last executing test programs: 13.214511228s ago: executing program 0 (id=6133): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4048010) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e0001821501f63ed02a170000000000000000000000000a006030"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) write$tun(r0, &(0x7f00000001c0)={@val={0x0, 0x17}, @void, @eth={@broadcast, @empty, @val={@void, {0x8100, 0x6, 0x0, 0x5}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x2, 0x14, 0xe4, 0x0, 0x8, 0x84, 0x0, @dev={0xac, 0x14, 0x14, 0x29}, @private=0xa010102}}}}}}, 0x2a) (async) syz_emit_ethernet(0x3b6, &(0x7f00000003c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\b@', 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x3, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af0302"}, {0x0, 0x1, "00001c050000000026000400"}, {0x3, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8675b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x22, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "b8a3e100908f61640000000200fff500000000000000000000008879e66485201a0015ca83747357a02745000400"/55}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) 12.777515299s ago: executing program 0 (id=6138): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="10000000", @ANYRES16, @ANYBLOB="200027bd7000fcdbdf252100000044002d8005000400000000000500010004000000080002"], 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0xff, 0x4, 0x6, 0x6}, 0x4, r1}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x2000a804) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000440)={&(0x7f0000000200)="17d0afc0631cc03521686fc313ee119c9dc3a09df0bf4a2ca7b883f076b4cca261186227097042285b40c1aea2905733f8fe7f0805e8467c263041fda3e06da54fbbbfad6a3b1b1a2a1b55aec10c32404f453a77af4ba59eb2a3b11aea56870d7e1ee862ded03ab1d39554d94713dc082bedd68beaa4999fc44560372d6921fe6be1e08c9b736b2e026a9df9ab91f07edbdc35e7957983f5fa19d073d29e9622114b8cc468bdce0add650807", &(0x7f0000000140)=""/55, &(0x7f00000002c0)="fa0c04155ce2f7b3ecf4edfe6c08084463e884f1c7e6d935fe355fc59f34c1d8e40cb1f24d31668fe249532d0d16a89e9de637e22c6fc52b468e1cf62b480dc08525bfb102bdbe58fc57ca9fc2308a2040bb1f7731d341dccf73b394ebd07f7b89ad566e0535d1c54b4496762b4bcf7ef2340301ee71d4bc1cc018fdd1605e93fae8bb838b138ea0ac41f836e6b1d00298", &(0x7f0000000380)="f9d83dc0a86d6c910be81581ab4fa2267394c65521aae39bd11ced9084edda3bbbce0e58fe6064682a46a88d51b3956d302f38b92152d4ec600f6f3185e8e2cf3b3ae298e5627039eda6985bd982c7225bcd531f989c0049a9b83c6f0d1781699faf6adb51441b884cef695b50ed78ec4e7d63ef3e85016d3812e744fa01ba4330e82cfdf3f5d31dd74c11f44e14cc47b78cbca9c625ce108ec41e7282146a3c8d88df37cfbf6b8b", 0x1, r4, 0x4}, 0x38) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000002b40)='cubic', 0x4) setsockopt$inet6_int(r5, 0x29, 0x1a, &(0x7f0000000040)=0x6, 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="fc000000", @ANYRES16=r7, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r8, @ANYBLOB="e0005a80dc0000801400030020380000080003000600000003000800040002004a0002"], 0xfc}, 0x1, 0x0, 0x0, 0x4008821}, 0x8840) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00'}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r1], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) 12.17169552s ago: executing program 0 (id=6146): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b04, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x2a000}], 0x1, 0x0, 0x0, 0x804c040}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) close(r0) socket$inet_sctp(0x2, 0x1, 0x84) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b04, &(0x7f00000000c0)={'wlan1\x00'}) (async) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x2a000}], 0x1, 0x0, 0x0, 0x804c040}, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) (async) close(r0) (async) 10.382192025s ago: executing program 0 (id=6154): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, 0x0, &(0x7f0000000040)=0x11) (async) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, 0x0, &(0x7f0000000040)=0x11) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0xc3b, 0xffffffff, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0x100000}]}}}]}, 0x40}}, 0x4) (async) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0xc3b, 0xffffffff, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0x100000}]}}}]}, 0x40}}, 0x4) 10.163324266s ago: executing program 0 (id=6157): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x709) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x3, 0x2, 0x801, 0x0, 0x0, {0x3, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4008004}, 0x20040040) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000000000008500000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000710000009500000000000000"], &(0x7f0000000080)='GPL\x00'}, 0x65) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000280)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = socket$alg(0x26, 0x5, 0x0) readv(r3, &(0x7f0000000840)=[{&(0x7f0000000340)=""/5, 0x5}, {&(0x7f0000000480)=""/240, 0xf0}, {&(0x7f0000000380)=""/85, 0x55}, {&(0x7f0000000640)=""/109, 0x6d}, {&(0x7f00000006c0)=""/234, 0xea}, {&(0x7f00000007c0)=""/71, 0x47}, {&(0x7f0000000400)=""/12, 0xc}], 0x7) bind$alg(r6, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000200)={0x3, 0x4, 0x4, 0xa, 0x0, r6, 0x7fffffff, '\x00', r7, 0xffffffffffffffff, 0x4, 0x4, 0x3}, 0x50) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r8 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1800"], 0x18, 0x4004048}], 0x1, 0x0) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) ioctl$XFS_IOC_GETBMAP(r8, 0xc0205826, &(0x7f00000001c0)={0x5e, 0xfff, 0x7, 0x7, 0x92}) sendmsg$SOCK_DIAG_BY_FAMILY(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000014001901000000000000000228"], 0x28}}, 0x0) 9.197154826s ago: executing program 0 (id=6166): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'syzkaller1\x00', 0x4c02}) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000980)=""/4094, 0xffe}], 0x1) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000100)=0x730) r3 = socket(0x15, 0x1, 0xc7) sendmmsg$inet(r3, &(0x7f0000000500)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10, &(0x7f0000001480)=[{&(0x7f0000000300)="f5a7933a00"/20, 0x14}], 0x1, &(0x7f0000001500)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @local}}}], 0x20}}], 0x1, 0x20044804) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0xffffffff}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r5 = socket$packet(0x11, 0x3, 0x300) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="08000000040000000400000004"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x14, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000025000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000140)=r7, 0x4) ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000440)=0x3) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000480)={0x0, 0x2710}, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) close(0x4) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1802000000000000009500"/25], &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r8, 0xffffffffffffffff, 0x19, 0x0, @val=@netfilter={0x1, 0x1, 0x56d}}, 0x20) syz_init_net_socket$rose(0xb, 0x5, 0x0) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r9, 0x84, 0x1a, &(0x7f0000000200), &(0x7f0000000080)=0x8) unshare(0x6a040000) r10 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000380)="5c00000012006bab9e3fe3d86e6c1d000014a10d00000000000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dffefffffffffffffff60a64c9f4080003fe060100000400020015b53631", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x44010) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x14, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="00000000000000b7080000fdffffff7b8af8ff00000000bfa2000000030000070a032f2a210eb1d92c3a0000f8ffffffb703000008000000b70400000000150085000000820000001801000020696c2500000000002020207b1af8ff00000000bfa10000000000000701000000309b0000850000000600"/135], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) 2.318224971s ago: executing program 2 (id=6203): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, 0x0) r5 = accept$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000200)=0x14) getsockname$packet(r5, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000002c0)=0x14) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000080)={r6, 0x2, 0x0, 0x2}, 0x10) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYRESOCT=r2, @ANYRES16=r2, @ANYBLOB="01002dbd7000fcdbdf022100000009000a007068793200000000050307000000000000ba6800000a000100770da5"], 0x34}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000815) 2.137618215s ago: executing program 2 (id=6205): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000000), 0xffffff6a) sendfile(r4, r5, 0x0, 0xffffffff000) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r6, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, 0x140b, 0x200, 0x70bd29, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x801}, 0x881) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000cbd7010229efd8498dec35b080009000200000008000c00a80a000008000b00000000000600010007000000"], 0x34}, 0x1, 0x0, 0x0, 0x40811}, 0x20) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="40000000100001002abd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x40}}, 0x20000010) 2.019012828s ago: executing program 4 (id=6206): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000100)={r0}) sendmsg$IPSET_CMD_CREATE(r5, 0x0, 0x24008800) socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000140)={'veth1_vlan\x00', @local}) writev(r2, &(0x7f00000006c0)=[{&(0x7f0000000080)="2e9b5b0007e03dd65193dfb6c575963f86dd6067", 0x14}, {&(0x7f00000001c0)="b700001811005abeef4ba0d598", 0xd}, {&(0x7f0000000200)="37a8a6c41ef711513a5555633f6e4259616da007f3c18c191f6ffa14306d06c4fd", 0x21}], 0x3) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="65cf00000000010000000800000014000180060001000e0000ec070005"], 0x28}, 0x1, 0x0, 0x0, 0x400c081}, 0x0) 1.78695196s ago: executing program 3 (id=6208): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000060a0b040000000000000000020000002800048024000180090001006d6574610000002014000280080001400000001708000240000000150900010073797a30000000000900020073797a3200000000140000001100010000000000000000000100000a"], 0x7c}}, 0x0) 1.755123596s ago: executing program 1 (id=6209): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006b000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b400000095"], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000101010200000000000000000a000005350002802c00018014000300fe8014000400fe8800000000000000000000000000010c001980080002000200"/80], 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) (async, rerun: 64) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (rerun: 64) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) (async) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) (async) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x6, @null, @rose={'rose', 0x0}, 0xfe, [@bcast, @bcast, @null, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) (async, rerun: 32) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) (rerun: 32) ioctl$sock_rose_SIOCADDRT(r5, 0x890b, &(0x7f00000007c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x6, @bcast, @bpq0, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) (async) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r6, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @bcast, @null]}) ioctl$sock_rose_SIOCDELRT(r6, 0x890c, &(0x7f00000000c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x6, @null, @bpq0, 0x1, [@bcast, @default, @default, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default]}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000780)=ANY=[@ANYBLOB="740000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000540012800b000100697036746e6c000044000280050006000800000004001300060011004e22000014000300fc0000000000000008000700070000000600100001000000060012004e2000"/92], 0x74}, 0x1, 0xba01, 0x0, 0x4004001}, 0x4000000) (async) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x6, 0x0, 0x80000, 0x0, 0xc8}, 0x9c) 1.50457743s ago: executing program 3 (id=6210): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_HASH_TYPE={0x8, 0x7, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c0000000306010200000000000000000700000a0500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000300)="87fb74cf4d67adbbd062637f514c1f5eb18d7b442e6457a356c6cb1f71a43dfae773c8489cce5145f92615d4bdb13ef54d6ae90ec7733180fcf5adf3e13fdb05b57b748bd14eda042a97fdd844", 0x4d}], 0x1}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f727400"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) 1.397835992s ago: executing program 2 (id=6211): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)={0x14, r2, 0x711, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x24004894}, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r1, 0xc0385869, &(0x7f0000000180)={r1, &(0x7f0000000080)='\x00', 0x2, &(0x7f00000000c0)={@_ha_fsid={[0x1]}, {0x6, 0x81, 0x2d, 0x98a4}}, 0x81, &(0x7f0000000100)={@_ha_fsid}, &(0x7f0000000140)=0x7ff}) syz_genetlink_get_family_id$wireguard(&(0x7f00000004c0), r3) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000001c0)=@raw={'raw\x00', 0x8, 0x3, 0x348, 0x270, 0x1000000, 0xffffffff, 0x0, 0xffffffff, 0x308, 0xffffffff, 0xffffffff, 0x308, 0xffffffff, 0x3, 0x0, {[{{@ip={@loopback, @private=0xa010100, 0x0, 0xff000000, 'bond_slave_1\x00', 'geneve1\x00', {}, {0xff}, 0x84, 0x0, 0x28}, 0x0, 0x1b8, 0x218, 0x0, {0x0, 0x1c8}, [@common=@inet=@sctp={{0x148}, {[0x4e24, 0x4e21], [0x4e24, 0x4e21], [0x101, 0x81c, 0x4, 0x3041800, 0x10000, 0x8, 0x7f, 0x3, 0x8000, 0xe4, 0x5e9c90b, 0x4b, 0x5, 0x2, 0x5, 0x6, 0x0, 0xea, 0x8001, 0x4, 0x6937, 0x7598, 0x4, 0x5, 0x1, 0x9, 0x7, 0x81, 0x0, 0xba11, 0x4, 0x2, 0x3d, 0x10001, 0x3ff, 0xffffffff, 0xffff, 0x8000, 0x1000, 0x0, 0x28, 0x800, 0x6, 0xfffffffa, 0xd721, 0x80000000, 0x0, 0xfff, 0x0, 0x10001, 0x2, 0x3, 0x7575bec7, 0x8cdf, 0x3, 0x4, 0x1000, 0x24, 0xd8e, 0x4, 0x8, 0x4, 0xe1, 0x8a], 0x0, [{0x80, 0xb}, {0xac, 0xc, 0x5}, {0x10, 0x4f, 0x4}, {0x4, 0x80, 0x4}], 0x4, 0x4, 0x4}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}, 0x5, 0x0, [0x25, 0x5, 0x28, 0x23, 0x12, 0x34, 0x16, 0x3, 0x10, 0x39, 0x27, 0x2a, 0x6, 0xe, 0x36, 0x10], 0x27b02525726059f5, 0x7, 0x4}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x8}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x64}}}}, 0x3a8) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000580)={0x8, [0x6, 0xc3, 0xd2ca, 0x5, 0x9, 0x9, 0x401, 0xe]}, 0x14) writev(r0, &(0x7f00000006c0)=[{&(0x7f00000005c0)='0', 0x1}], 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x800) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newqdisc={0x3c, 0x24, 0xe0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0xfff3, 0xd064db0e491fa98f}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x20842}]}}]}, 0x3c}}, 0x4044080) bind$packet(r4, &(0x7f0000000040)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r4, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r8, 0x29, 0x2e, &(0x7f0000000180)={0x8, {{0xa, 0x4e21, 0xa3f, @mcast1, 0xbfd}}, {{0xa, 0x4e20, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, 0x40}}}, 0x108) setsockopt$inet6_group_source_req(r8, 0x29, 0x2e, &(0x7f00000002c0)={0x8, {{0xa, 0x4e20, 0x4, @mcast2, 0x6}}, {{0xa, 0x4e21, 0x4e11, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x5}}}, 0x108) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) getsockopt$inet6_buf(r8, 0x29, 0x30, &(0x7f0000000180)=""/214, &(0x7f0000000080)=0xd6) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x4}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0xb6) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x2, @remote, 0x5}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x10, 0x0}}], 0x2c) 1.336107619s ago: executing program 4 (id=6212): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r3 = openat$cgroup_devices(r2, &(0x7f0000000380)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r3, &(0x7f0000000280)=ANY=[@ANYBLOB='b *:4\trmr'], 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x13, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x43}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x4a}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB="020300030500000001bd7000000000000300180000521cf5"], 0x28}, 0x1, 0x7}, 0x10) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=ANY=[@ANYRES64=r1, @ANYRES16=r1, @ANYBLOB="0100fdfffffffbdbdf2525000000"], 0x14}}, 0x0) 1.182621049s ago: executing program 1 (id=6213): socket$inet_smc(0x2b, 0x1, 0x0) r0 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000080), &(0x7f00000000c0)=0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_pressure(r1, &(0x7f0000000100)='cpu.pressure\x00', 0x2, 0x0) preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/58, 0x3a}], 0x1, 0x0, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newtaction={0x7c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x68, 0x1, [@m_tunnel_key={0x64, 0x1, 0x0, 0x0, {{0xf}, {0x34, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x3, 0x5, 0x0, 0x5cc7, 0x8}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0xb, @loopback={0x400000004000300}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd00028008"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 1.085138864s ago: executing program 4 (id=6214): r0 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEYRING(r0, 0x110, 0x2, &(0x7f00000000c0)='ife\x00', 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="580000001000370400"/20, @ANYRES32=r3, @ANYBLOB="8304050000000000380012800b000100697036746e6c00002800028014000300ff0100000000000000000000000000010500090004"], 0x58}, 0x1, 0x0, 0x0, 0x9005}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, 0x0, 0x3}, [@IFLA_MTU={0x8, 0x4, 0xfff1}]}, 0x28}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) syz_emit_ethernet(0x2b, &(0x7f0000000280)=ANY=[@ANYBLOB="35d149c95643aaaaaaaaaaaa804b7d6181000f00430507893de995e7199b82b0f06dcc1d0db155f71746a747d5907d"], 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) r5 = socket(0x10, 0x803, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)=ANY=[@ANYBLOB="b0000000", @ANYRES16=0x0, @ANYBLOB="100029bd7000fcdbdf25180000000e0001006e657464657673f188b9a4f1696d0000000b0002006e657464657673696d300000080003000100000008000b000e00000006001600090000000500120001000000060011000080000008000b0001000000080001007063690011000200303030303a30303a31302e300000000085fc03000200000008000b000000008006001600060000000500120001000000060045267b11000d000000"], 0xb0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40440c4) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="080005"], 0x164}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0xeffe}, [@NFTA_RULE_COMPAT={0x2c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x29}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0xa00}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8b06}, @NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0x10, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x9, 0x1, "2a8e27f2fa"}]}, @NFTA_CMP_OP={0x8}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xfc}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newtfilter={0xb0, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0xd}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_u32={{0x8}, {0x7c, 0x2, [@TCA_U32_ACT={0x54, 0x7, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xf, 0x3}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x6, 0x9, 0x20000000, 0x1, 0xd6}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_U32_SEL={0x24, 0x5, {0x8, 0x7, 0x1, 0x3d3f, 0xfffe, 0xfff, 0x3, 0x58f, [{0x2, 0x20008000, 0x4, 0x1}]}}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0xe}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x1}, 0x24040084) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000240)=@gettaction={0x34, 0x32, 0x20, 0x70bd27, 0x25dfdbfd, {}, [@action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x8810) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r10, &(0x7f0000000200)={0x0, 0x35, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000018000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) accept4(r4, 0x0, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) 1.075291959s ago: executing program 3 (id=6215): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x4}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2d, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private2}}}, 0x108) 953.856392ms ago: executing program 1 (id=6216): r0 = socket(0x23, 0x3, 0x2df) socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) (rerun: 32) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2400000004a1bddade73ec58d96a2e5e425963f33d877c29a8050000000000000087a8aa", @ANYRES16=r1, @ANYBLOB="02002cbd7000fddbdf250100000005000700030000000800110001000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000800}, 0x40) 918.155494ms ago: executing program 3 (id=6217): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000300)=0x2, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x1, r2, 0x1000000, r0}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r4 = socket$packet(0x11, 0x3, 0x300) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xa, &(0x7f0000000200)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffff364}}, @exit], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000040)=r5, 0x4) socket(0x2, 0x80805, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) close(0x3) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@generic={&(0x7f0000000080)='./file0\x00', 0x0, 0x18}, 0x18) r7 = socket$packet(0x11, 0x2, 0x300) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r8, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000180)=r9, 0x4) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newsa={0xf0, 0x10, 0x1, 0x70bc2c, 0x0, {{@in6=@mcast2, @in=@private=0xa0100fe, 0x0, 0xecdf, 0x0, 0x0, 0xa}, {@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x32}, @in=@local, {0xfffffffffffffffe, 0xfffffffffffffffc, 0x3, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x9}, {0x1, 0x400800, 0x9, 0x292}, {0x1000}, 0x0, 0x0, 0x2, 0x4, 0x0, 0x2c}}, 0xf0}}, 0x44050) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='GPL\x00', 0x5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r11, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 