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2112'. [ 299.610996][T12945] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2117'. [ 299.675961][T12932] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 299.685145][T12932] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 299.721916][T12936] bond9: (slave syz_tun): Releasing backup interface [ 299.742578][T12936] bond10: (slave syz_tun): Enslaving as an active interface with an up link [ 299.969429][T12957] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2120'. [ 300.001597][T12956] tipc: Started in network mode [ 300.006897][T12956] tipc: Node identity 221bb2aeffba, cluster identity 4711 [ 300.014407][T12956] tipc: Enabled bearer , priority 0 [ 300.036983][T12956] syzkaller0: entered promiscuous mode [ 300.056028][T12956] syzkaller0: entered allmulticast mode [ 300.139191][T12956] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2121'. [ 300.151393][T12959] FAULT_INJECTION: forcing a failure. [ 300.151393][T12959] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 300.164869][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 300.181598][T12956] tipc: Resetting bearer [ 300.185579][T12959] CPU: 0 UID: 0 PID: 12959 Comm: syz.0.2123 Not tainted syzkaller #0 PREEMPT(full) [ 300.185604][T12959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 300.185615][T12959] Call Trace: [ 300.185623][T12959] [ 300.185630][T12959] dump_stack_lvl+0xe8/0x150 [ 300.185662][T12959] should_fail_ex+0x40c/0x560 [ 300.185694][T12959] _copy_from_iter+0x1d3/0x1660 [ 300.185712][T12959] ? kmem_cache_alloc_node_noprof+0x1b1/0x610 [ 300.185736][T12959] ? rcu_is_watching+0x15/0xb0 [ 300.185763][T12959] ? trace_kmem_cache_alloc+0x29/0xe0 [ 300.185786][T12959] ? kmem_cache_alloc_node_noprof+0x3b8/0x610 [ 300.185807][T12959] ? __pfx__copy_from_iter+0x10/0x10 [ 300.185826][T12959] ? __alloc_skb+0x276/0x7a0 [ 300.185844][T12959] ? __alloc_skb+0x276/0x7a0 [ 300.185867][T12959] ? netlink_sendmsg+0x650/0xb40 [ 300.185890][T12959] ? skb_put+0x112/0x210 [ 300.185915][T12959] netlink_sendmsg+0x6c0/0xb40 [ 300.185948][T12959] ? __pfx_netlink_sendmsg+0x10/0x10 [ 300.185975][T12959] ? aa_sock_msg_perm+0xf1/0x1b0 [ 300.186003][T12959] ? __pfx_netlink_sendmsg+0x10/0x10 [ 300.186025][T12959] sock_sendmsg_nosec+0x13a/0x180 [ 300.186055][T12959] ____sys_sendmsg+0x54e/0x850 [ 300.186082][T12959] ? __pfx_____sys_sendmsg+0x10/0x10 [ 300.186112][T12959] ? import_iovec+0x73/0xa0 [ 300.186137][T12959] ___sys_sendmsg+0x2a5/0x360 [ 300.186157][T12959] ? __lock_acquire+0x683/0x2cf0 [ 300.186185][T12959] ? __pfx____sys_sendmsg+0x10/0x10 [ 300.186240][T12959] ? __fget_files+0x2a/0x420 [ 300.186262][T12959] ? __fget_files+0x3a2/0x420 [ 300.186294][T12959] __x64_sys_sendmsg+0x1b1/0x290 [ 300.186319][T12959] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 300.186358][T12959] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.186377][T12959] do_syscall_64+0x174/0x580 [ 300.186396][T12959] ? trace_irq_disable+0x3b/0x140 [ 300.186418][T12959] ? clear_bhb_loop+0x40/0x90 [ 300.186440][T12959] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.186458][T12959] RIP: 0033:0x7ff4c819de59 [ 300.186476][T12959] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 300.186491][T12959] RSP: 002b:00007ff4c9100028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 300.186518][T12959] RAX: ffffffffffffffda RBX: 00007ff4c8425fa0 RCX: 00007ff4c819de59 [ 300.186531][T12959] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 300.186543][T12959] RBP: 00007ff4c9100090 R08: 0000000000000000 R09: 0000000000000000 [ 300.186554][T12959] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 300.186565][T12959] R13: 00007ff4c8426038 R14: 00007ff4c8425fa0 R15: 00007ffcc9dfd878 [ 300.186594][T12959] [ 300.302084][T12964] Unsupported ieee802154 address type: 0 [ 300.467171][T12955] tipc: Resetting bearer [ 300.501017][T12955] tipc: Disabling bearer [ 300.717502][T12973] netlink: 'syz.1.2126': attribute type 1 has an invalid length. [ 300.792242][T12973] 8021q: adding VLAN 0 to HW filter on device bond6 [ 300.851483][T12977] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2127'. [ 300.896245][T12972] bond6: (slave gretap1): making interface the new active one [ 300.932653][T12972] bond6: (slave gretap1): Enslaving as an active interface with an up link [ 301.199114][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 301.575672][T12994] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2133'. [ 302.150505][T12998] bond0: (slave syz_tun): Releasing backup interface [ 302.192041][T12998] bond6: (slave syz_tun): Enslaving as an active interface with an up link [ 302.236629][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 302.271947][T13005] lo speed is unknown, defaulting to 1000 [ 302.309330][T13005] lo speed is unknown, defaulting to 1000 [ 302.548327][T13027] netlink: 148 bytes leftover after parsing attributes in process `syz.4.2142'. [ 302.566585][T13027] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2142'. [ 302.579196][T13026] netlink: 148 bytes leftover after parsing attributes in process `syz.4.2142'. [ 303.276468][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 303.355129][T13057] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 303.659484][T13076] FAULT_INJECTION: forcing a failure. [ 303.659484][T13076] name failslab, interval 1, probability 0, space 0, times 0 [ 303.686626][T13076] CPU: 0 UID: 0 PID: 13076 Comm: syz.1.2156 Not tainted syzkaller #0 PREEMPT(full) [ 303.686653][T13076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 303.686663][T13076] Call Trace: [ 303.686671][T13076] [ 303.686679][T13076] dump_stack_lvl+0xe8/0x150 [ 303.686712][T13076] should_fail_ex+0x40c/0x560 [ 303.686744][T13076] should_failslab+0xa8/0x100 [ 303.686773][T13076] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 303.686803][T13076] ? local_lock_release+0x9c/0x160 [ 303.686824][T13076] ? __alloc_skb+0x1d7/0x7a0 [ 303.686839][T13076] ? __alloc_skb+0x1d7/0x7a0 [ 303.686862][T13076] __alloc_skb+0x1d7/0x7a0 [ 303.686883][T13076] netlink_ack+0x136/0xb30 [ 303.686921][T13076] netlink_rcv_skb+0x2a4/0x4a0 [ 303.686943][T13076] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 303.686966][T13076] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 303.687000][T13076] ? bpf_lsm_capable+0x9/0x20 [ 303.687023][T13076] ? security_capable+0x7e/0x2c0 [ 303.687052][T13076] nfnetlink_rcv+0x2b9/0x28c0 [ 303.687076][T13076] ? __dev_queue_xmit+0x29b/0x37f0 [ 303.687104][T13076] ? __local_bh_enable_ip+0xd0/0x130 [ 303.687125][T13076] ? lockdep_hardirqs_on+0x7a/0x110 [ 303.687144][T13076] ? __dev_queue_xmit+0x29b/0x37f0 [ 303.687167][T13076] ? __local_bh_enable_ip+0xd0/0x130 [ 303.687187][T13076] ? __dev_queue_xmit+0x29b/0x37f0 [ 303.687209][T13076] ? __dev_queue_xmit+0x1ed7/0x37f0 [ 303.687231][T13076] ? do_syscall_64+0x174/0x580 [ 303.687249][T13076] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.687278][T13076] ? __dev_queue_xmit+0x29b/0x37f0 [ 303.687302][T13076] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 303.687329][T13076] ? __pfx___dev_queue_xmit+0x10/0x10 [ 303.687361][T13076] ? ref_tracker_free+0x689/0x830 [ 303.687382][T13076] ? __pfx_ref_tracker_free+0x10/0x10 [ 303.687408][T13076] ? __skb_clone+0x449/0x6c0 [ 303.687432][T13076] ? skb_clone+0x246/0x3a0 [ 303.687458][T13076] ? __netlink_deliver_tap+0x811/0x860 [ 303.687480][T13076] ? netlink_deliver_tap+0x2e/0x1b0 [ 303.687507][T13076] ? netlink_deliver_tap+0x2e/0x1b0 [ 303.687529][T13076] ? netlink_deliver_tap+0x2e/0x1b0 [ 303.687555][T13076] netlink_unicast+0x7bb/0x940 [ 303.687589][T13076] netlink_sendmsg+0x813/0xb40 [ 303.687622][T13076] ? __pfx_netlink_sendmsg+0x10/0x10 [ 303.687650][T13076] ? aa_sock_msg_perm+0xf1/0x1b0 [ 303.687680][T13076] ? __pfx_netlink_sendmsg+0x10/0x10 [ 303.687702][T13076] sock_sendmsg_nosec+0x13a/0x180 [ 303.687734][T13076] ____sys_sendmsg+0x54e/0x850 [ 303.687762][T13076] ? __pfx_____sys_sendmsg+0x10/0x10 [ 303.687802][T13076] ? import_iovec+0x73/0xa0 [ 303.687827][T13076] ___sys_sendmsg+0x2a5/0x360 [ 303.687849][T13076] ? __lock_acquire+0x683/0x2cf0 [ 303.687878][T13076] ? __pfx____sys_sendmsg+0x10/0x10 [ 303.687938][T13076] ? __fget_files+0x2a/0x420 [ 303.687961][T13076] ? __fget_files+0x3a2/0x420 [ 303.687994][T13076] __x64_sys_sendmsg+0x1b1/0x290 [ 303.688019][T13076] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 303.688059][T13076] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.688079][T13076] do_syscall_64+0x174/0x580 [ 303.688098][T13076] ? trace_irq_disable+0x3b/0x140 [ 303.688121][T13076] ? clear_bhb_loop+0x40/0x90 [ 303.688148][T13076] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.688167][T13076] RIP: 0033:0x7f2b4c19de59 [ 303.688186][T13076] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 303.688202][T13076] RSP: 002b:00007f2b4d079028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 303.688222][T13076] RAX: ffffffffffffffda RBX: 00007f2b4c425fa0 RCX: 00007f2b4c19de59 [ 303.688235][T13076] RDX: 0000000000000014 RSI: 0000200000001640 RDI: 000000000000000a [ 303.688247][T13076] RBP: 00007f2b4d079090 R08: 0000000000000000 R09: 0000000000000000 [ 303.688259][T13076] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 303.688270][T13076] R13: 00007f2b4c426038 R14: 00007f2b4c425fa0 R15: 00007ffd1f449e58 [ 303.688299][T13076] [ 304.316620][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 304.409051][T13053] bond2: entered promiscuous mode [ 304.415479][T13053] bond2: entered allmulticast mode [ 304.423611][T13053] 8021q: adding VLAN 0 to HW filter on device bond2 [ 304.802922][T13108] __nla_validate_parse: 5 callbacks suppressed [ 304.802941][T13108] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2162'. [ 304.920132][T13108] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2162'. [ 305.356517][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 305.589101][T13141] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2172'. [ 305.810544][T13150] netlink: 'syz.1.2173': attribute type 8 has an invalid length. [ 305.841873][T13150] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2173'. [ 306.327848][ T5630] page_pool_release_retry() stalled pool shutdown: id 77, 1 inflight 60 sec [ 306.396511][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 306.711223][T13185] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2176'. [ 306.791252][T13180] netlink: 