last executing test programs: 1m14.57212045s ago: executing program 0 (id=4490): r0 = socket$inet6(0xa, 0x2, 0x0) socket$netlink(0x10, 0x3, 0xf) r1 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r2}) 1m14.215942618s ago: executing program 0 (id=4493): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0x2, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000000), 0x0) 1m13.957103721s ago: executing program 0 (id=4497): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x5, 0x5b, "06"}]}, 0x24}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x24, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x5, 0x5b, "cf"}]}, 0x24}}, 0x0) 1m13.792367937s ago: executing program 2 (id=4499): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000080)="2e9b5b0007e03dd65193dfb6c575963f86dd", 0x12}, {0x0}], 0x2) 1m13.771419453s ago: executing program 3 (id=4500): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000900)=@newtaction={0x48, 0x31, 0x1, 0x0, 0x0, {}, [{0x34, 0x1, [@m_pedit={0x30, 0x1, 0x0, 0x0, {{0xa}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x5}}}}]}]}, 0x48}}, 0x0) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback, @in6=@mcast2}}, {{@in6=@dev}, 0x0, @in6=@private1}}, &(0x7f0000000400)=0xe4) r4 = socket$can_j1939(0x1d, 0x2, 0x7) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f00000000c0)={0x1d, r6}, 0x18) connect$can_j1939(r5, &(0x7f0000000140)={0x1d, r6}, 0x18) sendmmsg(r5, &(0x7f0000003e40)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="b875a1431a05b9319c", 0x9}], 0x1}}], 0xa19afd5e7047374e, 0x4) close(r5) recvmmsg(r5, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000040), 0x10, &(0x7f0000000480)=""/230}}], 0x2, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, r7, {0xb, 0xfff2}, {0xfff1, 0x9}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0xfffffffd, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) 1m13.719923193s ago: executing program 0 (id=4501): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEAUTHENTICATE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x30, r0, 0x1, 0x70bd27, 0x25dfdc02, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x20004841}, 0x20000080) 1m13.563236593s ago: executing program 4 (id=4503): r0 = socket$inet6(0xa, 0x2, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x3, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r2}) 1m13.420715263s ago: executing program 0 (id=4504): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x8000) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70b928, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0x4, 0xb}, {0x4, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x5, 0x7, 0x40, 0x9, 0x0, 0xa}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x0) 1m13.420353928s ago: executing program 2 (id=4505): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x5, 0xfff2}, {0xffff, 0x4}, {0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010829bd7000000000000b00000008000300", @ANYRES32=r2, @ANYBLOB="6000508011000a004abee339084eeef16f162471f4000000080003000cac0f000500020007"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 1m13.406815982s ago: executing program 1 (id=4506): r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x10) socketpair$unix(0x1, 0x5, 0x0, 0x0) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x10040) setsockopt$sock_attach_bpf(r0, 0x84, 0x7b, &(0x7f0000000000)=r1, 0x8) 1m13.224396663s ago: executing program 4 (id=4507): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0x2, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000000)=[{0x0}], 0x1) 1m13.190750184s ago: executing program 1 (id=4508): syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) pwritev(r2, &(0x7f0000000100)=[{&(0x7f0000000000)="8e", 0x1}], 0x1, 0x8001, 0x80) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) sendfile(r2, r1, 0x0, 0xf03a0005) 1m13.112231007s ago: executing program 3 (id=4509): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x401, 0xfffffffc, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e21}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240088d0}, 0x0) 1m13.044374027s ago: executing program 2 (id=4510): r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100050c100000000000224e0000", 0x58}], 0x1) 1m13.008270839s ago: executing program 4 (id=4511): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x5, 0x5b, "06"}]}, 0x24}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x24, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x5, 0x5b, "cf"}]}, 0x24}}, 0x0) 1m12.878970167s ago: executing program 3 (id=4512): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000fddbdf250700000008000300", @ANYRES32=r3, @ANYBLOB="0c009900ff070000070000001400040073797a6b616c6c6572300000000000000800050006"], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) socket$nl_route(0x10, 0x3, 0x0) 1m12.824850839s ago: executing program 2 (id=4513): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2, 0x0, 0xa}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x20000000) write$tun(0xffffffffffffffff, &(0x7f0000003240)={@val={0x8, 0x800}, @val={0x5, 0x0, 0x2, 0xe7b6, 0x14, 0x2}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x2c, 0xfc0, 0x64, 0x0, 0x3, 0x6, 0x0, @private=0xa010100, @multicast1}, {{0x4e20, 0x4e28, 0x41424344, 0x41424344, 0x1, 0x0, 0xa, 0x10, 0x7, 0x0, 0x8, {[@md5sig={0x13, 0x12, "e61e00"}]}}, {"ff09eb92334ce7bdbce1cc8ea7c31c4233f717f38859083e7244d871b6582e4b77453efb5c862f933cb39161906e8b6c78ab07fe1b3fe07565e76f3049a8f11350ffa159ce18eb0ce3712cc785657be76b1587f708924c9feb2e292ab97040cca863de23b3b516cc537105bb0404f84119e4260762c50671dc5aab1358ab653fbfb4bbcd3b4664ec16d8f9ec7829cd1af4a5450585bb1de8f968728adf5dec1de9e1e4a8ababf331c67b6c63551249f96344f4f4656e7cd6bf657857a8af5d2df76f377033b968501e40ed92b801d6efaaa61bdc158a6194b1fd1d6380bb7300a70b1d36c1a76ca97d8aec866053ca0d0d4830f966f48a3461bc25fba4dec31acaa7571527df4164e4f6a96c48ac714f8a8e0a4cd14617b52de88f0bee1cffccc96655f4fc658b5a0510e050f6f40aa3d28453590c3af7a4460719f9106f81797c856d60ec8528cc0c9487e69aa50cea9f374fa68593421c48bae1999c875cb205cc55f3c991416ff38e4f093a4c86ad36f19d1b3578242eedcfafd2c931fd2868dc24d9892f790ed560f40a848dd0670f0f611a61640053a2641ddc8ea149145bc5669b176bf12f40d9e0664760a3e476a93a362dd7dfcc3fd9f8be8ee2cd7a0a5fe189031bacbc1ed8e7c15a2bae104b7650c38ed42128a21ad834bac63ed73159e680f90d41475f28567eef33b4c21860ea1cd7a3f56ca286f87608ed49b72d36a1e6b04e4e0ba9ba7f76bece6426a6cad503c8ab33f28772edee91ab52fa29ff4da3893fa0629d1084b2a87f00a468feed92e5fe5aef33ae040aeb89098033fa81bec4535683391297f750f184f06ccb58dfa50ae2d6c159a0208481450bf38bca83f26c50fffe1449895cb8c990aa1cc0dd4cd2d0b4b3cc0006626898fdf274ecfaa1650c61e17f303f41559d75d470da40196aa5dff545903db275a12166b1692f334c70e4c5cf2ca2410989b429e3bc6e2e630adc5d6a039ad7872c4b4754cceeec43a3323d4594fcc28623e65f3067444e098c8817c9eb3f6dc06b6ec407438c09f2c137009c06505d88e0337c765f6c3b16f53bb0d1b235dbdc509ea3fd0996c8cad5bce70eea4d8852e7adfc222b06552d250e70211228251bfb5b95dd3b09bc30fc52337505a6f0689bfca144db622dead3525fbb73056d1b7fa7b08535af3952a8d77a1f34655eb69616c963f4e8b34e88b8405e0e3cd5130c4f98c4e180bfe76ec6cd6ac5e8ccf5d1cf99fdd79bca0a227ee78d2037a55c8593f7ff10bd42d82cd6c4931df7fa6c0c6a8246cef83599095269fb7841aec2cf1afb41d1c7c54136b2737d2c2ae2be604058b657eec27669b99fa669c92a9ebc8e817ed6860070d2fe6bad743ee65d35633de56f026710729102ed175e2ec0af8cc2840af173c71862e90bd370cd3d277a7d2622a5f00946649c1d7894f2a69c3cf8e21276d72c4536149038f9967ec0c748de34376da7971495e0cd783056cdf20cddab2e2201ea43e657e36c54d42c47d1e6a1c9dede599e6c0baac06c2e3fcc5687c5d4706f32337ab639633822dd98089ba20c532fbe4a5e72963d53a86ec34d6a4aa536015a3272c0d4cc0a3a3ab2196ec7a92bf2daf638ba5957941ff0facfe6a161da6a6cbf8e6b40c8b6a601ee91e592f6bb9dc85f84c99e088004ed3f650404934c8b1d436500f3c83333b33be5532076d1a718f80c139db1ac28c953cc23394a5a137567cde82fc681f32e66aa415c2358d02486cb6cb4d6a77e5b27d729e0116773725410332c58b4cc3683fc9dc5235b19a60ea8794986e56e5e8e2ce65655f261ee0c33c8c0b99e7b5bc61fb55040d9e109a3a1182a0f81c2ca081b14cc207b11dad4592add90ff543d2d237421f938af8a010cd197502dbf42f14f1572aabc9f16593a735c07484d61bc43b5f300eb66abe2052cec153f89c1819512316ad728eca65949bf1f903a556ae67871a0d35b0fcb5485e8fae70695cf90547784da27450d6c3e6049bf2f1b923fab49cf4caebccc7a0171aee4364db173c795cc486475427fb92efdbf161ab7a35aecb8e1d5435ea2733cc8dc3f824b00c6d3e05e406de563d1fc6aa77ef76351a3be04557d915df5ed1fd52207872666bbff9ffb84a6e91ae863af42b3e9dd6da62115ab71c6db508875db1a83e631c4cd658a6492cb1a8bd4a42b4546afb74484d519cb5b1a8db29d91ea575a09dc45f63b51b0ace075511556116db62507ed8b163430eea2dcc171890c51afe0ffb22d6595c15112730ce041648d543abf1871bb62b40303b277b2084eaee4895a9e552bcb2d319cbf733d2682940050095fc9499f116e3c828727c2f0755e2c624891a794a1bd9ff52237f13ccf144e67b5311e556333c5b11816fecd78fffb72190480b93e7fe13682b465aad1c2cf564c16d3e8fb07aed4b415f781a52dda6822ed0023b93c07b61e7740470216f29cb9c770ffd33837a6a0bc2990899778c74af304996ec13c1fc935b6d67b23f5190bf8b1bb3cc4e42bb2b9f1e3b330f24fe172396da0c8b52cdb4351a80fcebfcc85e54436327d8ad72d288551540f9a7bda7ecf2f2c41c3e775e26313de86c1b41ea1199321d533abe105ebfd90c9defd30ce9c7ea7a342b310eeca3dd88732dd9d7751c0ae685fbaed556727d2ece266a66ec7adc3a20f377b386ca7c909aba90fef9605ac37d43dd89e4da8455f086c1d2ce9c5b0eb4296ac64b7c244b28b4fd66a8be0442cbeacc7ba871efb11069d7c28dcdaf5798d0025741e461adabb3f270d056b1fe961e6626fc9a533924364687e80aa10e8ae081d743487bcfa97c0e1938dd47fc9075c3b0772284d98e683f0314c4a261845a3e50106e9c0a529b77293c251472a8eb6213ae49b0cc9d569e0a0c4fa1fb10663e4e0b6b0f9cee796aace2a1b42e42758a0180c2ee89119bf9359c6a277a062eda92a932ccf4b72ec1f998224acbe9eb8d594b8861b65ac276f1d401418c7be4d9344b52eb07aa74ba352e347f06e7e923b86cae5c0beb9f7aa0201b6537a82ea8f9281ac6e82a327ea7b879209dd30c1d40c22c402d3e6f09f4b4146b28cac26532eafbb5f6a67f6f734601ab352c804083570087124b23d7d3bff4d31569fcb8c091f157336d11e0e388a91ddf82b05b22dc3cc2ba4355a9453d9329cbca9d52489f15da5849ba32eb11d91184c6a352fe064aae6e85de05288282f911ebf2a932d43413c9bff9cb50f86af7eecca5eb9e3ce7fe9bc1743bcf24d01d02961116a87e4b55ddc1f217fb488c002cd85bb79db625bded4360983abf1e4574a9a46cfe05f0e45da2dd28703599adbae4703aad3ba1cc44813bcdf2432f0e5e9dd67ee8c6b34a9107fb81f21d87dd8fdf270068528685ea3c989beddc08410a59b5ad68d2fd9b37f8b3fddef393433de51b01314e3d6bb08fd7ea5b9abb4d4ccc5a5a43820004ac3870491b8df621be5388e2c3e2c40843d6798c493b308bef505d9f2d2734990a30150b4cefcaeb590118d21f331f201569c778cd5e54e34ec30a73d1fd48cd5d64d444a2a58856a71fa8173713136bdaef1b9cf1776cd7d5be3179ae7a2a95d7138334add686c5b50ca87e41b4c3f5343387cc491e97c280becefd3d72ae959a4fb3e51c15d6dea3210c480342c1748a040879f005f98a8b0d6a32fad631f557694179d117f71ae5fa6d54d4208aca72c5d1e03d34e80b221522c04b1bc7bc1ee008550a1757a1b74a0fea1d22778fd7e7a5f58e41cf72edf60d751bc35223646397457e8f9036838fd3b72e2bc176acc3e1e99a392b1d496cbfbdaa641b2212ef41c1728dd587272849b3a5cbe3b66f7eaf622d2cdf72ada32ccd3e16dddba2c890beaa8dba3773c88415fbcb733084a9bac52b6844f28377ba01fa3a09f74a57d87f31468ee2c64ae05b35fe3d660bcc6ed908b710a1216974db0232d90a124a4e8ee30322a20455feb4d0bef13ce0fafb56f492a99c3fb1c57900330bf75246147b44f23c77554119f1d96a4558d8fff90922af4f9299407344d7292d29ce3446e39bd9277e513e6068394584a08b356e6a0c641108f6e89390290844548a6c8122d8a83cc6c7d7f0c10d330a537d832bc779ea245a37c850b85858885541da0f914e1a41ec5b49ad9b3b41814f66c50bd1f49cd514d027ecd1bd2f002f1989fc621f23d6d5f1b9976ce95c305fa34ebd3404919c3414fd97227a590684ce5af0a18fb4fa6f41d4a3951fb49cc8184b547e9aa2ceb4912975ecf8e956bb29389789b8ceab72e7ae88fb402795ba7712323409fc83cbaf10a523dd4602d9ae7c158a56fee8df04ba4c48cdd63b1ce09bc697ca138f01f261f51bdc05480b7cf5f64836bf8e029d4883d4bc2f53115129cee1d9a9e57b4a5fb4ebef2237a2bdad349baeab05e6b24167ba67ea94f808d9d1386b08b0fd3c92a80ed253db5bb40e6a0c308339c615af56e554ed0d78881228da41706acd8596c52e33abc8a4a3317847dd50b8d77b341063fb29dd02594a540fa737a4dcf9c57ca8717d36e8a8a84eecf9ebb7bb0f4d8cb0f247f982e4fb7a29a7072f08eb1479e278b1084f4faba3c75b6c33438e24e7b454f1e8ee7c64507ef34f37e8655f49cf6871e8012bbf80d2fe2ad9424464d0a408ca50037f1b1221c2d3dbe4dfa75c236f6b59b8a9c8e3a4b1ef73bae3f8d44affc10c72485dee42b73671867221778a6f9ba1ddd5715a6115845af2da8687e0e75f35cca527cb21a07bb2018a574a7e1eb626ad6939990038588cabc63aaafada2c88336f2c764d52cf5c3740371c79ed30f4b7325768c43b9daab5532b4778bdc380bc56bf656eaeea1f7987db28672850e46fce9c9d7dcc7df7b01e9f98ae98890491949c3a9af72cf35227fe88e79d1853ab46903dffd8ceb6060b5a2da5ee061db21e07124b510af4be93a2eda5c9469c73ef661e52d1d3ddf6d0dbd58715730485d26b731da17fb67b1bdedd400cdd472ab88c059e99452b932202fa8500e9b14ec63791857fc33fb97a21469dc318e9799d6b8d3155a9b9ddae7704457f9fbafd0756fcf8464e2398a88b2b4ea3f655cacd390f6df7b195b35b25c6873f0c53ba2939efe513e448ec1c406380ca4e0a6ef53cb183f05bfe99b003429aa5a4709dbf9b6da2fcbc243bcc6b6e8840ed0636af84b6dd3c3b9e50f19c7fda40185dd542f8ff32e7ca9fad274847238e05cf0db24cf7ac1e2cecbcb20bbfe4868b6245899d8e6717a1f9321fd38b87c0c02bb24ed937e9460d03a5a38fa8e0d222105c8527d898f889bbe298b368fff9b951d1b0780352ce8ad10a5dea883292d6cf149618406fc33ca1539da60a1922ee27b7b74aa3507e6a5731bf2c42c879e9efa0750c8bacc63e2225589eab7bf237c259f715248b61278e4ef6f6d238d5bc9bde650795243874b294f228597cf687df0aa8ab1e58548991a1bd903f70408cd4c23f2db7f2ad3f9a0b12a4e52f09270d8f79aa0cde1ffd268d50fcf47c5b2a41898a076e8467cc40de311c26a1f5ff5d1a6693402f927077083490b65e594d5f4e848dc76e03adb210826926ef65e1f63346ad6a14b732cd7a23bf393e72b3c264258d7ea827d03e6"}}}}, 0xfce) 1m12.190103431s ago: executing program 1 (id=4514): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x9102}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x40480, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x3, 0x7fffffff, 0x6361, 0x5, 0xffffffff, 0x407}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd, 0x101}}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x300, r6, 0x3e}, 0x80, &(0x7f0000003600)=[{&(0x7f0000000180)="27030200590214000600006fb96dbcf706e10500000086ddffff1144ee1611", 0x1f}, {&(0x7f0000000640)="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", 0x274}, {&(0x7f0000000240)="acf7aad9756b30", 0x7}], 0x3}, 0x44081) 1m10.342362121s ago: executing program 4 (id=4515): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="0600000000"], 0xc) 1m10.338191998s ago: executing program 3 (id=4516): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) 1m10.295312491s ago: executing program 2 (id=4517): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000001780)={&(0x7f00000003c0)=@caif, 0x80, 0x0}, 0x0) 1m10.293772801s ago: executing program 1 (id=4518): r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x10) socketpair$unix(0x1, 0x5, 0x0, 0x0) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x10040) setsockopt$sock_attach_bpf(r0, 0x84, 0x7b, &(0x7f0000000000)=r1, 0x8) 1m10.109670425s ago: executing program 0 (id=4519): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e23, 0xfffffffc, @loopback}, 0x1c) listen(r1, 0x4) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000080)={0x0, 0x4}, 0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x7}, 0x8) sendmmsg$inet6(r0, &(0x7f0000000980)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000001680)="89", 0x1}], 0x1}}], 0x1, 0x20000000) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000240)=ANY=[], 0x10) 1m10.082850542s ago: executing program 3 (id=4520): unshare(0x22020600) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x6, 0x4, 0x0, 0x1}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xd, 0x20000, 0x4, 0x3, 0x141, r0}, 0x50) 1m10.037076842s ago: executing program 4 (id=4521): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0x2, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000000)=[{0x0}], 0x1) 1m10.03666031s ago: executing program 2 (id=4522): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x44, 0x2, 0x6, 0x3, 0x0, 0x0, {0xd}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x38, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10048047}, 0x4000050) socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m10.035706923s ago: executing program 1 (id=4523): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x2, 0x0, @empty, 0x30}, 0x1c) listen(r0, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_int(r1, 0x6, 0x2, &(0x7f0000000640)=0x653, 0x4) sendto$inet6(r1, &(0x7f0000000240), 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @rand_addr, 0x5}, 0x1c) 1m4.251575039s ago: executing program 3 (id=4524): syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) pwritev(r2, &(0x7f0000000100)=[{&(0x7f0000000000)="8e", 0x1}], 0x1, 0x8001, 0x80) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) sendfile(r2, r1, 0x0, 0xf03a0005) 1m0.955475749s ago: executing program 4 (id=4525): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000100)=0x8001, 0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e23, 0xa, @empty, 0x9}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000480)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0xb, @loopback, 0x1}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000140)='2', 0x1}], 0x1}}], 0x1, 0x8000) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e23, 0x100002, @ipv4={'\x00', '\xff\xff', @local}, 0xffff}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000000680)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0xab, @loopback, 0x8}, 0xfc27, &(0x7f0000000780)=[{&(0x7f0000000900)='2', 0x1}], 0x1}}], 0x1, 0x20000014) shutdown(r2, 0x1) 55.435308192s ago: executing program 1 (id=4526): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x5, 0x5b, "06"}]}, 0x24}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x24, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x5, 0x5b, "cf"}]}, 0x24}}, 0x0) 0s ago: executing program 32 (id=4519): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e23, 0xfffffffc, @loopback}, 0x1c) listen(r1, 0x4) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000080)={0x0, 0x4}, 0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x7}, 0x8) sendmmsg$inet6(r0, &(0x7f0000000980)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000001680)="89", 0x1}], 0x1}}], 0x1, 0x20000000) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000240)=ANY=[], 0x10) kernel console output (not intermixed with test programs): s an invalid length. [ 325.044980][T14598] netlink: 'syz.3.2772': attribute type 1 has an invalid length. [ 325.183480][T14598] bond18: (slave bridge19): making interface the new active one [ 325.198685][T14607] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2772'. [ 325.214193][T14608] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2774'. [ 325.225175][T14598] bond18: (slave bridge19): Enslaving as an active interface with an up link [ 