last executing test programs: 4.098998085s ago: executing program 0 (id=966): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x400000) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x80}, 0x80) sendmsg$inet(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000340)="af9b0f062fdae4b0738f93ea66", 0xd}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 3.175660945s ago: executing program 0 (id=985): socket$packet(0x11, 0x2, 0x300) openat$tun(0xffffffffffffff9c, 0x0, 0x109500, 0x0) syz_emit_ethernet(0x46, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000340)={@link_local={0x1, 0x80, 0xc2, 0x3}, @dev, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x8, 0x11, 0x0, @private2, @mcast2, {[], {0x0, 0x4e22, 0x8}}}}}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="000086dd00011100"], 0xfdef) 2.726595018s ago: executing program 2 (id=992): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x4, @multicast}, 0x10) 2.351783818s ago: executing program 0 (id=998): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x31}}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000280)=@gcm_256={{0x303}, "1afc7c14d332bcc6", "a9ba0c85d68723369f51322151d9f41aaa2832bb07cc1e49ad714beac6f1ade8", "49960d8f", "bff2a81527ae4190"}, 0x38) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) syz_init_net_socket$netrom(0x6, 0x5, 0x0) sendfile(r0, r3, 0x0, 0x20000000002) 2.164924126s ago: executing program 1 (id=1003): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=@newtaction={0x6c, 0x30, 0xb, 0x5, 0x0, {}, [{0x58, 0x1, [@m_ct={0x54, 0x1, 0x0, 0x0, {{0x7}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0x0, 0x0, 0x0, 0x8}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @private=0xa010102}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8890}, 0x40) 2.009251873s ago: executing program 1 (id=1004): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010024010000340200000200000008000100", @ANYRES32=r1], 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000001680)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x1, 0x3, 0x3, 0x40, @a={0x80, 0x4, 0x0, 0x0, {0x2, 0x37, "f2740284ab57a27c9dac3ffb076fb14f7277cef407b3ea58d0214450551752222bcd7c28b1a5fe5d3f1553f51be6832d9d9299857c6c09", 0xf, 0xa}}}, 0x43) read$nci(r0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) 1.784047362s ago: executing program 2 (id=1007): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8001c00180081064e81f782db44b9b545c7910006007c09e8fe55a10a0017", 0x1f}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f7d28344b904020000", 0x2}], 0x1}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x33fe0) 1.592097198s ago: executing program 2 (id=1011): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x10000, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20}, {0x8, 0x10, 0x100000002, 0x0, 0xfff, 0xffffffffffffb473, 0xffffffffffffffff}, {0x1000000000, 0x2000000000000000, 0x2, 0xffffffffffffffff}, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xb8}}, 0x4004) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000840)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}}}, 0xb8}}, 0x2c000010) 1.485627878s ago: executing program 2 (id=1012): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000001c0)={'ipvlan1\x00', 0x400}) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r2, {0xa}, {0x0, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4040091}, 0x10) 1.304916828s ago: executing program 4 (id=1015): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e6400"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x884) 1.220359093s ago: executing program 0 (id=1016): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/4096, 0x1000}], 0x1) syz_emit_ethernet(0xfab, &(0x7f0000003200)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xf9d, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e22, 0x4e20, 0xf89, 0x0, @opaque="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"}}}}}, 0x0) 1.105058906s ago: executing program 2 (id=1018): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x2}) r1 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)={@void, @void, @eth={@empty, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @val={@val, {0x8100, 0x0, 0x0, 0x20}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x6, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x17c1, 0x10, 0x0, @gue={{0x2, 0x1, 0x3, 0x4, 0x100}}}}}}}}, 0x3a) 975.172067ms ago: executing program 1 (id=1019): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x10000}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0xb, 0x9}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_route={{0xa}, {0x14, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0xf9}, @TCA_ROUTE4_FROM={0x8, 0x3, 0xf7}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 853.897066ms ago: executing program 3 (id=1020): r0 = socket$inet6(0xa, 0x80002, 0x88) sendmmsg$inet6(r0, &(0x7f0000000a00)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=[@pktinfo={{0x20, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}}}}], 0x20}}], 0x1, 0x84) 842.591032ms ago: executing program 4 (id=1021): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000009c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000000)={0x2c, r1, 0x403, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_DEST={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40001}, 0x4000080) 759.352167ms ago: executing program 1 (id=1022): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f00000001c0)={0x84, @multicast2, 0x4e23, 0x3, 'lblcr\x00', 0x19, 0x10000004, 0x8}, 0x2c) r1 = socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @loopback, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@private=0xa010100, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev, 0xfffffeec}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 706.788748ms ago: executing program 4 (id=1023): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e1e, 0x951, @local, 0x80000000}, 0x1c, 0x0, 0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="2800000000000000290000000500000000020201"], 0x28}, 0x0) 706.625812ms ago: executing program 2 (id=1024): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x2000877d, &(0x7f0000000180)={0x2, 0x4e23, @empty}, 0x10) sendmmsg$inet(r0, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000001c0)="8c4ff1d3596df811ce138c648e99fa6b63052dc2177fab83328c3b7780b3fc6cf07744ecb9751913c9e9868d39b447af48f2b7a2f5317900880e544cdf0e0013c64d58728f129789dfa325fdf4beb534748942a979fd662dc5e4fa5549315c3e3c81aeca8128eceb64d45d199bb027399d99fb2a5ab3bdb9caa48803eb91", 0x7e}], 0x1}}], 0x1, 0x4000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0xff28) sendto$inet(r0, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000000100)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f0000000780)=""/4108, 0x437aba2}], 0x1, 0x0, 0xfffffdee, 0x407006}, 0x104) 646.573476ms ago: executing program 3 (id=1025): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x7}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000000) 633.933619ms ago: executing program 1 (id=1026): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}, 0x1, 0x0, 0x0, 0x40}, 0x24000840) 510.939868ms ago: executing program 4 (id=1027): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0xfffffffc, @loopback}, 0x1c) listen(r0, 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x0, 0x0}, 0x10) 510.85983ms ago: executing program 3 (id=1028): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1) sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x14, r2, 0x1, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20011}, 0x8040) 510.764669ms ago: executing program 1 (id=1029): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x2000877d, &(0x7f0000000180)={0x2, 0x4e23, @empty}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='bic', 0x3) sendmmsg$inet(r0, 0x0, 0x0, 0x4000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) sendto$inet(r0, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000000100)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f0000000780)=""/4108, 0x437aba2}], 0x1, 0x0, 0xfffffdee, 0x407006}, 0x104) 444.537631ms ago: executing program 3 (id=1030): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)={0x14, r1, 0x1, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20004010}, 0x8000000) 351.542188ms ago: executing program 3 (id=1031): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000000206010700000000000000000000000014000300686173683a69702c706f72742c6970000900020073797a31000000000500010007000000050005000a0000000500040001"], 0x4c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 221.758398ms ago: executing program 3 (id=1032): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @empty}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x1b32, 0x4) sendto$inet(r0, &(0x7f0000000140)='v', 0x1, 0x20000880, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001700)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x40012102, 0x0) 209.918414ms ago: executing program 4 (id=1033): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000015000300686173683a69702c706f72742c6e657400"], 0x5c}}, 0x20084884) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x300, 0x0, 0x10040003}, 0x0) 156.854542ms ago: executing program 0 (id=1034): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000060000000800000008"], 0x48) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x2, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000180)="0500000000000000d53c30d133c9", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 93.638852ms ago: executing program 4 (id=1035): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0xfffffffc, @loopback}, 0x1c) listen(r0, 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x8, 0x8f, 0x8}]}, 0x10) 0s ago: executing program 0 (id=1036): unshare(0x24020400) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000400000009"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xd, 0x6, 0x4, 0x9, 0x0, r0, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r1}, &(0x7f0000000840), &(0x7f0000000340)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r1, &(0x7f0000000400)}, 0x20) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.76' (ED25519) to the list of known hosts. [ 79.196434][ T5811] cgroup: Unknown subsys name 'net' [ 79.351804][ T5811] cgroup: Unknown subsys name 'cpuset' [ 79.362455][ T5811] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 80.992799][ T5811] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 83.139779][ T5834] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 83.147995][ T5834] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 83.156298][ T5834] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 83.164806][ T5834] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 83.172688][ T5834] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 83.180521][ T5834] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 83.183940][ T5838] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 83.188817][ T5834] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 83.202771][ T5834] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 83.203687][ T5838] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 83.210436][ T5834] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 83.218184][ T5838] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 83.229634][ T5834] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 83.239663][ T5834] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 83.249426][ T5842] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 83.249971][ T5834] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 83.264905][ T5842] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 83.266002][ T5834] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 83.282291][ T5834] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 83.290322][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 83.298231][ T5834] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 83.306932][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 83.314410][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 83.330918][ T5842] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 83.338285][ T5842] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 84.013041][ T5825] chnl_net:caif_netlink_parms(): no params data found [ 84.066860][ T5823] chnl_net:caif_netlink_parms(): no params data found [ 84.083698][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 84.108162][ T5826] chnl_net:caif_netlink_parms(): no params data found [ 84.239397][ T5824] chnl_net:caif_netlink_parms(): no params data found [ 84.344386][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.351727][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.359517][ T5825] bridge_slave_0: entered allmulticast mode [ 84.366766][ T5825] bridge_slave_0: entered promiscuous mode [ 84.422640][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.430138][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.437385][ T5825] bridge_slave_1: entered allmulticast mode [ 84.444956][ T5825] bridge_slave_1: entered promiscuous mode [ 84.483275][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.491519][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.499197][ T5836] bridge_slave_0: entered allmulticast mode [ 84.506304][ T5836] bridge_slave_0: entered promiscuous mode [ 84.515094][ T5823] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.523531][ T5823] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.532052][ T5823] bridge_slave_0: entered allmulticast mode [ 84.540856][ T5823] bridge_slave_0: entered promiscuous mode [ 84.563814][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.571165][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.578713][ T5826] bridge_slave_0: entered allmulticast mode [ 84.587019][ T5826] bridge_slave_0: entered promiscuous mode [ 84.595602][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.602862][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.610058][ T5836] bridge_slave_1: entered allmulticast mode [ 84.617169][ T5836] bridge_slave_1: entered promiscuous mode [ 84.633488][ T5823] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.641182][ T5823] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.648604][ T5823] bridge_slave_1: entered allmulticast mode [ 84.656609][ T5823] bridge_slave_1: entered promiscuous mode [ 84.689875][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.701181][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.708987][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.716140][ T5826] bridge_slave_1: entered allmulticast mode [ 84.723697][ T5826] bridge_slave_1: entered promiscuous mode [ 84.773738][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.796905][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.817671][ T5824] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.824903][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.832329][ T5824] bridge_slave_0: entered allmulticast mode [ 84.839593][ T5824] bridge_slave_0: entered promiscuous mode [ 84.862414][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.874554][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.886274][ T5823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.898836][ T5823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.908597][ T5824] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.916154][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.923558][ T5824] bridge_slave_1: entered allmulticast mode [ 84.930858][ T5824] bridge_slave_1: entered promiscuous mode [ 84.963804][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.025637][ T5825] team0: Port device team_slave_0 added [ 85.055138][ T5823] team0: Port device team_slave_0 added [ 85.064828][ T5824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.075990][ T5825] team0: Port device team_slave_1 added [ 85.093966][ T5836] team0: Port device team_slave_0 added [ 85.102638][ T5823] team0: Port device team_slave_1 added [ 85.110396][ T5824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.132283][ T5826] team0: Port device team_slave_0 added [ 85.140229][ T5836] team0: Port device team_slave_1 added [ 85.176737][ T5826] team0: Port device team_slave_1 added [ 85.214189][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.221592][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.248160][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.282051][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.289722][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.316151][ T5823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.330098][ T5824] team0: Port device team_slave_0 added [ 85.336466][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.343636][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.370103][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.378415][ T5842] Bluetooth: hci3: command tx timeout [ 85.381042][ T5833] Bluetooth: hci0: command tx timeout [ 85.386343][ T5842] Bluetooth: hci1: command tx timeout [ 85.397657][ T5839] Bluetooth: hci4: command tx timeout [ 85.397795][ T5827] Bluetooth: hci2: command tx timeout [ 85.426386][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.433577][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.460845][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.472646][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.480091][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.506322][ T5823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.519763][ T5824] team0: Port device team_slave_1 added [ 85.550503][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.557950][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.584214][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.596611][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.604833][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.631645][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.675836][ T5823] hsr_slave_0: entered promiscuous mode [ 85.683083][ T5823] hsr_slave_1: entered promiscuous mode [ 85.701008][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.708659][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.735237][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.781500][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.788799][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.815602][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.829070][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.836055][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.863387][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.881743][ T5825] hsr_slave_0: entered promiscuous mode [ 85.888462][ T5825] hsr_slave_1: entered promiscuous mode [ 85.894592][ T5825] debugfs: 'hsr0' already exists in 'hsr' [ 85.900706][ T5825] Cannot create hsr debugfs directory [ 86.023462][ T5836] hsr_slave_0: entered promiscuous mode [ 86.030339][ T5836] hsr_slave_1: entered promiscuous mode [ 86.036493][ T5836] debugfs: 'hsr0' already exists in 'hsr' [ 86.042439][ T5836] Cannot create hsr debugfs directory [ 86.077325][ T5826] hsr_slave_0: entered promiscuous mode [ 86.083925][ T5826] hsr_slave_1: entered promiscuous mode [ 86.090544][ T5826] debugfs: 'hsr0' already exists in 'hsr' [ 86.096297][ T5826] Cannot create hsr debugfs directory [ 86.148882][ T5824] hsr_slave_0: entered promiscuous mode [ 86.155654][ T5824] hsr_slave_1: entered promiscuous mode [ 86.162176][ T5824] debugfs: 'hsr0' already exists in 'hsr' [ 86.168016][ T5824] Cannot create hsr debugfs directory [ 86.699583][ T5825] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 86.732564][ T5825] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 86.743602][ T5825] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 86.762188][ T5825] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 86.810977][ T5823] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 86.823409][ T5823] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 86.834015][ T5823] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 86.845304][ T5823] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 86.959337][ T5824] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 86.992505][ T5824] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 87.041283][ T5824] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 87.073079][ T5824] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 87.150970][ T5836] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 87.214443][ T5836] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 87.227124][ T5836] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 87.263711][ T5836] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 87.347090][ T5823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.361769][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.392943][ T5826] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 87.404378][ T5826] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 87.416507][ T5826] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 87.427711][ T5826] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 87.458008][ T5827] Bluetooth: hci2: command tx timeout [ 87.458607][ T5833] Bluetooth: hci3: command tx timeout [ 87.463488][ T5827] Bluetooth: hci0: command tx timeout [ 87.470707][ T5842] Bluetooth: hci1: command tx timeout [ 87.475965][ T5827] Bluetooth: hci4: command tx timeout [ 87.520018][ T5823] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.530548][ T5825] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.590200][ T107] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.597403][ T107] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.610369][ T107] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.617571][ T107] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.626242][ T107] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.633409][ T107] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.664023][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.671436][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.859749][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.916941][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.942956][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.957090][ T5824] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.005491][ T1167] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.012728][ T1167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.024726][ T1167] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.032068][ T1167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.093336][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.133806][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.154857][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.162169][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.200784][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.208046][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.216732][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.223919][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.232995][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.240609][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.315957][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.348560][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.581755][ T5823] veth0_vlan: entered promiscuous mode [ 88.619170][ T5825] veth0_vlan: entered promiscuous mode [ 88.651087][ T5823] veth1_vlan: entered promiscuous mode [ 88.684408][ T5825] veth1_vlan: entered promiscuous mode [ 88.795260][ T5823] veth0_macvtap: entered promiscuous mode [ 88.836355][ T5823] veth1_macvtap: entered promiscuous mode [ 88.846979][ T5825] veth0_macvtap: entered promiscuous mode [ 88.863884][ T5825] veth1_macvtap: entered promiscuous mode [ 88.890768][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.922023][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.939882][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.966769][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.996823][ T107] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.006735][ T107] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.050684][ T107] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.064675][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.092309][ T107] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.114770][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.133170][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.185155][ T999] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.200128][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.226362][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.238417][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.319865][ T5824] veth0_vlan: entered promiscuous mode [ 89.404484][ T5826] veth0_vlan: entered promiscuous mode [ 89.425147][ T5824] veth1_vlan: entered promiscuous mode [ 89.431465][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.443986][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.522384][ T5826] veth1_vlan: entered promiscuous mode [ 89.537698][ T5827] Bluetooth: hci4: command tx timeout [ 89.542164][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.543591][ T51] Bluetooth: hci1: command tx timeout [ 89.551172][ T5842] Bluetooth: hci3: command tx timeout [ 89.551209][ T5842] Bluetooth: hci0: command tx timeout [ 89.556688][ T51] Bluetooth: hci2: command tx timeout [ 89.568591][ T5836] veth0_vlan: entered promiscuous mode [ 89.581838][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.636235][ T999] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.647376][ T999] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.663389][ T5824] veth0_macvtap: entered promiscuous mode [ 89.715993][ T5824] veth1_macvtap: entered promiscuous mode [ 89.725593][ T5836] veth1_vlan: entered promiscuous mode [ 89.729569][ T5823] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 89.743819][ T999] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.764321][ T999] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.771277][ T5826] veth0_macvtap: entered promiscuous mode [ 89.786816][ T5826] veth1_macvtap: entered promiscuous mode [ 89.863873][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.924905][ T5949] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'. [ 89.934698][ T5949] netlink: 'syz.1.2': attribute type 31 has an invalid length. [ 89.940227][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.952262][ T5949] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'. [ 89.962205][ T5949] netlink: 'syz.1.2': attribute type 31 has an invalid length. [ 89.972620][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.973213][ T5949] Zero length message leads to an empty skb [ 90.001933][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.013161][ T5951] sch_tbf: burst 1447 is lower than device macvtap0 mtu (1514) ! [ 90.045491][ T5836] veth0_macvtap: entered promiscuous mode [ 90.057334][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.085890][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.113879][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.143463][ T5836] veth1_macvtap: entered promiscuous mode [ 90.182567][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.199554][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.237783][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.249632][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.285207][ T5955] netem: incorrect gi model size [ 90.296413][ T5955] netem: change failed [ 90.313180][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.321665][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.348436][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.417050][ T129] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.433496][ T129] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.465971][ T129] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.489333][ T129] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.537783][ T5962] netlink: 'syz.1.8': attribute type 1 has an invalid length. [ 90.560873][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.568780][ T129] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.577097][ T129] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.581724][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.686799][ T129] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.708029][ T129] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.740237][ T5964] IPv6: addrconf: prefix option has invalid lifetime [ 90.760514][ T129] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.787820][ T129] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.797310][ T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.806885][ T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.963691][ T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.005986][ T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.078459][ T5968] netlink: 48 bytes leftover after parsing attributes in process `syz.1.10'. [ 91.259980][ T5974] syz.2.3 uses obsolete (PF_INET,SOCK_PACKET) [ 91.618822][ T5827] Bluetooth: hci0: command tx timeout [ 91.619513][ T51] Bluetooth: hci1: command tx timeout [ 91.624424][ T5839] Bluetooth: hci4: command tx timeout [ 91.630470][ T51] Bluetooth: hci2: command tx timeout [ 91.635444][ T5842] Bluetooth: hci3: command tx timeout [ 91.684909][ T5994] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13'. [ 92.114066][ T931] cfg80211: failed to load regulatory.db [ 92.303845][ T6008] netlink: 36 bytes leftover after parsing attributes in process `syz.1.18'. [ 92.318248][ T6009] gretap1: entered promiscuous mode [ 93.028056][ T6034] netlink: 