last executing test programs: 11m37.31446722s ago: executing program 4 (id=12969): r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x180, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x7fffe, {0x0, 0x0, 0x0, r4, {0x0, 0xffe0}, {0xb, 0xb}, {0x0, 0x1}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x1, 0x1, 0x9, 0x1, 0x8}, 0xe, 0x0, 0x32, 0x5, 0x9, 0x7, 0x9, 0x1d, 0x1, 0xffffff5c, {0xa632, 0x23, 0x3, 0x40, 0xfffffffe, 0x7583}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x404c84c}, 0x400c000) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031620d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) 11m34.038060206s ago: executing program 4 (id=12975): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x3}, 0x15, 0x3, 'nq\x00', 0x23, 0x4, 0x72}, 0x2c) r1 = socket$kcm(0xa, 0x2, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x10000, 0xc, 0x2}}, 0x44) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000006800e97802000000000000000a0000000000000008000500", @ANYRES32=r5], 0x20}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) 11m33.847079038s ago: executing program 4 (id=12978): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0xfffffffc) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r2, 0x7d4165c9) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r5, 0x7d4165c9) listen(r4, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r6, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000a0c100000000000000fff00", 0x58}], 0x1) 11m33.661122271s ago: executing program 4 (id=12982): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8}}]}, 0x38}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x20000, 0x0) close(r5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r6 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r7, 0xb}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)='\r', 0x1}], 0x1}, 0x4) 11m33.37622197s ago: executing program 4 (id=12989): socket$inet6(0xa, 0x2, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000940)={@ifindex, 0xffffffffffffffff, 0x3a, 0x8}, 0x20) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0xffffffffffffffff, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x21ac6, 0x51a23}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @local}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) 11m32.504345501s ago: executing program 