last executing test programs: 2.792244997s ago: executing program 2 (id=8309): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) syz_emit_ethernet(0x5e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="ffffffffffff00000000000086dd6766208e00283a010000000000000000160b000000000000ff020000000000000000000000000001"], 0x0) 2.548564943s ago: executing program 2 (id=8314): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@getlink={0x20, 0x12, 0x321, 0x70bd25, 0x0, {0x7, 0x0, 0x0, 0x0, 0x4000000}}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 2.461528624s ago: executing program 2 (id=8318): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000040)={0x400, 0x6, 0x10, 0x3}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000080)={0x3ff, 0x201, 0x203, 0xa5, 0x45ae, 0x4, 0xfffffffd, 0xa2f}, 0x20) sendto$inet(r0, &(0x7f0000000140)="84", 0x1, 0x4fd4f6f9e9781b3b, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10) 2.412532579s ago: executing program 0 (id=8319): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x2, 0x10, 0x36, 0x2, 0xa, 0x0, 0x70bd2b, 0x25dfdbff, [@sadb_x_policy={0x8, 0x12, 0x2, 0x1, 0x0, 0x6e6bb7, 0x2, {0x6, 0x32, 0x6, 0x5, 0x0, 0x2, 0x0, @in6=@empty, @in=@private=0xa010100}}]}, 0x50}}, 0x0) 2.367888877s ago: executing program 0 (id=8321): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000980)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x30, r1, 0x1, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{0x80, 0x5}, {0x0, 0xb}, {0x6f, 0x5}, {0x3, 0x6}], "11c7d8a27d3a1343"}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000885}, 0x0) 2.25051238s ago: executing program 0 (id=8324): sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="020e000010000000000000000004830008001200000001000000ff000000400000001ea0abff7f00000000000000d41f9ab9000100700000ebdf000008000000c4fc0000100000000000e2ffff1c004f030006000020080002000080f5008e24ce6e4ae300a50000030005"], 0x80}}, 0x4814) r0 = socket$key(0xf, 0x3, 0x2) sendmmsg(r0, &(0x7f0000000180), 0x229ffa1c4ce5369, 0x0) 2.181774682s ago: executing program 0 (id=8326): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(twofish-generic)\x00'}, 0x58) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="a95c55bcc7cb4a9362a5ce533229c8ee", 0x20) 2.126731943s ago: executing program 0 (id=8329): bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x0) 1.756167224s ago: executing program 0 (id=8335): unshare(0x6a040000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000180)={@remote, 0x2, 0x0, 0x2, 0xc, 0x8, 0x1}, 0x17) 1.683412733s ago: executing program 4 (id=8337): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0xf) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x14, 0x2d, 0x9, 0x70bd2b, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x84) 1.524106218s ago: executing program 4 (id=8339): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(twofish-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="a95c55bcc7cb4a9362a5ce533229c8ee", 0x20) 1.501913023s ago: executing program 2 (id=8341): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0xd000000, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, 0x0, 0x80) r1 = socket(0x15, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x2717, 0x0, &(0x7f0000000000)) 1.501781618s ago: executing program 3 (id=8342): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x20050800) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0xd8, 0x7, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_RULE_COMPAT={0x34, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x4c}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x62}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x2e}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x9200}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x3c}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x64, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x50, 0x3, "8c4e61a3702c6bd4beb785ccddc06f4e7cc67d888734f4576f0b374ffa6e1822a7af42a80073efab051798ea76380e8d6e89ecab3c73b94062e9d05969aefebadba5932fcc34590c610967bf"}]}}}]}, @NFTA_RULE_ID={0x8}]}, 0xd8}, 0x1, 0x0, 0x0, 0x801}, 0x4000004) 1.442326783s ago: executing program 4 (id=8343): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000000)=[{0x6, 0x9, 0x8}]}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x8, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fc777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"04000000f34ab307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) 1.352426039s ago: executing program 1 (id=8344): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000002500)=@deltfilter={0x24, 0x2d, 0x1, 0x78bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x8, 0x3}, {0xfff2, 0xffff}, {0x0, 0xb}}}, 0x24}}, 0x20044000) 1.352255736s ago: executing program 2 (id=8345): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xfc9, &(0x7f0000001c00)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xfbb, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xfa7, 0x0, @wg=@data={0x4, 0x7407, 0xfffffffffffffffd, "9c67524ed6ed152d4f775bbc411126513b67aa2818e6f3aeb55bee6ae1049f195705bc8bd9b1085cd41af77353267df8a1d4cecdb01908186ea04e641c89a2ee0432e9c0894a8d7aff0c865e96548d507f048f907320b0f8b1e83b5f1425b63ad9c6adfd09578bbda92c9bd8f57d6efd752a6f20487ebea241d612212e3ccb077a5150c08f56aed6ee45acd4439043886b78cc5562b00bc57cf509d90b02a7bc86919f1b882f556e6aac5e9b93ee545b2b68bd014e2a49c332432ef4adeb61ac418aa4e20ee299f1a8b7a72e985223996b11a8913f3b1c23b10f88c3de28660457a37126fd3b6394536da0cd962f532ff22c496e1df4ffe049b193514c02571399d3618383a287068f4f15d51d1781cc0bc2af66ddc68135bfd33634e1a75be80630ce76ef79c86c9abb2fdc6d84367ea10fd8a6ee3c99eaec83c66bf5ffce6eb5ccc2546b6df905ff1aea223029ba2f7eb2469c5b8637b79347361f8cf0fa9d58a039e7811f343961b22c23d68b2c04eb8b5aeee7c6f71ce95cab886bf2694e0643d18761043e2d1dcb8ce0bdd15817a75f591b05146424797f729689e2a7bd53cb6c02fd15c339057c714794b407b342d12e69ec383b6ea6c99f845d04fd5128203c78a388fb0a1caf1f725f7636eb41e415951f8284a9c475760eb9312f7d6307037d472fbda509d56a0cf8e36d44f3f0b67fabdd2842ab4241cbfc7d309188d3a634129a13bfcac3b39b75d46bed585550ff7b41746dfd7e0f0c8a25e9f39deb7e2a4f0e068b86c6593b3b37838d2809eef3eb2f3120fde2fe3e9fef4e4bea1ddf3d17c40f753b37baaa110a8b4ad805d500e0235e9371b828993da25c5697d1001c8971b3862eef047730b242350403c851cd74cdea94501c0e2875a5830aa71733a0f022cb37e1cfffaee8eb0a23d51181a0691dadcd6b30a86a5fbf5c499120e265938f6430ffde09eb173327c2e25bdf22ae0d742141db856c4beee07af0ce37c078f6e59b41a29502cc01737c984185f6622a3ce02ed04daf2a7eb03c92a5a5ecce5973ef704aba9efcb99bf52f5c662d52f4399a13af760f9f9ff3d5930c3fae014b92ee0aded4ba51d95cf946d5f55f5b5d4603f8b76087d681ad77fc385fe114331c24a4ada85eaebf5405467dbe656b31b79a0f893864a13bda309a2fec2f4fc4858d9daf946df31f4077338bfc3116a45827ce8907ad691d241d3a8859a3672aeee3878e45b0be6f68194638dee30ba6735a6424e51f8b9a4965d37ab7ca96e167a5c32c8a935ff34693e24d067039db0f4ffe4dc5fe7c56a0d6e52a7cef9a6f1cc8b88d61d2258e3e0e8f2d7b699d4a22ab661f6afae5b48cc8fbc9ddfe57e76f274e65b210994fd96cd4deb6fdb795df4147ca0d876b1b08b64d20a28a358f48086c0f8d1f0741260f95adabba51f2d3f36107d49d46ba0c666232597bf08bfab60b5a432a1652e2c503fcf977ea6ff15c8e8f3bd9b7a3017c36be787d5a6579f5236b17d7bdc2c3918d9257e266bdf7929bb366d98d2b225c08c3c5ed22113b8c051c811bd1e52ecbe619dbc9579270c7cf69ac129e84a7141e689d9745d56e1cda6affdc1856757a6e39039b17d5286cf393186b99b20c54987087ece9972c39b4a05f1ca218c35254c666e7fcb7df4aa401cc79e1aade63732064ca80af164709a85fcf8ac72fa5ace60aa04d2ee0d5f051cb032f7c25100facb7ec1c247812b0de4f1c3c1ab98f904d9752cc427bc0445d8e27b51d5a8084087ea61f82ccc1114679f673753eddc7cfc00ba7e25db3391579ecdf638ab73078133e49b522d3d16bf2ebd06e7cefc24154088965ad3c9291c68f19f7cdd2943abc716ecf0b33fe249108da2b1f9abdbcb4dba89746a8c5711a41556efe5537327e253bd9ac68dc56516392292152b86ef118e25cac4e3c7c2b20bbc5bbc2d825c8dc14e9807aa6a423fdebfa7deee913c8f9f58bd967d43af1d65dc5ce72b2cd1a17ce34facd199bf2c62beeb752d156d6f31ea0323bc3ec0500587c485d8141f5b5ac81457df9396fbf98222212ef70527b6ed8d6e4d11156c8ecaee4692e068a72cb3b12686436028a7297956c48ee8fc393907edd3695fddbb786808c0a48182e3334e73fedcef0ee1bfbb13dce8a79b8822fd1ca0ed645f64d134c240844be5a7ac3aa15419ae79e7b1d721ae5abe1b0896c6189f23b65d79f5c3677b89f40aceff98dfca244a160dff264a2b14a3774064e1152fe0cabfc23e3e16dba5f46ea6af09fb3b8529022837c7e9303e3ecd0170fcc0e6fb0f3981d9f8f838412eae1a3dd13b7a980a642739e8abebed29db34c06460f09e27ddba1ed76b4ac6290235f6f81fcd3eb12af9821575b050aaf80d5c6c695807f7480f24e4bc0159744f9045a2d37574508d7e687482f775d0a4c471c4914e6a64b0d444037407b8d079751ddf4b14ed0ee6f1e622952a331a1a147f3a805fb7ca29c3c7feb2dddd0db795ac0ca327d95b19ff37bd8d553703014e5137f8c41b947d199f95f245d3354f9679876db736da5cfbd7cb9f80a12e50c895b999b670c9e161aa12e82c79d98fed5017e11674158a2f258ecc7c550f10dee6bb9d159316c567e3973e8aa30f157f6d30f239877021e7161c0a93c7b6bedccc7a3d8c9313f6f860d33ae0c162236853ae29d7a619bc306998e51c5d91a73475119a648700fbf3a41701ef87b440b83573a44339aea5806c0883470613e38baa518466dee2c671d96768f8d842feb5a812ea3ecd1e307a913a1032f06af2656b0a969b38366c39ca149205540391f36c897efb80aa43707c12e21544386fc232a45c9eb40a64c35edd4db20bd4970d642c0c2a0ee43ce8bf4d1bd84b3c3fa198cfc8d1f83960a1c3cd85a164926dc962a9078c5b079e0f4bb0b4e94b0aec3d13e7c47edc936927da2e6e7fe9485b0489bc4fdd1699611aeb00d767057602b8e53dfb4a6651c0f2873e5f60fdd7e2542d6aba79f491f87522f77427323e87386c89e1df9dd6e4f32be85c9eefbd6e6b177dde573b0d0bb8df828185aedc7aba2e6c3d4d9df393b203c1147f005860a6dd44dbcebead0eeb29fe3216930ef4a5994a93851df960d3be82d4294b64ba8295a59d099fd10afe39c2a79727a5447fa27909d53df6a00a63897261619e853036a6852e95ac6da62276007f2f3f386267cd8a0d136e645247e76db84e466e56ba42618b4fdef3e6d8c48dae5d03e1e369cd74042146e361cd6b4e654c8adc75446c454d3275a7d91646c4fb721966df9df3f761f10bebd212bfc87db9c48ffa0c6efcb17db3955f4a6f58919a036cda4f0a0c07a7306d2909adeeb474bd0bbec58865c4a5804108a014838673ff26438c162ec61e71bb880b154d475c71d500bfda3128b9fac2bccecb790dbd3075f424b1244f111c7eb5cbb7af0b6f3ec9cac20f82b1631822b940c03d697e213747627a5a7ed57414f2826888e515b88e61e69b742b053fe086ffc916abe00a41870cd332201d96c96bd174b369094b0da81ddc50affefa3709a358a5c00308d30a41d10b1c3f91a011bd246588336ff76dd60c10c3bbc8eec06adb3e73cc21d218b83eb9306e0650dd4e41bd65e15bb99a0653fc312251c174abed9e3ed04ef0378feaf78d839ebf61fda85c290f140cd3690cff881c348c57f504c50ca61986b29e58fdb0cbe276e42c982154762110c0f65b240aebe4291c66157629f0a45ea48e8e6a5dfe062214d635c5f828d1c888ec83a279ddac80f748c00e984248bef8e884590dcc1322aceb2d3b525618450fa0649e4ae8722769c6a32eb47161f7bf08bd59f903240ab9f790313b41607554b21ce45f10cde937f9f68fbb23ace0eaebd86b1201ea230c7f4c57f6594e655904db2a6d3d294f98fe630a524573f52c145b19eea382bc3adac7c7b62863bfa04f2d9fb9b93e7cda0fff4af897281580b879912ebd2c9c9d433ef479e886a477ce4538590179049aaff5e8e51b25db6c0300393a37c25c350e1e4effdd657f26de15199d39e134d1e7fe278b68377674a0e31a12e67096d44f62bd0353147041050fe44d9fbfc95fa8aa368e5868148a9e7a6f5551cf55f677b48ac2b4cd29a300d3cb9cd3a5ef486b9b3138018fb1568ce3f59385b98e93b7113dc85cd242bb57e545d6c151727d1c33ced565b2e29419bc6c458b45ab2107a55793618d20bd476e81ff79543cbace7b26a53a67a3f17ad0e2f2c0cc55f45d374ddc3cf8ada0c52cf1251cc4a6e1c7e84a1536cf328a0a392a3b79bbef1b40ad6e69811f3ec73b971c7cf6d64bfd0b183135d76fbb121aa99c753dce310f3288d460a1158a0c1c2ca4a66eadb38c6669dae4742a1da14b007555ffdae4e60f535ee23018dde93863b028346edc0f8da3ee5208b06fb107e921492ed9f2f2064d865afb5f955c80b1a6c5dbc540f1af7dd68925353d288fce304243f09d1791661027ea11f21ade9abb81a71343f1d405f35b01a504a99e08514f3b8307dce0b7c4305c0e531a538c6c11d8021183a87c2de3e1e384d114559601b948359f153d9845067683d8ef3dc75829a46211368ddf4837c021bf3ba1cc8005ab6902e094635f86f2f090851d5ac0af51c3aec46bdf9024ebe196351e2acd483f71821f033aa02d7bdee2fe987412bda115a5ce7f51dfdb78ce378485801fa10180339d3c5372a65cc46d2f0ef8ad3317062af5c243f81d920075e4874ea69081ba22d8be502422e973128c657da28f4f63d34919b5a4663544e244524263bae0a9a6c7455a16b5b860aedea7a2ea87abb402e151461d8310d05dd611e063e278628420a3f7bf0fd9acfb6dc82741cb588b4d1d8a5b2b5db58e052b07c4e354034842102305c0b070dbe2cea7a59b306054ffcb08432c67d272f40d6d9f42826ed660e6558f80f8522499e0f89335c18297ee395bcbf0ad1af122434e9319177f9ad9c5c140841551733282f74ea025e4e3c4ae11dc64df48497d747ab0d08a2de58abff2242c6267a7498b7ae4fc1ebabc8dc5ede8a053000fe8af5ade0f6868c22d4b2602c36cfc3605a616850973edcc5ebec3e18dea4a4e3f4e11f1c979991b636233ae70f0cb42d592e5bc5b7b3773820b22c386f365738d4ba6a0e76e6e5ab480a77336b394fc807950df4939f6dda4cf088b318660da8b487b1cd0b8b8aaf69bc5c1f7330d1cfc7a7ab84f01a5f4d8ee0b887bd91d8af80be32e171ca03e9a906c6c8b342baec668db3ff9522002d5f60e751e712031d3cbeff0d47523625b3d41633e7c0d3ef3b5b4336b17c36075debcdea4b6357ab468114ae7265eaa39545973a602af35dfbd0ed03a3c6b717eefb92c52291a0b014ae4467a233db1d48c625228733262acf9d08c98e2aba18df6dde6160fe748bbaf217cae345449c1cb5e22ef26e6e8ef2666a307a3ca7a08ab2a7e3a938eab61b772a69aa4dce0ace312136870dadad35c98d2911b4d37dfcf31c3c36cd26177e3cda3049aecc9928545c2e102d2586225cfc96e9884042923e2874ebf71dc81060970705aba2a7ad1127b218e4ade098a41285ff7bee3a0b8dfcddf9933730183c92158d0bbc8dd874e3fab555c30075d7985ad56808387a44"}}}}}}, 0x0) readv(r0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000002c40)=""/4096, 0x1000}], 0x2) 1.352145029s ago: executing program 3 (id=8346): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@newlink={0x40, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x504c3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_IGNORE_DF={0x5}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x9}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40010}, 0x4c040) 1.312504501s ago: executing program 4 (id=8347): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000980)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x30, r1, 0x1, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{0x80, 0x5}, {0x0, 0xb}, {0x6f, 0x5}, {0x3, 0x6}], "11c7d8a27d3a1343"}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000885}, 0x0) 1.286176885s ago: executing program 1 (id=8348): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803e00040063636d28616573"], 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) 1.228407247s ago: executing program 2 (id=8349): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x2}]}}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r9, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4) 1.188111314s ago: executing program 3 (id=8350): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) recvmmsg(r0, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x1, 0x0) 1.181508319s ago: executing program 4 (id=8351): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0x1}, {0x8, 0x2}}}, 0x24}}, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r5 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0xc000}, 0x10) recvfrom(r4, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) 1.023917642s ago: executing program 3 (id=8352): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="05fd00000000000000000600000008000300", @ANYRES32=r3, @ANYBLOB="0800050003"], 0x24}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x44, r5, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 998.216782ms ago: executing program 1 (id=8353): r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="a95c55bcc7cb4a9362a5ce533229c8ee", 0x20) 938.083087ms ago: executing program 1 (id=8354): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket(0xa, 0x1, 0x0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000180)={0x3c, r1, 0x1, 0x70bd2a, 0x0, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x6, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x0, 0x1, r2}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7ffb}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008040}, 0x20000000) 760.497967ms ago: executing program 1 (id=8355): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)={0x28, r2, 0x1, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008840}, 0x4) 222.164428ms ago: executing program 4 (id=8356): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000080)={0x60, r1, 0x1, 0xfffffffe, 0x0, {}, [@NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xfb2e77a8993c191f}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffff}]}, 0x60}}, 0x20000000) 189.912813ms ago: executing program 3 (id=8357): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newtfilter={0x90, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {}, {0x2, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0x5c, 0x2, [@TCA_FW_ACT={0x58, 0x4, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xfffffc00, 0x8, 0x10000000, 0x200000b, 0xff}, @broadcast, @local, 0xff, 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xb1, 0xe5}}]}, 0x90}, 0x1, 0x0, 0x0, 0x4}, 0x4000800) 100.516959ms ago: executing program 1 (id=8358): socket$inet(0x2, 0x4000000000000001, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000000c0)='dlm_bast\x00', 0xffffffffffffffff, 0x0, 0x82}, 0x18) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x0) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010028bd70000700000002000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x44089}, 0x8044) 0s ago: executing program 3 (id=8359): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newqdisc={0x14c, 0x24, 0x3fe3aa0262d8c783, 0x70bd25, 0x8, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x60000, 0x9c, 0x0, 0x0, 0x7}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x14c}}, 0x0) kernel console output (not intermixed with test programs): eate hsr debugfs directory [ 723.846940][ T5839] Bluetooth: hci3: command tx timeout [ 723.924151][T27208] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 723.936668][T27208] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 723.946796][T27208] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 723.957839][T27208] netdevsim netdevsim4 eth3 (unregistering): unset [1, 2] type 2 family 0 port 20002 - 0 [ 724.045083][T27208] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 724.076303][T27208] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 