'syz.1.22': attribute type 1 has an invalid length. [ 93.416031][ T6042] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 93.565323][ T6042] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 93.658437][ T6047] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 32, id = 0 [ 94.196228][ T6057] netlink: 'syz.0.29': attribute type 1 has an invalid length. [ 94.207557][ T6057] netlink: 240 bytes leftover after parsing attributes in process `syz.0.29'. [ 94.501312][ T6064] FAULT_INJECTION: forcing a failure. [ 94.501312][ T6064] name failslab, interval 1, probability 0, space 0, times 1 [ 94.558335][ T6064] CPU: 0 UID: 0 PID: 6064 Comm: syz.2.31 Not tainted syzkaller #0 PREEMPT(full) [ 94.558365][ T6064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 94.558377][ T6064] Call Trace: [ 94.558386][ T6064] [ 94.558395][ T6064] dump_stack_lvl+0xe8/0x150 [ 94.558429][ T6064] should_fail_ex+0x412/0x560 [ 94.558461][ T6064] should_failslab+0xa8/0x100 [ 94.558490][ T6064] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 94.558515][ T6064] ? __alloc_skb+0x1d0/0x7d0 [ 94.558541][ T6064] ? __local_bh_enable_ip+0xd0/0x130 [ 94.558572][ T6064] __alloc_skb+0x1d0/0x7d0 [ 94.558607][ T6064] netlink_dump+0x1ef/0xe80 [ 94.558649][ T6064] ? __pfx_netlink_dump+0x10/0x10 [ 94.558694][ T6064] ? genl_start+0x499/0x6c0 [ 94.558722][ T6064] __netlink_dump_start+0x5cb/0x7e0 [ 94.558758][ T6064] genl_family_rcv_msg_dumpit+0x213/0x310 [ 94.558782][ T6064] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 94.558811][ T6064] ? __pfx_genl_start+0x10/0x10 [ 94.558829][ T6064] ? __pfx_genl_dumpit+0x10/0x10 [ 94.558848][ T6064] ? __pfx_genl_done+0x10/0x10 [ 94.558873][ T6064] ? bpf_lsm_capable+0x9/0x20 [ 94.558897][ T6064] ? security_capable+0x7e/0x2c0 [ 94.558928][ T6064] genl_rcv_msg+0x5e8/0x7a0 [ 94.558956][ T6064] ? __pfx_genl_rcv_msg+0x10/0x10 [ 94.558976][ T6064] ? __pfx_batadv_dat_cache_dump+0x10/0x10 [ 94.559003][ T6064] ? __lock_acquire+0x6b5/0x2cf0 [ 94.559042][ T6064] netlink_rcv_skb+0x232/0x4b0 [ 94.559071][ T6064] ? __pfx_genl_rcv_msg+0x10/0x10 [ 94.559094][ T6064] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 94.559150][ T6064] ? down_read+0x272/0x2e0 [ 94.559168][ T6064] ? genl_rcv+0xd/0x40 [ 94.559190][ T6064] genl_rcv+0x28/0x40 [ 94.559208][ T6064] netlink_unicast+0x80f/0x9b0 [ 94.559244][ T6064] ? __pfx_netlink_unicast+0x10/0x10 [ 94.559271][ T6064] ? netlink_sendmsg+0x650/0xb40 [ 94.559296][ T6064] ? skb_put+0x11b/0x210 [ 94.559328][ T6064] netlink_sendmsg+0x813/0xb40 [ 94.559367][ T6064] ? __pfx_netlink_sendmsg+0x10/0x10 [ 94.559397][ T6064] ? aa_sock_msg_perm+0xf1/0x1b0 [ 94.559424][ T6064] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 94.559451][ T6064] ____sys_sendmsg+0x972/0x9f0 [ 94.559482][ T6064] ? __pfx_____sys_sendmsg+0x10/0x10 [ 94.559514][ T6064] ? import_iovec+0x73/0xa0 [ 94.559549][ T6064] ___sys_sendmsg+0x2a5/0x360 [ 94.559577][ T6064] ? __pfx____sys_sendmsg+0x10/0x10 [ 94.559639][ T6064] ? __fget_files+0x2a/0x420 [ 94.559667][ T6064] ? __fget_files+0x3a0/0x420 [ 94.559706][ T6064] __x64_sys_sendmsg+0x1bd/0x2a0 [ 94.559729][ T6064] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 94.559761][ T6064] ? __pfx_ksys_write+0x10/0x10 [ 94.559816][ T6064] do_syscall_64+0x14d/0xf80 [ 94.559844][ T6064] ? trace_irq_disable+0x3b/0x150 [ 94.559870][ T6064] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.559890][ T6064] ? clear_bhb_loop+0x40/0x90 [ 94.559915][ T6064] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.559935][ T6064] RIP: 0033:0x7f54b8b9c799 [ 94.559955][ T6064] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 94.559971][ T6064] RSP: 002b:00007f54b99d8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 94.559992][ T6064] RAX: ffffffffffffffda RBX: 00007f54b8e15fa0 RCX: 00007f54b8b9c799 [ 94.560006][ T6064] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 94.560018][ T6064] RBP: 00007f54b99d8090 R08: 0000000000000000 R09: 0000000000000000 [ 94.560031][ T6064] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 94.560042][ T6064] R13: 00007f54b8e16038 R14: 00007f54b8e15fa0 R15: 00007ffcfecba868 [ 94.560077][ T6064] [ 95.155759][ T6070] netlink: 68 bytes leftover after parsing attributes in process `syz.4.33'. [ 95.565030][ T6084] netlink: 148 bytes leftover after parsing attributes in process `syz.3.36'. [ 95.713962][ T6082] netlink: 8 bytes leftover after parsing attributes in process `syz.4.35'. [ 96.192804][ T6099] netlink: 24 bytes leftover after parsing attributes in process `syz.0.40'. [ 96.621119][ T6118] tipc: Started in network mode [ 96.644007][ T6118] tipc: Node identity ac14142f, cluster identity 4711 [ 96.668699][ T6118] tipc: New replicast peer: 0.0.0.0 [ 96.698566][ T6118] tipc: Enabled bearer , priority 10 [ 96.727203][ T6123] tipc: New replicast peer: 172.30.1.5 [ 96.758114][ T6118] netlink: 'syz.4.47': attribute type 1 has an invalid length. [ 96.781411][ T6118] team0: entered promiscuous mode [ 96.795292][ T6118] team_slave_0: entered promiscuous mode [ 96.813367][ T6118] team_slave_1: entered promiscuous mode [ 96.899313][ T6130] bond1: peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms [ 97.131599][ T6136] netlink: 7064 bytes leftover after parsing attributes in process `syz.0.54'. [ 97.142324][ T6136] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 97.416824][ T6147] syz.0.57 uses old SIOCAX25GETINFO [ 97.465129][ T6149] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 97.490051][ T6149] netlink: 276 bytes leftover after parsing attributes in process `syz.4.56'. [ 97.567573][ T6150] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check. [ 97.819787][ T24] tipc: Node number set to 2886997039 [ 97.981577][ T6165] netlink: 24 bytes leftover after parsing attributes in process `syz.0.61'. [ 98.163267][ T6170] bond1: option lacp_rate: invalid value (128) [ 98.193586][ T6170] bond1 (unregistering): Released all slaves [ 98.455668][ T5950] IPVS: starting estimator thread 0... [ 98.557842][ T6186] IPVS: using max 27 ests per chain, 64800 per kthread [ 98.631990][ T6188] pimreg: tun_chr_ioctl cmd 1076910121 [ 98.642421][ T6188] pimreg: tun_chr_ioctl cmd 2147767520 [ 98.860098][ T6202] netlink: 'syz.2.70': attribute type 4 has an invalid length. [ 99.867331][ T6232] netlink: 32 bytes leftover after parsing attributes in process `syz.0.76'. [ 100.122020][ T6242] delete_channel: no stack [ 100.196918][ T6202] lec:lec_atm_close: lec0: Shut down! [ 100.415859][ T6249] netlink: 'syz.0.78': attribute type 3 has an invalid length. [ 100.450150][ T6256] netlink: 8 bytes leftover after parsing attributes in process `syz.1.79'. [ 100.851777][ T6276] Cannot find set identified by id 0 to match [ 100.922197][ T6280] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.930539][ T6280] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.953266][ T6281] netlink: 28 bytes leftover after parsing attributes in process `syz.0.84'. [ 100.996538][ T6279] x_tables: duplicate underflow at hook 3 [ 101.012109][ T6280] bridge0: entered allmulticast mode [ 101.124975][ T6276] netlink: 8 bytes leftover after parsing attributes in process `syz.0.84'. [ 102.553222][ T6341] netlink: 8 bytes leftover after parsing attributes in process `syz.3.95'. [ 103.309292][ T6369] xt_ipcomp: unknown flags 1D [ 103.403710][ T6372] netlink: 'syz.3.100': attribute type 62 has an invalid length. [ 103.435938][ T6374] syzkaller0: entered promiscuous mode [ 103.445058][ T6374] syzkaller0: entered allmulticast mode [ 103.454288][ T6373] netlink: 6032 bytes leftover after parsing attributes in process `syz.1.102'. [ 103.509859][ T6369] netlink: 8 bytes leftover after parsing attributes in process `syz.0.101'. [ 103.775278][ T6380] netlink: 8 bytes leftover after parsing attributes in process `syz.1.103'. [ 104.328726][ T6399] netlink: 28 bytes leftover after parsing attributes in process `syz.1.109'. [ 104.353216][ T6402] FAULT_INJECTION: forcing a failure. [ 104.353216][ T6402] name failslab, interval 1, probability 0, space 0, times 0 [ 104.366313][ T6402] CPU: 1 UID: 0 PID: 6402 Comm: syz.2.111 Not tainted syzkaller #0 PREEMPT(full) [ 104.366339][ T6402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 104.366350][ T6402] Call Trace: [ 104.366359][ T6402] [ 104.366367][ T6402] dump_stack_lvl+0xe8/0x150 [ 104.366401][ T6402] should_fail_ex+0x412/0x560 [ 104.366431][ T6402] should_failslab+0xa8/0x100 [ 104.366456][ T6402] ? skb_clone+0x212/0x3a0 [ 104.366477][ T6402] kmem_cache_alloc_noprof+0x87/0x650 [ 104.366497][ T6402] ? lock_acquire+0xf0/0x2e0 [ 104.366530][ T6402] skb_clone+0x212/0x3a0 [ 104.366549][ T6402] ? dev_queue_xmit_nit+0x268/0xad0 [ 104.366582][ T6402] dev_queue_xmit_nit+0x29a/0xad0 [ 104.366611][ T6402] ? dev_queue_xmit_nit+0x2d/0xad0 [ 104.366651][ T6402] dev_hard_start_xmit+0x1cf/0x870 [ 104.366692][ T6402] sch_direct_xmit+0x251/0x4c0 [ 104.366724][ T6402] ? __pfx_sch_direct_xmit+0x10/0x10 [ 104.366754][ T6402] __dev_queue_xmit+0x1b20/0x3870 [ 104.366771][ T6402] ? bpf_test_run+0x354/0x830 [ 104.366804][ T6402] ? __dev_queue_xmit+0x28b/0x3870 [ 104.366839][ T6402] ? __pfx___dev_queue_xmit+0x10/0x10 [ 104.366881][ T6402] ? rcu_is_watching+0x15/0xb0 [ 104.366913][ T6402] ? skb_release_data+0x2bb/0x940 [ 104.366949][ T6402] __bpf_redirect+0xca6/0x12a0 [ 104.366998][ T6402] bpf_clone_redirect+0x313/0x4b0 [ 104.367036][ T6402] ? bpf_test_run+0x1d1/0x830 [ 104.367061][ T6402] bpf_prog_8dc8bbec83c669e7+0x22/0x2a [ 104.367083][ T6402] bpf_test_run+0x354/0x830 [ 104.367137][ T6402] ? __pfx_bpf_test_run+0x10/0x10 [ 104.367175][ T6402] ? trace_kmem_cache_alloc+0x29/0xf0 [ 104.367192][ T6402] ? slab_build_skb+0x52/0x410 [ 104.367217][ T6402] ? csum_partial+0x239/0x2c0 [ 104.367254][ T6402] ? convert___skb_to_skb+0x3d/0x5b0 [ 104.367283][ T6402] bpf_prog_test_run_skb+0xd22/0x1c90 [ 104.367326][ T6402] ? __fget_files+0x2a/0x420 [ 104.367354][ T6402] ? __fget_files+0x3a0/0x420 [ 104.367381][ T6402] ? __fget_files+0x2a/0x420 [ 104.367415][ T6402] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 104.367447][ T6402] bpf_prog_test_run+0x2c7/0x340 [ 104.367472][ T6402] __sys_bpf+0x643/0x950 [ 104.367503][ T6402] ? __pfx___sys_bpf+0x10/0x10 [ 104.367547][ T6402] ? ksys_write+0x242/0x270 [ 104.367572][ T6402] ? __pfx_ksys_write+0x10/0x10 [ 104.367603][ T6402] __x64_sys_bpf+0x7c/0x90 [ 104.367622][ T6399] netlink: 7 bytes leftover after parsing attributes in process `syz.1.109'. [ 104.367633][ T6402] do_syscall_64+0x14d/0xf80 [ 104.367662][ T6402] ? trace_irq_disable+0x3b/0x150 [ 104.367686][ T6402] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.367704][ T6402] ? clear_bhb_loop+0x40/0x90 [ 104.367728][ T6402] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.367745][ T6402] RIP: 0033:0x7f54b8b9c799 [ 104.367763][ T6402] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.367778][ T6402] RSP: 002b:00007f54b99d8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 104.367799][ T6402] RAX: ffffffffffffffda RBX: 00007f54b8e15fa0 RCX: 00007f54b8b9c799 [ 104.367812][ T6402] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 104.367823][ T6402] RBP: 00007f54b99d8090 R08: 0000000000000000 R09: 0000000000000000 [ 104.367834][ T6402] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 104.367845][ T6402] R13: 00007f54b8e16038 R14: 00007f54b8e15fa0 R15: 00007ffcfecba868 [ 104.367876][ T6402] [ 105.075635][ T6429] netlink: 276 bytes leftover after parsing attributes in process `syz.2.118'. [ 105.173479][ T5489] lec:lec_start_xmit: lec0:No lecd attached [ 105.625520][ T6454] __nla_validate_parse: 1 callbacks suppressed [ 105.625542][ T6454] netlink: 32 bytes leftover after parsing attributes in process `syz.1.126'. [ 106.012179][ T6473] netlink: 28 bytes leftover after parsing attributes in process `syz.4.132'. [ 106.037554][ T6473] netlink: 28 bytes leftover after parsing attributes in process `syz.4.132'. [ 106.047917][ T6473] netlink: 52 bytes leftover after parsing attributes in process `syz.4.132'. [ 106.412303][ T29] audit: type=1800 audit(1773708368.484:2): pid=6486 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.137" name="blkio.bfq.time_recursive" dev="tmpfs" ino=125 res=0 errno=0 [ 106.414279][ T6486] netlink: 'syz.1.137': attribute type 1 has an invalid length. [ 106.881775][ T6505] Driver unsupported XDP return value 0 on prog (id 36) dev N/A, expect packet loss! [ 107.105995][ T6511] netlink: 'syz.2.145': attribute type 2 has an invalid length. [ 107.133591][ T6511] netlink: 'syz.2.145': attribute type 2 has an invalid length. [ 107.229089][ T6515] Bluetooth: MGMT ver 1.23 [ 107.455153][ T6523] netlink: 8 bytes leftover after parsing attributes in process `syz.1.147'. [ 108.106620][ T6558] bridge1: entered promiscuous mode [ 108.123841][ T6558] bridge1: entered allmulticast mode [ 108.130047][ T6561] netlink: 'syz.4.159': attribute type 2 has an invalid length. [ 108.149073][ T6558] team0: Port device bridge1 added [ 108.191239][ T6563] bridge0: port 3(team0) entered blocking state [ 108.212437][ T6563] bridge0: port 3(team0) entered disabled state [ 108.216763][ T6567] netlink: 28 bytes leftover after parsing attributes in process `syz.2.160'. [ 108.235149][ T6563] team0: entered allmulticast mode [ 108.251231][ T6563] team_slave_0: entered allmulticast mode [ 108.259615][ T6563] team_slave_1: entered allmulticast mode [ 108.272388][ T6563] team0: entered promiscuous mode [ 108.277789][ T6563] team_slave_0: entered promiscuous mode [ 108.283954][ T6563] team_slave_1: entered promiscuous mode [ 108.292648][ T6568] netlink: 20 bytes leftover after parsing attributes in process `syz.2.160'. [ 108.371743][ T6567] netlink: 28 bytes leftover after parsing attributes in process `syz.2.160'. [ 108.548622][ T6574] netlink: 8 bytes leftover after parsing attributes in process `syz.1.163'. [ 108.596065][ T6574] netlink: 8 bytes leftover after parsing attributes in process `syz.1.163'. [ 109.416833][ T6612] tipc: Started in network mode [ 109.429214][ T6612] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 109.458534][ T6612] tipc: Enabled bearer , priority 0 [ 110.187478][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 110.195844][ C1] lec:lec_tx_timeout: lec0 [ 110.200503][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 111.001201][ T6657] netlink: 'syz.1.183': attribute type 5 has an invalid length. [ 111.055296][ T42] tipc: Node number set to 10005162 [ 111.082055][ T6644] batadv_slave_0: entered promiscuous mode [ 111.148833][ T6636] batadv_slave_0: left promiscuous mode [ 111.392707][ T6668] __nla_validate_parse: 3 callbacks suppressed [ 111.392731][ T6668] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.186'. [ 111.526421][ T6671] warning: `syz.0.188' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 111.907379][ T6679] 8021q: VLANs not supported on vcan0 [ 111.916070][ T6700] netlink: 'syz.0.194': attribute type 1 has an invalid length. [ 111.936318][ T6700] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 112.138304][ T6691] syzkaller0: entered promiscuous mode [ 112.185952][ T6691] syzkaller0: entered allmulticast mode [ 112.465514][ T6721] netlink: 8 bytes leftover after parsing attributes in process `syz.2.199'. [ 112.507608][ T6721] netlink: 'syz.2.199': attribute type 30 has an invalid length. [ 112.575049][ T6721] netlink: 8 bytes leftover after parsing attributes in process `syz.2.199'. [ 112.579074][ T6729] netlink: 60 bytes leftover after parsing attributes in process `syz.0.202'. [ 112.585744][ T1167] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.595252][ T6727] netlink: 24 bytes leftover after parsing attributes in process `syz.4.200'. [ 112.619970][ T1151] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.620497][ T6721] netlink: 'syz.2.199': attribute type 30 has an invalid length. [ 112.643214][ T1151] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.791603][ T6736] netlink: 28 bytes leftover after parsing attributes in process `syz.4.200'. [ 112.863225][ T1151] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.926591][ T6727] netlink: 16 bytes leftover after parsing attributes in process `syz.4.200'. [ 113.258800][ T6753] xt_cgroup: path and classid specified [ 113.268337][ T6755] netlink: 576 bytes leftover after parsing attributes in process `syz.4.208'. [ 113.319461][ T6753] lo speed is unknown, defaulting to 1000 [ 113.386967][ T6753] lo speed is unknown, defaulting to 1000 [ 113.401661][ T6753] lo speed is unknown, defaulting to 1000 [ 113.414837][ T6753] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 113.434333][ T6753] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 113.475930][ T6753] lo speed is unknown, defaulting to 1000 [ 113.485950][ T6753] lo speed is unknown, defaulting to 1000 [ 113.494833][ T6753] lo speed is unknown, defaulting to 1000 [ 113.506800][ T6753] lo speed is unknown, defaulting to 1000 [ 113.515105][ T6753] lo speed is unknown, defaulting to 1000 [ 113.638835][ T6761] syzkaller0: entered promiscuous mode [ 113.655993][ T6761] syzkaller0: entered allmulticast mode [ 113.908890][ T6774] netlink: 'syz.2.213': attribute type 3 has an invalid length. [ 113.922030][ T6774] netlink: 20 bytes leftover after parsing attributes in process `syz.2.213'. [ 113.997574][ T29] audit: type=1800 audit(1773708376.054:3): pid=6755 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.208" name="memory.events" dev="tmpfs" ino=251 res=0 errno=0 [ 114.185732][ T6783] netlink: 'syz.2.217': attribute type 3 has an invalid length. [ 114.313585][ T6788] netlink: 4 bytes leftover after parsing attributes in process `syz.0.219'. [ 115.207469][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 115.215606][ C1] lec:lec_tx_timeout: lec0 [ 115.221620][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 115.664446][ T6847] Unsupported ieee802154 address type: 0 [ 116.294236][ T6874] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 116.326214][ T6874] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 116.575858][ T6884] __nla_validate_parse: 7 callbacks suppressed [ 116.575878][ T6884] netlink: 4 bytes leftover after parsing attributes in process `syz.0.246'. [ 117.570972][ T6919] syzkaller0: entered promiscuous mode [ 117.596918][ T6919] syzkaller0: entered allmulticast mode [ 120.237483][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 120.245541][ C1] lec:lec_tx_timeout: lec0 [ 120.250132][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 120.842635][ T6934] veth3: entered promiscuous mode [ 120.884510][ T6974] tipc: Enabled bearer , priority 0 [ 120.931641][ T6975] syzkaller0: entered promiscuous mode [ 120.947837][ T6975] syzkaller0: entered allmulticast mode [ 121.125526][ T6975] tipc: Resetting bearer [ 121.212735][ T6975] tipc: Disabling bearer [ 121.336645][ T7003] netlink: 8 bytes leftover after parsing attributes in process `syz.1.269'. [ 122.038171][ T7029] netlink: 4 bytes leftover after parsing attributes in process `syz.1.274'. [ 122.169343][ T7033] netlink: 4 bytes leftover after parsing attributes in process `syz.0.275'. [ 122.593826][ T7049] netlink: 8 bytes leftover after parsing attributes in process `syz.4.279'. [ 122.650252][ T7050] Bluetooth: MGMT ver 1.23 [ 122.708551][ T7058] trusted_key: syz.4.282 sent an empty control message without MSG_MORE. [ 122.712664][ T7050] netlink: 144 bytes leftover after parsing attributes in process `syz.3.280'. [ 122.737236][ T7057] lo speed is unknown, defaulting to 1000 [ 122.746194][ T7054] netlink: 8 bytes leftover after parsing attributes in process `syz.0.281'. [ 122.770198][ T7058] netlink: 'syz.4.282': attribute type 27 has an invalid length. [ 122.822449][ T7060] netlink: 16 bytes leftover after parsing attributes in process `syz.0.281'. [ 123.260016][ T7076] netlink: 12 bytes leftover after parsing attributes in process `syz.3.285'. [ 123.294987][ T7079] netlink: 8 bytes leftover after parsing attributes in process `syz.2.286'. [ 123.334733][ T7073] netlink: 'syz.3.285': attribute type 1 has an invalid length. [ 123.490388][ T7073] bond1: entered promiscuous mode [ 123.498823][ T7073] 8021q: adding VLAN 0 to HW filter on device bond1 [ 123.506716][ T7087] bridge_slave_1: left allmulticast mode [ 123.514512][ T7087] bridge_slave_1: left promiscuous mode [ 123.521943][ T7087] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.569996][ T7087] bridge_slave_0: left allmulticast mode [ 123.576495][ T7087] bridge_slave_0: left promiscuous mode [ 123.584375][ T7087] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.831030][ T7098] xt_recent: Unsupported userspace flags (000000b1) [ 124.102270][ T999] wlan1: Trigger new scan to find an IBSS to join [ 124.326692][ T7129] xt_CT: You must specify a L4 protocol and not use inversions on it [ 124.352138][ T7130] netlink: 12 bytes leftover after parsing attributes in process `syz.4.298'. [ 124.539858][ T7140] x_tables: duplicate underflow at hook 1 [ 124.839053][ T7156] netlink: 8 bytes leftover after parsing attributes in process `syz.2.305'. [ 125.144591][ T7171] netlink: 'syz.1.312': attribute type 1 has an invalid length. [ 125.255089][ T7171] bond1: entered promiscuous mode [ 125.267495][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 125.275596][ C1] lec:lec_tx_timeout: lec0 [ 125.281809][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 125.289394][ T7171] 8021q: adding VLAN 0 to HW filter on device bond1 [ 125.365960][ T7171] vlan2: entered allmulticast mode [ 125.371490][ T7171] bond1: entered allmulticast mode [ 125.402962][ T7183] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.581823][ T7190] netlink: 'syz.0.317': attribute type 1 has an invalid length. [ 126.369587][ T7227] workqueue: name exceeds WQ_NAME_LEN. Truncating to: π,xb)% ]3DL̥ [ 126.745676][ T7240] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 127.057911][ T1151] wlan1: Trigger new scan to find an IBSS to join [ 127.084691][ T7254] __nla_validate_parse: 42 callbacks suppressed [ 127.084712][ T7254] netlink: 56 bytes leftover after parsing attributes in process `syz.1.335'. [ 127.108248][ T7254] netlink: 8 bytes leftover after parsing attributes in process `syz.1.335'. [ 127.117712][ T7254] tipc: Started in network mode [ 127.122629][ T7254] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 127.150535][ T7254] tipc: Enabled bearer , priority 0 [ 127.222500][ T7263] netlink: 28 bytes leftover after parsing attributes in process `syz.4.338'. [ 127.407604][ T7271] FAULT_INJECTION: forcing a failure. [ 127.407604][ T7271] name failslab, interval 1, probability 0, space 0, times 0 [ 127.420381][ T7271] CPU: 0 UID: 0 PID: 7271 Comm: syz.1.341 Not tainted syzkaller #0 PREEMPT(full) [ 127.420407][ T7271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 127.420419][ T7271] Call Trace: [ 127.420427][ T7271] [ 127.420435][ T7271] dump_stack_lvl+0xe8/0x150 [ 127.420467][ T7271] should_fail_ex+0x412/0x560 [ 127.420495][ T7271] should_failslab+0xa8/0x100 [ 127.420530][ T7271] ? skb_clone+0x212/0x3a0 [ 127.420548][ T7271] kmem_cache_alloc_noprof+0x87/0x650 [ 127.420567][ T7271] ? lock_acquire+0xf0/0x2e0 [ 127.420599][ T7271] skb_clone+0x212/0x3a0 [ 127.420616][ T7271] ? dev_queue_xmit_nit+0x268/0xad0 [ 127.420649][ T7271] dev_queue_xmit_nit+0x29a/0xad0 [ 127.420678][ T7271] ? dev_queue_xmit_nit+0x2d/0xad0 [ 127.420717][ T7271] dev_hard_start_xmit+0x1cf/0x870 [ 127.420759][ T7271] sch_direct_xmit+0x251/0x4c0 [ 127.420790][ T7271] ? __pfx_sch_direct_xmit+0x10/0x10 [ 127.420825][ T7271] __dev_queue_xmit+0x1b20/0x3870 [ 127.420846][ T7271] ? bpf_test_run+0x354/0x830 [ 127.420884][ T7271] ? __dev_queue_xmit+0x28b/0x3870 [ 127.420918][ T7271] ? __pfx___dev_queue_xmit+0x10/0x10 [ 127.420985][ T7271] __bpf_redirect+0xca6/0x12a0 [ 127.421023][ T7271] bpf_clone_redirect+0x313/0x4b0 [ 127.421058][ T7271] ? bpf_test_run+0x1d1/0x830 [ 127.421085][ T7271] bpf_prog_8dc8bbec83c669e7+0x22/0x2a [ 127.421104][ T7271] bpf_test_run+0x354/0x830 [ 127.421156][ T7271] ? __pfx_bpf_test_run+0x10/0x10 [ 127.421194][ T7271] ? trace_kmem_cache_alloc+0x29/0xf0 [ 127.421213][ T7271] ? slab_build_skb+0x52/0x410 [ 127.421238][ T7271] ? csum_partial+0x239/0x2c0 [ 127.421273][ T7271] ? convert___skb_to_skb+0x3d/0x5b0 [ 127.421301][ T7271] bpf_prog_test_run_skb+0xd22/0x1c90 [ 127.421341][ T7271] ? __fget_files+0x2a/0x420 [ 127.421368][ T7271] ? __fget_files+0x3a0/0x420 [ 127.421394][ T7271] ? __fget_files+0x2a/0x420 [ 127.421427][ T7271] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 127.421455][ T7271] bpf_prog_test_run+0x2c7/0x340 [ 127.421480][ T7271] __sys_bpf+0x643/0x950 [ 127.421523][ T7271] ? __pfx___sys_bpf+0x10/0x10 [ 127.421572][ T7271] ? ksys_write+0x242/0x270 [ 127.421597][ T7271] ? __pfx_ksys_write+0x10/0x10 [ 127.421628][ T7271] __x64_sys_bpf+0x7c/0x90 [ 127.421655][ T7271] do_syscall_64+0x14d/0xf80 [ 127.421682][ T7271] ? trace_irq_disable+0x3b/0x150 [ 127.421709][ T7271] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.421729][ T7271] ? clear_bhb_loop+0x40/0x90 [ 127.421755][ T7271] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.421774][ T7271] RIP: 0033:0x7f06b679c799 [ 127.421795][ T7271] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 127.421812][ T7271] RSP: 002b:00007f06b760f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 127.421834][ T7271] RAX: ffffffffffffffda RBX: 00007f06b6a15fa0 RCX: 00007f06b679c799 [ 127.421848][ T7271] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 127.421860][ T7271] RBP: 00007f06b760f090 R08: 0000000000000000 R09: 0000000000000000 [ 127.421872][ T7271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 127.421883][ T7271] R13: 00007f06b6a16038 R14: 00007f06b6a15fa0 R15: 00007ffc3f08b9a8 [ 127.421917][ T7271] [ 127.937643][ T7284] tipc: Started in network mode [ 127.942588][ T7284] tipc: Node identity 86aa3971c0e5, cluster identity 4711 [ 127.950072][ T7284] tipc: Enabled bearer , priority 0 [ 127.957978][ T7284] syzkaller0: entered promiscuous mode [ 127.963486][ T7284] syzkaller0: entered allmulticast mode [ 127.974284][ T7284] tipc: Resetting bearer [ 128.092461][ T7293] xt_hashlimit: size too large, truncated to 1048576 [ 128.150989][ T7293] xt_hashlimit: max too large, truncated to 1048576 [ 128.157640][ T796] tipc: Node number set to 10005162 [ 128.326146][ T7283] tipc: Resetting bearer [ 128.353219][ T7283] tipc: Disabling bearer [ 128.447015][ T7309] RDS: rds_bind could not find a transport for ::ffff:10.1.1.4, load rds_tcp or rds_rdma? [ 128.564109][ T7309] syzkaller0: entered promiscuous mode [ 128.587031][ T7309] syzkaller0: entered allmulticast mode [ 128.598713][ T7311] veth1_to_bond: entered allmulticast mode [ 128.618348][ T7313] netlink: 'syz.2.350': attribute type 2 has an invalid length. [ 128.692412][ T7315] netlink: 56 bytes leftover after parsing attributes in process `syz.4.351'. [ 128.753245][ T7315] netlink: 8 bytes leftover after parsing attributes in process `syz.4.351'. [ 128.789636][ T7315] tipc: Enabled bearer , priority 0 [ 129.069154][ T7334] netlink: 88 bytes leftover after parsing attributes in process `syz.2.357'. [ 129.106861][ T7337] netlink: 12 bytes leftover after parsing attributes in process `syz.3.358'. [ 129.598833][ T7360] Bluetooth: MGMT ver 1.23 [ 129.823776][ T7330] xt_ecn: cannot match TCP bits for non-tcp packets [ 129.830381][ T7367] netlink: 56 bytes leftover after parsing attributes in process `syz.2.366'. [ 129.886987][ T7370] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.367'. [ 130.371518][ T7395] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 130.394276][ T7387] lo speed is unknown, defaulting to 1000 [ 130.806024][ T7412] netlink: 'syz.2.376': attribute type 2 has an invalid length. [ 130.955861][ T7412] : entered promiscuous mode [ 130.984593][ T7412] netlink: 16 bytes leftover after parsing attributes in process `syz.2.376'. [ 130.993765][ T7409] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 131.057486][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5770 ms [ 131.065586][ C1] lec:lec_tx_timeout: lec0 [ 131.070349][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 131.081366][ T999] wlan1: Trigger new scan to find an IBSS to join [ 131.123369][ T7412] lo speed is unknown, defaulting to 1000 [ 131.725976][ T7442] lo speed is unknown, defaulting to 1000 [ 132.054798][ T999] wlan1: Creating new IBSS network, BSSID 36:fb:26:95:c6:9d [ 132.179899][ T7461] __nla_validate_parse: 3 callbacks suppressed [ 132.179920][ T7461] netlink: 548 bytes leftover after parsing attributes in process `syz.4.387'. [ 132.294354][ T7467] netlink: 'syz.2.389': attribute type 61 has an invalid length. [ 132.324701][ T7468] nbd: must specify at least one socket [ 132.781825][ T7481] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 132.812101][ T7481] netlink: 8 bytes leftover after parsing attributes in process `syz.1.395'. [ 133.105222][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.114809][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.131263][ T796] IPVS: starting estimator thread 0... [ 133.231021][ T7482] IPVS: using max 29 ests per chain, 69600 per kthread [ 133.706286][ T7506] netlink: 20 bytes leftover after parsing attributes in process `syz.1.401'. [ 133.961488][ T7520] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.403'. [ 134.000947][ T7522] netlink: 8 bytes leftover after parsing attributes in process `syz.4.404'. [ 134.047235][ T7526] veth1_macvtap: left promiscuous mode [ 134.066646][ T7526] macsec0: entered promiscuous mode [ 134.160962][ T7528] veth1_macvtap: entered promiscuous mode [ 134.207581][ T7528] macsec0: left promiscuous mode [ 134.608259][ T7553] netlink: 8 bytes leftover after parsing attributes in process `syz.4.409'. [ 134.772729][ T7563] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 134.780533][ T7563] IPv6: NLM_F_CREATE should be set when creating new route [ 134.793150][ T7562] netlink: 24 bytes leftover