325.238077][T14613] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2776'. [ 325.238244][T14609] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2774'. [ 325.256287][T14609] netlink: 13 bytes leftover after parsing attributes in process `syz.1.2774'. [ 325.292840][T14609] veth3: entered promiscuous mode [ 325.442014][T14618] netlink: 92 bytes leftover after parsing attributes in process `syz.1.2779'. [ 325.450798][T14619] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2778'. [ 325.451802][T14618] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2779'. [ 325.900672][T14636] bond20: (slave bridge20): making interface the new active one [ 325.923445][T14636] bond20: (slave bridge20): Enslaving as an active interface with an up link [ 325.934463][T14641] syzkaller1: entered promiscuous mode [ 325.936634][T14651] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 325.943717][T14641] syzkaller1: entered allmulticast mode [ 326.028369][T14652] 8021q: adding VLAN 0 to HW filter on device bond12 [ 326.093885][T14651] syzkaller0: entered promiscuous mode [ 326.108793][T14651] syzkaller0: entered allmulticast mode [ 326.193462][T14667] FAULT_INJECTION: forcing a failure. [ 326.193462][T14667] name failslab, interval 1, probability 0, space 0, times 0 [ 326.206469][T14667] CPU: 0 UID: 0 PID: 14667 Comm: syz.4.2793 Not tainted syzkaller #0 PREEMPT(full) [ 326.206490][T14667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 326.206500][T14667] Call Trace: [ 326.206506][T14667] [ 326.206513][T14667] dump_stack_lvl+0xe8/0x150 [ 326.206538][T14667] should_fail_ex+0x412/0x560 [ 326.206563][T14667] should_failslab+0xa8/0x100 [ 326.206585][T14667] ? skb_clone+0x212/0x3a0 [ 326.206607][T14667] kmem_cache_alloc_noprof+0x87/0x650 [ 326.206626][T14667] ? sk_filter_trim_cap+0x19e/0xce0 [ 326.206647][T14667] skb_clone+0x212/0x3a0 [ 326.206671][T14667] __netlink_deliver_tap+0x404/0x850 [ 326.206703][T14667] ? netlink_deliver_tap+0x2e/0x1b0 [ 326.206724][T14667] netlink_deliver_tap+0x19c/0x1b0 [ 326.206745][T14667] netlink_dump+0x8ed/0xe10 [ 326.206775][T14667] ? __pfx_netlink_dump+0x10/0x10 [ 326.206806][T14667] ? netlink_recvmsg+0x5d6/0xa50 [ 326.206824][T14667] ? kmem_cache_free+0x182/0x650 [ 326.206850][T14667] netlink_recvmsg+0x690/0xa50 [ 326.206879][T14667] ? __pfx_netlink_recvmsg+0x10/0x10 [ 326.206903][T14667] ? __lock_acquire+0x6b5/0x2cf0 [ 326.206922][T14667] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 326.206941][T14667] ? security_socket_recvmsg+0x7e/0x2c0 [ 326.206964][T14667] ? __pfx_netlink_recvmsg+0x10/0x10 [ 326.206985][T14667] sock_recvmsg_nosec+0x10c/0x140 [ 326.207004][T14667] ____sys_recvmsg+0x3e3/0x4a0 [ 326.207034][T14667] ? __pfx_____sys_recvmsg+0x10/0x10 [ 326.207072][T14667] ? import_iovec+0x73/0xa0 [ 326.207106][T14667] ___sys_recvmsg+0x215/0x590 [ 326.207132][T14667] ? __pfx____sys_recvmsg+0x10/0x10 [ 326.207158][T14667] ? __fget_files+0x2a/0x420 [ 326.207207][T14667] do_recvmmsg+0x334/0x800 [ 326.207236][T14667] ? __pfx_do_recvmmsg+0x10/0x10 [ 326.207269][T14667] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 326.207306][T14667] __x64_sys_recvmmsg+0x198/0x250 [ 326.207331][T14667] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 326.207360][T14667] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.207376][T14667] do_syscall_64+0x15f/0xf80 [ 326.207396][T14667] ? trace_irq_disable+0x3b/0x140 [ 326.207417][T14667] ? clear_bhb_loop+0x40/0x90 [ 326.207435][T14667] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.207450][T14667] RIP: 0033:0x7fdb1939ce59 [ 326.207465][T14667] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 326.207478][T14667] RSP: 002b:00007fdb1a2fa028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 326.207496][T14667] RAX: ffffffffffffffda RBX: 00007fdb19615fa0 RCX: 00007fdb1939ce59 [ 326.207507][T14667] RDX: 0000000000000004 RSI: 0000200000000d80 RDI: 0000000000000003 [ 326.207517][T14667] RBP: 00007fdb1a2fa090 R08: 0000000000000000 R09: 0000000000000000 [ 326.207527][T14667] R10: 0000000000002000 R11: 0000000000000246 R12: 0000000000000002 [ 326.207536][T14667] R13: 00007fdb19616038 R14: 00007fdb19615fa0 R15: 00007ffd20f5bdf8 [ 326.207564][T14667] [ 326.543246][T14668] syzkaller1: entered promiscuous mode [ 326.562369][T14668] syzkaller1: entered allmulticast mode [ 326.709620][T14680] IPVS: ovf: SCTP 172.20.20.187:0 - no destination available [ 326.889382][T14692] validate_nla: 4 callbacks suppressed [ 326.889398][T14692] netlink: 'syz.3.2801': attribute type 1 has an invalid length. [ 326.917282][T14695] openvswitch: netlink: Unknown nsh attribute 0 [ 326.981193][T14700] openvswitch: netlink: nsh attribute has 2657 unknown bytes. [ 327.029856][T14692] bond19: (slave bridge20): making interface the new active one [ 327.040141][T14692] bond19: (slave bridge20): Enslaving as an active interface with an up link [ 327.061315][T14705] FAULT_INJECTION: forcing a failure. [ 327.061315][T14705] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 327.061751][T14703] syzkaller1: entered promiscuous mode [ 327.090490][T14705] CPU: 0 UID: 0 PID: 14705 Comm: syz.2.2807 Not tainted syzkaller #0 PREEMPT(full) [ 327.090521][T14705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 327.090530][T14705] Call Trace: [ 327.090537][T14705] [ 327.090544][T14705] dump_stack_lvl+0xe8/0x150 [ 327.090568][T14705] should_fail_ex+0x412/0x560 [ 327.090593][T14705] _copy_from_user+0x2d/0xb0 [ 327.090615][T14705] ___sys_recvmsg+0x175/0x590 [ 327.090643][T14705] ? __pfx____sys_recvmsg+0x10/0x10 [ 327.090669][T14705] ? __fget_files+0x2a/0x420 [ 327.090715][T14705] do_recvmmsg+0x334/0x800 [ 327.090744][T14705] ? __pfx_do_recvmmsg+0x10/0x10 [ 327.090777][T14705] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 327.090816][T14705] __x64_sys_recvmmsg+0x198/0x250 [ 327.090840][T14705] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 327.090869][T14705] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.090887][T14705] do_syscall_64+0x15f/0xf80 [ 327.090906][T14705] ? trace_irq_disable+0x3b/0x140 [ 327.090928][T14705] ? clear_bhb_loop+0x40/0x90 [ 327.090947][T14705] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.090962][T14705] RIP: 0033:0x7f0230d9ce59 [ 327.090977][T14705] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 327.090990][T14705] RSP: 002b:00007f022eff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 327.091007][T14705] RAX: ffffffffffffffda RBX: 00007f0231015fa0 RCX: 00007f0230d9ce59 [ 327.091017][T14705] RDX: 0000000000000004 RSI: 0000200000000d80 RDI: 0000000000000003 [ 327.091027][T14705] RBP: 00007f022eff6090 R08: 0000000000000000 R09: 0000000000000000 [ 327.091037][T14705] R10: 0000000000002000 R11: 0000000000000246 R12: 0000000000000002 [ 327.091046][T14705] R13: 00007f0231016038 R14: 00007f0231015fa0 R15: 00007ffd0ee3b0b8 [ 327.091074][T14705] [ 327.253730][T14703] syzkaller1: entered allmulticast mode [ 327.509597][T14720] syzkaller0: entered promiscuous mode [ 327.530751][T14720] syzkaller0: entered allmulticast mode [ 327.560173][T14730] netlink: 'syz.1.2815': attribute type 1 has an invalid length. [ 327.689514][T14740] netlink: 'syz.1.2815': attribute type 1 has an invalid length. [ 328.931640][T14732] bond10: (slave bridge10): Enslaving as an active interface with an up link [ 328.950943][T14735] bond20: (slave bridge13): Enslaving as an active interface with an up link [ 328.976952][T14739] macvlan3: entered promiscuous mode [ 328.993046][T14739] macvlan3: entered allmulticast mode [ 329.011916][T14739] bond20: entered promiscuous mode [ 329.032310][T14739] bridge13: entered promiscuous mode [ 329.055848][T14739] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 329.067457][T14739] bond20: left promiscuous mode [ 329.072442][T14739] bridge13: left promiscuous mode [ 329.139770][T14753] netlink: 'syz.2.2823': attribute type 4 has an invalid length. [ 329.241619][T14758] FAULT_INJECTION: forcing a failure. [ 329.241619][T14758] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 329.260602][T14758] CPU: 1 UID: 0 PID: 14758 Comm: syz.3.2822 Not tainted syzkaller #0 PREEMPT(full) [ 329.260624][T14758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 329.260633][T14758] Call Trace: [ 329.260641][T14758] [ 329.260648][T14758] dump_stack_lvl+0xe8/0x150 [ 329.260673][T14758] should_fail_ex+0x412/0x560 [ 329.260699][T14758] _copy_from_user+0x2d/0xb0 [ 329.260722][T14758] kstrtouint_from_user+0xd6/0x180 [ 329.260744][T14758] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 329.260781][T14758] proc_fail_nth_write+0x8e/0x210 [ 329.260809][T14758] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 329.260835][T14758] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 329.260856][T14758] vfs_write+0x29a/0xb90 [ 329.260886][T14758] ? __pfx_vfs_write+0x10/0x10 [ 329.260909][T14758] ? __fget_files+0x2a/0x420 [ 329.260932][T14758] ? __fget_files+0x3a0/0x420 [ 329.260949][T14758] ? __fget_files+0x2a/0x420 [ 329.260976][T14758] ksys_write+0x150/0x270 [ 329.261000][T14758] ? __pfx_ksys_write+0x10/0x10 [ 329.261030][T14758] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.261048][T14758] do_syscall_64+0x15f/0xf80 [ 329.261068][T14758] ? trace_irq_disable+0x3b/0x140 [ 329.261090][T14758] ? clear_bhb_loop+0x40/0x90 [ 329.261111][T14758] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.261126][T14758] RIP: 0033:0x7f242c35d68e [ 329.261141][T14758] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 329.261154][T14758] RSP: 002b:00007f242d2a7fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 329.261171][T14758] RAX: ffffffffffffffda RBX: 00007f242d2a86c0 RCX: 00007f242c35d68e [ 329.261182][T14758] RDX: 0000000000000001 RSI: 00007f242d2a80a0 RDI: 0000000000000004 [ 329.261191][T14758] RBP: 00007f242d2a8090 R08: 0000000000000000 R09: 0000000000000000 [ 329.261201][T14758] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 329.261211][T14758] R13: 00007f242c616038 R14: 00007f242c615fa0 R15: 00007fffb16177e8 [ 329.261240][T14758] [ 329.268390][T14760] syzkaller1: entered promiscuous mode [ 329.429551][T14770] netlink: zone id is out of range [ 329.449189][T14760] syzkaller1: entered allmulticast mode [ 329.466333][T14771] __nla_validate_parse: 12 callbacks suppressed [ 329.466347][T14771] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2828'. [ 329.471761][T14770] netlink: zone id is out of range [ 329.508357][T14770] netlink: zone id is out of range [ 329.513951][T14770] netlink: zone id is out of range [ 329.521241][T14770] netlink: zone id is out of range [ 329.527855][T14770] netlink: zone id is out of range [ 329.533267][T14770] netlink: zone id is out of range [ 329.758376][T14781] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2833'. [ 329.801825][T14785] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2835'. [ 329.889608][T14790] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2837'. [ 329.939962][T14793] x_tables: unsorted entry at hook 1 [ 330.265030][T14811] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2843'. [ 330.274689][T14811] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2843'. [ 332.928748][T14794] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 333.100340][T14822] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 333.114341][T14823] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2850'. [ 333.205974][T14828] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2851'. [ 333.240335][T14830] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2852'. [ 333.282130][T14830] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2852'. [ 333.299540][T14836] bond14: (slave bridge16): Enslaving as an active interface with an up link [ 333.377140][ T808] IPVS: starting estimator thread 0... [ 333.396706][T14828] macvlan3: entered promiscuous mode [ 333.402049][T14828] macvlan3: entered allmulticast mode [ 333.408372][T14828] bond14: entered promiscuous mode [ 333.415889][T14828] bridge16: entered promiscuous mode [ 333.422104][T14828] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 333.430981][T14828] bond14: left promiscuous mode [ 333.437959][T14828] bridge16: left promiscuous mode [ 333.483700][T14845] IPVS: using max 32 ests per chain, 76800 per kthread [ 333.613430][T14855] net_ratelimit: 46 callbacks suppressed [ 333.613447][T14855] openvswitch: netlink: Unknown nsh attribute 0 [ 333.632718][T14853] wlan0: mtu less than device minimum [ 333.640692][T14853] ip6tnl0: Caught tx_queue_len zero misconfig [ 333.717123][T14861] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 333.932636][T14877] netlink: 'syz.4.2871': attribute type 10 has an invalid length. [ 333.952339][T14877] 8021q: adding VLAN 0 to HW filter on device team0 [ 333.963940][T14877] bond0: (slave team0): Enslaving as an active interface with an up link [ 334.084375][T14884] tipc: Disabling bearer [ 334.160513][T14887] openvswitch: netlink: Unknown nsh attribute 0 [ 334.191255][T14890] siw: device registration error -23 [ 334.281126][T14892] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 334.316410][T14898] netlink: 'syz.4.2878': attribute type 8 has an invalid length. [ 334.502804][T14907] __nla_validate_parse: 11 callbacks suppressed [ 334.502822][T14907] netlink: 216 bytes leftover after parsing attributes in process `syz.3.2881'. [ 334.679849][T14921] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2885'. [ 334.697566][T14924] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2887'. [ 334.728494][T14924] sit2: entered promiscuous mode [ 334.729616][T14927] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2886'. [ 334.733869][T14924] sit2: entered allmulticast mode [ 334.793023][T14927] gretap3: entered promiscuous mode [ 334.803753][T14930] netlink: 'syz.3.2889': attribute type 1 has an invalid length. [ 334.841357][T14930] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2889'. [ 334.894638][T14933] netlink: 'syz.3.2889': attribute type 1 has an invalid length. [ 334.900048][T14936] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2891'. [ 334.915688][T14936] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2891'. [ 334.918903][T14933] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2889'. [ 334.978802][T14939] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2890'. [ 335.033291][T14941] openvswitch: netlink: IPv6 tunnel dst address is zero [ 335.070324][T14946] netlink: 'syz.2.2895': attribute type 1 has an invalid length. [ 335.151364][T14946] 8021q: adding VLAN 0 to HW filter on device bond11 [ 335.212532][T14946] bond11: (slave geneve3): making interface the new active one [ 335.222201][T14946] bond11: (slave geneve3): Enslaving as an active interface with an up link [ 335.531233][T14974] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2905'. [ 335.588971][T14976] openvswitch: netlink: Unknown nsh attribute 0 [ 335.632281][T14980] netlink: 'syz.1.2907': attribute type 1 has an invalid length. [ 335.990822][T15003] openvswitch: netlink: IPv6 tunnel dst address is zero [ 336.186002][T15014] bond21: (slave bridge21): Enslaving as an active interface with an up link [ 336.214700][T15020] macvlan1: entered promiscuous mode [ 336.225084][T15020] macvlan1: entered allmulticast mode [ 336.245130][T15020] bond21: entered promiscuous mode [ 336.263340][T15020] bridge21: entered promiscuous mode [ 336.293467][T15020] 8021q: adding VLAN 0 to HW filter on device macvlan1 [ 336.313304][T15020] bond21: left promiscuous mode [ 336.321344][T15020] bridge21: left promiscuous mode [ 336.342272][T15031] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 336.486158][T15042] openvswitch: netlink: IPv6 tunnel dst address is zero [ 336.701627][T15055] tipc: Enabling of bearer rejected, failed to enable media [ 336.816859][T15060] pimreg: entered allmulticast mode [ 336.962894][T15075] openvswitch: netlink: IPv6 tunnel dst address is zero [ 337.021962][T15078] x_tables: unsorted underflow at hook 1 [ 337.083041][T15079] syzkaller0: entered promiscuous mode [ 337.107428][T15079] syzkaller0: entered allmulticast mode [ 337.206472][T15089] syzkaller1: entered promiscuous mode [ 337.212137][T15089] syzkaller1: entered allmulticast mode [ 337.247395][T15090] xt_SECMARK: invalid mode: 9 [ 337.568289][T15103] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 337.630523][T15110] openvswitch: netlink: IPv6 tunnel dst address is zero [ 337.842358][T15119] IPVS: Scheduler module ip_vs_sip not found [ 337.882344][T15126] syzkaller1: entered promiscuous mode [ 337.897752][T15126] syzkaller1: entered allmulticast mode [ 338.030429][T15138] syzkaller0: entered promiscuous mode [ 338.041980][T15138] syzkaller0: entered allmulticast mode [ 338.146687][T15144] bridge15: entered promiscuous mode [ 338.152932][T15144] bridge15: entered allmulticast mode [ 338.658827][T15178] syzkaller1: entered promiscuous mode [ 338.671034][T15178] syzkaller1: entered allmulticast mode [ 338.887957][T15197] openvswitch: netlink: nsh attribute has 170 unknown bytes. [ 338.910138][T15195] openvswitch: netlink: Flow key attr not present in new flow. [ 338.978017][T15199] tipc: Started in network mode [ 338.989400][T15199] tipc: Node identity 7f, cluster identity 4711 [ 339.015080][T15199] tipc: Node number set to 127 [ 339.036198][T15199] Set syz1 is full, maxelem 65536 reached [ 339.049102][T15205] netlink: 'syz.2.2988': attribute type 29 has an invalid length. [ 339.077121][T15205] netlink: 'syz.2.2988': attribute type 29 has an invalid length. [ 339.099607][T15205] netlink: 'syz.2.2988': attribute type 29 has an invalid length. [ 339.134031][T15205] netlink: 'syz.2.2988': attribute type 29 has an invalid length. [ 339.166162][T15205] netlink: 'syz.2.2988': attribute type 29 has an invalid length. [ 339.182353][T15205] netlink: 'syz.2.2988': attribute type 29 has an invalid length. [ 339.215956][T15205] netlink: 'syz.2.2988': attribute type 29 has an invalid length. [ 339.311290][T15216] netlink: 'syz.0.2991': attribute type 4 has an invalid length. [ 339.626615][T15235] openvswitch: netlink: nsh attribute has 86 unknown bytes. [ 339.651866][T15236] openvswitch: netlink: Message has 8 unknown bytes. [ 339.669398][T15238] nbd: couldn't find device at index 2958377 [ 339.806155][T15255] __nla_validate_parse: 25 callbacks suppressed [ 339.806179][T15255] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3002'. [ 340.003414][T15274] netlink: 'syz.0.3006': attribute type 10 has an invalid length. [ 340.175254][T15282] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3008'. [ 340.203938][T15282] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3008'. [ 340.290029][T15285] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3010'. [ 