724.115881][T27208] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 724.133388][T27208] netdevsim netdevsim4 eth2 (unregistering): unset [1, 2] type 2 family 0 port 20002 - 0 [ 724.264410][T27208] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 724.282568][T27208] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 724.293137][T27208] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 724.304825][T27208] netdevsim netdevsim4 eth1 (unregistering): unset [1, 2] type 2 family 0 port 20002 - 0 [ 724.329369][ T5839] Bluetooth: hci2: command tx timeout [ 724.396911][T27208] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 724.407269][T27208] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 724.417826][T27208] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 724.429058][T27208] netdevsim netdevsim4 eth0 (unregistering): unset [1, 2] type 2 family 0 port 20002 - 0 [ 724.558808][T27325] FAULT_INJECTION: forcing a failure. [ 724.558808][T27325] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 724.580421][T27325] CPU: 1 UID: 0 PID: 27325 Comm: syz.1.6199 Not tainted syzkaller #0 PREEMPT(full) [ 724.580447][T27325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 724.580458][T27325] Call Trace: [ 724.580467][T27325] [ 724.580475][T27325] dump_stack_lvl+0x189/0x250 [ 724.580505][T27325] ? __pfx____ratelimit+0x10/0x10 [ 724.580527][T27325] ? __pfx_dump_stack_lvl+0x10/0x10 [ 724.580549][T27325] ? __pfx__printk+0x10/0x10 [ 724.580568][T27325] ? __might_fault+0xb0/0x130 [ 724.580602][T27325] should_fail_ex+0x414/0x560 [ 724.580633][T27325] _copy_from_user+0x2d/0xb0 [ 724.580654][T27325] __sys_sendto+0x25c/0x520 [ 724.580673][T27325] ? __pfx___sys_sendto+0x10/0x10 [ 724.580696][T27325] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 724.580732][T27325] ? __fget_files+0x3a0/0x420 [ 724.580759][T27325] ? ksys_write+0x22a/0x250 [ 724.580784][T27325] ? __pfx_ksys_write+0x10/0x10 [ 724.580810][T27325] __x64_sys_sendto+0xde/0x100 [ 724.580830][T27325] do_syscall_64+0xfa/0xfa0 [ 724.580851][T27325] ? lockdep_hardirqs_on+0x9c/0x150 [ 724.580872][T27325] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 724.580889][T27325] ? clear_bhb_loop+0x60/0xb0 [ 724.580917][T27325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 724.580934][T27325] RIP: 0033:0x7ff5cab8efc9 [ 724.580951][T27325] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 724.580966][T27325] RSP: 002b:00007ff5cba42038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 724.580986][T27325] RAX: ffffffffffffffda RBX: 00007ff5cade5fa0 RCX: 00007ff5cab8efc9 [ 724.580999][T27325] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000003 [ 724.581011][T27325] RBP: 00007ff5cba42090 R08: 0000200000000100 R09: 000000000000001c [ 724.581022][T27325] R10: 0000000008044004 R11: 0000000000000246 R12: 0000000000000001 [ 724.581034][T27325] R13: 00007ff5cade6038 R14: 00007ff5cade5fa0 R15: 00007ffd9d0ac508 [ 724.581065][T27325] [ 724.935235][T27208] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 724.958188][T27208] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 724.981127][T27208] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 725.019318][T27208] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 725.276392][T27358] Bluetooth: MGMT ver 1.23 [ 725.476524][T27365] __nla_validate_parse: 4 callbacks suppressed [ 725.476562][T27365] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6209'. [ 725.499084][T27208] 8021q: adding VLAN 0 to HW filter on device bond0 [ 725.543622][T27208] 8021q: adding VLAN 0 to HW filter on device team0 [ 725.581353][T27085] bridge0: port 1(bridge_slave_0) entered blocking state [ 725.588573][T27085] bridge0: port 1(bridge_slave_0) entered forwarding state [ 725.631027][T27085] bridge0: port 2(bridge_slave_1) entered blocking state [ 725.638297][T27085] bridge0: port 2(bridge_slave_1) entered forwarding state [ 725.701251][T27374] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6213'. [ 725.728845][T27374] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6213'. [ 725.815019][T23414] hid-generic 0005:0005:079A.0001: unknown main item tag 0x3 [ 725.853854][T23414] hid-generic 0005:0005:079A.0001: hidraw0: BLUETOOTH HID v0.04 Device [syz0] on aa:aa:aa:aa:aa:aa [ 726.133435][T27392] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6218'. [ 726.240724][T27208] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 726.406279][ T5839] Bluetooth: hci2: command tx timeout [ 726.517628][T27413] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6227'. [ 726.534750][T27413] bridge: RTM_NEWNEIGH with invalid ether address [ 726.558155][T27413] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6227'. [ 726.569556][T27413] bridge: RTM_NEWNEIGH with invalid ether address [ 726.809845][T27208] veth0_vlan: entered promiscuous mode [ 726.873980][T27208] veth1_vlan: entered promiscuous mode [ 726.942168][T27208] veth0_macvtap: entered promiscuous mode [ 726.969967][T27208] veth1_macvtap: entered promiscuous mode [ 727.024168][T27208] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 727.040882][T27208] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 727.109201][T27088] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 727.126195][T27088] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 727.166306][T27088] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 727.175081][T27088] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 727.277178][T27458] xt_hashlimit: max too large, truncated to 1048576 [ 727.299940][T27087] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 727.323685][T27087] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 727.465787][T27084] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 727.474056][T27084] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 727.835281][T27484] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6252'. [ 727.980776][T27491] syzkaller0: entered promiscuous mode [ 728.011869][T27491] syzkaller0: entered allmulticast mode [ 728.038961][T27489] tipc: Started in network mode [ 728.043871][T27489] tipc: Node identity 6ebba0ffe178, cluster identity 4711 [ 728.066902][T27489] tipc: Enabled bearer , priority 0 [ 728.115565][T27489] tipc: Resetting bearer [ 728.144227][T27500] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 728.159531][T27489] tipc: Disabling bearer [ 728.181199][T27500] tipc: Enabling of bearer rejected, failed to enable media [ 728.303295][T17133] bridge0: port 2(syz_tun) entered disabled state [ 728.365342][ T5827] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 728.376594][ T5827] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 728.379170][T17133] syz_tun (unregistering): left allmulticast mode [ 728.390931][ T5827] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 728.391171][T17133] syz_tun (unregistering): left promiscuous mode [ 728.405692][T17133] bridge0: port 2(syz_tun) entered disabled state [ 728.421137][ T5827] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 728.421999][ T1114] smc: removing ib device syz1 [ 728.434973][ T5827] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 728.466736][ T5838] syz1: Port: 1 Link DOWN [ 728.485855][ T5839] Bluetooth: hci2: command tx timeout [ 728.491026][T27513] pim6reg: entered allmulticast mode [ 728.653289][T27520] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6263'. [ 728.666718][T27520] netlink: 'syz.3.6263': attribute type 1 has an invalid length. [ 728.688224][T27520] netlink: 224 bytes leftover after parsing attributes in process `syz.3.6263'. [ 728.949954][T27528] IPVS: set_ctl: invalid protocol: 47 255.255.255.255:20003 [ 729.247582][T27550] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6270'. [ 729.884015][T27507] chnl_net:caif_netlink_parms(): no params data found [ 730.487126][ T5839] Bluetooth: hci4: command tx timeout [ 730.492119][T27594] __nla_validate_parse: 50 callbacks suppressed [ 730.492135][T27594] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6282'. [ 730.566896][ T5839] Bluetooth: hci2: command tx timeout [ 730.851765][T27618] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6287'. [ 730.947883][T27609] syzkaller0: entered promiscuous mode [ 730.963858][T27609] syzkaller0: entered allmulticast mode [ 731.000946][T27612] tipc: Enabled bearer , priority 0 [ 731.246555][T27637] netlink: 68 bytes leftover after parsing attributes in process `syz.2.6290'. [ 731.287797][T27507] bridge0: port 1(bridge_slave_0) entered blocking state [ 731.317298][T27507] bridge0: port 1(bridge_slave_0) entered disabled state [ 731.329082][T27507] bridge_slave_0: entered allmulticast mode [ 731.371441][T27507] bridge_slave_0: entered promiscuous mode [ 731.442271][T27507] bridge0: port 2(bridge_slave_1) entered blocking state [ 731.475534][T27507] bridge0: port 2(bridge_slave_1) entered disabled state [ 731.496403][T27507] bridge_slave_1: entered allmulticast mode [ 731.536866][T27507] bridge_slave_1: entered promiscuous mode [ 731.585970][T27644] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 731.614954][T27607] tipc: Resetting bearer [ 731.668030][T27607] tipc: Disabling bearer [ 731.933994][T27507] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 731.960556][T27507] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 731.983285][T27657] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6297'. [ 731.995475][T27660] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 732.040487][ T9914] IPVS: starting estimator thread 0... [ 732.084466][T27507] team0: Port device team_slave_0 added [ 732.101039][T27507] team0: Port device team_slave_1 added [ 732.135858][T27665] IPVS: using max 29 ests per chain, 69600 per kthread [ 732.185506][T27507] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 732.202254][T27507] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 732.242000][T27507] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 732.281438][T27507] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 732.301386][T27507] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 732.356682][T27507] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 732.394931][T27679] netlink: 'syz.4.6301': attribute type 39 has an invalid length. [ 732.480294][T27507] hsr_slave_0: entered promiscuous mode [ 732.504949][T27507] hsr_slave_1: entered promiscuous mode [ 732.519024][T27507] debugfs: 'hsr0' already exists in 'hsr' [ 732.524784][T27507] Cannot create hsr debugfs directory [ 732.569262][ T5827] Bluetooth: hci4: command tx timeout [ 732.668387][T27690] netlink: ct family unspecified [ 732.677252][T27690] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 732.827463][T27507] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 732.839530][T27507] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 732.925393][T27507] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 732.955082][T27507] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 733.036175][T27507] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 733.047941][T27507] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 733.097408][T27709] netlink: 'syz.0.6308': attribute type 29 has an invalid length. [ 733.128398][T27507] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 733.146156][T27507] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 733.174185][T27709] netlink: 'syz.0.6308': attribute type 29 has an invalid length. [ 733.448181][T27732] tap0: tun_chr_ioctl cmd 1074025672 [ 733.453516][T27732] tap0: ignored: set checksum disabled [ 733.491866][T27730] tap0: tun_chr_ioctl cmd 1074025672 [ 733.497838][T27730] tap0: ignored: set checksum disabled [ 733.540879][T27507] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 733.556541][T27736] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6315'. [ 733.578969][T27507] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 733.612406][T27507] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 733.661093][T27507] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 733.819140][T27760] bridge_slave_0: left allmulticast mode [ 733.828627][T27760] bridge_slave_0: left promiscuous mode [ 733.834889][T27760] bridge0: port 1(bridge_slave_0) entered disabled state [ 733.847161][T27763] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6320'. [ 733.848867][T27760] bridge_slave_1: left allmulticast mode [ 733.861963][T27760] bridge_slave_1: left promiscuous mode [ 733.868364][T27760] bridge0: port 2(bridge_slave_1) entered disabled state [ 733.880902][T27760] bond0: (slave bond_slave_0): Releasing backup interface [ 733.891885][T27760] bond0: (slave bond_slave_1): Releasing backup interface [ 733.907817][T27760] team0: Port device team_slave_0 removed [ 733.920670][T27760] team0: Port device team_slave_1 removed [ 733.928332][T27760] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 733.936415][T27760] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 733.947194][T27760] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 733.954719][T27760] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 733.963999][T27760] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 734.183315][T27507] 8021q: adding VLAN 0 to HW filter on device bond0 [ 734.214709][T27507] 8021q: adding VLAN 0 to HW filter on device team0 [ 734.251298][T27780] netlink: 164 bytes leftover after parsing attributes in process `syz.3.6325'. [ 734.290526][ T1114] bridge0: port 1(bridge_slave_0) entered blocking state [ 734.295766][T27782] netlink: 164 bytes leftover after parsing attributes in process `syz.3.6325'. [ 734.297725][ T1114] bridge0: port 1(bridge_slave_0) entered forwarding state [ 734.324783][ T1114] bridge0: port 2(bridge_slave_1) entered blocking state [ 734.332012][ T1114] bridge0: port 2(bridge_slave_1) entered forwarding state [ 734.335029][T27780] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6325'. [ 734.410042][T27782] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6325'. [ 734.603302][T27801] lo speed is unknown, defaulting to 1000 [ 734.651248][ T5827] Bluetooth: hci4: command tx timeout [ 734.659884][T27806] ipt_REJECT: TCP_RESET invalid for non-tcp [ 734.670547][T27782] bond1 (unregistering): Released all slaves [ 734.711588][T27801] lo speed is unknown, defaulting to 1000 [ 734.718607][T27801] lo speed is unknown, defaulting to 1000 [ 734.865359][T27507] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 734.945469][T27507] veth0_vlan: entered promiscuous mode [ 734.960847][T27507] veth1_vlan: entered promiscuous mode [ 735.008373][T27507] veth0_macvtap: entered promiscuous mode [ 735.021495][T27507] veth1_macvtap: entered promiscuous mode [ 735.061292][T27507] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 735.068762][T27801] infiniband syz0: set active [ 735.074422][T27507] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 735.083241][T27801] infiniband syz0: added lo [ 735.090654][ T5929] lo speed is unknown, defaulting to 1000 [ 735.100661][T27086] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 735.110691][T27086] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 735.122046][T27086] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 735.140489][T27086] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 735.151872][T27801] RDS/IB: syz0: added [ 735.156184][T27801] smc: adding ib device syz0 with port count 1 [ 735.162362][T27801] smc: ib device syz0 port 1 has no pnetid [ 735.172921][ T5929] lo speed is unknown, defaulting to 1000 [ 735.197327][T27801] lo speed is unknown, defaulting to 1000 [ 735.254236][T27084] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 735.263192][T27084] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 735.315585][T27085] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 735.325038][T27085] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 735.450002][T27801] lo speed is unknown, defaulting to 1000 [ 735.710653][T27832] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32) [ 735.853769][T27801] lo speed is unknown, defaulting to 1000 [ 735.877427][T27840] __nla_validate_parse: 3 callbacks suppressed [ 735.877445][T27840] netlink: 256 bytes leftover after parsing attributes in process `syz.4.6341'. [ 736.043754][T27851] netlink: 'syz.3.6344': attribute type 1 has an invalid length. [ 736.063893][T27852] netlink: 112 bytes leftover after parsing attributes in process `syz.4.6345'. [ 736.180487][T27858] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6344'. [ 736.183517][T27851] bond1: entered promiscuous mode [ 736.199936][T27851] 8021q: adding VLAN 0 to HW filter on device bond1 [ 736.269832][T27863] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6348'. [ 736.279000][T27863] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6348'. [ 736.338507][T27863] netlink: 144 bytes leftover after parsing attributes in process `syz.1.6348'. [ 736.381823][T27858] bond1: entered allmulticast mode [ 736.442087][T27856] bond1: (slave bridge2): making interface the new active one [ 736.449890][T27856] bridge2: entered promiscuous mode [ 736.457734][T27856] bridge2: entered allmulticast mode [ 736.464569][T27856] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 736.480148][T27864] block nbd5: Unsupported socket: should be TCP or UNIX. [ 736.507289][T27801] lo speed is unknown, defaulting to 1000 [ 736.726520][ T5827] Bluetooth: hci4: command tx timeout [ 736.868217][T27801] lo speed is unknown, defaulting to 1000 [ 736.965386][T27891] netlink: 'syz.1.6357': attribute type 1 has an invalid length. [ 736.989473][T27891] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6357'. [ 736.999453][T27892] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6356'. [ 737.201251][T27801] lo speed is unknown, defaulting to 1000 [ 737.214075][T27898] netlink: 104 bytes leftover after parsing attributes in process `syz.4.6359'. [ 737.515553][T27801] lo speed is unknown, defaulting to 1000 [ 737.953866][T27801] lo speed is unknown, defaulting to 1000 [ 738.349957][T27801] lo speed is unknown, defaulting