'syz.1.2176': attribute type 1 has an invalid length. [ 306.838620][T13180] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2176'. [ 306.945509][T13195] IPVS: Unknown mcast interface: rose0 [ 306.957546][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 307.436468][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 307.603291][T13213] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2188'. [ 307.622244][T13214] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2189'. [ 307.649142][T13214] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2189'. [ 307.914258][T13227] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2193'. [ 308.476620][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 309.480338][T13310] netlink: 'syz.4.2218': attribute type 1 has an invalid length. [ 309.517336][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 309.641866][T13310] 8021q: adding VLAN 0 to HW filter on device bond13 [ 309.850074][T13324] lo speed is unknown, defaulting to 1000 [ 309.859019][T13324] lo speed is unknown, defaulting to 1000 [ 310.556928][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 310.855696][T13349] __nla_validate_parse: 5 callbacks suppressed [ 310.855737][T13349] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2232'. [ 310.918322][T13349] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2232'. [ 310.943357][T13352] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2233'. [ 311.094157][T13361] FAULT_INJECTION: forcing a failure. [ 311.094157][T13361] name failslab, interval 1, probability 0, space 0, times 0 [ 311.113628][T13361] CPU: 0 UID: 0 PID: 13361 Comm: syz.4.2236 Not tainted syzkaller #0 PREEMPT(full) [ 311.113650][T13361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 311.113661][T13361] Call Trace: [ 311.113667][T13361] [ 311.113674][T13361] dump_stack_lvl+0xe8/0x150 [ 311.113704][T13361] should_fail_ex+0x40c/0x560 [ 311.113732][T13361] should_failslab+0xa8/0x100 [ 311.113759][T13361] __kmalloc_noprof+0xfe/0x720 [ 311.113781][T13361] ? kasan_save_free_info+0x40/0x50 [ 311.113797][T13361] ? __kasan_slab_free+0x5c/0x80 [ 311.113819][T13361] ? kmem_cache_free+0x182/0x650 [ 311.113841][T13361] ? nla_strdup+0x9d/0x140 [ 311.113858][T13361] ? nla_strdup+0x9d/0x140 [ 311.113883][T13361] nla_strdup+0x9d/0x140 [ 311.113901][T13361] rtnl_linkprop+0x533/0x7d0 [ 311.113926][T13361] ? __pfx_rtnl_linkprop+0x10/0x10 [ 311.113949][T13361] ? __lock_acquire+0x683/0x2cf0 [ 311.114026][T13361] ? __pfx___mutex_lock+0x10/0x10 [ 311.114061][T13361] ? __pfx_rtnl_dellinkprop+0x10/0x10 [ 311.114082][T13361] rtnetlink_rcv_msg+0x7b9/0xc00 [ 311.114105][T13361] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 311.114125][T13361] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 311.114142][T13361] ? ref_tracker_free+0x689/0x830 [ 311.114164][T13361] ? __pfx_ref_tracker_free+0x10/0x10 [ 311.114193][T13361] netlink_rcv_skb+0x226/0x4a0 [ 311.114217][T13361] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 311.114238][T13361] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 311.114281][T13361] ? netlink_deliver_tap+0x2e/0x1b0 [ 311.114305][T13361] ? netlink_deliver_tap+0x2e/0x1b0 [ 311.114333][T13361] netlink_unicast+0x7bb/0x940 [ 311.114367][T13361] netlink_sendmsg+0x813/0xb40 [ 311.114399][T13361] ? __pfx_netlink_sendmsg+0x10/0x10 [ 311.114426][T13361] ? aa_sock_msg_perm+0xf1/0x1b0 [ 311.114457][T13361] ? __pfx_netlink_sendmsg+0x10/0x10 [ 311.114478][T13361] sock_sendmsg_nosec+0x13a/0x180 [ 311.114510][T13361] ____sys_sendmsg+0x54e/0x850 [ 311.114539][T13361] ? __pfx_____sys_sendmsg+0x10/0x10 [ 311.114571][T13361] ? import_iovec+0x73/0xa0 [ 311.114600][T13361] ___sys_sendmsg+0x2a5/0x360 [ 311.114622][T13361] ? __lock_acquire+0x683/0x2cf0 [ 311.114651][T13361] ? __pfx____sys_sendmsg+0x10/0x10 [ 311.114704][T13361] ? __fget_files+0x2a/0x420 [ 311.114726][T13361] ? __fget_files+0x3a2/0x420 [ 311.114756][T13361] __x64_sys_sendmsg+0x1b1/0x290 [ 311.114782][T13361] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 311.114824][T13361] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.114845][T13361] do_syscall_64+0x174/0x580 [ 311.114864][T13361] ? trace_irq_disable+0x3b/0x140 [ 311.114887][T13361] ? clear_bhb_loop+0x40/0x90 [ 311.114911][T13361] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.114930][T13361] RIP: 0033:0x7f3fc6b9de59 [ 311.114949][T13361] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 311.114965][T13361] RSP: 002b:00007f3fc7a4f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 311.114984][T13361] RAX: ffffffffffffffda RBX: 00007f3fc6e25fa0 RCX: 00007f3fc6b9de59 [ 311.114999][T13361] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000004 [ 311.115011][T13361] RBP: 00007f3fc7a4f090 R08: 0000000000000000 R09: 0000000000000000 [ 311.115023][T13361] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 311.115034][T13361] R13: 00007f3fc6e26038 R14: 00007f3fc6e25fa0 R15: 00007fff326ef4c8 [ 311.115064][T13361] [ 311.596542][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 311.674179][T13377] sysfs: cannot create duplicate filename '/class/ieee80211/1ùà^!' [ 311.728965][T13377] CPU: 1 UID: 0 PID: 13377 Comm: syz.4.2239 Not tainted syzkaller #0 PREEMPT(full) [ 311.728992][T13377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 311.729004][T13377] Call Trace: [ 311.729013][T13377] [ 311.729021][T13377] dump_stack_lvl+0xe8/0x150 [ 311.729057][T13377] sysfs_warn_dup+0x8e/0xa0 [ 311.729083][T13377] sysfs_do_create_link_sd+0xc0/0x110 [ 311.729112][T13377] device_add_class_symlinks+0x1cf/0x240 [ 311.729143][T13377] device_add+0x467/0xb80 [ 311.729171][T13377] wiphy_register+0x1fc8/0x2ff0 [ 311.729210][T13377] ? __pfx_wiphy_register+0x10/0x10 [ 311.729229][T13377] ? __pfx_netdev_run_todo+0x10/0x10 [ 311.729255][T13377] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 311.729286][T13377] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 311.729321][T13377] ieee80211_register_hw+0x3d3d/0x4a50 [ 311.729359][T13377] ? ieee80211_register_hw+0x1961/0x4a50 [ 311.729411][T13377] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 311.729438][T13377] ? __asan_memset+0x22/0x50 [ 311.729461][T13377] ? __hrtimer_setup+0x1b7/0x260 [ 311.729483][T13377] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 311.729510][T13377] mac80211_hwsim_new_radio+0x3238/0x5680 [ 311.729566][T13377] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 311.729587][T13377] ? kstrndup+0xbd/0x160 [ 311.729619][T13377] ? kstrndup+0xbd/0x160 [ 311.729647][T13377] hwsim_new_radio_nl+0xd8b/0xf90 [ 311.729685][T13377] genl_family_rcv_msg_doit+0x233/0x340 [ 311.729713][T13377] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 311.729765][T13377] ? bpf_lsm_capable+0x9/0x20 [ 311.729789][T13377] ? security_capable+0x7e/0x2c0 [ 311.729821][T13377] genl_rcv_msg+0x614/0x7a0 [ 311.729857][T13377] ? __pfx_genl_rcv_msg+0x10/0x10 [ 311.729883][T13377] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 311.729905][T13377] ? __pfx_ref_tracker_free+0x10/0x10 [ 311.729936][T13377] netlink_rcv_skb+0x226/0x4a0 [ 311.729961][T13377] ? __pfx_genl_rcv_msg+0x10/0x10 [ 311.729992][T13377] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 311.730033][T13377] ? down_read+0x2be/0x330 [ 311.730060][T13377] genl_rcv+0x28/0x40 [ 311.730087][T13377] netlink_unicast+0x7bb/0x940 [ 311.730122][T13377] netlink_sendmsg+0x813/0xb40 [ 311.730158][T13377] ? __pfx_netlink_sendmsg+0x10/0x10 [ 311.730188][T13377] ? aa_sock_msg_perm+0xf1/0x1b0 [ 311.730220][T13377] ? __pfx_netlink_sendmsg+0x10/0x10 [ 311.730242][T13377] sock_sendmsg_nosec+0x13a/0x180 [ 311.730274][T13377] ____sys_sendmsg+0x54e/0x850 [ 311.730305][T13377] ? __pfx_____sys_sendmsg+0x10/0x10 [ 311.730338][T13377] ? import_iovec+0x73/0xa0 [ 311.730365][T13377] ___sys_sendmsg+0x2a5/0x360 [ 311.730389][T13377] ? __lock_acquire+0x683/0x2cf0 [ 311.730418][T13377] ? __pfx____sys_sendmsg+0x10/0x10 [ 311.730446][T13377] ? futex_wait+0x2a2/0x390 [ 311.730497][T13377] ? __fget_files+0x2a/0x420 [ 311.730522][T13377] ? __fget_files+0x3a2/0x420 [ 311.730559][T13377] __x64_sys_sendmsg+0x1b1/0x290 [ 311.730592][T13377] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 311.730637][T13377] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.730658][T13377] do_syscall_64+0x174/0x580 [ 311.730678][T13377] ? trace_irq_disable+0x3b/0x140 [ 311.730702][T13377] ? clear_bhb_loop+0x40/0x90 [ 311.730733][T13377] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.730753][T13377] RIP: 0033:0x7f3fc6b9de59 [ 311.730772][T13377] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 311.730789][T13377] RSP: 002b:00007f3fc7a4f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 311.730809][T13377] RAX: ffffffffffffffda RBX: 00007f3fc6e25fa0 RCX: 00007f3fc6b9de59 [ 311.730822][T13377] RDX: 0000000000000084 RSI: 0000200000000100 RDI: 0000000000000003 [ 311.730835][T13377] RBP: 00007f3fc6c33e6f R08: 0000000000000000 R09: 0000000000000000 [ 311.730847][T13377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 311.730858][T13377] R13: 00007f3fc6e26038 R14: 00007f3fc6e25fa0 R15: 00007fff326ef4c8 [ 311.730892][T13377] [ 312.217332][T13382] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2242'. [ 312.638236][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 312.660862][T13399] FAULT_INJECTION: forcing a failure. [ 312.660862][T13399] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 312.691554][T13399] CPU: 0 UID: 0 PID: 13399 Comm: syz.2.2248 Not tainted syzkaller #0 PREEMPT(full) [ 312.691581][T13399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 312.691592][T13399] Call Trace: [ 312.691600][T13399] [ 312.691608][T13399] dump_stack_lvl+0xe8/0x150 [ 312.691641][T13399] should_fail_ex+0x40c/0x560 [ 312.691675][T13399] _copy_from_iter+0x4ff/0x1660 [ 312.691706][T13399] ? kmem_cache_alloc_node_noprof+0x3b8/0x610 [ 312.691730][T13399] ? __pfx__copy_from_iter+0x10/0x10 [ 312.691749][T13399] ? __alloc_skb+0x276/0x7a0 [ 312.691767][T13399] ? __alloc_skb+0x276/0x7a0 [ 312.691791][T13399] ? netlink_sendmsg+0x650/0xb40 [ 312.691815][T13399] ? skb_put+0x112/0x210 [ 312.691838][T13399] netlink_sendmsg+0x6c0/0xb40 [ 312.691871][T13399] ? __pfx_netlink_sendmsg+0x10/0x10 [ 312.691900][T13399] ? aa_sock_msg_perm+0xf1/0x1b0 [ 312.691934][T13399] ? __pfx_netlink_sendmsg+0x10/0x10 [ 312.691956][T13399] sock_sendmsg_nosec+0x13a/0x180 [ 312.691987][T13399] ____sys_sendmsg+0x54e/0x850 [ 