after parsing attributes in process `syz.0.412'. [ 134.795425][ T7565] netlink: 32 bytes leftover after parsing attributes in process `syz.3.413'. [ 134.837951][ T7557] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 135.207772][ T7580] netlink: 16 bytes leftover after parsing attributes in process `syz.0.417'. [ 135.234125][ T7587] netlink: 20 bytes leftover after parsing attributes in process `syz.3.418'. [ 135.442692][ T7605] netlink: 'syz.1.419': attribute type 16 has an invalid length. [ 135.508792][ T7598] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.551715][ T7598] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.663930][ T7598] tipc: Resetting bearer [ 135.685280][ T7598] tipc: Resetting bearer [ 135.714436][ T999] tipc: Resetting bearer [ 135.918958][ T7614] lo speed is unknown, defaulting to 1000 [ 136.097484][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5030 ms [ 136.105586][ C1] lec:lec_tx_timeout: lec0 [ 136.110620][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 136.284684][ T7638] netlink: 'syz.4.428': attribute type 7 has an invalid length. [ 136.310803][ T7638] netlink: 'syz.4.428': attribute type 13 has an invalid length. [ 136.494433][ T7646] netlink: 'syz.3.430': attribute type 10 has an invalid length. [ 136.548232][ T7646] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.556054][ T7646] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.594743][ T7646] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.602058][ T7646] bridge0: port 2(bridge_slave_1) entered forwarding state [ 136.609716][ T7646] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.616911][ T7646] bridge0: port 1(bridge_slave_0) entered forwarding state [ 136.630132][ T7646] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 136.903211][ T7651] team0: Port device veth5 added [ 137.314654][ T7680] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 137.327563][ T7678] __nla_validate_parse: 12 callbacks suppressed [ 137.327582][ T7678] netlink: 12 bytes leftover after parsing attributes in process `syz.2.439'. [ 137.424438][ T7678] vlan2: entered allmulticast mode [ 137.438034][ T7678] bridge1: entered allmulticast mode [ 137.504679][ T7678] bridge1: port 1(erspan0) entered blocking state [ 137.540234][ T7678] bridge1: port 1(erspan0) entered disabled state [ 137.546923][ T7678] erspan0: entered allmulticast mode [ 137.565628][ T7678] erspan0: entered promiscuous mode [ 137.598911][ T7678] bridge1: port 1(erspan0) entered blocking state [ 137.605570][ T7678] bridge1: port 1(erspan0) entered forwarding state [ 137.732790][ T7695] bond0: (slave batadv_slave_0): Error: Device can not be enslaved while up [ 137.792914][ T7699] netlink: 'syz.0.447': attribute type 7 has an invalid length. [ 137.961429][ T7703] netlink: 'syz.0.449': attribute type 5 has an invalid length. [ 138.052399][ T7706] netlink: 36 bytes leftover after parsing attributes in process `syz.0.449'. [ 138.366695][ T7726] netlink: 8 bytes leftover after parsing attributes in process `syz.4.452'. [ 138.384286][ T7726] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.392873][ T7726] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.458227][ T7703] nbd0: detected capacity change from 0 to 63 [ 138.526076][ T5839] block nbd0: Receive control failed (result -32) [ 138.526212][ T5827] block nbd0: Receive control failed (result -104) [ 138.532853][ T5842] block nbd0: Receive control failed (result -32) [ 138.539430][ T51] block nbd0: Receive control failed (result -32) [ 138.545782][ T5833] block nbd0: Receive control failed (result -32) [ 138.599760][ T7733] netlink: 4 bytes leftover after parsing attributes in process `syz.1.455'. [ 138.676214][ T7733] xt_hashlimit: size too large, truncated to 1048576 [ 138.685397][ T7737] netlink: 28 bytes leftover after parsing attributes in process `syz.0.459'. [ 138.735425][ T7740] xt_cgroup: invalid path, errno=-2 [ 138.765692][ T7740] netlink: 'syz.4.458': attribute type 1 has an invalid length. [ 138.995604][ T7749] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.002894][ T7749] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.134492][ T7749] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 139.161008][ T7749] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 139.220074][ T7758] IPVS: set_ctl: invalid protocol: 47 10.1.1.1:20001 [ 139.225791][ T7749] tipc: Resetting bearer [ 139.228271][ T7758] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 139.397484][ T107] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.453052][ T107] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.495937][ T107] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.517086][ T107] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.602784][ T7770] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 139.631693][ T7775] netlink: 24 bytes leftover after parsing attributes in process `syz.3.469'. [ 139.647118][ T24] IPVS: starting estimator thread 0... [ 139.719642][ T7774] netlink: 'syz.2.467': attribute type 1 has an invalid length. [ 139.733340][ T7780] IPVS: set_ctl: invalid protocol: 8 224.0.0.1:20001 [ 139.748788][ T7776] IPVS: using max 25 ests per chain, 60000 per kthread [ 139.895896][ T7784] netlink: 8 bytes leftover after parsing attributes in process `syz.1.472'. [ 139.914284][ T7788] netlink: 28 bytes leftover after parsing attributes in process `syz.0.474'. [ 139.929517][ T7782] netlink: 20 bytes leftover after parsing attributes in process `syz.4.471'. [ 139.978769][ T7784] ip6tnl1: entered allmulticast mode [ 140.000662][ T7794] netlink: 28 bytes leftover after parsing attributes in process `syz.0.474'. [ 140.195827][ T7806] netlink: zone id is out of range [ 140.216069][ T7806] netlink: zone id is out of range [ 140.232146][ T7806] netlink: zone id is out of range [ 140.240354][ T7806] netlink: zone id is out of range [ 140.268044][ T7806] netlink: zone id is out of range [ 140.273222][ T7806] netlink: zone id is out of range [ 140.288681][ T7804] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 140.295841][ T7804] syzkaller1: linktype set to 823 [ 140.330120][ T7804] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 140.467822][ T7803] syzkaller0: entered promiscuous mode [ 141.127482][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 141.135630][ C1] lec:lec_tx_timeout: lec0 [ 141.140482][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 141.910681][ T7843] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 141.922432][ T7843] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 142.393945][ T7867] netlink: 'syz.4.493': attribute type 10 has an invalid length. [ 143.619318][ T7911] wg1 speed is unknown, defaulting to 1000 [ 143.633010][ T7911] wg1 speed is unknown, defaulting to 1000 [ 143.664815][ T7911] wg1 speed is unknown, defaulting to 1000 [ 143.685958][ T7917] __nla_validate_parse: 1 callbacks suppressed [ 143.685979][ T7917] netlink: 8 bytes leftover after parsing attributes in process `syz.3.506'. [ 143.702507][ T7917] netlink: 'syz.3.506': attribute type 30 has an invalid length. [ 143.755285][ T7919] bridge_slave_1: left allmulticast mode [ 143.761763][ T7919] bridge_slave_1: left promiscuous mode [ 143.768114][ T7917] netlink: 8 bytes leftover after parsing attributes in process `syz.3.506'. [ 143.780917][ T7919] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.789007][ T7917] netlink: 'syz.3.506': attribute type 30 has an invalid length. [ 143.814718][ T7919] bridge_slave_0: left allmulticast mode [ 143.822768][ T7919] bridge_slave_0: left promiscuous mode [ 143.831279][ T7919] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.888474][ T999] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 143.962077][ T999] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 143.963842][ T7925] netlink: 24 bytes leftover after parsing attributes in process `syz.0.508'. [ 143.972939][ T999] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 144.023896][ T999] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 144.098013][ T7929] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 144.134532][ T7911] infiniband syz0: set active [ 144.140677][ T5898] wg1 speed is unknown, defaulting to 1000 [ 144.159272][ T7911] infiniband syz0: added wg1 [ 144.236236][ T7929] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 144.237063][ T7911] RDS/IB: syz0: added [ 144.268757][ T7911] smc: adding ib device syz0 with port count 1 [ 144.276857][ T7911] smc: ib device syz0 port 1 has no pnetid [ 144.289292][ T24] wg1 speed is unknown, defaulting to 1000 [ 144.299829][ T7911] wg1 speed is unknown, defaulting to 1000 [ 144.370483][ T7929] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 144.535077][ T7929] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 144.545239][ T7949] netlink: 24 bytes leftover after parsing attributes in process `syz.0.513'. [ 144.584615][ T7949] ip6gre1: entered promiscuous mode [ 144.612310][ T7949] ip6gre1: entered allmulticast mode [ 144.630212][ T999] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 144.646364][ T999] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 144.655626][ T5950] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 144.783987][ T1167] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 144.802013][ T7955] netlink: 3 bytes leftover after parsing attributes in process `syz.0.514'. [ 144.829808][ T7955] 0X: renamed from caif0 [ 144.852543][ T7955] 0X: entered allmulticast mode [ 144.874574][ T7955] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 144.922600][ T7959] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.516'. [ 144.934359][ T1167] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 144.955916][ T7959] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.516'. [ 144.971377][ T7911] wg1 speed is unknown, defaulting to 1000 [ 144.982050][ T1167] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 144.992811][ T7959] netlink: 12 bytes leftover after parsing attributes in process `syz.4.516'. [ 145.024880][ T7959] bridge0: port 1(veth0_to_bond) entered blocking state [ 145.032445][ T7959] bridge0: port 1(veth0_to_bond) entered disabled state [ 145.041070][ T7959] veth0_to_bond: entered allmulticast mode [ 145.051599][ T7959] veth0_to_bond: entered promiscuous mode [ 145.085702][ T7959] bridge0: port 2(veth5) entered blocking state [ 145.092382][ T7959] bridge0: port 2(veth5) entered disabled state [ 145.097762][ T5950] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 145.099414][ T7959] veth5: entered allmulticast mode [ 145.118065][ T7959] veth5: entered promiscuous mode [ 145.135827][ T1167] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 145.158999][ T5950] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 145.545012][ T7911] wg1 speed is unknown, defaulting to 1000 [ 146.110892][ T7988] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 146.147852][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 146.155934][ C1] lec:lec_tx_timeout: lec0 [ 146.161120][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 146.346424][ T7911] wg1 speed is unknown, defaulting to 1000 [ 147.057626][ T8004] netlink: 56 bytes leftover after parsing attributes in process `syz.1.531'. [ 147.213205][ T7911] wg1 speed is unknown, defaulting to 1000 [ 147.660568][ T8034] netlink: 'syz.1.539': attribute type 1 has an invalid length. [ 147.752051][ T8034] 8021q: adding VLAN 0 to HW filter on device bond2 [ 147.948640][ T8038] bond2: entered allmulticast mode [ 147.978088][ T8035] netlink: 'syz.4.538': attribute type 4 has an invalid length. [ 148.027133][ T8044] bond2: (slave ip6gretap1): making interface the new active one [ 148.049269][ T8044] ip6gretap1: entered allmulticast mode [ 148.070948][ T8044] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 148.333283][ T8063] netlink: 56 bytes leftover after parsing attributes in process `syz.1.544'. [ 148.705934][ T8075] dvmrp1: entered allmulticast mode [ 148.726153][ T8075] dvmrp1: left allmulticast mode [ 148.827669][ T8075] x_tables: duplicate underflow at hook 2 [ 148.897740][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 148.965421][ T8090] netlink: 'syz.0.551': attribute type 1 has an invalid length. [ 149.074323][ T8098] __nla_validate_parse: 1 callbacks suppressed [ 149.074345][ T8098] netlink: 20 bytes leftover after parsing attributes in process `syz.0.551'. [ 149.148544][ T8098] bond4: (slave bridge2): making interface the new active one [ 149.160846][ T8098] bond4: (slave bridge2): Enslaving as an active interface with an up link [ 149.333478][ T8090] bond4: (slave bridge3): Enslaving as an active interface with a down link [ 149.415532][ T8113] macvlan9: entered promiscuous mode [ 149.451753][ T8113] macvlan9: entered allmulticast mode [ 149.460492][ T8113] bond4: entered promiscuous mode [ 149.490976][ T8113] bridge2: entered promiscuous mode [ 149.524689][ T8113] 8021q: adding VLAN 0 to HW filter on device macvlan9 [ 149.566592][ T8113] bond4: (slave macvlan9): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 149.604584][ T8113] bond4: left promiscuous mode [ 149.634376][ T8113] bridge2: left promiscuous mode [ 149.742318][ T29] audit: type=1800 audit(1773708411.824:4): pid=8111 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.554" name="memory.events" dev="tmpfs" ino=585 res=0 errno=0 [ 149.864699][ T8119] bond2: option packets_per_slave: invalid value (1869440365) [ 149.873077][ T8119] bond2: option packets_per_slave: allowed values 0 - 65535 [ 149.884709][ T8119] bond2 (unregistering): Released all slaves [ 149.928221][ T8130] netlink: 56 bytes leftover after parsing attributes in process `syz.0.559'. [ 150.160718][ T8138] netlink: 'syz.3.562': attribute type 11 has an invalid length. [ 150.174567][ T8138] netlink: 'syz.3.562': attribute type 11 has an invalid length. [ 150.202931][ T8138] netlink: 204 bytes leftover after parsing attributes in process `syz.3.562'. [ 150.569275][ T8163] netlink: 8 bytes leftover after parsing attributes in process `syz.0.568'. [ 150.603820][ T8163] netlink: 'syz.0.568': attribute type 4 has an invalid length. [ 151.146799][ T8175] syzkaller0: entered promiscuous mode [ 151.153321][ T8175] syzkaller0: entered allmulticast mode [ 151.167478][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 151.175628][ C1] lec:lec_tx_timeout: lec0 [ 151.180727][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 151.312231][ T8181] netlink: 'syz.4.572': attribute type 2 has an invalid length. [ 151.355054][ T8184] netlink: 56 bytes leftover after parsing attributes in process `syz.2.573'. [ 151.876818][ T8203] netlink: 8 bytes leftover after parsing attributes in process `syz.2.580'. [ 151.924439][ T8205] netlink: 64 bytes leftover after parsing attributes in process `syz.1.581'. [ 151.948070][ T8210] netlink: 'syz.4.582': attribute type 1 has an invalid length. [ 152.040093][ T8210] bond2: entered promiscuous mode [ 