340.321516][T15294] openvswitch: netlink: nsh attribute has 44 unknown bytes. [ 340.381837][T15300] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3015'. [ 340.417348][T15300] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3015'. [ 340.462650][T15300] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3015'. [ 340.489666][T15304] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3016'. [ 340.582795][T15311] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3018'. [ 340.628209][T15311] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3018'. [ 340.901898][T15340] openvswitch: netlink: nsh attribute has 23 unknown bytes. [ 340.911532][T15334] syzkaller1: entered promiscuous mode [ 340.940728][T15334] syzkaller1: entered allmulticast mode [ 340.983006][T15344] Unsupported ieee802154 address type: 0 [ 341.321433][T15368] netlink: 'syz.4.3038': attribute type 1 has an invalid length. [ 341.372473][T15373] openvswitch: netlink: nsh attribute has 13 unknown bytes. [ 341.378288][T15368] 8021q: adding VLAN 0 to HW filter on device bond21 [ 341.432090][T15378] openvswitch: netlink: Unknown nsh attribute 0 [ 341.459918][T15368] bond21: (slave geneve2): making interface the new active one [ 341.512213][T15368] bond21: (slave geneve2): Enslaving as an active interface with an up link [ 341.659435][T15389] syzkaller1: entered promiscuous mode [ 341.666704][T15389] syzkaller1: entered allmulticast mode [ 342.066521][T15419] openvswitch: netlink: nsh attribute has 8 unknown bytes. [ 342.857704][T15465] syzkaller1: entered promiscuous mode [ 342.863344][T15465] syzkaller1: entered allmulticast mode [ 343.085461][T15472] bond16: (slave bridge17): Enslaving as an active interface with an up link [ 343.102007][T15472] macvlan3: entered promiscuous mode [ 343.107706][T15472] macvlan3: entered allmulticast mode [ 343.114576][T15472] bond16: entered promiscuous mode [ 343.119725][T15472] bridge17: entered promiscuous mode [ 343.128749][T15472] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 343.138717][T15472] bond16: left promiscuous mode [ 343.146018][T15472] bridge17: left promiscuous mode [ 343.635252][ T1102] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 343.666860][T15503] syzkaller1: entered promiscuous mode [ 343.674298][T15503] syzkaller1: entered allmulticast mode [ 343.726847][T15505] IPVS: Scheduler module ip_vs_sip not found [ 344.023092][T15526] bond22: (slave bridge22): Enslaving as an active interface with an up link [ 344.064631][T15526] macvlan1: entered promiscuous mode [ 344.079892][T15526] macvlan1: entered allmulticast mode [ 344.088965][T15526] bond22: entered promiscuous mode [ 344.095295][T15526] bridge22: entered promiscuous mode [ 344.101550][T15526] 8021q: adding VLAN 0 to HW filter on device macvlan1 [ 344.109845][T15526] bond22: left promiscuous mode [ 344.115136][T15526] bridge22: left promiscuous mode [ 344.431381][T15551] IPVS: Scheduler module ip_vs_sip not found [ 344.471016][T15555] net_ratelimit: 2 callbacks suppressed [ 344.471031][T15555] openvswitch: netlink: Unknown nsh attribute 0 [ 344.501174][T15557] syzkaller1: entered promiscuous mode [ 344.507002][T15557] syzkaller1: entered allmulticast mode [ 344.798796][T15569] bond20: (slave bridge21): Enslaving as an active interface with an up link [ 344.830271][T15569] macvlan3: entered promiscuous mode [ 344.841938][T15569] macvlan3: entered allmulticast mode [ 344.861073][T15569] bond20: entered promiscuous mode [ 344.872508][T15569] bridge21: entered promiscuous mode [ 344.896944][T15569] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 344.898359][T15580] netlink: 'syz.1.3111': attribute type 1 has an invalid length. [ 344.922413][T15569] bond20: left promiscuous mode [ 344.935525][T15569] bridge21: left promiscuous mode [ 344.989500][T15580] 8021q: adding VLAN 0 to HW filter on device bond23 [ 345.050788][T15588] IPVS: Scheduler module ip_vs_sip not found [ 345.135751][T15580] bond23: (slave geneve3): making interface the new active one [ 345.145817][T15594] __nla_validate_parse: 27 callbacks suppressed [ 345.145832][T15594] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3113'. [ 345.162308][T15580] bond23: (slave geneve3): Enslaving as an active interface with an up link [ 345.200502][T15596] tipc: Enabling of bearer rejected, media not registered [ 345.329385][T15603] syzkaller1: entered promiscuous mode [ 345.355747][T15603] syzkaller1: entered allmulticast mode [ 345.646639][T15620] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 345.726624][T15625] netlink: 'syz.3.3124': attribute type 1 has an invalid length. [ 345.754399][T15625] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3124'. [ 345.768948][T15625] netlink: 'syz.3.3124': attribute type 1 has an invalid length. [ 345.787770][T15635] openvswitch: netlink: IPv6 tunnel dst address is zero [ 345.790932][T15625] netlink: 'syz.3.3124': attribute type 8 has an invalid length. [ 345.824142][T15625] netlink: 582 bytes leftover after parsing attributes in process `syz.3.3124'. [ 346.310141][T15665] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3136'. [ 346.347057][T15665] openvswitch: netlink: Unknown nsh attribute 0 [ 346.414772][T15675] openvswitch: netlink: IPv6 tunnel dst address is zero [ 346.516683][T15667] bond17 (unregistering): Released all slaves [ 346.772568][T15696] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3148'. [ 346.810886][T15696] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3148'. [ 346.842693][T15704] : renamed from bond0 (while UP) [ 346.965916][T15706] openvswitch: netlink: IPv6 tunnel dst address is zero [ 347.309531][T15740] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3161'. [ 347.326425][T15741] netlink: 67 bytes leftover after parsing attributes in process `syz.0.3162'. [ 347.454242][T15747] bond0: (slave bridge11): Enslaving as an active interface with an up link [ 347.513357][T15753] openvswitch: netlink: IPv6 tunnel dst address is zero [ 347.531220][T15740] macvlan2: entered promiscuous mode [ 347.542628][T15740] macvlan2: entered allmulticast mode [ 347.560609][T15740] bond0: entered promiscuous mode [ 347.581051][T15740] bridge11: entered promiscuous mode [ 347.608773][T15740] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 347.630853][T15740] bond0: left promiscuous mode [ 347.657076][T15740] bridge11: left promiscuous mode [ 347.771831][T15773] openvswitch: netlink: Flow actions attr not present in new flow. [ 347.795752][T15774] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3168'. [ 350.085251][T15723] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 350.268481][T15799] openvswitch: netlink: IPv6 tunnel dst address is zero [ 350.293870][T15798] syzkaller1: entered promiscuous mode [ 350.309652][T15798] syzkaller1: entered allmulticast mode [ 350.406562][T15813] openvswitch: netlink: Flow actions attr not present in new flow. [ 350.492713][T15816] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3185'. [ 350.504511][T15816] openvswitch: netlink: Unknown nsh attribute 0 [ 350.680187][T15829] FAULT_INJECTION: forcing a failure. [ 350.680187][T15829] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 350.708613][T15829] CPU: 1 UID: 0 PID: 15829 Comm: syz.1.3191 Not tainted syzkaller #0 PREEMPT(full) [ 350.708634][T15829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 350.708643][T15829] Call Trace: [ 350.708650][T15829] [ 350.708657][T15829] dump_stack_lvl+0xe8/0x150 [ 350.708883][T15829] should_fail_ex+0x412/0x560 [ 350.708971][T15829] _copy_to_user+0x31/0xb0 [ 350.709051][T15829] simple_read_from_buffer+0xe1/0x170 [ 350.709107][T15829] proc_fail_nth_read+0x1bb/0x230 [ 350.709146][T15829] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 350.709169][T15829] ? rw_verify_area+0x2a6/0x4d0 [ 350.709194][T15829] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 350.709214][T15829] vfs_read+0x20c/0xa70 [ 350.709239][T15829] ? __pfx___mutex_lock+0x10/0x10 [ 350.709349][T15829] ? __pfx_vfs_read+0x10/0x10 [ 350.709369][T15829] ? __fget_files+0x2a/0x420 [ 350.709391][T15829] ? __fget_files+0x3a0/0x420 [ 350.709408][T15829] ? __fget_files+0x2a/0x420 [ 350.709433][T15829] ksys_read+0x150/0x270 [ 350.709456][T15829] ? __pfx_ksys_read+0x10/0x10 [ 350.709483][T15829] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.709516][T15829] do_syscall_64+0x15f/0xf80 [ 350.709560][T15829] ? trace_irq_disable+0x3b/0x140 [ 350.709598][T15829] ? clear_bhb_loop+0x40/0x90 [ 350.709617][T15829] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.709631][T15829] RIP: 0033:0x7f7bd735d68e [ 350.709647][T15829] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 350.709660][T15829] RSP: 002b:00007f7bd8178fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 350.709677][T15829] RAX: ffffffffffffffda RBX: 00007f7bd81796c0 RCX: 00007f7bd735d68e [ 350.709688][T15829] RDX: 000000000000000f RSI: 00007f7bd81790a0 RDI: 0000000000000004 [ 350.709697][T15829] RBP: 00007f7bd8179090 R08: 0000000000000000 R09: 0000000000000000 [ 350.709707][T15829] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 350.709716][T15829] R13: 00007f7bd7616038 R14: 00007f7bd7615fa0 R15: 00007ffd2dfeb0d8 [ 350.709744][T15829] [ 350.961809][T15835] openvswitch: netlink: IPv6 tunnel dst address is zero [ 350.966487][T15831] bond12: entered promiscuous mode [ 350.998427][T15831] bond12: entered allmulticast mode [ 351.014780][T15831] 8021q: adding VLAN 0 to HW filter on device bond12 [ 351.022146][T15839] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3195'. [ 351.125255][T15845] openvswitch: netlink: Flow actions attr not present in new flow. [ 351.177693][T15843] bond22: (slave bridge16): Enslaving as an active interface with an up link [ 351.220968][T15839] macvlan0: entered promiscuous mode [ 351.226450][T15839] macvlan0: entered allmulticast mode [ 351.234815][T15839] bond22: entered promiscuous mode [ 351.240493][T15839] bridge16: entered promiscuous mode [ 351.246698][T15839] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 351.260343][T15839] bond22: left promiscuous mode [ 351.272587][T15839] bridge16: left promiscuous mode [ 351.293075][T15846] syzkaller1: entered promiscuous mode [ 351.299248][T15846] syzkaller1: entered allmulticast mode [ 351.634830][T15870] netlink: 'syz.1.3204': attribute type 1 has an invalid length. [ 351.641162][T15869] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3203'. [ 351.671655][T15873] openvswitch: netlink: IPv6 tunnel dst address is zero [ 351.713387][T15871] bond24: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 351.728743][T15871] bond24 (unregistering): Released all slaves [ 351.788462][T15870] workqueue: Failed to create a rescuer kthread for wq "bond24": -EINTR [ 351.790816][T15878] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3206'. [ 351.828628][T15886] openvswitch: netlink: Flow key attr not present in new flow. [ 351.837030][T15887] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3208'. [ 351.968403][T15893] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.3212'. [ 351.997762][T15891] syzkaller1: entered promiscuous mode [ 352.003453][T15891] syzkaller1: entered allmulticast mode [ 352.089477][T15900] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3214'. [ 352.224379][T15910] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 352.262028][T15913] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3219'. [ 352.265438][T15910] netlink: 260 bytes leftover after parsing attributes in process `syz.3.3217'. [ 352.288470][T15913] openvswitch: netlink: Unknown nsh attribute 0 [ 352.424788][T15918] openvswitch: netlink: Flow key attr not present in new flow. [ 352.490287][T15925] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3223'. [ 352.718073][T15939] syzkaller1: entered promiscuous mode [ 352.733317][T15939] syzkaller1: entered allmulticast mode [ 352.816077][T15943] vlan0: entered promiscuous mode [ 352.821190][T15943] bridge0: entered promiscuous mode [ 352.828681][T15947] bond0: left allmulticast mode [ 352.835667][ T76] bond0: (slave bond_slave_0): interface is now down [ 352.847084][ T76] bond0: (slave bond_slave_1): interface is now down [ 352.857045][ T76] bond0: (slave team0): interface is now down [ 352.911568][T15950] bond13: Unable to set peer notification delay as MII monitoring is disabled [ 352.929496][T15950] bond13 (unregistering): Released all slaves [ 353.019078][T15945] bond17: (slave bridge19): Enslaving as an active interface with an up link [ 353.042173][T15951] macvlan3: entered promiscuous mode [ 353.049300][T15951] macvlan3: entered allmulticast mode [ 353.057448][T15951] bond17: entered promiscuous mode [ 353.062679][T15951] bridge19: entered promiscuous mode [ 353.069612][T15951] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 353.084690][T15951] bond17: left promiscuous mode [ 353.089818][T15951] bridge19: left promiscuous mode [ 353.604978][T15998] syzkaller1: entered promiscuous mode [ 353.615808][T15998] syzkaller1: entered allmulticast mode [ 353.742392][T16016] bond18: (slave bridge20): Enslaving as an active interface with an up link [ 353.757725][T16016] macvlan3: entered promiscuous mode [ 353.763093][T16016] macvlan3: entered allmulticast mode [ 353.769486][T16016] bond18: entered promiscuous mode [ 353.776137][T16016] bridge20: entered promiscuous mode [ 353.782030][T16016] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 353.789543][T16016] bond18: left promiscuous mode [ 353.794707][T16016] bridge20: left promiscuous mode [ 355.395018][ T1102] bond0: (slave bond_slave_0): interface is now down [ 355.401882][ T1102] bond0: (slave bond_slave_1): interface is now down [ 355.410136][ T1102] bond0: (slave team0): interface is now down [ 355.420421][ T1102] bond0: now running without any active interface! [ 356.421741][T15987] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 356.648149][T16041] net_ratelimit: 5 callbacks suppressed [ 356.648166][T16041] openvswitch: netlink: IPv6 tunnel dst address is zero [ 356.688757][T16044] __nla_validate_parse: 10 callbacks suppressed [ 356.688773][T16044] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3255'. [ 356.752096][T16049] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3255'. [ 356.768938][T16046] syzkaller1: entered promiscuous mode [ 356.775875][T16048] netlink: 'syz.1.3260': attribute type 1 has an invalid length. [ 356.789403][T16046] syzkaller1: entered allmulticast mode [ 356.888611][T16055] netlink: 'syz.2.3263': attribute type 5 has an invalid length. [ 356.899670][T16048] bond24: (slave bridge23): making interface the new active one [ 356.904250][T16056] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 356.915901][T16048] bond24: (slave bridge23): Enslaving as an active interface with an up link [ 356.943912][T16048] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3260'. [ 357.044379][T16058] netlink: 'syz.2.3265': attribute type 2 has an invalid length. [ 357.104607][T16064] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3267'. [ 357.227766][T16080] openvswitch: netlink: IPv6 tunnel dst address is zero [ 357.343431][T16089] veth0: entered promiscuous mode [ 357.349140][T16089] veth0: left promiscuous mode [ 357.361661][T16064] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3267'. [ 357.471078][T16092] syzkaller1: entered promiscuous mode [ 357.483284][T16095] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 357.505569][T16092] syzkaller1: entered allmulticast mode [ 357.593234][T16099] netlink: 'syz.3.3277': attribute type 1 has an invalid length. [ 357.655490][T16102] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3279'. [ 357.783195][T16099] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3277'. [ 357.794785][T16101] IPVS: length: 222 != 24 [ 357.828983][T16112] bond21: (slave bridge22): making interface the new active one [ 357.843105][T16112] bond21: (slave bridge22): Enslaving as an active interface with an up link [ 357.861002][T16121] openvswitch: netlink: IPv6 tunnel dst address is zero [ 357.897158][T16119] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3283'. [ 357.917977][T16124] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3286'. [ 357.948535][T16124] openvswitch: netlink: Flow actions attr not present in new flow. [ 358.062107][T16131] netlink: 'syz.3.3288': attribute type 12 has an invalid length. [ 358.089614][T16134] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3289'. [ 358.106057][T16135] openvswitch: netlink: IP tunnel dst address not specified [ 358.318309][T16155] syzkaller1: entered promiscuous mode [ 358.324205][T16155] syzkaller1: entered allmulticast mode [ 358.451929][T16165] openvswitch: netlink: IPv6 tunnel dst address is zero [ 358.703164][T16178] openvswitch: netlink: Flow actions attr not present in new flow. [ 358.742001][T16180] veth0: entered promiscuous mode [ 358.748981][T16179] veth0: left promiscuous mode [ 361.025869][T16131] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 361.132621][T16185] openvswitch: netlink: IP tunnel dst address not specified [ 361.767220][T16237] __nla_validate_parse: 5 callbacks suppressed [ 361.767237][T16237] netlink: 11562 bytes leftover after parsing attributes in process `syz.1.3322'. [ 361.810006][T16241] vlan4: entered allmulticast mode [ 361.815239][T16241] hsr0: entered allmulticast mode [ 361.821576][T16241] hsr_slave_0: entered allmulticast mode [ 361.836927][T16241] hsr_slave_1: entered allmulticast mode [ 361.840765][T16246] net_ratelimit: 1650 callbacks suppressed [ 361.840779][T16246] openvswitch: netlink: Flow actions attr not present in new flow. [ 362.052848][T16261] netlink: 'syz.3.3323': attribute type 1 has an invalid length. [ 362.090305][T16261] 8021q: adding VLAN 0 to HW filter on device bond22 [ 362.199683][T16272] netlink: 100 bytes leftover after parsing attributes in process `syz.0.3335'. [ 364.674451][T16228] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 364.885912][T16283] openvswitch: netlink: nsh attribute has 5 unknown bytes. [ 365.056098][T16299] FAULT_INJECTION: forcing a failure. [ 365.056098][T16299] name failslab, interval 1, probability 0, space 0, times 0 [ 365.094532][T16299] CPU: 1 UID: 0 PID: 16299 Comm: syz.3.3343 Not tainted syzkaller #0 PREEMPT(full) [ 365.094553][T16299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 365.094567][T16299] Call Trace: [ 365.094578][T16299] [ 365.094584][T16299] dump_stack_lvl+0xe8/0x150 [ 365.094609][T16299] should_fail_ex+0x412/0x560 [ 365.094634][T16299] should_failslab+0xa8/0x100 [ 365.094681][T16299] ? security_inode_alloc+0x39/0x310 [ 