312.692016][T13399] ? __pfx_____sys_sendmsg+0x10/0x10 [ 312.692049][T13399] ? import_iovec+0x73/0xa0 [ 312.692074][T13399] ___sys_sendmsg+0x2a5/0x360 [ 312.692095][T13399] ? __lock_acquire+0x683/0x2cf0 [ 312.692125][T13399] ? __pfx____sys_sendmsg+0x10/0x10 [ 312.692182][T13399] ? __fget_files+0x2a/0x420 [ 312.692205][T13399] ? __fget_files+0x3a2/0x420 [ 312.692239][T13399] __x64_sys_sendmsg+0x1b1/0x290 [ 312.692271][T13399] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 312.692312][T13399] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.692333][T13399] do_syscall_64+0x174/0x580 [ 312.692352][T13399] ? trace_irq_disable+0x3b/0x140 [ 312.692376][T13399] ? clear_bhb_loop+0x40/0x90 [ 312.692400][T13399] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.692418][T13399] RIP: 0033:0x7f9348f9de59 [ 312.692435][T13399] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 312.692451][T13399] RSP: 002b:00007f9349e68028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 312.692472][T13399] RAX: ffffffffffffffda RBX: 00007f9349225fa0 RCX: 00007f9348f9de59 [ 312.692486][T13399] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 312.692497][T13399] RBP: 00007f9349e68090 R08: 0000000000000000 R09: 0000000000000000 [ 312.692508][T13399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 312.692520][T13399] R13: 00007f9349226038 R14: 00007f9349225fa0 R15: 00007ffe415044f8 [ 312.692551][T13399] [ 313.233132][T13403] FAULT_INJECTION: forcing a failure. [ 313.233132][T13403] name failslab, interval 1, probability 0, space 0, times 0 [ 313.284010][T13403] CPU: 1 UID: 0 PID: 13403 Comm: syz.4.2252 Not tainted syzkaller #0 PREEMPT(full) [ 313.284037][T13403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 313.284048][T13403] Call Trace: [ 313.284055][T13403] [ 313.284063][T13403] dump_stack_lvl+0xe8/0x150 [ 313.284096][T13403] should_fail_ex+0x40c/0x560 [ 313.284129][T13403] should_failslab+0xa8/0x100 [ 313.284157][T13403] __kmalloc_cache_noprof+0xa8/0x660 [ 313.284183][T13403] ? sctp_add_bind_addr+0x8c/0x370 [ 313.284210][T13403] ? sctp_add_bind_addr+0x8c/0x370 [ 313.284242][T13403] sctp_add_bind_addr+0x8c/0x370 [ 313.284275][T13403] sctp_copy_local_addr_list+0x31a/0x4e0 [ 313.284307][T13403] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 313.284336][T13403] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 313.284366][T13403] ? sctp_v6_is_any+0x64/0x80 [ 313.284386][T13403] ? sctp_copy_one_addr+0x93/0x360 [ 313.284418][T13403] sctp_bind_addr_copy+0xb3/0x3c0 [ 313.284447][T13403] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 313.284476][T13403] sctp_connect_new_asoc+0x2ff/0x6b0 [ 313.284502][T13403] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 313.284531][T13403] ? __local_bh_enable_ip+0xd0/0x130 [ 313.284551][T13403] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 313.284572][T13403] ? security_sctp_bind_connect+0x7e/0x2c0 [ 313.284597][T13403] sctp_sendmsg+0x159b/0x2d00 [ 313.284635][T13403] ? __pfx_sctp_sendmsg+0x10/0x10 [ 313.284662][T13403] ? aa_sk_perm+0x6d5/0x900 [ 313.284692][T13403] ? __might_fault+0xaf/0x130 [ 313.284723][T13403] ? sock_rps_record_flow+0x19/0x350 [ 313.284747][T13403] ? inet_sendmsg+0x298/0x320 [ 313.284768][T13403] ? __pfx_inet_sendmsg+0x10/0x10 [ 313.284786][T13403] sock_sendmsg_nosec+0x10e/0x180 [ 313.284817][T13403] __sys_sendto+0x408/0x5a0 [ 313.284838][T13403] ? ksys_write+0x1e6/0x270 [ 313.284869][T13403] ? __pfx___sys_sendto+0x10/0x10 [ 313.284887][T13403] ? __mutex_unlock_slowpath+0x731/0x900 [ 313.284937][T13403] ? __pfx_ksys_write+0x10/0x10 [ 313.284969][T13403] __x64_sys_sendto+0xde/0x100 [ 313.284991][T13403] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.285012][T13403] do_syscall_64+0x174/0x580 [ 313.285031][T13403] ? trace_irq_disable+0x3b/0x140 [ 313.285054][T13403] ? clear_bhb_loop+0x40/0x90 [ 313.285077][T13403] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.285098][T13403] RIP: 0033:0x7f3fc6b9de59 [ 313.285116][T13403] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 313.285132][T13403] RSP: 002b:00007f3fc7a4f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 313.285152][T13403] RAX: ffffffffffffffda RBX: 00007f3fc6e25fa0 RCX: 00007f3fc6b9de59 [ 313.285166][T13403] RDX: 0000000000000001 RSI: 0000200000000280 RDI: 0000000000000003 [ 313.285178][T13403] RBP: 00007f3fc7a4f090 R08: 0000200000000040 R09: 000000000000001c [ 313.285190][T13403] R10: 00000000200400d0 R11: 0000000000000246 R12: 0000000000000002 [ 313.285202][T13403] R13: 00007f3fc6e26038 R14: 00007f3fc6e25fa0 R15: 00007fff326ef4c8 [ 313.285232][T13403] [ 313.448704][T13406] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2251'. [ 313.676551][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 313.885970][T13418] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2256'. [ 314.301170][T13434] vlan4: entered allmulticast mode [ 314.353573][T13436] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2262'. [ 314.519357][T13439] syzkaller0: entered promiscuous mode [ 314.541468][T13439] syzkaller0: entered allmulticast mode [ 314.571450][T13442] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2264'. [ 314.716646][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 315.164546][T13464] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 315.352802][T13475] xt_hashlimit: size too large, truncated to 1048576 [ 315.474495][T13471] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 315.618023][T13493] netlink: 136 bytes leftover after parsing attributes in process `syz.4.2277'. [ 315.756600][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 315.954476][T13507] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2282'. [ 316.331672][T13520] syzkaller0: entered promiscuous mode [ 316.337240][T13520] syzkaller0: entered allmulticast mode [ 316.453618][T13527] netlink: 2832 bytes leftover after parsing attributes in process `syz.2.2288'. [ 316.798943][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 316.848662][T13538] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 317.012053][T13543] bond7: entered allmulticast mode [ 317.038490][T13543] 8021q: adding VLAN 0 to HW filter on device bond7 [ 317.185419][T13556] Cannot find map_set index 0 as target [ 317.293072][T13558] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 317.836642][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 317.836805][ C1] batman_adv: batadv1: adding TT local entry aa:aa:aa:aa:aa:0c to non-existent VLAN 2 [ 318.876751][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 319.916586][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 320.952563][T13576] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2309'. [ 320.956623][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 320.974965][T13573] 8021q: adding VLAN 0 to HW filter on device macsec0 [ 320.997680][ T42] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 321.332787][T13597] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2313'. [ 321.381391][T13594] netlink: 'syz.1.2313': attribute type 1 has an invalid length. [ 321.391351][T13594] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2313'. [ 321.495741][T13602] syz_tun: entered allmulticast mode [ 321.590046][T13603] bond1: (slave syz_tun): Releasing backup interface [ 321.598440][T13603] syz_tun (unregistering): left allmulticast mode [ 321.653743][T13616] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2321'. [ 321.676778][T13616] syzkaller1: entered promiscuous mode [ 321.682322][T13616] syzkaller1: entered allmulticast mode [ 321.969884][T13626] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2325'. [ 322.008946][T13628] sch_tbf: burst 823 is lower than device syzkaller0 mtu (1514) ! [ 322.024070][T13628] syzkaller0: entered promiscuous mode [ 322.030968][T13628] syzkaller0: entered allmulticast mode [ 322.189665][T13632] netlink: 'syz.3.2327': attribute type 30 has an invalid length. [ 322.238830][T13635] IPVS: set_ctl: invalid protocol: 137 255.255.255.255:20000 [ 322.449992][T13649] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2335'. [ 322.530549][T13662] netlink: 'syz.2.2328': attribute type 1 has an invalid length. [ 322.569387][T13630] syzkaller0: refused to change device tx_queue_len [ 322.587041][T13649] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 322.635465][T13655] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 322.854580][T13675] netlink: 'syz.3.2339': attribute type 10 has an invalid length. [ 322.938094][T13676] netlink: 'syz.3.2339': attribute type 10 has an invalid length. [ 323.013662][T13683] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2341'. [ 323.164730][T13669] ip6tnl3: entered allmulticast mode [ 323.594230][T13701] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2348'. [ 323.616461][T13701] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2348'. [ 323.710033][T13704] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2349'. [ 323.770924][T13704] bond6: (slave syz_tun): Releasing backup interface [ 323.782337][T13704] bond7: (slave syz_tun): Enslaving as an active interface with an up link [ 324.100890][T13733] netlink: 'syz.2.2356': attribute type 83 has an invalid length. [ 324.170630][T13729] tipc: Enabled bearer , priority 0 [ 324.385911][T13748] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 324.630138][T13759] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2367'. [ 324.754623][T13769] IPv6: Can't replace route, no match found [ 325.059944][T13774] smc: removing ib device syz1 [ 325.152074][ T3305] nci: nci_rx_work: unknown MT 0x1 [ 325.287673][T13805] syzkaller0: refused to change device tx_queue_len [ 325.299279][T13774] smbdirect: ib_dev[syz1] removed [ 325.324585][T13805] netlink: 'syz.1.2378': attribute type 1 has an invalid length. [ 325.846122][T13788] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 326.044996][T13817] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 326.222834][T13826] syzkaller0: entered promiscuous mode [ 326.235438][T13826] syzkaller0: entered allmulticast mode [ 326.716018][T13839] syzkaller1: entered promiscuous mode [ 326.735781][T13839] syzkaller1: entered allmulticast mode [ 326.750166][T13849] __nla_validate_parse: 5 callbacks suppressed [ 326.750184][T13849] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2394'. [ 326.769385][T13839] syzkaller1: left promiscuous mode [ 326.774812][T13839] syzkaller1: left allmulticast mode [ 326.797046][ T35] nci: nci_rx_work: unknown MT 0x1 [ 326.819371][T13850] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2393'. [ 327.252467][T13861] syzkaller0: entered promiscuous mode [ 327.259704][T13861] syzkaller0: entered allmulticast mode [ 327.436764][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 327.470766][T13843] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 327.635056][T13868] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 327.801032][T13879] bridge_slave_0: entered promiscuous mode [ 327.821780][T13879] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 327.893789][T13880] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2402'. [ 328.091445][T13880] 8021q: adding VLAN 0 to HW filter on device bond8 [ 328.158406][T13891] bond8: (slave ip6gretap0): Enslaving as an active interface with an up link [ 328.215981][T13897] bond8: entered promiscuous mode [ 328.221698][T13897] ip6gretap0: entered promiscuous mode [ 328.231179][T13897] bond8: entered allmulticast mode [ 328.249143][T13904] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2409'. [ 328.258362][T13897] ip6gretap0: entered allmulticast mode [ 328.272707][T13905] IPVS: set_ctl: invalid protocol: 1 100.1.1.2:20000 [ 328.293203][T13908] netlink: 'syz.2.2411': attribute type 4 has an invalid length. [ 328.572760][T13914] bond10: (slave syz_tun): Releasing backup interface [ 328.623140][T13914] bond11: (slave syz_tun): Enslaving as an active interface with an up link [ 328.792767][T13927] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2415'. [ 328.831223][ T6247] nci: nci_rx_work: unknown MT 0x1 [ 328.863070][ T5630] lo speed is unknown, defaulting to 1000 [ 328.880850][ T5630] syz2: Port: 1 Link DOWN [ 329.004509][T13931] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2416'. [ 329.046552][T13931] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2416'. [ 329.192647][T13936] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 329.505975][T13920] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 330.129059][T13962] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2423'. [ 330.164109][T13962] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2423'. [ 330.869665][T13983] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2427'. [ 331.073471][T13986] bond4: (slave syz_tun): Releasing backup interface [ 331.110686][T13986] bond9: (slave syz_tun): Enslaving as an active interface with an up link [ 331.339278][ T6247] nci: nci_rx_work: unknown MT 0x1 [ 331.695894][T14011] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.703547][T14011] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.716099][T14011] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.723269][T14011] bridge0: port 2(bridge_slave_1) entered forwarding state [ 331.730813][T14011] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.738022][T14011] bridge0: port 1(bridge_slave_0) entered forwarding state [ 331.751043][T14011] team0: Port device bridge0 added [ 331.788547][T14014] __nla_validate_parse: 1 callbacks suppressed [ 331.788559][T14014] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2436'. [ 332.012170][T13990] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 332.029065][T13997] netlink: 260 bytes leftover after parsing attributes in process `syz.2.2431'. [ 332.312214][T14007] debugfs: '1ùà^!' already exists in 'ieee80211' [ 332.397045][T14024] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2439'. [ 332.434115][T14026] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2440'. [ 332.564078][T14034] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2442'. [ 332.791511][T14042] netlink: 'syz.2.2445': attribute type 2 has an invalid length. [ 332.849530][T14042] : entered promiscuous mode [ 333.175212][ T3305] nci: nci_rx_work: unknown MT 0x1 [ 333.223395][T14066] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2451'. [ 333.785461][T14055] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 334.269261][T14117] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 334.469629][T14119] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2473'. [ 335.001027][T14148] sctp: [Deprecated]: syz.2.2479 (pid 14148) Use of struct sctp_assoc_value in delayed_ack socket option. [ 335.001027][T14148] Use struct sctp_sack_info instead [ 335.416785][T14168] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 335.471099][T14172] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2488'. [ 336.473256][T14214] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 336.794475][T14238] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2508'. [ 336.903749][T14243] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2489'. [ 337.013930][T14249] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2513'. [ 337.052263][ T35] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 337.078585][ T35] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 337.090729][ T35] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 337.103085][ T35] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 337.151720][T14255] lo speed is unknown, defaulting to 1000 [ 337.284724][T14259] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 337.312176][T14261] Cannot find map_set index 0 as target [ 337.737207][T14255] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2515'. [ 338.137819][T14286] bond0 (unregistering): Released all slaves [ 338.193557][T14296] FAULT_INJECTION: forcing a failure. [ 338.193557][T14296] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 338.209400][T14296] CPU: 0 UID: 0 PID: 14296 Comm: syz.4.2530 Not tainted syzkaller #0 PREEMPT(full) [ 338.209425][T14296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 338.209434][T14296] Call Trace: [ 338.209441][T14296] [ 338.209448][T14296] dump_stack_lvl+0xe8/0x150 [ 338.209481][T14296] should_fail_ex+0x40c/0x560 [ 338.209513][T14296] _copy_from_user+0x2d/0xb0 [ 338.209535][T14296] ___sys_sendmsg+0x1c6/0x360 [ 338.209557][T14296] ? __lock_acquire+0x683/0x2cf0 [ 338.209587][T14296] ? __pfx____sys_sendmsg+0x10/0x10 [ 338.209641][T14296] ? __fget_files+0x2a/0x420 [ 338.209664][T14296] ? __fget_files+0x3a2/0x420 [ 338.209695][T14296] __x64_sys_sendmsg+0x1b1/0x290 [ 338.209719][T14296] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 338.209754][T14296] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.209774][T14296] do_syscall_64+0x174/0x580 [ 338.209793][T14296] ? trace_irq_disable+0x3b/0x140 [ 338.209816][T14296] ? clear_bhb_loop+0x40/0x90 [ 338.209839][T14296] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.209858][T14296] RIP: 0033:0x7f3fc6b9de59 [ 338.209876][T14296] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 338.209899][T14296] RSP: 002b:00007f3fc7a4f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 338.209919][T14296] RAX: ffffffffffffffda RBX: 00007f3fc6e25fa0 RCX: 00007f3fc6b9de59 [ 338.209933][T14296] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 338.209945][T14296] RBP: 00007f3fc7a4f090 R08: 0000000000000000 R09: 0000000000000000 [ 338.209957][T14296] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 338.209969][T14296] R13: 00007f3fc6e26038 R14: 00007f3fc6e25fa0 R15: 00007fff326ef4c8 [ 338.209999][T14296] [ 338.661615][T14310] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 338.716919][T14312] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2536'. [ 338.733694][ T5943] lo speed is unknown, defaulting to 1000 [ 338.747203][ T5943] syz2: Port: 1 Link ACTIVE [ 338.752528][T14312] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2536'. [ 338.763335][T14316] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2539'. [ 338.766879][T14308] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2536'. [ 339.059877][T14330] FAULT_INJECTION: forcing a failure. [ 339.059877][T14330] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 339.104657][T14330] CPU: 0 UID: 0 PID: 14330 Comm: syz.2.2541 Not tainted syzkaller #0 PREEMPT(full) [ 339.104683][T14330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 339.104694][T14330] Call Trace: [ 339.104702][T14330] [ 339.104710][T14330] dump_stack_lvl+0xe8/0x150 [ 339.104744][T14330] should_fail_ex+0x40c/0x560 [ 339.104777][T14330] _copy_from_user+0x2d/0xb0 [ 339.104801][T14330] ___sys_sendmsg+0x1c6/0x360 [ 339.104824][T14330] ? __lock_acquire+0x683/0x2cf0 [ 339.104852][T14330] ? __pfx____sys_sendmsg+0x10/0x10 [ 339.104879][T14330] ? kstrtouint+0x6e/0xe0 [ 339.104930][T14330] ? __fget_files+0x2a/0x420 [ 339.104952][T14330] ? __fget_files+0x3a2/0x420 [ 339.104985][T14330] __sys_sendmmsg+0x273/0x4d0 [ 339.105012][T14330] ? __pfx___sys_sendmmsg+0x10/0x10 [ 339.105044][T14330] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 339.105079][T14330] ? ksys_write+0x242/0x270 [ 339.105109][T14330] ? __pfx_ksys_write+0x10/0x10 [ 339.105143][T14330] __x64_sys_sendmmsg+0xa0/0xc0 [ 339.105167][T14330] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.105187][T14330] do_syscall_64+0x174/0x580 [ 339.105206][T14330] ? trace_irq_disable+0x3b/0x140 [ 339.105229][T14330] ? clear_bhb_loop+0x40/0x90 [ 339.105251][T14330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.105270][T14330] RIP: 0033:0x7f9348f9de59 [ 339.105287][T14330] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 339.105303][T14330] RSP: 002b:00007f9349e47028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 339.105323][T14330] RAX: ffffffffffffffda RBX: 00007f9349226090 RCX: 00007f9348f9de59 [ 339.105337][T14330] RDX: 03fffffffffffe3d RSI: 0000200000003e40 RDI: 0000000000000003 [ 339.105349][T14330] RBP: 00007f9349e47090 R08: 0000000000000000 R09: 0000000000000000 [ 339.105361][T14330] R10: 00000000000000f5 R11: 0000000000000246 R12: 0000000000000001 [ 339.105373][T14330] R13: 00007f9349226128 R14: 00007f9349226090 R15: 00007ffe415044f8 [ 339.105402][T14330] [ 339.360225][T14332] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2531'. [ 339.505090][T14332] erspan0: entered promiscuous mode [ 339.643630][T14339] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 339.897335][T14351] netlink: 'syz.2.2549': attribute type 1 has an invalid length. [ 339.967847][T14351] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2549'. [ 339.994494][T14352] bond8: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 340.008627][ T6251] bond8: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 340.024579][T14351] 8021q: adding VLAN 0 to HW