642.67552ms ago: executing program 2 (id=6218): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x437, 0xffffffff, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x5570b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc, 0x1e, 0x6}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x48800}, 0x880) 594.457097ms ago: executing program 1 (id=6219): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) (async) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r2, &(0x7f0000001d00)={0x0, 0x0, 0x0}, 0x40000020) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="180000002500010324bd5502ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) (async) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="180000002500010324bd5502ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f0000002700)=""/4087, 0xff7}, {&(0x7f0000000240)=""/77, 0x4d}, {&(0x7f0000005740)=""/4088, 0xff8}, {&(0x7f0000000340)=""/51, 0x33}, {&(0x7f0000000600)=""/21, 0x15}, {&(0x7f0000004700)=""/4098, 0x1002}, {&(0x7f00000016c0)=""/182, 0xb6}, {&(0x7f0000000540)=""/163, 0xa3}, {&(0x7f0000001940)=""/195, 0xc3}], 0x9}, 0x32120) r3 = socket$rds(0x15, 0x5, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x96703023c714694c) bind$rds(r3, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000180)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000080), 0x0}}, @fadd={0x58, 0x114, 0x6, {{}, 0x0, 0x0}}], 0xb0}, 0x0) (async) sendmsg$rds(r3, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000180)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000080), 0x0}}, @fadd={0x58, 0x114, 0x6, {{}, 0x0, 0x0}}], 0xb0}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="6f0000006241f582a46fd06b3f1ea55f8d36056b71905d0cd1412138037771cc03373c8b5481ea1e876ec4d59abbc666e845cd0ef913e02fb224b7b241916eb56924550e06967c15e9f0214548720653e87b6a654655ba66152cc19ce5e652", @ANYRES16=r1, @ANYBLOB="010080ffffff000000000100000008000100030000000c00048005000300020000000800020003000000"], 0x30}}, 0x0) 591.700259ms ago: executing program 4 (id=6220): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000080)=@ethtool_ringparam={0x10, 0x6, 0x2, 0xfc6c, 0x8, 0x10001, 0xffff, 0xf, 0x40000006}}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) close(0x3) r2 = getpid() ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) sendmmsg$unix(r1, &(0x7f0000000bc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=[@cred={{0x1c, 0x1, 0x2, {r2}}}], 0x20, 0x24000082}}], 0x1, 0x4044000) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) accept4$tipc(r3, &(0x7f0000000100)=@name, &(0x7f0000000140)=0x10, 0x0) 430.007756ms ago: executing program 2 (id=6221): read(0xffffffffffffffff, &(0x7f0000000000)=""/158, 0x9e) r0 = socket$inet(0x2, 0x6, 0x2) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x4, 0x89, 0x6, 0x6, 0x10, @mcast2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x700, 0x20, 0x1, 0x81}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000200)={'gretap0\x00', &(0x7f0000000180)={'sit0\x00', r1, 0x700, 0x7, 0xff, 0x4, {{0x12, 0x4, 0x1, 0x0, 0x48, 0x64, 0x0, 0x2, 0x29, 0x0, @remote, @multicast2, {[@noop, @noop, @lsrr={0x83, 0x1f, 0x6a, [@local, @private=0xa010102, @broadcast, @rand_addr=0x64010102, @multicast1, @remote, @multicast2]}, @end, @generic={0x82, 0x6, "2d32cb4f"}, @generic={0x82, 0x9, "9df9e657792991"}]}}}}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r3, &(0x7f0000000480)={&(0x7f0000000240), 0xc, &(0x7f0000000440)={&(0x7f00000002c0)={0x15c, r4, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}]}, 0x15c}, 0x1, 0x0, 0x0, 0x814}, 0x4) ioctl$XFS_IOC_FSGROWFSLOG(r0, 0x4008586f, &(0x7f00000004c0)={0x7000, 0x3ff}) r5 = socket$inet6_sctp(0xa, 0x4, 0x84) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000500)={0x0, 0x7, 0x8, 0x0, 0xe2b7, 0x9}, &(0x7f0000000540)=0x14) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, &(0x7f0000000580)={r6, @in={{0x2, 0x4e21, @broadcast}}}, 0x84) syz_genetlink_get_family_id$mptcp(&(0x7f0000000640), r3) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000780)={r5, &(0x7f0000000680)='@\xe9-\x00', 0x204040, &(0x7f00000006c0)={@_ha_fsid={[0x0, 0x1]}, {0x6, 0x5, 0x2f, 0xb55}}, 0x7fff, &(0x7f0000000700)={@_ha_fsid}, &(0x7f0000000740)=0x3}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f00000007c0)={r6, 0x7f}, &(0x7f0000000800)=0x8) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000840)={r6, 0x1, 0x0, 0x0, 0x2, 0x6, 0x1, 0x8001, {r8, @in={{0x2, 0x4e21, @local}}, 0x5, 0x8695, 0x0, 0x9, 0x8001}}, &(0x7f0000000900)=0xb0) sendmsg$IPSET_CMD_LIST(r7, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x4c, 0x7, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8c1}, 0x4000000) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000a80)={r9, @in={{0x2, 0x4e20, @local}}}, 0x84) sendmsg$IPSET_CMD_LIST(r7, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x1c, 0x7, 0x6, 0x3, 0x0, 0x0, {0x1, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20048000}, 0x40) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000c40)={0x5, 0x1, 0x2}, 0xc) ioctl$IMSETDEVNAME(r7, 0x80184947, &(0x7f0000000c80)={0x1, 'syz0\x00'}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000cc0), r3) accept4$inet(r0, &(0x7f0000000d00)={0x2, 0x0, @multicast1}, &(0x7f0000000d40)=0x10, 0x80800) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nbd(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r10, &(0x7f0000000e80)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x34, r11, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x1) r12 = syz_genetlink_get_family_id$gtp(&(0x7f0000000f00), r3) sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000001000)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x64, r12, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@GTPA_LINK={0x8, 0x1, r1}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_MS_ADDR6={0x14, 0xc, @mcast1}, @GTPA_MS_ADDR6={0x14, 0xc, @private0}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}]}, 0x64}, 0x1, 0x0, 0x0, 0x44}, 0x0) ioctl$FIBMAP(r3, 0x1, &(0x7f0000001040)=0x2) connect$llc(r7, &(0x7f0000001080)={0x1a, 0x311, 0x6, 0x0, 0xff, 0x6, @broadcast}, 0x10) setsockopt$inet6_IPV6_RTHDR(r7, 0x29, 0x39, &(0x7f00000010c0)={0x5c, 0x8, 0x1, 0x1, 0x0, [@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast1]}, 0x48) 362.602464ms ago: executing program 4 (id=6222): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="c14d00000000000020001280080001006873720014", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="53832f218d7c8bf5f0e529af23f534cc"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c00000010003df600"/20, @ANYRES32=0x0, @ANYBLOB="4980020009d000003c0012800b000100697036746e6c00002c00028014000200ff01000000000000000000000000000114000300ff"], 0x5c}, 0x1, 0x0, 0x0, 0x40001}, 0x0) 339.0277ms ago: executing program 1 (id=6223): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x166, 0x4) sendmmsg$inet(r0, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, 0x0}}], 0x1, 0x4000800) r1 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000001f80)={&(0x7f0000001d00)=@can, 0x80, &(0x7f0000000000), 0x57}, 0x5) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$unix(0x1, 0x2, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'geneve0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4dc1}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r7}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001fc0)=ANY=[@ANYRESDEC=r4, @ANYRES16=r5, @ANYRES32=r2, @ANYRES32=r9, @ANYBLOB="0c009900ff070000700000001400121d3e366604007379cc6b616cb710e4e80800050007000000000000", @ANYRES16=r3, @ANYBLOB="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", @ANYRESHEX=r1], 0x50}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = socket$rxrpc(0x21, 0x2, 0xa) listen(r11, 0x7) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r13 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r13, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="1400000016000b63d25a8064000000000124fc60", 0x14}], 0x1}, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(r13, 0xc4009420, &(0x7f00000006c0)={0x2, 0x5, {0x800, @usage=0x830a, 0x0, 0x2d4f9d18, 0x1ee, 0x4, 0x5, 0x3, 0x26, @struct={0x2, 0x6}, 0x8, 0x8, [0x0, 0x7fff, 0x3, 0x7d, 0x800000007f]}, {0x809c, @usage=0x8, 0x0, 0x0, 0x1ff, 0x7, 0x9, 0xa, 0x1, @struct={0xd69, 0x9}, 0x6, 0x9, [0x3, 0x5, 0x8, 0x5, 0x9, 0x2]}, {0x50, @usage=0x401, 0x0, 0x3, 0x6, 0x4, 0xceb, 0x4, 0x10, @usage=0x7, 0x101, 0x100, [0x9, 0xc, 0x1, 0x2, 0x2, 0xfffffffffffff001]}, {0x2, 0x4, 0x26}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000ac0)={r14, 0xb6d8, 0x8000000000000001, 0x1}) sendmsg$NL80211_CMD_FRAME(r10, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="f4060000f268615b181ffeed014b2dcc130ada9a8f4dfd12006799d547714ac60e104ba25addbf6724155cee6e117eab0f4fbc9f6693cbf3a0ee6aae4ae3544d08fd84521a1c95f227e0b1bd2359de96f2bed208bd34ecaf36c0fecc7d9bac98421b16d589629cc395ed21120dfa3f81aecd2362964453a00e5f0e70c83efc1186fef78097744c75e14b3dc593dd512d76f2d60a7af3eba3b42ffcd704916fbf", @ANYRES16=r12, @ANYRESDEC=r0, @ANYRES32, @ANYBLOB="d50619008000009effffffffffff0c5389020001"], 0x6f4}}, 0x0) sendmsg$NL80211_CMD_SET_NOACK_MAP(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="040000ff0003000000000000000000", @ANYRES32, @ANYBLOB="06009500ff0000000600950003000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x3, [@datasec={0x1, 0x1, 0x0, 0xf, 0x3, [{0x2, 0x6, 0xfffffeff}], "aafada"}, @datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], "92"}]}, {0x0, [0x2e]}}, 0x0, 0x43, 0x0, 0x8, 0x1}, 0x28) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f00000001c0)={0x24, 0x0, 0x62c21a4ade68aba1, 0x0, 0x2, {{0x32}, {@void, @val={0x8, 0x3, r9}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x48d4}, 0x40010) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x84000000, 0x0) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x20, 0x0, 0x100, 0x70bd28, 0x25dfdc02, {{}, {@void, @val={0xc, 0x99, {0x3, 0x21}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0xd4}, 0x4000000) 234.564712ms ago: executing program 3 (id=6224): r0 = socket(0x10, 0x803, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) (async) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000400)=0xffffffc5, 0x4) (async) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYRESDEC=r3, @ANYRESHEX=r1, @ANYBLOB="01000000000000001c0012000c00010062676e64000000000c0002000800030006128814b7279e0438114a42aced4a5b943851ee38ffa079b12a7b4b32749d1b8864cfba2031c4dd6581dc778526e33f4a03be32b137a657b1cc3221abe3eb5516e917e4a28a8c881aaa2cd7025b25dcc43c075f61550cbc4193d43fb714d0a3716fdfe02ccdabf7f5d763ad5bb35423915b0e1f9e6462991e3c8cd4b8fa3cd17dab5536891bc6a93b68ca2a329474"], 0x3c}}, 0x0) (async) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000040)=0x4) 159.785104ms ago: executing program 4 (id=6225): socket$inet_smc(0x2b, 0x1, 0x0) r0 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000080), &(0x7f00000000c0)=0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_pressure(r1, &(0x7f0000000100)='cpu.pressure\x00', 0x2, 0x0) preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/58, 0x3a}], 0x1, 0x0, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newtaction={0x7c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x68, 0x1, [@m_tunnel_key={0x64, 0x1, 0x0, 0x0, {{0xf}, {0x34, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x3, 0x5, 0x0, 0x5cc7, 0x8}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0xb, @loopback={0x400000004000300}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd00028008"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 1.336291ms ago: executing program 3 (id=6226): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="50000000100037040400"/20, @ANYRES32=0x0, @ANYBLOB="8304050000000000300012000100697000746e6c001020000280080008001300000014000300fe88000000000000000800000000810100004634cf264ed65a170328c20bd060788154e8e4623dec04f7e6d278b9fc6674cbc23e176065465aa9a5b6738c5f30be1bc1f37db66db3da77595d779291a4e10d34599d64f4baa22f0ebfc0d5944b820afbb89d54f9b909eb6d8de073e8e0884a"], 0x50}, 0x1, 0x0, 0x0, 0x9005}, 0x4000000) 574.874µs ago: executing program 2 (id=6227): socket$nl_route(0x10, 0x3, 0x0) 0s ago: executing program 1 (id=6228): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x13, 0xffffffffffffffff, 0x215e8000) socket$nl_netfilter(0x10, 0x3, 0xc) socket$alg(0x26, 0x5, 0x0) socket(0x14, 0x2, 0x4) socket$nl_crypto(0x10, 0x3, 0x15) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffa3}, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xce) ioctl$SIOCAX25GETUID(r0, 0x89e0, &(0x7f0000000080)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x5) sendmsg$nl_route_sched(r1, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x2}, 0x2, r3}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) kernel console output (not intermixed with test programs): mode [ 551.986565][T23874] tipc: Resetting bearer [ 552.139936][T23880] bond7: option lacp_rate: invalid value (128) [ 552.213190][T23880] bond7 (unregistering): Released all slaves [ 552.268781][T23873] tipc: Resetting bearer [ 553.687128][T23873] tipc: Disabling bearer [ 553.745109][ T5885] tipc: Node number set to 882937556 [ 553.747818][T23899] netlink: 'syz.2.5055': attribute type 21 has an invalid length. [ 553.766278][T23899] netlink: 128 bytes leftover after parsing attributes in process `syz.2.5055'. [ 553.864671][T23899] netlink: 'syz.2.5055': attribute type 4 has an invalid length. [ 553.873503][T23899] netlink: 'syz.2.5055': attribute type 3 has an invalid length. [ 553.892512][T23899] netlink: 3 bytes leftover after parsing attributes in process `syz.2.5055'. [ 554.116273][T23907] netlink: 92 bytes leftover after parsing attributes in process `syz.1.5057'. [ 554.449833][T23916] netlink: 'syz.0.5059': attribute type 6 has an invalid length. [ 554.664261][T23926] veth0_to_bridge: entered promiscuous mode [ 554.717493][T23923] veth0_to_bridge: left promiscuous mode [ 554.854815][T23931] netlink: 'syz.1.5064': attribute type 1 has an invalid length. [ 554.933379][T23934] netlink: 'syz.2.5063': attribute type 1 has an invalid length. [ 555.033465][T23934] 8021q: adding VLAN 0 to HW filter on device bond7 [ 555.067112][T23942] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 555.077125][T23942] bond7: (slave batadv2): making interface the new active one [ 555.087609][T23942] bond7: (slave batadv2): Enslaving as an active interface with an up link [ 555.166221][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 555.482241][T23971] tipc: Enabled bearer , priority 10 [ 555.531243][T23977] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5074'. [ 555.542467][T23925] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 555.667442][T23982] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5076'. [ 555.720071][T23982] netlink: 43 bytes leftover after parsing attributes in process `syz.3.5076'. [ 555.754051][T23982] netlink: 'syz.3.5076': attribute type 6 has an invalid length. [ 555.776095][T23982] netlink: 'syz.3.5076': attribute type 5 has an invalid length. [ 555.784626][T23982] netlink: 43 bytes leftover after parsing attributes in process `syz.3.5076'. [ 555.808304][ T25] block nbd1: Possible stuck request ffff8880262e8800: control (read@0,1024B). Runtime 30 seconds [ 555.819897][ T25] block nbd1: Possible stuck request ffff8880262e8a00: control (read@1024,1024B). Runtime 30 seconds [ 555.831546][ T25] block nbd1: Possible stuck request ffff8880262e8c00: control (read@2048,1024B). Runtime 30 seconds [ 555.843137][ T25] block nbd1: Possible stuck request ffff8880262e8e00: control (read@3072,1024B). Runtime 30 seconds [ 555.893660][T23982] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 555.943317][T23982] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 556.249274][T24013] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5084'. [ 556.279588][T24013] gretap1: entered promiscuous mode [ 556.286422][T24013] batman_adv: batadv0: Adding interface: gretap1 [ 556.292925][T24013] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 556.343885][T24021] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5086'. [ 556.353167][T24022] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5086'. [ 556.596098][ T5885] tipc: Node number set to 3860266057 [ 556.670832][T24042] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5092'. [ 556.690282][T24042] ip6gre1: entered promiscuous mode [ 556.695720][T24042] ip6gre1: entered allmulticast mode [ 556.865972][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 556.874133][ C1] lec:lec_tx_timeout: lec0 [ 556.878903][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 557.231521][T24059] bond8: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 557.251145][T24059] bond8: (slave lo): Enslaving as an active interface with an up link [ 557.311832][T24059] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 557.458696][T24069] pim6reg1: entered promiscuous mode [ 557.471327][T24069] pim6reg1: entered allmulticast mode [ 557.658798][T24074] set match dimension is over the limit! [ 557.766548][T24084] bridge_slave_1: entered promiscuous mode [ 558.348069][T24122] tipc: Enabled bearer , priority 0 [ 558.377334][T24122] syzkaller0: entered promiscuous mode [ 558.382875][T24122] syzkaller0: entered allmulticast mode [ 558.434892][T24122] tipc: Resetting bearer [ 558.462352][T24121] tipc: Resetting bearer [ 558.516309][T24121] tipc: Disabling bearer [ 558.526532][T24129] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 558.662129][T24131] syzkaller0: entered promiscuous mode [ 558.676892][T24131] syzkaller0: entered allmulticast mode [ 559.282314][T24165] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 559.444975][T24175] __nla_validate_parse: 4 callbacks suppressed [ 559.444996][T24175] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5135'. [ 559.529468][T24180] netlink: 'syz.1.5136': attribute type 9 has an invalid length. [ 559.663438][T24181] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5134'. [ 560.223741][T24205] netlink: 'syz.1.5142': attribute type 8 has an invalid length. [ 560.474349][T24213] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5143'. [ 560.521670][T24217] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5145'. [ 560.566535][T24219] netlink: 'syz.1.5147': attribute type 142 has an invalid length. [ 560.720668][T24233] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5149'. [ 560.845191][T24245] netlink: 596 bytes leftover after parsing attributes in process `syz.4.5148'. [ 560.870434][T24248] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5153'. [ 560.877052][T24247] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5154'. [ 561.115300][T24259] netlink: 'syz.2.5155': attribute type 1 has an invalid length. [ 561.184024][T24264] netlink: 108 bytes leftover after parsing attributes in process `syz.2.5155'. [ 561.201025][T24265] netlink: 'syz.3.5156': attribute type 1 has an invalid length. [ 561.211763][T24259] bond8: entered promiscuous mode [ 561.217549][T24259] 8021q: adding VLAN 0 to HW filter on device bond8 [ 561.363995][T24268] netlink: 'syz.3.5157': attribute type 10 has an invalid length. [ 561.377597][T24268] syz_tun: entered promiscuous mode [ 561.473966][T24275] netlink: 4436 bytes leftover after parsing attributes in process `syz.3.5157'. [ 561.524491][T24273] netlink: 'syz.2.5158': attribute type 1 has an invalid length. [ 561.720231][T24284] xfrm0: Caught tx_queue_len zero misconfig [ 561.886176][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 561.894381][ C1] lec:lec_tx_timeout: lec0 [ 561.899422][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 561.984130][T24295] netlink: 'syz.1.5163': attribute type 2 has an invalid length. [ 562.013547][T24295] !9: entered promiscuous mode [ 562.025703][T24295] netlink: 'syz.1.5163': attribute type 5 has an invalid length. [ 562.054765][T24299] vxcan5: entered promiscuous mode [ 562.325569][T24311] lo speed is unknown, defaulting to 1000 [ 562.333292][T24311] lo speed is unknown, defaulting to 1000 [ 562.850076][ C1] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 562.858915][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 562.911036][ T84] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 562.923720][ T84] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 562.933165][ T84] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 562.941884][ T6824] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 563.026088][T24325] bond3: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 563.047281][T24325] bond3: (slave lo): Enslaving as an active interface with an up link [ 563.055891][T24325] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 564.312239][T24268] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 564.597317][T24362] netlink: 'syz.4.5181': attribute type 2 has an invalid length. [ 564.621822][T24362] netlink: 'syz.4.5181': attribute type 1 has an invalid length. [ 564.637410][T24362] netlink: 'syz.4.5181': attribute type 6 has an invalid length. [ 564.657140][T24362] netlink: 'syz.4.5181': attribute type 3 has an invalid length. [ 564.713824][T24373] __nla_validate_parse: 4 callbacks suppressed [ 564.713864][T24373] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5183'. [ 565.076307][T24391] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 565.082450][T24391] syzkaller1: linktype set to 825 [ 565.219947][T24397] geneve6: entered allmulticast mode [ 565.490369][T24384] netlink: 'syz.2.5186': attribute type 1 has an invalid length. [ 565.507287][T24384] netlink: 'syz.2.5186': attribute type 1 has an invalid length. [ 565.515091][T24384] netlink: 'syz.2.5186': attribute type 1 has an invalid length. [ 565.555862][T24384] netlink: 'syz.2.5186': attribute type 1 has an invalid length. [ 565.566273][T24408] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5195'. [ 565.576128][T24384] netlink: 'syz.2.5186': attribute type 1 has an invalid length. [ 565.585432][T24409] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5195'. [ 565.588131][T24384] netlink: 'syz.2.5186': attribute type 1 has an invalid length. [ 565.694386][T24410] veth0_vlan: left promiscuous mode [ 565.709570][T24410] veth0_vlan: entered promiscuous mode [ 565.727519][T24410] team0: Device veth0_vlan failed to register rx_handler [ 565.739769][T24415] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5196'. [ 565.797560][T24417] xt_hashlimit: max too