to 1000 [ 738.689495][T27966] Cannot find add_set index 1 as target [ 738.707480][T27968] netlink: 'syz.1.6394': attribute type 11 has an invalid length. [ 738.723496][T27968] netlink: 'syz.1.6394': attribute type 11 has an invalid length. [ 738.738827][T27968] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6394'. [ 738.744372][T27801] lo speed is unknown, defaulting to 1000 [ 738.900743][T27980] netlink: 'syz.2.6395': attribute type 11 has an invalid length. [ 739.103326][T27801] lo speed is unknown, defaulting to 1000 [ 739.414404][T27801] lo speed is unknown, defaulting to 1000 [ 739.742995][T27998] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 739.950448][T28027] xt_SECMARK: invalid mode: 9 [ 739.963975][T28025] bridge4: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 740.012400][T28030] bridge5: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 740.236406][T28042] delete_channel: no stack [ 740.389130][T28056] netlink: 'syz.2.6419': attribute type 11 has an invalid length. [ 740.411303][T28056] netlink: 'syz.2.6419': attribute type 11 has an invalid length. [ 740.503705][T28060] xt_l2tp: invalid flags combination: 0 [ 740.542460][T28068] tipc: Enabling of bearer rejected, failed to enable media [ 740.651386][T28076] netlink: 'syz.4.6425': attribute type 3 has an invalid length. [ 740.809633][T28087] netlink: 'syz.1.6429': attribute type 1 has an invalid length. [ 740.901496][T28087] 8021q: adding VLAN 0 to HW filter on device bond1 [ 741.251657][T28118] __nla_validate_parse: 14 callbacks suppressed [ 741.251674][T28118] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6438'. [ 741.396748][T28129] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6443'. [ 741.414088][T28128] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6443'. [ 741.515228][T28129] IPv6: sit1: Disabled Multicast RS [ 741.542143][T28129] sit1: entered allmulticast mode [ 741.701736][T28154] netlink: 'syz.2.6450': attribute type 6 has an invalid length. [ 741.792918][T28158] netlink: 'syz.2.6452': attribute type 21 has an invalid length. [ 741.843528][T28158] bond1: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 741.856951][T28158] bond1 (unregistering): Released all slaves [ 741.891940][T28167] netlink: 'syz.4.6453': attribute type 18 has an invalid length. [ 741.906926][T27086] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 741.916467][T27086] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 741.928242][T27086] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 741.947058][T27086] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 741.974170][T28170] netlink: 168 bytes leftover after parsing attributes in process `syz.2.6455'. [ 741.989184][T28163] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6453'. [ 742.037321][T28172] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 742.038441][T28163] vlan2: entered promiscuous mode [ 742.056207][T28163] geneve1: entered promiscuous mode [ 742.061856][T28163] vlan2: entered allmulticast mode [ 742.069932][T28163] geneve1: entered allmulticast mode [ 742.200103][T28180] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6458'. [ 742.231380][T28180] sch_tbf: burst 88 is lower than device veth7 mtu (1514) ! [ 742.537992][T28194] netlink: 64 bytes leftover after parsing attributes in process `syz.4.6464'. [ 742.656340][T28207] tipc: Started in network mode [ 742.661472][T28207] tipc: Node identity 12400b83ba13, cluster identity 4711 [ 742.669569][T28207] tipc: Enabled bearer , priority 0 [ 742.680606][T28209] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6467'. [ 742.755565][T28210] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6466'. [ 742.804949][T28207] syzkaller0: entered promiscuous mode [ 742.815470][T28207] syzkaller0: entered allmulticast mode [ 742.848796][T28207] tipc: Resetting bearer [ 742.982586][T28210] macvtap2: entered promiscuous mode [ 742.988313][T28210] macvtap2: entered allmulticast mode [ 743.152979][T27088] tipc: Resetting bearer [ 743.291998][T28240] Bluetooth: MGMT ver 1.23 [ 743.298409][T28239] tipc: Invalid UDP bearer configuration [ 743.298460][T28239] tipc: Enabling of bearer rejected, failed to enable media [ 743.412347][T28202] tipc: Resetting bearer [ 743.434725][T28251] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 743.710993][ T9905] tipc: Node number set to 2824014723 [ 745.081441][T28202] tipc: Disabling bearer [ 745.161654][T28277] tipc: Started in network mode [ 745.168385][T28277] tipc: Node identity 1a2647c68f9a, cluster identity 4711 [ 745.177757][T28277] tipc: Enabled bearer , priority 0 [ 745.184537][T28279] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6490'. [ 745.194533][T28277] syzkaller0: entered promiscuous mode [ 745.201782][T28277] syzkaller0: entered allmulticast mode [ 745.222519][T28277] tipc: Resetting bearer [ 745.233943][T28276] tipc: Resetting bearer [ 745.269517][T28276] tipc: Disabling bearer [ 745.546822][T28301] syzkaller1: entered promiscuous mode [ 745.560956][T28301] syzkaller1: entered allmulticast mode [ 745.710875][T28311] Unknown options in mask b7f2 [ 745.939870][T28330] syzkaller0: entered promiscuous mode [ 745.945376][T28330] syzkaller0: entered allmulticast mode [ 745.951192][T28322] nbd5: detected capacity change from 0 to 127 [ 745.953164][ T5827] block nbd5: Receive control failed (result -32) [ 745.967173][T28330] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 745.974432][T28330] IPv6: NLM_F_CREATE should be set when creating new route [ 746.090664][T28335] netlink: 'syz.4.6508': attribute type 1 has an invalid length. [ 746.333419][T28335] 8021q: adding VLAN 0 to HW filter on device bond2 [ 746.376766][T28341] bond2: (slave veth9): Enslaving as an active interface with a down link [ 746.413746][T28349] bond2: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 746.456337][T28353] bond2: (slave veth11): Enslaving as an active interface with a down link [ 746.570123][T28368] __nla_validate_parse: 3 callbacks suppressed [ 746.570140][T28368] netlink: 72 bytes leftover after parsing attributes in process `syz.2.6514'. [ 746.654934][T28368] netlink: 'syz.2.6514': attribute type 63 has an invalid length. [ 746.665397][T28372] team0: Device ip6gre1 is of different type [ 746.711605][T28373] netlink: 108 bytes leftover after parsing attributes in process `syz.1.6516'. [ 746.918626][T28389] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6523'. [ 746.988597][T28389] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6523'. [ 747.362920][T28418] blkio.reset_stats is deprecated [ 747.544065][T28426] syzkaller0: entered promiscuous mode [ 747.549730][T28426] syzkaller0: entered allmulticast mode [ 748.002772][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807e0f3400: rx timeout, send abort [ 748.173424][T28458] netlink: 'syz.4.6545': attribute type 83 has an invalid length. [ 748.502891][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803f08f000: rx timeout, send abort [ 748.511780][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807e0f3400: abort rx timeout. Force session deactivation [ 748.743578][T28473] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6551'. [ 748.751850][T28475] netlink: 104 bytes leftover after parsing attributes in process `syz.4.6552'. [ 748.830392][T28479] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6553'. [ 748.906482][T28481] netlink: 'syz.4.6554': attribute type 2 has an invalid length. [ 748.915430][T28481] netlink: 'syz.4.6554': attribute type 1 has an invalid length. [ 749.014685][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803f08f000: abort rx timeout. Force session deactivation [ 750.340709][T28466] bond2: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 750.352845][T28466] bond2 (unregistering): Released all slaves [ 750.478901][T28494] ipt_REJECT: ECHOREPLY no longer supported. [ 750.586697][T28500] syzkaller0: entered promiscuous mode [ 750.592212][T28500] syzkaller0: entered allmulticast mode [ 750.949078][T28525] netlink: 72 bytes leftover after parsing attributes in process `syz.0.6570'. [ 750.959364][T28525] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6570'. [ 751.021535][T28529] lo speed is unknown, defaulting to 1000 [ 751.043172][T28530] netlink: 5 bytes leftover after parsing attributes in process `syz.4.6571'. [ 751.116750][T28534] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 754.123951][T28606] syzkaller1: entered promiscuous mode [ 754.139228][T28606] syzkaller1: entered allmulticast mode [ 754.260054][T28616] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.6608'. [ 754.269509][T28611] bridge_slave_0: left allmulticast mode [ 754.269535][T28611] bridge_slave_0: left promiscuous mode [ 754.269744][T28611] bridge0: port 1(bridge_slave_0) entered disabled state [ 754.323891][T28611] bridge_slave_1: left allmulticast mode [ 754.336975][T28611] bridge_slave_1: left promiscuous mode [ 754.371262][T28611] bridge0: port 2(bridge_slave_1) entered disabled state [ 754.402343][T28611] bond0: (slave bond_slave_0): Releasing backup interface [ 754.427027][T28611] bond0: (slave bond_slave_1): Releasing backup interface [ 754.465296][T28611] team0: Port device team_slave_0 removed [ 754.498949][T28611] team0: Port device team_slave_1 removed [ 754.506624][T28611] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 754.514268][T28611] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 754.525392][T28611] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 754.535354][T28611] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 754.547028][T28611] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 754.601180][T28617] team0: Mode changed to "loadbalance" [ 754.768580][T28633] syzkaller0: entered promiscuous mode [ 754.774224][T28633] syzkaller0: entered allmulticast mode [ 754.790453][T28641] syzkaller0: entered promiscuous mode [ 754.796694][T28641] syzkaller0: entered allmulticast mode [ 755.648651][T28655] Bluetooth: MGMT ver 1.23 [ 756.742316][T28674] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 757.082458][T28704] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6636'. [ 757.731220][T28717] netlink: 'syz.2.6639': attribute type 1 has an invalid length. [ 757.899380][T28728] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6643'. [ 757.925601][T28728] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6643'. [ 757.961593][T28728] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6643'. [ 757.982230][T28728] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6643'. [ 758.000542][T28734] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6645'. [ 758.049898][T28737] nbd: must specify a device to reconfigure [ 758.068747][T28738] bond0: (slave rose0): Error: Device can not be enslaved while up [ 758.212249][T28744] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6649'. [ 758.278148][T28749] netlink: 'syz.1.6650': attribute type 1 has an invalid length. [ 758.305055][T28749] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6650'. [ 758.321317][T28734] infiniband syz1: set active [ 758.326448][T28734] infiniband syz1: added syz_tun [ 758.364681][T28734] RDS/IB: syz1: added [ 758.368896][T28734] smc: adding ib device syz1 with port count 1 [ 758.375219][T28734] smc: ib device syz1 port 1 has no pnetid [ 758.668887][T28760] netlink: 72 bytes leftover after parsing attributes in process `syz.1.6655'. [ 758.814990][T28771] netlink: 'syz.3.6654': attribute type 1 has an invalid length. [ 758.864928][T28771] netlink: 'syz.3.6654': attribute type 3 has an invalid length. [ 760.052588][T28817] netlink: 'syz.3.6675': attribute type 19 has an invalid length. [ 760.367778][T28834] netlink: 'syz.2.6682': attribute type 1 has an invalid length. [ 760.521682][T28841] __nla_validate_parse: 1 callbacks suppressed [ 760.521699][T28841] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6685'. [ 760.588227][T28841] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 760.599645][T28841] bridge0: entered promiscuous mode [ 760.614029][T28847] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6684'. [ 760.652474][T28848] netlink: 'syz.2.6686': attribute type 2 has an invalid length. [ 760.681952][T28848] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6686'. [ 762.433089][T28904] netlink: 'syz.4.6707': attribute type 30 has an invalid length. [ 763.834760][T28978] netlink: 92 bytes leftover after parsing attributes in process `syz.1.6742'. [ 763.888243][ T5960] IPVS: starting estimator thread 0... [ 763.896651][T28984] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 763.903597][T28976] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6741'. [ 763.993892][T28984] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6744'. [ 764.016450][T28986] IPVS: using max 32 ests per chain, 76800 per kthread [ 764.104023][T28984] team0: Port device team_slave_1 removed [ 764.237996][T29011] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6750'. [ 764.307001][T29011] netlink: 'syz.4.6750': attribute type 27 has an invalid length. [ 764.315221][T29011] netlink: 'syz.4.6750': attribute type 4 has an invalid length. [ 764.334363][T29011] netlink: 140 bytes leftover after parsing attributes in process `syz.4.6750'. [ 764.412517][T29018] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6753'. [ 764.415336][T29016] netlink: 'syz.3.6751': attribute type 39 has an invalid length. [ 764.461972][T29020] netlink: 108 bytes leftover after parsing attributes in process `syz.0.6754'. [ 764.519830][T29023] IPVS: set_ctl: invalid protocol: 137 224.0.0.1:20004 [ 764.542423][T29022] IPVS: set_ctl: invalid protocol: 137 224.0.0.1:20004 [ 765.061830][T29072] vlan2: entered promiscuous mode [ 765.092573][T29072] geneve1: entered promiscuous mode [ 765.108634][T29072] vlan2: entered allmulticast mode [ 765.134233][T29072] geneve1: entered allmulticast mode [ 765.289329][ T5929] IPVS: starting estimator thread 0... [ 765.337807][T29087] : entered promiscuous mode [ 765.436025][T29090] IPVS: using max 26 ests per chain, 62400 per kthread [ 765.525774][T29101] __nla_validate_parse: 25 callbacks suppressed [ 765.525792][T29101] netlink: 56 bytes leftover after parsing attributes in process `syz.0.6780'. [ 765.537462][T29102] tipc: Enabling of bearer rejected, media not registered [ 765.551253][T29101] netlink: 56 bytes leftover after parsing attributes in process `syz.0.6780'. [ 765.572268][T29101] netlink: 56 bytes leftover after parsing attributes in process `syz.0.6780'. [ 765.581861][T29101] netlink: 56 bytes leftover after parsing attributes in process `syz.0.6780'. [ 765.610334][T29101] netlink: 56 bytes leftover after parsing attributes in process `syz.0.6780'. [ 765.637700][T29101] netlink: 56 bytes leftover after parsing attributes in process `syz.0.6780'. [ 765.647319][T29108] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6782'. [ 765.667670][T29101] netlink: 56 bytes leftover after parsing attributes in process `syz.0.6780'. [ 765.704617][T29101] netlink: 56 bytes leftover after parsing attributes in process `syz.0.6780'. [ 765.725354][T29101] netlink: 56 bytes leftover after parsing attributes in process `syz.0.6780'. [ 765.868717][T29117] netlink: 'syz.0.6785': attribute type 14 has an invalid length. [ 766.107193][T29127] Bluetooth: MGMT ver 1.23 [ 766.609248][T29167] bond1: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 766.627655][T29167] bond1 (unregistering): Released all slaves [ 766.855525][T29187] netlink: 'syz.0.6809': attribute type 1 has an invalid length. [ 766.866683][T29187] NCSI netlink: No device for ifindex 0 [ 766.888456][T29187] ICMPv6: NA: 00:00:00:00:00:00 advertised our address fe80::aa on syz_tun! [ 767.219820][T29211] netlink: 'syz.2.6815': attribute type 9 has an invalid length. [ 767.263481][T29213] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 767.321144][T29211] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 767.654747][T29228] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 767.837015][T29247] openvswitch: netlink: Flow actions attr not present in new flow. [ 767.906769][T29252] xt_bpf: check failed: parse error [ 768.112476][T29259] SET target dimension over the limit! [ 768.335006][T29287] netlink: 'syz.4.6838': attribute type 83 has an invalid length. [ 768.807077][T29329] tipc: Resetting bearer [ 768.871926][T29324] netlink: 'syz.3.6849': attribute type 83 has an invalid length. [ 769.017778][T29342] macsec1: entered promiscuous mode [ 769.023253][T29342] macsec1: entered allmulticast mode [ 769.029857][T29342] bond2: (slave macsec1): Error -34 calling dev_set_mtu [ 769.078551][T29349] warn_alloc: 1 callbacks suppressed [ 769.078569][T29349] syz.4.6856: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 769.103571][T29349] CPU: 0 UID: 0 PID: 29349 Comm: syz.4.6856 Not tainted syzkaller #0 PREEMPT(full) [ 769.103618][T29349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 769.103639][T29349] Call Trace: [ 769.103646][T29349] [ 769.103654][T29349] dump_stack_lvl+0x189/0x250 [ 769.103684][T29349] ? lockdep_hardirqs_on+0x9c/0x150 [ 769.103709][T29349] ? __pfx_dump_stack_lvl+0x10/0x10 [ 769.103750][T29349] warn_alloc+0x214/0x310 [ 769.103774][T29349] ? stack_depot_save_flags+0x40/0x860 [ 769.103804][T29349] ? __pfx_warn_alloc+0x10/0x10 [ 769.103830][T29349] ? kasan_save_track+0x3e/0x80 [ 769.103852][T29349] ? __kasan_kmalloc+0x93/0xb0 [ 769.103875][T29349] ? xsk_setsockopt+0x4dc/0x8d0 [ 769.103894][T29349] ? do_sock_setsockopt+0x17c/0x1b0 [ 769.103909][T29349] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 769.103925][T29349] ? do_syscall_64+0xfa/0xfa0 [ 769.103945][T29349] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 769.103973][T29349] __vmalloc_node_range_noprof+0x125/0x12d0 [ 769.104028][T29349] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 769.104056][T29349] ? __kasan_kmalloc+0x93/0xb0 [ 769.104087][T29349] vmalloc_user_noprof+0xad/0xf0 [ 769.104110][T29349] ? xskq_create+0xbf/0x170 [ 