365.094798][T16299] kmem_cache_alloc_noprof+0x87/0x650 [ 365.094832][T16299] security_inode_alloc+0x39/0x310 [ 365.094854][T16299] inode_init_always_gfp+0x9c8/0xda0 [ 365.094878][T16299] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 365.094937][T16299] alloc_inode+0x82/0x1b0 [ 365.094955][T16299] new_inode+0x22/0x170 [ 365.094977][T16299] __debugfs_create_file+0xb8/0x400 [ 365.095051][T16299] debugfs_create_file_full+0x3f/0x60 [ 365.095082][T16299] ref_tracker_dir_debugfs+0x197/0x360 [ 365.095141][T16299] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 365.095187][T16299] ? __kvmalloc_node_noprof+0x545/0x8a0 [ 365.095208][T16299] ? alloc_netdev_mqs+0xa8/0x1210 [ 365.095281][T16299] ? __raw_spin_lock_init+0x45/0x100 [ 365.095322][T16299] alloc_netdev_mqs+0x274/0x1210 [ 365.095336][T16299] ? __pfx_vxlan_setup+0x10/0x10 [ 365.095427][T16299] rtnl_create_link+0x31f/0xd70 [ 365.095473][T16299] rtnl_newlink_create+0x277/0xb70 [ 365.095518][T16299] ? __pfx___nla_validate_parse+0x10/0x10 [ 365.095549][T16299] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 365.095572][T16299] ? __pfx___mutex_lock+0x10/0x10 [ 365.095605][T16299] ? ns_capable+0x89/0xe0 [ 365.095638][T16299] rtnl_newlink+0x166a/0x1bb0 [ 365.095672][T16299] ? __pfx_rtnl_newlink+0x10/0x10 [ 365.095688][T16299] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 365.095739][T16299] ? kasan_quarantine_put+0xbb/0x1f0 [ 365.095759][T16299] ? lockdep_hardirqs_on+0x7a/0x110 [ 365.095783][T16299] ? nlmon_xmit+0xb0/0x100 [ 365.095824][T16299] ? kmem_cache_free+0x182/0x650 [ 365.095856][T16299] ? __lock_acquire+0x6b5/0x2cf0 [ 365.095877][T16299] ? __dev_queue_xmit+0x2b6/0x3950 [ 365.095929][T16299] ? __local_bh_enable_ip+0xd0/0x130 [ 365.095945][T16299] ? lockdep_hardirqs_on+0x7a/0x110 [ 365.095968][T16299] ? __dev_queue_xmit+0x2b6/0x3950 [ 365.095986][T16299] ? __local_bh_enable_ip+0xd0/0x130 [ 365.095998][T16299] ? __dev_queue_xmit+0x2b6/0x3950 [ 365.096025][T16299] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 365.096057][T16299] ? __pfx_rtnl_newlink+0x10/0x10 [ 365.096082][T16299] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 365.096103][T16299] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 365.096122][T16299] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 365.096138][T16299] ? ref_tracker_free+0x693/0x840 [ 365.096161][T16299] ? __pfx_ref_tracker_free+0x10/0x10 [ 365.096192][T16299] netlink_rcv_skb+0x232/0x4b0 [ 365.096255][T16299] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 365.096277][T16299] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 365.096311][T16299] ? netlink_deliver_tap+0x2e/0x1b0 [ 365.096331][T16299] ? netlink_deliver_tap+0x2e/0x1b0 [ 365.096357][T16299] netlink_unicast+0x75c/0x8e0 [ 365.096389][T16299] netlink_sendmsg+0x813/0xb40 [ 365.096416][T16299] ? __pfx_netlink_sendmsg+0x10/0x10 [ 365.096440][T16299] ? aa_sock_msg_perm+0xf1/0x1b0 [ 365.096501][T16299] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 365.096540][T16299] ____sys_sendmsg+0x972/0x9f0 [ 365.096585][T16299] ? __might_fault+0xaf/0x130 [ 365.096610][T16299] ? __pfx_____sys_sendmsg+0x10/0x10 [ 365.096632][T16299] ? import_iovec+0x73/0xa0 [ 365.096674][T16299] ___sys_sendmsg+0x2a5/0x360 [ 365.096689][T16299] ? __lock_acquire+0x6b5/0x2cf0 [ 365.096705][T16299] ? __pfx____sys_sendmsg+0x10/0x10 [ 365.096748][T16299] ? __fget_files+0x2a/0x420 [ 365.096761][T16299] ? __fget_files+0x3a0/0x420 [ 365.096782][T16299] __x64_sys_sendmsg+0x1bd/0x2a0 [ 365.096800][T16299] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 365.096824][T16299] ? __pfx_ksys_write+0x10/0x10 [ 365.096847][T16299] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 365.096859][T16299] do_syscall_64+0x15f/0xf80 [ 365.096875][T16299] ? trace_irq_disable+0x3b/0x140 [ 365.096892][T16299] ? clear_bhb_loop+0x40/0x90 [ 365.096907][T16299] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 365.096919][T16299] RIP: 0033:0x7f242c39ce59 [ 365.096931][T16299] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 365.096946][T16299] RSP: 002b:00007f242d287028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 365.096960][T16299] RAX: ffffffffffffffda RBX: 00007f242c616090 RCX: 00007f242c39ce59 [ 365.096973][T16299] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000005 [ 365.096980][T16299] RBP: 00007f242d287090 R08: 0000000000000000 R09: 0000000000000000 [ 365.096987][T16299] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 365.096994][T16299] R13: 00007f242c616128 R14: 00007f242c616090 R15: 00007fffb16177e8 [ 365.097020][T16299] [ 365.101958][T16299] debugfs: out of free dentries, can not create file 'netdev@ffff888043c98658' [ 365.394105][T16315] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3347'. [ 365.476638][T16319] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 365.481026][T16315] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3347'. [ 365.642251][T16322] IPv6: sit3: Disabled Multicast RS [ 365.655748][T16322] sit3: entered allmulticast mode [ 366.207090][T16352] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3361'. [ 366.225958][T16353] openvswitch: netlink: nsh attribute has 5 unknown bytes. [ 366.237196][T16352] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3361'. [ 366.509456][T16374] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.707200][T16383] SET target dimension over the limit! [ 366.745649][T16385] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3373'. [ 366.873654][T16395] bond13: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 366.889664][T16395] bond13 (unregistering): Released all slaves [ 366.959123][T16405] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3380'. [ 366.961551][T16404] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3379'. [ 367.055950][T16409] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3381'. [ 367.107189][T16407] bond19: (slave bridge21): Enslaving as an active interface with an up link [ 367.139361][T16404] macvlan3: entered promiscuous mode [ 367.145017][T16404] macvlan3: entered allmulticast mode [ 367.151340][T16404] bond19: entered promiscuous mode [ 367.161092][T16404] bridge21: entered promiscuous mode [ 367.173170][T16404] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 367.220740][T16420] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3381'. [ 367.230861][T16404] bond19: left promiscuous mode [ 367.236958][T16404] bridge21: left promiscuous mode [ 367.267802][T16420] netlink: 'syz.3.3381': attribute type 1 has an invalid length. [ 367.279394][T16420] netlink: 'syz.3.3381': attribute type 2 has an invalid length. [ 367.445495][T16428] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3386'. [ 367.487007][T16437] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3389'. [ 367.524378][T16437] team1 (uninitialized): Failed to send options change via netlink (err -105) [ 367.612589][T16437] team1: entered promiscuous mode [ 367.629087][T16437] team1: entered allmulticast mode [ 367.909693][T16480] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 367.919000][T16480] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 367.970286][T16483] netlink: 164 bytes leftover after parsing attributes in process `syz.0.3399'. [ 367.980742][T16483] netlink: 164 bytes leftover after parsing attributes in process `syz.0.3399'. [ 367.991824][T16483] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3399'. [ 368.952325][T16492] x_tables: duplicate underflow at hook 1 [ 369.007091][T16494] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 369.046107][T16494] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3403'. [ 370.390562][T16440] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 372.106283][T16600] FAULT_INJECTION: forcing a failure. [ 372.106283][T16600] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 372.175828][T16600] CPU: 1 UID: 0 PID: 16600 Comm: syz.2.3438 Not tainted syzkaller #0 PREEMPT(full) [ 372.175851][T16600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 372.175860][T16600] Call Trace: [ 372.175867][T16600] [ 372.175874][T16600] dump_stack_lvl+0xe8/0x150 [ 372.175899][T16600] should_fail_ex+0x412/0x560 [ 372.175925][T16600] _copy_from_user+0x2d/0xb0 [ 372.175948][T16600] ___sys_sendmsg+0x1c6/0x360 [ 372.175970][T16600] ? __lock_acquire+0x6b5/0x2cf0 [ 372.175991][T16600] ? __pfx____sys_sendmsg+0x10/0x10 [ 372.176017][T16600] ? kstrtouint+0x6e/0xe0 [ 372.176059][T16600] ? __fget_files+0x2a/0x420 [ 372.176077][T16600] ? __fget_files+0x3a0/0x420 [ 372.176105][T16600] __sys_sendmmsg+0x27c/0x4e0 [ 372.176132][T16600] ? __pfx___sys_sendmmsg+0x10/0x10 [ 372.176151][T16600] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 372.176198][T16600] ? ksys_write+0x242/0x270 [ 372.176221][T16600] ? __pfx_ksys_write+0x10/0x10 [ 372.176249][T16600] __x64_sys_sendmmsg+0xa0/0xc0 [ 372.176269][T16600] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.176286][T16600] do_syscall_64+0x15f/0xf80 [ 372.176305][T16600] ? trace_irq_disable+0x3b/0x140 [ 372.176327][T16600] ? clear_bhb_loop+0x40/0x90 [ 372.176353][T16600] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.176371][T16600] RIP: 0033:0x7f0230d9ce59 [ 372.176386][T16600] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 372.176399][T16600] RSP: 002b:00007f022efd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 372.176415][T16600] RAX: ffffffffffffffda RBX: 00007f0231016090 RCX: 00007f0230d9ce59 [ 372.176424][T16600] RDX: 0000000000000001 RSI: 000020000000a540 RDI: 0000000000000003 [ 372.176432][T16600] RBP: 00007f022efd5090 R08: 0000000000000000 R09: 0000000000000000 [ 372.176441][T16600] R10: 0000000020040891 R11: 0000000000000246 R12: 0000000000000001 [ 372.176449][T16600] R13: 00007f0231016128 R14: 00007f0231016090 R15: 00007ffd0ee3b0b8 [ 372.176474][T16600] [ 372.503126][T16610] x_tables: duplicate underflow at hook 1 [ 372.627327][T16618] __nla_validate_parse: 10 callbacks suppressed [ 372.627344][T16618] netlink: 204 bytes leftover after parsing attributes in process `syz.2.3447'. [ 372.657363][T16618] netlink: 204 bytes leftover after parsing attributes in process `syz.2.3447'. [ 372.700324][T16618] netlink: 204 bytes leftover after parsing attributes in process `syz.2.3447'. [ 372.773345][T16627] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3448'. [ 372.782827][T16618] netlink: 204 bytes leftover after parsing attributes in process `syz.2.3447'. [ 372.806675][T16627] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3448'. [ 372.819054][T16618] netlink: 204 bytes leftover after parsing attributes in process `syz.2.3447'. [ 372.835572][T16618] netlink: 204 bytes leftover after parsing attributes in process `syz.2.3447'. [ 372.855455][T16618] netlink: 204 bytes leftover after parsing attributes in process `syz.2.3447'. [ 372.890550][T16618] netlink: 204 bytes leftover after parsing attributes in process `syz.2.3447'. [ 373.001678][T16607] netlink: 'syz.1.3442': attribute type 1 has an invalid length. [ 373.201497][T16653] FAULT_INJECTION: forcing a failure. [ 373.201497][T16653] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 373.234711][T16653] CPU: 0 UID: 0 PID: 16653 Comm: syz.4.3456 Not tainted syzkaller #0 PREEMPT(full) [ 373.234743][T16653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 373.234752][T16653] Call Trace: [ 373.234759][T16653] [ 373.234765][T16653] dump_stack_lvl+0xe8/0x150 [ 373.234791][T16653] should_fail_ex+0x412/0x560 [ 373.234817][T16653] _copy_from_iter+0x1d3/0x1670 [ 373.234836][T16653] ? unwind_next_frame+0xa6/0x2550 [ 373.234883][T16653] ? __lock_acquire+0x6b5/0x2cf0 [ 373.234902][T16653] ? __pfx__copy_from_iter+0x10/0x10 [ 373.234936][T16653] tun_get_user+0x6cf/0x43e0 [ 373.235024][T16653] ? aa_file_perm+0x192/0x15e0 [ 373.235079][T16653] ? aa_file_perm+0x50e/0x15e0 [ 373.235099][T16653] ? __pfx_tun_get_user+0x10/0x10 [ 373.235120][T16653] ? __lock_acquire+0x6b5/0x2cf0 [ 373.235143][T16653] ? kstrtoull+0x12f/0x1d0 [ 373.235167][T16653] ? ref_tracker_alloc+0x35c/0x4c0 [ 373.235189][T16653] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 373.235210][T16653] ? tun_get+0x1c/0x2f0 [ 373.235228][T16653] ? tun_get+0x1c/0x2f0 [ 373.235249][T16653] ? tun_get+0x1c/0x2f0 [ 373.235267][T16653] ? tun_get+0x1c/0x2f0 [ 373.235289][T16653] tun_chr_write_iter+0x113/0x200 [ 373.235310][T16653] vfs_write+0x61d/0xb90 [ 373.235340][T16653] ? __pfx_vfs_write+0x10/0x10 [ 373.235370][T16653] ? __fget_files+0x2a/0x420 [ 373.235397][T16653] ksys_write+0x150/0x270 [ 373.235420][T16653] ? __pfx_ksys_write+0x10/0x10 [ 373.235448][T16653] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.235465][T16653] do_syscall_64+0x15f/0xf80 [ 373.235486][T16653] ? trace_irq_disable+0x3b/0x140 [ 373.235508][T16653] ? clear_bhb_loop+0x40/0x90 [ 373.235527][T16653] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.235543][T16653] RIP: 0033:0x7fdb1939ce59 [ 373.235558][T16653] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 373.235571][T16653] RSP: 002b:00007fdb1a2fa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 373.235589][T16653] RAX: ffffffffffffffda RBX: 00007fdb19615fa0 RCX: 00007fdb1939ce59 [ 373.235600][T16653] RDX: 000000000000fdef RSI: 0000200000000100 RDI: 0000000000000004 [ 373.235610][T16653] RBP: 00007fdb1a2fa090 R08: 0000000000000000 R09: 0000000000000000 [ 373.235620][T16653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 373.235629][T16653] R13: 00007fdb19616038 R14: 00007fdb19615fa0 R15: 00007ffd20f5bdf8 [ 373.235656][T16653] [ 373.830523][T16684] netlink: 'syz.3.3468': attribute type 15 has an invalid length. [ 373.896184][T16689] IPv6: NLM_F_REPLACE set, but no existing node found! [ 373.994914][T16696] SET target dimension over the limit! [ 374.230155][T16717] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 374.558605][T12612] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 374.860245][T16749] pim6reg1: entered promiscuous mode [ 374.885944][T16749] pim6reg1: entered allmulticast mode [ 375.105431][T16768] bond20: (slave vxcan3): The slave device specified does not support setting the MAC address [ 375.116574][T16768] bond20: (slave vxcan3): Error -95 calling set_mac_address [ 375.192941][T16774] syzkaller1: entered promiscuous mode [ 375.198580][T16774] syzkaller1: entered allmulticast mode [ 375.707186][ T5637] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 375.721384][ T5637] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 375.731972][ T5637] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 375.740360][ T5637] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 375.750967][ T5637] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 375.955148][ T35] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 375.959559][T16795] netlink: 'syz.0.3509': attribute type 11 has an invalid length. [ 375.969673][ T35] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.980146][T16795] netlink: 'syz.0.3509': attribute type 11 has an invalid length. [ 376.150370][ T35] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 376.163063][ T35] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.257815][T16808] openvswitch: netlink: Unknown nsh attribute 0 [ 376.391822][ T35] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 376.407794][ T35] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.519903][T16822] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 376.541175][ T35] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 376.562564][ T35] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.617053][T16789] xfrm0 speed is unknown, defaulting to 1000 [ 377.010015][ T35] bond15: left allmulticast mode [ 377.042573][ T35] bond15: left promiscuous mode [ 377.059990][ T35] bridge0: port 1(bond15) entered disabled state [ 377.366185][T16858] netlink: ct family unspecified [ 377.371322][T16858] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 377.763754][ T35] bond4 (unregistering): (slave ip6gretap1): Releasing active interface [ 377.797171][ T5633] Bluetooth: hci5: command tx timeout [ 377.919530][ T35] erspan0 (unregistering): left promiscuous mode [ 377.943978][ T35] gretap0 (unregistering): left promiscuous mode [ 378.049694][ T35] bond1 (unregistering): (slave bridge1): Releasing active interface [ 378.138499][ T35] bond2 (unregistering): (slave bridge3): Releasing active interface [ 378.199291][ T35] bond3 (unregistering): (slave bridge4): Releasing active interface [ 378.367582][ T35] bond5 (unregistering): (slave bridge8): Releasing backup interface [ 378.417327][ T35] bond6 (unregistering): (slave bridge9): Releasing backup interface [ 378.457728][ T35] bond7 (unregistering): (slave bridge10): Releasing backup interface [ 378.527694][ T35] bond8 (unregistering): (slave bridge11): Releasing backup interface [ 378.578402][ T35] bond12 (unregistering): (slave bridge12): Releasing backup interface [ 378.607961][ T35] bond13 (unregistering): (slave bridge13): Releasing active interface [ 378.688001][ T35] bond14 (unregistering): (slave bridge15): Releasing active interface [ 378.819469][ T35] bond17 (unregistering): (slave bridge18): Releasing active interface [ 378.857748][ T35] bond18 (unregistering): (slave bridge19): Releasing active interface [ 378.918372][ T35] bond19 (unregistering): (slave bridge20): Releasing active interface [ 378.977822][ T35] bond20 (unregistering): (slave bridge21): Releasing backup interface [ 379.017280][ T35] bond21 (unregistering): (slave bridge22): Releasing active interface [ 379.058232][ T35] .