large, truncated to 1048576 [ 565.822183][T24417] sctp: [Deprecated]: syz.4.5196 (pid 24417) Use of struct sctp_assoc_value in delayed_ack socket option. [ 565.822183][T24417] Use struct sctp_sack_info instead [ 565.870206][T24417] sctp: [Deprecated]: syz.4.5196 (pid 24417) Use of struct sctp_assoc_value in delayed_ack socket option. [ 565.870206][T24417] Use struct sctp_sack_info instead [ 565.989905][T24423] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5198'. [ 566.105341][T24431] syzkaller0: entered promiscuous mode [ 566.119426][T24431] syzkaller0: entered allmulticast mode [ 566.138315][T24436] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5203'. [ 566.153159][T24431] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5199'. [ 566.162467][T24431] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5199'. [ 566.212470][T24436] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 566.214101][T24439] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 566.238960][T24439] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 566.249299][T24439] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 566.320551][T24445] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5205'. [ 566.382633][T24445] bond9: entered promiscuous mode [ 566.388206][T24445] 8021q: adding VLAN 0 to HW filter on device bond9 [ 566.905986][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 566.914118][ C1] lec:lec_tx_timeout: lec0 [ 566.918893][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 567.281759][T24483] xt_TCPMSS: Only works on TCP SYN packets [ 567.493295][T24492] sch_fq: defrate 4294967293 ignored. [ 567.521743][T24492] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5219'. [ 567.540251][T24502] syzkaller0: entered promiscuous mode [ 567.546030][T24502] syzkaller0: entered allmulticast mode [ 568.022188][T24529] n: the hash_elasticity option has been deprecated and is always 16 [ 568.096592][T24529] n: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 568.128888][T24530] n: the hash_elasticity option has been deprecated and is always 16 [ 568.154694][T24530] n: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 568.191378][T24536] vlan5: entered promiscuous mode [ 568.236143][T24536] bridge0: entered promiscuous mode [ 568.250927][T24534] vlan3: entered promiscuous mode [ 568.541371][T24539] lo speed is unknown, defaulting to 1000 [ 568.588634][T24539] lo speed is unknown, defaulting to 1000 [ 568.792456][T24555] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 569.307088][T24573] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 569.543263][T24585] lo speed is unknown, defaulting to 1000 [ 569.565070][T24588] can: request_module (can-proto-0) failed. [ 569.587349][T24579] lo speed is unknown, defaulting to 1000 [ 569.600469][T24585] lo speed is unknown, defaulting to 1000 [ 569.730180][T24596] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 569.738592][T24596] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 569.746458][T24596] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 569.754173][T24596] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 569.762624][T24596] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 569.770464][T24596] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 569.782589][T24596] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 569.792153][T24596] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 569.800342][T24596] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 569.821449][T24596] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 570.080092][T24607] gre0: entered promiscuous mode [ 570.109576][T24607] gre0: entered allmulticast mode [ 570.145588][T24607] __nla_validate_parse: 16 callbacks suppressed [ 570.145608][T24607] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5250'. [ 570.173922][T24579] lo speed is unknown, defaulting to 1000 [ 570.502505][T24624] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5254'. [ 570.530231][ T25] block nbd0: Possible stuck request ffff888026278000: control (read@0,1024B). Runtime 390 seconds [ 570.543746][ T25] block nbd0: Possible stuck request ffff888026278200: control (read@1024,1024B). Runtime 390 seconds [ 570.556064][ T25] block nbd0: Possible stuck request ffff888026278400: control (read@2048,1024B). Runtime 390 seconds [ 570.568454][ T25] block nbd0: Possible stuck request ffff888026278600: control (read@3072,1024B). Runtime 390 seconds [ 570.672901][T24624] 8021q: adding VLAN 0 to HW filter on device bond9 [ 570.784678][T24628] lo speed is unknown, defaulting to 1000 [ 570.817374][T24628] lo speed is unknown, defaulting to 1000 [ 570.835263][T24637] validate_nla: 50 callbacks suppressed [ 570.835283][T24637] netlink: 'syz.3.5256': attribute type 4 has an invalid length. [ 570.851474][T24637] netlink: 'syz.3.5256': attribute type 8 has an invalid length. [ 570.863052][T24637] netlink: 'syz.3.5256': attribute type 1 has an invalid length. [ 570.871395][T24637] netlink: 172 bytes leftover after parsing attributes in process `syz.3.5256'. [ 570.881110][T24637] NCSI netlink: No device for ifindex 0 [ 571.029854][T24644] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5257'. [ 571.332839][T24642] delete_channel: no stack [ 571.908397][T24668] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5263'. [ 571.926016][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 571.934106][ C1] lec:lec_tx_timeout: lec0 [ 571.939369][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 571.997647][T24668] ip6gre2: entered promiscuous mode [ 572.209816][T24682] syzkaller0: entered promiscuous mode [ 572.229180][T24682] syzkaller0: entered allmulticast mode [ 572.422577][T24690] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 572.837724][T24711] netlink: 'syz.2.5274': attribute type 1 has an invalid length. [ 572.923532][T24719] netlink: 64691 bytes leftover after parsing attributes in process `syz.0.5276'. [ 572.937108][T24719] netlink: 64691 bytes leftover after parsing attributes in process `syz.0.5276'. [ 572.970162][T24711] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5274'. [ 573.004391][T24717] 8021q: adding VLAN 0 to HW filter on device bond11 [ 573.020204][T24717] bond10: (slave bond11): making interface the new active one [ 573.029249][T24717] bond10: (slave bond11): Enslaving as an active interface with an up link [ 573.057965][T24711] 8021q: adding VLAN 0 to HW filter on device bond10 [ 573.237757][T24740] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5283'. [ 573.490914][T24759] 8021q: VLANs not supported on bond0 [ 573.498707][T24758] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5290'. [ 573.514319][T24762] veth1_to_team: Caught tx_queue_len zero misconfig [ 573.562139][ T84] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 573.843451][T24781] geneve5: entered promiscuous mode [ 573.850918][T24781] geneve5: entered allmulticast mode [ 574.280130][T24752] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 574.729233][T24809] netlink: 'syz.1.5302': attribute type 3 has an invalid length. [ 574.809361][ T6780] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 574.827431][ T6780] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 574.924967][T24813] lo speed is unknown, defaulting to 1000 [ 574.955058][T24813] lo speed is unknown, defaulting to 1000 [ 575.195042][T24834] xt_policy: neither incoming nor outgoing policy selected [ 575.268619][T24835] lo speed is unknown, defaulting to 1000 [ 575.410425][T24835] lo speed is unknown, defaulting to 1000 [ 575.476111][T24841] __nla_validate_parse: 1 callbacks suppressed [ 575.476133][T24841] netlink: 212360 bytes leftover after parsing attributes in process `syz.2.5311'. [ 575.552272][T24843] x_tables: duplicate underflow at hook 1 [ 575.579080][T24845] netlink: 'syz.3.5312': attribute type 1 has an invalid length. [ 576.098743][ T5885] IPVS: starting estimator thread 0... [ 576.196129][T24862] IPVS: using max 29 ests per chain, 69600 per kthread [ 576.868356][T24868] netlink: 'syz.4.5316': attribute type 3 has an invalid length. [ 576.946001][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 576.954128][ C1] lec:lec_tx_timeout: lec0 [ 576.959270][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 577.161092][T24884] netlink: 88 bytes leftover after parsing attributes in process `syz.3.5320'. [ 577.243152][T24877] lo speed is unknown, defaulting to 1000 [ 577.332508][T24877] lo speed is unknown, defaulting to 1000 [ 577.336877][T24878] lo speed is unknown, defaulting to 1000 [ 577.711235][T24892] netlink: 212360 bytes leftover after parsing attributes in process `syz.4.5324'. [ 577.768988][T24889] delete_channel: no stack [ 577.852211][T24878] lo speed is unknown, defaulting to 1000 [ 577.871294][T24896] tipc: Failed to remove unknown binding: 66,1,1/0:4191836535/4191836537 [ 577.881824][T24896] tipc: Failed to remove unknown binding: 66,1,1/0:4191836535/4191836537 [ 577.891214][T24896] tipc: Failed to remove unknown binding: 66,1,1/0:4191836535/4191836537 [ 577.907630][T24896] Bluetooth: MGMT ver 1.23 [ 578.424529][T24901] lo speed is unknown, defaulting to 1000 [ 578.511524][T24901] lo speed is unknown, defaulting to 1000 [ 578.784313][T24921] netlink: 14 bytes leftover after parsing attributes in process `syz.4.5332'. [ 578.846469][ C1] ip6_tnl_xmit_ctl: 224 callbacks suppressed [ 578.846492][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 579.072819][T24925] syzkaller0: entered promiscuous mode [ 579.078741][T24925] syzkaller0: entered allmulticast mode [ 579.268246][T24930] netlink: 'syz.4.5334': attribute type 5 has an invalid length. [ 579.359543][T24933] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.5335'. [ 579.599721][T24944] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5338'. [ 579.630197][T24944] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5338'. [ 579.853504][T24949] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 579.917013][T24949] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5340'. [ 579.936388][T24949] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5340'. [ 579.945557][T24949] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5340'. [ 580.511859][T24970] netlink: 'syz.1.5346': attribute type 30 has an invalid length. [ 580.585284][T24970] lo speed is unknown, defaulting to 1000 [ 580.617557][T24970] lo speed is unknown, defaulting to 1000 [ 580.653369][T24975] __nla_validate_parse: 3 callbacks suppressed [ 580.653389][T24975] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.5347'. [ 580.831624][T24979] lo speed is unknown, defaulting to 1000 [ 580.923114][T24986] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5352'. [ 580.937170][T24987] netlink: 'syz.4.5351': attribute type 4 has an invalid length. [ 580.948348][T24988] netlink: 'syz.4.5351': attribute type 4 has an invalid length. [ 580.956540][T24987] netlink: 'syz.4.5351': attribute type 4 has an invalid length. [ 581.055871][T24994] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5353'. [ 581.115554][T24979] lo speed is unknown, defaulting to 1000 [ 581.231950][T25002] TCP: TCP_TX_DELAY enabled [ 581.798922][T25029] netlink: 'syz.3.5363': attribute type 1 has an invalid length. [ 581.809420][T25029] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5363'. [ 581.880058][T25026] bond9: option ad_actor_sys_prio: mode dependency failed, not supported in mode broadcast(3) [ 581.893041][T25026] bond9 (unregistering): Released all slaves [ 581.966095][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 581.974215][ C1] lec:lec_tx_timeout: lec0 [ 581.980350][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 582.039667][T25034] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5365'. [ 582.173999][T25044] netlink: 1320 bytes leftover after parsing attributes in process `syz.0.5366'. [ 582.284802][T25051] netlink: 'syz.4.5369': attribute type 2 has an invalid length. [ 582.403723][T25058] sctp: [Deprecated]: syz.1.5370 (pid 25058) Use of int in maxseg socket option. [ 582.403723][T25058] Use struct sctp_assoc_value instead [ 582.430364][T25058] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5370'. [ 582.466883][T25058] netlink: 'syz.1.5370': attribute type 1 has an invalid length. [ 582.535139][T25058] 8021q: adding VLAN 0 to HW filter on device bond4 [ 582.558926][T25061] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 582.580512][T25062] bond4: (slave ip6erspan0): making interface the new active one [ 582.592306][T25062] bond4: (slave ip6erspan0): Enslaving as an active interface with an up link [ 582.791987][T25067] syzkaller1: entered promiscuous mode [ 582.828782][T25067] syzkaller1: entered allmulticast mode [ 582.983347][T25076] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5376'. [ 583.002664][T25076] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5376'. [ 583.021110][T25076] netlink: 'syz.2.5376': attribute type 19 has an invalid length. [ 583.030790][T25076] netlink: 'syz.2.5376': attribute type 20 has an invalid length. [ 583.200636][T25085] netlink: 'syz.4.5378': attribute type 3 has an invalid length. [ 583.257268][T25085] netlink: 104 bytes leftover after parsing attributes in process `syz.4.5378'. [ 583.902849][T25120] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 584.512715][T25147] syzkaller0: entered promiscuous mode [ 584.526108][T25147] syzkaller0: entered allmulticast mode [ 584.557773][T25149] tun0: tun_chr_ioctl cmd 1074025672 [ 584.563210][T25149] tun0: ignored: set checksum disabled [ 584.681897][T25158] xt_hashlimit: overflow, rate too high: 0 [ 584.948496][T25161] lo speed is unknown, defaulting to 1000 [ 584.972653][T25167] ip6gretap4: entered promiscuous mode [ 584.978968][T25167] ip6gretap4: entered allmulticast mode [ 584.984893][T25161] lo speed is unknown, defaulting to 1000 [ 585.381541][T25181] n: the hash_elasticity option has been deprecated and is always 16 [ 585.391102][T25181] n: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 585.455329][T25186] n: the hash_elasticity option has been deprecated and is always 16 [ 585.464954][T25186] n: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 585.475626][T25189] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 585.501319][T25175] ip6tnl2: entered allmulticast mode [ 585.561511][T25177] netlink: 'syz.0.5402': attribute type 3 has an invalid length. [ 585.599945][T25185] syzkaller0: entered promiscuous mode [ 585.608001][T25185] syzkaller0: entered allmulticast mode [ 585.707269][T25196] netlink: 'syz.1.5406': attribute type 89 has an invalid length. [ 585.798894][T25196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 585.812477][T25196] 8021q: adding VLAN 0 to HW filter on device team0 [ 585.835396][T25196] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 585.871793][T25198] netlink: 'syz.2.5407': attribute type 2 has an invalid length. [ 585.903123][ T25] block nbd1: Possible stuck request ffff8880262e8800: control (read@0,1024B). Runtime 60 seconds [ 585.914128][ T25] block nbd1: Possible stuck request ffff8880262e8a00: control (read@1024,1024B). Runtime 60 seconds [ 585.925791][ T25] block nbd1: Possible stuck request ffff8880262e8c00: control (read@2048,1024B). Runtime 60 seconds [ 585.937106][ T25] block nbd1: Possible stuck request ffff8880262e8e00: control (read@3072,1024B). Runtime 60 seconds [ 586.104893][T25209] __nla_validate_parse: 13 callbacks suppressed [ 586.104913][T25209] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5410'. [ 586.155821][T25209] mac80211_hwsim hwsim39 wlan1: entered promiscuous mode [ 586.166477][T25209] macvtap1: entered promiscuous mode [ 586.172775][T25209] bond0: entered promiscuous mode [ 586.178334][T25209] bond_slave_0: entered promiscuous mode [ 586.184144][T25209] bond_slave_1: entered promiscuous mode [ 586.190719][T25209] batadv0: entered promiscuous mode [ 586.202372][T25209] macvtap1: entered allmulticast mode [ 586.210962][T25209] bond0: entered allmulticast mode [ 586.221140][T25209] bond_slave_0: entered allmulticast mode [ 586.228338][T25209] bond_slave_1: entered allmulticast mode [ 586.234343][T25209] batadv0: entered allmulticast mode [ 586.240309][T25209] mac80211_hwsim hwsim39 wlan1: entered allmulticast mode [ 586.252031][T25209] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 586.278724][T25216] netlink: 'syz.2.5412': attribute type 3 has an invalid length. [ 586.478684][T25221] tipc: Enabled bearer , priority 0 [ 586.501902][T25223] netlink: 248 bytes leftover after parsing attributes in process `syz.4.5415'. [ 586.503261][T25221] syzkaller0: entered promiscuous mode [ 586.522539][T25221] syzkaller0: entered allmulticast mode [ 586.541272][T25220] tipc: Resetting bearer [ 586.661128][T25220] tipc: Disabling bearer [ 586.976308][T25242] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 586.983663][T25242] IPv6: NLM_F_CREATE should be set when creating new route [ 586.990957][T25242] IPv6: NLM_F_CREATE should be set when creating new route [ 587.057214][T25242] netlink: 'syz.2.5421': attribute type 1 has an invalid length. [ 587.065015][T25242] netlink: 140 bytes leftover after parsing attributes in process `syz.2.5421'. [ 587.171114][T25258] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 587.322062][T25251] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check. [ 587.400705][T25257] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 587.613070][T25283] lec0: mtu less than device minimum [ 587.620942][T25283] lec:lec_atm_send: lec0: change_mtu to 0 failed [ 587.638392][T25243] lec:lec_atm_close: lec0: Shut down! [ 587.653932][T25281] bridge8: entered promiscuous mode [ 587.666366][T25281] bridge8: entered allmulticast mode [ 587.687954][T25281] team0: Port device bridge8 added [ 587.742516][T25281] bridge0: port 3(team0) entered blocking state [ 587.756288][T25281] bridge0: port 3(team0) entered disabled state [ 587.763528][T25281] team0: entered allmulticast mode [ 587.771374][T25281] team_slave_0: entered allmulticast mode [ 587.777803][T25281] team_slave_1: entered allmulticast mode [ 587.784893][T25290] netlink: 212360 bytes leftover after parsing attributes in process `syz.2.5434'. [ 587.818137][T25281] team0: entered promiscuous mode [ 587.823349][T25281] team_slave_0: entered promiscuous mode [ 587.829644][T25281] team_slave_1: entered promiscuous mode [ 587.921127][T25294] ip6erspan0: entered promiscuous mode [ 587.993385][T25299] netlink: 208240 bytes leftover after parsing attributes in process `syz.0.5438'. [ 588.009929][T25301] validate_nla: 2 callbacks suppressed [ 588.009947][T25301] netlink: 'syz.2.5439': attribute type 1 has an invalid length. [ 588.030759][T25301] netlink: 248 bytes leftover after parsing attributes in process `syz.2.5439'. [ 588.179222][T25310] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.5441'. [ 588.237767][T25310] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5441'. [ 588.358184][T25319] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.5446'. [ 588.392578][T25326] netlink: 'syz.4.5447': attribute type 1 has an invalid length. [ 588.409309][T25324] block nbd0: Unsupported socket: should be TCP or UNIX. [ 588.602776][T25326] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5447'. [ 588.719083][T25333] bond5: (slave geneve3): making interface the new active one [ 588.737601][T25333] bond5: (slave geneve3): Enslaving as an active interface with an up link [ 588.749849][ T6823] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 588.758718][ T6823] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 588.780850][T25326] bond5 (unregistering): (slave geneve3): Releasing active interface [ 588.862585][T25326] bond5 (unregistering): Released all slaves [ 588.893485][ T6823] netdevsim netdevsim4 eth0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 588.916732][ T6823] netdevsim netdevsim4 eth1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 589.050380][T25346] netlink: 'syz.4.5452': attribute type 62 has an invalid length. [ 589.199026][T25359] macsec2: entered allmulticast mode [ 589.204567][T25359] macsec0: entered allmulticast mode [ 589.224334][T25359] macsec0: left allmulticast mode [ 589.272720][T25363] xt_CT: You must specify a L4 protocol and not use inversions on it [ 589.531356][T25375] netlink: 'syz.0.5462': attribute type 18 has an invalid length. [ 589.784654][T25391] syzkaller0: entered promiscuous mode [ 589.791329][T25391] syzkaller0: entered allmulticast mode [ 590.418150][T25433] netlink: 'syz.1.5478': attribute type 1 has an invalid length. [ 590.822938][T25459] : renamed from batadv0 [ 591.279028][T25482] netlink: 'syz.2.5489': attribute type 21 has an invalid length. [ 591.295486][T25482] __nla_validate_parse: 18 callbacks suppressed [ 591.295506][T25482] netlink: 128 bytes leftover after parsing attributes in process `syz.2.5489'. [ 591.304573][T25481] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5491'. [ 591.321157][T25482] netlink: 'syz.2.5489': attribute type 5 has an invalid length. [ 591.337052][T25482] netlink: 3 bytes leftover after parsing attributes in process `syz.2.5489'. [ 591.622464][T25475] lo speed is unknown, defaulting to 1000 [ 591.699845][T25475] lo speed is unknown, defaulting to 1000 [ 592.023863][T25513] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5495'. [ 592.089282][T25521] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 592.111759][T25513] team0 (unregistering): Port device team_slave_0 removed [ 592.124581][T25513] team0 (unregistering): Port device team_slave_1 removed [ 592.161441][T25522] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 592.190771][T25516] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5497'. [ 592.378223][T25528] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5499'. [ 592.713044][T25543] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5503'. [ 592.765949][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5130 ms [ 592.774078][ C1] lec:lec_tx_timeout: lec0 [ 592.779462][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 592.959018][T25548] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5506'. [ 592.968375][T25548] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5506'. [ 593.604347][T25567] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5513'. [ 593.738733][T25572] xt_CT: You must specify a L4 protocol and not use inversions on it [ 593.819244][T25567] macvtap3: entered promiscuous mode [ 593.835667][T25567] macvtap3: entered