4 (id=12995): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r5) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002940)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x70bd28, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x5, 0x7ff, 0x1, 0x3, 0x8}, 0x5, 0xb3}, [{0x2, 0x2, 0x8a, 0xdc68, 0x1, 0xc}, {0x8, 0x2, 0xa6b, 0x3, 0x9, 0xd}, {0x8, 0x7, 0xee9, 0xfffffff8, 0x7, 0xffff7fff}, {0xf1, 0x3, 0x6, 0x4, 0x9, 0x1667e918}, {0x2, 0x1, 0x101, 0x6, 0xd3, 0x3ff}, {0x2, 0x401, 0x2, 0x8, 0x3, 0x5}, {0xff, 0x2, 0x3, 0x6, 0x5, 0x5}, {0x3511, 0x6, 0x8, 0x401, 0x400, 0xcb}, {0x9, 0x6, 0xe96, 0x3ff, 0x1a5e, 0x5f}, {0x7, 0x5, 0x2, 0x6, 0x3d, 0x1ff}, {0x6, 0x6e, 0x2, 0x6, 0x1ff, 0x101}, {0x101, 0x5, 0x0, 0x4, 0xfffffffa, 0x7f}, {0x5, 0x6, 0x0, 0x0, 0x3, 0x8}, {0xff, 0x100, 0x2, 0x7fffffff, 0x40002, 0xc}, {0x96f, 0x3, 0x7ff, 0x9, 0xfff, 0x7}, {0x400, 0xff, 0x2, 0x5, 0x2, 0x3e97ca11}, {0x2, 0xfffffffd, 0xffff, 0x2d, 0x6, 0x7}, {0xd, 0x1, 0x6, 0xfffffffb, 0x1ac5, 0x3}, {0x6, 0xb6, 0x2, 0xfffffffb, 0x1, 0x7}, {0x0, 0x8, 0x1, 0x200, 0x8, 0x7fffffff}, {0x8, 0x1000, 0x13a00, 0x0, 0x5, 0x9}, {0x400, 0x2, 0x4, 0xffffff7f, 0x9, 0x1}, {0x5, 0x9, 0x2, 0xffff2552, 0xfffffff9, 0x7fff}, {0x6, 0x632, 0x10001, 0xfffff676, 0x5, 0x6}, {0x8, 0xffff8484, 0x3, 0x0, 0x6, 0x2}, {0x2, 0x2, 0x84, 0x1, 0x3, 0x2}, {0x80, 0x5f64, 0xc, 0xf, 0x0, 0x6}, {0x2, 0xfa6, 0x2, 0xb, 0x6, 0x8}, {0x60, 0x36eb959b, 0x8, 0x0, 0xe, 0x8}, {0xac, 0x2, 0x2, 0x2, 0xfffffff8, 0x101}, {0x9e, 0xd, 0x5, 0xe, 0xfffff3ce, 0x6}, {0x3404, 0x2, 0xead, 0x800, 0x8, 0x3}, {0x5, 0x800, 0x3, 0x8, 0x102, 0x49c836d6}, {0xd38, 0x6, 0x7ff, 0x3, 0x8, 0x5}, {0x10, 0x5, 0x4, 0x3, 0x9}, {0x1006, 0x101, 0x7, 0x1, 0x4, 0x3}, {0x7, 0xe9ab, 0x0, 0x4, 0x1, 0x8}, {0xfffffffb, 0x80000001, 0x7, 0xfffffffb, 0x10, 0x3}, {0xffffffff, 0x4, 0xffff4e30, 0x0, 0x5}, {0x3, 0x4, 0xfffffffd, 0x797, 0xcf, 0xfff}, {0x3ff, 0x8, 0x1, 0x7, 0x0, 0x8}, {0x7ff, 0xa, 0x9, 0x6, 0x4, 0x5}, {0x44, 0x4, 0xba7d, 0x6, 0x9, 0x5}, {0x2, 0x9, 0x4, 0x80000001, 0x7, 0xb4d}, {0x2, 0x7, 0x3, 0x8, 0x3, 0xb7}, {0x6, 0x401, 0xf, 0x40, 0x546e, 0x6}, {0xffff, 0xa215, 0x18, 0x4, 0x5, 0x3}, {0xfffffffe, 0x400, 0x5, 0x4, 0x8001, 0x6}, {0x8a, 0x4c2e, 0x795e, 0x8, 0x3, 0x3}, {0x5, 0x6, 0x94, 0xffff, 0x9, 0x1}, {0x2, 0x72f3, 0x7, 0x2, 0xb7b, 0xfffffc01}, {0x2, 0x7, 0x3, 0x6, 0x9, 0x3}, {0x4, 0x0, 0x7, 0x4, 0xffffff7f, 0x5ddc}, {0x5735, 