filter on device bond8 [ 340.071626][T14357] lo speed is unknown, defaulting to 1000 [ 340.146739][ T88] bond8: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 340.341069][T14365] netlink: 244 bytes leftover after parsing attributes in process `syz.3.2545'. [ 340.580678][T14377] netlink: 'syz.2.2555': attribute type 1 has an invalid length. [ 340.653776][T14380] netlink: 'syz.3.2545': attribute type 1 has an invalid length. [ 340.953293][T14396] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 340.999214][T14391] bond12: (slave syz_tun): Releasing backup interface [ 341.028582][T14391] bond14: (slave syz_tun): Enslaving as an active interface with an up link [ 342.149511][T14416] __nla_validate_parse: 6 callbacks suppressed [ 342.149530][T14416] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2563'. [ 342.171641][T14427] netlink: 27 bytes leftover after parsing attributes in process `syz.1.2569'. [ 342.304524][T14430] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2570'. [ 342.413701][T14437] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2572'. [ 342.433631][T14430] bond14: (slave syz_tun): Releasing backup interface [ 342.457308][T14416] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2563'. [ 342.482118][T14430] bond15: (slave syz_tun): Enslaving as an active interface with an up link [ 342.594463][T14432] netlink: 100 bytes leftover after parsing attributes in process `syz.3.2563'. [ 342.613188][ T809] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 342.669268][T14416] team0: Port device dummy0 removed [ 342.775597][T14432] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2563'. [ 342.796884][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 342.814088][T14432] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2563'. [ 342.826048][T14432] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2563'. [ 342.839627][T14432] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2563'. [ 342.974461][T14455] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 343.081517][T14460] xt_hashlimit: size too large, truncated to 1048576 [ 343.088681][ T809] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 343.507970][ T50] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 343.524728][ T50] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 343.532687][ T50] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 343.541486][ T50] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 343.549752][ T50] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 343.929990][ T5626] bond7: (slave syz_tun): Releasing backup interface [ 344.249378][T14467] lo speed is unknown, defaulting to 1000 [ 344.427617][T14494] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 345.002704][ T48] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.155083][T14505] A link change request failed with some changes committed already. Interface gre3 may have been left with an inconsistent configuration, please check. [ 345.228018][T14467] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.246606][T14467] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.255605][T14467] bridge_slave_0: entered allmulticast mode [ 345.263447][T14467] bridge_slave_0: entered promiscuous mode [ 345.274267][T14467] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.281652][T14467] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.289617][T14467] bridge_slave_1: entered allmulticast mode [ 345.298034][T14467] bridge_slave_1: entered promiscuous mode [ 345.351489][T14467] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 345.378811][T14467] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 345.453289][T14467] team0: Port device team_slave_0 added [ 345.467298][T14467] team0: Port device team_slave_1 added [ 345.544931][T14467] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 345.569002][T14467] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 345.596413][ T5640] Bluetooth: hci5: command tx timeout [ 345.618004][T14467] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 345.755318][ T48] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.865838][T14467] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 345.886174][T14467] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 345.933115][T14467] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 346.013785][T14551] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 346.189059][T14467] hsr_slave_0: entered promiscuous mode [ 346.196142][T14467] hsr_slave_1: entered promiscuous mode [ 346.210024][T14467] debugfs: 'hsr0' already exists in 'hsr' [ 346.215801][T14467] Cannot create hsr debugfs directory [ 346.252011][ T48] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.281498][T14558] debugfs: '1ù!' already exists in 'ieee80211' [ 346.308462][T14561] netlink: 'syz.1.2604': attribute type 1 has an invalid length. [ 346.351569][T14561] 8021q: adding VLAN 0 to HW filter on device bond10 [ 346.416681][T14561] veth3: entered allmulticast mode [ 346.436780][T14561] bond10: (slave veth3): Enslaving as an active interface with a down link [ 346.486065][ T48] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.506966][T14564] bond10: (slave veth0_to_bond): making interface the new active one [ 346.520329][T14564] veth0_to_bond: entered promiscuous mode [ 346.527390][T14564] bond10: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 346.544843][T14561] bond10: entered promiscuous mode [ 346.551247][T14561] bond10: entered allmulticast mode [ 346.558151][T14561] veth0_to_bond: entered allmulticast mode [ 346.574919][T14564] macvlan3: entered promiscuous mode [ 346.580639][T14564] macvlan3: entered allmulticast mode [ 346.587848][T14564] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 346.599873][T14564] bond10: (slave macvlan3): the slave hw address is in use by the bond; giving it the hw address of veth3 [ 346.775605][T14550] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 347.134529][ T48] erspan0: left allmulticast mode [ 347.163685][ T48] erspan0: left promiscuous mode [ 347.174840][ T48] bridge0: port 1(erspan0) entered disabled state [ 347.200668][ T48] pim6reg: left allmulticast mode [ 347.515025][ T48] bond8 (unregistering): (slave ip6gretap1): Removing an active aggregator [ 347.532017][ T48] bond8 (unregistering): (slave ip6gretap1): Releasing backup interface [ 347.676519][ T5640] Bluetooth: hci5: command tx timeout [ 347.781196][ T48] gretap0 (unregistering): left promiscuous mode [ 347.935316][ T48] bond1 (unregistering): Released all slaves [ 347.954548][ T48] bond2 (unregistering): Released all slaves [ 347.972530][ T48] bond3 (unregistering): Released all slaves [ 347.986144][ T48] bond4 (unregistering): Released all slaves [ 348.001594][ T48] bond5 (unregistering): Released all slaves [ 348.023571][ T48] bond0 (unregistering): Released all slaves [ 348.038014][ T48] bond6 (unregistering): Released all slaves [ 348.059051][ T48] bond7 (unregistering): Released all slaves [ 348.074182][ T48] bond8 (unregistering): Released all slaves [ 348.265786][T14630] __nla_validate_parse: 5 callbacks suppressed [ 348.265806][T14630] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2619'. [ 348.291216][T14612] syzkaller0: entered promiscuous mode [ 348.297185][T14630] openvswitch: netlink: Missing key (keys=40, expected=100) [ 348.304534][T14612] syzkaller0: entered allmulticast mode [ 348.313784][ T5288] 8021q: adding VLAN 0 to HW filter on device eth1 [ 348.327937][T14594] debugfs: '1ù!' already exists in 'ieee80211' [ 348.392968][ T48] : left promiscuous mode [ 348.807813][T14650] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.2620'. [ 348.817432][T14650] openvswitch: netlink: Message has 512 unknown bytes. [ 349.756488][ T5640] Bluetooth: hci5: command tx timeout [ 350.463992][ T48] tipc: Disabling bearer [ 350.472688][ T48] tipc: Disabling bearer [ 350.506819][ T48] tipc: Left network mode [ 350.565862][T14654] bond0: entered promiscuous mode [ 350.581420][T14654] bond0: left promiscuous mode [ 350.742365][T14663] openvswitch: netlink: Tunnel attr 25 out of range max 16 [ 350.787424][T14663] openvswitch: netlink: Tunnel attr 25 out of range max 16 [ 351.215310][T14666] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 351.423908][T14698] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2631'. [ 351.556072][T14699] bridge0: port 1(batadv1) entered blocking state [ 351.566637][T14699] bridge0: port 1(batadv1) entered disabled state [ 351.585870][T14699] batadv1: entered allmulticast mode [ 351.608411][T14699] batadv1: entered promiscuous mode [ 351.674589][T14703] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2633'. [ 351.834045][T14707] syzkaller0: entered promiscuous mode [ 351.840387][ T50] Bluetooth: hci5: command tx timeout [ 351.847490][T14707] syzkaller0: entered allmulticast mode [ 352.047924][ T6247] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 352.057495][ T6247] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 352.389360][T14736] netlink: 'syz.1.2643': attribute type 2 has an invalid length. [ 352.419165][T14736] nbd: must specify at least one socket [ 352.477881][T14744] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2636'. [ 352.536088][T14738] bridge0: port 3(veth1_to_bridge) entered blocking state [ 352.556669][T14738] bridge0: port 3(veth1_to_bridge) entered disabled state [ 352.567869][T14738] veth1_to_bridge: entered allmulticast mode [ 352.603548][T14738] veth1_to_bridge: entered promiscuous mode [ 352.614142][T14738] bridge0: adding interface veth1_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 352.637158][T14750] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2642'. [ 352.661323][T14738] bridge0: port 3(veth1_to_bridge) entered blocking state [ 352.668647][T14738] bridge0: port 3(veth1_to_bridge) entered forwarding state [ 352.721777][T14758] netlink: 'syz.0.2642': attribute type 12 has an invalid length. [ 353.093385][T14467] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 353.126738][T14467] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 353.156100][T14467] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 353.169518][T14467] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 353.177991][T14467] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 353.190166][T14467] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 353.202722][T14467] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 