152.045720][ T8210] 8021q: adding VLAN 0 to HW filter on device bond2 [ 152.095766][ T8219] netlink: 308 bytes leftover after parsing attributes in process `syz.3.584'. [ 152.113828][ T8210] bond2: (slave bridge2): making interface the new active one [ 152.122050][ T8210] bridge2: entered promiscuous mode [ 152.130321][ T8210] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 152.150787][ T8219] netlink: 24 bytes leftover after parsing attributes in process `syz.3.584'. [ 152.379476][ T8229] netlink: 56 bytes leftover after parsing attributes in process `syz.4.588'. [ 152.478768][ T8227] syzkaller0: entered promiscuous mode [ 152.484479][ T8227] syzkaller0: entered allmulticast mode [ 154.077802][ T8260] openvswitch: netlink: Message has 5 unknown bytes. [ 154.407320][ T8274] openvswitch: netlink: Key 32 has unexpected len 4 expected 2 [ 154.483672][ T8274] __nla_validate_parse: 2 callbacks suppressed [ 154.483692][ T8274] netlink: 24 bytes leftover after parsing attributes in process `syz.3.600'. [ 154.535454][ T8279] netlink: 12 bytes leftover after parsing attributes in process `syz.1.603'. [ 154.577322][ T8279] vlan3: entered allmulticast mode [ 154.582671][ T8279] bond3: entered allmulticast mode [ 154.686099][ T8279] lo speed is unknown, defaulting to 1000 [ 154.693994][ T8279] wg1 speed is unknown, defaulting to 1000 [ 155.078649][ T8292] netlink: 8 bytes leftover after parsing attributes in process `syz.0.605'. [ 155.152071][ T8295] netlink: 216 bytes leftover after parsing attributes in process `syz.0.605'. [ 155.175810][ T8295] netlink: 24 bytes leftover after parsing attributes in process `syz.0.605'. [ 155.449013][ T8306] syzkaller0: entered promiscuous mode [ 155.454633][ T8306] syzkaller0: entered allmulticast mode [ 155.540569][ T5839] Bluetooth: hci4: link tx timeout [ 155.545914][ T5839] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 155.674866][ T8313] bridge0: entered allmulticast mode [ 155.682474][ T8313] netlink: 'syz.3.613': attribute type 1 has an invalid length. [ 155.690796][ T8313] netlink: 5370 bytes leftover after parsing attributes in process `syz.3.613'. [ 155.812976][ T8317] netlink: 24 bytes leftover after parsing attributes in process `syz.3.614'. [ 156.026764][ T8322] pim6reg: entered allmulticast mode [ 156.056654][ T8325] x_tables: duplicate underflow at hook 3 [ 156.073934][ T8322] pim6reg: left allmulticast mode [ 156.187468][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 156.195687][ C1] lec:lec_tx_timeout: lec0 [ 156.200599][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 156.467638][ T8345] netlink: 8 bytes leftover after parsing attributes in process `syz.1.622'. [ 156.627146][ T8350] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 156.917316][ T8364] netlink: 'syz.4.630': attribute type 5 has an invalid length. [ 156.978753][ T8357] Cannot find set identified by id 0 to match [ 157.275929][ T8368] syz.1.629 (8368) used greatest stack depth: 17696 bytes left [ 157.332754][ T8379] netlink: 16 bytes leftover after parsing attributes in process `syz.4.634'. [ 157.369197][ T8379] netlink: 40 bytes leftover after parsing attributes in process `syz.4.634'. [ 157.382888][ T8360] syz.1.629 (8360) used greatest stack depth: 16904 bytes left [ 157.391003][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 157.527266][ T8381] bond5: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 157.559720][ T8381] bond5 (unregistering): Released all slaves [ 157.631103][ T5839] Bluetooth: hci4: command 0x0405 tx timeout [ 157.634874][ T8384] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.684444][ T8390] tipc: Started in network mode [ 157.690704][ T8390] tipc: Node identity c62e808602ed, cluster identity 4711 [ 157.733393][ T8390] tipc: Enabled bearer , priority 14 [ 157.778363][ T8384] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.969338][ T8384] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.085850][ T8384] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.273058][ T107] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.307297][ T129] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.341585][ T129] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.365209][ T129] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.814384][ T8425] lo speed is unknown, defaulting to 1000 [ 158.832157][ T8436] netlink: 'syz.4.650': attribute type 10 has an invalid length. [ 158.862579][ T8436] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 158.876086][ T5925] tipc: Node number set to 3301146758 [ 158.889480][ T8425] wg1 speed is unknown, defaulting to 1000 [ 158.963358][ T8440] syzkaller0: entered promiscuous mode [ 158.969869][ T8440] syzkaller0: entered allmulticast mode [ 159.040580][ T8440] netlink: 'syz.3.651': attribute type 1 has an invalid length. [ 159.049100][ T8442] wg1: entered promiscuous mode [ 159.054006][ T8442] wg1: entered allmulticast mode [ 159.062773][ T8440] tipc: Enabled bearer , priority 0 [ 159.106147][ T8442] bond0: entered promiscuous mode [ 159.115947][ T8442] bond_slave_0: entered promiscuous mode [ 159.125682][ T8442] bond_slave_1: entered promiscuous mode [ 159.160869][ T8442] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 159.221103][ T8442] bond0: left promiscuous mode [ 159.226378][ T8442] bond_slave_0: left promiscuous mode [ 159.239102][ T8442] bond_slave_1: left promiscuous mode [ 159.252707][ T8442] mac80211_hwsim hwsim11 wlan1: left promiscuous mode [ 159.342583][ T8447] netlink: 'syz.0.654': attribute type 3 has an invalid length. [ 159.626152][ T8454] __nla_validate_parse: 4 callbacks suppressed [ 159.626173][ T8454] netlink: 20 bytes leftover after parsing attributes in process `syz.4.656'. [ 159.725882][ T8437] tipc: Resetting bearer [ 159.826102][ T8437] tipc: Disabling bearer [ 160.352128][ T8476] lo speed is unknown, defaulting to 1000 [ 160.380346][ T8483] netlink: 12 bytes leftover after parsing attributes in process `syz.3.664'. [ 160.409046][ T8485] wg1: entered promiscuous mode [ 160.413982][ T8485] wg1: entered allmulticast mode [ 160.466164][ T8476] wg1 speed is unknown, defaulting to 1000 [ 160.927334][ T8493] netlink: 'syz.0.666': attribute type 1 has an invalid length. [ 160.972242][ T8492] netlink: 'syz.3.667': attribute type 10 has an invalid length. [ 161.069711][ T8496] netlink: 'syz.3.667': attribute type 10 has an invalid length. [ 161.207452][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 161.215636][ C1] lec:lec_tx_timeout: lec0 [ 161.221103][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 161.260051][ T8494] bond5: (slave bridge4): making interface the new active one [ 161.288701][ T8494] bond5: (slave bridge4): Enslaving as an active interface with an up link [ 161.338954][ T8492] team0: Port device dummy0 added [ 161.398524][ T8496] team0: Port device dummy0 removed [ 161.426807][ T8496] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 161.868645][ T8526] syzkaller1: entered promiscuous mode [ 161.874191][ T8526] syzkaller1: entered allmulticast mode [ 161.937393][ T8526] af_packet: tpacket_rcv: packet too big, clamped from 64993 to 3944. macoff=96 [ 162.101261][ T129] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 162.226426][ T8538] openvswitch: netlink: Tunnel attr 10 has unexpected len 0 expected 2 [ 162.324754][ T8535] geneve2: entered promiscuous mode [ 162.339125][ T8535] geneve2: entered allmulticast mode [ 162.907989][ T8557] netlink: 'syz.0.679': attribute type 9 has an invalid length. [ 163.024954][ T8567] x_tables: duplicate underflow at hook 3 [ 163.080313][ T8570] netlink: 8 bytes leftover after parsing attributes in process `syz.0.681'. [ 163.089475][ T8570] netlink: 4 bytes leftover after parsing attributes in process `syz.0.681'. [ 163.101289][ T8570] netlink: 8 bytes leftover after parsing attributes in process `syz.0.681'. [ 163.111287][ T8570] netlink: 4 bytes leftover after parsing attributes in process `syz.0.681'. [ 163.190975][ T8575] netlink: 364 bytes leftover after parsing attributes in process `syz.0.681'. [ 163.243645][ T8570] bond6: Removing last ns target with arp_interval on [ 163.540724][ T8582] dummy0: mtu less than device minimum [ 163.800026][ T8587] netlink: 28 bytes leftover after parsing attributes in process `syz.2.685'. [ 164.064002][ T8589] bridge1: port 1(erspan0) entered disabled state [ 164.263037][ T8595] ieee802154 phy0 wpan0: encryption failed: -22 [ 164.426301][ T8589] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 164.458549][ T8589] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 164.768184][ T8589] vlan2: left allmulticast mode [ 164.773113][ T8589] bridge1: left allmulticast mode [ 164.799461][ T8601] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 164.816485][ T8589] geneve2: left promiscuous mode [ 164.833665][ T8589] geneve2: left allmulticast mode [ 164.851232][ T5925] wg1 speed is unknown, defaulting to 1000 [ 164.859205][ T5925] syz0: Port: 1 Link DOWN [ 164.887814][ T1151] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 164.911037][ T1151] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.927606][ T1151] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 164.940571][ T1151] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.990686][ T5925] wg1 speed is unknown, defaulting to 1000 [ 165.032797][ T1151] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 165.047340][ T1151] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.108249][ T1151] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 165.117290][ T1151] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.535914][ T8625] netlink: 96 bytes leftover after parsing attributes in process `syz.2.695'. [ 165.630819][ T8631] x_tables: duplicate entry at hook 3 [ 165.635228][ T8633] x_tables: duplicate underflow at hook 3 [ 165.639271][ T8630] x_tables: duplicate entry at hook 3 [ 166.064080][ T8659] netlink: 36 bytes leftover after parsing attributes in process `syz.1.705'. [ 166.227475][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 166.235658][ C1] lec:lec_tx_timeout: lec0 [ 166.240379][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 166.248381][ T8665] netlink: 'syz.4.707': attribute type 39 has an invalid length. [ 166.865953][ T8687] x_tables: duplicate underflow at hook 3 [ 166.994628][ T8691] syzkaller1: entered promiscuous mode [ 167.002354][ T8691] syzkaller1: entered allmulticast mode [ 167.341448][ T8702] netlink: 36 bytes leftover after parsing attributes in process `syz.1.718'. [ 167.600641][ T8713] xt_l2tp: invalid flags combination: 0 [ 167.754957][ T8717] x_tables: duplicate underflow at hook 3 [ 167.778866][ T8721] netlink: 20 bytes leftover after parsing attributes in process `syz.2.727'. [ 167.803105][ T29] audit: type=1800 audit(1773708429.884:5): pid=8721 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.727" name="memory.events" dev="tmpfs" ino=616 res=0 errno=0 [ 168.030753][ T8730] netlink: 'syz.1.730': attribute type 8 has an invalid length. [ 168.095440][ T8733] netlink: 36 bytes leftover after parsing attributes in process `syz.3.731'. [ 168.126445][ T8735] block nbd2: not configured, cannot reconfigure [ 168.495318][ T8763] syzkaller0: entered promiscuous mode [ 168.501491][ T8763] syzkaller0: entered allmulticast mode [ 168.559711][ T8769] x_tables: duplicate underflow at hook 3 [ 168.566679][ T8759] netlink: 12 bytes leftover after parsing attributes in process `syz.3.737'. [ 168.821544][ T8778] netlink: 36 bytes leftover after parsing attributes in process `syz.3.742'. [ 168.852195][ T8777] tipc: New replicast peer: 0.0.0.0 [ 168.869676][ T8782] IPVS: set_ctl: invalid protocol: 12706 0.0.0.0:0 [ 168.896801][ T24] IPVS: starting estimator thread 0... [ 168.905169][ T8777] tipc: Enabled bearer , priority 26 [ 168.912096][ T25] block nbd0: Connection timed out, retrying (0/5 alive) [ 168.926878][ T25] block nbd0: Connection timed out, retrying (0/5 alive) [ 168.934592][ T25] block nbd0: Connection timed out, retrying (0/5 alive) [ 168.941998][ T25] block nbd0: Connection timed out, retrying (0/5 alive) [ 168.949751][ T1916] block nbd0: Dead connection, failed to find a fallback [ 168.957375][ T1916] block nbd0: shutting down sockets [ 168.964558][ T1916] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 168.975644][ T1916] Buffer I/O error on dev nbd0, logical block 2, async page read [ 168.983922][ T1916] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 168.993917][ T1916] Buffer I/O error on dev nbd0, logical block 1, async page read [ 169.001877][ T8783] IPVS: using max 29 ests per chain, 69600 per kthread [ 169.009008][ T1916] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 169.018640][ T1916] Buffer I/O error on dev nbd0, logical block 0, async page read [ 169.026441][ T1916] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 169.036133][ T1916] Buffer I/O error on dev nbd0, logical block 3, async page read [ 169.045993][ T5882] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 169.055097][ T8788] netlink: 12 bytes leftover after parsing attributes in process `syz.3.746'. [ 169.063913][ T5882] Buffer I/O error on dev nbd0, logical block 0, async page read [ 169.073284][ T5882] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 169.083012][ T5882] Buffer I/O error on dev nbd0, logical block 1, async page read [ 169.096434][ T5882] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 169.106569][ T5882] Buffer I/O error on dev nbd0, logical block 2, async page read [ 169.115882][ T5882] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 169.125600][ T5882] Buffer I/O error on dev nbd0, logical block 3, async page read [ 169.133569][ T5882] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 169.143746][ T5882] Buffer I/O error on dev nbd0, logical block 0, async page read [ 169.151775][ T5882] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 169.161506][ T5882] Buffer I/O error on dev nbd0, logical block 1, async page read [ 169.171349][ T5882] ldm_validate_partition_table(): Disk read failed. [ 169.179044][ T5882] Dev nbd0: unable to read RDB block 0 [ 169.186285][ T5882] nbd0: unable to read partition table [ 169.199398][ T5882] ldm_validate_partition_table(): Disk read failed. [ 169.213161][ T5882] Dev nbd0: unable to read RDB block 0 [ 169.226319][ T5882] nbd0: unable to read partition table [ 169.255590][ T8788] 8021q: adding VLAN 0 to HW filter on device bond2 [ 169.404405][ T8806] netlink: 24 bytes leftover after parsing attributes in process `syz.3.750'. [ 169.517029][ T8815] x_tables: duplicate underflow at hook 3 [ 169.615245][ T8821] netlink: 36 bytes leftover after parsing attributes in process `syz.1.756'. [ 170.026844][ T8842] netlink: 'syz.1.762': attribute type 13 has an invalid length. [ 170.084752][ T8842] tipc: Resetting bearer [ 170.091188][ T8842] tipc: Resetting bearer [ 170.136309][ T8844] lo speed is unknown, defaulting to 1000 [ 170.153144][ T8844] wg1 speed