` (unregistering): Released all slaves [ 379.069160][ T35] bond1 (unregistering): Released all slaves [ 379.083148][ T35] bond2 (unregistering): Released all slaves [ 379.096394][ T35] bond3 (unregistering): Released all slaves [ 379.109875][ T35] bond4 (unregistering): Released all slaves [ 379.126699][ T35] bond0 (unregistering): Released all slaves [ 379.141773][ T35] bond5 (unregistering): Released all slaves [ 379.158166][ T35] bond6 (unregistering): Released all slaves [ 379.175264][ T35] bond7 (unregistering): Released all slaves [ 379.207202][ T35] bond8 (unregistering): Released all slaves [ 379.222087][ T35] bond9 (unregistering): Released all slaves [ 379.234938][ T35] bond10 (unregistering): Released all slaves [ 379.248816][ T35] bond11 (unregistering): (slave veth5): Releasing active interface [ 379.258919][ T35] bond11 (unregistering): (slave veth7): Releasing active interface [ 379.271735][ T35] bond11 (unregistering): Released all slaves [ 379.286457][ T35] bond12 (unregistering): Released all slaves [ 379.299842][ T35] bond13 (unregistering): Released all slaves [ 379.313930][ T35] bond14 (unregistering): Released all slaves [ 379.329044][ T35] bond15 (unregistering): Released all slaves [ 379.342751][ T35] bond16 (unregistering): (slave veth0_to_bond): Releasing active interface [ 379.352904][ T35] bond16 (unregistering): Released all slaves [ 379.375912][ T35] bond17 (unregistering): Released all slaves [ 379.389148][ T35] bond18 (unregistering): Released all slaves [ 379.402361][ T35] bond19 (unregistering): Released all slaves [ 379.416554][ T35] bond20 (unregistering): Released all slaves [ 379.432400][ T35] bond21 (unregistering): Released all slaves [ 379.450821][ T35] bond22 (unregistering): Released all slaves [ 379.465861][T16789] C speed is unknown, defaulting to 1000 [ 379.520073][T16876] __nla_validate_parse: 43 callbacks suppressed [ 379.520098][T16876] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3533'. [ 379.579472][ T5290] 8021q: adding VLAN 0 to HW filter on device eth1 [ 379.612833][T16789] wg1 speed is unknown, defaulting to 1000 [ 379.775262][ T35] tipc: Disabling bearer [ 379.809424][ T35] tipc: Left network mode [ 379.846871][T16895] veth0: entered promiscuous mode [ 379.876143][ T5637] Bluetooth: hci5: command tx timeout [ 379.909223][T16895] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3537'. [ 380.045729][T16905] openvswitch: netlink: Duplicate or invalid key (type 0). [ 380.053117][T16905] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 380.066635][T16905] openvswitch: netlink: nsh attribute has 5 unknown bytes. [ 380.128979][T16911] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3542'. [ 380.147518][T16911] openvswitch: netlink: Flow actions attr not present in new flow. [ 380.278779][T16890] veth0: left promiscuous mode [ 380.512192][T16928] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3546'. [ 380.793889][T16937] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 381.143071][T16956] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 64993 [ 381.299988][T16966] openvswitch: netlink: EtherType 50a is less than min 600 [ 381.311852][ T5290] 8021q: adding VLAN 0 to HW filter on device eth2 [ 381.415954][T16968] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3558'. [ 381.473171][T16789] bridge0: port 1(bridge_slave_0) entered blocking state [ 381.494006][T16789] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.502624][T16789] bridge_slave_0: entered allmulticast mode [ 381.513216][T16789] bridge_slave_0: entered promiscuous mode [ 381.545695][ T35] hsr_slave_0: left promiscuous mode [ 381.553914][ T35] hsr_slave_1: left promiscuous mode [ 381.569923][ T35] veth1_vlan: left allmulticast mode [ 381.584261][ T35] veth1_macvtap: left promiscuous mode [ 381.591833][ T35] veth0_macvtap: left promiscuous mode [ 381.598739][ T35] veth1_vlan: left promiscuous mode [ 381.886560][ T35] team0 (unregistering): Port device vlan0 removed [ 381.953685][ T5637] Bluetooth: hci5: command tx timeout [ 382.062099][T16789] bridge0: port 2(bridge_slave_1) entered blocking state [ 382.072208][T16789] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.079515][T16789] bridge_slave_1: entered allmulticast mode [ 382.089524][T16789] bridge_slave_1: entered promiscuous mode [ 382.164804][T16789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 382.177324][T16789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 382.230636][T16995] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3568'. [ 382.280389][T16997] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3567'. [ 382.332950][T16997] openvswitch: netlink: Flow key attr not present in new flow. [ 382.376754][T16789] team0: Port device team_slave_0 added [ 382.392511][T17002] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 382.405334][T16789] team0: Port device team_slave_1 added [ 382.486083][T16789] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 382.502879][T16789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 382.561282][T16789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 382.639827][T16789] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 382.669605][T16789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 382.742180][T16789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 382.889496][T17020] syzkaller1: entered promiscuous mode [ 382.895724][ T35] IPVS: stop unused estimator thread 0... [ 382.909424][T17020] syzkaller1: entered allmulticast mode [ 383.049429][T16789] hsr_slave_0: entered promiscuous mode [ 383.078761][T16789] hsr_slave_1: entered promiscuous mode [ 383.104850][T16789] debugfs: 'hsr0' already exists in 'hsr' [ 383.115701][T16789] Cannot create hsr debugfs directory [ 383.266596][T17037] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3579'. [ 383.312235][ T5290] 8021q: adding VLAN 0 to HW filter on device eth3 [ 383.460724][T17049] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 383.765190][T17067] openvswitch: netlink: VXLAN extension 207 out of range max 1 [ 383.997121][T17080] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3591'. [ 384.033705][ T5637] Bluetooth: hci5: command tx timeout [ 384.618064][T17105] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 384.754729][T17112] netlink: 10 bytes leftover after parsing attributes in process `syz.1.3600'. [ 384.775644][T16789] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 384.817124][T16789] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 384.850834][T17112] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3600'. [ 384.862361][T16789] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 384.891522][T17121] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3602'. [ 384.903797][T16789] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 384.911490][T17118] veth0: entered promiscuous mode [ 384.938764][T17123] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3601'. [ 384.949494][T16789] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 384.987372][T16789] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 385.016917][T16789] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 385.041148][T17127] openvswitch: netlink: nsh attribute has 5 unknown bytes. [ 385.071335][T16789] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 385.088794][T17114] veth0: left promiscuous mode [ 385.346127][T16789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 385.391069][T17153] FAULT_INJECTION: forcing a failure. [ 385.391069][T17153] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 385.405566][T17156] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3613'. [ 385.425156][T16789] 8021q: adding VLAN 0 to HW filter on device team0 [ 385.455934][T12594] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.463078][T12594] bridge0: port 1(bridge_slave_0) entered forwarding state [ 385.468095][T17159] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3614'. [ 385.472202][T17153] CPU: 0 UID: 0 PID: 17153 Comm: syz.1.3612 Not tainted syzkaller #0 PREEMPT(full) [ 385.472221][T17153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 385.472231][T17153] Call Trace: [ 385.472237][T17153] [ 385.472244][T17153] dump_stack_lvl+0xe8/0x150 [ 385.472268][T17153] should_fail_ex+0x412/0x560 [ 385.472293][T17153] _copy_from_iter+0x1d3/0x1670 [ 385.472324][T17153] ? __pfx__copy_from_iter+0x10/0x10 [ 385.472341][T17153] ? sock_alloc_send_pskb+0x896/0x990 [ 385.472442][T17153] ? __pfx__copy_from_iter+0x10/0x10 [ 385.472482][T17153] copy_page_from_iter+0x220/0x2d0 [ 385.472507][T17153] skb_copy_datagram_from_iter+0x306/0x710 [ 385.472589][T17153] tun_get_user+0xc5e/0x43e0 [ 385.472623][T17153] ? aa_file_perm+0x192/0x15e0 [ 385.472647][T17153] ? aa_file_perm+0x50e/0x15e0 [ 385.472667][T17153] ? __pfx_tun_get_user+0x10/0x10 [ 385.472688][T17153] ? __lock_acquire+0x6b5/0x2cf0 [ 385.472708][T17153] ? kstrtoull+0x12f/0x1d0 [ 385.472732][T17153] ? ref_tracker_alloc+0x35c/0x4c0 [ 385.472754][T17153] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 385.472776][T17153] ? tun_get+0x1c/0x2f0 [ 385.472794][T17153] ? tun_get+0x1c/0x2f0 [ 385.472817][T17153] ? tun_get+0x1c/0x2f0 [ 385.472837][T17153] ? tun_get+0x1c/0x2f0 [ 385.472859][T17153] tun_chr_write_iter+0x113/0x200 [ 385.472880][T17153] vfs_write+0x61d/0xb90 [ 385.472909][T17153] ? __pfx_vfs_write+0x10/0x10 [ 385.472938][T17153] ? __fget_files+0x2a/0x420 [ 385.472964][T17153] ksys_write+0x150/0x270 [ 385.472986][T17153] ? __pfx_ksys_write+0x10/0x10 [ 385.473014][T17153] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.473030][T17153] do_syscall_64+0x15f/0xf80 [ 385.473051][T17153] ? trace_irq_disable+0x3b/0x140 [ 385.473072][T17153] ? clear_bhb_loop+0x40/0x90 [ 385.473091][T17153] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.473105][T17153] RIP: 0033:0x7f7bd739ce59 [ 385.473120][T17153] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 385.473131][T17153] RSP: 002b:00007f7bd8179028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 385.473147][T17153] RAX: ffffffffffffffda RBX: 00007f7bd7615fa0 RCX: 00007f7bd739ce59 [ 385.473159][T17153] RDX: 000000000000fdef RSI: 0000200000000100 RDI: 0000000000000004 [ 385.473168][T17153] RBP: 00007f7bd8179090 R08: 0000000000000000 R09: 0000000000000000 [ 385.473177][T17153] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 385.473186][T17153] R13: 00007f7bd7616038 R14: 00007f7bd7615fa0 R15: 00007ffd2dfeb0d8 [ 385.473212][T17153] [ 385.502327][ T3336] bridge0: port 2(bridge_slave_1) entered blocking state [ 385.739297][ T3336] bridge0: port 2(bridge_slave_1) entered forwarding state [ 385.795483][T17168] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3616'. [ 385.828348][T17168] netlink: 'syz.2.3616': attribute type 30 has an invalid length. [ 385.837975][T17168] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3616'. [ 385.956292][T17163] macvlan0: entered promiscuous mode [ 385.961838][T17163] macvlan0: entered allmulticast mode [ 385.968525][T17163] bond23: entered promiscuous mode [ 385.976848][T17163] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 385.988884][T17163] bond23: left promiscuous mode [ 386.136464][T17180] veth0: entered promiscuous mode [ 386.154818][T17180] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3619'. [ 386.190325][T17179] veth0: left promiscuous mode [ 386.384104][T17195] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3625'. [ 386.597624][T17206] netlink: 'syz.0.3628': attribute type 2 has an invalid length. [ 386.886769][T17216] veth5: entered promiscuous mode [ 386.903487][T17216] veth5: entered allmulticast mode [ 387.335804][T17240] veth0: entered promiscuous mode [ 387.377855][T16789] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 387.405322][T17237] veth0: left promiscuous mode [ 387.608772][T16789] veth0_vlan: entered promiscuous mode [ 387.641549][T16789] veth1_vlan: entered promiscuous mode [ 387.705483][T16789] veth0_macvtap: entered promiscuous mode [ 387.741236][T16789] veth1_macvtap: entered promiscuous mode [ 387.751941][T17258] xt_nat: multiple ranges no longer supported [ 387.802776][T17263] FAULT_INJECTION: forcing a failure. [ 387.802776][T17263] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 387.856116][T17263] CPU: 0 UID: 0 PID: 17263 Comm: syz.0.3640 Not tainted syzkaller #0 PREEMPT(full) [ 387.856139][T17263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 387.856149][T17263] Call Trace: [ 387.856156][T17263] [ 387.856163][T17263] dump_stack_lvl+0xe8/0x150 [ 387.856189][T17263] should_fail_ex+0x412/0x560 [ 387.856215][T17263] _copy_from_iter+0x1d3/0x1670 [ 387.856239][T17263] ? rcu_is_watching+0x15/0xb0 [ 387.856291][T17263] ? __pfx__copy_from_iter+0x10/0x10 [ 387.856320][T17263] ? netlink_sendmsg+0x650/0xb40 [ 387.856340][T17263] ? skb_put+0x11b/0x210 [ 387.856363][T17263] netlink_sendmsg+0x6c0/0xb40 [ 387.856389][T17263] ? __pfx_netlink_sendmsg+0x10/0x10 [ 387.856411][T17263] ? aa_sock_msg_perm+0xf1/0x1b0 [ 387.856433][T17263] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 387.856457][T17263] ____sys_sendmsg+0x972/0x9f0 [ 387.856477][T17263] ? __might_fault+0xaf/0x130 [ 387.856503][T17263] ? __pfx_____sys_sendmsg+0x10/0x10 [ 387.856532][T17263] ? import_iovec+0x73/0xa0 [ 387.856556][T17263] ___sys_sendmsg+0x2a5/0x360 [ 387.856576][T17263] ? __lock_acquire+0x6b5/0x2cf0 [ 387.856598][T17263] ? __pfx____sys_sendmsg+0x10/0x10 [ 387.856652][T17263] ? __fget_files+0x2a/0x420 [ 387.856670][T17263] ? __fget_files+0x3a0/0x420 [ 387.856696][T17263] __x64_sys_sendmsg+0x1bd/0x2a0 [ 387.856718][T17263] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 387.856755][T17263] ? __pfx_ksys_write+0x10/0x10 [ 387.856786][T17263] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.856804][T17263] do_syscall_64+0x15f/0xf80 [ 387.856825][T17263] ? trace_irq_disable+0x3b/0x140 [ 387.856847][T17263] ? clear_bhb_loop+0x40/0x90 [ 387.856868][T17263] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.856883][T17263] RIP: 0033:0x7faaca99ce59 [ 387.856899][T17263] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 387.856913][T17263] RSP: 002b:00007faacb8dc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 387.856930][T17263] RAX: ffffffffffffffda RBX: 00007faacac15fa0 RCX: 00007faaca99ce59 [ 387.856940][T17263] RDX: 0000000000004886 RSI: 0000200000000240 RDI: 0000000000000003 [ 387.856950][T17263] RBP: 00007faacb8dc090 R08: 0000000000000000 R09: 0000000000000000 [ 387.856959][T17263] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 387.856969][T17263] R13: 00007faacac16038 R14: 00007faacac15fa0 R15: 00007ffc3cf66fe8 [ 387.856996][T17263] [ 388.117339][T17260] bond26: (slave bridge25): Enslaving as an active interface with an up link [ 388.196659][T17266] macvlan1: entered promiscuous mode [ 388.202008][T17266] macvlan1: entered allmulticast mode [ 388.208341][T17266] bond26: entered promiscuous mode [ 388.213471][T17266] bridge25: entered promiscuous mode [ 388.225015][T17266] 8021q: adding VLAN 0 to HW filter on device macvlan1 [ 388.233083][T17266] bond26: left promiscuous mode [ 388.255830][T17266] bridge25: left promiscuous mode [ 388.403420][T16789] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 388.416171][T17282] openvswitch: netlink: nsh attribute has 5 unknown bytes. [ 388.447993][T17285] veth0: entered promiscuous mode [ 388.476479][T16789] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 388.530241][T17283] veth0: left promiscuous mode [ 388.568142][ T3336] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.608250][ T3336] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.650083][ T3336] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.684523][ T3336] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.819014][T17309] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 389.043429][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 389.067042][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 389.266400][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 389.299381][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 390.008932][ T5633] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 390.022948][ T5633] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 390.034406][ T5633] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 390.047126][ T5633] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 390.058942][ T5633] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 390.641984][T12612] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 390.679428][T12612] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.927177][T12612] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 390.937956][T12612] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.980878][T17418] bridge0: entered allmulticast mode [ 391.010813][T17423] bridge_slave_1: left promiscuous mode [ 391.047500][T17423] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.080944][T17423] bridge_slave_0: left allmulticast mode [ 391.092689][T17423] bridge_slave_0: left promiscuous mode [ 391.099307][T17423] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.277788][T12612] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 391.302729][T12612] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.420790][T12612] netdevsim netdevsim1  (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 391.430740][T12612] netdevsim netdevsim1  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.455818][T17366] xfrm0 speed is unknown, defaulting to 1000 [ 391.838136][T12612] bridge_slave_1: left promiscuous mode [ 391.863185][T12612] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.113857][ T5637] Bluetooth: hci4: command tx timeout [ 392.749233][T12612] gretap0 (unregistering): left promiscuous mode [ 392.795761][T12612] bond5 (unregistering): (slave gretap2): Releasing active interface [ 392.834117][T12612] batman_adv: batadv0: Removing interface: gretap3 [ 392.964862][T12612] bond23 (unregistering): (slave geneve3): Releasing active interface [ 393.100958][T12612] bond1 (unregistering): (slave bridge1): Releasing active interface [ 393.128878][T12612] bond4 (unregistering): (slave bridge2): Releasing active interface [ 393.217437][T12612] bond8 (unregistering): (slave bridge4): Releasing active interface [ 393.479275][T12612] bond11 (unregistering): (slave bridge10): Releasing backup interface [ 393.558114][T12612] bond15 (unregistering): (slave bridge12): Releasing active interface [ 393.598553][T12612] bond16 (unregistering): (slave bridge13): Releasing active interface [ 393.869273][T12612] bond18 (unregistering): (slave bridge19): Releasing active interface [ 393.921608][T12612] bond20 (unregistering): (slave bridge20): Releasing active interface [ 393.977156][T12612] bond21 (unregistering): (slave bridge21): Releasing backup interface [ 394.030033][T12612] bond22 (unregistering): (slave bridge22): Releasing backup interface [ 394.086796][T12612] bond24 (unregistering): (slave bridge23): Releasing active interface [ 394.177611][T12612] bond26 (unregistering): (slave bridge25): Releasing backup interface [ 394.194390][ T5637] Bluetooth: hci4: command tx timeout [ 394.237938][T12612] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 394.248738][T12612] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 394.259164][T12612] bond0 (unregistering): (slave team0): Releasing backup interface [ 394.268839][T12612] bond0 (unregistering): Released all slaves [ 394.280337][T12612] bond1 (unregistering): Released all slaves [ 394.294209][T12612] bond2 (unregistering): Released all slaves [ 394.307510][T12612] bond3 (unregistering): Released all slaves [ 394.322027][T12612] bond4 (unregistering): Released all slaves [ 394.339084][T12612] bond5 (unregistering): Released all slaves [ 