769.104138][T29349] xskq_create+0xbf/0x170 [ 769.104163][T29349] xsk_init_queue+0xb0/0x110 [ 769.104187][T29349] xsk_setsockopt+0x4dc/0x8d0 [ 769.104211][T29349] ? __pfx_xsk_setsockopt+0x10/0x10 [ 769.104235][T29349] ? __pfx_aa_sk_perm+0x10/0x10 [ 769.104260][T29349] ? aa_sock_opt_perm+0xff/0x1b0 [ 769.104287][T29349] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 769.104304][T29349] ? __pfx_xsk_setsockopt+0x10/0x10 [ 769.104326][T29349] do_sock_setsockopt+0x17c/0x1b0 [ 769.104350][T29349] __x64_sys_setsockopt+0x13f/0x1b0 [ 769.104373][T29349] do_syscall_64+0xfa/0xfa0 [ 769.104394][T29349] ? lockdep_hardirqs_on+0x9c/0x150 [ 769.104416][T29349] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 769.104433][T29349] ? clear_bhb_loop+0x60/0xb0 [ 769.104454][T29349] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 769.104472][T29349] RIP: 0033:0x7f5d81d8efc9 [ 769.104489][T29349] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 769.104504][T29349] RSP: 002b:00007f5d82c28038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 769.104522][T29349] RAX: ffffffffffffffda RBX: 00007f5d81fe5fa0 RCX: 00007f5d81d8efc9 [ 769.104535][T29349] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006 [ 769.104545][T29349] RBP: 00007f5d81e11f91 R08: 0000000000000004 R09: 0000000000000000 [ 769.104556][T29349] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 769.104567][T29349] R13: 00007f5d81fe6038 R14: 00007f5d81fe5fa0 R15: 00007ffed3119898 [ 769.104601][T29349] [ 769.104670][T29349] Mem-Info: [ 769.401460][T29349] active_anon:3925 inactive_anon:0 isolated_anon:0 [ 769.401460][T29349] active_file:3167 inactive_file:40085 isolated_file:0 [ 769.401460][T29349] unevictable:768 dirty:80 writeback:0 [ 769.401460][T29349] slab_reclaimable:13520 slab_unreclaimable:215361 [ 769.401460][T29349] mapped:29109 shmem:1356 pagetables:1054 [ 769.401460][T29349] sec_pagetables:0 bounce:0 [ 769.401460][T29349] kernel_misc_reclaimable:0 [ 769.401460][T29349] free:1204038 free_pcp:13853 free_cma:0 [ 769.456217][T29349] Node 0 active_anon:15500kB inactive_anon:0kB active_file:12668kB inactive_file:160136kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116436kB dirty:320kB writeback:0kB shmem:3888kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:17824kB pagetables:4180kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 769.489399][T29349] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 769.522712][T29349] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 769.562964][T29349] lowmem_reserve[]: 0 2505 2505 2505 2505 [ 769.570509][T29349] Node 0 DMA32 free:909272kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:15600kB inactive_anon:0kB active_file:12668kB inactive_file:160136kB unevictable:1536kB writepending:320kB zspages:0kB present:3129332kB managed:2565164kB mlocked:0kB bounce:0kB free_pcp:38624kB local_pcp:17152kB free_cma:0kB [ 769.612222][T29349] lowmem_reserve[]: 0 0 0 0 0 [ 769.617044][T29349] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 769.648536][T29349] lowmem_reserve[]: 0 0 0 0 0 [ 769.653378][T29349] Node 1 Normal free:3891320kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:17552kB local_pcp:10508kB free_cma:0kB [ 769.690146][T29349] lowmem_reserve[]: 0 0 0 0 0 [ 769.694992][T29349] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 769.707906][T29349] Node 0 DMA32: 211*4kB (ME) 113*8kB (UME) 190*16kB (ME) 101*32kB (UME) 123*64kB (UME) 45*128kB (UME) 21*256kB (UME) 5*512kB (UME) 7*1024kB (UME) 2*2048kB (M) 212*4096kB (UM) = 909204kB [ 769.727126][T29349] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 769.739294][T29349] Node 1 Normal: 182*4kB (UE) 56*8kB (UME) 38*16kB (UME) 106*32kB (UME) 29*64kB (UME) 8*128kB (UME) 3*256kB (ME) 3*512kB (ME) 2*1024kB (UM) 2*2048kB (UE) 946*4096kB (M) = 3891320kB [ 769.757765][T29349] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 769.769983][T29349] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 769.779895][T29349] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 769.790663][T29349] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 769.800678][T29349] 44605 total pagecache pages [ 769.805371][T29349] 0 pages in swap cache [ 769.809585][T29349] Free swap = 124996kB [ 769.813740][T29349] Total swap = 124996kB [ 769.818058][T29349] 2097051 pages RAM [ 769.821935][T29349] 0 pages HighMem/MovableOnly [ 769.827487][T29349] 424118 pages reserved [ 769.831719][T29349] 0 pages cma reserved [ 769.943689][T29380] netlink: 'syz.1.6863': attribute type 21 has an invalid length. [ 770.093244][T29385] geneve2: entered promiscuous mode [ 770.151598][T29394] netlink: 'syz.1.6867': attribute type 33 has an invalid length. [ 770.210433][T29396] netlink: 'syz.4.6869': attribute type 2 has an invalid length. [ 770.234309][T29394] team0: Device gtp0 is up. Set it down before adding it as a team port [ 770.287287][T29396] 9: entered promiscuous mode [ 770.426744][T29407] bridge1: entered promiscuous mode [ 770.431996][T29407] bridge1: entered allmulticast mode [ 770.462956][T29410] netlink: 'syz.3.6874': attribute type 1 has an invalid length. [ 770.588110][T29417] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 770.643254][T29424] __nla_validate_parse: 27 callbacks suppressed [ 770.643271][T29424] netlink: 1 bytes leftover after parsing attributes in process `syz.0.6878'. [ 770.697061][T29416] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 770.709994][T29416] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 770.855063][T29416] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 770.867203][T29416] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 770.884942][T29441] netlink: 7 bytes leftover after parsing attributes in process `syz.0.6884'. [ 770.959295][T29441] erspan0: entered promiscuous mode [ 771.009151][T29416] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 771.023393][T29416] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 771.042909][T29447] syzkaller0: entered promiscuous mode [ 771.048903][T29447] syzkaller0: entered allmulticast mode [ 771.099164][T29416] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 771.115302][T29416] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 771.250736][T29456] netlink: 64 bytes leftover after parsing attributes in process `syz.3.6889'. [ 771.277509][T29462] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6890'. [ 771.282153][T29456] nbd: socks must be embedded in a SOCK_ITEM attr [ 771.315347][T16816] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 771.326525][T16816] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 771.417160][T16816] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 771.425504][T16816] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 771.466944][T16816] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 771.485447][T16816] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 771.523247][T16816] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 771.543611][T29477] IPVS: set_ctl: invalid protocol: 196 0.0.0.0:20000 [ 771.553282][T16816] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 773.206219][ T5839] Bluetooth: hci0: command 0x0c1a tx timeout [ 773.206229][ T5827] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 798.417169][ T1114] bridge_slave_0: left allmulticast mode [ 798.422855][ T1114] bridge_slave_0: left promiscuous mode [ 798.429752][ T1114] bridge0: port 1(bridge_slave_0) entered disabled state [ 798.527772][ T1114] ip6gretap0 (unregistering): left promiscuous mode [ 798.691867][ T1114] bond5 (unregistering): (slave gretap0): Releasing active interface [ 798.700198][ T1114] gretap0 (unregistering): left promiscuous mode [ 798.707165][ T1114] gretap0 (unregistering): left allmulticast mode [ 798.810864][ T1114] bridge0 (unregistering): left promiscuous mode [ 799.274476][ T1114] bond0 (unregistering): left promiscuous mode [ 799.281181][ T1114] bond_slave_0: left promiscuous mode [ 799.286876][ T1114] bond_slave_1: left promiscuous mode [ 799.292354][ T1114] bridge_slave_1: left promiscuous mode [ 799.311869][ T1114] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 799.320973][ T1114] bond_slave_0: left allmulticast mode [ 799.330862][ T1114] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 799.340730][ T1114] bond_slave_1: left allmulticast mode [ 799.348656][ T1114] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 799.359237][ T1114] bridge_slave_1: left allmulticast mode [ 799.365175][ T1114] bond0 (unregistering): Released all slaves [ 799.464566][ T1114] bond1 (unregistering): Released all slaves [ 799.564884][ T1114] bond2 (unregistering): Released all slaves [ 799.577750][ T1114] bond3 (unregistering): Released all slaves [ 799.590268][ T1114] bond4 (unregistering): Released all slaves [ 799.701676][ T1114] bond5 (unregistering): Released all slaves [ 799.714401][ T1114] bond6 (unregistering): (slave bond7): Releasing backup interface [ 799.723917][ T1114] bond6 (unregistering): Released all slaves [ 799.833427][ T1114] bond7 (unregistering): Released all slaves [ 799.940736][ T1114] bond8 (unregistering): Released all slaves [ 799.952944][ T1114] bond9 (unregistering): Released all slaves [ 799.965339][ T1114] bond10 (unregistering): Released all slaves [ 800.092473][ T1114] 9: left promiscuous mode [ 800.166917][ T1114] tipc: Left network mode [ 800.562320][ T1114] hsr_slave_1: left promiscuous mode [ 800.574416][ T1114] vlan0: left allmulticast mode [ 800.579376][ T1114] veth0_vlan: left allmulticast mode [ 800.584647][ T1114] vlan0: left promiscuous mode [ 800.590210][ T1114] veth1_macvtap: left promiscuous mode [ 800.596442][ T1114] veth0_macvtap: left promiscuous mode [ 800.603075][ T1114] veth1_vlan: left promiscuous mode [ 801.003935][ T1114] team0 (unregistering): Port device team_slave_1 removed [ 801.043365][ T1114] team0 (unregistering): Port device team_slave_0 removed [ 801.554462][ T1114] IPVS: stop unused estimator thread 0... [ 809.956699][T29490] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6898'. [ 809.977285][T29482] netlink: 'syz.0.6894': attribute type 21 has an invalid length. [ 809.985217][T29482] netlink: 'syz.0.6894': attribute type 1 has an invalid length. [ 810.101121][T29498] netlink: 108 bytes leftover after parsing attributes in process `syz.1.6901'. [ 810.132419][T29502] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6903'. [ 810.151835][T29502] netlink: 'syz.3.6903': attribute type 30 has an invalid length. [ 810.176233][T29502] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6903'. [ 810.255102][T29512] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 810.346438][T29519] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6906'. [ 810.415080][T29524] veth0: entered promiscuous mode [ 810.437322][T29520] veth0: left promiscuous mode [ 810.462581][T29528] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6914'. [ 810.599836][T29535] veth1_to_bond: entered allmulticast mode [ 810.670444][T29535] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6913'. [ 810.777373][T29535] veth1_to_bond (unregistering): left allmulticast mode [ 810.789110][T29548] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6917'. [ 810.840845][T29552] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6917'. [ 810.999115][T29560] netlink: 'syz.1.6923': attribute type 5 has an invalid length. [ 812.552880][T29569] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6926'. [ 812.590610][T29572] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 813.172247][T29615] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 813.325878][T29622] sctp: [Deprecated]: syz.2.6947 (pid 29622) Use of int in max_burst socket option. [ 813.325878][T29622] Use struct sctp_assoc_value instead [ 814.077111][T29671] bridge_slave_0: left allmulticast mode [ 814.083183][T29671] bridge_slave_0: left promiscuous mode [ 814.106900][T29671] bridge0: port 1(bridge_slave_0) entered disabled state [ 814.131215][T29671] bridge_slave_1: left allmulticast mode [ 814.137109][T29671] bridge_slave_1: left promiscuous mode [ 814.147004][T29671] bridge0: port 2(bridge_slave_1) entered disabled state [ 814.173837][T29671] bond0: (slave bond_slave_0): Releasing backup interface [ 814.204044][T29671] bond0: (slave bond_slave_1): Releasing backup interface [ 814.244369][T29671] team0: Port device team_slave_0 removed [ 814.260514][T29671] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 814.272429][T29671] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 814.283770][T29671] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 814.291830][T29671] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 814.302283][T29671] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 814.369063][T29687] tipc: Enabled bearer , priority 0 [ 814.391857][T29684] syzkaller0: entered promiscuous mode [ 814.403918][T29684] syzkaller0: entered allmulticast mode [ 814.462730][T29684] tipc: Resetting bearer [ 814.491080][T29684] openvswitch: netlink: Flow key attr not present in new flow. [ 814.525581][T29683] tipc: Resetting bearer [ 814.581155][T29683] tipc: Disabling bearer [ 815.069241][T29724] __nla_validate_parse: 2 callbacks suppressed [ 815.069259][T29724] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6980'. [ 815.224160][T29731] geneve2: entered promiscuous mode [ 815.811136][T29752] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6987'. [ 815.863967][T29759] netlink: 68 bytes leftover after parsing attributes in process `syz.2.6988'. [ 816.033677][T29759] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6988'. [ 816.056330][T29759] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6988'. [ 816.088368][T29759] netlink: 'syz.2.6988': attribute type 27 has an invalid length. [ 816.262634][ T9914] IPVS: starting estimator thread 0... [ 816.273244][T29790] netlink: 'syz.4.6998': attribute type 1 has an invalid length. [ 816.281560][T29790] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6998'. [ 816.364294][T29791] ipt_REJECT: TCP_RESET invalid for non-tcp [ 816.375894][T29789] IPVS: using max 28 ests per chain, 67200 per kthread [ 816.876829][T29836] netlink: 'syz.2.7012': attribute type 1 has an invalid length. [ 816.949596][T29844] netlink: 'syz.2.7012': attribute type 1 has an invalid length. [ 816.961777][T29847] sock: sock_set_timeout: `syz.3.7015' (pid 29847) tries to set negative timeout [ 817.003501][T29849] netlink: 'syz.4.7016': attribute type 1 has an invalid length. [ 817.180508][T29857] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7017'. [ 817.510307][T29882] netlink: 128 bytes leftover after parsing attributes in process `syz.3.7025'. [ 817.526815][ T5827] Bluetooth: hci4: command tx timeout [ 817.585278][T29888] netlink: 84 bytes leftover after parsing attributes in process `syz.4.7027'. [ 817.751350][T29903] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7027'. [ 817.769205][T29902] netlink: 'syz.0.7031': attribute type 1 has an invalid length. [ 817.906693][T29907] team_slave_0: entered promiscuous mode [ 817.912432][T29907] team_slave_1: entered promiscuous mode [ 817.919887][T29907] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 817.928697][T29907] team0: Device macvtap1 is already an upper device of the team interface [ 817.939729][T29907] team_slave_0: left promiscuous mode [ 817.945205][T29907] team_slave_1: left promiscuous mode [ 817.969264][T29858] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 818.155555][T29920] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 818.202722][T29920] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 818.362287][T29930] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 818.383855][T29934] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not filter [ 818.619946][T29941] unsupported nla_type 52263 [ 818.771802][T29959] netlink: 'syz.0.7049': attribute type 3 has an invalid length. [ 818.950712][T29964] syzkaller1: entered promiscuous mode [ 818.956828][T29964] syzkaller1: entered allmulticast mode [ 818.964880][T29964] netlink: 'syz.4.7052': attribute type 39 has an invalid length. [ 819.506959][T29994] bond2: option min_links: invalid value (18446744073709551614) [ 819.540908][T29994] bond2: option min_links: allowed values 0 - 2147483647 [ 819.572268][T29994] bond2 (unregistering): Released all slaves [ 820.204250][T30036] __nla_validate_parse: 5 callbacks suppressed [ 820.204267][T30036] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7078'. [ 820.849796][T30076] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7093'. [ 820.860073][T30076] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7093'. [ 820.936608][T30080] syzkaller0: entered promiscuous mode [ 820.942595][T30080] syzkaller0: entered allmulticast mode [ 821.007090][T30084] A link change request failed with some changes committed already. Interface veth0_to_bridge may have been left with an inconsistent configuration, please check. [ 821.142472][T30091] netlink: 'syz.3.7100': attribute type 29 has an invalid length. [ 821.277197][T30098] bridge0: port 2(bridge_slave_1) entered disabled state [ 821.288155][T30098] bridge_slave_0: left allmulticast mode [ 821.293815][T30098] bridge_slave_0: left promiscuous mode [ 821.301371][T30098] bridge0: port 1(bridge_slave_0) entered disabled state [ 821.779707][T30118] vlan0: entered promiscuous mode [ 822.221401][T30145] netlink: 'syz.0.7125': attribute type 5 has an invalid length. [ 822.437748][T30156] syzkaller0: entered promiscuous mode [ 822.445491][T30156] syzkaller0: entered allmulticast mode [ 822.462033][T30167] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7135'. [ 822.493325][T30167] bridge: RTM_NEWNEIGH with invalid ether address [ 824.553356][T30212] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7148'. [ 824.688728][T30215] netlink: 64 bytes leftover after parsing attributes in process `syz.2.7151'. [ 824.703670][T30215] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7151'. [ 824.792029][T30219] tipc: Enabled bearer , priority 0 [ 824.821920][T30219] syzkaller0: entered promiscuous mode [ 824.840660][T30219] syzkaller0: entered allmulticast mode [ 824.868868][T30219] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 824.891217][T30230] tipc: Enabling of bearer rejected, failed to enable media [ 824.910811][T30219] tipc: Resetting bearer [ 824.956438][T30230] bond3: ARP target 1.0.0.0 is already present [ 824.962848][T30230] bond3: option arp_ip_target: invalid value (1) [ 824.973014][T30230] bond3 (unregistering): Released all slaves [ 825.009741][T30218] tipc: Resetting bearer [ 825.051154][T30218] tipc: Disabling bearer [ 825.177274][T30243] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7160'. [ 825.196355][T30243] openvswitch: netlink: Flow actions attr not present in new flow. [ 825.273762][T30250] netlink: 'syz.0.7163': attribute type 1 has an invalid length. [ 825.282068][T30250] netlink: 'syz.0.7163': attribute type 3 has an invalid length. [ 825.307242][T30250] netlink: 224 bytes leftover after parsing attributes in process `syz.0.7163'. [ 825.344727][T30250] bond0: entered promiscuous mode [ 825.353666][T30250] bond_slave_0: entered promiscuous mode [ 825.359958][T30250] bond_slave_1: entered promiscuous mode [ 825.369860][T30250] batadv0: entered promiscuous mode [ 825.378772][T30250] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 825.397871][T30250] bond0: left promiscuous mode [ 825.416278][T30250] bond_slave_0: left promiscuous mode [ 825.422060][T30250] bond_slave_1: left promiscuous mode [ 825.437595][T30250] batadv0: left promiscuous mode [ 825.856082][T30284] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7173'. [ 825.984779][T30291] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 826.018758][T30293] FAULT_INJECTION: forcing a failure. [ 826.018758][T30293] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 826.035824][T30293] CPU: 1 UID: 0 PID: 30293 Comm: syz.3.7178 Not tainted syzkaller #0 PREEMPT(full) [ 826.035850][T30293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 826.035861][T30293] Call Trace: [ 826.035870][T30293] [ 826.035878][T30293] dump_stack_lvl+0x189/0x250 [ 826.035907][T30293] ? __pfx____ratelimit+0x10/0x10 [ 826.035930][T30293] ? __pfx_dump_stack_lvl+0x10/0x10 [ 826.035952][T30293] ? __pfx__printk+0x10/0x10 [ 826.035972][T30293] ? __might_fault+0xb0/0x130 [ 826.036006][T30293] should_fail_ex+0x414/0x560 [ 826.036036][T30293] _copy_from_user+0x2d/0xb0 [ 826.036058][T30293] ___sys_sendmsg+0x158/0x2a0 [ 826.036081][T30293] ? __pfx____sys_sendmsg+0x10/0x10 [ 826.036136][T30293] ? __fget_files+0x2a/0x420 [ 826.036152][T30293] ? __fget_files+0x3a0/0x420 [ 826.036180][T30293] __x64_sys_sendmsg+0x19b/0x260 [ 826.036200][T30293] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 826.036225][T30293] ? __pfx_ksys_write+0x10/0x10 [ 826.036251][T30293] ? do_syscall_64+0xbe/0xfa0 [ 826.036276][T30293] do_syscall_64+0xfa/0xfa0 [ 826.036296][T30293] ? lockdep_hardirqs_on+0x9c/0x150 [ 826.036319][T30293] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 826.036336][T30293] ? clear_bhb_loop+0x60/0xb0 [ 826.036356][T30293] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 826.036372][T30293] RIP: 0033:0x7fb19e78efc9 [ 826.036388][T30293] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 826.036402][T30293] RSP: 002b:00007fb19f6ea038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 826.036423][T30293] RAX: ffffffffffffffda RBX: 00007fb19e9e5fa0 RCX: 00007fb19e78efc9 [ 826.036437][T30293] RDX: 0000000020040000 RSI: 00002000000004c0 RDI: 0000000000000003 [ 826.036449][T30293] RBP: 00007fb19f6ea090 R08: 0000000000000000 R09: 0000000000000000 [ 826.036461][T30293] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 826.036473][T30293] R13: 00007fb19e9e6038 R14: 00007fb19e9e5fa0 R15: 00007ffef0453d78 [ 826.036503][T30293] [ 826.147438][T30289] infiniband !yz!: set active [ 826.268490][T30301] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7181'. [ 826.277568][T30301] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7181'. [ 826.292441][T30289] infiniband !yz!: added team_slave_0 [ 826.357916][T30289] RDS/IB: !yz!: added [ 826.367260][T30289] smc: adding ib device !yz! with port count 1 [ 826.376017][T30313] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 826.385835][T30289] smc: ib device !yz! port 1 has no pnetid [ 826.388319][T30314] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 826.469766][ T30] audit: type=1800 audit(1762212215.753:11): pid=30316 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.7185" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=1148 res=0 errno=0 [ 826.643742][T30329] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 826.953790][T30342] 8021q: VLANs not supported on caif0 [ 827.137729][T30348] SET target dimension over the limit! [ 827.244054][T30356] netlink: 'syz.3.7197': attribute type 29 has an invalid length. [ 827.254195][T30356] netlink: 'syz.3.7197': attribute type 29 has an invalid length. [ 827.273926][T30356] tipc: Enabled bearer , priority 0 [ 827.282379][T30356] syzkaller0: entered promiscuous mode [ 827.290057][T30356] syzkaller0: entered allmulticast mode [ 827.301647][T30355] tipc: Resetting bearer [ 827.332463][T30355] tipc: Disabling bearer [ 827.441581][T30358] netlink: 'syz.3.7198': attribute type 21 has an invalid length. [ 827.450084][T30358] netlink: 'syz.3.7198': attribute type 1 has an invalid length. [ 827.583225][T30362] macvtap1: entered promiscuous mode [ 827.589587][T30362] vlan0: entered promiscuous mode [ 827.595251][T30362] macvtap1: entered allmulticast mode [ 827.600962][T30362] vlan0: entered allmulticast mode [ 827.606934][T30362] veth0_vlan: entered allmulticast mode [ 829.412692][T30432] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7220'. [ 829.734698][T30447] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7224'. [ 830.290055][T30468] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7231'. [ 830.362894][T30473] wg2 speed is unknown, defaulting to 1000 [ 830.369835][T30473] wg2 speed is unknown, defaulting to 1000 [ 830.376682][T30473] wg2 speed is unknown, defaulting to 1000 [ 830.398554][T30473] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 830.430926][T30473] wg2 speed is unknown, defaulting to 1000 [ 830.439065][T30473] wg2 speed is unknown, defaulting to 1000 [ 830.448603][T30473] wg2 speed is unknown, defaulting to 1000 [ 830.467965][T30473] wg2 speed is unknown, defaulting to 1000 [ 830.477426][T30473] wg2 speed is unknown, defaulting to 1000 [ 830.486423][T30473] wg2 speed is unknown, defaulting to 1000 [ 830.494643][T30473] wg2 speed is unknown, defaulting to 1000 [ 830.503115][T30473] wg2 speed is unknown, defaulting to 1000 [ 830.511696][T30473] wg2 speed is unknown, defaulting to 1000 [ 830.520288][T30473] wg2 speed is unknown, defaulting to 1000 [ 830.528873][T30473] wg2 speed is unknown, defaulting to 1000 [ 830.783122][T30497] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 831.205863][ T5839] Bluetooth: hci1: command 0x0406 tx timeout [ 831.854105][T30532] netlink: 'syz.1.7258': attribute type 1 has an invalid length. [ 831.862837][T30532] netlink: 3 bytes leftover after parsing attributes in process `syz.1.7258'. [ 832.072002][T30544] netlink: 'syz.1.7264': attribute type 1 has an invalid length. [ 832.121964][T30544] bond3: (slave vxcan5): The slave device specified does not support setting the MAC address [ 832.134990][T30544] bond3: (slave vxcan5): Error -95 calling set_mac_address [ 832.175255][T30549] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 832.474146][T30569] netlink: 84 bytes leftover after parsing attributes in process `syz.1.7275'. [ 832.767111][T30591] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7286'. [ 832.912826][T30599] syzkaller0: entered promiscuous mode [ 832.918662][T30599] syzkaller0: entered allmulticast mode [ 833.030236][T30601] netlink: 'syz.2.7291': attribute type 21 has an invalid length. [ 833.038460][T30601] netlink: 'syz.2.7291': attribute type 1 has an invalid length. [ 833.049617][T30601] netlink: 144 bytes leftover after parsing attributes in process `syz.2.7291'. [ 833.690837][T30637] lo speed is unknown, defaulting to 1000 [ 833.721503][T30641] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7306'. [ 833.749236][T30642] tipc: Enabled bearer , priority 0 [ 833.764891][T30642] syzkaller0: entered promiscuous mode [ 833.782481][T30642] syzkaller0: entered allmulticast mode [ 833.836603][T30642] tipc: Resetting bearer [ 833.956174][T30640] tipc: Resetting bearer [ 833.997374][T30640] tipc: Disabling bearer [ 834.414190][T30637] wg2 speed is unknown, defaulting to 1000 [ 835.104342][T30693] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7332'. [ 835.161107][T30695] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7333'. [ 835.246175][T30699] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7335'. [ 835.500887][T30710] pim6reg: entered allmulticast mode [ 835.564719][T30710] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7340'. [ 835.904981][T30726] tipc: Enabled bearer , priority 0 [ 835.914840][T30726] syzkaller0: entered promiscuous mode [ 835.920958][T30726] syzkaller0: entered allmulticast mode [ 836.019763][T30732] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7349'. [ 836.051701][T30726] tipc: Resetting bearer [ 836.066150][T30726] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 836.074716][T30726] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 836.129205][T30725] tipc: Resetting bearer [ 836.171444][T30725] tipc: Disabling bearer [ 836.360078][T30747] lo: entered allmulticast mode [ 836.393848][T30747] dvmrp1: entered allmulticast mode [ 836.448243][T30746] lo: left allmulticast mode [ 836.739845][T30767] FAULT_INJECTION: forcing a failure. [ 836.739845][T30767] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 836.802273][T30767] CPU: 1 UID: 0 PID: 30767 Comm: syz.4.7366 Not tainted syzkaller #0 PREEMPT(full) [ 836.802300][T30767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 836.802311][T30767] Call Trace: [ 836.802319][T30767] [ 836.802327][T30767] dump_stack_lvl+0x189/0x250 [ 836.802354][T30767] ? __pfx____ratelimit+0x10/0x10 [ 836.802378][T30767] ? __pfx_dump_stack_lvl+0x10/0x10 [ 836.802400][T30767] ? __pfx__printk+0x10/0x10 [ 836.802419][T30767] ? __might_fault+0xb0/0x130 [ 836.802452][T30767] should_fail_ex+0x414/0x560 [ 836.802481][T30767] _copy_from_user+0x2d/0xb0 [ 836.802504][T30767] ___sys_sendmsg+0x158/0x2a0 [ 836.802526][T30767] ? __pfx____sys_sendmsg+0x10/0x10 [ 836.802587][T30767] ? __fget_files+0x2a/0x420 [ 836.802605][T30767] ? __fget_files+0x3a0/0x420 [ 836.802630][T30767] __sys_sendmmsg+0x227/0x430 [ 836.802655][T30767] ? __pfx___sys_sendmmsg+0x10/0x10 [ 836.802683][T30767] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 836.802726][T30767] ? ksys_write+0x22a/0x250 [ 836.802753][T30767] ? __pfx_ksys_write+0x10/0x10 [ 836.802780][T30767] __x64_sys_sendmmsg+0xa0/0xc0 [ 836.802800][T30767] do_syscall_64+0xfa/0xfa0 [ 836.802822][T30767] ? lockdep_hardirqs_on+0x9c/0x150 [ 836.802844][T30767] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 836.802862][T30767] ? clear_bhb_loop+0x60/0xb0 [ 836.802882][T30767] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 836.802898][T30767] RIP: 0033:0x7f5d81d8efc9 [ 836.802920][T30767] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 836.802935][T30767] RSP: 002b:00007f5d82c28038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 836.802955][T30767] RAX: ffffffffffffffda RBX: 00007f5d81fe5fa0 RCX: 00007f5d81d8efc9 [ 836.802969][T30767] RDX: 0000000000000001 RSI: 0000200000000500 RDI: 0000000000000003 [ 836.802979][T30767] RBP: 00007f5d82c28090 R08: 0000000000000000 R09: 0000000000000000 [ 836.802991][T30767] R10: 0000000004000005 R11: 0000000000000246 R12: 0000000000000001 [ 836.803002][T30767] R13: 00007f5d81fe6038 R14: 00007f5d81fe5fa0 R15: 00007ffed3119898 [ 836.803033][T30767] [ 836.815906][T30773] IPVS: ip_vs_add_dest(): server weight less than zero [ 836.889188][T30772] __nla_validate_parse: 1 callbacks suppressed [ 836.889204][T30772] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7368'. [ 837.045007][T30771] syzkaller0: entered promiscuous mode [ 837.051551][T30771] syzkaller0: entered allmulticast mode [ 838.622382][T30779] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 838.723372][T30795] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7374'. [ 839.307909][T30829] FAULT_INJECTION: forcing a failure. [ 839.307909][T30829] name failslab, interval 1, probability 0, space 0, times 1 [ 839.350767][T30829] CPU: 1 UID: 0 PID: 30829 Comm: syz.0.7388 Not tainted syzkaller #0 PREEMPT(full) [ 839.350794][T30829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 839.350805][T30829] Call Trace: [ 839.350813][T30829] [ 839.350822][T30829] dump_stack_lvl+0x189/0x250 [ 839.350850][T30829] ? __pfx____ratelimit+0x10/0x10 [ 839.350873][T30829] ? __pfx_dump_stack_lvl+0x10/0x10 [ 839.350895][T30829] ? __pfx__printk+0x10/0x10 [ 839.350918][T30829] ? __lock_acquire+0xab9/0xd20 [ 839.350944][T30829] should_fail_ex+0x414/0x560 [ 839.350975][T30829] should_failslab+0xa8/0x100 [ 839.350996][T30829] kmem_cache_alloc_noprof+0x74/0x6e0 [ 839.351020][T30829] ? skb_clone+0x212/0x3a0 [ 839.351046][T30829] skb_clone+0x212/0x3a0 [ 839.351070][T30829] __netlink_deliver_tap+0x404/0x850 [ 839.351102][T30829] ? netlink_deliver_tap+0x2e/0x1b0 [ 839.351121][T30829] netlink_deliver_tap+0x19c/0x1b0 [ 839.351141][T30829] netlink_unicast+0x7fa/0x9e0 [ 839.351175][T30829] ? __pfx_netlink_unicast+0x10/0x10 [ 839.351201][T30829] ? netlink_sendmsg+0x642/0xb30 [ 839.351217][T30829] ? skb_put+0x11b/0x210 [ 839.351238][T30829] netlink_sendmsg+0x805/0xb30 [ 839.351265][T30829] ? __pfx_netlink_sendmsg+0x10/0x10 [ 839.351287][T30829] ? aa_sock_msg_perm+0xf1/0x1d0 [ 839.351314][T30829] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 839.351332][T30829] ? __pfx_netlink_sendmsg+0x10/0x10 [ 839.351351][T30829] __sock_sendmsg+0x21c/0x270 [ 839.351379][T30829] ____sys_sendmsg+0x505/0x830 [ 839.351404][T30829] ? __pfx_____sys_sendmsg+0x10/0x10 [ 839.351434][T30829] ? import_iovec+0x74/0xa0 [ 839.351461][T30829] ___sys_sendmsg+0x21f/0x2a0 [ 839.351483][T30829] ? __pfx____sys_sendmsg+0x10/0x10 [ 839.351549][T30829] ? __fget_files+0x2a/0x420 [ 839.351567][T30829] ? __fget_files+0x3a0/0x420 [ 839.351595][T30829] __x64_sys_sendmsg+0x19b/0x260 [ 839.351618][T30829] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 839.351648][T30829] ? __pfx_ksys_write+0x10/0x10 [ 839.351677][T30829] ? do_syscall_64+0xbe/0xfa0 [ 839.351705][T30829] do_syscall_64+0xfa/0xfa0 [ 839.351729][T30829] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 839.351747][T30829] ? asm_sysvec_call_function_single+0x1a/0x20 [ 839.351765][T30829] ? clear_bhb_loop+0x60/0xb0 [ 839.351788][T30829] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 839.351806][T30829] RIP: 0033:0x7f542a58efc9 [ 839.351823][T30829] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 839.351839][T30829] RSP: 002b:00007f542b382038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 839.351859][T30829] RAX: ffffffffffffffda RBX: 00007f542a7e5fa0 RCX: 00007f542a58efc9 [ 839.351872][T30829] RDX: 0000000020040000 RSI: 00002000000004c0 RDI: 0000000000000003 [ 839.351884][T30829] RBP: 00007f542b382090 R08: 0000000000000000 R09: 0000000000000000 [ 839.351896][T30829] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 839.351907][T30829] R13: 00007f542a7e6038 R14: 00007f542a7e5fa0 R15: 00007ffdb0ccb638 [ 839.351941][T30829] [ 840.136732][T30852] netlink: 'syz.4.7398': attribute type 58 has an invalid length. [ 840.155805][T30852] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7398'. [ 840.207560][T30861] nbd: device at index 3 is going down [ 840.217682][T30849] netlink: 'syz.3.7395': attribute type 10 has an invalid length. [ 840.231307][T30851] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 840.248821][T30869] FAULT_INJECTION: forcing a failure. [ 840.248821][T30869] name failslab, interval 1, probability 0, space 0, times 0 [ 840.264625][T30869] CPU: 0 UID: 0 PID: 30869 Comm: syz.2.7402 Not tainted syzkaller #0 PREEMPT(full) [ 840.264650][T30869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 840.264660][T30869] Call Trace: [ 840.264667][T30869] [ 840.264675][T30869] dump_stack_lvl+0x189/0x250 [ 840.264702][T30869] ? __pfx____ratelimit+0x10/0x10 [ 840.264726][T30869] ? __pfx_dump_stack_lvl+0x10/0x10 [ 840.264749][T30869] ? __pfx__printk+0x10/0x10 [ 840.264774][T30869] ? __pfx___might_resched+0x10/0x10 [ 840.264799][T30869] should_fail_ex+0x414/0x560 [ 840.264829][T30869] should_failslab+0xa8/0x100 [ 840.264850][T30869] kmem_cache_alloc_node_noprof+0x77/0x710 [ 840.264875][T30869] ? __alloc_skb+0x112/0x2d0 [ 840.264906][T30869] __alloc_skb+0x112/0x2d0 [ 840.264934][T30869] netlink_ack+0x146/0xa50 [ 840.264959][T30869] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 840.264982][T30869] ? ref_tracker_free+0x63a/0x7d0 [ 840.265000][T30869] ? __asan_memcpy+0x40/0x70 [ 840.265022][T30869] ? __pfx_ref_tracker_free+0x10/0x10 [ 840.265050][T30869] netlink_rcv_skb+0x28c/0x470 [ 840.265076][T30869] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 840.265103][T30869] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 840.265138][T30869] ? netlink_deliver_tap+0x2e/0x1b0 [ 840.265164][T30869] netlink_unicast+0x82f/0x9e0 [ 840.265196][T30869] ? __pfx_netlink_unicast+0x10/0x10 [ 840.265222][T30869] ? netlink_sendmsg+0x642/0xb30 [ 840.265238][T30869] ? skb_put+0x11b/0x210 [ 840.265259][T30869] netlink_sendmsg+0x805/0xb30 [ 840.265286][T30869] ? __pfx_netlink_sendmsg+0x10/0x10 [ 840.265307][T30869] ? aa_sock_msg_perm+0xf1/0x1d0 [ 840.265334][T30869] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 840.265352][T30869] ? __pfx_netlink_sendmsg+0x10/0x10 [ 840.265370][T30869] __sock_sendmsg+0x21c/0x270 [ 840.265405][T30869] ____sys_sendmsg+0x505/0x830 [ 