is unknown, defaulting to 1000 [ 170.166602][ T8847] lo speed is unknown, defaulting to 1000 [ 170.613589][ T8847] wg1 speed is unknown, defaulting to 1000 [ 170.958756][ T8876] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 171.071998][ T8876] syzkaller0: entered promiscuous mode [ 171.096970][ T8876] syzkaller0: entered allmulticast mode [ 171.247478][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 171.255537][ C1] lec:lec_tx_timeout: lec0 [ 171.260437][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 172.605782][ T8890] __nla_validate_parse: 5 callbacks suppressed [ 172.605802][ T8890] netlink: 28 bytes leftover after parsing attributes in process `syz.3.776'. [ 172.638357][ T8890] netlink: 32 bytes leftover after parsing attributes in process `syz.3.776'. [ 172.649517][ T8890] netlink: 28 bytes leftover after parsing attributes in process `syz.3.776'. [ 172.660070][ T8890] netlink: 32 bytes leftover after parsing attributes in process `syz.3.776'. [ 173.311119][ T8918] netlink: 28 bytes leftover after parsing attributes in process `syz.1.781'. [ 173.680564][ T8931] lo speed is unknown, defaulting to 1000 [ 173.688380][ T8931] wg1 speed is unknown, defaulting to 1000 [ 173.869109][ T8935] syzkaller0: entered promiscuous mode [ 173.874944][ T8935] syzkaller0: entered allmulticast mode [ 174.667684][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 175.622816][ T5839] Bluetooth: hci4: command 0x0405 tx timeout [ 175.923332][ T8961] netlink: 28 bytes leftover after parsing attributes in process `syz.4.793'. [ 175.999127][ T8963] nbd: must specify a size in bytes for the device [ 176.122024][ T8972] netlink: 16 bytes leftover after parsing attributes in process `syz.3.797'. [ 176.143533][ T8974] netlink: 'syz.4.798': attribute type 10 has an invalid length. [ 176.215507][ T8978] netlink: 24 bytes leftover after parsing attributes in process `syz.3.799'. [ 176.230077][ T8978] netlink: 12 bytes leftover after parsing attributes in process `syz.3.799'. [ 176.267545][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 176.275663][ C1] lec:lec_tx_timeout: lec0 [ 176.282225][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 176.412151][ T8980] syzkaller0: entered promiscuous mode [ 176.417867][ T8980] syzkaller0: entered allmulticast mode [ 176.823671][ T9004] netlink: 8 bytes leftover after parsing attributes in process `syz.3.804'. [ 178.245760][ T9013] gretap0: entered promiscuous mode [ 178.251929][ T9013] macvtap1: entered promiscuous mode [ 178.258466][ T9013] macvtap1: entered allmulticast mode [ 178.264695][ T9013] gretap0: entered allmulticast mode [ 178.416171][ T9026] __nla_validate_parse: 4 callbacks suppressed [ 178.416191][ T9026] netlink: 164 bytes leftover after parsing attributes in process `syz.4.814'. [ 178.461060][ T9026] netlink: 164 bytes leftover after parsing attributes in process `syz.4.814'. [ 178.495983][ T9031] netlink: 164 bytes leftover after parsing attributes in process `syz.4.814'. [ 178.519064][ T29] audit: type=1800 audit(1773708440.604:6): pid=9028 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.813" name="memory.events" dev="tmpfs" ino=959 res=0 errno=0 [ 178.662616][ T9038] netlink: 276 bytes leftover after parsing attributes in process `syz.1.816'. [ 178.788445][ T9042] pimreg: entered allmulticast mode [ 178.934666][ T9049] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 179.494092][ T9081] netlink: 24 bytes leftover after parsing attributes in process `syz.4.828'. [ 179.662752][ T9092] netlink: 276 bytes leftover after parsing attributes in process `syz.4.829'. [ 179.968960][ T9111] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 180.190850][ T9116] netlink: 8 bytes leftover after parsing attributes in process `syz.4.837'. [ 180.296785][ T9116] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 180.334727][ T9116] netlink: 8 bytes leftover after parsing attributes in process `syz.4.837'. [ 180.349706][ T9116] netlink: 4 bytes leftover after parsing attributes in process `syz.4.837'. [ 180.364618][ T9129] netlink: 136 bytes leftover after parsing attributes in process `syz.0.838'. [ 180.781351][ T9145] nbd: socks must be embedded in a SOCK_ITEM attr [ 180.799542][ T9145] block nbd1: shutting down sockets [ 180.809342][ T9159] macvlan0: entered promiscuous mode [ 180.814875][ T9159] netlink: 'syz.3.848': attribute type 2 has an invalid length. [ 181.015769][ T9161] sctp: [Deprecated]: syz.4.849 (pid 9161) Use of int in max_burst socket option. [ 181.015769][ T9161] Use struct sctp_assoc_value instead [ 181.367103][ T9179] bond0: entered promiscuous mode [ 181.424399][ T9179] bond_slave_0: entered promiscuous mode [ 181.441037][ T9179] bond_slave_1: entered promiscuous mode [ 181.462389][ T9179] batadv0: entered promiscuous mode [ 181.488497][ T9179] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 181.500533][ T9179] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 181.512002][ T9179] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 181.700391][ T9200] : renamed from bond_slave_0 [ 181.923683][ T9220] netlink: 'syz.3.868': attribute type 25 has an invalid length. [ 181.998656][ T9220] netlink: 'syz.3.868': attribute type 25 has an invalid length. [ 182.102294][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5810 ms [ 182.110424][ C1] lec:lec_tx_timeout: lec0 [ 182.115256][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 182.135365][ T9236] xt_recent: Unsupported userspace flags (000000b1) [ 182.158470][ T9233] tipc: Enabled bearer , priority 0 [ 182.166224][ T9233] syzkaller0: entered promiscuous mode [ 182.172831][ T9233] syzkaller0: entered allmulticast mode [ 182.219740][ T9233] tipc: Resetting bearer [ 182.257260][ T9231] tipc: Resetting bearer [ 182.344435][ T9231] tipc: Disabling bearer [ 182.514021][ T9243] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.521982][ T9243] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.713163][ T9243] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 182.741330][ T9243] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 182.771020][ T9243] tipc: Resetting bearer [ 182.776970][ T9243] tipc: Resetting bearer [ 182.928884][ T42] lo speed is unknown, defaulting to 1000 [ 182.935126][ T42] syz2: Port: 1 Link DOWN [ 182.972270][ T9245] geneve3: entered promiscuous mode [ 183.011242][ T13] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.037824][ T13] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.083290][ T9249] lo speed is unknown, defaulting to 1000 [ 183.202343][ T13] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.223104][ T13] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.236989][ T9282] netlink: 'syz.4.882': attribute type 21 has an invalid length. [ 183.266525][ T9249] wg1 speed is unknown, defaulting to 1000 [ 183.330345][ T9290] sctp: [Deprecated]: syz.4.882 (pid 9290) Use of int in max_burst socket option deprecated. [ 183.330345][ T9290] Use struct sctp_assoc_value instead [ 183.545863][ T9293] __nla_validate_parse: 13 callbacks suppressed [ 183.545885][ T9293] netlink: 28 bytes leftover after parsing attributes in process `syz.0.884'. [ 183.570904][ T9293] netlink: 28 bytes leftover after parsing attributes in process `syz.0.884'. [ 183.581121][ T9293] netlink: 'syz.0.884': attribute type 4 has an invalid length. [ 183.726125][ T9303] syzkaller1: entered promiscuous mode [ 183.764167][ T9303] syzkaller1: entered allmulticast mode [ 183.988082][ T9311] syzkaller0: entered promiscuous mode [ 184.002583][ T9311] syzkaller0: entered allmulticast mode [ 184.199839][ T9324] netlink: 292 bytes leftover after parsing attributes in process `syz.0.891'. [ 184.442246][ T9336] bond0: entered promiscuous mode [ 184.450593][ T9336] : entered promiscuous mode [ 184.455777][ T9336] bond_slave_1: entered promiscuous mode [ 184.462336][ T9336] bridge0: entered promiscuous mode [ 184.468404][ T9336] dummy0: entered promiscuous mode [ 184.477218][ T9336] batadv0: entered promiscuous mode [ 184.487233][ T9336] debugfs: 'hsr1' already exists in 'hsr' [ 184.493241][ T9336] Cannot create hsr debugfs directory [ 184.500769][ T9336] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 184.510910][ T9336] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 184.521776][ T9336] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 184.915360][ T9355] netlink: 'syz.2.898': attribute type 27 has an invalid length. [ 184.926908][ T9350] netlink: 392 bytes leftover after parsing attributes in process `syz.3.896'. [ 185.047289][ T9346] lo speed is unknown, defaulting to 1000 [ 185.086390][ T9346] wg1 speed is unknown, defaulting to 1000 [ 185.744218][ T9388] netlink: 292 bytes leftover after parsing attributes in process `syz.4.903'. [ 186.147880][ T9402] netlink: 'syz.4.907': attribute type 1 has an invalid length. [ 186.194863][ T9402] sctp: [Deprecated]: syz.4.907 (pid 9402) Use of int in maxseg socket option. [ 186.194863][ T9402] Use struct sctp_assoc_value instead [ 186.389118][ T9408] netlink: 4 bytes leftover after parsing attributes in process `syz.2.909'. [ 186.566703][ T9408] team0: Port device team_slave_0 removed [ 187.057357][ T9429] syzkaller0: entered promiscuous mode [ 187.068425][ T9429] syzkaller0: entered allmulticast mode [ 187.127472][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 187.135557][ C1] lec:lec_tx_timeout: lec0 [ 187.140392][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 187.226440][ T9440] nbd: must specify at least one socket [ 187.233789][ T9441] netlink: 48 bytes leftover after parsing attributes in process `syz.4.915'. [ 187.316298][ T9444] netlink: 292 bytes leftover after parsing attributes in process `syz.1.916'. [ 187.517767][ T9449] x_tables: duplicate underflow at hook 3 [ 187.828688][ T9466] netlink: 'syz.1.921': attribute type 10 has an invalid length. [ 189.328736][ T9486] netlink: 4 bytes leftover after parsing attributes in process `syz.4.929'. [ 189.366715][ T9485] netlink: 12 bytes leftover after parsing attributes in process `syz.2.927'. [ 189.649799][ T9506] bridge0: left allmulticast mode [ 189.676069][ T9506] macvlan0: left promiscuous mode [ 189.689290][ T9506] gretap1: left promiscuous mode [ 189.700071][ T9506] bond1: left promiscuous mode [ 189.712360][ T9510] Bluetooth: MGMT ver 1.23 [ 189.757018][ T1167] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 189.772021][ T1167] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 189.831332][ T1167] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 189.867646][ T1167] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 190.121260][ T9518] syzkaller0: entered promiscuous mode [ 190.138525][ T9518] syzkaller0: entered allmulticast mode [ 190.150010][ T999] bond0: (slave bond_slave_0): interface is now down [ 190.152347][ T9521] 8021q: adding VLAN 0 to HW filter on device bond0 [ 190.157373][ T999] bond0: (slave bond_slave_1): interface is now down [ 190.366756][ T1167] bond0: (slave bond_slave_0): interface is now down [ 190.398288][ T1167] bond0: (slave bond_slave_1): interface is now down [ 190.537542][ T1167] bond0: (slave bond_slave_0): interface is now down [ 190.544457][ T1167] bond0: (slave bond_slave_1): interface is now down [ 190.720852][ T999] bond0: (slave bond_slave_0): interface is now down [ 190.734353][ T999] bond0: (slave bond_slave_1): interface is now down [ 190.755796][ T9546] netlink: 'syz.3.944': attribute type 9 has an invalid length. [ 190.802991][ T9547] netlink: 'syz.3.944': attribute type 9 has an invalid length. [ 190.890615][ T1167] bond0: (slave bond_slave_0): interface is now down [ 190.917497][ T1167] bond0: (slave bond_slave_1): interface is now down [ 191.072402][ T1167] bond0: (slave bond_slave_0): interface is now down [ 191.079910][ T1167] bond0: (slave bond_slave_1): interface is now down [ 191.218181][ T1167] bond0: (slave bond_slave_0): interface is now down [ 191.225379][ T1167] bond0: (slave bond_slave_1): interface is now down [ 191.371899][ T129] bond0: (slave bond_slave_0): interface is now down [ 191.380177][ T129] bond0: (slave bond_slave_1): interface is now down [ 191.527587][ T13] bond0: (slave bond_slave_0): interface is now down [ 191.534468][ T13] bond0: (slave bond_slave_1): interface is now down [ 191.687793][ T66] bond0: (slave bond_slave_0): interface is now down [ 191.694937][ T66] bond0: (slave bond_slave_1): interface is now down [ 191.837617][ T66] bond0: (slave bond_slave_0): interface is now down [ 191.847499][ T66] bond0: (slave bond_slave_1): interface is now down [ 191.991694][ T13] bond0: (slave bond_slave_0): interface is now down [ 191.998688][ T13] bond0: (slave bond_slave_1): interface is now down [ 192.157465][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 192.165562][ C1] lec:lec_tx_timeout: lec0 [ 192.171016][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 192.178150][ T13] bond0: (slave bond_slave_0): interface is now down [ 192.184973][ T13] bond0: (slave bond_slave_1): interface is now down [ 192.337523][ T66] bond0: (slave bond_slave_0): interface is now down [ 192.345596][ T66] bond0: (slave bond_slave_1): interface is now down [ 192.497525][ T129] bond0: (slave bond_slave_0): interface is now down [ 192.504462][ T129] bond0: (slave bond_slave_1): interface is now down [ 192.657540][ T129] bond0: (slave bond_slave_0): interface is now down [ 192.668226][ T129] bond0: (slave bond_slave_1): interface is now down [ 192.701678][ T129] bond0: now running without any active interface! [ 192.801797][ T9562] netlink: 'syz.4.952': attribute type 6 has an invalid length. [ 192.815854][ T9562] netlink: 'syz.4.952': attribute type 7 has an invalid length. [ 192.836838][ T9562] netlink: 'syz.4.952': attribute type 8 has an invalid length. [ 192.868968][ T9562] netlink: 'syz.4.952': attribute type 6 has an invalid length. [ 192.883247][ T9566] netlink: 4 bytes leftover after parsing attributes in process `syz.1.951'. [ 192.887989][ T9567] syzkaller0: entered promiscuous mode [ 192.907553][ T9567] syzkaller0: entered allmulticast mode [ 193.282011][ T9584] netlink: 'syz.1.954': attribute type 1 has an invalid length. [ 193.332690][ T1167] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 193.409745][ T9590] pim6reg1: entered promiscuous mode [ 193.415107][ T9590] pim6reg1: entered allmulticast mode [ 193.438448][ T9588] netlink: 60 bytes leftover after parsing attributes in process `syz.2.955'. [ 193.467869][ T9588] netlink: 35 bytes leftover after parsing attributes in process `syz.2.955'. [ 193.908848][ T9603] syzkaller0: entered promiscuous mode [ 193.914499][ T9603] syzkaller0: entered allmulticast mode [ 194.015473][ T9607] netem: change failed [ 194.420040][ T9628] netlink: 104 bytes leftover after parsing attributes in process `syz.3.973'. [ 194.502021][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.654910][ T9639] syzkaller0: entered promiscuous mode [ 194.663056][ T9639] syzkaller0: entered allmulticast mode [ 195.018501][ T9654] netlink: 2 bytes leftover after parsing attributes in process `syz.4.982'. [ 195.925007][ T9693] netlink: 12 bytes leftover after parsing attributes in process `syz.0.998'. [ 195.990474][ T5833] block nbd1: Receive control failed (result -1) [ 196.349715][ T999] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 196.516758][ T9725] netlink: 176 bytes leftover after parsing attributes in process `syz.2.1007'. [ 196.854332][ T9736] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1012'. [ 196.928292][ T9742] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1015'. [ 197.049736][ T9744] macvlan7: entered promiscuous mode [ 197.073313][ T9744] macvlan7: entered allmulticast mode [ 197.082882][ T9746] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1017'. [ 197.110572][ T9744] bond3: entered promiscuous mode [ 197.117009][ T9744] 8021q: adding VLAN 0 to HW filter on device macvlan7 [ 197.124740][ T9711] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 197.176292][ T9744] bond3: left promiscuous mode [ 197.181197][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 197.181263][ C1] lec:lec_tx_timeout: lec0 [ 197.189592][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 198.010518][ T9789] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1033'. [ 198.288769][ T9795] [ 198.291176][ T9795] ====================================================== [ 198.298317][ T9795] WARNING: possible circular locking dependency detected [ 198.305378][ T9795] syzkaller #0 Not tainted [ 198.309960][ T9795] ------------------------------------------------------ [ 198.317046][ T9795] syz.4.1035/9795 is trying to acquire lock: [ 198.323136][ T9795] ffffffff8e85d2a8 (pcpu_alloc_mutex){+.