394.352260][T12612] bond6 (unregistering): Released all slaves [ 394.369810][T12612] bond7 (unregistering): Released all slaves [ 394.387275][T12612] bond8 (unregistering): Released all slaves [ 394.400830][T12612] bond9 (unregistering): Released all slaves [ 394.413960][T12612] bond10 (unregistering): Released all slaves [ 394.437826][T12612] bond11 (unregistering): Released all slaves [ 394.451114][T12612] bond12 (unregistering): Released all slaves [ 394.466974][T12612] bond13 (unregistering): (slave lo): Releasing backup interface [ 394.475580][T12612] bond13 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 394.487293][T12612] bond13 (unregistering): Released all slaves [ 394.505322][T12612] bond14 (unregistering): Released all slaves [ 394.521314][T12612] bond15 (unregistering): Released all slaves [ 394.535512][T12612] bond16 (unregistering): Released all slaves [ 394.548860][T12612] bond17 (unregistering): Released all slaves [ 394.561910][T12612] bond18 (unregistering): Released all slaves [ 394.586213][T12612] bond19 (unregistering): Released all slaves [ 394.600422][T12612] bond20 (unregistering): Released all slaves [ 394.614869][T12612] bond21 (unregistering): Released all slaves [ 394.631443][T12612] bond22 (unregistering): Released all slaves [ 394.655228][T12612] bond23 (unregistering): Released all slaves [ 394.668696][T12612] bond24 (unregistering): Released all slaves [ 394.682960][T12612] bond25 (unregistering): Released all slaves [ 394.701803][T12612] bond26 (unregistering): Released all slaves [ 394.716748][T17366] C speed is unknown, defaulting to 1000 [ 394.743804][ T5290] 8021q: adding VLAN 0 to HW filter on device eth1 [ 394.785867][T17366] wg1 speed is unknown, defaulting to 1000 [ 395.005039][T17517] __nla_validate_parse: 6 callbacks suppressed [ 395.005057][T17517] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3722'. [ 395.116767][T12612] tipc: Left network mode [ 395.367303][T15251] hid-generic 0005:15C2:1012.0001: item fetching failed at offset 0/1 [ 395.378116][T15251] hid-generic 0005:15C2:1012.0001: probe with driver hid-generic failed with error -22 [ 396.273579][ T5637] Bluetooth: hci4: command tx timeout [ 396.642791][ T5290] 8021q: adding VLAN 0 to HW filter on device eth2 [ 396.673322][T17366] bridge0: port 1(bridge_slave_0) entered blocking state [ 396.716459][T17366] bridge0: port 1(bridge_slave_0) entered disabled state [ 396.727095][T17366] bridge_slave_0: entered allmulticast mode [ 396.763409][T17366] bridge_slave_0: entered promiscuous mode [ 396.806947][T17366] bridge0: port 2(bridge_slave_1) entered blocking state [ 396.817867][T17366] bridge0: port 2(bridge_slave_1) entered disabled state [ 396.850196][T17366] bridge_slave_1: entered allmulticast mode [ 396.883752][T17366] bridge_slave_1: entered promiscuous mode [ 396.986213][T12612] veth1_to_team: left promiscuous mode [ 397.029090][T12612] hsr_slave_0: left promiscuous mode [ 397.037351][T12612] hsr_slave_1: left promiscuous mode [ 397.046577][T12612] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 397.054308][T12612] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 397.083559][T12612] veth1_macvtap: left promiscuous mode [ 397.097340][T12612] veth0_macvtap: left promiscuous mode [ 397.318104][T12612] team0 (unregistering): Port device team_slave_1 removed [ 397.445863][T17366] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 397.458025][T17366] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 397.574540][T17366] team0: Port device team_slave_0 added [ 397.587573][T17366] team0: Port device team_slave_1 added [ 397.808914][T17366] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 397.843574][T17366] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 397.918033][T17366] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 398.085330][T17366] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 398.097757][T17366] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 398.124871][T17366] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 398.243827][T17645] syzkaller0: entered promiscuous mode [ 398.249354][T17645] syzkaller0: entered allmulticast mode [ 398.267807][T12612] IPVS: stop unused estimator thread 0... [ 398.357891][ T5637] Bluetooth: hci4: command tx timeout [ 398.488739][T17634] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 398.502183][T17634] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 399.270418][T17634] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 399.283649][T17634] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 399.325786][T17634] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 399.335966][T17634] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 400.688149][ T5290] 8021q: adding VLAN 0 to HW filter on device eth3 [ 400.816521][T17366] hsr_slave_0: entered promiscuous mode [ 400.829743][T17366] hsr_slave_1: entered promiscuous mode [ 401.021930][T17699] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3784'. [ 401.188700][T17634] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 401.221604][T17634] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 401.428774][T17634] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 401.452130][T17634] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 401.522004][T17721] tun0: tun_chr_ioctl cmd 2147767506 [ 404.298812][T17366] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 404.328759][T17366] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 404.345702][T17366] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 404.390962][T17803] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3815'. [ 404.392369][T17366] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 404.430458][T17366] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 404.460314][T17366] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 404.477718][T17366] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 404.505486][T17366] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 404.787034][T17830] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3823'. [ 404.821994][T17366] 8021q: adding VLAN 0 to HW filter on device bond0 [ 404.902310][T17366] 8021q: adding VLAN 0 to HW filter on device team0 [ 404.943806][ T76] bridge0: port 1(bridge_slave_0) entered blocking state [ 404.950968][ T76] bridge0: port 1(bridge_slave_0) entered forwarding state [ 404.989750][ T76] bridge0: port 2(bridge_slave_1) entered blocking state [ 404.996947][ T76] bridge0: port 2(bridge_slave_1) entered forwarding state [ 406.091192][T17366] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 406.262802][T17366] veth0_vlan: entered promiscuous mode [ 406.326624][T17366] veth1_vlan: entered promiscuous mode [ 406.448741][T17366] veth0_macvtap: entered promiscuous mode [ 406.495889][T17366] veth1_macvtap: entered promiscuous mode [ 406.541384][T17932] bond0: (slave tunl0): Error: Device can not be enslaved while up [ 406.581790][T17366] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 406.652366][T17366] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 406.692353][ T76] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.724432][ T76] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.752206][ T76] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.783442][ T76] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.161795][ T1102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 407.196056][ T1102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 407.289462][ T76] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 407.320441][ T76] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 407.979897][ T5633] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 407.992406][ T5633] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 408.004234][ T5633] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 408.021789][ T5633] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 408.029652][ T5633] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 408.629386][T18035] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3887'. [ 408.719101][ T5633] block nbd2: Receive control failed (result -107) [ 408.809152][ T1102] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 408.819841][ T1102] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.946638][T18048] netlink: 'syz.0.3892': attribute type 2 has an invalid length. [ 409.047766][ T1102] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 409.090765][ T1102] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.131478][T18002] xfrm0 speed is unknown, defaulting to 1000 [ 409.231921][ T1102] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 409.249870][ T1102] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.326568][T18066] netlink: 596 bytes leftover after parsing attributes in process `syz.3.3898'. [ 409.653037][ T1102] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 409.717009][ T1102] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.790708][T18002] C speed is unknown, defaulting to 1000 [ 409.817028][T18002] wg1 speed is unknown, defaulting to 1000 [ 410.115891][ T5633] Bluetooth: hci0: command tx timeout [ 410.435279][ T1102] pimreg3: left allmulticast mode [ 410.699580][ T76] smc: removing ib device syz1 [ 410.817672][ T76] smbdirect: ib_dev[syz1] removed [ 410.903032][ T1102] bond9 (unregistering): (slave gretap2): Releasing active interface [ 410.928218][ T1102] bond9 (unregistering): (slave gretap2): the permanent HWaddr of slave - 46:29:e2:c3:41:e8 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 411.056459][ T1102] bond11 (unregistering): (slave geneve3): Releasing active interface [ 411.095801][ T1102] bond7 (unregistering): (slave geneve2): Releasing active interface [ 411.245216][ T1102] bond2 (unregistering): (slave bridge1): Releasing active interface [ 411.571241][ T1102] bond8 (unregistering): (slave bridge6): Releasing backup interface [ 411.829570][ T1102] bond9 (unregistering): (slave bridge9): Releasing active interface [ 411.899698][ T1102] bond10 (unregistering): (slave bridge10): Releasing backup interface [ 412.002345][ T1102] bond0 (unregistering): (slave bridge11): Releasing backup interface [ 412.108488][ T1102]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 412.118740][ T1102]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 412.128293][ T1102]  (unregistering): Released all slaves [ 412.139303][ T1102] bond1 (unregistering): Released all slaves [ 412.152917][ T1102] bond2 (unregistering): Released all slaves [ 412.166953][ T1102] bond3 (unregistering): Released all slaves [ 412.181807][ T1102] bond4 (unregistering): Released all slaves [ 412.194147][ T5633] Bluetooth: hci0: command tx timeout [ 412.207509][ T1102] bond5 (unregistering): Released all slaves [ 412.220812][ T1102] bond6 (unregistering): Released all slaves [ 412.234418][ T1102] bond7 (unregistering): Released all slaves [ 412.249311][ T1102] bond8 (unregistering): Released all slaves [ 412.267570][ T1102] bond9 (unregistering): Released all slaves [ 412.281953][ T1102] bond10 (unregistering): Released all slaves [ 412.298891][ T1102] bond11 (unregistering): Released all slaves [ 412.313319][ T1102] bond0 (unregistering): Released all slaves [ 412.328118][ T1102] bond12 (unregistering): Released all slaves [ 412.362118][T15250] xfrm0 speed is unknown, defaulting to 1000 [ 412.376955][T15250] syz1: Port: 1 Link DOWN [ 412.591359][ T1102] tipc: Left network mode [ 413.295928][T18002] bridge0: port 1(bridge_slave_0) entered blocking state [ 413.327945][T18002] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.346791][T18002] bridge_slave_0: entered allmulticast mode [ 413.368201][T18002] bridge_slave_0: entered promiscuous mode [ 413.397184][T18002] bridge0: port 2(bridge_slave_1) entered blocking state [ 413.412328][T18002] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.425647][T18002] bridge_slave_1: entered allmulticast mode [ 413.446792][T18002] bridge_slave_1: entered promiscuous mode [ 413.561241][T18002] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 413.623697][T18002] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 413.781145][T18002] team0: Port device team_slave_0 added [ 413.812108][T18002] team0: Port device team_slave_1 added [ 413.915445][ T1102] hsr_slave_0: left promiscuous mode [ 413.955555][ T1102] hsr_slave_1: left promiscuous mode [ 414.001090][ T1102] veth1_macvtap: left promiscuous mode [ 414.015833][ T1102] veth0_macvtap: left promiscuous mode [ 414.028143][ T1102] veth1_vlan: left promiscuous mode [ 414.033479][ T1102] veth0_vlan: left promiscuous mode [ 414.082605][T18212] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3947'. [ 414.274887][ T5633] Bluetooth: hci0: command tx timeout [ 414.548089][ T1102] team0 (unregistering): Port device team_slave_1 removed [ 414.577244][ T1102] team0 (unregistering): Port device team_slave_0 removed [ 414.699830][T18002] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 414.710354][T18002] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 414.739175][T18002] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 414.774992][T18002] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 414.781939][T18002] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 414.808729][T18002] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 414.983325][T18002] hsr_slave_0: entered promiscuous mode [ 415.007422][T18002] hsr_slave_1: entered promiscuous mode [ 415.042046][T18002] debugfs: 'hsr0' already exists in 'hsr' [ 415.064115][T18002] Cannot create hsr debugfs directory [ 415.407705][ T1102] IPVS: stop unused estimator thread 0... [ 416.355242][ T5633] Bluetooth: hci0: command tx timeout [ 416.642665][T18318] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3980'. [ 416.659400][T18002] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 416.707176][T18002] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 416.737830][T18002] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 416.761064][T18002] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 416.778709][T18002] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 416.812786][T18002] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 416.845401][T18002] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 416.921671][T18002] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 417.269869][T18002] 8021q: adding VLAN 0 to HW filter on device bond0 [ 417.471158][T18002] 8021q: adding VLAN 0 to HW filter on device team0 [ 417.513439][T12594] bridge0: port 1(bridge_slave_0) entered blocking state [ 417.520637][T12594] bridge0: port 1(bridge_slave_0) entered forwarding state [ 417.566731][T12594] bridge0: port 2(bridge_slave_1) entered blocking state [ 417.573906][T12594] bridge0: port 2(bridge_slave_1) entered forwarding state [ 417.829416][T18369] syzkaller0: entered promiscuous mode [ 417.845886][T18369] syzkaller0: entered allmulticast mode [ 418.539908][T18412] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4006'. [ 418.920655][T18002] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 418.957956][T18439] netlink: 'syz.1.4014': attribute type 1 has an invalid length. [ 419.127804][T18002] veth0_vlan: entered promiscuous mode [ 419.176266][T18002] veth1_vlan: entered promiscuous mode [ 419.252065][T18002] veth0_macvtap: entered promiscuous mode [ 419.280681][T18002] veth1_macvtap: entered promiscuous mode [ 419.339213][T18002] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 419.374194][T18002] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 419.417180][ T1102] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.438426][ T1102] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.464625][ T1102] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.500011][ T1102] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.542652][T18463] syzkaller0: entered promiscuous mode [ 419.559575][T18463] syzkaller0: entered allmulticast mode [ 419.569384][T18470] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4025'. [ 419.777749][ T76] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 419.802406][ T76] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 419.844439][ T80] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 419.872047][ T80] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 419.903193][T18482] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4029'. [ 420.628793][ T5637] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 420.642481][ T5637] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 420.652510][ T5637] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 420.666327][ T5637] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 420.677591][ T5637] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 420.772483][T18519] macvtap1: entered promiscuous mode [ 420.808727][T18519] macvtap1: entered allmulticast mode [ 420.843111][T18519] veth1_vlan: entered allmulticast mode [ 420.928983][T18526] macvtap2: entered promiscuous mode [ 420.945304][T18526] macvtap2: entered allmulticast mode [ 420.967225][T18529] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4046'. [ 420.977412][T18529] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4046'. [ 420.986998][T18529] netlink: 30 bytes leftover after parsing attributes in process `syz.3.4046'. [ 421.715406][T18517] C speed is unknown, defaulting to 1000 [ 421.751078][T18517] wg1 speed is unknown, defaulting to 1000 [ 421.888671][T18581] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4060'. [ 422.270900][T18586] TC_ACT_REPEAT abuse ? [ 422.756748][ T5637] Bluetooth: hci3: command tx timeout [ 422.870559][T18627] vlan2: entered allmulticast mode [ 422.878213][T18627] veth0_to_bond: entered allmulticast mode [ 422.929245][T18517] bridge0: port 1(bridge_slave_0) entered blocking state [ 422.943685][T18517] bridge0: port 1(bridge_slave_0) entered disabled state [ 422.950924][T18517] bridge_slave_0: entered allmulticast mode [ 422.958761][T18517] bridge_slave_0: entered promiscuous mode [ 422.970905][T18517] bridge0: port 2(bridge_slave_1) entered blocking state [ 422.979372][T18517] bridge0: port 2(bridge_slave_1) entered disabled state [ 422.986781][T18517] bridge_slave_1: entered allmulticast mode [ 422.995844][T18517] bridge_slave_1: entered promiscuous mode [ 423.078212][T18517] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 423.102827][T18517] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 423.155370][T18517] team0: Port device team_slave_0 added [ 423.167082][T18517] team0: Port device team_slave_1 added [ 423.239008][T18517] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 