840.265430][T30869] ? __pfx_____sys_sendmsg+0x10/0x10 [ 840.265458][T30869] ? import_iovec+0x74/0xa0 [ 840.265484][T30869] ___sys_sendmsg+0x21f/0x2a0 [ 840.265506][T30869] ? __pfx____sys_sendmsg+0x10/0x10 [ 840.265560][T30869] ? __fget_files+0x2a/0x420 [ 840.265577][T30869] ? __fget_files+0x3a0/0x420 [ 840.265608][T30869] __x64_sys_sendmsg+0x19b/0x260 [ 840.265630][T30869] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 840.265656][T30869] ? __pfx_ksys_write+0x10/0x10 [ 840.265682][T30869] ? do_syscall_64+0xbe/0xfa0 [ 840.265708][T30869] do_syscall_64+0xfa/0xfa0 [ 840.265728][T30869] ? lockdep_hardirqs_on+0x9c/0x150 [ 840.265752][T30869] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 840.265769][T30869] ? clear_bhb_loop+0x60/0xb0 [ 840.265789][T30869] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 840.265807][T30869] RIP: 0033:0x7f8dc8d8efc9 [ 840.265824][T30869] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 840.265840][T30869] RSP: 002b:00007f8dc9b59038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 840.265860][T30869] RAX: ffffffffffffffda RBX: 00007f8dc8fe5fa0 RCX: 00007f8dc8d8efc9 [ 840.265874][T30869] RDX: 0000000020040000 RSI: 00002000000004c0 RDI: 0000000000000003 [ 840.265887][T30869] RBP: 00007f8dc9b59090 R08: 0000000000000000 R09: 0000000000000000 [ 840.265899][T30869] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 840.265911][T30869] R13: 00007f8dc8fe6038 R14: 00007f8dc8fe5fa0 R15: 00007ffed76ac388 [ 840.265944][T30869] [ 840.672734][T30879] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7406'. [ 840.691237][T30873] bond2: peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 840.727402][T30873] bond2: entered promiscuous mode [ 840.732481][T30873] bond2: entered allmulticast mode [ 840.754394][T30873] 8021q: adding VLAN 0 to HW filter on device bond2 [ 840.801655][ T9854] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 840.829543][ T9854] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 840.852603][ T9854] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 840.883457][ T9854] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 840.995354][T30899] vlan2: entered promiscuous mode [ 841.002142][T30899] bridge0: entered promiscuous mode [ 841.149822][T30911] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 841.305558][T30923] pim6reg: entered allmulticast mode [ 841.359375][T30922] netlink: 'syz.0.7420': attribute type 1 has an invalid length. [ 841.484073][T30930] bridge4: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 841.774992][ T5839] Bluetooth: hci3: command 0x0406 tx timeout [ 842.050925][T30966] : renamed from hsr0 (while UP) [ 842.144442][T30974] lo speed is unknown, defaulting to 1000 [ 842.248454][T30984] openvswitch: netlink: Unknown nsh attribute 0 [ 842.254870][T30984] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 842.265059][T30984] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7438'. [ 842.550352][T30999] tipc: Enabled bearer , priority 0 [ 842.578116][T31002] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7442'. [ 842.587628][T31000] veth1_vlan: entered allmulticast mode [ 842.612195][T31006] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7442'. [ 842.630916][T30998] tipc: Disabling bearer [ 842.642366][T31006] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7442'. [ 842.652552][T31002] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7442'. [ 843.033061][T31028] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7451'. [ 843.088495][T31033] FAULT_INJECTION: forcing a failure. [ 843.088495][T31033] name failslab, interval 1, probability 0, space 0, times 0 [ 843.101645][T31033] CPU: 0 UID: 0 PID: 31033 Comm: syz.3.7453 Not tainted syzkaller #0 PREEMPT(full) [ 843.101672][T31033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 843.101682][T31033] Call Trace: [ 843.101690][T31033] [ 843.101699][T31033] dump_stack_lvl+0x189/0x250 [ 843.101727][T31033] ? __pfx____ratelimit+0x10/0x10 [ 843.101751][T31033] ? __pfx_dump_stack_lvl+0x10/0x10 [ 843.101775][T31033] ? __pfx__printk+0x10/0x10 [ 843.101791][T31033] ? __sock_sendmsg+0x21c/0x270 [ 843.101814][T31033] ? do_syscall_64+0xfa/0xfa0 [ 843.101847][T31033] should_fail_ex+0x414/0x560 [ 843.101877][T31033] should_failslab+0xa8/0x100 [ 843.101898][T31033] kmem_cache_alloc_noprof+0x74/0x6e0 [ 843.101922][T31033] ? skb_clone+0x212/0x3a0 [ 843.101947][T31033] skb_clone+0x212/0x3a0 [ 843.101971][T31033] __netlink_deliver_tap+0x404/0x850 [ 843.102001][T31033] ? netlink_deliver_tap+0x2e/0x1b0 [ 843.102020][T31033] netlink_deliver_tap+0x19c/0x1b0 [ 843.102039][T31033] netlink_sendskb+0x68/0x140 [ 843.102066][T31033] netlink_unicast+0x397/0x9e0 [ 843.102095][T31033] ? __asan_memcpy+0x40/0x70 [ 843.102126][T31033] ? __pfx_netlink_unicast+0x10/0x10 [ 843.102160][T31033] netlink_rcv_skb+0x28c/0x470 [ 843.102187][T31033] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 843.102215][T31033] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 843.102251][T31033] ? netlink_deliver_tap+0x2e/0x1b0 [ 843.102274][T31033] netlink_unicast+0x82f/0x9e0 [ 843.102305][T31033] ? __pfx_netlink_unicast+0x10/0x10 [ 843.102331][T31033] ? netlink_sendmsg+0x642/0xb30 [ 843.102346][T31033] ? skb_put+0x11b/0x210 [ 843.102366][T31033] netlink_sendmsg+0x805/0xb30 [ 843.102393][T31033] ? __pfx_netlink_sendmsg+0x10/0x10 [ 843.102413][T31033] ? aa_sock_msg_perm+0xf1/0x1d0 [ 843.102441][T31033] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 843.102457][T31033] ? __pfx_netlink_sendmsg+0x10/0x10 [ 843.102473][T31033] __sock_sendmsg+0x21c/0x270 [ 843.102498][T31033] ____sys_sendmsg+0x505/0x830 [ 843.102522][T31033] ? __pfx_____sys_sendmsg+0x10/0x10 [ 843.102550][T31033] ? import_iovec+0x74/0xa0 [ 843.102573][T31033] ___sys_sendmsg+0x21f/0x2a0 [ 843.102594][T31033] ? __pfx____sys_sendmsg+0x10/0x10 [ 843.102650][T31033] ? __fget_files+0x2a/0x420 [ 843.102666][T31033] ? __fget_files+0x3a0/0x420 [ 843.102693][T31033] __x64_sys_sendmsg+0x19b/0x260 [ 843.102714][T31033] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 843.102741][T31033] ? __pfx_ksys_write+0x10/0x10 [ 843.102768][T31033] ? do_syscall_64+0xbe/0xfa0 [ 843.102794][T31033] do_syscall_64+0xfa/0xfa0 [ 843.102816][T31033] ? lockdep_hardirqs_on+0x9c/0x150 [ 843.102839][T31033] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 843.102856][T31033] ? clear_bhb_loop+0x60/0xb0 [ 843.102877][T31033] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 843.102895][T31033] RIP: 0033:0x7fb19e78efc9 [ 843.102912][T31033] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 843.102928][T31033] RSP: 002b:00007fb19f6ea038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 843.102949][T31033] RAX: ffffffffffffffda RBX: 00007fb19e9e5fa0 RCX: 00007fb19e78efc9 [ 843.102963][T31033] RDX: 0000000020040000 RSI: 00002000000004c0 RDI: 0000000000000003 [ 843.102975][T31033] RBP: 00007fb19f6ea090 R08: 0000000000000000 R09: 0000000000000000 [ 843.102986][T31033] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 843.102997][T31033] R13: 00007fb19e9e6038 R14: 00007fb19e9e5fa0 R15: 00007ffef0453d78 [ 843.103028][T31033] [ 843.513917][T30974] wg2 speed is unknown, defaulting to 1000 [ 843.538243][T31038] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7455'. [ 843.587538][T31038] netlink: 50 bytes leftover after parsing attributes in process `syz.2.7455'. [ 843.599378][T31043] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7456'. [ 843.628802][T31038] netlink: 50 bytes leftover after parsing attributes in process `syz.2.7455'. [ 843.648011][T31048] netlink: 'syz.4.7459': attribute type 2 has an invalid length. [ 843.719958][T31043] 8021q: adding VLAN 0 to HW filter on device bond4 [ 844.075290][T31063] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 844.091613][T31062] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 844.126476][T31073] sch_fq: defrate 0 ignored. [ 844.406496][T31088] netlink: 'syz.4.7473': attribute type 21 has an invalid length. [ 844.431682][T31088] IPv6: NLM_F_CREATE should be specified when creating new route [ 844.455986][T31088] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 844.463292][T31088] IPv6: NLM_F_CREATE should be set when creating new route [ 844.470624][T31088] IPv6: NLM_F_CREATE should be set when creating new route [ 844.477858][T31088] IPv6: NLM_F_CREATE should be set when creating new route [ 844.703319][T31099] netlink: 'syz.2.7477': attribute type 9 has an invalid length. [ 844.789161][T31102] macsec1: entered promiscuous mode [ 844.794660][T31102] macsec1: entered allmulticast mode [ 846.138076][T31188] tipc: Enabled bearer , priority 0 [ 846.160576][T31188] syzkaller0: entered promiscuous mode [ 846.180109][T31188] syzkaller0: entered allmulticast mode [ 846.233939][T31188] tipc: Resetting bearer [ 846.263592][T31186] tipc: Resetting bearer [ 846.299450][T31186] tipc: Disabling bearer [ 847.584491][T31240] __nla_validate_parse: 7 callbacks suppressed [ 847.584510][T31240] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7540'. [ 848.455341][T31257] netlink: 5502 bytes leftover after parsing attributes in process `syz.3.7543'. [ 848.471774][T31257] openvswitch: netlink: Actions may not be safe on all matching packets [ 848.943241][T31291] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7558'. [ 849.433309][T31314] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7566'. [ 849.467731][T31314] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 849.860787][T31342] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7579'. [ 849.882521][T31342] macvtap1: entered promiscuous mode [ 849.888771][T31342] mac80211_hwsim hwsim59 wlan1: entered promiscuous mode [ 849.899813][T31342] mac80211_hwsim hwsim59 wlan1: left promiscuous mode [ 849.905475][T31344] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7580'. [ 849.943370][T31344] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 850.034577][T31348] veth1_to_bond: entered allmulticast mode [ 850.041467][T31348] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7582'. [ 850.075274][T31348] veth1_to_bond (unregistering): left allmulticast mode [ 850.113039][T31350] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7583'. [ 850.122466][T31350] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7583'. [ 850.132113][T31350] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7583'. [ 850.361546][T31362] lo speed is unknown, defaulting to 1000 [ 850.587308][T31370] macsec5: entered promiscuous mode [ 850.592559][T31370] macvlan0: entered promiscuous mode [ 850.610245][T31370] macsec5: entered allmulticast mode [ 850.615584][T31370] macvlan0: entered allmulticast mode [ 850.657994][T31370] macvlan0: left allmulticast mode [ 850.668871][T31370] macvlan0: left promiscuous mode [ 850.716360][T31372] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 851.234016][T31402] tipc: Started in network mode [ 851.248282][T31402] tipc: Node identity da18c31745c4, cluster identity 4711 [ 851.265967][T31402] tipc: Enabled bearer , priority 0 [ 851.283960][T31402] syzkaller0: entered promiscuous mode [ 851.299694][T31402] syzkaller0: entered allmulticast mode [ 851.316782][T31400] syzkaller0: entered promiscuous mode [ 851.334751][T31400] syzkaller0: entered allmulticast mode [ 851.415452][T31402] tipc: Resetting bearer [ 851.436540][T31401] tipc: Resetting bearer [ 851.489628][T31401] tipc: Disabling bearer [ 851.575911][T31362] wg2 speed is unknown, defaulting to 1000 [ 851.688906][ T5827] Bluetooth: hci2: command 0x0406 tx timeout [ 852.637453][T31460] __nla_validate_parse: 2 callbacks suppressed [ 852.637471][T31460] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7626'. [ 853.312295][T31488] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 853.427521][T31490] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 853.442783][T31490] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 853.529645][ T9914] lo speed is unknown, defaulting to 1000 [ 853.529682][T23414] syz1: Port: 1 Link DOWN [ 853.541388][ T5830] wg2 speed is unknown, defaulting to 1000 [ 853.542336][ T9914] syz0: Port: 1 Link DOWN [ 853.553653][T16810] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 853.562940][ T5830] syz2: Port: 1 Link DOWN [ 853.568240][T16810] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 853.577466][ T5929] lo speed is unknown, defaulting to 1000 [ 853.577473][T16810] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 853.598933][T16810] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 853.785333][T31506] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 853.971211][T31515] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7650'. [ 854.403304][T31549] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7667'. [ 854.523705][T31558] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7671'. [ 854.903896][T31585] netlink: 260 bytes leftover after parsing attributes in process `syz.2.7684'. [ 856.319761][T31686] syzkaller0: entered promiscuous mode [ 856.325399][T31686] syzkaller0: entered allmulticast mode [ 856.566659][T31698] tipc: Enabled bearer , priority 0 [ 856.576535][T31697] tipc: Disabling bearer [ 857.105892][T31730] netlink: 64 bytes leftover after parsing attributes in process `syz.0.7750'. [ 857.142753][T31734] bridge0: vlan filtering disabled, automatically disabling multicast vlan snooping [ 857.190222][T31734] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 857.365599][T31747] geneve2: entered allmulticast mode [ 857.405039][T16810] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20001 - 0 [ 857.430944][T16810] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20001 - 0 [ 857.466389][T16810] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20001 - 0 [ 857.515196][T16810] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20001 - 0 [ 857.787060][T31781] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7766'. [ 857.870569][T31784] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7769'. [ 858.050628][T31798] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7778'. [ 858.283000][T31814] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7783'. [ 858.401925][T31822] netlink: 'syz.2.7787': attribute type 1 has an invalid length. [ 858.432996][T31822] netlink: 5 bytes leftover after parsing attributes in process `syz.2.7787'. [ 858.681045][T31844] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7797'. [ 859.793962][T31927] FAULT_INJECTION: forcing a failure. [ 859.793962][T31927] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 859.821623][T31927] CPU: 1 UID: 0 PID: 31927 Comm: syz.1.7831 Not tainted syzkaller #0 PREEMPT(full) [ 859.821650][T31927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 859.821662][T31927] Call Trace: [ 859.821669][T31927] [ 859.821678][T31927] dump_stack_lvl+0x189/0x250 [ 859.821706][T31927] ? __pfx____ratelimit+0x10/0x10 [ 859.821730][T31927] ? __pfx_dump_stack_lvl+0x10/0x10 [ 859.821753][T31927] ? __pfx__printk+0x10/0x10 [ 859.821773][T31927] ? __might_fault+0xb0/0x130 [ 859.821809][T31927] should_fail_ex+0x414/0x560 [ 859.821841][T31927] _copy_from_user+0x2d/0xb0 [ 859.821864][T31927] kstrtouint_from_user+0xc4/0x170 [ 859.821886][T31927] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 859.821922][T31927] proc_fail_nth_write+0x88/0x200 [ 859.821946][T31927] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 859.821974][T31927] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 859.821998][T31927] vfs_write+0x27e/0xb30 [ 859.822060][T31927] ? __pfx_vfs_write+0x10/0x10 [ 859.822086][T31927] ? __fget_files+0x2a/0x420 [ 859.822109][T31927] ? __fget_files+0x3a0/0x420 [ 859.822125][T31927] ? __fget_files+0x2a/0x420 [ 859.822152][T31927] ksys_write+0x145/0x250 [ 859.822179][T31927] ? __pfx_ksys_write+0x10/0x10 [ 859.822207][T31927] ? do_syscall_64+0xbe/0xfa0 [ 859.822234][T31927] do_syscall_64+0xfa/0xfa0 [ 859.822256][T31927] ? lockdep_hardirqs_on+0x9c/0x150 [ 859.822280][T31927] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 859.822296][T31927] ? clear_bhb_loop+0x60/0xb0 [ 859.822317][T31927] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 859.822333][T31927] RIP: 0033:0x7fb58c18da7f [ 859.822349][T31927] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 859.822363][T31927] RSP: 002b:00007fb58d0c3030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 859.822382][T31927] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fb58c18da7f [ 859.822395][T31927] RDX: 0000000000000001 RSI: 00007fb58d0c30a0 RDI: 0000000000000005 [ 859.822406][T31927] RBP: 00007fb58d0c3090 R08: 0000000000000000 R09: 0000000000000000 [ 859.822418][T31927] R10: 0000000004000005 R11: 0000000000000293 R12: 0000000000000001 [ 859.822429][T31927] R13: 00007fb58c3e6038 R14: 00007fb58c3e5fa0 R15: 00007ffe622bd8e8 [ 859.822459][T31927] [ 860.213783][T31943] veth0: entered promiscuous mode [ 860.220369][T31943] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7840'. [ 860.282557][T31950] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7839'. [ 860.292672][T31950] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7839'. [ 860.414642][T31951] bond3: option mode: invalid value (133) [ 860.429718][T31951] bond3 (unregistering): Released all slaves [ 860.505342][T31960] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7844'. [ 860.519729][T31960] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 860.749944][T31974] macsec0: entered promiscuous mode [ 860.755375][T31974] macsec0: entered allmulticast mode [ 860.764233][T31974] veth1_macvtap: entered allmulticast mode [ 860.773131][T31974] macsec0: left promiscuous mode [ 860.779025][T31974] macsec0: left allmulticast mode [ 860.785531][T31974] veth1_macvtap: left allmulticast mode [ 860.814573][T31977] batadv1: entered allmulticast mode [ 861.121761][T31992] tipc: Enabled bearer , priority 0 [ 861.129891][T31992] syzkaller0: entered promiscuous mode [ 861.135391][T31992] syzkaller0: entered allmulticast mode [ 861.162213][T31992] tipc: Resetting bearer [ 