353.219955][T14467] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 353.836460][ T50] Bluetooth: hci2: command 0x0406 tx timeout [ 353.842612][ T5640] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 354.150727][ T48] veth0_to_team: left promiscuous mode [ 354.151697][T14805] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2647'. [ 354.169410][ T48] batadv_slave_0: left promiscuous mode [ 354.189095][ T48] hsr_slave_0: left promiscuous mode [ 354.201143][ T48] hsr_slave_1: left promiscuous mode [ 354.251610][ T48] veth1_macvtap: left promiscuous mode [ 354.258616][ T48] veth0_macvtap: left promiscuous mode [ 354.264409][ T48] veth1_vlan: left promiscuous mode [ 354.271335][ T48] veth0_vlan: left promiscuous mode [ 354.551990][T14813] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2650'. [ 354.610091][T14815] netlink: 'syz.1.2651': attribute type 33 has an invalid length. [ 354.925617][ T48] team0 (unregistering): Port device dummy0 removed [ 355.029724][T14805] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2647'. [ 355.247278][T14467] 8021q: adding VLAN 0 to HW filter on device bond0 [ 355.282765][T14467] 8021q: adding VLAN 0 to HW filter on device team0 [ 355.310133][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 355.317377][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 355.360209][ T6247] bridge0: port 2(bridge_slave_1) entered blocking state [ 355.367422][ T6247] bridge0: port 2(bridge_slave_1) entered forwarding state [ 355.521016][T14837] netlink: 'syz.0.2659': attribute type 2 has an invalid length. [ 355.540580][T14467] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 355.551891][T14837] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2659'. [ 355.561735][T14467] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 355.789971][ T48] IPVS: stop unused estimator thread 0... [ 356.108352][T14467] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 356.184101][T14467] veth0_vlan: entered promiscuous mode [ 356.203929][T14467] veth1_vlan: entered promiscuous mode [ 356.277060][T14467] veth0_macvtap: entered promiscuous mode [ 356.295374][T14467] veth1_macvtap: entered promiscuous mode [ 356.353697][T14467] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 356.371202][T14467] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 356.390054][ T88] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.405788][ T88] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.426397][ T88] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.568149][ T88] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.812069][ T6247] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 356.842128][ T6247] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 356.922958][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 356.934304][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 357.238379][T14891] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2676'. [ 357.266950][T14891] vlan2: entered allmulticast mode [ 357.272599][T14891] erspan0: entered allmulticast mode [ 357.413229][ T50] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 357.425725][ T50] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 357.434091][ T50] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 357.452157][ T50] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 357.461844][ T50] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 357.542216][T14900] netlink: 188 bytes leftover after parsing attributes in process `syz.2.2680'. [ 357.822993][ T5628] syz_tun (unregistering): left allmulticast mode [ 357.870257][ T5628] bond15: (slave syz_tun): Releasing backup interface [ 357.889653][T14915] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 357.897023][T14915] IPv6: NLM_F_CREATE should be set when creating new route [ 357.904260][T14915] IPv6: NLM_F_CREATE should be set when creating new route [ 357.911554][T14915] IPv6: NLM_F_CREATE should be set when creating new route [ 358.126149][T14923] x_tables: duplicate entry at hook 3 [ 358.134371][T14896] lo speed is unknown, defaulting to 1000 [ 358.159240][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:b6:c8:12:4e:28, vlan:0) [ 358.171712][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:b6:c8:12:4e:28, vlan:0) [ 358.184196][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:b6:c8:12:4e:28, vlan:0) [ 358.196672][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:b6:c8:12:4e:28, vlan:0) [ 358.209127][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:b6:c8:12:4e:28, vlan:0) [ 358.221620][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:b6:c8:12:4e:28, vlan:0) [ 358.234080][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:b6:c8:12:4e:28, vlan:0) [ 358.246582][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:b6:c8:12:4e:28, vlan:0) [ 358.259062][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:b6:c8:12:4e:28, vlan:0) [ 358.271519][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:b6:c8:12:4e:28, vlan:0) [ 358.375197][T14929] netlink: 188 bytes leftover after parsing attributes in process `syz.0.2690'. [ 358.451608][T14933] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2689'. [ 359.011943][ T6247] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.029186][ T6247] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 359.518037][ T50] Bluetooth: hci3: command tx timeout [ 359.673109][ T6247] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.687169][ T6247] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 359.726135][T14945] bridge0: port 1(batadv0) entered disabled state [ 359.745656][T14945] bridge0: port 1(batadv0) entered blocking state [ 359.752311][T14945] bridge0: port 1(batadv0) entered forwarding state [ 359.786070][T14945] team0: Device bridge0 is of different type [ 359.804009][T14945] bridge0: port 1(batadv0) entered disabled state [ 360.001520][ T6247] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.014683][ T6247] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 360.343496][T14967] netlink: 188 bytes leftover after parsing attributes in process `syz.0.2701'. [ 360.698571][ T6247] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.709347][ T6247] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 361.152680][T14896] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.177841][T14896] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.599903][ T5640] Bluetooth: hci3: command tx timeout [ 362.195049][T14896] bridge_slave_0: entered allmulticast mode [ 363.166416][ C0] net_ratelimit: 18013 callbacks suppressed [ 363.166436][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 363.166439][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:b6:c8:12:4e:28, vlan:0) [ 363.166780][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:b6:c8:12:4e:28, vlan:0) [ 363.172803][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 363.184767][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:b6:c8:12:4e:28, vlan:0) [ 363.196832][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 363.208814][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:b6:c8:12:4e:28, vlan:0) [ 363.220732][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 363.232616][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:b6:c8:12:4e:28, vlan:0) [ 363.244699][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 363.691498][ T50] Bluetooth: hci3: command tx timeout [ 364.776364][ C0] sched: DL replenish lagged too much [ 364.997351][T14896] bridge_slave_0: entered promiscuous mode [ 367.013336][ T50] Bluetooth: hci3: command tx timeout [ 368.176766][ C0] net_ratelimit: 13749 callbacks suppressed [ 368.176787][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 368.176864][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:b6:c8:12:4e:28, vlan:0) [ 368.183184][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 368.195907][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:b6:c8:12:4e:28, vlan:0) [ 368.207114][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 368.220021][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:b6:c8:12:4e:28, vlan:0) [ 368.231136][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 368.243831][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:b6:c8:12:4e:28, vlan:0) [ 368.254990][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 368.267747][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:b6:c8:12:4e:28, vlan:0) [ 368.407152][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 373.186460][ C0] net_ratelimit: 13431 callbacks suppressed [ 373.186480][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 373.186724][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:b6:c8:12:4e:28, vlan:0) [ 373.192900][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 373.205584][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:b6:c8:12:4e:28, vlan:0) [ 373.216924][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 373.229765][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:b6:c8:12:4e:28, vlan:0) [ 373.241010][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 373.253605][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:b6:c8:12:4e:28, vlan:0) [ 373.264833][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 373.277587][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:b6:c8:12:4e:28, vlan:0) [ 378.196476][ C0] net_ratelimit: 13575 callbacks suppressed [ 378.196497][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 378.197495][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:b6:c8:12:4e:28, vlan:0) [ 378.202992][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 378.215913][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:b6:c8:12:4e:28, vlan:0) [ 378.227076][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 378.239750][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:b6:c8:12:4e:28, vlan:0) [ 378.251041][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 378.263775][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:b6:c8:12:4e:28, vlan:0) [ 378.274936][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 378.287650][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:b6:c8:12:4e:28, vlan:0) [ 383.206681][ C1] net_ratelimit: 13560 callbacks suppressed [ 383.206702][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:b6:c8:12:4e:28, vlan:0) [ 