0x9b93, 0x959, 0x10001, 0x100, 0x2}, {0x9c, 0x400, 0xb1ee, 0x5, 0x7, 0x8544}, {0x1ff, 0xffffffff, 0xffffffff, 0x363, 0x7ff, 0x1}, {0xa, 0x9, 0x4, 0xffffffff, 0x2, 0xf}, {0x7, 0x2, 0x80000000, 0x3ff, 0xfffefff4, 0xb}, {0xe, 0x5, 0x1, 0x2, 0xfff, 0x5}, {0x7, 0x5, 0x0, 0x3, 0x8001, 0x5f16}, {0x7, 0x6, 0x0, 0x8, 0x9, 0x3e}, {0x4, 0x7, 0x7fffffff, 0x6, 0xfffff287, 0x3}, {0x10001, 0x979, 0x40, 0x6, 0x2, 0xff}, {0x6, 0x40, 0xef, 0x0, 0x4, 0x3}, {0x101, 0x5, 0xfe, 0xc7, 0x32, 0x1}, {0xffffffff, 0x0, 0x0, 0x0, 0x7fffffff, 0xb0a}, {0x1fd6, 0x7, 0x6, 0x2, 0x7, 0x5}, {0xffff, 0x9, 0xc, 0xf06, 0x8, 0x2}, {0x9, 0x5, 0xbd, 0x275, 0x7, 0x3}, {0x4, 0x1ff, 0x5, 0x88, 0x2, 0x8}, {0xb, 0x8, 0x3, 0x3cc3, 0x80000001}, {0x1, 0x743, 0x2, 0x57, 0x6, 0x1}, {0x5, 0xc, 0x2, 0x6, 0x4b0, 0x3}, {0x0, 0x401, 0x8, 0x8, 0x6}, {0x3, 0x8, 0x3, 0xb3, 0x1a327d9d, 0x39e}, {0x4, 0x5, 0xce, 0x1, 0x3, 0x888f}, {0xfffffff7, 0x7, 0x8be7, 0x4, 0x81, 0x8}, {0xfc, 0x9, 0x200, 0x3, 0x6, 0x81}, {0x9, 0x6, 0x100, 0x6, 0x1, 0x7fff}, {0x5, 0x5, 0x40, 0x7a, 0x7, 0x1000}, {0x7, 0x5, 0x9, 0x400, 0x5, 0x4}, {0xd, 0x19, 0x773d, 0x2c1, 0x81, 0x1}, {0x3, 0x9, 0xfff, 0x7, 0x4}, {0x6, 0x9, 0x40, 0x2, 0x7, 0x6}, {0x7, 0x5d9, 0x3, 0x80000001, 0x6, 0x4}, {0x80000000, 0x101, 0x5, 0x0, 0x10001, 0x6}, {0xbb, 0x4, 0x8001, 0x4, 0x8001, 0x7}, {0x8, 0x2616, 0x3, 0x4, 0xffffffff, 0x2f4f}, {0x3, 0x7ff, 0x2, 0x6, 0x10, 0x8}, {0x951, 0xc, 0x7, 0x3, 0xfffffffb, 0x40}, {0x7, 0x40, 0xff, 0x193, 0x8, 0xc0000000}, {0x10007, 0xe978, 0x8, 0x7, 0x7, 0x7}, {0x9, 0x81, 0x5, 0x6, 0x9, 0x400}, {0x0, 0x101, 0x0, 0x32d62169, 0x167ddc9, 0x9}, {0x4393a33, 0x0, 0xfff, 0x3, 0x7fff, 0x3}, {0xffffffff, 0x6, 0xfffffff7, 0x8, 0x30000000, 0x4}, {0x5, 0x6, 0x400, 0x6, 0xfffffff7, 0x7fff}, {0x200, 0x8, 0x53, 0x2dc, 0x3, 0xe}, {0x6, 0x9, 0x309085d1, 0x1ff, 0x3, 0x7}, {0x7, 0x7f, 0x101, 0x4d23, 0xb, 0xfff}, {0x7, 0x6, 0xcd, 0xcb93571e, 0xa, 0x5}, {0x800, 0x8, 0x2, 0x9, 0x7f, 0xfffffe00}, {0x0, 0x2, 0x7, 0x8, 0xffff}, {0xa, 0x7ffb, 0xfffffffe, 0x3d, 0x8, 0x7}, {0x5, 0x10001, 0x9130, 0x264, 0x4, 0x2}, {0x7ff, 0x1, 0x3, 0x400, 0x2, 0xdac00000}, {0x2, 0x51, 0x5, 0x0, 0x405, 0x7fff}, {0x1f, 0x3, 0x9, 0x6, 0x68d96f84, 0x10001}, {0xa, 0x9, 0x4, 0x567b, 0xff}, {0x29, 0x0, 0x0, 0x9, 0x75e, 0x9c}, {0x0, 0x401, 0x0, 0x7, 0xd1, 0x5}, {0xe, 0x1, 0x4f27, 0x101, 0x9, 0xfffffffd}, {0x1, 0x8, 0xf, 0x0, 0x6, 0x2}, {0x9, 0x4, 0x4, 