861.191236][T31991] tipc: Resetting bearer [ 861.228837][T31991] tipc: Disabling bearer [ 861.374396][T32003] 8021q: adding VLAN 0 to HW filter on device bond5 [ 861.425430][T32011] netlink: 'syz.2.7863': attribute type 21 has an invalid length. [ 861.511307][T32017] openvswitch: netlink: IP tunnel dst address not specified [ 861.838919][T32048] FAULT_INJECTION: forcing a failure. [ 861.838919][T32048] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 861.854767][T32049] veth0: entered promiscuous mode [ 861.867144][T32049] veth0: left promiscuous mode [ 861.901055][T32047] netlink: 'syz.1.7875': attribute type 10 has an invalid length. [ 861.928142][T32048] CPU: 1 UID: 0 PID: 32048 Comm: syz.0.7874 Not tainted syzkaller #0 PREEMPT(full) [ 861.928189][T32048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 861.928212][T32048] Call Trace: [ 861.928227][T32048] [ 861.928244][T32048] dump_stack_lvl+0x189/0x250 [ 861.928299][T32048] ? __pfx____ratelimit+0x10/0x10 [ 861.928348][T32048] ? __pfx_dump_stack_lvl+0x10/0x10 [ 861.928400][T32048] ? __pfx__printk+0x10/0x10 [ 861.928440][T32048] ? __might_fault+0xb0/0x130 [ 861.928516][T32048] should_fail_ex+0x414/0x560 [ 861.928583][T32048] _copy_from_user+0x2d/0xb0 [ 861.928632][T32048] kstrtouint_from_user+0xc4/0x170 [ 861.928679][T32048] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 861.928761][T32048] proc_fail_nth_write+0x88/0x200 [ 861.928810][T32048] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 861.928855][T32048] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 861.928880][T32048] vfs_write+0x27e/0xb30 [ 861.928913][T32048] ? __pfx_vfs_write+0x10/0x10 [ 861.928940][T32048] ? __fget_files+0x2a/0x420 [ 861.928963][T32048] ? __fget_files+0x3a0/0x420 [ 861.928979][T32048] ? __fget_files+0x2a/0x420 [ 861.929006][T32048] ksys_write+0x145/0x250 [ 861.929032][T32048] ? __pfx_ksys_write+0x10/0x10 [ 861.929059][T32048] ? do_syscall_64+0xbe/0xfa0 [ 861.929093][T32048] do_syscall_64+0xfa/0xfa0 [ 861.929115][T32048] ? lockdep_hardirqs_on+0x9c/0x150 [ 861.929139][T32048] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 861.929157][T32048] ? clear_bhb_loop+0x60/0xb0 [ 861.929183][T32048] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 861.929201][T32048] RIP: 0033:0x7f542a58da7f [ 861.929218][T32048] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 861.929233][T32048] RSP: 002b:00007f542b382030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 861.929253][T32048] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f542a58da7f [ 861.929266][T32048] RDX: 0000000000000001 RSI: 00007f542b3820a0 RDI: 0000000000000004 [ 861.929278][T32048] RBP: 00007f542b382090 R08: 0000000000000000 R09: 0000000000000000 [ 861.929290][T32048] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 861.929301][T32048] R13: 00007f542a7e6038 R14: 00007f542a7e5fa0 R15: 00007ffdb0ccb638 [ 861.929334][T32048] [ 862.309123][T32059] bond3: ARP target 1.0.0.0 is already present [ 862.316149][T32059] bond3: option arp_ip_target: invalid value (1) [ 862.330983][T32059] bond3 (unregistering): Released all slaves [ 862.415531][T32070] bond0: entered promiscuous mode [ 862.422363][T32070] bond0: left promiscuous mode [ 862.692837][T32085] lo speed is unknown, defaulting to 1000 [ 862.716370][T32091] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 862.806475][T32096] netlink: 'syz.4.7888': attribute type 11 has an invalid length. [ 862.825057][T32096] __nla_validate_parse: 9 callbacks suppressed [ 862.825075][T32096] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7888'. [ 862.857040][T32096] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7888'. [ 862.888304][T32096] netlink: 'syz.4.7888': attribute type 14 has an invalid length. [ 862.897410][T32099] netlink: 80 bytes leftover after parsing attributes in process `syz.3.7886'. [ 862.918376][T32096] netlink: 'syz.4.7888': attribute type 13 has an invalid length. [ 863.111192][T32102] tipc: Enabled bearer , priority 0 [ 863.118946][T32102] syzkaller0: entered promiscuous mode [ 863.125893][T32102] syzkaller0: entered allmulticast mode [ 863.158508][T32105] FAULT_INJECTION: forcing a failure. [ 863.158508][T32105] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 863.172908][T32105] CPU: 0 UID: 0 PID: 32105 Comm: syz.4.7890 Not tainted syzkaller #0 PREEMPT(full) [ 863.172934][T32105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 863.172945][T32105] Call Trace: [ 863.172953][T32105] [ 863.172961][T32105] dump_stack_lvl+0x189/0x250 [ 863.172990][T32105] ? __pfx____ratelimit+0x10/0x10 [ 863.173012][T32105] ? __pfx_dump_stack_lvl+0x10/0x10 [ 863.173035][T32105] ? __pfx__printk+0x10/0x10 [ 863.173053][T32105] ? __might_fault+0xb0/0x130 [ 863.173088][T32105] should_fail_ex+0x414/0x560 [ 863.173120][T32105] _copy_from_user+0x2d/0xb0 [ 863.173143][T32105] ___sys_sendmsg+0x158/0x2a0 [ 863.173166][T32105] ? __pfx____sys_sendmsg+0x10/0x10 [ 863.173221][T32105] ? __fget_files+0x2a/0x420 [ 863.173237][T32105] ? __fget_files+0x3a0/0x420 [ 863.173265][T32105] __x64_sys_sendmsg+0x19b/0x260 [ 863.173288][T32105] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 863.173317][T32105] ? __pfx_ksys_write+0x10/0x10 [ 863.173345][T32105] ? do_syscall_64+0xbe/0xfa0 [ 863.173372][T32105] do_syscall_64+0xfa/0xfa0 [ 863.173394][T32105] ? lockdep_hardirqs_on+0x9c/0x150 [ 863.173417][T32105] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 863.173435][T32105] ? clear_bhb_loop+0x60/0xb0 [ 863.173457][T32105] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 863.173475][T32105] RIP: 0033:0x7f5d81d8efc9 [ 863.173493][T32105] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 863.173508][T32105] RSP: 002b:00007f5d82c07038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 863.173529][T32105] RAX: ffffffffffffffda RBX: 00007f5d81fe6090 RCX: 00007f5d81d8efc9 [ 863.173542][T32105] RDX: 0000000000000000 RSI: 0000200000000740 RDI: 0000000000000003 [ 863.173554][T32105] RBP: 00007f5d82c07090 R08: 0000000000000000 R09: 0000000000000000 [ 863.173566][T32105] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 863.173576][T32105] R13: 00007f5d81fe6128 R14: 00007f5d81fe6090 R15: 00007ffed3119898 [ 863.173609][T32105] [ 863.387922][T32107] netlink: 64 bytes leftover after parsing attributes in process `syz.3.7891'. [ 863.412825][T32102] tipc: Resetting bearer [ 863.434354][T32101] tipc: Resetting bearer [ 863.473656][T32101] tipc: Disabling bearer [ 864.250714][T32147] tipc: Enabled bearer , priority 0 [ 864.272464][T32147] syzkaller0: entered promiscuous mode [ 864.295836][T32147] syzkaller0: entered allmulticast mode [ 864.334116][T32147] tipc: Resetting bearer [ 864.354937][T32142] tipc: Resetting bearer [ 864.362455][T32159] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7905'. [ 864.402249][T32159] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7905'. [ 864.412442][T32142] tipc: Disabling bearer [ 864.419437][T32164] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7906'. [ 864.431917][T32085] wg2 speed is unknown, defaulting to 1000 [ 864.450339][T32164] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7906'. [ 864.611410][T32175] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7908'. [ 864.683996][T32179] FAULT_INJECTION: forcing a failure. [ 864.683996][T32179] name failslab, interval 1, probability 0, space 0, times 0 [ 864.721079][T32179] CPU: 0 UID: 0 PID: 32179 Comm: syz.3.7910 Not tainted syzkaller #0 PREEMPT(full) [ 864.721106][T32179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 864.721117][T32179] Call Trace: [ 864.721126][T32179] [ 864.721134][T32179] dump_stack_lvl+0x189/0x250 [ 864.721163][T32179] ? __pfx____ratelimit+0x10/0x10 [ 864.721187][T32179] ? __pfx_dump_stack_lvl+0x10/0x10 [ 864.721210][T32179] ? __pfx__printk+0x10/0x10 [ 864.721235][T32179] ? __pfx___might_resched+0x10/0x10 [ 864.721253][T32179] ? fs_reclaim_acquire+0x7d/0x100 [ 864.721285][T32179] should_fail_ex+0x414/0x560 [ 864.721315][T32179] should_failslab+0xa8/0x100 [ 864.721335][T32179] __kmalloc_noprof+0xcb/0x7f0 [ 864.721359][T32179] ? sock_kmalloc+0xd6/0x160 [ 864.721385][T32179] sock_kmalloc+0xd6/0x160 [ 864.721408][T32179] ____sys_sendmsg+0x1b5/0x830 [ 864.721434][T32179] ? __pfx_____sys_sendmsg+0x10/0x10 [ 864.721464][T32179] ? import_iovec+0x74/0xa0 [ 864.722048][T32179] ___sys_sendmsg+0x21f/0x2a0 [ 864.722071][T32179] ? __pfx____sys_sendmsg+0x10/0x10 [ 864.722127][T32179] ? __fget_files+0x2a/0x420 [ 864.722144][T32179] ? __fget_files+0x3a0/0x420 [ 864.722172][T32179] __x64_sys_sendmsg+0x19b/0x260 [ 864.722195][T32179] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 864.722225][T32179] ? __pfx_ksys_write+0x10/0x10 [ 864.722252][T32179] ? do_syscall_64+0xbe/0xfa0 [ 864.722280][T32179] do_syscall_64+0xfa/0xfa0 [ 864.722301][T32179] ? lockdep_hardirqs_on+0x9c/0x150 [ 864.722325][T32179] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 864.722343][T32179] ? clear_bhb_loop+0x60/0xb0 [ 864.722365][T32179] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 864.722382][T32179] RIP: 0033:0x7fb19e78efc9 [ 864.722400][T32179] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 864.722415][T32179] RSP: 002b:00007fb19f6ea038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 864.722436][T32179] RAX: ffffffffffffffda RBX: 00007fb19e9e5fa0 RCX: 00007fb19e78efc9 [ 864.722450][T32179] RDX: 0000000000000000 RSI: 0000200000000740 RDI: 0000000000000003 [ 864.722462][T32179] RBP: 00007fb19f6ea090 R08: 0000000000000000 R09: 0000000000000000 [ 864.722474][T32179] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 864.722491][T32179] R13: 00007fb19e9e6038 R14: 00007fb19e9e5fa0 R15: 00007ffef0453d78 [ 864.722523][T32179] [ 865.064001][T32188] tipc: Enabling of bearer rejected, failed to enable media [ 865.632019][T32213] netlink: 240 bytes leftover after parsing attributes in process `syz.3.7925'. [ 866.305223][T32246] syz_tun: entered allmulticast mode [ 866.316602][T32245] syz_tun: left allmulticast mode [ 866.614554][T32264] macsec2: entered promiscuous mode [ 866.629192][T32264] mac80211_hwsim hwsim55 wlan1: entered promiscuous mode [ 866.992932][T32290] tipc: Enabled bearer , priority 0 [ 867.031044][T32294] team0: Mode changed to "loadbalance" [ 867.059648][T32296] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 867.080386][T32290] tipc: Resetting bearer [ 867.172014][T32289] tipc: Disabling bearer [ 867.374000][T32313] netlink: 'syz.4.7969': attribute type 4 has an invalid length. [ 867.551460][T32324] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 867.913035][T32349] __nla_validate_parse: 5 callbacks suppressed [ 867.913054][T32349] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7985'. [ 867.959186][T32350] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 868.100113][T32359] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 868.250571][T32369] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7995'. [ 868.352315][T32376] netlink: 52 bytes leftover after parsing attributes in process `syz.2.7998'. [ 868.726283][T32400] netlink: 72 bytes leftover after parsing attributes in process `syz.1.8008'. [ 868.735438][T32400] netlink: 44 bytes leftover after parsing attributes in process `syz.1.8008'. [ 868.745030][T32400] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 868.920849][T32412] netlink: 'syz.0.8014': attribute type 1 has an invalid length. [ 868.929367][T32412] netlink: 232 bytes leftover after parsing attributes in process `syz.0.8014'. [ 868.940574][T32412] netlink: 'syz.0.8014': attribute type 11 has an invalid length. [ 868.985461][T32415] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8015'. [ 869.051398][T32426] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8018'. [ 869.060667][T32426] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8018'. [ 869.092004][T32420] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 869.101630][T32419] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 869.427571][T32449] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8024'. [ 870.079255][T32501] SET target dimension over the limit! [ 870.428910][T32524] FAULT_INJECTION: forcing a failure. [ 870.428910][T32524] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 870.442613][T32524] CPU: 0 UID: 0 PID: 32524 Comm: syz.4.8048 Not tainted syzkaller #0 PREEMPT(full) [ 870.442640][T32524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 870.442651][T32524] Call Trace: [ 870.442659][T32524] [ 870.442668][T32524] dump_stack_lvl+0x189/0x250 [ 870.442696][T32524] ? __pfx____ratelimit+0x10/0x10 [ 870.442719][T32524] ? __pfx_dump_stack_lvl+0x10/0x10 [ 870.442742][T32524] ? __pfx__printk+0x10/0x10 [ 870.442760][T32524] ? __might_fault+0xb0/0x130 [ 870.442793][T32524] should_fail_ex+0x414/0x560 [ 870.442824][T32524] _copy_from_user+0x2d/0xb0 [ 870.442848][T32524] do_ipv6_setsockopt+0x23e/0x2eb0 [ 870.442888][T32524] ? get_pid_task+0x20/0x1f0 [ 870.442911][T32524] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 870.442940][T32524] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 870.442976][T32524] ? vfs_write+0x956/0xb30 [ 870.443003][T32524] ? __pfx___might_resched+0x10/0x10 [ 870.443031][T32524] ? __lock_acquire+0xab9/0xd20 [ 870.443056][T32524] ? aa_sk_perm+0x81e/0x950 [ 870.443084][T32524] ? __pfx_aa_sk_perm+0x10/0x10 [ 870.443109][T32524] ? aa_sock_opt_perm+0xff/0x1b0 [ 870.443136][T32524] ipv6_setsockopt+0x59/0x170 [ 870.443152][T32524] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 870.443180][T32524] do_sock_setsockopt+0x17c/0x1b0 [ 870.443202][T32524] __x64_sys_setsockopt+0x13f/0x1b0 [ 870.443227][T32524] do_syscall_64+0xfa/0xfa0 [ 870.443253][T32524] ? lockdep_hardirqs_on+0x9c/0x150 [ 870.443277][T32524] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 870.443295][T32524] ? clear_bhb_loop+0x60/0xb0 [ 870.443318][T32524] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 870.443336][T32524] RIP: 0033:0x7f5d81d8efc9 [ 870.443353][T32524] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 870.443369][T32524] RSP: 002b:00007f5d82c28038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 870.443390][T32524] RAX: ffffffffffffffda RBX: 00007f5d81fe5fa0 RCX: 00007f5d81d8efc9 [ 870.443404][T32524] RDX: 0000000000000001 RSI: 0000000000000029 RDI: 0000000000000003 [ 870.443416][T32524] RBP: 00007f5d82c28090 R08: 0000000000000004 R09: 0000000000000000 [ 870.443429][T32524] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000001 [ 870.443441][T32524] R13: 00007f5d81fe6038 R14: 00007f5d81fe5fa0 R15: 00007ffed3119898 [ 870.443473][T32524] [ 871.076587][T32548] FAULT_INJECTION: forcing a failure. [ 871.076587][T32548] name failslab, interval 1, probability 0, space 0, times 0 [ 871.097055][T32548] CPU: 1 UID: 0 PID: 32548 Comm: syz.1.8058 Not tainted syzkaller #0 PREEMPT(full) [ 871.097081][T32548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 871.097092][T32548] Call Trace: [ 871.097100][T32548] [ 871.097108][T32548] dump_stack_lvl+0x189/0x250 [ 871.097136][T32548] ? __pfx____ratelimit+0x10/0x10 [ 871.097159][T32548] ? __pfx_dump_stack_lvl+0x10/0x10 [ 871.097180][T32548] ? __pfx__printk+0x10/0x10 [ 871.097202][T32548] ? __pfx___might_resched+0x10/0x10 [ 871.097220][T32548] ? fs_reclaim_acquire+0x7d/0x100 [ 871.097250][T32548] should_fail_ex+0x414/0x560 [ 871.097280][T32548] should_failslab+0xa8/0x100 [ 871.097301][T32548] kmem_cache_alloc_node_noprof+0x77/0x710 [ 871.097325][T32548] ? __alloc_skb+0x112/0x2d0 [ 871.097349][T32548] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 871.097376][T32548] __alloc_skb+0x112/0x2d0 [ 871.097403][T32548] __ip_append_data+0x2dae/0x40c0 [ 871.097447][T32548] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 871.097490][T32548] ? __pfx___ip_append_data+0x10/0x10 [ 871.097516][T32548] ? __local_bh_enable_ip+0x12d/0x1c0 [ 871.097535][T32548] ? lockdep_hardirqs_on+0x9c/0x150 [ 871.097562][T32548] ip_append_data+0x10e/0x190 [ 871.097587][T32548] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 871.097613][T32548] udp_sendmsg+0x541/0x2170 [ 871.097642][T32548] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 871.097674][T32548] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 871.097704][T32548] ? __pfx_udp_sendmsg+0x10/0x10 [ 871.097733][T32548] ? __lock_acquire+0xab9/0xd20 [ 871.097774][T32548] ? __pfx_aa_sk_perm+0x10/0x10 [ 871.097794][T32548] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 871.097820][T32548] ? __fget_files+0x2a/0x420 [ 871.097834][T32548] ? sock_rps_record_flow+0x19/0x410 [ 871.097856][T32548] ? inet_sendmsg+0x29c/0x370 [ 871.097874][T32548] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 871.097891][T32548] __sock_sendmsg+0x19c/0x270 [ 871.097913][T32548] __sys_sendto+0x3bd/0x520 [ 871.097928][T32548] ? __pfx___sys_sendto+0x10/0x10 [ 871.097946][T32548] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 871.097977][T32548] ? __fget_files+0x3a0/0x420 [ 871.097998][T32548] ? ksys_write+0x22a/0x250 [ 871.098019][T32548] ? __pfx_ksys_write+0x10/0x10 [ 871.098040][T32548] __x64_sys_sendto+0xde/0x100 [ 871.098062][T32548] do_syscall_64+0xfa/0xfa0 [ 871.098081][T32548] ? lockdep_hardirqs_on+0x9c/0x150 [ 871.098099][T32548] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 871.098113][T32548] ? clear_bhb_loop+0x60/0xb0 [ 871.098130][T32548] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 871.098144][T32548] RIP: 0033:0x7fb58c18efc9 [ 871.098158][T32548] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 871.098171][T32548] RSP: 002b:00007fb58d0c3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 871.098187][T32548] RAX: ffffffffffffffda RBX: 00007fb58c3e5fa0 RCX: 00007fb58c18efc9 [ 871.098197][T32548] RDX: 000000000000fdbe RSI: 0000200000000100 RDI: 0000000000000005 [ 871.098207][T32548] RBP: 00007fb58d0c3090 R08: 0000000000000000 R09: 0000000011000a00 [ 871.098216][T32548] R10: 0000000004004084 R11: 0000000000000246 R12: 0000000000000001 [ 871.098225][T32548] R13: 00007fb58c3e6038 R14: 00007fb58c3e5fa0 R15: 