423.253657][T18517] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 423.310091][T18517] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 423.324918][T18517] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 423.333705][T18517] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 423.362275][T18517] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 423.556732][T18517] hsr_slave_0: entered promiscuous mode [ 423.586799][T18517] hsr_slave_1: entered promiscuous mode [ 423.601418][T18517] debugfs: 'hsr0' already exists in 'hsr' [ 423.624035][T18517] Cannot create hsr debugfs directory [ 423.672219][T18669] wg1 speed is unknown, defaulting to 1000 [ 424.218616][T18517] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 424.248856][T18517] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.265624][T18699] netlink: 'syz.1.4096': attribute type 6 has an invalid length. [ 424.290404][T18699] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4096'. [ 424.395791][T18703] syzkaller0: entered promiscuous mode [ 424.411546][T18703] syzkaller0: entered allmulticast mode [ 424.477334][T18517] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 424.496402][T18517] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.539263][T18710] netlink: 'syz.2.4097': attribute type 1 has an invalid length. [ 424.637788][T18517] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 424.648411][T18517] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.743143][T18517] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 424.770231][T18517] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.835438][ T5637] Bluetooth: hci3: command tx timeout [ 424.967631][T18517] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 424.990877][T18517] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 425.012270][T18728] bridge0: entered promiscuous mode [ 425.023865][T18728] bridge0: entered allmulticast mode [ 425.044756][T18517] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 425.081323][T18517] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 425.102455][T18728] bridge0: port 3(syz_tun) entered blocking state [ 425.118140][T18728] bridge0: port 3(syz_tun) entered disabled state [ 425.131638][T18728] syz_tun: entered allmulticast mode [ 425.137674][T15252] IPVS: starting estimator thread 0... [ 425.140535][T18728] syz_tun: left allmulticast mode [ 425.149795][T18517] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 425.163188][T18517] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 425.186759][T18517] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 425.199751][T18517] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 425.243600][T18738] IPVS: using max 29 ests per chain, 69600 per kthread [ 425.375515][T18517] 8021q: adding VLAN 0 to HW filter on device bond0 [ 425.421084][T18517] 8021q: adding VLAN 0 to HW filter on device team0 [ 425.489629][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 425.496844][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 425.521611][ T1102] bridge0: port 2(bridge_slave_1) entered blocking state [ 425.528796][ T1102] bridge0: port 2(bridge_slave_1) entered forwarding state [ 425.562623][T18761] bridge0: left allmulticast mode [ 425.573109][T18761] bridge0: port 3(syz_tun) entered blocking state [ 425.581455][T18761] bridge0: port 3(syz_tun) entered disabled state [ 425.602454][T18761] syz_tun: entered allmulticast mode [ 425.610792][T18761] syz_tun: left allmulticast mode [ 425.813099][ T5731] IPVS: starting estimator thread 0... [ 425.813335][T18766] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 425.905998][T18772] IPVS: using max 37 ests per chain, 88800 per kthread [ 426.638215][T18517] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 426.720914][T18792] bridge_slave_0: left allmulticast mode [ 426.758216][T18792] bridge_slave_0: left promiscuous mode [ 426.767196][T18792] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.788259][T18764] infiniband syz1: set active [ 426.802638][T18764] infiniband syz1: added syz_tun [ 426.825465][T18792] bridge_slave_1: left allmulticast mode [ 426.840827][T18764] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 426.847258][T18792] bridge_slave_1: left promiscuous mode [ 426.870423][T18764] infiniband syz1: Couldn't open port 1 [ 426.888087][T18792] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.930493][T18764] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 426.945679][ T5637] Bluetooth: hci3: command tx timeout [ 426.951170][T18764] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 426.969153][T18764] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 427.009655][T18764] RDS/IB: syz1: added [ 427.013730][T18764] smc: adding ib device syz1 with port count 1 [ 427.020240][T18764] smc: ib device syz1 port 1 has no pnetid [ 427.077908][T18792] bond0: (slave bond_slave_0): Releasing backup interface [ 427.113975][T18792] bond0: (slave bond_slave_1): Releasing backup interface [ 427.141549][T18792] team0: Port device team_slave_0 removed [ 427.168563][T18792] team0: Port device team_slave_1 removed [ 427.204853][T18792] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 427.223639][T18792] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 427.247252][T18792] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 427.254850][T18792] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 427.281047][T18792] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 427.812872][T18517] veth0_vlan: entered promiscuous mode [ 427.848440][T18517] veth1_vlan: entered promiscuous mode [ 427.913652][T18517] veth0_macvtap: entered promiscuous mode [ 427.938062][T18517] veth1_macvtap: entered promiscuous mode [ 427.983205][T18517] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 428.018394][T18517] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 428.051410][ T76] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.082273][ T76] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.108902][ T76] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.135106][ T76] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.239754][ T3336] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 428.283565][ T3336] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 428.358972][T12594] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 428.388433][T12594] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 429.018595][ T5637] Bluetooth: hci3: command tx timeout [ 429.828222][T18832] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 430.078321][T18780] Set syz1 is full, maxelem 65536 reached [ 430.179033][T18827] siw: device registration error -23 [ 430.185082][T18798] rdma_rxe: rxe_newlink: failed to add syz_tun [ 430.817608][ T5633] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 430.829658][ T5633] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 430.840310][ T5633] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 430.848535][ T5633] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 430.863274][ T5633] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 431.109219][ T5626] syz_tun (unregistering): left allmulticast mode [ 431.261179][ T1102] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 431.274075][ T1102] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.302240][T18889] mac80211_hwsim hwsim27 syzkaller0: entered promiscuous mode [ 431.321587][T18889] mac80211_hwsim hwsim27 syzkaller0: entered allmulticast mode [ 431.426737][ T1102] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 431.455693][ T1102] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.651809][ T1102] bond0: (slave netdevsim1): Releasing backup interface [ 431.694638][ T1102] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 431.730252][ T1102] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.916332][ T5633] Bluetooth: hci2: command tx timeout [ 433.553356][ T1102] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 433.570707][ T1102] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.592329][T18927] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4174'. [ 433.601529][T18865] C speed is unknown, defaulting to 1000 [ 433.608827][T18927] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 433.675883][T18865] wg1 speed is unknown, defaulting to 1000 [ 434.907498][ T1102] gretap0 (unregistering): left promiscuous mode [ 434.947008][ T1102] bond4 (unregistering): (slave gretap1): Releasing active interface [ 434.993664][ T5633] Bluetooth: hci2: command tx timeout [ 435.161198][ T1102] bond3 (unregistering): (slave bridge2): Releasing active interface [ 435.249970][ T1102] bond9 (unregistering): (slave bridge4): Releasing backup interface [ 435.408574][ T1102] bond11 (unregistering): (slave bridge8): Releasing backup interface [ 435.761553][ T1102] bond14 (unregistering): (slave bridge16): Releasing backup interface [ 435.809021][ T1102] bond16 (unregistering): (slave bridge17): Releasing backup interface [ 435.888092][ T1102] bond17 (unregistering): (slave bridge19): Releasing backup interface [ 435.940349][ T1102] bond18 (unregistering): (slave bridge20): Releasing backup interface [ 435.981465][ T1102] bond19 (unregistering): (slave bridge21): Releasing backup interface [ 436.013262][ T1102] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 436.025901][ T1102] bond0 (unregistering): Released all slaves [ 436.038763][ T1102] bond1 (unregistering): Released all slaves [ 436.056102][ T1102] bond2 (unregistering): Released all slaves [ 436.069649][ T1102] bond3 (unregistering): Released all slaves [ 436.082779][ T1102] bond4 (unregistering): Released all slaves [ 436.108900][ T1102] bond5 (unregistering): Released all slaves [ 436.123093][ T1102] bond6 (unregistering): Released all slaves [ 436.138412][ T1102] bond7 (unregistering): (slave vcan1): Releasing backup interface [ 436.146464][ T1102] vcan1: left promiscuous mode [ 436.152241][ T1102] bond7 (unregistering): Released all slaves [ 436.169505][ T1102] bond8 (unregistering): Released all slaves [ 436.182562][ T1102] bond9 (unregistering): Released all slaves [ 436.195958][ T1102] bond10 (unregistering): Released all slaves [ 436.214342][ T1102] bond11 (unregistering): Released all slaves [ 436.230268][ T1102] bond12 (unregistering): Released all slaves [ 436.245756][ T1102] bond13 (unregistering): Released all slaves [ 436.262520][ T1102] bond14 (unregistering): Released all slaves [ 436.289917][ T1102] bond15 (unregistering): Released all slaves [ 436.303072][ T1102] bond16 (unregistering): Released all slaves [ 436.318246][ T1102] bond17 (unregistering): Released all slaves [ 436.331423][ T1102] bond18 (unregistering): Released all slaves [ 436.354289][ T1102] bond19 (unregistering): Released all slaves [ 436.368003][ T1102] bond20 (unregistering): Released all slaves [ 436.392653][ T5290] 8021q: adding VLAN 0 to HW filter on device eth1 [ 436.542195][ T1102] tipc: Left network mode [ 436.589246][T19028] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4210'. [ 437.079688][ T5633] Bluetooth: hci2: command tx timeout [ 437.171999][T19054] netlink: 5128 bytes leftover after parsing attributes in process `syz.3.4219'. [ 437.205903][T19054] netlink: 5128 bytes leftover after parsing attributes in process `syz.3.4219'. [ 437.216616][T19054] netlink: 560 bytes leftover after parsing attributes in process `syz.3.4219'. [ 437.756134][T19086] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4226'. [ 437.951302][ T5290] 8021q: adding VLAN 0 to HW filter on device eth2 [ 438.082099][T18865] bridge0: port 1(bridge_slave_0) entered blocking state [ 438.091646][T18865] bridge0: port 1(bridge_slave_0) entered disabled state [ 438.099211][T18865] bridge_slave_0: entered allmulticast mode [ 438.107051][T18865] bridge_slave_0: entered promiscuous mode [ 438.138853][ T1102] veth1_to_team: left promiscuous mode [ 438.169879][ T1102] hsr_slave_0: left promiscuous mode [ 438.189702][ T1102] hsr_slave_1: left promiscuous mode [ 438.215264][ T1102] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 438.230372][ T1102] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 438.246675][ T1102] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 438.267903][ T1102] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 438.281296][T19110] netlink: 'syz.4.4239': attribute type 11 has an invalid length. [ 438.289459][T19110] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4239'. [ 438.306712][ T1102] veth1_macvtap: left promiscuous mode [ 438.315928][ T1102] veth1_vlan: left promiscuous mode [ 438.462863][ T1102] pim6reg527 (unregistering): left allmulticast mode [ 438.818742][T18865] bridge0: port 2(bridge_slave_1) entered blocking state [ 438.826120][T18865] bridge0: port 2(bridge_slave_1) entered disabled state [ 438.833294][T18865] bridge_slave_1: entered allmulticast mode [ 438.849322][T18865] bridge_slave_1: entered promiscuous mode [ 438.906052][T19119] bond1: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 438.951754][T19119] bond1 (unregistering): Released all slaves [ 438.978258][T19138] netlink: 'syz.3.4249': attribute type 22 has an invalid length. [ 438.989499][T19133] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.4247'. [ 439.047660][T18865] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 439.088754][T18865] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 439.159345][ T5633] Bluetooth: hci2: command tx timeout [ 439.165122][T19142] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4251'. [ 439.186267][T18865] team0: Port device team_slave_0 added [ 439.207610][T19142] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4251'. [ 439.227067][T18865] team0: Port device team_slave_1 added [ 439.345500][T18865] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 439.379250][T18865] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 439.487623][T18865] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 439.516779][T19164] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 439.595237][T18865] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 439.619070][T18865] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 439.649213][T15258] IPVS: starting estimator thread 0... [ 439.649281][T18865] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 439.671820][T19169] netlink: 'syz.1.4261': attribute type 29 has an invalid length. [ 439.697880][ T1102] IPVS: stop unused estimator thread 0... [ 439.716246][T19177] netlink: 'syz.1.4261': attribute type 29 has an invalid length. [ 439.764535][T19174] IPVS: using max 31 ests per chain, 74400 per kthread [ 439.857801][T19184] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 439.892434][T18865] hsr_slave_0: entered promiscuous mode [ 439.919527][T18865] hsr_slave_1: entered promiscuous mode [ 439.945986][T18865] debugfs: 'hsr0' already exists in 'hsr' [ 439.952107][T18865] Cannot create hsr debugfs directory [ 440.635232][T19200] netlink: 'syz.2.4270': attribute type 4 has an invalid length. [ 440.649607][ T5290] 8021q: adding VLAN 0 to HW filter on device eth3 [ 440.849074][T19217] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4276'. [ 441.320426][T19241] mac80211_hwsim hwsim27 syzkaller0: left promiscuous mode [ 441.342710][T19241] mac80211_hwsim hwsim27 syzkaller0: left allmulticast mode [ 441.974257][T18865] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 441.992595][T18865] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 442.012428][T18865] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 442.039832][T18865] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 442.060475][T18865] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 442.096423][T18865] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 442.116436][T18865] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 442.212134][T18865] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 442.512640][T18865] 8021q: adding VLAN 0 to HW filter on device bond0 [ 442.577544][T18865] 8021q: adding VLAN 0 to HW filter on device team0 [ 442.640715][ T1102] bridge0: port 1(bridge_slave_0) entered blocking state [ 442.647908][ T1102] bridge0: port 1(bridge_slave_0) entered forwarding state [ 442.694675][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 442.701843][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 443.787797][T19362] C speed is unknown, defaulting to 1000 [ 443.806863][T19362] wg1 speed is unknown, defaulting to 1000 [ 443.886875][T18865] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 444.037973][T18865] veth0_vlan: entered promiscuous mode [ 444.077449][T18865] veth1_vlan: entered promiscuous mode [ 444.168313][T18865] veth0_macvtap: entered promiscuous mode [ 444.221659][T18865] veth1_macvtap: entered promiscuous mode [ 444.265443][T18865] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 444.302160][T18865] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 444.352108][ T76] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.389984][ T76] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.426803][ T76] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.458329][ T76] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.695299][ T3336] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 444.726223][ T3336] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 444.942491][ T1353] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 444.972945][ T1353] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 446.539641][T19460] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4349'. [ 446.561019][T19460] openvswitch: netlink: Flow key attr not present in new flow. [ 446.909105][T19484] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 447.223962][T15257] IPVS: starting estimator thread 0... [ 447.245836][T19506] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4365'. [ 447.344222][T19508] IPVS: using max 28 ests per chain, 67200 per kthread [ 447.429566][T19521] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4371'. [ 448.140623][T19566] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4386'. [ 448.167197][T19569] C speed is unknown, defaulting to 1000 [ 448.175939][T19569] wg1 speed is unknown, defaulting to 1000 [ 450.367543][T19657] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4402'. [ 450.537604][T19667] mac80211_hwsim hwsim29 syzkaller0: entered promiscuous mode [ 450.550214][T19667] mac80211_hwsim hwsim29 syzkaller0: entered allmulticast mode [ 450.953010][T19559] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 451.150015][T19698] bridge_slave_0: left allmulticast mode [ 