0x7fffffff, 0x1, 0x5}, {0x80000001, 0x6, 0x5252, 0x5, 0x7, 0x100}, {0x0, 0x90, 0x7, 0x1, 0x4, 0x8}, {0x2, 0x67, 0xefa, 0x7, 0x2f87, 0xfffffffa}, {0x413c07b2, 0x7, 0x7, 0xcf33, 0x1, 0x9}, {0x5, 0x200009, 0xfffffffd, 0x7, 0x401, 0x6}, {0x3, 0x0, 0x6c4, 0x4, 0x6, 0x1ff}, {0x9, 0x80000001, 0x9, 0xd, 0x2, 0x3}, {0x447fb3a9, 0x8001, 0x200, 0x10, 0x2, 0x5}, {0x7, 0xfffffffd, 0x1, 0xe, 0x7}, {0x3, 0x7, 0x88e, 0x0, 0x6, 0x7}, {0xffffffff, 0xffffffde, 0x81, 0x0, 0x7fff, 0xffff}, {0xd43, 0x855, 0x4, 0x41aa, 0x2, 0xf09c}, {0xaf, 0x61f784e8, 0xed, 0xea, 0x400, 0x5}, {0x7, 0xa, 0x1, 0x6656, 0xfff, 0xb}], [{}, {0x3}, {0x4, 0x1}, {0x0, 0x3aa157f48d3b3bb3}, {}, {0x3}, {0x0, 0x1}, {0x1, 0x1}, {0x2}, {0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x3}, {0x5}, {0x5}, {0x1}, {0x2, 0x1}, {0x3}, {}, {0x1}, {0x1}, {0x5, 0x1}, {}, {0x5, 0x1}, {}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x4, 0x1}, {0x2, 0x1}, {0x4}, {0x1, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x1}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x5, 0x1}, {0x4}, {0x5}, {0x1, 0x1}, {0x3}, {}, {0x3, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x3}, {0x0, 0x1}, {0x1, 0x1}, {0x2}, {0x5}, {0x5}, {0x3}, {0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2, 0x3}, {0x3}, {0x2, 0x1}, {0x3}, {0x3}, {0x3, 0x1}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x4}, {0x4, 0xd26d20c064367a2c}, {0x5, 0x1}, {0x5, 0x1}, {0x4}, {0x4, 0x1}, {0x4}, {0x3, 0x1}, {0x2}, {0x1}, {0x3}, {0x5, 0x1}, {0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x5}, {0x2, 0x1}, {0x3}, {0x1}, {0x5}, {0x1}, {0x1}, {}, {}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x2}, {0x3}, {0x0, 0x1}, {0x5}, {0x5, 0x1}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x5}, {0x3}, {0x3, 0x1}, {0x3, 0x1}, {}, {0x0, 0x1}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$kcm(r6, &(0x7f0000002900)={&(0x7f0000000500)=@xdp={0x2c, 0x8, r4, 0x10c}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000380)="da", 0x5dc}], 0x1}, 0x4000880) 11m17.392912418s ago: executing program 32 (id=12995): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r5) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002940)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x70bd28, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x5, 0x7ff, 0x1, 0x3, 0x8}, 0x5, 0xb3}, [{0x2, 0x2, 0x8a, 