allmulticast mode [ 593.842201][T25567] 8021q: adding VLAN 0 to HW filter on device macvtap3 [ 593.860775][T25571] FAULT_INJECTION: forcing a failure. [ 593.860775][T25571] name failslab, interval 1, probability 0, space 0, times 0 [ 593.886403][T25571] CPU: 1 UID: 0 PID: 25571 Comm: syz.4.5513 Not tainted syzkaller #0 PREEMPT(full) [ 593.886435][T25571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 593.886450][T25571] Call Trace: [ 593.886459][T25571] [ 593.886469][T25571] dump_stack_lvl+0xe8/0x150 [ 593.886509][T25571] should_fail_ex+0x412/0x560 [ 593.886547][T25571] should_failslab+0xa8/0x100 [ 593.886577][T25571] ? skb_clone+0x212/0x3a0 [ 593.886697][T25571] kmem_cache_alloc_noprof+0x87/0x650 [ 593.886730][T25571] skb_clone+0x212/0x3a0 [ 593.886758][T25571] __netlink_deliver_tap+0x404/0x850 [ 593.886805][T25571] ? netlink_deliver_tap+0x2e/0x1b0 [ 593.886839][T25571] netlink_deliver_tap+0x19c/0x1b0 [ 593.886871][T25571] netlink_sendskb+0x68/0x140 [ 593.886901][T25571] netlink_unicast+0x3a3/0x9b0 [ 593.886939][T25571] ? __pfx_netlink_unicast+0x10/0x10 [ 593.886978][T25571] netlink_rcv_skb+0x2b6/0x4b0 [ 593.887010][T25571] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 593.887095][T25571] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 593.887146][T25571] ? netlink_deliver_tap+0x2e/0x1b0 [ 593.887186][T25571] netlink_unicast+0x80f/0x9b0 [ 593.887224][T25571] ? __pfx_netlink_unicast+0x10/0x10 [ 593.887254][T25571] ? netlink_sendmsg+0x650/0xb40 [ 593.887293][T25571] ? skb_put+0x11b/0x210 [ 593.887330][T25571] netlink_sendmsg+0x813/0xb40 [ 593.887372][T25571] ? __pfx_netlink_sendmsg+0x10/0x10 [ 593.887408][T25571] ? aa_sock_msg_perm+0xf1/0x1b0 [ 593.887454][T25571] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 593.887483][T25571] ____sys_sendmsg+0x972/0x9f0 [ 593.887527][T25571] ? __pfx_____sys_sendmsg+0x10/0x10 [ 593.887557][T25571] ? import_iovec+0x73/0xa0 [ 593.887592][T25571] ___sys_sendmsg+0x2a5/0x360 [ 593.887619][T25571] ? __pfx____sys_sendmsg+0x10/0x10 [ 593.887675][T25571] ? __fget_files+0x2a/0x420 [ 593.887704][T25571] ? __fget_files+0x3a0/0x420 [ 593.887743][T25571] __x64_sys_sendmsg+0x1bd/0x2a0 [ 593.887768][T25571] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 593.887798][T25571] ? __pfx_ksys_write+0x10/0x10 [ 593.887832][T25571] do_syscall_64+0x14d/0xf80 [ 593.887863][T25571] ? trace_irq_disable+0x3b/0x150 [ 593.887892][T25571] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 593.887913][T25571] ? clear_bhb_loop+0x40/0x90 [ 593.887939][T25571] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 593.887959][T25571] RIP: 0033:0x7f764759c799 [ 593.887978][T25571] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 593.887996][T25571] RSP: 002b:00007f76484fd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 593.888018][T25571] RAX: ffffffffffffffda RBX: 00007f7647816090 RCX: 00007f764759c799 [ 593.888033][T25571] RDX: 000000000000c084 RSI: 0000200000000000 RDI: 000000000000000d [ 593.888047][T25571] RBP: 00007f76484fd090 R08: 0000000000000000 R09: 0000000000000000 [ 593.888059][T25571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 593.888072][T25571] R13: 00007f7647816128 R14: 00007f7647816090 R15: 00007ffcfed4dd08 [ 593.888104][T25571] [ 594.496603][T25594] netlink: 'syz.0.5520': attribute type 1 has an invalid length. [ 594.509722][T25598] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 594.603843][T25595] netlink: 'syz.0.5520': attribute type 1 has an invalid length. [ 594.683358][T25615] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 594.832491][T25617] lo speed is unknown, defaulting to 1000 [ 594.882272][T25617] lo speed is unknown, defaulting to 1000 [ 595.508328][T25647] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 595.552497][T25648] "syz.4.5534" (25648) uses obsolete ecb(arc4) skcipher [ 596.171157][T25677] netlink: 'syz.4.5543': attribute type 1 has an invalid length. [ 596.596672][T25687] __nla_validate_parse: 7 callbacks suppressed [ 596.596694][T25687] netlink: 212360 bytes leftover after parsing attributes in process `syz.4.5546'. [ 596.621896][T25689] netlink: 'syz.1.5547': attribute type 2 has an invalid length. [ 596.629987][T25689] netlink: 'syz.1.5547': attribute type 8 has an invalid length. [ 596.647621][T25689] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5547'. [ 596.688144][T25690] netlink: 'syz.1.5547': attribute type 21 has an invalid length. [ 596.825364][T25694] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5549'. [ 596.834871][T25694] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5549'. [ 596.857750][T25694] ip6gretap2: entered allmulticast mode [ 597.032192][T25703] lo speed is unknown, defaulting to 1000 [ 597.051996][T25703] lo speed is unknown, defaulting to 1000 [ 597.523726][T25720] xt_ecn: cannot match TCP bits for non-tcp packets [ 597.543237][T25722] netlink: 212360 bytes leftover after parsing attributes in process `syz.3.5559'. [ 597.641909][T25720] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 597.669730][T25720] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 597.744947][T25724] netlink: 165 bytes leftover after parsing attributes in process `syz.1.5560'. [ 597.806119][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5030 ms [ 597.814200][ C1] lec:lec_tx_timeout: lec0 [ 597.818890][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 597.842599][T25720] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 597.854037][T25720] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 598.004846][T25720] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 598.038550][T25720] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 598.089057][T25737] netlink: 'syz.1.5563': attribute type 1 has an invalid length. [ 598.147913][T25735] netem: incorrect gi model size [ 598.160936][T25735] netem: change failed [ 598.180314][T25720] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 598.190798][T25720] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 598.254453][T25737] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5563'. [ 598.364689][T25741] gre0: left promiscuous mode [ 598.373432][T25741] gre0: left allmulticast mode [ 598.388561][T25741] syz_tun: left promiscuous mode [ 598.398628][T25742] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5564'. [ 598.410950][T25741] 0X: left allmulticast mode [ 598.421696][T25741] macvtap0: left promiscuous mode [ 598.429332][T25741] vlan2: left promiscuous mode [ 598.434156][T25741] bond2: left promiscuous mode [ 598.439846][T25741] bridge2: left promiscuous mode [ 598.457157][T25741] vlan2: left allmulticast mode [ 598.467685][T25741] bond2: left allmulticast mode [ 598.476662][T25741] bridge2: left allmulticast mode [ 598.482554][T25741] bond5: left promiscuous mode [ 598.510275][T25741] bridge4: left promiscuous mode [ 598.515684][T25741] geneve3: left promiscuous mode [ 598.523022][T25741] geneve3: left allmulticast mode [ 598.529703][T25741] gretap2: left promiscuous mode [ 598.546343][T25741] net veth1_virt_wifi virt_wifi0: left promiscuous mode [ 598.553530][T25741] macsec2: left promiscuous mode [ 598.575229][T25741] xfrm1: left allmulticast mode [ 598.590350][T25741] geneve6: left allmulticast mode [ 598.704895][ T6825] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 598.713445][ T6825] netdevsim netdevsim3 eth0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 598.728857][T25753] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5567'. [ 598.746066][ T6825] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 598.765267][ T6825] netdevsim netdevsim3 eth1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 598.834822][ T6825] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 598.851962][ T6825] netdevsim netdevsim3 eth2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 598.873740][T25758] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 598.935852][ T6825] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 598.944344][ T6825] netdevsim netdevsim3 eth3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 598.974834][ T6825] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 598.988292][ T6825] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 599.020762][ T6825] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 599.036808][ T6825] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 599.085808][ T6825] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 599.111833][T25770] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5573'. [ 599.116925][ T6825] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 599.215103][ T6825] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 599.235301][ T6825] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 599.668002][T25807] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 599.813935][T25811] netlink: 'syz.3.5585': attribute type 12 has an invalid length. [ 599.924778][T25814] netlink: 'syz.4.5586': attribute type 2 has an invalid length. [ 599.956570][T25814] netlink: 'syz.4.5586': attribute type 2 has an invalid length. [ 600.071454][T25817] rdma_rxe: rxe_newlink: failed to add bond0 [ 600.425875][T25858] netlink: 'syz.1.5593': attribute type 1 has an invalid length. [ 600.493895][T25859] bond5: (slave bridge8): Enslaving as a backup interface with an up link [ 600.524455][T25858] bond5: (slave bridge9): Enslaving as a backup interface with a down link [ 600.569950][T25859] bond5: (slave bridge10): Enslaving as a backup interface with a down link [ 600.615706][ T25] block nbd0: Possible stuck request ffff888026278000: control (read@0,1024B). Runtime 420 seconds [ 600.626601][ T25] block nbd0: Possible stuck request ffff888026278200: control (read@1024,1024B). Runtime 420 seconds [ 600.637768][ T25] block nbd0: Possible stuck request ffff888026278400: control (read@2048,1024B). Runtime 420 seconds [ 600.648935][ T25] block nbd0: Possible stuck request ffff888026278600: control (read@3072,1024B). Runtime 420 seconds [ 600.931323][T25871] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 601.501537][T25907] syzkaller0: entered promiscuous mode [ 601.507378][T25907] syzkaller0: entered allmulticast mode [ 601.855792][T25918] __nla_validate_parse: 9 callbacks suppressed [ 601.855815][T25918] netlink: 308 bytes leftover after parsing attributes in process `syz.0.5607'. [ 601.892664][T25918] openvswitch: netlink: Flow actions attr not present in new flow. [ 602.044609][T25930] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5611'. [ 602.163825][T25933] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5612'. [ 602.178874][T25930] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5611'. [ 602.205024][T25937] netlink: 72 bytes leftover after parsing attributes in process `syz.3.5614'. [ 602.265362][T25939] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5615'. [ 602.343428][T25942] netlink: 'syz.4.5616': attribute type 3 has an invalid length. [ 602.351499][T25942] netlink: 'syz.4.5616': attribute type 1 has an invalid length. [ 602.359685][T25942] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5616'. [ 602.500906][T25947] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5620'. [ 602.603720][T25952] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5620'. [ 602.647332][T25952] netlink: 'syz.4.5620': attribute type 6 has an invalid length. [ 602.663662][T25952] netlink: 14585 bytes leftover after parsing attributes in process `syz.4.5620'. [ 602.825976][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 602.834040][ C1] lec:lec_tx_timeout: lec0 [ 602.838714][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 602.916848][T25963] 8021q: adding VLAN 0 to HW filter on device bond9 [ 602.988372][T25971] 5n: entered promiscuous mode [ 603.095417][T25972] : entered promiscuous mode [ 603.314737][T25983] vlan0: entered promiscuous mode [ 603.451221][T25989] netlink: 'syz.3.5633': attribute type 9 has an invalid length. [ 603.470290][T25989] netlink: 'syz.3.5633': attribute type 11 has an invalid length. [ 603.496768][T25989] netlink: 'syz.3.5633': attribute type 12 has an invalid length. [ 604.113075][T26034] ip6gretap3: entered allmulticast mode [ 604.539962][T26062] lo speed is unknown, defaulting to 1000 [ 604.558629][T26062] lo speed is unknown, defaulting to 1000 [ 604.664469][T26072] xt_hashlimit: size too large, truncated to 1048576 [ 604.829400][T26075] tipc: Started in network mode [ 604.860204][T26075] tipc: Node identity cab6e6d137b3, cluster identity 4711 [ 604.887540][T26075] tipc: Enabled bearer , priority 0 [ 605.051980][T26073] syzkaller0: entered promiscuous mode [ 605.058246][T26073] syzkaller0: entered allmulticast mode [ 605.064706][T26073] tipc: Resetting bearer [ 605.290733][T26085] syzkaller0: entered promiscuous mode [ 605.303233][T26085] syzkaller0: entered allmulticast mode [ 606.925147][T26071] tipc: Resetting bearer [ 607.053287][T26109] __nla_validate_parse: 14 callbacks suppressed [ 607.053308][T26109] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5665'. [ 607.070330][T26109] netlink: 43 bytes leftover after parsing attributes in process `syz.4.5665'. [ 607.079638][T26109] netlink: 'syz.4.5665': attribute type 6 has an invalid length. [ 607.087811][T26109] netlink: 'syz.4.5665': attribute type 5 has an invalid length. [ 607.095566][T26109] netlink: 43 bytes leftover after parsing attributes in process `syz.4.5665'. [ 607.845981][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 607.854131][ C1] lec:lec_tx_timeout: lec0 [ 607.858915][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 608.429523][T26071] tipc: Disabling bearer [ 608.456588][ T6784] tipc: Node number set to 4245022417 [ 608.756872][T26121] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5669'. [ 609.397745][T26159] netlink: 16158 bytes leftover after parsing attributes in process `syz.2.5679'. [ 609.566462][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 609.822678][T26165] lo speed is unknown, defaulting to 1000 [ 609.831630][T26165] lo speed is unknown, defaulting to 1000 [ 610.278250][T26168] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5682'. [ 611.829273][T26140] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 612.192050][T26198] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5693'. [ 612.361531][T26212] lo speed is unknown, defaulting to 1000 [ 612.393192][T26212] lo speed is unknown, defaulting to 1000 [ 612.414009][T26219] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5698'. [ 612.441047][T26218] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.5698'. [ 612.499295][T26224] syzkaller0: entered promiscuous mode [ 612.515229][T26224] syzkaller0: entered allmulticast mode [ 612.537279][T26226] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5700'. [ 612.550986][T26224] netlink: 248 bytes leftover after parsing attributes in process `syz.2.5701'. [ 612.866004][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 612.874087][ C1] lec:lec_tx_timeout: lec0 [ 612.878849][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 613.059735][T26251] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5708'. [ 613.190681][T26257] netlink: 'syz.4.5713': attribute type 1 has an invalid length. [ 613.788999][T26290] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5718'. [ 613.798295][T26290] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5718'. [ 613.859825][T26290] geneve4: entered promiscuous mode [ 613.886258][T26293] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5718'. [ 613.910853][T26294] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5719'. [ 614.108315][T26300] vlan7: entered allmulticast mode [ 614.122710][T26300] bridge0: entered allmulticast mode [ 614.145578][T26300] bridge5: port 1(vlan7) entered blocking state [ 614.161215][T26300] bridge5: port 1(vlan7) entered disabled state [ 614.190126][T26300] vlan7: entered promiscuous mode [ 614.208416][T26310] bridge: RTM_NEWNEIGH with unconfigured vlan 2 on bridge0 [ 614.274625][T26318] tipc: Enabled bearer , priority 0 [ 614.320131][T26318] tipc: Disabling bearer [ 614.590067][T26340] wg1: entered promiscuous mode [ 614.595025][T26340] wg1: entered allmulticast mode [ 614.680819][T26348] veth0_to_bridge: entered promiscuous mode [ 614.732179][T26350] veth0_to_bridge: left promiscuous mode [ 615.084398][T26370] netlink: 'syz.3.5739': attribute type 3 has an invalid length. [ 615.172603][T26374] netlink: 'syz.0.5740': attribute type 1 has an invalid length. [ 615.217196][T26374] bond10: entered promiscuous mode [ 615.222473][T26374] bond10: entered allmulticast mode [ 615.230534][T26374] 8021q: adding VLAN 0 to HW filter on device bond10 [ 615.261877][T26380] erspan2: entered allmulticast mode [ 615.978045][ T25] block nbd1: Possible stuck request ffff8880262e8800: control (read@0,1024B). Runtime 90 seconds [ 615.989437][ T25] block nbd1: Possible stuck request ffff8880262e8a00: control (read@1024,1024B). Runtime 90 seconds [ 616.000451][ T25] block nbd1: Possible stuck request ffff8880262e8c00: control (read@2048,1024B). Runtime 90 seconds [ 616.011455][ T25] block nbd1: Possible stuck request ffff8880262e8e00: control (read@3072,1024B). Runtime 90 seconds [ 616.533086][T26420] tipc: Resetting bearer [ 616.867727][T26434] xt_hashlimit: size too large, truncated to 1048576 [ 616.894205][T26434] xt_hashlimit: max too large, truncated to 1048576 [ 616.907011][T26433] lo speed is unknown, defaulting to 1000 [ 616.948508][T26433] lo speed is unknown, defaulting to 1000 [ 616.960847][T26437] netlink: 'syz.1.5755': attribute type 4 has an invalid length. [ 616.999249][T26430] bridge11: entered promiscuous mode [ 617.012433][T26430] bridge11: entered allmulticast mode [ 617.209847][T26441] __nla_validate_parse: 9 callbacks suppressed [ 617.209869][T26441] netlink: 180 bytes leftover after parsing attributes in process `syz.2.5756'. [ 617.261546][T26441] bridge0: port 1(veth0_to_bridge) entered blocking state [ 617.281124][T26441] bridge0: port 1(veth0_to_bridge) entered disabled state [ 617.302366][T26441] veth0_to_bridge: entered allmulticast mode [ 617.324239][T26441] veth0_to_bridge: entered promiscuous mode [ 617.486989][T26446] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.5757'. [ 617.609210][T26456] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5761'. [ 617.618913][T26456] netlink: 'syz.0.5761': attribute type 1 has an invalid length. [ 617.647127][T26456] batadv0: left promiscuous mode [ 617.652254][T26456] wg1: left promiscuous mode [ 617.667178][T26456] bond1: left promiscuous mode [ 617.672012][T26456] bridge1: left promiscuous mode [ 617.707665][T26456] macvtap1: left promiscuous mode [ 617.716413][T26456] macvtap2: left promiscuous mode [ 617.733860][T26456] macvtap3: left promiscuous mode [ 617.743925][T26463] netlink: 'syz.3.5764': attribute type 10 has an invalid length. [ 617.758212][T26456] bond7: left promiscuous mode [ 617.763039][T26463] netlink: 2 bytes leftover after parsing attributes in process `syz.3.5764'. [ 617.777998][T26456] bridge4: left promiscuous mode [ 617.783222][T26456] sit3: left promiscuous mode [ 617.788987][T26456] ip6gre1: left promiscuous mode [ 617.794872][T26456] gretap1: left promiscuous mode [ 617.805275][T26456] bond10: left promiscuous mode [ 617.851264][T26456] netlink: 68 bytes leftover after parsing attributes in process `syz.0.5761'. [ 617.886052][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 617.894151][ C1] lec:lec_tx_timeout: lec0 [ 617.899342][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 618.084358][T26479] lo speed is unknown, defaulting to 1000 [ 618.093457][T26479] lo speed is unknown, defaulting to 1000 [ 618.211593][T26495] netlink: 292 bytes leftover after parsing attributes in process `syz.2.5773'. [ 618.283071][T26497] netlink: 'syz.1.5774': attribute type 1 has an invalid length. [ 618.399783][T26497] bond6: entered promiscuous mode [ 618.411851][T26497] 8021q: adding VLAN 0 to HW filter on device bond6 [ 618.477681][T26502] macvtap2: entered allmulticast mode [ 618.520619][T26504] bond6: (slave bridge11): making interface the new active one [ 618.531930][T26504] bridge11: entered promiscuous mode [ 618.549606][T26504] bond6: (slave bridge11): Enslaving as an active interface with an up link [ 618.580637][T26507] netlink: 'syz.0.5776': attribute type 1 has an invalid length. [ 618.596087][T26507] netlink: 'syz.0.5776': attribute type 2 has an invalid length. [ 619.053878][T26522] sctp: [Deprecated]: syz.4.5780 (pid 26522) Use of int in maxseg socket option. [ 619.053878][T26522] Use struct sctp_assoc_value instead [ 619.069322][T26522] netlink: 'syz.4.5780': attribute type 30 has an invalid length. [ 619.077607][T26522] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5780'. [ 619.150943][T26522] bond5: option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4) [ 619.184607][T26522] bond5 (unregistering): Released all slaves [ 619.413770][T26537] FAULT_INJECTION: forcing a failure. [ 619.413770][T26537] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 619.442255][T26537] CPU: 1 UID: 0 PID: 26537 Comm: syz.0.5785 Not tainted syzkaller #0 PREEMPT(full) [ 619.442286][T26537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 619.442300][T26537] Call Trace: [ 619.442310][T26537] [ 619.442319][T26537] dump_stack_lvl+0xe8/0x150 [ 619.442356][T26537] should_fail_ex+0x412/0x560 [ 619.442391][T26537] _copy_from_user+0x2d/0xb0 [ 619.442425][T26537] ___sys_recvmsg+0x175/0x590 [ 619.442455][T26537] ? __pfx____sys_recvmsg+0x10/0x10 [ 619.442524][T26537] ? __fget_files+0x3a0/0x420 [ 619.442568][T26537] do_recvmmsg+0x334/0x800 [ 619.442602][T26537] ? __pfx_do_recvmmsg+0x10/0x10 [ 619.442638][T26537] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 619.442690][T26537] __x64_sys_recvmmsg+0x198/0x250 [ 619.442717][T26537] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 619.442753][T26537] do_syscall_64+0x14d/0xf80 [ 619.442784][T26537] ? trace_irq_disable+0x3b/0x150 [ 619.442823][T26537] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 619.442845][T26537] ? clear_bhb_loop+0x40/0x90 [ 619.442872][T26537] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 619.442893][T26537] RIP: 0033:0x7f521b19c799 [ 619.442914][T26537] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 619.442933][T26537] RSP: 002b:00007f52193f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 619.442955][T26537] RAX: ffffffffffffffda RBX: 00007f521b415fa0 RCX: 00007f521b19c799 [ 