+.}-{4:4}, at: pcpu_alloc_noprof+0x218/0x19c0 [ 198.332981][ T9795] [ 198.332981][ T9795] but task is already holding lock: [ 198.340375][ T9795] ffff888035bc14e0 (sk_lock-AF_INET6){+.+.}-{0:0}, at: sk_setsockopt+0xe62/0x2e80 [ 198.349648][ T9795] [ 198.349648][ T9795] which lock already depends on the new lock. [ 198.349648][ T9795] [ 198.360057][ T9795] [ 198.360057][ T9795] the existing dependency chain (in reverse order) is: [ 198.369159][ T9795] [ 198.369159][ T9795] -> #7 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 198.377078][ T9795] lock_sock_nested+0x41/0x100 [ 198.382460][ T9795] inet_shutdown+0x6a/0x390 [ 198.387493][ T9795] nbd_mark_nsock_dead+0x2e9/0x560 [ 198.393155][ T9795] recv_work+0x1c7f/0x1d90 [ 198.398093][ T9795] process_scheduled_works+0xb02/0x1830 [ 198.404234][ T9795] worker_thread+0xa50/0xfc0 [ 198.409365][ T9795] kthread+0x388/0x470 [ 198.413972][ T9795] ret_from_fork+0x51e/0xb90 [ 198.419088][ T9795] ret_from_fork_asm+0x1a/0x30 [ 198.424591][ T9795] [ 198.424591][ T9795] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 198.432345][ T9795] __mutex_lock+0x19f/0x1300 [ 198.437472][ T9795] nbd_queue_rq+0x37b/0x1100 [ 198.442617][ T9795] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 198.449055][ T9795] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 198.455910][ T9795] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 198.462417][ T9795] blk_mq_run_hw_queue+0x348/0x4f0 [ 198.468228][ T9795] blk_mq_dispatch_list+0xd16/0xe10 [ 198.473957][ T9795] blk_mq_flush_plug_list+0x48d/0x570 [ 198.480024][ T9795] __blk_flush_plug+0x3ed/0x4d0 [ 198.485412][ T9795] __submit_bio+0x28d/0x580 [ 198.490454][ T9795] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 198.496688][ T9795] block_read_full_folio+0x599/0x830 [ 198.502492][ T9795] filemap_read_folio+0x137/0x3b0 [ 198.508250][ T9795] do_read_cache_folio+0x358/0x590 [ 198.513973][ T9795] read_part_sector+0xb6/0x2b0 [ 198.519349][ T9795] adfspart_check_ICS+0xa5/0xa40 [ 198.524811][ T9795] bdev_disk_changed+0x7ba/0x1550 [ 198.530359][ T9795] blkdev_get_whole+0x380/0x510 [ 198.535738][ T9795] bdev_open+0x31e/0xd30 [ 198.540508][ T9795] blkdev_open+0x470/0x610 [ 198.545479][ T9795] do_dentry_open+0x785/0x14e0 [ 198.550805][ T9795] vfs_open+0x3b/0x340 [ 198.555457][ T9795] path_openat+0x2e08/0x3860 [ 198.560779][ T9795] do_file_open+0x23e/0x4a0 [ 198.565848][ T9795] do_sys_openat2+0x113/0x200 [ 198.571094][ T9795] __x64_sys_openat+0x138/0x170 [ 198.576513][ T9795] do_syscall_64+0x14d/0xf80 [ 198.581783][ T9795] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.588246][ T9795] [ 198.588246][ T9795] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 198.595506][ T9795] __mutex_lock+0x19f/0x1300 [ 198.600677][ T9795] nbd_queue_rq+0xc6/0x1100 [ 198.605741][ T9795] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 198.611844][ T9795] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 198.618721][ T9795] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 198.625348][ T9795] blk_mq_run_hw_queue+0x348/0x4f0 [ 198.631022][ T9795] blk_mq_dispatch_list+0xd16/0xe10 [ 198.636766][ T9795] blk_mq_flush_plug_list+0x48d/0x570 [ 198.642692][ T9795] __blk_flush_plug+0x3ed/0x4d0 [ 198.648092][ T9795] __submit_bio+0x28d/0x580 [ 198.653242][ T9795] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 198.659434][ T9795] block_read_full_folio+0x599/0x830 [ 198.665291][ T9795] filemap_read_folio+0x137/0x3b0 [ 198.670873][ T9795] do_read_cache_folio+0x358/0x590 [ 198.676509][ T9795] read_part_sector+0xb6/0x2b0 [ 198.681796][ T9795] adfspart_check_ICS+0xa5/0xa40 [ 198.687366][ T9795] bdev_disk_changed+0x7ba/0x1550 [ 198.693073][ T9795] blkdev_get_whole+0x380/0x510 [ 198.698445][ T9795] bdev_open+0x31e/0xd30 [ 198.703203][ T9795] blkdev_open+0x470/0x610 [ 198.708143][ T9795] do_dentry_open+0x785/0x14e0 [ 198.713447][ T9795] vfs_open+0x3b/0x340 [ 198.718125][ T9795] path_openat+0x2e08/0x3860 [ 198.723597][ T9795] do_file_open+0x23e/0x4a0 [ 198.728628][ T9795] do_sys_openat2+0x113/0x200 [ 198.733947][ T9795] __x64_sys_openat+0x138/0x170 [ 198.739346][ T9795] do_syscall_64+0x14d/0xf80 [ 198.744562][ T9795] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.751059][ T9795] [ 198.751059][ T9795] -> #4 (set->srcu){.+.+}-{0:0}: [ 198.758180][ T9795] __synchronize_srcu+0xca/0x3e0 [ 198.763641][ T9795] elevator_switch+0x1e8/0x7a0 [ 198.768928][ T9795] elevator_change+0x2cc/0x450 [ 198.774481][ T9795] elevator_set_default+0x36c/0x430 [ 198.780299][ T9795] blk_register_queue+0x366/0x430 [ 198.785850][ T9795] __add_disk+0x677/0xd50 [ 198.790784][ T9795] add_disk_fwnode+0xfb/0x480 [ 198.796243][ T9795] nbd_dev_add+0x72c/0xb50 [ 198.801241][ T9795] nbd_init+0x168/0x1f0 [ 198.805928][ T9795] do_one_initcall+0x250/0x8d0 [ 198.811222][ T9795] do_initcall_level+0x104/0x190 [ 198.816703][ T9795] do_initcalls+0x59/0xa0 [ 198.821828][ T9795] kernel_init_freeable+0x2a6/0x3e0 [ 198.827560][ T9795] kernel_init+0x1d/0x1d0 [ 198.832536][ T9795] ret_from_fork+0x51e/0xb90 [ 198.837660][ T9795] ret_from_fork_asm+0x1a/0x30 [ 198.842976][ T9795] [ 198.842976][ T9795] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 198.850884][ T9795] __mutex_lock+0x19f/0x1300 [ 198.856030][ T9795] elevator_change+0x1b3/0x450 [ 198.861339][ T9795] elevator_set_none+0xb5/0x140 [ 198.866706][ T9795] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 198.873203][ T9795] nbd_start_device+0x17f/0xb10 [ 198.878582][ T9795] nbd_genl_connect+0x165b/0x1cf0 [ 198.884240][ T9795] genl_family_rcv_msg_doit+0x22a/0x330 [ 198.890566][ T9795] genl_rcv_msg+0x61c/0x7a0 [ 198.895584][ T9795] netlink_rcv_skb+0x232/0x4b0 [ 198.900958][ T9795] genl_rcv+0x28/0x40 [ 198.905549][ T9795] netlink_unicast+0x80f/0x9b0 [ 198.910841][ T9795] netlink_sendmsg+0x813/0xb40 [ 198.916126][ T9795] ____sys_sendmsg+0x972/0x9f0 [ 198.921454][ T9795] ___sys_sendmsg+0x2a5/0x360 [ 198.926655][ T9795] __x64_sys_sendmsg+0x1bd/0x2a0 [ 198.932128][ T9795] do_syscall_64+0x14d/0xf80 [ 198.937360][ T9795] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.943793][ T9795] [ 198.943793][ T9795] -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 198.952499][ T9795] blk_alloc_queue+0x546/0x680 [ 198.957791][ T9795] __blk_mq_alloc_disk+0x197/0x390 [ 198.963421][ T9795] nbd_dev_add+0x499/0xb50 [ 198.968369][ T9795] nbd_init+0x168/0x1f0 [ 198.973042][ T9795] do_one_initcall+0x250/0x8d0 [ 198.978498][ T9795] do_initcall_level+0x104/0x190 [ 198.984126][ T9795] do_initcalls+0x59/0xa0 [ 198.989345][ T9795] kernel_init_freeable+0x2a6/0x3e0 [ 198.995095][ T9795] kernel_init+0x1d/0x1d0 [ 198.999956][ T9795] ret_from_fork+0x51e/0xb90 [ 199.005071][ T9795] ret_from_fork_asm+0x1a/0x30 [ 199.010354][ T9795] [ 199.010354][ T9795] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 199.017568][ T9795] fs_reclaim_acquire+0x71/0x100 [ 199.023044][ T9795] prepare_alloc_pages+0x152/0x650 [ 199.028785][ T9795] __alloc_frozen_pages_noprof+0x12f/0x380 [ 199.035156][ T9795] __alloc_pages_noprof+0xa/0x30 [ 199.040619][ T9795] pcpu_populate_chunk+0x182/0xb30 [ 199.046425][ T9795] pcpu_alloc_noprof+0xc6c/0x19c0 [ 199.051961][ T9795] xt_percpu_counter_alloc+0x161/0x220 [ 199.057950][ T9795] translate_table+0x1332/0x20b0 [ 199.063443][ T9795] ip6t_register_table+0x11b/0x800 [ 199.069088][ T9795] ip6table_nat_table_init+0x43/0x2e0 [ 199.075077][ T9795] xt_find_table_lock+0x30c/0x3e0 [ 199.080656][ T9795] xt_request_find_table_lock+0x26/0x100 [ 199.086966][ T9795] do_ip6t_get_ctl+0x716/0x1230 [ 199.092380][ T9795] nf_getsockopt+0x26e/0x290 [ 199.097489][ T9795] ipv6_getsockopt+0x1fd/0x2b0 [ 199.102952][ T9795] do_sock_getsockopt+0x2d3/0x3f0 [ 199.108575][ T9795] __x64_sys_getsockopt+0x1a4/0x240 [ 199.114348][ T9795] do_syscall_64+0x14d/0xf80 [ 199.119486][ T9795] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.125988][ T9795] [ 199.125988][ T9795] -> #0 (pcpu_alloc_mutex){+.+.}-{4:4}: [ 199.133713][ T9795] __lock_acquire+0x15a5/0x2cf0 [ 199.139084][ T9795] lock_acquire+0xf0/0x2e0 [ 199.144063][ T9795] __mutex_lock+0x19f/0x1300 [ 199.149178][ T9795] pcpu_alloc_noprof+0x218/0x19c0 [ 199.154816][ T9795] bpf_prog_alloc_no_stats+0x10e/0x4f0 [ 199.160796][ T9795] bpf_prog_alloc+0x3c/0x1a0 [ 199.165901][ T9795] __get_filter+0xff/0x400 [ 199.170835][ T9795] sk_attach_filter+0x24/0x140 [ 199.176208][ T9795] sk_setsockopt+0x201f/0x2e80 [ 199.181507][ T9795] do_sock_setsockopt+0x11b/0x1b0 [ 199.187050][ T9795] __x64_sys_setsockopt+0x13d/0x1b0 [ 199.192922][ T9795] do_syscall_64+0x14d/0xf80 [ 199.198040][ T9795] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.204448][ T9795] [ 199.204448][ T9795] other info that might help us debug this: [ 199.204448][ T9795] [ 199.214844][ T9795] Chain exists of: [ 199.214844][ T9795] pcpu_alloc_mutex --> &nsock->tx_lock --> sk_lock-AF_INET6 [ 199.214844][ T9795] [ 199.228142][ T9795] Possible unsafe locking scenario: [ 199.228142][ T9795] [ 199.235598][ T9795] CPU0 CPU1 [ 199.240961][ T9795] ---- ---- [ 199.246319][ T9795] lock(sk_lock-AF_INET6); [ 199.250843][ T9795] lock(&nsock->tx_lock); [ 199.257775][ T9795] lock(sk_lock-AF_INET6); [ 199.264807][ T9795] lock(pcpu_alloc_mutex); [ 199.269329][ T9795] [ 199.269329][ T9795] *** DEADLOCK *** [ 199.269329][ T9795] [ 199.277550][ T9795] 1 lock held by syz.4.1035/9795: [ 199.282576][ T9795] #0: ffff888035bc14e0 (sk_lock-AF_INET6){+.+.}-{0:0}, at: sk_setsockopt+0xe62/0x2e80 [ 199.292236][ T9795] [ 199.292236][ T9795] stack backtrace: [ 199.298134][ T9795] CPU: 1 UID: 0 PID: 9795 Comm: syz.4.1035 Not tainted syzkaller #0 PREEMPT(full) [ 199.298156][ T9795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 199.298164][ T9795] Call Trace: [ 199.298171][ T9795] [ 199.298177][ T9795] dump_stack_lvl+0xe8/0x150 [ 199.298197][ T9795] print_circular_bug+0x2e1/0x300 [ 199.298218][ T9795] check_noncircular+0x12e/0x150 [ 199.298237][ T9795] __lock_acquire+0x15a5/0x2cf0 [ 199.298253][ T9795] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 199.298265][ T9795] ? arch_stack_walk+0xfb/0x150 [ 199.298285][ T9795] ? stack_trace_save+0xa9/0x100 [ 199.298297][ T9795] lock_acquire+0xf0/0x2e0 [ 199.298310][ T9795] ? pcpu_alloc_noprof+0x218/0x19c0 [ 199.298326][ T9795] __mutex_lock+0x19f/0x1300 [ 199.298344][ T9795] ? pcpu_alloc_noprof+0x218/0x19c0 [ 199.298356][ T9795] ? do_sock_setsockopt+0x11b/0x1b0 [ 199.298373][ T9795] ? do_syscall_64+0x14d/0xf80 [ 199.298389][ T9795] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.298403][ T9795] ? pcpu_alloc_noprof+0x218/0x19c0 [ 199.298416][ T9795] ? __pfx___mutex_lock+0x10/0x10 [ 199.298436][ T9795] ? obj_cgroup_charge_account+0x37a/0x650 [ 199.298454][ T9795] ? obj_cgroup_charge_account+0x13b/0x650 [ 199.298473][ T9795] pcpu_alloc_noprof+0x218/0x19c0 [ 199.298485][ T9795] ? rcu_is_watching+0x15/0xb0 [ 199.298503][ T9795] ? __kasan_kmalloc+0x93/0xb0 [ 199.298517][ T9795] ? __kmalloc_cache_noprof+0x31c/0x660 [ 199.298530][ T9795] ? bpf_prog_alloc_no_stats+0xdb/0x4f0 [ 199.298541][ T9795] ? __kmalloc_cache_noprof+0x15b/0x660 [ 199.298554][ T9795] bpf_prog_alloc_no_stats+0x10e/0x4f0 [ 199.298566][ T9795] bpf_prog_alloc+0x3c/0x1a0 [ 199.298577][ T9795] __get_filter+0xff/0x400 [ 199.298592][ T9795] sk_attach_filter+0x24/0x140 [ 199.298606][ T9795] sk_setsockopt+0x201f/0x2e80 [ 199.298625][ T9795] ? __pfx_sk_setsockopt+0x10/0x10 [ 199.298642][ T9795] ? aa_sk_perm+0x6d5/0x900 [ 199.298660][ T9795] ? __fget_files+0x2a/0x420 [ 199.298676][ T9795] ? aa_sock_opt_perm+0xff/0x1a0 [ 199.298691][ T9795] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 199.298706][ T9795] do_sock_setsockopt+0x11b/0x1b0 [ 199.298724][ T9795] __x64_sys_setsockopt+0x13d/0x1b0 [ 199.298743][ T9795] do_syscall_64+0x14d/0xf80 [ 199.298760][ T9795] ? trace_irq_disable+0x3b/0x150 [ 199.298777][ T9795] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.298788][ T9795] ? clear_bhb_loop+0x40/0x90 [ 199.298801][ T9795] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.298827][ T9795] RIP: 0033:0x7fabeb39c799 [ 199.298839][ T9795] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 199.298850][ T9795] RSP: 002b:00007fabec200028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 199.298864][ T9795] RAX: ffffffffffffffda RBX: 00007fabeb616090 RCX: 00007fabeb39c799 [ 199.298873][ T9795] RDX: 000000000000001a RSI: 0000000000000001 RDI: 0000000000000003 [ 199.298880][ T9795] RBP: 00007fabeb432c99 R08: 0000000000000010 R09: 0000000000000000 [ 199.298888][ T9795] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000000 [ 199.298895][ T9795] R13: 00007fabeb616128 R14: 00007fabeb616090 R15: 00007ffe2844d468 [ 199.298914][ T9795] [ 202.197566][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 202.205639][ C1] lec:lec_tx_timeout: lec0 [ 202.210203][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 206.817829][ T5839] Bluetooth: hci0: command 0x0406 tx timeout [ 206.818375][ T5842] Bluetooth: hci2: command 0x0406 tx timeout [ 206.823877][ T5839] Bluetooth: hci3: command 0x0406 tx timeout [ 206.829966][ T5842] Bluetooth: hci1: command 0x0406 tx timeout [ 207.217527][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 207.225821][ C1] lec:lec_tx_timeout: lec0 [ 207.230375][ C1] lec:lec_start_xmit: lec0:No lecd attached