383.206823][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 383.213936][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:b6:c8:12:4e:28, vlan:0) [ 383.225156][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 383.237761][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:b6:c8:12:4e:28, vlan:0) [ 383.249154][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 383.262224][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:b6:c8:12:4e:28, vlan:0) [ 383.273320][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 383.286054][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:b6:c8:12:4e:28, vlan:0) [ 383.297260][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 388.216519][ C0] net_ratelimit: 14096 callbacks suppressed [ 388.216540][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 388.217428][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:b6:c8:12:4e:28, vlan:0) [ 388.222930][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 388.235767][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:b6:c8:12:4e:28, vlan:0) [ 388.246973][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 388.259665][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:b6:c8:12:4e:28, vlan:0) [ 388.271023][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 388.283805][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:b6:c8:12:4e:28, vlan:0) [ 388.295039][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 388.307673][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:b6:c8:12:4e:28, vlan:0) [ 393.226565][ C0] net_ratelimit: 14003 callbacks suppressed [ 393.226587][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 393.226744][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:b6:c8:12:4e:28, vlan:0) [ 393.233117][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 393.245787][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:b6:c8:12:4e:28, vlan:0) [ 393.257045][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 393.269709][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:b6:c8:12:4e:28, vlan:0) [ 393.281021][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 393.293785][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:b6:c8:12:4e:28, vlan:0) [ 393.305039][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 393.317646][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:b6:c8:12:4e:28, vlan:0) [ 398.236730][ C0] net_ratelimit: 13809 callbacks suppressed [ 398.236752][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 398.236752][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:b6:c8:12:4e:28, vlan:0) [ 398.237256][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 398.243934][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:b6:c8:12:4e:28, vlan:0) [ 398.255092][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 398.267885][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:b6:c8:12:4e:28, vlan:0) [ 398.279069][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 398.291878][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:b6:c8:12:4e:28, vlan:0) [ 398.302974][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 398.315734][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:b6:c8:12:4e:28, vlan:0) [ 403.246616][ C1] net_ratelimit: 13962 callbacks suppressed [ 403.246636][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:b6:c8:12:4e:28, vlan:0) [ 403.246780][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 403.253748][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:b6:c8:12:4e:28, vlan:0) [ 403.265129][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 403.278052][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:b6:c8:12:4e:28, vlan:0) [ 403.289032][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 403.301773][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:b6:c8:12:4e:28, vlan:0) [ 403.313045][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 403.325567][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:b6:c8:12:4e:28, vlan:0) [ 403.336912][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 408.256331][ C1] net_ratelimit: 13899 callbacks suppressed [ 408.256351][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:b6:c8:12:4e:28, vlan:0) [ 408.256706][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 408.263877][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:b6:c8:12:4e:28, vlan:0) [ 408.274837][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 408.287551][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:b6:c8:12:4e:28, vlan:0) [ 408.298815][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 408.311558][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:b6:c8:12:4e:28, vlan:0) [ 408.322807][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 408.335570][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:b6:c8:12:4e:28, vlan:0) [ 408.346785][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 413.266692][ C0] net_ratelimit: 14349 callbacks suppressed [ 413.266713][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 413.267329][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:b6:c8:12:4e:28, vlan:0) [ 413.273113][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 413.286343][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:b6:c8:12:4e:28, vlan:0) [ 413.297037][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 413.309912][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:b6:c8:12:4e:28, vlan:0) [ 413.321128][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 413.333984][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:b6:c8:12:4e:28, vlan:0) [ 413.345027][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 413.357884][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:b6:c8:12:4e:28, vlan:0) [ 418.276540][ C0] net_ratelimit: 14186 callbacks suppressed [ 418.276562][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 418.276700][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:b6:c8:12:4e:28, vlan:0) [ 418.283014][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 418.295729][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:b6:c8:12:4e:28, vlan:0) [ 418.306968][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 418.319693][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:b6:c8:12:4e:28, vlan:0) [ 418.330864][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 418.343636][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:b6:c8:12:4e:28, vlan:0) [ 418.354787][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 418.367602][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:b6:c8:12:4e:28, vlan:0) [ 423.286400][ C0] net_ratelimit: 14017 callbacks suppressed [ 423.286421][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 423.286697][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:b6:c8:12:4e:28, vlan:0) [ 423.292811][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 423.305609][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:b6:c8:12:4e:28, vlan:0) [ 423.316824][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 423.329572][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:b6:c8:12:4e:28, vlan:0) [ 423.340719][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 423.353489][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:b6:c8:12:4e:28, vlan:0) [ 423.364815][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 423.378367][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:b6:c8:12:4e:28, vlan:0) [ 428.296395][ C0] net_ratelimit: 13897 callbacks suppressed [ 428.296415][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 428.297743][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:b6:c8:12:4e:28, vlan:0) [ 428.302810][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 428.315594][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:b6:c8:12:4e:28, vlan:0) [ 428.326904][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 428.339643][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:b6:c8:12:4e:28, vlan:0) [ 428.350849][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 428.363556][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:b6:c8:12:4e:28, vlan:0) [ 428.374931][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 428.387836][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:b6:c8:12:4e:28, vlan:0) [ 433.306319][ C0] net_ratelimit: 13693 callbacks suppressed [ 433.306341][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 433.306523][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:b6:c8:12:4e:28, vlan:0) [ 433.312780][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 433.326081][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:b6:c8:12:4e:28, vlan:0) [ 433.336893][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 433.349449][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:b6:c8:12:4e:28, vlan:0) [ 433.360926][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 433.373624][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:b6:c8:12:4e:28, vlan:0) [ 433.384899][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 433.397463][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:b6:c8:12:4e:28, vlan:0) [ 438.316395][ C1] net_ratelimit: 13948 callbacks suppressed [ 438.316415][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:b6:c8:12:4e:28, vlan:0) [ 438.316654][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 438.323514][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:b6:c8:12:4e:28, vlan:0) [ 438.334889][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 438.348045][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:b6:c8:12:4e:28, vlan:0) [ 438.359340][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 438.372326][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:b6:c8:12:4e:28, vlan:0) [ 438.383641][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 438.396351][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:b6:c8:12:4e:28, vlan:0) [ 438.407608][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 443.326413][ C1] net_ratelimit: 13738 callbacks suppressed [ 443.326432][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:b6:c8:12:4e:28, vlan:0) [ 443.326451][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 443.333625][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:b6:c8:12:4e:28, vlan:0) [ 443.345080][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 