619.442972][T26537] RDX: 0000000000000001 RSI: 0000200000001b00 RDI: 0000000000000004 [ 619.442986][T26537] RBP: 00007f52193f6090 R08: 0000000000000000 R09: 0000000000000000 [ 619.443000][T26537] R10: 0000000000002120 R11: 0000000000000246 R12: 0000000000000001 [ 619.443013][T26537] R13: 00007f521b416038 R14: 00007f521b415fa0 R15: 00007ffd1d454348 [ 619.443047][T26537] [ 619.749846][T26535] netlink: 'syz.3.5784': attribute type 32 has an invalid length. [ 619.830041][T26545] bond13: entered promiscuous mode [ 619.845087][T26545] 8021q: adding VLAN 0 to HW filter on device bond13 [ 619.913428][T26545] Cannot find del_set index 49151 as target [ 620.117486][T26545] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 620.154285][T26545] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 620.159752][T26554] lo speed is unknown, defaulting to 1000 [ 620.229559][T26554] lo speed is unknown, defaulting to 1000 [ 620.253009][T26566] lo speed is unknown, defaulting to 1000 [ 620.748440][T26566] lo speed is unknown, defaulting to 1000 [ 620.781392][T26598] FAULT_INJECTION: forcing a failure. [ 620.781392][T26598] name failslab, interval 1, probability 0, space 0, times 0 [ 620.804465][T26598] CPU: 1 UID: 0 PID: 26598 Comm: syz.4.5800 Not tainted syzkaller #0 PREEMPT(full) [ 620.804496][T26598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 620.804510][T26598] Call Trace: [ 620.804520][T26598] [ 620.804529][T26598] dump_stack_lvl+0xe8/0x150 [ 620.804570][T26598] should_fail_ex+0x412/0x560 [ 620.804615][T26598] should_failslab+0xa8/0x100 [ 620.804651][T26598] __kmalloc_noprof+0xe8/0x760 [ 620.804674][T26598] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 620.804694][T26598] ? sock_kmalloc+0xd6/0x160 [ 620.804722][T26598] sock_kmalloc+0xd6/0x160 [ 620.804746][T26598] af_alg_alloc_areq+0x99/0x200 [ 620.804888][T26598] skcipher_recvmsg+0x332/0x1140 [ 620.804946][T26598] ? __lock_acquire+0x6b5/0x2cf0 [ 620.804989][T26598] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 620.805020][T26598] ? aa_sock_msg_perm+0xf1/0x1b0 [ 620.805051][T26598] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 620.805074][T26598] ? security_socket_recvmsg+0x7e/0x2c0 [ 620.805134][T26598] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 620.805166][T26598] sock_recvmsg+0x172/0x1b0 [ 620.805197][T26598] ____sys_recvmsg+0x1e6/0x4a0 [ 620.805230][T26598] ? __pfx_____sys_recvmsg+0x10/0x10 [ 620.805270][T26598] ? import_iovec+0x73/0xa0 [ 620.805307][T26598] ___sys_recvmsg+0x215/0x590 [ 620.805337][T26598] ? __pfx____sys_recvmsg+0x10/0x10 [ 620.805387][T26598] ? __fget_files+0x3a0/0x420 [ 620.805431][T26598] do_recvmmsg+0x334/0x800 [ 620.805463][T26598] ? __pfx_do_recvmmsg+0x10/0x10 [ 620.805498][T26598] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 620.805551][T26598] __x64_sys_recvmmsg+0x198/0x250 [ 620.805578][T26598] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 620.805614][T26598] do_syscall_64+0x14d/0xf80 [ 620.805651][T26598] ? trace_irq_disable+0x3b/0x150 [ 620.805681][T26598] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 620.805702][T26598] ? clear_bhb_loop+0x40/0x90 [ 620.805728][T26598] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 620.805748][T26598] RIP: 0033:0x7f764759c799 [ 620.805768][T26598] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 620.805787][T26598] RSP: 002b:00007f764851e028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 620.805810][T26598] RAX: ffffffffffffffda RBX: 00007f7647815fa0 RCX: 00007f764759c799 [ 620.805838][T26598] RDX: 0000000000000001 RSI: 0000200000001b00 RDI: 0000000000000004 [ 620.805851][T26598] RBP: 00007f764851e090 R08: 0000000000000000 R09: 0000000000000000 [ 620.805864][T26598] R10: 0000000000002120 R11: 0000000000000246 R12: 0000000000000001 [ 620.805876][T26598] R13: 00007f7647816038 R14: 00007f7647815fa0 R15: 00007ffcfed4dd08 [ 620.805907][T26598] [ 621.163201][T26607] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5803'. [ 621.241748][T26613] netlink: 624 bytes leftover after parsing attributes in process `syz.4.5804'. [ 621.255029][T26609] tipc: Enabled bearer , priority 0 [ 621.278687][T26613] netlink: 45 bytes leftover after parsing attributes in process `syz.4.5804'. [ 621.291336][T26609] tipc: Disabling bearer [ 621.698036][T26626] netlink: 'syz.3.5808': attribute type 11 has an invalid length. [ 621.942619][T26634] lo speed is unknown, defaulting to 1000 [ 621.962572][T26632] lo speed is unknown, defaulting to 1000 [ 621.970668][T26634] lo speed is unknown, defaulting to 1000 [ 622.459671][T26651] FAULT_INJECTION: forcing a failure. [ 622.459671][T26651] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 622.475224][T26651] CPU: 0 UID: 0 PID: 26651 Comm: syz.4.5814 Not tainted syzkaller #0 PREEMPT(full) [ 622.475253][T26651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 622.475266][T26651] Call Trace: [ 622.475274][T26651] [ 622.475284][T26651] dump_stack_lvl+0xe8/0x150 [ 622.475317][T26651] should_fail_ex+0x412/0x560 [ 622.475349][T26651] prepare_alloc_pages+0x22a/0x650 [ 622.475382][T26651] __alloc_frozen_pages_noprof+0x12f/0x380 [ 622.475412][T26651] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 622.475442][T26651] ? __pfx_policy_nodemask+0x10/0x10 [ 622.475469][T26651] ? rcu_is_watching+0x15/0xb0 [ 622.475498][T26651] ? rcu_is_watching+0x15/0xb0 [ 622.475529][T26651] alloc_pages_mpol+0x232/0x4a0 [ 622.475560][T26651] vma_alloc_folio_noprof+0xea/0x210 [ 622.475589][T26651] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 622.475626][T26651] do_wp_page+0x1204/0x5a00 [ 622.475718][T26651] ? __pfx_do_wp_page+0x10/0x10 [ 622.475744][T26651] ? do_raw_spin_lock+0x12b/0x2f0 [ 622.475768][T26651] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 622.475800][T26651] handle_mm_fault+0x1520/0x3310 [ 622.475844][T26651] ? handle_mm_fault+0xee/0x3310 [ 622.475885][T26651] ? __pfx_handle_mm_fault+0x10/0x10 [ 622.475917][T26651] ? follow_page_pte+0xd7f/0x1450 [ 622.475962][T26651] ? __pfx_follow_page_pte+0x10/0x10 [ 622.476004][T26651] __get_user_pages+0x165b/0x29d0 [ 622.476063][T26651] __gup_longterm_locked+0xdcf/0x1630 [ 622.476106][T26651] ? sanity_check_pinned_pages+0x1212/0x12d0 [ 622.476141][T26651] gup_fast_fallback+0x1d82/0x22e0 [ 622.476202][T26651] ? __pfx_gup_fast_fallback+0x10/0x10 [ 622.476239][T26651] ? pin_user_pages_fast+0x4d/0xb0 [ 622.476271][T26651] iov_iter_extract_pages+0x37b/0x5f0 [ 622.476311][T26651] extract_iter_to_sg+0xe62/0x2520 [ 622.476354][T26651] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 622.476398][T26651] ? __asan_memset+0x22/0x50 [ 622.476421][T26651] af_alg_get_rsgl+0x436/0x810 [ 622.476467][T26651] skcipher_recvmsg+0x3a3/0x1140 [ 622.476500][T26651] ? __lock_acquire+0x6b5/0x2cf0 [ 622.476540][T26651] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 622.476569][T26651] ? aa_sock_msg_perm+0xf1/0x1b0 [ 622.476598][T26651] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 622.476619][T26651] ? security_socket_recvmsg+0x7e/0x2c0 [ 622.476650][T26651] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 622.476680][T26651] sock_recvmsg+0x172/0x1b0 [ 622.476711][T26651] ____sys_recvmsg+0x1e6/0x4a0 [ 622.476750][T26651] ? __pfx_____sys_recvmsg+0x10/0x10 [ 622.476786][T26651] ? import_iovec+0x73/0xa0 [ 622.476817][T26651] ___sys_recvmsg+0x215/0x590 [ 622.476843][T26651] ? __pfx____sys_recvmsg+0x10/0x10 [ 622.476888][T26651] ? __fget_files+0x3a0/0x420 [ 622.476926][T26651] do_recvmmsg+0x334/0x800 [ 622.476961][T26651] ? __pfx_do_recvmmsg+0x10/0x10 [ 622.476994][T26651] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 622.477041][T26651] __x64_sys_recvmmsg+0x198/0x250 [ 622.477065][T26651] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 622.477098][T26651] do_syscall_64+0x14d/0xf80 [ 622.477125][T26651] ? trace_irq_disable+0x3b/0x150 [ 622.477152][T26651] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 622.477172][T26651] ? clear_bhb_loop+0x40/0x90 [ 622.477195][T26651] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 622.477215][T26651] RIP: 0033:0x7f764759c799 [ 622.477233][T26651] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 622.477250][T26651] RSP: 002b:00007f764851e028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 622.477271][T26651] RAX: ffffffffffffffda RBX: 00007f7647815fa0 RCX: 00007f764759c799 [ 622.477285][T26651] RDX: 0000000000000001 RSI: 0000200000001b00 RDI: 0000000000000004 [ 622.477298][T26651] RBP: 00007f764851e090 R08: 0000000000000000 R09: 0000000000000000 [ 622.477309][T26651] R10: 0000000000002120 R11: 0000000000000246 R12: 0000000000000001 [ 622.477321][T26651] R13: 00007f7647816038 R14: 00007f7647815fa0 R15: 00007ffcfed4dd08 [ 622.477352][T26651] [ 622.905941][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 622.914002][ C1] lec:lec_tx_timeout: lec0 [ 622.918746][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 622.949264][T26632] lo speed is unknown, defaulting to 1000 [ 623.199807][T26665] xt_bpf: check failed: parse error [ 623.406753][T26679] __nla_validate_parse: 4 callbacks suppressed [ 623.406773][T26679] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5819'. [ 623.835841][T26696] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5825'. [ 624.194226][T26716] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5830'. [ 624.234658][T26715] netlink: 296 bytes leftover after parsing attributes in process `syz.4.5831'. [ 624.332614][T26722] lo speed is unknown, defaulting to 1000 [ 624.362632][T26722] lo speed is unknown, defaulting to 1000 [ 624.798746][T26744] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5838'. [ 625.194552][T26758] netlink: 'syz.2.5843': attribute type 5 has an invalid length. [ 625.455735][T26775] netlink: 'syz.3.5847': attribute type 3 has an invalid length. [ 625.640647][T26785] netlink: 1 bytes leftover after parsing attributes in process `syz.2.5851'. [ 625.753195][T26787] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 625.813842][T26790] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5852'. [ 625.878565][T26795] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5852'. [ 625.909841][T26795] macvtap4: entered promiscuous mode [ 625.915475][T26795] macvtap4: entered allmulticast mode [ 625.921779][T26795] 8021q: adding VLAN 0 to HW filter on device macvtap4 [ 625.960446][T26797] FAULT_INJECTION: forcing a failure. [ 625.960446][T26797] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 625.994269][T26797] CPU: 1 UID: 0 PID: 26797 Comm: syz.2.5856 Not tainted syzkaller #0 PREEMPT(full) [ 625.994295][T26797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 625.994307][T26797] Call Trace: [ 625.994315][T26797] [ 625.994323][T26797] dump_stack_lvl+0xe8/0x150 [ 625.994356][T26797] should_fail_ex+0x412/0x560 [ 625.994387][T26797] prepare_alloc_pages+0x22a/0x650 [ 625.994419][T26797] __alloc_frozen_pages_noprof+0x12f/0x380 [ 625.994448][T26797] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 625.994477][T26797] ? __pfx_policy_nodemask+0x10/0x10 [ 625.994512][T26797] alloc_pages_mpol+0x232/0x4a0 [ 625.994542][T26797] vma_alloc_folio_noprof+0xea/0x210 [ 625.994570][T26797] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 625.994606][T26797] do_wp_page+0x1204/0x5a00 [ 625.994655][T26797] ? __pfx_do_wp_page+0x10/0x10 [ 625.994681][T26797] ? do_raw_spin_lock+0x12b/0x2f0 [ 625.994704][T26797] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 625.994734][T26797] handle_mm_fault+0x1520/0x3310 [ 625.994777][T26797] ? handle_mm_fault+0xee/0x3310 [ 625.994839][T26797] ? __pfx_handle_mm_fault+0x10/0x10 [ 625.994870][T26797] ? follow_page_pte+0xd7f/0x1450 [ 625.994910][T26797] ? __pfx_follow_page_pte+0x10/0x10 [ 625.994954][T26797] __get_user_pages+0x165b/0x29d0 [ 625.995016][T26797] __gup_longterm_locked+0xdcf/0x1630 [ 625.995060][T26797] ? sanity_check_pinned_pages+0x1212/0x12d0 [ 625.995098][T26797] gup_fast_fallback+0x1d82/0x22e0 [ 625.995160][T26797] ? __pfx_gup_fast_fallback+0x10/0x10 [ 625.995198][T26797] ? pin_user_pages_fast+0x4d/0xb0 [ 625.995231][T26797] iov_iter_extract_pages+0x37b/0x5f0 [ 625.995271][T26797] extract_iter_to_sg+0xe62/0x2520 [ 625.995315][T26797] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 625.995361][T26797] ? __asan_memset+0x22/0x50 [ 625.995383][T26797] af_alg_get_rsgl+0x436/0x810 [ 625.995431][T26797] skcipher_recvmsg+0x3a3/0x1140 [ 625.995463][T26797] ? __lock_acquire+0x6b5/0x2cf0 [ 625.995503][T26797] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 625.995534][T26797] ? aa_sock_msg_perm+0xf1/0x1b0 [ 625.995563][T26797] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 625.995585][T26797] ? security_socket_recvmsg+0x7e/0x2c0 [ 625.995635][T26797] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 625.995666][T26797] sock_recvmsg+0x172/0x1b0 [ 625.995697][T26797] ____sys_recvmsg+0x1e6/0x4a0 [ 625.995728][T26797] ? __pfx_____sys_recvmsg+0x10/0x10 [ 625.995766][T26797] ? import_iovec+0x73/0xa0 [ 625.995807][T26797] ___sys_recvmsg+0x215/0x590 [ 625.995835][T26797] ? __pfx____sys_recvmsg+0x10/0x10 [ 625.995886][T26797] ? __fget_files+0x3a0/0x420 [ 625.995925][T26797] do_recvmmsg+0x334/0x800 [ 625.995956][T26797] ? __pfx_do_recvmmsg+0x10/0x10 [ 625.995991][T26797] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 625.996040][T26797] __x64_sys_recvmmsg+0x198/0x250 [ 625.996065][T26797] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 625.996098][T26797] do_syscall_64+0x14d/0xf80 [ 625.996126][T26797] ? trace_irq_disable+0x3b/0x150 [ 625.996153][T26797] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 625.996174][T26797] ? clear_bhb_loop+0x40/0x90 [ 625.996198][T26797] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 625.996218][T26797] RIP: 0033:0x7fa755d9c799 [ 625.996237][T26797] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 625.996255][T26797] RSP: 002b:00007fa756c0b028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 625.996276][T26797] RAX: ffffffffffffffda RBX: 00007fa756015fa0 RCX: 00007fa755d9c799 [ 625.996292][T26797] RDX: 0000000000000001 RSI: 0000200000001b00 RDI: 0000000000000004 [ 625.996305][T26797] RBP: 00007fa756c0b090 R08: 0000000000000000 R09: 0000000000000000 [ 625.996317][T26797] R10: 0000000000002120 R11: 0000000000000246 R12: 0000000000000001 [ 625.996330][T26797] R13: 00007fa756016038 R14: 00007fa756015fa0 R15: 00007ffd93ff6888 [ 625.996362][T26797] [ 626.392855][T26801] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 626.807449][T26819] bond1: (slave geneve2): Releasing active interface [ 626.851534][T26819] bond2: (slave bridge2): Releasing active interface [ 626.884739][T26823] netlink: 212344 bytes leftover after parsing attributes in process `syz.1.5864'. [ 626.906260][T26819] bond5: (slave bridge4): Releasing backup interface [ 626.918092][T26819] bond6: (slave gretap1): Releasing active interface [ 626.933566][T26819] bond0: (slave geneve5): Releasing active interface [ 627.101173][T26826] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 627.243123][T26843] netlink: 212360 bytes leftover after parsing attributes in process `syz.0.5869'. [ 627.734328][T26869] bond6: entered allmulticast mode [ 627.749381][T26869] 8021q: adding VLAN 0 to HW filter on device bond6 [ 627.793188][T26883] netlink: 'syz.0.5879': attribute type 8 has an invalid length. [ 627.925992][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 627.934078][ C1] lec:lec_tx_timeout: lec0 [ 627.939109][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 628.359731][T26902] bond7: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 628.378796][T26902] bond7 (unregistering): Released all slaves [ 628.557157][T26905] geneve5: entered promiscuous mode [ 629.247446][T26931] __nla_validate_parse: 6 callbacks suppressed [ 629.247466][T26931] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5891'. [ 629.354530][T26937] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5895'. [ 629.391791][T26937] 8021q: adding VLAN 0 to HW filter on device bond7 [ 629.404677][T26937] tipc: Enabling of bearer rejected, failed to enable media [ 629.693781][T26958] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5901'. [ 630.694974][ T25] block nbd0: Possible stuck request ffff888026278000: control (read@0,1024B). Runtime 450 seconds [ 630.710776][ T25] block nbd0: Possible stuck request ffff888026278200: control (read@1024,1024B). Runtime 450 seconds [ 630.721976][ T25] block nbd0: Possible stuck request ffff888026278400: control (read@2048,1024B). Runtime 450 seconds [ 630.735945][ T25] block nbd0: Possible stuck request ffff888026278600: control (read@3072,1024B). Runtime 450 seconds [ 630.834019][T26992] netlink: 10 bytes leftover after parsing attributes in process `syz.1.5914'. [ 631.067722][T26999] tipc: Enabling of bearer rejected, failed to enable media [ 631.124455][T27005] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 631.364766][T27017] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5925'. [ 631.407653][ T5828] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 631.419380][ T5828] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 631.425817][T27017] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5925'. [ 631.437091][ T5828] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 631.448299][ T5828] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 631.458429][ T5828] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 631.526708][T27021] lo speed is unknown, defaulting to 1000 [ 631.534102][T27021] lo speed is unknown, defaulting to 1000 [ 631.715808][T27029] tipc: Enabled bearer , priority 0 [ 631.730536][T27029] syzkaller0: entered promiscuous mode [ 631.776763][T27029] syzkaller0: entered allmulticast mode [ 631.903417][T27032] tipc: Resetting bearer [ 631.938898][T27028] tipc: Resetting bearer [ 631.958453][T27028] tipc: Disabling bearer [ 631.998840][T27040] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5930'. [ 632.229849][T27021] chnl_net:caif_netlink_parms(): no params data found [ 632.331718][T27065] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.5937'. [ 632.406632][T27021] bridge0: port 1(bridge_slave_0) entered blocking state [ 632.414598][T27021] bridge0: port 1(bridge_slave_0) entered disabled state [ 632.422345][T27021] bridge_slave_0: entered allmulticast mode [ 632.430662][T27021] bridge_slave_0: entered promiscuous mode [ 632.458432][T27021] bridge0: port 2(bridge_slave_1) entered blocking state [ 632.467537][T27021] bridge0: port 2(bridge_slave_1) entered disabled state [ 632.475570][T27021] bridge_slave_1: entered allmulticast mode [ 632.490562][T27021] bridge_slave_1: entered promiscuous mode [ 632.537777][T27021] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 632.552332][T27021] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 632.636823][T27021] team0: Port device team_slave_0 added [ 632.648573][T27021] team0: Port device team_slave_1 added [ 632.696764][T27074] xt_hashlimit: invalid rate [ 632.718722][T27021] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 632.725923][T27021] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 632.753421][T27021] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 632.767080][T27021] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 632.774256][T27021] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 632.807674][T27021] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 632.946045][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 632.954159][ C1] lec:lec_tx_timeout: lec0 [ 632.958754][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 632.979022][T27021] hsr_slave_0: entered promiscuous mode [ 632.986355][T27021] hsr_slave_1: entered promiscuous mode [ 632.992841][T27021] debugfs: 'hsr0' already exists in 'hsr' [ 633.016221][T27021] Cannot create hsr debugfs directory [ 633.208891][T27084] tipc: Enabled bearer , priority 0 [ 633.294261][T27084] syzkaller0: entered promiscuous mode [ 633.301032][T27084] syzkaller0: entered allmulticast mode [ 633.307532][T27084] tipc: Resetting bearer [ 633.322618][T27083] tipc: Resetting bearer [ 633.329969][T27088] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5944'. [ 633.490699][ T5828] Bluetooth: hci1: command tx timeout [ 634.810532][ T5191] udevd[5191]: worker [5822] /devices/virtual/block/nbd0 timeout; kill it [ 634.823211][ T5191] udevd[5191]: seq 14826 '/devices/virtual/block/nbd0' killed [ 634.844823][ T5191] udevd[5191]: worker [5835] /devices/virtual/block/nbd1 is taking a long time [ 635.233479][T27083] tipc: Disabling bearer [ 635.240905][T27146] netlink: 'syz.3.5950': attribute type 1 has an invalid length. [ 635.331192][T27021] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 635.371013][T27021] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 635.448239][T27154] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5951'. [ 635.507914][T27021] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 635.526395][T27021] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 635.557526][T27161] netlink: 'syz.1.5955': attribute type 12 has an invalid length. [ 635.572044][ T5828] Bluetooth: hci1: command tx timeout [ 635.638755][T27021] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 635.661665][T27021] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 635.842364][T27021] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 635.854041][T27021] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 635.940098][T27172] netlink: 'syz.1.5955': attribute type 2 has an invalid length. [ 635.956245][T27172] netlink: 'syz.1.5955': attribute type 2 has an invalid length. [ 636.222667][T27021] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 636.300078][T27021] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 636.359389][T27021] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 636.422129][T27192] bond11: option lacp_active: invalid value (8) [ 636.436229][T27197] netlink: 256 bytes leftover after parsing attributes in process `syz.0.5964'. [ 636.445379][T27197] netlink: 72 bytes leftover after parsing attributes in process `syz.0.5964'. [ 636.463785][T27192] bond11 (unregistering): Released all slaves [ 636.488718][T27021] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 636.554383][T27201] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5965'. [ 636.583489][T27201] vlan0: entered promiscuous mode [ 636.590339][T27201] vlan0: entered allmulticast mode [ 636.595491][T27201] hsr_slave_1: entered allmulticast mode [ 636.800515][T27221] netlink: 'syz.3.5971': attribute