451.169473][T19698] bridge_slave_0: left promiscuous mode [ 451.178192][T19698] bridge0: port 1(bridge_slave_0) entered disabled state [ 451.215718][T19698] bridge_slave_1: left allmulticast mode [ 451.233412][T19698] bridge_slave_1: left promiscuous mode [ 451.248262][T19698] bridge0: port 2(bridge_slave_1) entered disabled state [ 451.308842][T19698] bond0: (slave bond_slave_0): Releasing backup interface [ 451.351918][T19698] bond0: (slave bond_slave_1): Releasing backup interface [ 451.407175][T19698] team0: Port device team_slave_0 removed [ 451.448298][T19698] team0: Port device team_slave_1 removed [ 451.465916][T19698] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 451.489001][T19719] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4413'. [ 451.491012][T19698] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 451.520548][T19698] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 451.532889][T19698] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 451.545777][T19698] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 451.592244][T19726] mac80211_hwsim hwsim31 syzkaller0: entered promiscuous mode [ 451.614026][T19726] mac80211_hwsim hwsim31 syzkaller0: entered allmulticast mode [ 452.020244][T19751] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 452.269814][T19769] netlink: 'syz.1.4436': attribute type 12 has an invalid length. [ 452.727580][T19789] bridge_slave_0: left allmulticast mode [ 452.749774][T19789] bridge_slave_0: left promiscuous mode [ 452.768737][T19789] bridge0: port 1(bridge_slave_0) entered disabled state [ 452.802543][T19789] bridge_slave_1: left allmulticast mode [ 452.820929][T19789] bridge_slave_1: left promiscuous mode [ 452.838801][T19789] bridge0: port 2(bridge_slave_1) entered disabled state [ 452.866093][T19789] bond0: (slave bond_slave_0): Releasing backup interface [ 452.897980][T19789] bond0: (slave bond_slave_1): Releasing backup interface [ 452.934960][T19789] team0: Port device team_slave_0 removed [ 452.967672][T19789] team0: Port device team_slave_1 removed [ 452.980001][T19789] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 452.989088][T19789] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 453.000486][T19789] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 453.009597][T19789] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 453.019519][T19789] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 453.348699][ T29] audit: type=1107 audit(1779372868.231:2): pid=19812 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ê' [ 453.380587][T19815] mac80211_hwsim hwsim25 syzkaller0: entered promiscuous mode [ 453.399923][T19815] mac80211_hwsim hwsim25 syzkaller0: entered allmulticast mode [ 453.744868][T19831] bridge_slave_0: left allmulticast mode [ 453.776483][T19831] bridge_slave_0: left promiscuous mode [ 453.797395][T19831] bridge0: port 1(bridge_slave_0) entered disabled state [ 453.874401][T19831] bridge_slave_1: left allmulticast mode [ 453.912263][T19831] bridge_slave_1: left promiscuous mode [ 453.939208][T19831] bridge0: port 2(bridge_slave_1) entered disabled state [ 454.204395][T19849] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 454.388693][T19831] bond0: (slave bond_slave_0): Releasing backup interface [ 454.443407][T19831] bond0: (slave bond_slave_1): Releasing backup interface [ 454.537062][T19831] team0: Port device team_slave_0 removed [ 454.566145][T19831] team0: Port device team_slave_1 removed [ 454.579218][T19831] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 454.588445][T19831] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 454.633229][T19831] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 454.642123][T19831] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 454.737796][T19831] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 455.107569][T19858] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4476'. [ 455.131684][T19861] netlink: 'syz.4.4476': attribute type 12 has an invalid length. [ 455.711456][T19884] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4486'. [ 456.040629][T19891] mac80211_hwsim hwsim27 syzkaller0: entered promiscuous mode [ 456.063775][T19891] mac80211_hwsim hwsim27 syzkaller0: entered allmulticast mode [ 456.883682][T19919] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4500'. [ 457.144106][T19927] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4505'. [ 457.741747][T19949] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4513'. [ 459.999510][T19955] netem: change failed [ 463.543506][ C0] sched: DL replenish lagged too much [ 591.293436][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 591.300411][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P19966/1:b..l [ 591.308953][ C1] rcu: (detected by 1, t=10503 jiffies, g=91705, q=2437 ncpus=2) [ 591.316763][ C1] task:syz.0.4519 state:R running task stack:25592 pid:19966 tgid:19966 ppid:18865 task_flags:0x400040 flags:0x00080002 [ 591.331132][ C1] Call Trace: [ 591.334418][ C1] [ 591.337352][ C1] __schedule+0x1821/0x5740 [ 591.341871][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 591.346843][ C1] ? __pfx___schedule+0x10/0x10 [ 591.351722][ C1] preempt_schedule_irq+0x4d/0xa0 [ 591.356759][ C1] irqentry_exit+0x14f/0x760 [ 591.361364][ C1] ? trace_irq_disable+0x3b/0x140 [ 591.366404][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 591.372385][ C1] RIP: 0010:unwind_next_frame+0x19f0/0x2550 [ 591.378286][ C1] Code: 49 8d 56 40 4c 89 f7 4c 89 e6 e8 1b 0e 00 00 84 c0 0f 84 46 01 00 00 48 bd 00 00 00 00 00 fc ff df 48 8b 44 24 20 0f b6 04 28 <84> c0 0f 85 6a 08 00 00 b3 01 8b 84 24 8c 00 00 00 41 39 06 4c 8b [ 591.397894][ C1] RSP: 0018:ffffc9000d70f018 EFLAGS: 00000202 [ 591.403966][ C1] RAX: 0000000000000000 RBX: ffffffff90d3cbd8 RCX: 0000000000000001 [ 591.411941][ C1] RDX: ffffc9000d70f128 RSI: dffffc0000000000 RDI: ffffc9000d70f350 [ 591.419911][ C1] RBP: dffffc0000000000 R08: ffffc9000d70f350 R09: 0000000000000000 [ 591.427886][ C1] R10: ffffc9000d70f138 R11: fffff52001ae1e29 R12: ffffc9000d70f350 [ 591.435857][ C1] R13: 1ffff92001ae1e1f R14: ffffc9000d70f0e8 R15: 1ffffffff21a797b [ 591.443845][ C1] ? unwind_next_frame+0x19d5/0x2550 [ 591.449143][ C1] ? unwind_next_frame+0xa6/0x2550 [ 591.454262][ C1] ? save_stack+0x122/0x230 [ 591.458778][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 591.464967][ C1] arch_stack_walk+0x11b/0x150 [ 591.469762][ C1] ? __reset_page_owner+0x71/0x1f0 [ 591.474886][ C1] stack_trace_save+0xa9/0x100 [ 591.479668][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 591.485064][ C1] save_stack+0x122/0x230 [ 591.489409][ C1] ? __pfx_save_stack+0x10/0x10 [ 591.494288][ C1] __reset_page_owner+0x71/0x1f0 [ 591.499240][ C1] __free_frozen_pages+0xbc7/0xd30 [ 591.504370][ C1] __slab_free+0x274/0x2c0 [ 591.508806][ C1] qlist_free_all+0x99/0x100 [ 591.513403][ C1] ? mas_alloc_nodes+0x291/0x350 [ 591.518405][ C1] kasan_quarantine_reduce+0x148/0x160 [ 591.523871][ C1] __kasan_slab_alloc+0x22/0x80 [ 591.528739][ C1] kmem_cache_alloc_noprof+0x2bc/0x650 [ 591.534201][ C1] ? mas_alloc_nodes+0x291/0x350 [ 591.539146][ C1] ? kmem_cache_alloc_noprof+0x15a/0x650 [ 591.544790][ C1] mas_alloc_nodes+0x291/0x350 [ 591.549564][ C1] mas_preallocate+0x2d6/0x640 [ 591.554337][ C1] ? rcu_is_watching+0x15/0xb0 [ 591.559109][ C1] ? __pfx_mas_preallocate+0x10/0x10 [ 591.564413][ C1] ? __mas_set_range+0x12f/0x3c0 [ 591.569360][ C1] __split_vma+0x318/0xa40 [ 591.573778][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 591.578994][ C1] ? __pfx___split_vma+0x10/0x10 [ 591.583956][ C1] vma_modify+0x88a/0x1e10 [ 591.588390][ C1] vma_modify_flags+0x24b/0x330 [ 591.593243][ C1] ? __pfx_vma_modify_flags+0x10/0x10 [ 591.598627][ C1] ? rcu_is_watching+0x15/0xb0 [ 591.603394][ C1] ? percpu_counter_add_batch+0xea/0x1d0 [ 591.609036][ C1] ? __vm_enough_memory+0x11b/0x380 [ 591.614261][ C1] mprotect_fixup+0x62a/0xb60 [ 591.618952][ C1] ? __pfx_mprotect_fixup+0x10/0x10 [ 591.624173][ C1] ? apparmor_file_mprotect+0x1d0/0x400 [ 591.629721][ C1] ? security_file_mprotect+0x1a/0x290 [ 591.635243][ C1] do_mprotect_pkey+0x8d5/0xd20 [ 591.640107][ C1] ? __pfx_do_mprotect_pkey+0x10/0x10 [ 591.645476][ C1] ? vm_mmap_pgoff+0x373/0x4f0 [ 591.650269][ C1] ? vm_mmap_pgoff+0x3b1/0x4f0 [ 591.655053][ C1] ? __pfx___se_sys_futex+0x10/0x10 [ 591.660276][ C1] ? rcu_is_watching+0x15/0xb0 [ 591.665054][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 591.671123][ C1] __x64_sys_mprotect+0x80/0x90 [ 591.675986][ C1] do_syscall_64+0x15f/0xf80 [ 591.680588][ C1] ? trace_irq_disable+0x3b/0x140 [ 591.685621][ C1] ? clear_bhb_loop+0x40/0x90 [ 591.690307][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 591.696204][ C1] RIP: 0033:0x7f67ce99cc57 [ 591.700628][ C1] RSP: 002b:00007fffbe2b14c8 EFLAGS: 00000206 ORIG_RAX: 000000000000000a [ 591.709046][ C1] RAX: ffffffffffffffda RBX: 00007f67cf84f6c0 RCX: 00007f67ce99cc57 [ 591.717018][ C1] RDX: 0000000000000003 RSI: 0000000000020000 RDI: 00007f67cf830000 [ 591.724989][ C1] RBP: 0000000000000000 R08: 00000000ffffffff R09: 0000000000000000 [ 591.732958][ C1] R10: 0000000000021000 R11: 0000000000000206 R12: 00007fffbe2b1620 [ 591.740926][ C1] R13: ffffffffffffffc0 R14: 0000000000001000 R15: 0000000000000000 [ 591.748917][ C1] [ 591.751934][ C1] rcu: rcu_preempt kthread starved for 3181 jiffies! g91705 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 591.763038][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 591.773004][ C1] rcu: RCU grace-period kthread stack dump: [ 591.778888][ C1] task:rcu_preempt state:R running task stack:27536 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 591.792375][ C1] Call Trace: [ 591.795649][ C1] [ 591.798583][ C1] __schedule+0x1821/0x5740 [ 591.803092][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 591.808060][ C1] ? __pfx___schedule+0x10/0x10 [ 591.812930][ C1] ? schedule+0x90/0x360 [ 591.817181][ C1] schedule+0x164/0x360 [ 591.821349][ C1] schedule_timeout+0x158/0x2c0 [ 591.826205][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 591.831588][ C1] ? __pfx_process_timeout+0x10/0x10 [ 591.836885][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 591.842754][ C1] ? prepare_to_swait_event+0x340/0x370 [ 591.848314][ C1] rcu_gp_fqs_loop+0x312/0x11d0 [ 591.853178][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 591.859336][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 591.864622][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 591.869835][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 591.875653][ C1] rcu_gp_kthread+0x9e/0x2b0 [ 591.880245][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 591.885441][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 591.891257][ C1] ? __kthread_parkme+0x7a/0x1f0 [ 591.896220][ C1] ? __kthread_parkme+0x19c/0x1f0 [ 591.901251][ C1] kthread+0x389/0x470 [ 591.905326][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 591.910520][ C1] ? __pfx_kthread+0x10/0x10 [ 591.915116][ C1] ret_from_fork+0x514/0xb70 [ 591.919709][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 591.924821][ C1] ? __switch_to+0xc79/0x1410 [ 591.929506][ C1] ? __pfx_kthread+0x10/0x10 [ 591.934108][ C1] ret_from_fork_asm+0x1a/0x30 [ 591.938892][ C1] [ 591.941907][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 591.948235][ C1] Sending NMI from CPU 1 to CPUs 0: [ 591.953440][ C0] NMI backtrace for cpu 0 [ 591.953454][ C0] CPU: 0 UID: 0 PID: 12595 Comm: kworker/u8:12 Not tainted syzkaller #0 PREEMPT(full) [ 591.953472][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 591.953482][ C0] Workqueue: wg-kex-wg0 wg_packet_handshake_send_worker [ 591.953584][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x1f/0x70 [ 591.953615][ C0] Code: 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 04 24 65 48 8b 0d 98 9b 73 11 65 8b 15 b9 9b 73 11 81 e2 00 01 ff 00 74 11 <81> fa 00 01 00 00 75 35 83 b9 d4 16 00 00 00 74 2c 8b 91 b0 16 00 [ 591.953629][ C0] RSP: 0018:ffffc90000006eb0 EFLAGS: 00000006 [ 591.953642][ C0] RAX: ffffffff81b27bb7 RBX: 0000000000000000 RCX: ffff888053219ec0 [ 591.953653][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000008 [ 591.953662][ C0] RBP: 0000000000000000 R08: ffffffff9030bff7 R09: 1ffffffff20617fe [ 591.953673][ C0] R10: dffffc0000000000 R11: fffffbfff20617ff R12: 0000000000000000 [ 591.953683][ C0] R13: 0000000000000000 R14: ffffc90000006f58 R15: 0000000000000000 [ 591.953693][ C0] FS: 0000000000000000(0000) GS:ffff88812528a000(0000) knlGS:0000000000000000 [ 591.953711][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 591.953722][ C0] CR2: 00007f116c000218 CR3: 000000007b3bc000 CR4: 00000000003526f0 [ 591.953735][ C0] Call Trace: [ 591.953741][ C0] [ 591.953747][ C0] __hrtimer_rearm_deferred+0x37/0x450 [ 591.953770][ C0] irqentry_exit+0x6d5/0x760 [ 591.953796][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 591.953812][ C0] RIP: 0010:__sanitizer_cov_trace_const_cmp4+0x2e/0x90 [ 591.953834][ C0] Code: 48 8b 04 24 65 48 8b 15 58 97 73 11 65 8b 0d 79 97 73 11 81 e1 00 01 ff 00 74 11 81 f9 00 01 00 00 75 5b 83 ba d4 16 00 00 00 <74> 52 8b 8a b0 16 00 00 83 f9 03 75 47 48 8b 8a b8 16 00 00 44 8b [ 591.953847][ C0] RSP: 0018:ffffc90000007008 EFLAGS: 00000246 [ 591.953858][ C0] RAX: ffffffff8a5222d1 RBX: 0000000000000140 RCX: 0000000000000100 [ 591.953868][ C0] RDX: ffff888053219ec0 RSI: 000000000000000e RDI: 0000000000000000 [ 591.953878][ C0] RBP: ffff88818f5b6e90 R08: 0aaaaaaaaaaa0000 R09: dd860aaaaaaaaaaa [ 591.953889][ C0] R10: 0aaaaaaaaaaa0000 R11: dd860aaaaaaaaaaa R12: dffffc0000000000 [ 591.953900][ C0] R13: 0000000000000010 R14: 000000000000000e R15: ffff88818f5b6e98 [ 591.953914][ C0] ? ip6_finish_output2+0xce1/0x13e0 [ 591.954006][ C0] ip6_finish_output2+0xce1/0x13e0 [ 591.954032][ C0] ? ip6_output+0x126/0x550 [ 591.954050][ C0] ip6_output+0x340/0x550 [ 591.954070][ C0] synproxy_send_tcp_ipv6+0x52f/0x6d0 [ 591.954123][ C0] ? __pfx_synproxy_send_tcp_ipv6+0x10/0x10 [ 591.954138][ C0] ? trace_kmem_cache_alloc+0x29/0xe0 [ 591.954164][ C0] ? synproxy_send_client_synack_ipv6+0x355/0xcb0 [ 591.954179][ C0] ? skb_put+0x11b/0x210 [ 591.954201][ C0] synproxy_send_client_synack_ipv6+0x814/0xcb0 [ 591.954222][ C0] ? __pfx_synproxy_send_client_synack_ipv6+0x10/0x10 [ 591.954238][ C0] ? nft_tunnel_get_dump+0x184/0x240 [ 591.954280][ C0] ? synproxy_pernet+0x45/0x270 [ 591.954327][ C0] nft_synproxy_eval_v6+0x34a/0x4e0 [ 591.954344][ C0] ? __pfx_nft_synproxy_eval_v6+0x10/0x10 [ 591.954360][ C0] ? nf_ip_checksum+0x13c/0x510 [ 591.954402][ C0] nft_synproxy_do_eval+0x3ce/0x580 [ 591.954420][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 591.954441][ C0] nft_do_chain+0x48d/0x1ae0 [ 591.954457][ C0] ? __local_bh_enable_ip+0xd0/0x130 [ 591.954478][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 591.954512][ C0] nft_do_chain_inet+0x360/0x4b0 [ 591.954552][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 591.954566][ C0] ? nf_nat_ipv6_local_in+0x157/0x660 [ 591.954611][ C0] ? __pfx_nf_nat_ipv6_local_in+0x10/0x10 [ 591.954631][ C0] ? lock_acquire+0x106/0x350 [ 591.954647][ C0] ? NF_HOOK+0x9e/0x3c0 [ 591.954668][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 591.954684][ C0] nf_hook_slow+0xc5/0x220 [ 591.954733][ C0] NF_HOOK+0x21f/0x3c0 [ 591.954755][ C0] ? __pfx_ip6_input_finish+0x10/0x10 [ 591.954777][ C0] ? NF_HOOK+0x9e/0x3c0 [ 591.954797][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 591.954819][ C0] ? __pfx_ip6_input_finish+0x10/0x10 [ 591.954847][ C0] ip6_input+0x16a/0x270 [ 591.954868][ C0] ? ip6_input+0x23/0x270 [ 591.954890][ C0] NF_HOOK+0x336/0x3c0 [ 591.954912][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 591.954933][ C0] ? NF_HOOK+0x9e/0x3c0 [ 591.954953][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 591.954975][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 591.955001][ C0] ? process_backlog+0x3eb/0x1950 [ 591.955047][ C0] process_backlog+0x7dd/0x1950 [ 591.955073][ C0] __napi_poll+0xae/0x340 [ 591.955088][ C0] ? skb_defer_free_flush+0x233/0x260 [ 591.955106][ C0] net_rx_action+0x627/0xf70 [ 591.955123][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 591.955149][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 591.955174][ C0] ? try_to_wake_up+0x7f2/0x1380 [ 591.955200][ C0] handle_softirqs+0x22a/0x840 [ 591.955217][ C0] ? do_softirq+0x76/0xd0 [ 591.955234][ C0] ? kernel_fpu_end+0x62/0x80 [ 591.955255][ C0] do_softirq+0x76/0xd0 [ 591.955269][ C0] [ 591.955274][ C0] [ 591.955279][ C0] __local_bh_enable_ip+0xf8/0x130 [ 591.955295][ C0] blake2s_compress+0xf9/0x1eb0 [ 591.955340][ C0] ? __pfx_encode_point+0x10/0x10 [ 591.955355][ C0] ? kernel_fpu_begin_mask+0x2b6/0x380 [ 591.955378][ C0] ? __pfx_blake2s_compress+0x10/0x10 [ 591.955392][ C0] ? __pfx_blake2s_compress+0x10/0x10 [ 591.955406][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 591.955426][ C0] ? kernel_fpu_end+0x62/0x80 [ 591.955447][ C0] ? blake2s_update+0x255/0x450 [ 591.955473][ C0] ? blake2s_update+0x255/0x450 [ 591.955498][ C0] blake2s_final+0x116/0x270 [ 591.955513][ C0] hmac+0x2de/0x3b0 [ 591.955532][ C0] ? __pfx_hmac+0x10/0x10 [ 591.955563][ C0] ? kdf+0x136/0x2b0 [ 591.955582][ C0] kdf+0x1a3/0x2b0 [ 591.955601][ C0] ? __pfx_kdf+0x10/0x10 [ 591.955629][ C0] wg_noise_handshake_create_initiation+0x2bc/0x830 [ 591.955652][ C0] ? __pfx_wg_noise_handshake_create_initiation+0x10/0x10 [ 591.955672][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 591.955691][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 591.955719][ C0] ? ktime_get_coarse_with_offset+0x8a/0x150 [ 591.955746][ C0] ? ktime_get_coarse_with_offset+0x8a/0x150 [ 591.955771][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 591.955791][ C0] ? ktime_get_coarse_with_offset+0x8a/0x150 [ 591.955815][ C0] ? ktime_get_coarse_with_offset+0x102/0x150 [ 591.955839][ C0] wg_packet_handshake_send_worker+0x18d/0x350 [ 591.955863][ C0] ? __pfx_wg_packet_handshake_send_worker+0x10/0x10 [ 591.955897][ C0] ? process_scheduled_works+0xa70/0x1860 [ 591.955912][ C0] ? process_scheduled_works+0xa70/0x1860 [ 591.955928][ C0] process_scheduled_works+0xb5d/0x1860 [ 591.955957][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 591.955975][ C0] ? assign_work+0x3d5/0x5e0 [ 591.955992][ C0] worker_thread+0xa53/0xfc0 [ 591.956020][ C0] kthread+0x389/0x470 [ 591.956038][ C0] ? __pfx_worker_thread+0x10/0x10 [ 591.956052][ C0] ? __pfx_kthread+0x10/0x10 [ 591.956072][ C0] ret_from_fork+0x514/0xb70 [ 591.956088][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 591.956103][ C0] ? __switch_to+0xc79/0x1410 [ 591.956125][ C0] ? __pfx_kthread+0x10/0x10 [ 591.956144][ C0] ret_from_fork_asm+0x1a/0x30 [ 591.956170][ C0]