443.357632][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:b6:c8:12:4e:28, vlan:0) [ 443.369043][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 443.381956][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:b6:c8:12:4e:28, vlan:0) [ 443.393740][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 443.406101][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:b6:c8:12:4e:28, vlan:0) [ 443.417386][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 448.336657][ C0] net_ratelimit: 13720 callbacks suppressed [ 448.336677][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 448.336777][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:b6:c8:12:4e:28, vlan:0) [ 448.343118][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 448.355765][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:b6:c8:12:4e:28, vlan:0) [ 448.367124][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 448.379745][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:b6:c8:12:4e:28, vlan:0) [ 448.391123][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 448.403765][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:b6:c8:12:4e:28, vlan:0) [ 448.415104][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 448.428025][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:b6:c8:12:4e:28, vlan:0) [ 453.346537][ C0] net_ratelimit: 13823 callbacks suppressed [ 453.346559][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 453.347089][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:b6:c8:12:4e:28, vlan:0) [ 453.354843][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 453.367540][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:b6:c8:12:4e:28, vlan:0) [ 453.378707][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 453.391569][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:b6:c8:12:4e:28, vlan:0) [ 453.402879][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 453.415555][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:b6:c8:12:4e:28, vlan:0) [ 453.426854][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 453.439860][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:b6:c8:12:4e:28, vlan:0) [ 458.356460][ C0] net_ratelimit: 13970 callbacks suppressed [ 458.356483][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 458.356568][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:b6:c8:12:4e:28, vlan:0) [ 458.363547][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 458.377332][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:b6:c8:12:4e:28, vlan:0) [ 458.388760][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 458.401846][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:b6:c8:12:4e:28, vlan:0) [ 458.413330][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 458.426536][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:b6:c8:12:4e:28, vlan:0) [ 458.438406][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 458.451383][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:b6:c8:12:4e:28, vlan:0) [ 460.565298][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 463.366592][ C1] net_ratelimit: 13862 callbacks suppressed [ 463.366592][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 463.366609][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:b6:c8:12:4e:28, vlan:0) [ 463.367771][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:b6:c8:12:4e:28, vlan:0) [ 463.373024][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 463.385697][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:b6:c8:12:4e:28, vlan:0) [ 463.396963][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 463.409968][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:b6:c8:12:4e:28, vlan:0) [ 463.420957][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 463.433706][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:b6:c8:12:4e:28, vlan:0) [ 463.444895][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 465.696810][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 465.786298][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 465.793283][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5623/1:b..l [ 465.801707][ C1] rcu: (detected by 1, t=10503 jiffies, g=59037, q=3674 ncpus=2) [ 465.809541][ C1] task:syz-executor state:R running task stack:21720 pid:5623 tgid:5623 ppid:5621 task_flags:0x400140 flags:0x00080000 [ 465.824347][ C1] Call Trace: [ 465.827652][ C1] [ 465.830605][ C1] __schedule+0x17d9/0x56c0 [ 465.835431][ C1] ? __lock_acquire+0x683/0x2cf0 [ 465.840451][ C1] ? __pfx___schedule+0x10/0x10 [ 465.845334][ C1] ? __lock_acquire+0x683/0x2cf0 [ 465.850311][ C1] preempt_schedule_irq+0x4d/0xa0 [ 465.855783][ C1] irqentry_exit+0x14f/0x8f0 [ 465.860790][ C1] ? trace_irq_disable+0x3b/0x140 [ 465.865988][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 465.872122][ C1] RIP: 0010:lock_acquire+0x221/0x350 [ 465.877436][ C1] Code: ff ff ff e8 81 90 2a 0a f7 44 24 08 00 02 00 00 0f 84 3a ff ff ff 65 48 8b 05 6b 9b c9 11 48 3b 44 24 58 75 33 fb 48 83 c4 60 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 90 90 2d 0a cc 48 8d 3d b8 9a b8 [ 465.898156][ C1] RSP: 0018:ffffc90003e0f4e0 EFLAGS: 00000282 [ 465.904260][ C1] RAX: 3ef47a0495dfb600 RBX: 0000000000000000 RCX: 0000000000000046 [ 465.912344][ C1] RDX: 00000000c1e3b5cc RSI: ffffffff8e4ab4ea RDI: ffffffff8c4bba80 [ 465.920335][ C1] RBP: ffffffff8177021f R08: ffffffff8177021f R09: 0000000000000000 [ 465.928414][ C1] R10: 0000000000000000 R11: ffffffff8eb59c20 R12: 0000000000000002 [ 465.936585][ C1] R13: ffffffff8eb59c20 R14: 0000000000000000 R15: 0000000000000246 [ 465.944585][ C1] ? unwind_next_frame+0x8f/0x2550 [ 465.949772][ C1] ? unwind_next_frame+0x8f/0x2550 [ 465.954919][ C1] ? do_syscall_64+0x174/0x580 [ 465.959785][ C1] ? unwind_next_frame+0x8f/0x2550 [ 465.964917][ C1] unwind_next_frame+0xac/0x2550 [ 465.969891][ C1] ? unwind_next_frame+0x8f/0x2550 [ 465.975027][ C1] ? __x64_sys_newfstat+0x133/0x270 [ 465.980294][ C1] ? unwind_next_frame+0x8f/0x2550 [ 465.985429][ C1] ? __kmalloc_noprof+0x1ad/0x720 [ 465.990502][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 465.996714][ C1] arch_stack_walk+0x11b/0x150 [ 466.001545][ C1] ? do_syscall_64+0x174/0x580 [ 466.006338][ C1] stack_trace_save+0xa9/0x100 [ 466.011119][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 466.016516][ C1] ? stack_trace_save+0xa9/0x100 [ 466.021475][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 466.026867][ C1] ? __lock_acquire+0x683/0x2cf0 [ 466.031836][ C1] kasan_save_track+0x3e/0x80 [ 466.036575][ C1] ? kasan_save_track+0x3e/0x80 [ 466.041456][ C1] ? __kasan_kmalloc+0x93/0xb0 [ 466.046242][ C1] ? __kmalloc_noprof+0x375/0x720 [ 466.051281][ C1] ? tomoyo_encode+0x2ad/0x570 [ 466.056250][ C1] ? tomoyo_realpath_from_path+0x5fa/0x640 [ 466.062074][ C1] ? tomoyo_path_perm+0x283/0x560 [ 466.067129][ C1] ? security_inode_getattr+0x12b/0x310 [ 466.072761][ C1] ? __x64_sys_newfstat+0x133/0x270 [ 466.077979][ C1] ? do_syscall_64+0x174/0x580 [ 466.082812][ C1] __kasan_kmalloc+0x93/0xb0 [ 466.087432][ C1] __kmalloc_noprof+0x375/0x720 [ 466.092307][ C1] ? __kmalloc_noprof+0x1ad/0x720 [ 466.097356][ C1] ? tomoyo_encode+0x2ad/0x570 [ 466.102146][ C1] ? tomoyo_encode+0x2ad/0x570 [ 466.106940][ C1] tomoyo_encode+0x2ad/0x570 [ 466.111569][ C1] tomoyo_realpath_from_path+0x5fa/0x640 [ 466.117239][ C1] tomoyo_path_perm+0x283/0x560 [ 466.122110][ C1] ? tomoyo_path_perm+0x251/0x560 [ 466.127157][ C1] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 466.132544][ C1] ? __x64_sys_openat+0x138/0x170 [ 466.137661][ C1] security_inode_getattr+0x12b/0x310 [ 466.143053][ C1] __x64_sys_newfstat+0x133/0x270 [ 466.148104][ C1] ? do_sys_openat2+0x14e/0x200 [ 466.152995][ C1] ? __pfx___x64_sys_newfstat+0x10/0x10 [ 466.158621][ C1] ? __pfx___x64_sys_umount+0x10/0x10 [ 466.164515][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.170619][ C1] do_syscall_64+0x174/0x580 [ 466.175242][ C1] ? trace_irq_disable+0x3b/0x140 [ 466.180293][ C1] ? clear_bhb_loop+0x40/0x90 [ 466.185009][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.190922][ C1] RIP: 0033:0x7fe32519c467 [ 466.195355][ C1] RSP: 002b:00007ffd42860148 EFLAGS: 00000206 ORIG_RAX: 0000000000000005 [ 466.203792][ C1] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007fe32519c467 [ 466.211787][ C1] RDX: 0000000000000000 RSI: 00007ffd42860150 RDI: 0000000000000003 [ 466.219777][ C1] RBP: 00007ffd4286133c R08: 0000000000000000 R09: 0000000000000000 [ 466.227781][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 00007ffd42861350 [ 466.235783][ C1] R13: 00007fe3252332ca R14: 00000000000580c9 R15: 00007ffd42861390 [ 466.243802][ C1] [ 468.376739][ C0] net_ratelimit: 13281 callbacks suppressed [ 468.376760][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 468.377730][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:b6:c8:12:4e:28, vlan:0) [ 468.383186][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 468.396075][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:b6:c8:12:4e:28, vlan:0) [ 468.407124][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 468.420060][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:b6:c8:12:4e:28, vlan:0) [ 468.431121][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 468.443990][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:b6:c8:12:4e:28, vlan:0) [ 468.455046][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 468.467983][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:b6:c8:12:4e:28, vlan:0) [ 472.848063][ T5643] Bluetooth: hci5: command 0x0406 tx timeout [ 473.386696][ C0] net_ratelimit: 13495 callbacks suppressed [ 473.386716][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 473.386773][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:b6:c8:12:4e:28, vlan:0) [ 473.393190][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 473.406511][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:b6:c8:12:4e:28, vlan:0) [ 473.417192][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 473.429969][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:b6:c8:12:4e:28, vlan:0) [ 473.441090][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 473.453932][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:b6:c8:12:4e:28, vlan:0) [ 473.465086][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 473.477800][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:b6:c8:12:4e:28, vlan:0)