type 1 has an invalid length. [ 636.840489][T27221] netlink: 96 bytes leftover after parsing attributes in process `syz.3.5971'. [ 636.841538][T27224] netlink: 'syz.2.5972': attribute type 4 has an invalid length. [ 636.869762][T27021] 8021q: adding VLAN 0 to HW filter on device bond0 [ 636.885643][T27227] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 636.894945][T27229] netlink: 'syz.2.5972': attribute type 4 has an invalid length. [ 636.909112][T27221] netlink: 'syz.3.5971': attribute type 1 has an invalid length. [ 636.927398][T27221] netlink: 'syz.3.5971': attribute type 8 has an invalid length. [ 636.938831][T27221] netlink: 606 bytes leftover after parsing attributes in process `syz.3.5971'. [ 636.964330][ T5949] lo speed is unknown, defaulting to 1000 [ 637.004831][T27021] 8021q: adding VLAN 0 to HW filter on device team0 [ 637.028035][ T5949] lo speed is unknown, defaulting to 1000 [ 637.057336][ T9834] lo speed is unknown, defaulting to 1000 [ 637.067610][T25831] bridge0: port 1(bridge_slave_0) entered blocking state [ 637.074816][T25831] bridge0: port 1(bridge_slave_0) entered forwarding state [ 637.120743][T25831] bridge0: port 2(bridge_slave_1) entered blocking state [ 637.128017][T25831] bridge0: port 2(bridge_slave_1) entered forwarding state [ 637.474782][T27256] sch_tbf: burst 32855 is lower than device lo mtu (11337746) ! [ 637.657101][ T51] Bluetooth: hci1: command tx timeout [ 637.694027][T27267] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5983'. [ 637.791198][T27276] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5987'. [ 637.800987][T27276] 8021q: VLANs not supported on bond0 [ 637.807956][T27276] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5987'. [ 637.913374][T27021] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 637.966302][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 637.974372][ C1] lec:lec_tx_timeout: lec0 [ 637.979031][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 638.093642][T27289] pim6reg: tun_chr_ioctl cmd 1074812118 [ 638.133788][T27292] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5990'. [ 638.407697][T27021] veth0_vlan: entered promiscuous mode [ 638.440880][T27021] veth1_vlan: entered promiscuous mode [ 638.456251][ T5828] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 638.477201][T27300] lo speed is unknown, defaulting to 1000 [ 638.490667][T27300] lo speed is unknown, defaulting to 1000 [ 638.540967][T27021] veth0_macvtap: entered promiscuous mode [ 638.568243][T27021] veth1_macvtap: entered promiscuous mode [ 638.604922][T27021] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 638.644104][T27021] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 638.693285][T25830] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 638.713055][T25830] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 638.744938][T25830] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 638.764586][T25830] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 638.793490][T27315] netlink: 'syz.3.5999': attribute type 1 has an invalid length. [ 638.970832][T25838] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 638.985010][T25838] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 639.078946][T27322] bridge6: entered allmulticast mode [ 639.150157][T25844] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 639.212740][T25844] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 639.728724][ T5828] Bluetooth: hci1: command tx timeout [ 640.654025][T27375] xt_policy: neither incoming nor outgoing policy selected [ 640.664758][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 640.675605][T27375] netlink: 'syz.2.6017': attribute type 83 has an invalid length. [ 640.675727][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 640.694903][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 640.705860][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 640.714772][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 640.759859][T27376] lo speed is unknown, defaulting to 1000 [ 640.768372][T27376] lo speed is unknown, defaulting to 1000 [ 640.830599][T27379] __nla_validate_parse: 7 callbacks suppressed [ 640.830622][T27379] netlink: 104 bytes leftover after parsing attributes in process `syz.1.6018'. [ 641.669965][T27417] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6031'. [ 641.717453][T27417] netlink: 'syz.0.6031': attribute type 30 has an invalid length. [ 641.725476][T27417] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6031'. [ 641.789172][T27428] netlink: 'syz.1.6034': attribute type 16 has an invalid length. [ 641.845224][T27376] chnl_net:caif_netlink_parms(): no params data found [ 641.907784][T27433] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6035'. [ 642.072085][T27446] rdma_rxe: rxe_newlink: failed to add bond0 [ 642.232183][T27376] bridge0: port 1(bridge_slave_0) entered blocking state [ 642.247404][T27376] bridge0: port 1(bridge_slave_0) entered disabled state [ 642.257940][T27376] bridge_slave_0: entered allmulticast mode [ 642.269804][T27376] bridge_slave_0: entered promiscuous mode [ 642.319554][T27376] bridge0: port 2(bridge_slave_1) entered blocking state [ 642.337736][T27453] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6040'. [ 642.347416][T27376] bridge0: port 2(bridge_slave_1) entered disabled state [ 642.354719][T27376] bridge_slave_1: entered allmulticast mode [ 642.371199][T27376] bridge_slave_1: entered promiscuous mode [ 642.379680][T27455] sit0: entered allmulticast mode [ 642.385887][T27457] sit0: left allmulticast mode [ 642.487189][T27376] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 642.517145][T27464] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6044'. [ 642.564413][T27376] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 642.679212][T27376] team0: Port device team_slave_0 added [ 642.705524][T27376] team0: Port device team_slave_1 added [ 642.776009][ T51] Bluetooth: hci3: command tx timeout [ 642.853957][T27476] IPVS: set_ctl: invalid protocol: 0 172.20.20.44:20001 [ 642.899297][T27376] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 642.919392][T27376] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 642.985980][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 642.994087][ C1] lec:lec_tx_timeout: lec0 [ 642.999865][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 643.004483][T27376] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 643.059368][T27376] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 643.079684][T27376] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 643.223390][T27376] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 643.805051][T27376] hsr_slave_0: entered promiscuous mode [ 643.813498][T27376] hsr_slave_1: entered promiscuous mode [ 643.820659][T27376] debugfs: 'hsr0' already exists in 'hsr' [ 643.836496][T27376] Cannot create hsr debugfs directory [ 644.275306][T27499] 8021q: VLANs not supported on ip_vti0 [ 644.403316][T27501] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6053'. [ 644.429847][T27506] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6055'. [ 644.457649][T27506] netlink: 'syz.0.6055': attribute type 10 has an invalid length. [ 644.465794][T27506] syz_tun: entered promiscuous mode [ 644.484284][T27506] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 644.583824][T27506] x_tables: duplicate underflow at hook 2 [ 644.801151][T27520] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 644.860563][ T51] Bluetooth: hci3: command tx timeout [ 645.371299][T27376] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 645.439120][T27376] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 645.469308][T27376] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 645.494628][T27376] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 645.494749][T27531] netlink: 632 bytes leftover after parsing attributes in process `syz.4.6063'. [ 645.559237][T27531] siw: device registration error -23 [ 645.654924][T27544] IPv6: NLM_F_CREATE should be specified when creating new route [ 645.792889][T27376] 8021q: adding VLAN 0 to HW filter on device bond0 [ 645.875408][T27376] 8021q: adding VLAN 0 to HW filter on device team0 [ 645.894135][T25830] bridge0: port 1(bridge_slave_0) entered blocking state [ 645.901351][T25830] bridge0: port 1(bridge_slave_0) entered forwarding state [ 645.940227][T27557] IPVS: Unknown mcast interface: hsr0 [ 645.948792][T27554] IPVS: Unknown mcast interface: hsr0 [ 645.967034][T27557] IPVS: stopping backup sync thread 22327 ... [ 645.974547][T27556] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6068'. [ 645.991005][T25831] bridge0: port 2(bridge_slave_1) entered blocking state [ 645.998194][T25831] bridge0: port 2(bridge_slave_1) entered forwarding state [ 646.018558][T27562] netlink: 388 bytes leftover after parsing attributes in process `syz.2.6070'. [ 646.049172][ T25] block nbd1: Possible stuck request ffff8880262e8800: control (read@0,1024B). Runtime 120 seconds [ 646.060603][ T25] block nbd1: Possible stuck request ffff8880262e8a00: control (read@1024,1024B). Runtime 120 seconds [ 646.072582][ T25] block nbd1: Possible stuck request ffff8880262e8c00: control (read@2048,1024B). Runtime 120 seconds [ 646.083692][ T25] block nbd1: Possible stuck request ffff8880262e8e00: control (read@3072,1024B). Runtime 120 seconds [ 646.099190][T27563] netlink: 56 bytes leftover after parsing attributes in process `syz.2.6070'. [ 646.168180][T27556] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6068'. [ 646.274785][T27569] netlink: 308 bytes leftover after parsing attributes in process `syz.4.6072'. [ 646.380414][T27569] lo speed is unknown, defaulting to 1000 [ 646.398556][T27569] lo speed is unknown, defaulting to 1000 [ 646.799205][T27596] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6076'. [ 646.819229][T27581] syzkaller0: entered promiscuous mode [ 646.906040][T27581] syzkaller0: entered allmulticast mode [ 646.926076][ T51] Bluetooth: hci3: command tx timeout [ 647.672222][T27604] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6078'. [ 648.604232][T27591] lo speed is unknown, defaulting to 1000 [ 648.642090][T27591] lo speed is unknown, defaulting to 1000 [ 648.761608][T27376] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 648.883277][T27609] sysfs: cannot create duplicate filename '/class/ieee80211/π,xb)% ]3DL̥!' [ 648.896384][T27611] netlink: 64 bytes leftover after parsing attributes in process `syz.2.6081'. [ 648.905449][T27609] CPU: 1 UID: 0 PID: 27609 Comm: syz.1.6080 Not tainted syzkaller #0 PREEMPT(full) [ 648.905479][T27609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 648.905494][T27609] Call Trace: [ 648.905503][T27609] [ 648.905513][T27609] dump_stack_lvl+0xe8/0x150 [ 648.905550][T27609] sysfs_warn_dup+0x8e/0xa0 [ 648.905585][T27609] sysfs_do_create_link_sd+0xc0/0x110 [ 648.905619][T27609] device_add_class_symlinks+0x1cf/0x240 [ 648.905760][T27609] device_add+0x475/0xb70 [ 648.905788][T27609] wiphy_register+0x1d73/0x2d50 [ 648.905913][T27609] ? __pfx_wiphy_register+0x10/0x10 [ 648.905937][T27609] ? __pfx_netdev_run_todo+0x10/0x10 [ 648.905997][T27609] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 648.906117][T27609] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 648.906205][T27609] ieee80211_register_hw+0x35f0/0x42c0 [ 648.906266][T27609] ? ieee80211_register_hw+0x1441/0x42c0 [ 648.906299][T27609] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 648.906339][T27609] ? __hrtimer_setup+0x181/0x200 [ 648.906377][T27609] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 648.906454][T27609] mac80211_hwsim_new_radio+0x3334/0x5b60 [ 648.906507][T27609] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 648.906527][T27609] ? kstrndup+0xbf/0x160 [ 648.906566][T27609] hwsim_new_radio_nl+0xf6a/0x1c00 [ 648.906612][T27609] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 648.906646][T27609] ? rcu_is_watching+0x15/0xb0 [ 648.906675][T27609] ? trace_kmalloc+0x2a/0x110 [ 648.906705][T27609] ? __nla_parse+0x40/0x60 [ 648.906774][T27609] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 648.906800][T27609] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 648.906832][T27609] genl_family_rcv_msg_doit+0x22a/0x330 [ 648.906863][T27609] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 648.906900][T27609] ? bpf_lsm_capable+0x9/0x20 [ 648.906925][T27609] ? security_capable+0x7e/0x2c0 [ 648.906986][T27609] genl_rcv_msg+0x61c/0x7a0 [ 648.907012][T27609] ? __pfx_genl_rcv_msg+0x10/0x10 [ 648.907030][T27609] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 648.907051][T27609] ? __lock_acquire+0x6b5/0x2cf0 [ 648.907086][T27609] netlink_rcv_skb+0x232/0x4b0 [ 648.907112][T27609] ? __pfx_genl_rcv_msg+0x10/0x10 [ 648.907133][T27609] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 648.907173][T27609] ? down_read+0x272/0x2e0 [ 648.907190][T27609] ? genl_rcv+0xd/0x40 [ 648.907210][T27609] genl_rcv+0x28/0x40 [ 648.907227][T27609] netlink_unicast+0x80f/0x9b0 [ 648.907257][T27609] ? __pfx_netlink_unicast+0x10/0x10 [ 648.907281][T27609] ? netlink_sendmsg+0x650/0xb40 [ 648.907305][T27609] ? skb_put+0x11b/0x210 [ 648.907335][T27609] netlink_sendmsg+0x813/0xb40 [ 648.907369][T27609] ? __pfx_netlink_sendmsg+0x10/0x10 [ 648.907398][T27609] ? aa_sock_msg_perm+0xf1/0x1b0 [ 648.907423][T27609] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 648.907446][T27609] ____sys_sendmsg+0x972/0x9f0 [ 648.907463][T27609] ? futex_unqueue+0x211/0x240 [ 648.907492][T27609] ? __pfx_____sys_sendmsg+0x10/0x10 [ 648.907518][T27609] ? import_iovec+0x73/0xa0 [ 648.907549][T27609] ___sys_sendmsg+0x2a5/0x360 [ 648.907573][T27609] ? __pfx____sys_sendmsg+0x10/0x10 [ 648.907597][T27609] ? futex_wait+0x29a/0x380 [ 648.907647][T27609] ? __fget_files+0x2a/0x420 [ 648.907673][T27609] ? __fget_files+0x3a0/0x420 [ 648.907708][T27609] __x64_sys_sendmsg+0x1bd/0x2a0 [ 648.907729][T27609] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 648.907755][T27609] ? rcu_is_watching+0x15/0xb0 [ 648.907792][T27609] do_syscall_64+0x14d/0xf80 [ 648.907817][T27609] ? trace_irq_disable+0x3b/0x150 [ 648.907843][T27609] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 648.907862][T27609] ? clear_bhb_loop+0x40/0x90 [ 648.907902][T27609] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 648.907921][T27609] RIP: 0033:0x7f9f3359c799 [ 648.907940][T27609] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 648.907971][T27609] RSP: 002b:00007f9f343fb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 648.908006][T27609] RAX: ffffffffffffffda RBX: 00007f9f33815fa0 RCX: 00007f9f3359c799 [ 648.908021][T27609] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004 [ 648.908033][T27609] RBP: 00007f9f33632c99 R08: 0000000000000000 R09: 0000000000000000 [ 648.908045][T27609] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 648.908057][T27609] R13: 00007f9f33816038 R14: 00007f9f33815fa0 R15: 00007fff555a8028 [ 648.908088][T27609] [ 649.335869][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 6330 ms [ 649.343940][ C1] lec:lec_tx_timeout: lec0 [ 649.351203][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 649.360198][ T51] Bluetooth: hci3: command tx timeout [ 649.404581][T27613] syzkaller1: entered promiscuous mode [ 649.410437][T27613] syzkaller1: entered allmulticast mode [ 649.421479][T27611] xt_TCPMSS: Only works on TCP SYN packets [ 649.449398][T27611] netlink: 84 bytes leftover after parsing attributes in process `syz.2.6081'. [ 649.460213][T27611] netlink: 175 bytes leftover after parsing attributes in process `syz.2.6081'. [ 649.784050][T27622] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 649.834036][T27376] veth0_vlan: entered promiscuous mode [ 649.854205][T27376] veth1_vlan: entered promiscuous mode [ 649.908635][T27376] veth0_macvtap: entered promiscuous mode [ 649.918476][T27623] lo speed is unknown, defaulting to 1000 [ 649.929807][T27376] veth1_macvtap: entered promiscuous mode [ 649.945080][T27623] lo speed is unknown, defaulting to 1000 [ 649.967582][T27376] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 650.000432][T27376] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 650.030855][T25838] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 650.062383][T25838] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 650.090435][T25838] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 650.134343][T25838] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 650.164270][T27628] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 650.172627][ T6784] IPVS: starting estimator thread 0... [ 650.267572][T27632] IPVS: using max 31 ests per chain, 74400 per kthread [ 650.339052][T25830] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 650.349780][T25830] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 650.468352][T25831] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 650.485620][T25831] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 650.666331][T27648] sctp: [Deprecated]: syz.3.6014 (pid 27648) Use of int in maxseg socket option. [ 650.666331][T27648] Use struct sctp_assoc_value instead [ 650.818145][T27650] vlan2: entered allmulticast mode [ 650.843257][T27650] macsec0: entered allmulticast mode [ 650.870227][T27650] veth1_macvtap: entered allmulticast mode [ 650.905115][T27660] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 651.088221][T27665] FAULT_INJECTION: forcing a failure. [ 651.088221][T27665] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 651.109259][T27665] CPU: 0 UID: 0 PID: 27665 Comm: syz.1.6097 Not tainted syzkaller #0 PREEMPT(full) [ 651.109290][T27665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 651.109303][T27665] Call Trace: [ 651.109312][T27665] [ 651.109322][T27665] dump_stack_lvl+0xe8/0x150 [ 651.109358][T27665] should_fail_ex+0x412/0x560 [ 651.109392][T27665] prepare_alloc_pages+0x22a/0x650 [ 651.109428][T27665] __alloc_frozen_pages_noprof+0x12f/0x380 [ 651.109460][T27665] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 651.109493][T27665] ? __pfx_policy_nodemask+0x10/0x10 [ 651.109532][T27665] alloc_pages_mpol+0x232/0x4a0 [ 651.109565][T27665] vma_alloc_folio_noprof+0xea/0x210 [ 651.109596][T27665] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 651.109636][T27665] do_wp_page+0x1204/0x5a00 [ 651.109690][T27665] ? __pfx_do_wp_page+0x10/0x10 [ 651.109719][T27665] ? do_raw_spin_lock+0x12b/0x2f0 [ 651.109745][T27665] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 651.109786][T27665] handle_mm_fault+0x1520/0x3310 [ 651.109834][T27665] ? handle_mm_fault+0xee/0x3310 [ 651.109873][T27665] ? __pfx_handle_mm_fault+0x10/0x10 [ 651.109906][T27665] ? follow_page_pte+0xd7f/0x1450 [ 651.109948][T27665] ? __pfx_follow_page_pte+0x10/0x10 [ 651.109992][T27665] __get_user_pages+0x165b/0x29d0 [ 651.110057][T27665] __gup_longterm_locked+0xdcf/0x1630 [ 651.110103][T27665] ? sanity_check_pinned_pages+0x1212/0x12d0 [ 651.110142][T27665] gup_fast_fallback+0x1d82/0x22e0 [ 651.110205][T27665] ? __pfx_gup_fast_fallback+0x10/0x10 [ 651.110245][T27665] ? pin_user_pages_fast+0x4d/0xb0 [ 651.110279][T27665] iov_iter_extract_pages+0x37b/0x5f0 [ 651.110322][T27665] extract_iter_to_sg+0xe62/0x2520 [ 651.110368][T27665] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 651.110416][T27665] ? __asan_memset+0x22/0x50 [ 651.110440][T27665] af_alg_get_rsgl+0x436/0x810 [ 651.110491][T27665] skcipher_recvmsg+0x3a3/0x1140 [ 651.110526][T27665] ? __lock_acquire+0x6b5/0x2cf0 [ 651.110586][T27665] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 651.110618][T27665] ? aa_sock_msg_perm+0xf1/0x1b0 [ 651.110649][T27665] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 651.110672][T27665] ? security_socket_recvmsg+0x7e/0x2c0 [ 651.110706][T27665] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 651.110740][T27665] sock_recvmsg+0x172/0x1b0 [ 651.110772][T27665] ____sys_recvmsg+0x1e6/0x4a0 [ 651.110813][T27665] ? __pfx_____sys_recvmsg+0x10/0x10 [ 651.110854][T27665] ? import_iovec+0x73/0xa0 [ 651.110892][T27665] ___sys_recvmsg+0x215/0x590 [ 651.110922][T27665] ? __pfx____sys_recvmsg+0x10/0x10 [ 651.110974][T27665] ? __fget_files+0x3a0/0x420 [ 651.111020][T27665] do_recvmmsg+0x334/0x800 [ 651.111053][T27665] ? __pfx_do_recvmmsg+0x10/0x10 [ 651.111091][T27665] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 651.111147][T27665] __x64_sys_recvmmsg+0x198/0x250 [ 651.111175][T27665] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 651.111214][T27665] do_syscall_64+0x14d/0xf80 [ 651.111245][T27665] ? trace_irq_disable+0x3b/0x150 [ 651.111276][T27665] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 651.111300][T27665] ? clear_bhb_loop+0x40/0x90 [ 651.111328][T27665] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 651.111351][T27665] RIP: 0033:0x7f9f3359c799 [ 651.111372][T27665] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 651.111391][T27665] RSP: 002b:00007f9f343fb028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 651.111414][T27665] RAX: ffffffffffffffda RBX: 00007f9f33815fa0 RCX: 00007f9f3359c799 [ 651.111430][T27665] RDX: 0000000000000001 RSI: 0000200000001b00 RDI: 0000000000000004 [ 651.111444][T27665] RBP: 00007f9f343fb090 R08: 0000000000000000 R09: 0000000000000000 [ 651.111457][T27665] R10: 0000000000002120 R11: 0000000000000246 R12: 0000000000000002 [ 651.111470][T27665] R13: 00007f9f33816038 R14: 00007f9f33815fa0 R15: 00007fff555a8028 [ 651.111506][T27665] [ 652.200780][T27700] lo speed is unknown, defaulting to 1000 [ 652.238016][T27700] lo speed is unknown, defaulting to 1000 [ 652.348212][T27708] __nla_validate_parse: 3 callbacks suppressed [ 652.348240][T27708] netlink: 27 bytes leftover after parsing attributes in process `syz.4.6110'. [ 652.438166][T27708] lo speed is unknown, defaulting to 1000 [ 652.678825][ T5828] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 652.690866][ T5828] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 652.703011][ T5828] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 652.719439][ T5828] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 652.728326][ T5828] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 653.005245][T27708] lo speed is unknown, defaulting to 1000 [ 653.056813][T27726] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6115'. [ 653.092767][T27715] lo speed is unknown, defaulting to 1000 [ 653.239871][T27724] lo speed is unknown, defaulting to 1000 [ 653.425616][T27715] lo speed is unknown, defaulting to 