00007ffe622bd8e8 [ 871.098249][T32548] [ 872.460028][T32617] veth1_to_batadv: entered promiscuous mode [ 872.475544][T32617] batadv_slave_0: entered promiscuous mode [ 872.484534][T32617] debugfs: 'hsr0' already exists in 'hsr' [ 872.496573][T32617] Cannot create hsr debugfs directory [ 872.502444][T32617] hsr0: entered promiscuous mode [ 872.936082][T32652] __nla_validate_parse: 10 callbacks suppressed [ 872.936101][T32652] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8102'. [ 872.953863][T32654] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8103'. [ 872.980914][ T12] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 872.989983][T32652] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8102'. [ 873.007064][ T12] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 873.016335][ T12] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 873.025059][ T12] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 873.103717][T32660] sctp: [Deprecated]: syz.4.8106 (pid 32660) Use of struct sctp_assoc_value in delayed_ack socket option. [ 873.103717][T32660] Use struct sctp_sack_info instead [ 873.308323][T32673] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8111'. [ 873.327745][T32673] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 873.407157][T32681] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8114'. [ 873.419962][T32681] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8114'. [ 873.461297][T32681] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8114'. [ 873.470611][T32681] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8114'. [ 873.495895][T32687] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8119'. [ 873.518039][T32687] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8119'. [ 873.603361][T32692] netlink: 'syz.4.8120': attribute type 21 has an invalid length. [ 873.643431][T32690] syzkaller0: entered promiscuous mode [ 873.666043][T32690] syzkaller0: entered allmulticast mode [ 873.753007][T32699] tipc: Enabled bearer , priority 0 [ 874.170591][T32717] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 874.296953][T32705] bond0: (slave rose0): Error: Device can not be enslaved while up [ 874.682904][T32698] tipc: Disabling bearer [ 875.236392][ T5839] Bluetooth: hci4: link tx timeout [ 875.243113][ T5839] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 875.360438][ T304] 8021q: adding VLAN 0 to HW filter on device bond2 [ 875.701642][ T331] macsec1: entered allmulticast mode [ 875.708065][ T331] hsr0: entered allmulticast mode [ 875.713701][ T331] veth1_to_batadv: entered allmulticast mode [ 875.719957][ T331] batadv_slave_0: entered allmulticast mode [ 875.757299][ T5839] Bluetooth: hci4: link tx timeout [ 875.762651][ T5839] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 876.719356][ T403] netlink: 'syz.1.8192': attribute type 4 has an invalid length. [ 877.286452][ T5839] Bluetooth: hci4: command 0x0406 tx timeout [ 878.352188][ T467] netlink: 'syz.0.8221': attribute type 2 has an invalid length. [ 878.772305][ T484] lo speed is unknown, defaulting to 1000 [ 878.954193][ T498] syz_tun: entered allmulticast mode [ 878.969190][ T497] syz_tun: left allmulticast mode [ 879.832882][ T484] wg2 speed is unknown, defaulting to 1000 [ 880.500195][ T577] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 880.563606][ T577] __nla_validate_parse: 19 callbacks suppressed [ 880.563626][ T577] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8266'. [ 880.622404][ T577] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 880.717359][ T584] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8269'. [ 881.262459][ T603] lo: entered allmulticast mode [ 881.278636][ T598] lo: left allmulticast mode [ 882.008205][ T656] netlink: 'syz.4.8299': attribute type 13 has an invalid length. [ 882.096990][ T660] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8300'. [ 882.276681][ T9854] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 882.278780][ T658] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 882.291424][ T9854] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 882.304572][ T9854] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 882.313566][ T9854] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 882.322711][ T9854] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 882.354391][ T9854] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 882.372675][ T9854] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 882.382395][ T9854] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 882.399180][ T665] IPv6: NLM_F_CREATE should be specified when creating new route [ 882.399952][ T663] ip6erspan0: entered promiscuous mode [ 882.407860][ T665] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 882.407876][ T665] IPv6: NLM_F_CREATE should be set when creating new route [ 882.600110][ T676] syzkaller0: entered promiscuous mode [ 882.606434][ T676] syzkaller0: entered allmulticast mode [ 882.734859][ T683] netlink: 60 bytes leftover after parsing attributes in process `syz.4.8308'. [ 883.884401][ T751] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8336'. [ 883.887704][ T744] lo speed is unknown, defaulting to 1000 [ 883.896226][ T751] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8336'. [ 884.607304][ T794] netlink: 'syz.1.8354': attribute type 1 has an invalid length. [ 884.615482][ T794] nbd: error processing sock list [ 885.187641][ T787] vlan0: left allmulticast mode [ 885.192629][ T787] veth0_vlan: left allmulticast mode [ 885.198503][ T787] vlan0: left promiscuous mode [ 885.241685][ T787] hsr0: left allmulticast mode [ 885.247813][ T787] veth1_to_batadv: left allmulticast mode [ 885.253576][ T787] batadv_slave_0: left allmulticast mode [ 885.333904][ T792] syzkaller0: entered promiscuous mode [ 885.339710][ T792] syzkaller0: entered allmulticast mode [ 885.360653][ T12] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 885.402921][ T12] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 885.430483][ T12] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 20001 - 0 [ 885.473434][ T12] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 885.500673][ T12] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 885.510570][ T12] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 20001 - 0 [ 885.553430][ T804] svc: failed to register nfsdv3 RPC service (errno 111). [ 885.568030][ T804] svc: failed to register nfsaclv3 RPC service (errno 111). [ 885.678014][ T801] [ 885.680385][ T801] ====================================================== [ 885.687404][ T801] WARNING: possible circular locking dependency detected [ 885.694453][ T801] syzkaller #0 Not tainted [ 885.698863][ T801] ------------------------------------------------------ [ 885.705872][ T801] syz.4.8356/801 is trying to acquire lock: [ 885.711740][ T801] ffffffff8e025208 (pcpu_alloc_mutex){+.+.}-{4:4}, at: pcpu_alloc_noprof+0x286/0x1720 [ 885.721284][ T801] [ 885.721284][ T801] but task is already holding lock: [ 885.728634][ T801] ffff8881437780a8 (&q->q_usage_counter(io)#55){++++}-{0:0}, at: nbd_start_device+0x17f/0xb10 [ 885.738900][ T801] [ 885.738900][ T801] which lock already depends on the new lock. [ 885.738900][ T801] [ 885.749289][ T801] [ 885.749289][ T801] the existing dependency chain (in reverse order) is: [ 885.758300][ T801] [ 885.758300][ T801] -> #2 (&q->q_usage_counter(io)#55){++++}-{0:0}: [ 885.766882][ T801] lock_acquire+0x120/0x360 [ 885.771892][ T801] blk_alloc_queue+0x538/0x620 [ 885.777166][ T801] __blk_mq_alloc_disk+0x15c/0x340 [ 885.782790][ T801] nbd_dev_add+0x46c/0xae0 [ 885.787711][ T801] nbd_init+0x1c6/0x240 [ 885.792372][ T801] do_one_initcall+0x236/0x820 [ 885.797643][ T801] do_initcall_level+0x104/0x190 [ 885.803078][ T801] do_initcalls+0x59/0xa0 [ 885.807908][ T801] kernel_init_freeable+0x334/0x4b0 [ 885.813606][ T801] kernel_init+0x1d/0x1d0 [ 885.818439][ T801] ret_from_fork+0x4bc/0x870 [ 885.823529][ T801] ret_from_fork_asm+0x1a/0x30 [ 885.828804][ T801] [ 885.828804][ T801] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 885.836004][ T801] lock_acquire+0x120/0x360 [ 885.841010][ T801] fs_reclaim_acquire+0x72/0x100 [ 885.846459][ T801] prepare_alloc_pages+0x153/0x610 [ 885.852072][ T801] __alloc_frozen_pages_noprof+0x123/0x370 [ 885.858377][ T801] __alloc_pages_noprof+0xa/0x30 [ 885.863814][ T801] pcpu_populate_chunk+0x182/0xb30 [ 885.869434][ T801] pcpu_alloc_noprof+0xcbf/0x1720 [ 885.874964][ T801] xt_percpu_counter_alloc+0x161/0x220 [ 885.880932][ T801] translate_table+0x1323/0x2040 [ 885.886380][ T801] ip6t_register_table+0x106/0x7d0 [ 885.892000][ T801] ip6table_mangle_table_init+0x41/0x70 [ 885.898047][ T801] xt_find_table_lock+0x30c/0x3e0 [ 885.903586][ T801] xt_request_find_table_lock+0x26/0x100 [ 885.909741][ T801] do_ip6t_get_ctl+0x730/0x1180 [ 885.915108][ T801] nf_getsockopt+0x26e/0x290 [ 885.920213][ T801] ipv6_getsockopt+0x1ed/0x290 [ 885.925486][ T801] do_sock_getsockopt+0x372/0x450 [ 885.931106][ T801] __x64_sys_getsockopt+0x1a5/0x250 [ 885.936811][ T801] do_syscall_64+0xfa/0xfa0 [ 885.941824][ T801] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 885.948224][ T801] [ 885.948224][ T801] -> #0 (pcpu_alloc_mutex){+.+.}-{4:4}: [ 885.955945][ T801] validate_chain+0xb9b/0x2140 [ 885.961214][ T801] __lock_acquire+0xab9/0xd20 [ 885.966421][ T801] lock_acquire+0x120/0x360 [ 885.971428][ T801] __mutex_lock+0x187/0x1350 [ 885.976526][ T801] pcpu_alloc_noprof+0x286/0x1720 [ 885.982064][ T801] sbitmap_init_node+0x1e1/0x640 [ 885.987507][ T801] sbitmap_queue_init_node+0x3e/0x4d0 [ 885.993472][ T801] blk_mq_init_tags+0x15c/0x2d0 [ 885.998829][ T801] blk_mq_alloc_map_and_rqs+0xbb/0x9c0 [ 886.004794][ T801] blk_mq_update_nr_hw_queues+0xa26/0x1ab0 [ 886.011104][ T801] nbd_start_device+0x17f/0xb10 [ 886.016456][ T801] nbd_genl_connect+0x135b/0x18f0 [ 886.021984][ T801] genl_family_rcv_msg_doit+0x215/0x300 [ 886.028038][ T801] genl_rcv_msg+0x60e/0x790 [ 886.033046][ T801] netlink_rcv_skb+0x208/0x470 [ 886.038316][ T801] genl_rcv+0x28/0x40 [ 886.042807][ T801] netlink_unicast+0x82f/0x9e0 [ 886.048078][ T801] netlink_sendmsg+0x805/0xb30 [ 886.053344][ T801] __sock_sendmsg+0x21c/0x270 [ 886.058529][ T801] ____sys_sendmsg+0x505/0x830 [ 886.063797][ T801] ___sys_sendmsg+0x21f/0x2a0 [ 886.068977][ T801] __x64_sys_sendmsg+0x19b/0x260 [ 886.074418][ T801] do_syscall_64+0xfa/0xfa0 [ 886.079428][ T801] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 886.085826][ T801] [ 886.085826][ T801] other info that might help us debug this: [ 886.085826][ T801] [ 886.096033][ T801] Chain exists of: [ 886.096033][ T801] pcpu_alloc_mutex --> fs_reclaim --> &q->q_usage_counter(io)#55 [ 886.096033][ T801] [ 886.109667][ T801] Possible unsafe locking scenario: [ 886.109667][ T801] [ 886.117095][ T801] CPU0 CPU1 [ 886.122440][ T801] ---- ---- [ 886.127785][ T801] lock(&q->q_usage_counter(io)#55); [ 886.133150][ T801] lock(fs_reclaim); [ 886.139637][ T801] lock(&q->q_usage_counter(io)#55); [ 886.147517][ T801] lock(pcpu_alloc_mutex); [ 886.152007][ T801] [ 886.152007][ T801] *** DEADLOCK *** [ 886.152007][ T801] [ 886.160130][ T801] 6 locks held by syz.4.8356/801: [ 886.165131][ T801] #0: ffffffff8f331050 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 886.173306][ T801] #1: ffffffff8f330e68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 886.182255][ T801] #2: ffff8880250cb9c8 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0xa7/0x1ab0 [ 886.193641][ T801] #3: ffff8880250cb8d8 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0xba/0x1ab0 [ 886.204589][ T801] #4: ffff8881437780a8 (&q->q_usage_counter(io)#55){++++}-{0:0}, at: nbd_start_device+0x17f/0xb10 [ 886.215292][ T801] #5: ffff8881437780e0 (&q->q_usage_counter(queue)#39){+.+.}-{0:0}, at: nbd_start_device+0x17f/0xb10 [ 886.226267][ T801] [ 886.226267][ T801] stack backtrace: [ 886.232145][ T801] CPU: 0 UID: 0 PID: 801 Comm: syz.4.8356 Not tainted syzkaller #0 PREEMPT(full) [ 886.232163][ T801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 886.232174][ T801] Call Trace: [ 886.232184][ T801] [ 886.232192][ T801] dump_stack_lvl+0x189/0x250 [ 886.232216][ T801] ? __pfx_dump_stack_lvl+0x10/0x10 [ 886.232235][ T801] ? __pfx__printk+0x10/0x10 [ 886.232251][ T801] ? print_lock_name+0xde/0x100 [ 886.232265][ T801] print_circular_bug+0x2ee/0x310 [ 886.232284][ T801] check_noncircular+0x134/0x160 [ 886.232304][ T801] validate_chain+0xb9b/0x2140 [ 886.232328][ T801] __lock_acquire+0xab9/0xd20 [ 886.232345][ T801] ? pcpu_alloc_noprof+0x286/0x1720 [ 886.232365][ T801] lock_acquire+0x120/0x360 [ 886.232378][ T801] ? pcpu_alloc_noprof+0x286/0x1720 [ 886.232403][ T801] __mutex_lock+0x187/0x1350 [ 886.232428][ T801] ? pcpu_alloc_noprof+0x286/0x1720 [ 886.232450][ T801] ? kasan_save_track+0x4f/0x80 [ 886.232469][ T801] ? kasan_save_track+0x3e/0x80 [ 886.232487][ T801] ? __kasan_kmalloc+0x93/0xb0 [ 886.232507][ T801] ? blk_mq_init_tags+0x83/0x2d0 [ 886.232524][ T801] ? blk_mq_alloc_map_and_rqs+0xbb/0x9c0 [ 886.232544][ T801] ? blk_mq_update_nr_hw_queues+0xa26/0x1ab0 [ 886.232558][ T801] ? pcpu_alloc_noprof+0x286/0x1720 [ 886.232578][ T801] ? nbd_genl_connect+0x135b/0x18f0 [ 886.232592][ T801] ? genl_family_rcv_msg_doit+0x215/0x300 [ 886.232610][ T801] ? genl_rcv_msg+0x60e/0x790 [ 886.232627][ T801] ? __pfx___mutex_lock+0x10/0x10 [ 886.232646][ T801] ? ____sys_sendmsg+0x505/0x830 [ 886.232661][ T801] ? do_syscall_64+0xfa/0xfa0 [ 886.232679][ T801] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 886.232700][ T801] pcpu_alloc_noprof+0x286/0x1720 [ 886.232726][ T801] sbitmap_init_node+0x1e1/0x640 [ 886.232746][ T801] sbitmap_queue_init_node+0x3e/0x4d0 [ 886.232763][ T801] blk_mq_init_tags+0x15c/0x2d0 [ 886.232782][ T801] blk_mq_alloc_map_and_rqs+0xbb/0x9c0 [ 886.232804][ T801] ? blk_mq_update_nr_hw_queues+0x928/0x1ab0 [ 886.232819][ T801] ? kfree+0x19a/0x6d0 [ 886.232836][ T801] ? blk_mq_update_nr_hw_queues+0x8d0/0x1ab0 [ 886.232852][ T801] blk_mq_update_nr_hw_queues+0xa26/0x1ab0 [ 886.232873][ T801] ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10 [ 886.232895][ T801] ? sysfs_add_file_mode_ns+0x259/0x300 [ 886.232914][ T801] nbd_start_device+0x17f/0xb10 [ 886.232931][ T801] ? device_create_file+0xf4/0x1c0 [ 886.232948][ T801] nbd_genl_connect+0x135b/0x18f0 [ 886.232965][ T801] ? __pfx_nbd_genl_connect+0x10/0x10 [ 886.232981][ T801] ? rcu_is_watching+0x15/0xb0 [ 886.232999][ T801] ? __nla_parse+0x40/0x60 [ 886.233014][ T801] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 886.233035][ T801] genl_family_rcv_msg_doit+0x215/0x300 [ 886.233056][ T801] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 886.233078][ T801] ? stack_trace_save+0x9c/0xe0 [ 886.233098][ T801] genl_rcv_msg+0x60e/0x790 [ 886.233117][ T801] ? __pfx_genl_rcv_msg+0x10/0x10 [ 886.233133][ T801] ? __pfx_nbd_genl_connect+0x10/0x10 [ 886.233151][ T801] netlink_rcv_skb+0x208/0x470 [ 886.233173][ T801] ? __lock_acquire+0xab9/0xd20 [ 886.233186][ T801] ? __pfx_genl_rcv_msg+0x10/0x10 [ 886.233203][ T801] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 886.233230][ T801] ? down_read+0x1ad/0x2e0 [ 886.233243][ T801] genl_rcv+0x28/0x40 [ 886.233258][ T801] netlink_unicast+0x82f/0x9e0 [ 886.233280][ T801] ? __pfx_netlink_unicast+0x10/0x10 [ 886.233300][ T801] ? netlink_sendmsg+0x642/0xb30 [ 886.233312][ T801] ? skb_put+0x11b/0x210 [ 886.233326][ T801] netlink_sendmsg+0x805/0xb30 [ 886.233343][ T801] ? __pfx_netlink_sendmsg+0x10/0x10 [ 886.233357][ T801] ? aa_sock_msg_perm+0xf1/0x1d0 [ 886.233377][ T801] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 886.233391][ T801] ? __pfx_netlink_sendmsg+0x10/0x10 [ 886.233405][ T801] __sock_sendmsg+0x21c/0x270 [ 886.233428][ T801] ____sys_sendmsg+0x505/0x830 [ 886.233445][ T801] ? __pfx_____sys_sendmsg+0x10/0x10 [ 886.233463][ T801] ? import_iovec+0x74/0xa0 [ 886.233482][ T801] ___sys_sendmsg+0x21f/0x2a0 [ 886.233498][ T801] ? __pfx____sys_sendmsg+0x10/0x10 [ 886.233524][ T801] ? __fget_files+0x2a/0x420 [ 886.233537][ T801] ? __fget_files+0x3a0/0x420 [ 886.233554][ T801] __x64_sys_sendmsg+0x19b/0x260 [ 886.233569][ T801] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 886.233590][ T801] ? do_syscall_64+0xbe/0xfa0 [ 886.233609][ T801] do_syscall_64+0xfa/0xfa0 [ 886.233628][ T801] ? lockdep_hardirqs_on+0x9c/0x150 [ 886.233646][ T801] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 886.233660][ T801] ? clear_bhb_loop+0x60/0xb0 [ 886.233676][ T801] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 886.233690][ T801] RIP: 0033:0x7f5d81d8efc9 [ 886.233704][ T801] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 886.233718][ T801] RSP: 002b:00007f5d82c28038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 886.233734][ T801] RAX: ffffffffffffffda RBX: 00007f5d81fe5fa0 RCX: 00007f5d81d8efc9 [ 886.233746][ T801] RDX: 0000000020000000 RSI: 0000200000001ac0 RDI: 0000000000000004 [ 886.233756][ T801] RBP: 00007f5d81e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 886.233765][ T801] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 886.233774][ T801] R13: 00007f5d81fe6038 R14: 00007f5d81fe5fa0 R15: 00007ffed3119898 [ 886.233791][ T801] [ 886.769500][ T5827] block nbd6: Receive control failed (result -32) [ 886.775546][ T5839] block nbd6: Receive control failed (result -32) [ 886.776170][ T5827] block nbd6: Receive control failed (result -32) [ 886.776252][ T5827] block nbd6: Receive control failed (result -32) [ 886.805331][ T801] nbd6: detected capacity change from 0 to 127 [ 888.169787][ T9854] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 888.178982][ T9854] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 888.188084][ T9854] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 20001 - 0 [ 888.197147][ T9854] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 888.206992][ T9854] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 888.216631][ T9854] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 20001 - 0 [ 888.232113][ T744] wg2 speed is unknown, defaulting to 1000