1000 [ 653.712026][T27724] lo speed is unknown, defaulting to 1000 [ 654.633285][T27715] chnl_net:caif_netlink_parms(): no params data found [ 654.766584][ T51] Bluetooth: hci2: command tx timeout [ 654.816807][T27715] bridge0: port 1(bridge_slave_0) entered blocking state [ 654.824100][T27715] bridge0: port 1(bridge_slave_0) entered disabled state [ 654.832840][T27715] bridge_slave_0: entered allmulticast mode [ 654.842538][T27715] bridge_slave_0: entered promiscuous mode [ 654.856548][T27715] bridge0: port 2(bridge_slave_1) entered blocking state [ 654.863795][T27715] bridge0: port 2(bridge_slave_1) entered disabled state [ 654.872950][T27715] bridge_slave_1: entered allmulticast mode [ 654.881177][T27715] bridge_slave_1: entered promiscuous mode [ 654.984995][T27715] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 655.006518][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5650 ms [ 655.014678][ C1] lec:lec_tx_timeout: lec0 [ 655.020254][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 655.039740][T27715] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 655.089234][T27767] netlink: 68 bytes leftover after parsing attributes in process `syz.3.6124'. [ 655.108492][T27767] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6124'. [ 655.119302][T27715] team0: Port device team_slave_0 added [ 655.138507][T27715] team0: Port device team_slave_1 added [ 655.246569][T27715] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 655.253572][T27715] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 655.298785][T27715] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 655.361110][T27767] netlink: 23 bytes leftover after parsing attributes in process `syz.3.6124'. [ 655.420558][T27715] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 655.436419][T27715] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 655.489328][T27715] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 655.697103][T27715] hsr_slave_0: entered promiscuous mode [ 655.707563][T27715] hsr_slave_1: entered promiscuous mode [ 655.714106][T27715] debugfs: 'hsr0' already exists in 'hsr' [ 655.731673][T27715] Cannot create hsr debugfs directory [ 655.761473][T27790] IPVS: sync thread started: state = BACKUP, mcast_ifn = team0, syncid = 786440, id = 0 [ 655.868419][T27796] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6129'. [ 655.941917][T27796] dvmrp3: entered allmulticast mode [ 655.971146][T27798] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6131'. [ 656.185649][T27715] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 656.218605][T27715] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 656.333927][T27715] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 656.375770][T27715] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 656.444067][T27815] syzkaller0: entered promiscuous mode [ 656.449746][T27815] syzkaller0: entered allmulticast mode [ 656.524588][T27816] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6134'. [ 656.567425][T27715] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 656.577412][T27715] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 656.628204][T27818] netlink: 'syz.3.6136': attribute type 4 has an invalid length. [ 656.659351][T27818] netlink: 'syz.3.6136': attribute type 4 has an invalid length. [ 656.669974][T27715] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 656.685038][T27823] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6139'. [ 656.705056][T27715] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 656.713895][T27825] netlink: 1 bytes leftover after parsing attributes in process `syz.0.6138'. [ 656.725806][T27821] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 656.846140][ T51] Bluetooth: hci2: command tx timeout [ 656.925670][T27825] bridge0: port 3(team0) entered disabled state [ 656.984224][T27825] team0 (unregistering): left allmulticast mode [ 656.994794][T27825] team_slave_0: left allmulticast mode [ 657.001045][T27825] team_slave_1: left allmulticast mode [ 657.007508][T27825] team0 (unregistering): left promiscuous mode [ 657.013788][T27825] team_slave_0: left promiscuous mode [ 657.020191][T27825] team_slave_1: left promiscuous mode [ 657.026419][T27825] bridge8: left promiscuous mode [ 657.031909][T27825] bridge0: port 3(team0) entered disabled state [ 657.053741][T27825] team0 (unregistering): Port device team_slave_0 removed [ 657.064889][T27825] team0 (unregistering): Port device team_slave_1 removed [ 657.101182][T27825] team0 (unregistering): Port device bridge8 removed [ 657.237847][T25844] veth0_to_bridge: left allmulticast mode [ 657.243696][T25844] veth0_to_bridge: left promiscuous mode [ 657.264893][T25844] bridge0: port 1(veth0_to_bridge) entered disabled state [ 657.302484][T25844] dvmrp0: left allmulticast mode [ 657.419718][T27857] __nla_validate_parse: 3 callbacks suppressed [ 657.419741][T27857] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6145'. [ 657.735505][T25844] bond1 (unregistering): (slave gretap1): Releasing active interface [ 657.755111][T25844] batman_adv: batadv0: Removing interface: gretap2 [ 657.818828][T25844] bond4 (unregistering): (slave geneve4): Releasing active interface [ 657.835477][T25844] bond3 (unregistering): (slave geneve3): Releasing active interface [ 657.951900][T25844] team0: Port device bridge0 removed [ 658.214267][T25844] bond0 (unregistering): left allmulticast mode [ 658.221285][T25844] bond_slave_0: left allmulticast mode [ 658.227484][T25844] bond_slave_1: left allmulticast mode [ 658.233013][T25844] bridge_slave_1: left allmulticast mode [ 658.239422][T25844] dummy0: left allmulticast mode [ 658.245309][T25844] bond0 (unregistering): left promiscuous mode [ 658.252215][T25844] bond_slave_0: left promiscuous mode [ 658.260122][T25844] bond_slave_1: left promiscuous mode [ 658.265662][T25844] bridge_slave_1: left promiscuous mode [ 658.272077][T25844] dummy0: left promiscuous mode [ 658.301081][T25844] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 658.312792][T25844] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 658.325339][T25844] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 658.340892][T25844] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 658.354921][T25844] bond0 (unregistering): Released all slaves [ 658.365863][T25844] bond1 (unregistering): Released all slaves [ 658.381025][T25844] bond2 (unregistering): Released all slaves [ 658.397454][T25844] bond3 (unregistering): Released all slaves [ 658.419922][T25844] bond4 (unregistering): Released all slaves [ 658.434558][T25844] bond5 (unregistering): Released all slaves [ 658.453389][T25844] bond6 (unregistering): Released all slaves [ 658.473175][T25844] bond7 (unregistering): (slave batadv2): Releasing active interface [ 658.484201][T25844] bond7 (unregistering): Released all slaves [ 658.500277][T25844] bond8 (unregistering): Released all slaves [ 658.515555][T25844] bond9 (unregistering): Released all slaves [ 658.531634][T25844] bond10 (unregistering): (slave bond11): Releasing backup interface [ 658.544355][T25844] bond10 (unregistering): Released all slaves [ 658.561943][T25844] bond11 (unregistering): Released all slaves [ 658.577224][T25844] bond12 (unregistering): Released all slaves [ 658.593374][T25844] bond13 (unregistering): Released all slaves [ 658.617771][T25844] bond14 (unregistering): Released all slaves [ 658.926034][ T51] Bluetooth: hci2: command tx timeout [ 658.984132][T27715] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 659.041626][T25844] 5n: left promiscuous mode [ 659.100284][T27715] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 659.126373][T27715] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 659.150088][T27715] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 659.196988][T25844] tipc: Left network mode [ 659.474547][T27715] 8021q: adding VLAN 0 to HW filter on device bond0 [ 659.555109][T27715] 8021q: adding VLAN 0 to HW filter on device team0 [ 659.577912][T25819] bridge0: port 1(bridge_slave_0) entered blocking state [ 659.585122][T25819] bridge0: port 1(bridge_slave_0) entered forwarding state [ 659.602603][T27913] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6160'. [ 659.622122][T25831] bridge0: port 2(bridge_slave_1) entered blocking state [ 659.629327][T25831] bridge0: port 2(bridge_slave_1) entered forwarding state [ 659.723035][T27909] lo speed is unknown, defaulting to 1000 [ 659.738467][T27909] lo speed is unknown, defaulting to 1000 [ 659.884877][T27922] netlink: 212360 bytes leftover after parsing attributes in process `syz.1.6162'. [ 660.290480][T27715] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 660.473070][T27715] veth0_vlan: entered promiscuous mode [ 660.549817][T27952] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6168'. [ 660.775983][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5750 ms [ 660.784084][ C1] lec:lec_tx_timeout: lec0 [ 660.791329][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 660.803386][ T25] block nbd0: Possible stuck request ffff888026278000: control (read@0,1024B). Runtime 480 seconds [ 660.815526][ T25] block nbd0: Possible stuck request ffff888026278200: control (read@1024,1024B). Runtime 480 seconds [ 660.826917][ T25] block nbd0: Possible stuck request ffff888026278400: control (read@2048,1024B). Runtime 480 seconds [ 660.829606][T27952] netlink: 'syz.1.6168': attribute type 11 has an invalid length. [ 660.838031][ T25] block nbd0: Possible stuck request ffff888026278600: control (read@3072,1024B). Runtime 480 seconds [ 661.006526][ T51] Bluetooth: hci2: command tx timeout [ 661.025367][T27715] veth1_vlan: entered promiscuous mode [ 661.050233][T25844] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 661.059066][T25844] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 661.070508][T25844] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 661.078778][T25844] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 661.169249][T25844] team_slave_0: left promiscuous mode [ 661.175074][T25844] team_slave_1: left promiscuous mode [ 661.183113][T25844] veth1_macvtap: left promiscuous mode [ 661.189414][T25844] veth0_macvtap: left promiscuous mode [ 661.322301][T27960] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6169'. [ 661.697039][T25844] team0 (unregistering): Port device team_slave_1 removed [ 661.723252][T25844] team0 (unregistering): Port device team_slave_0 removed [ 661.843676][T25838] smc: removing ib device sqz0 [ 661.953868][ T5885] lo speed is unknown, defaulting to 1000 [ 661.960042][ T5885] sqz0: Port: 1 Link DOWN [ 662.515274][T27967] bond1: (slave veth3): Enslaving as an active interface with a down link [ 662.710336][T27969] bond1: (slave veth5): Enslaving as an active interface with a down link [ 662.725812][T27715] veth0_macvtap: entered promiscuous mode [ 662.833177][T27715] veth1_macvtap: entered promiscuous mode [ 662.940531][T27978] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6175'. [ 663.074984][T27715] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 663.103686][T27715] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 663.121364][T27980] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6174'. [ 663.146082][ T6828] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 663.155052][T25831] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 663.200449][T25831] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 663.226738][T25831] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 663.404462][ T6828] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 663.421096][T27988] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6178'. [ 663.432337][ T6828] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 663.656542][T25831] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 663.673237][T25831] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 663.918611][T28001] netlink: 236 bytes leftover after parsing attributes in process `syz.4.6179'. [ 664.265796][T28008] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6180'. [ 664.409018][T28013] tipc: Started in network mode [ 664.426455][T28013] tipc: Node identity 4, cluster identity 4711 [ 664.432735][T28013] tipc: Node number set to 4 [ 664.463013][T28013] xt_connbytes: Forcing CT accounting to be enabled [ 664.476305][T28013] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 664.517458][T28015] netlink: 212360 bytes leftover after parsing attributes in process `syz.1.6183'. [ 664.651934][T28017] syzkaller0: entered promiscuous mode [ 664.689666][T28017] syzkaller0: entered allmulticast mode [ 665.806477][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 665.814569][ C1] lec:lec_tx_timeout: lec0 [ 665.819679][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 665.947585][T28039] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6192'. [ 665.970192][T25844] IPVS: stop unused estimator thread 0... [ 665.983489][T28039] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6192'. [ 666.008663][T28041] tipc: Enabled bearer , priority 0 [ 666.030949][T28041] syzkaller0: entered promiscuous mode [ 666.045006][T28041] syzkaller0: entered allmulticast mode [ 666.074108][T28039] netlink: 'syz.2.6192': attribute type 33 has an invalid length. [ 666.106998][T28039] netlink: 152 bytes leftover after parsing attributes in process `syz.2.6192'. [ 666.179115][T28039] `: renamed from team0 (while UP) [ 666.199306][T28045] netlink: 'syz.3.6194': attribute type 21 has an invalid length. [ 666.216874][T28041] tipc: Resetting bearer [ 666.234960][T28045] netlink: 164 bytes leftover after parsing attributes in process `syz.3.6194'. [ 666.301468][T28040] tipc: Resetting bearer [ 666.424177][T28040] tipc: Disabling bearer [ 666.465436][ T5828] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 666.477526][T28049] delete_channel: no stack [ 666.497101][ T5828] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 666.506900][ T5828] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 666.515213][ T5828] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 666.529148][ T5828] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 666.586720][T28037] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 666.606887][T28053] tipc: Started in network mode [ 666.611837][T28053] tipc: Node identity 9a110fd5d63, cluster identity 4711 [ 666.659160][T28053] tipc: Enabled bearer , priority 0 [ 666.702042][T28058] syzkaller0: entered promiscuous mode [ 666.717048][T28058] syzkaller0: entered allmulticast mode [ 666.858415][T15919] bond0: (slave syz_tun): Releasing backup interface [ 666.900219][T28052] tipc: Resetting bearer [ 666.910807][T28063] rdma_rxe: rxe_newlink: failed to add bond0 [ 666.948271][T28052] tipc: Disabling bearer [ 667.045516][T28063] bond0 (unregistering): left allmulticast mode [ 667.066281][T28063] bond_slave_0: left allmulticast mode [ 667.071834][T28063] bond_slave_1: left allmulticast mode [ 667.089223][T28063] : left allmulticast mode [ 667.094297][T28063] mac80211_hwsim hwsim39 wlan1: left allmulticast mode [ 667.101729][T28063] bond0 (unregistering): left promiscuous mode [ 667.122266][T28063] bond_slave_0: left promiscuous mode [ 667.132584][T28063] bond_slave_1: left promiscuous mode [ 667.141458][T28063] : left promiscuous mode [ 667.147316][T28063] mac80211_hwsim hwsim39 wlan1: left promiscuous mode [ 667.148573][T28076] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 667.208823][T28063] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 667.226456][T28063] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 667.240347][T28063] bond0 (unregistering): (slave ): Releasing backup interface [ 667.250968][T28063] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 667.266121][T28076] block nbd5: server does not support multiple connections per device. [ 667.278541][T28076] block nbd5: shutting down sockets [ 667.280490][T28063] bond0 (unregistering): Released all slaves [ 667.528384][T28083] veth1_vlan: entered allmulticast mode [ 667.578235][T28083] netlink: 'syz.4.6206': attribute type 5 has an invalid length. [ 667.620792][T28050] chnl_net:caif_netlink_parms(): no params data found [ 668.038514][T28050] bridge0: port 1(bridge_slave_0) entered blocking state [ 668.046884][T28050] bridge0: port 1(bridge_slave_0) entered disabled state [ 668.054180][T28050] bridge_slave_0: entered allmulticast mode [ 668.063399][T28050] bridge_slave_0: entered promiscuous mode [ 668.072392][T28050] bridge0: port 2(bridge_slave_1) entered blocking state [ 668.085543][T28050] bridge0: port 2(bridge_slave_1) entered disabled state [ 668.093517][T28050] bridge_slave_1: entered allmulticast mode [ 668.101889][T28050] bridge_slave_1: entered promiscuous mode [ 668.214072][T28050] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 668.259959][T28050] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 668.340184][T28050] team0: Port device team_slave_0 added [ 668.348763][T28105] __nla_validate_parse: 8 callbacks suppressed [ 668.348780][T28105] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6214'. [ 668.368071][T28106] netlink: 212360 bytes leftover after parsing attributes in process `syz.1.6213'. [ 668.399572][T28110] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6211'. [ 668.411037][T28050] team0: Port device team_slave_1 added [ 668.478376][T28105] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6214'. [ 668.499746][T28050] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 668.517252][T28050] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 668.573617][T28050] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 668.604549][T28050] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 668.609412][ T51] Bluetooth: hci5: command tx timeout [ 668.619847][T28050] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 668.648864][T28050] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 668.713472][T28050] hsr_slave_0: entered promiscuous mode [ 668.723645][T28050] hsr_slave_1: entered promiscuous mode [ 668.730345][T28050] debugfs: 'hsr0' already exists in 'hsr' [ 668.736255][T28050] Cannot create hsr debugfs directory [ 668.872274][T28120] bridge1: entered promiscuous mode [ 668.878513][T28120] bridge1: entered allmulticast mode [ 669.147380][T28134] geneve0: entered promiscuous mode [ 669.168702][T28134] batadv_slave_0: entered promiscuous mode [ 669.188315][T28134] batadv_slave_0: left promiscuous mode [ 669.202688][T28134] geneve0: left promiscuous mode [ 669.312815][T28147] netlink: 212360 bytes leftover after parsing attributes in process `syz.4.6225'. [ 669.412245][T28050] [ 669.414640][T28050] ====================================================== [ 669.421680][T28050] WARNING: possible circular locking dependency detected [ 669.428753][T28050] syzkaller #0 Not tainted [ 669.433186][T28050] ------------------------------------------------------ [ 669.440223][T28050] syz-executor/28050 is trying to acquire lock: [ 669.446486][T28050] ffff88801b6dda20 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_unlink_sibling+0x71/0x180 [ 669.457061][T28050] [ 669.457061][T28050] but task is already holding lock: [ 669.464449][T28050] ffff88801b6dd988 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x3d/0x130 [ 669.474733][T28050] [ 669.474733][T28050] which lock already depends on the new lock. [ 669.474733][T28050] [ 669.485153][T28050] [ 669.485153][T28050] the existing dependency chain (in reverse order) is: [ 669.494175][T28050] [ 669.494175][T28050] -> #10 (&root->kernfs_rwsem){++++}-{4:4}: [ 669.502275][T28050] down_write+0x96/0x200 [ 669.507056][T28050] kernfs_add_one+0x41/0x5c0 [ 669.512195][T28050] kernfs_create_dir_ns+0xde/0x130 [ 669.517881][T28050] internal_create_group+0x425/0x1180 [ 669.523855][T28050] cpuhp_invoke_callback+0x445/0x860 [ 669.529724][T28050] cpuhp_issue_call+0x430/0x7a0 [ 669.535114][T28050] __cpuhp_setup_state_cpuslocked+0x3d9/0x6b0 [ 669.541727][T28050] __cpuhp_setup_state+0x3f/0x60 [ 669.547225][T28050] do_one_initcall+0x250/0x8d0 [ 669.552532][T28050] do_initcall_level+0x104/0x190 [ 669.558123][T28050] do_initcalls+0x59/0xa0 [ 669.562981][T28050] kernel_init_freeable+0x2a6/0x3e0 [ 669.568716][T28050] kernel_init+0x1d/0x1d0 [ 669.573577][T28050] ret_from_fork+0x51e/0xb90 [ 669.578730][T28050] ret_from_fork_asm+0x1a/0x30 [ 669.584035][T28050] [ 669.584035][T28050] -> #9 (cpuhp_state_mutex){+.+.}-{4:4}: [ 669.591876][T28050] [ 669.591876][T28050] -> #8 (cpu_hotplug_lock){++++}-{0:0}: [ 669.599628][T28050] cpus_read_lock+0x42/0x160 [ 669.604755][T28050] static_key_slow_inc+0x12/0x30 [ 669.610272][T28050] udp_tunnel_encap_enable+0xce/0x110 [ 669.616252][T28050] udp_lib_setsockopt+0x5fc/0x6f0 [ 669.621816][T28050] udpv6_setsockopt+0x67/0xb0 [ 669.627073][T28050] do_sock_setsockopt+0x17c/0x1b0 [ 669.632658][T28050] __x64_sys_setsockopt+0x13d/0x1b0 [ 669.638407][T28050] do_syscall_64+0x14d/0xf80 [ 669.643538][T28050] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 669.649968][T28050] [ 669.649968][T28050] -> #7 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 669.657721][T28050] lock_sock_nested+0x41/0x100 [ 669.663030][T28050] inet_shutdown+0x6a/0x390 [ 669.668170][T28050] nbd_mark_nsock_dead+0x2e9/0x560 [ 669.673888][T28050] sock_shutdown+0x15e/0x260 [ 669.679018][T28050] nbd_clear_sock+0x24/0x170 [ 669.684138][T28050] nbd_config_put+0x2dd/0x580 [ 669.689361][T28050] nbd_genl_connect+0x19d5/0x1cf0 [ 669.694932][T28050] genl_family_rcv_msg_doit+0x22a/0x330 [ 669.701014][T28050] genl_rcv_msg+0x61c/0x7a0 [ 669.706145][T28050] netlink_rcv_skb+0x232/0x4b0 [ 669.711477][T28050] genl_rcv+0x28/0x40 [ 669.716013][T28050] netlink_unicast+0x80f/0x9b0 [ 669.721356][T28050] netlink_sendmsg+0x813/0xb40 [ 669.726681][T28050] ____sys_sendmsg+0x972/0x9f0 [ 669.732010][T28050] ___sys_sendmsg+0x2a5/0x360 [ 669.737238][T28050] __x64_sys_sendmsg+0x1bd/0x2a0 [ 669.742746][T28050] do_syscall_64+0x14d/0xf80 [ 669.747896][T28050] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 669.754335][T28050] [ 669.754335][T28050] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 669.762010][T28050] __mutex_lock+0x19f/0x1300 [ 669.767169][T28050] nbd_queue_rq+0x37b/0x1100 [ 669.772318][T28050] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 669.778543][T28050] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 669.785452][T28050] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 669.791977][T28050] blk_mq_run_hw_queue+0x348/0x4f0 [ 669.797716][T28050] blk_mq_dispatch_list+0xd16/0xe10 [ 669.803495][T28050] blk_mq_flush_plug_list+0x48d/0x570 [ 669.809439][T28050] __blk_flush_plug+0x3ed/0x4d0 [ 669.814913][T28050] __submit_bio+0x28d/0x580 [ 669.819969][T28050] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 669.826155][T28050] block_read_full_folio+0x599/0x830 [ 669.832027][T28050] filemap_read_folio+0x137/0x3b0 [ 669.837595][T28050] do_read_cache_folio+0x358/0x590 [ 669.843251][T28050] read_part_sector+0xb6/0x2b0 [ 669.848622][T28050] adfspart_check_ICS+0xa5/0xa40 [ 669.854096][T28050] bdev_disk_changed+0x7ba/0x1550 [ 669.859650][T28050] blkdev_get_whole+0x380/0x510 [ 669.865097][T28050] bdev_open+0x31e/0xd30 [ 669.869868][T28050] blkdev_open+0x470/0x610 [ 669.874839][T28050] do_dentry_open+0x785/0x14e0 [ 669.880139][T28050] vfs_open+0x3b/0x340 [ 669.884753][T28050] path_openat+0x2e08/0x3860 [ 669.889917][T28050] do_file_open+0x23e/0x4a0 [ 669.894984][T28050] do_sys_openat2+0x113/0x200 [ 669.900215][T28050] __x64_sys_openat+0x138/0x170 [ 669.905616][T28050] do_syscall_64+0x14d/0xf80 [ 669.910767][T28050] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 669.917201][T28050] [ 669.917201][T28050] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 669.924442][T28050] __mutex_lock+0x19f/0x1300 [ 669.929584][T28050] nbd_queue_rq+0xc6/0x1100 [ 669.934631][T28050] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 669.940705][T28050] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 669.947572][T28050] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 669.954085][T28050] blk_mq_run_hw_queue+0x348/0x4f0 [ 669.959739][T28050] blk_mq_dispatch_list+0xd16/0xe10 [ 669.965485][T28050] blk_mq_flush_plug_list+0x48d/0x570 [ 669.971413][T28050] __blk_flush_plug+0x3ed/0x4d0 [ 669.976815][T28050] __submit_bio+0x28d/0x580 [ 669.981874][T28050] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 669.988048][T28050] block_read_full_folio+0x599/0x830 [ 669.993880][T28050] filemap_read_folio+0x137/0x3b0 [ 669.999442][T28050] do_read_cache_folio+0x358/0x590 [ 670.005103][T28050] read_part_sector+0xb6/0x2b0 [ 670.010408][T28050] adfspart_check_ICS+0xa5/0xa40 [ 670.015894][T28050] bdev_disk_changed+0x7ba/0x1550 [ 670.021461][T28050] blkdev_get_whole+0x380/0x510 [ 670.026855][T28050] bdev_open+0x31e/0xd30 [ 670.031649][T28050] blkdev_open+0x470/0x610 [ 670.036617][T28050] do_dentry_open+0x785/0x14e0 [ 670.041941][T28050] vfs_open+0x3b/0x340 [ 670.046552][T28050] path_openat+0x2e08/0x3860 [ 670.051690][T28050] do_file_open+0x23e/0x4a0 [ 670.056758][T28050] do_sys_openat2+0x113/0x200 [ 670.062029][T28050] __x64_sys_openat+0x138/0x170 [ 670.067424][T28050] do_syscall_64+0x14d/0xf80 [ 670.072554][T28050] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 670.078979][T28050] [ 670.078979][T28050] -> #4 (set->srcu){.+.+}-{0:0}: [ 670.086126][T28050] __synchronize_srcu+0xca/0x3e0 [ 670.091603][T28050] elevator_switch+0x1e8/0x7a0 [ 670.096910][T28050] elevator_change+0x2cc/0x450 [ 670.102225][T28050] elevator_set_default+0x36c/0x430 [ 670.107969][T28050] blk_register_queue+0x366/0x430 [ 670.113545][T28050] __add_disk+0x677/0xd50 [ 670.118467][T28050] add_disk_fwnode+0xfb/0x480 [ 670.123691][T28050] nbd_dev_add+0x72c/0xb50 [ 670.128651][T28050] nbd_init+0x168/0x1f0 [ 670.133464][T28050] do_one_initcall+0x250/0x8d0 [ 670.138773][T28050] do_initcall_level+0x104/0x190 [ 670.144245][T28050] do_initcalls+0x59/0xa0 [ 670.149106][T28050] kernel_init_freeable+0x2a6/0x3e0 [ 670.154832][T28050] kernel_init+0x1d/0x1d0 [ 670.159708][T28050] ret_from_fork+0x51e/0xb90 [ 670.164839][T28050] ret_from_fork_asm+0x1a/0x30 [ 670.170150][T28050] [ 670.170150][T28050] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 670.178028][T28050] __mutex_lock+0x19f/0x1300 [ 670.183179][T28050] elevator_change+0x1b3/0x450 [ 670.188475][T28050] elevator_set_none+0xb5/0x140 [ 670.193861][T28050] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 670.200201][T28050] nbd_start_device+0x17f/0xb10 [ 670.205592][T28050] nbd_genl_connect+0x165b/0x1cf0 [ 670.211159][T28050] genl_family_rcv_msg_doit+0x22a/0x330 [ 670.217247][T28050] genl_rcv_msg+0x61c/0x7a0 [ 670.222292][T28050] netlink_rcv_skb+0x232/0x4b0 [ 670.227622][T28050] genl_rcv+0x28/0x40 [ 670.232150][T28050] netlink_unicast+0x80f/0x9b0 [ 670.237452][T28050] netlink_sendmsg+0x813/0xb40 [ 670.242787][T28050] ____sys_sendmsg+0x972/0x9f0 [ 670.248083][T28050] ___sys_sendmsg+0x2a5/0x360 [ 670.253327][T28050] __x64_sys_sendmsg+0x1bd/0x2a0 [ 670.258864][T28050] do_syscall_64+0x14d/0xf80 [ 670.264003][T28050] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 670.270435][T28050] [ 670.270435][T28050] -> #2 (&q->q_usage_counter(io)#51){++++}-{0:0}: [ 670.279071][T28050] blk_alloc_queue+0x546/0x680 [ 670.284381][T28050] __blk_mq_alloc_disk+0x197/0x390 [ 670.290025][T28050] nbd_dev_add+0x499/0xb50 [ 670.294988][T28050] nbd_init+0x168/0x1f0 [ 670.299704][T28050] do_one_initcall+0x250/0x8d0 [ 670.305003][T28050] do_initcall_level+0x104/0x190 [ 670.310486][T28050] do_initcalls+0x59/0xa0 [ 670.315354][T28050] kernel_init_freeable+0x2a6/0x3e0 [ 670.321085][T28050] kernel_init+0x1d/0x1d0 [ 670.325952][T28050] ret_from_fork+0x51e/0xb90 [ 670.331089][T28050] ret_from_fork_asm+0x1a/0x30 [ 670.336404][T28050] [ 670.336404][T28050] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 670.343650][T28050] fs_reclaim_acquire+0x71/0x100 [ 670.349122][T28050] kmem_cache_alloc_noprof+0x40/0x650 [ 670.355043][T28050] __kernfs_iattrs+0xdf/0x340 [ 670.360258][T28050] kernfs_iop_setattr+0xea/0x3f0 [ 670.365742][T28050] notify_change+0xc1a/0xf40 [ 670.370875][T28050] do_truncate+0x1c2/0x250 [ 670.375832][T28050] path_openat+0x2f89/0x3860 [ 670.380977][T28050] do_file_open+0x23e/0x4a0 [ 670.386023][T28050] do_sys_openat2+0x113/0x200 [ 670.391249][T28050] __x64_sys_openat+0x138/0x170 [ 670.396667][T28050] do_syscall_64+0x14d/0xf80 [ 670.401809][T28050] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 670.408251][T28050] [ 670.408251][T28050] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 670.416787][T28050] __lock_acquire+0x15a5/0x2cf0 [ 670.422202][T28050] lock_acquire+0xf0/0x2e0 [ 670.427169][T28050] down_write+0x96/0x200 [ 670.431954][T28050] kernfs_unlink_sibling+0x71/0x180 [ 670.437713][T28050] __kernfs_remove+0x3e7/0x660 [ 670.443045][T28050] kernfs_remove_by_name_ns+0xaf/0x130 [ 670.449043][T28050] sysfs_remove_group+0xfc/0x2e0 [ 670.454540][T28050] sysfs_remove_groups+0x54/0xb0 [ 670.460030][T28050] net_rx_queue_update_kobjects+0x68d/0x740 [ 670.466526][T28050] netdev_unregister_kobject+0x113/0x450 [ 670.472696][T28050] unregister_netdevice_many_notify+0x1e0e/0x2370 [ 670.479651][T28050] unregister_netdevice_queue+0x31f/0x360 [ 670.485928][T28050] nsim_destroy+0x1e5/0x680 [ 670.491127][T28050] __nsim_dev_port_del+0x14d/0x1b0 [ 670.496779][T28050] nsim_dev_reload_destroy+0x288/0x490 [ 670.502793][T28050] nsim_drv_remove+0x58/0x170 [ 670.508019][T28050] device_release_driver_internal+0x46f/0x860 [ 670.514704][T28050] bus_remove_device+0x34d/0x440 [ 670.520190][T28050] device_del+0x527/0x8f0 [ 670.525059][T28050] device_unregister+0x21/0xf0 [ 670.530363][T28050] del_device_store+0x2b0/0x370 [ 670.535829][T28050] kernfs_fop_write_iter+0x3af/0x540 [ 670.541663][T28050] vfs_write+0x61d/0xb90 [ 670.546448][T28050] ksys_write+0x150/0x270 [ 670.551330][T28050] do_syscall_64+0x14d/0xf80 [ 670.556469][T28050] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 670.562926][T28050] [ 670.562926][T28050] other info that might help us debug this: [ 670.562926][T28050] [ 670.573165][T28050] Chain exists of: [ 670.573165][T28050] &root->kernfs_iattr_rwsem --> cpuhp_state_mutex --> &root->kernfs_rwsem [ 670.573165][T28050] [ 670.587605][T28050] Possible unsafe locking scenario: [ 670.587605][T28050] [ 670.595064][T28050] CPU0 CPU1 [ 670.600438][T28050] ---- ---- [ 670.605816][T28050] lock(&root->kernfs_rwsem); [ 670.610631][T28050] lock(cpuhp_state_mutex); [ 670.617756][T28050] lock(&root->kernfs_rwsem); [ 670.625050][T28050] lock(&root->kernfs_iattr_rwsem); [ 670.630347][T28050] [ 670.630347][T28050] *** DEADLOCK *** [ 670.630347][T28050] [ 670.638507][T28050] 8 locks held by syz-executor/28050: [ 670.643889][T28050] #0: ffff888034982420 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x227/0xb90 [ 670.652789][T28050] #1: ffff88801b303888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1de/0x540 [ 670.662553][T28050] #2: ffff88802855bb48 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x231/0x540 [ 670.672589][T28050] #3: ffffffff8f43b7c8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 670.682898][T28050] #4: ffff88802b42a0e8 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x860 [ 670.693455][T28050] #5: ffff88807e160260 (&devlink->lock_key#7){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x170 [ 670.703503][T28050] #6: ffffffff8fbc6fc8 (rtnl_mutex){+.+.}-{4:4}, at: nsim_destroy+0xed/0x680 [ 670.712413][T28050] #7: ffff88801b6dd988 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x3d/0x130 [ 670.723148][T28050] [ 670.723148][T28050] stack backtrace: [ 670.729048][T28050] CPU: 1 UID: 0 PID: 28050 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 670.729069][T28050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 670.729093][T28050] Call Trace: [ 670.729101][T28050] [ 670.729110][T28050] dump_stack_lvl+0xe8/0x150 [ 670.729153][T28050] print_circular_bug+0x2e1/0x300 [ 670.729183][T28050] check_noncircular+0x12e/0x150 [ 670.729211][T28050] __lock_acquire+0x15a5/0x2cf0 [ 670.729236][T28050] ? __lock_acquire+0x6b5/0x2cf0 [ 670.729263][T28050] lock_acquire+0xf0/0x2e0 [ 670.729284][T28050] ? kernfs_unlink_sibling+0x71/0x180 [ 670.729306][T28050] down_write+0x96/0x200 [ 670.729323][T28050] ? kernfs_unlink_sibling+0x71/0x180 [ 670.729340][T28050] ? __pfx_down_write+0x10/0x10 [ 670.729356][T28050] ? kernfs_root+0x1c/0x230 [ 670.729379][T28050] ? kernfs_root+0x1c/0x230 [ 670.729401][T28050] ? kernfs_root+0x1c/0x230 [ 670.729425][T28050] ? kernfs_root+0x1ea/0x230 [ 670.729449][T28050] kernfs_unlink_sibling+0x71/0x180 [ 670.729485][T28050] __kernfs_remove+0x3e7/0x660 [ 670.729502][T28050] kernfs_remove_by_name_ns+0xaf/0x130 [ 670.729519][T28050] sysfs_remove_group+0xfc/0x2e0 [ 670.729544][T28050] sysfs_remove_groups+0x54/0xb0 [ 670.729568][T28050] net_rx_queue_update_kobjects+0x68d/0x740 [ 670.729593][T28050] netdev_unregister_kobject+0x113/0x450 [ 670.729614][T28050] unregister_netdevice_many_notify+0x1e0e/0x2370 [ 670.729640][T28050] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 670.729659][T28050] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 670.729691][T28050] unregister_netdevice_queue+0x31f/0x360 [ 670.729710][T28050] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 670.729733][T28050] nsim_destroy+0x1e5/0x680 [ 670.729761][T28050] __nsim_dev_port_del+0x14d/0x1b0 [ 670.729779][T28050] nsim_dev_reload_destroy+0x288/0x490 [ 670.729798][T28050] nsim_drv_remove+0x58/0x170 [ 670.729814][T28050] ? __pfx_nsim_bus_remove+0x10/0x10 [ 670.729837][T28050] device_release_driver_internal+0x46f/0x860 [ 670.729860][T28050] bus_remove_device+0x34d/0x440 [ 670.729886][T28050] device_del+0x527/0x8f0 [ 670.729919][T28050] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 670.730012][T28050] ? __pfx_device_del+0x10/0x10 [ 670.730033][T28050] device_unregister+0x21/0xf0 [ 670.730063][T28050] del_device_store+0x2b0/0x370 [ 670.730088][T28050] ? __pfx_del_device_store+0x10/0x10 [ 670.730111][T28050] ? sysfs_file_kobj+0x1e4/0x230 [ 670.730131][T28050] ? sysfs_kf_write+0x166/0x260 [ 670.730152][T28050] ? __pfx_sysfs_kf_write+0x10/0x10 [ 670.730172][T28050] kernfs_fop_write_iter+0x3af/0x540 [ 670.730192][T28050] vfs_write+0x61d/0xb90 [ 670.730212][T28050] ? __pfx_vfs_write+0x10/0x10 [ 670.730247][T28050] ? kmem_cache_free+0x187/0x630 [ 670.730266][T28050] ? fd_install+0x94/0x3d0 [ 670.730289][T28050] ? do_sys_openat2+0x14c/0x200 [ 670.730319][T28050] ksys_write+0x150/0x270 [ 670.730338][T28050] ? __pfx_ksys_write+0x10/0x10 [ 670.730360][T28050] do_syscall_64+0x14d/0xf80 [ 670.730385][T28050] ? trace_irq_disable+0x3b/0x150 [ 670.730410][T28050] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 670.730428][T28050] ? clear_bhb_loop+0x40/0x90 [ 670.730447][T28050] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 670.730469][T28050] RIP: 0033:0x7ff711b5cfce [ 670.730486][T28050] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 670.730502][T28050] RSP: 002b:00007ffe7c2a2398 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 670.730520][T28050] RAX: ffffffffffffffda RBX: 0000555556f31500 RCX: 00007ff711b5cfce [ 670.730534][T28050] RDX: 0000000000000001 RSI: 00007ffe7c2a2420 RDI: 0000000000000005 [ 670.730545][T28050] RBP: 00007ff711c3351c R08: 0000000000000000 R09: 0000000000000000 [ 670.730556][T28050] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 670.730584][T28050] R13: 00007ffe7c2a2420 R14: 00007ff712944620 R15: 0000000000000003 [ 670.730604][T28050] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 671.114487][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5290 ms [ 671.122545][ C1] lec:lec_tx_timeout: lec0 [ 671.132708][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 671.173944][ T51] Bluetooth: hci5: command tx timeout [ 671.239831][T28154] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6226'. [ 671.809002][T25831] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 671.899429][T25831] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 671.949331][T25831] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 672.028706][T25831] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 672.113049][T25831] erspan0: left allmulticast mode [ 672.118809][T25831] erspan0: left promiscuous mode [ 672.123918][T25831] bridge4: port 1(erspan0) entered disabled state [ 672.196752][T25831] bond4 (unregistering): (slave ip6erspan0): Releasing active interface [ 672.369455][T25831] bond1 (unregistering): (slave bridge2): Releasing active interface [ 672.638552][T25831] bond5 (unregistering): (slave bridge8): Releasing backup interface [ 672.647162][T25831] bond5 (unregistering): (slave bridge8): the permanent HWaddr of slave - 26:2d:c1:6e:f4:3b - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 672.679191][T25831] bond5 (unregistering): (slave bridge9): Releasing backup interface [ 672.719051][T25831] bond5 (unregistering): (slave bridge10): Releasing backup interface [ 672.789065][T25831] bond6 (unregistering): (slave bridge11): Releasing backup interface [ 672.797846][T25831] bridge11 (unregistering): left promiscuous mode [ 672.839175][T25831] bond1 (unregistering): Released all slaves [ 672.850185][T25831] bond2 (unregistering): Released all slaves [ 672.860936][T25831] bond3 (unregistering): (slave lo): Releasing backup interface [ 672.869596][T25831] bond3 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 672.883348][T25831] bond3 (unregistering): Released all slaves [ 672.894303][T25831] bond4 (unregistering): Released all slaves [ 672.906538][T25831] bond5 (unregistering): Released all slaves [ 672.919900][T25831] bond6 (unregistering): Released all slaves [ 673.014556][T25831] !9: left promiscuous mode [ 673.048678][T25831] tipc: Left network mode [ 673.586613][T25831] hsr_slave_0: left promiscuous mode [ 673.592938][T25831] batman_adv: : Removing interface: batadv_slave_0 [ 674.137680][T25831] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.183073][T25831] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.261107][T25831] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.312323][T25831] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.428924][T25831] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.462328][T25831] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.512698][T25831] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.557284][T25831] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.684456][T25831] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.747522][T25831] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.782455][T25831] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.824182][T25831] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.954299][T25831] bridge_slave_1: left allmulticast mode [ 674.961228][T25831] bridge_slave_1: left promiscuous mode [ 674.967806][T25831] bridge0: port 2(bridge_slave_1) entered disabled state [ 674.980154][T25831] bridge_slave_0: left allmulticast mode [ 674.985846][T25831] bridge_slave_0: left promiscuous mode [ 674.992389][T25831] bridge0: port 1(bridge_slave_0) entered disabled state [ 675.003734][T25831] bridge_slave_1: left allmulticast mode [ 675.010089][T25831] bridge_slave_1: left promiscuous mode [ 675.015803][T25831] bridge0: port 2(bridge_slave_1) entered disabled state [ 675.025472][T25831] bridge_slave_0: left allmulticast mode [ 675.033151][T25831] bridge_slave_0: left promiscuous mode [ 675.040229][T25831] bridge0: port 1(bridge_slave_0) entered disabled state [ 675.050319][T25831] bridge_slave_1: left allmulticast mode [ 675.056767][T25831] bridge_slave_1: left promiscuous mode [ 675.062507][T25831] bridge0: port 2(bridge_slave_1) entered disabled state [ 675.072111][T25831] bridge_slave_0: left allmulticast mode [ 675.078638][T25831] bridge_slave_0: left promiscuous mode [ 675.084357][T25831] bridge0: port 1(bridge_slave_0) entered disabled state [ 675.100105][T25831] bridge_slave_1: left allmulticast mode [ 675.105813][T25831] bridge_slave_1: left promiscuous mode [ 675.112866][T25831] bridge0: port 2(bridge_slave_1) entered disabled state [ 675.122449][T25831] bridge_slave_0: left allmulticast mode [ 675.128935][T25831] bridge_slave_0: left promiscuous mode [ 675.134649][T25831] bridge0: port 1(bridge_slave_0) entered disabled state [ 675.148651][T25831] dvmrp3: left allmulticast mode [ 675.360456][T25831] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 675.371705][T25831] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 675.381729][T25831] bond0 (unregistering): Released all slaves [ 675.459780][T25831] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 675.469976][T25831] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 675.479917][T25831] bond0 (unregistering): Released all slaves [ 675.592515][T25831] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 675.602849][T25831] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 675.612734][T25831] bond0 (unregistering): Released all slaves [ 675.622355][T25831] bond1 (unregistering): (slave veth3): Releasing active interface [ 675.632410][T25831] bond1 (unregistering): (slave veth5): Releasing active interface [ 675.642012][T25831] bond1 (unregistering): Released all slaves [ 675.743345][T25831] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 675.753603][T25831] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 675.767359][T25831] bond0 (unregistering): Released all slaves [ 675.880670][T25831] tipc: Left network mode [ 675.892755][T25831] tipc: Left network mode [ 675.909969][T25831] IPVS: stopping backup sync thread 27790 ... [ 676.130256][ T25] block nbd1: Possible stuck request ffff8880262e8800: control (read@0,1024B). Runtime 150 seconds [ 676.145720][ T25] block nbd1: Possible stuck request ffff8880262e8a00: control (read@1024,1024B). Runtime 150 seconds [ 676.156820][ T25] block nbd1: Possible stuck request ffff8880262e8c00: control (read@2048,1024B). Runtime 150 seconds [ 676.168393][ T25] block nbd1: Possible stuck request ffff8880262e8e00: control (read@3072,1024B). Runtime 150 seconds [ 676.332661][T25831] hsr_slave_0: left promiscuous mode [ 676.341361][T25831] hsr_slave_1: left promiscuous mode [ 676.349003][T25831] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 676.358772][T25831] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 676.370164][T25831] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 676.378317][T25831] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 676.390104][T25831] hsr_slave_0: left promiscuous mode [ 676.397166][T25831] hsr_slave_1: left promiscuous mode [ 676.403010][T25831] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 676.412235][T25831] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 676.425428][T25831] hsr_slave_0: left promiscuous mode [ 676.433770][T25831] hsr_slave_1: left promiscuous mode [ 676.440369][T25831] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 676.450180][T25831] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 676.463613][T25831] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 676.472423][T25831] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 676.484431][T25831] hsr_slave_0: left promiscuous mode [ 676.492476][T25831] hsr_slave_1: left promiscuous mode [ 676.498367][T25831] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 676.505780][T25831] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 676.514365][T25831] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 676.522059][T25831] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 676.544034][T25831] veth1_macvtap: left promiscuous mode [ 676.549734][T25831] veth0_macvtap: left promiscuous mode [ 676.555281][T25831] veth1_vlan: left promiscuous mode [ 676.560983][T25831] veth0_vlan: left promiscuous mode [ 676.567926][T25831] veth1_macvtap: left allmulticast mode [ 676.573527][T25831] veth1_macvtap: left promiscuous mode [ 676.579583][T25831] veth0_macvtap: left promiscuous mode [ 676.585161][T25831] veth0_vlan: left promiscuous mode [ 676.591776][T25831] veth1_macvtap: left promiscuous mode [ 676.597316][T25831] veth0_macvtap: left promiscuous mode [ 676.602853][T25831] veth1_vlan: left promiscuous mode [ 676.609127][T25831] veth0_vlan: left promiscuous mode [ 676.775907][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5640 ms [ 676.784094][ C1] lec:lec_tx_timeout: lec0 [ 676.852489][T25831] ` (unregistering): Port device team_slave_1 removed [ 676.864416][T25831] ` (unregistering): Port device team_slave_0 removed [ 676.976733][T25831] team0 (unregistering): Port device team_slave_1 removed [ 676.996697][T25831] team0 (unregistering): Port device team_slave_0 removed [ 677.138145][T25831] team0 (unregistering): Port device team_slave_1 removed [ 677.149873][T25831] team0 (unregistering): Port device team_slave_0 removed [ 677.263501][T25831] team0 (unregistering): Port device team_slave_1 removed [ 677.281311][T25831] team0 (unregistering): Port device team_slave_0 removed [ 678.103407][T25831] IPVS: stop unused estimator thread 0...