0xdc68, 0x1, 0xc}, {0x8, 0x2, 0xa6b, 0x3, 0x9, 0xd}, {0x8, 0x7, 0xee9, 0xfffffff8, 0x7, 0xffff7fff}, {0xf1, 0x3, 0x6, 0x4, 0x9, 0x1667e918}, {0x2, 0x1, 0x101, 0x6, 0xd3, 0x3ff}, {0x2, 0x401, 0x2, 0x8, 0x3, 0x5}, {0xff, 0x2, 0x3, 0x6, 0x5, 0x5}, {0x3511, 0x6, 0x8, 0x401, 0x400, 0xcb}, {0x9, 0x6, 0xe96, 0x3ff, 0x1a5e, 0x5f}, {0x7, 0x5, 0x2, 0x6, 0x3d, 0x1ff}, {0x6, 0x6e, 0x2, 0x6, 0x1ff, 0x101}, {0x101, 0x5, 0x0, 0x4, 0xfffffffa, 0x7f}, {0x5, 0x6, 0x0, 0x0, 0x3, 0x8}, {0xff, 0x100, 0x2, 0x7fffffff, 0x40002, 0xc}, {0x96f, 0x3, 0x7ff, 0x9, 0xfff, 0x7}, {0x400, 0xff, 0x2, 0x5, 0x2, 0x3e97ca11}, {0x2, 0xfffffffd, 0xffff, 0x2d, 0x6, 0x7}, {0xd, 0x1, 0x6, 0xfffffffb, 0x1ac5, 0x3}, {0x6, 0xb6, 0x2, 0xfffffffb, 0x1, 0x7}, {0x0, 0x8, 0x1, 0x200, 0x8, 0x7fffffff}, {0x8, 0x1000, 0x13a00, 0x0, 0x5, 0x9}, {0x400, 0x2, 0x4, 0xffffff7f, 0x9, 0x1}, {0x5, 0x9, 0x2, 0xffff2552, 0xfffffff9, 0x7fff}, {0x6, 0x632, 0x10001, 0xfffff676, 0x5, 0x6}, {0x8, 0xffff8484, 0x3, 0x0, 0x6, 0x2}, {0x2, 0x2, 0x84, 0x1, 0x3, 0x2}, {0x80, 0x5f64, 0xc, 0xf, 0x0, 0x6}, {0x2, 0xfa6, 0x2, 0xb, 0x6, 0x8}, {0x60, 0x36eb959b, 0x8, 0x0, 0xe, 0x8}, {0xac, 0x2, 0x2, 0x2, 0xfffffff8, 0x101}, {0x9e, 0xd, 0x5, 0xe, 0xfffff3ce, 0x6}, {0x3404, 0x2, 0xead, 0x800, 0x8, 0x3}, {0x5, 0x800, 0x3, 0x8, 0x102, 0x49c836d6}, {0xd38, 0x6, 0x7ff, 0x3, 0x8, 0x5}, {0x10, 0x5, 0x4, 0x3, 0x9}, {0x1006, 0x101, 0x7, 0x1, 0x4, 0x3}, {0x7, 0xe9ab, 0x0, 0x4, 0x1, 0x8}, {0xfffffffb, 0x80000001, 0x7, 0xfffffffb, 0x10, 0x3}, {0xffffffff, 0x4, 0xffff4e30, 0x0, 0x5}, {0x3, 0x4, 0xfffffffd, 0x797, 0xcf, 0xfff}, {0x3ff, 0x8, 0x1, 0x7, 0x0, 0x8}, {0x7ff, 0xa, 0x9, 0x6, 0x4, 0x5}, {0x44, 0x4, 0xba7d, 0x6, 0x9, 0x5}, {0x2, 0x9, 0x4, 0x80000001, 0x7, 0xb4d}, {0x2, 0x7, 0x3, 0x8, 0x3, 0xb7}, {0x6, 0x401, 0xf, 0x40, 0x546e, 0x6}, {0xffff, 0xa215, 0x18, 0x4, 0x5, 0x3}, {0xfffffffe, 0x400, 0x5, 0x4, 0x8001, 0x6}, {0x8a, 0x4c2e, 0x795e, 0x8, 0x3, 0x3}, {0x5, 0x6, 0x94, 0xffff, 0x9, 0x1}, {0x2, 0x72f3, 0x7, 0x2, 0xb7b, 0xfffffc01}, {0x2, 0x7, 0x3, 0x6, 0x9, 0x3}, {0x4, 0x0, 0x7, 0x4, 0xffffff7f, 0x5ddc}, {0x5735, 0x9b93, 0x959, 0x10001, 0x100, 0x2}, {0x9c, 0x400, 0xb1ee, 0x5, 0x7, 0x8544}, {0x1ff, 0xffffffff, 0xffffffff, 0x363, 0x7ff, 0x1}, {0xa, 0x9, 0x4, 0xffffffff, 0x2, 0xf}, {0x7, 0x2, 0x80000000, 0x3ff, 0xfffefff4, 0xb}, {0xe, 0x5, 0x1, 0x2, 0xfff, 0x5}, {0x7, 0x5, 0x0, 0x3, 0x8001, 0x5f16}, {0x7, 0x6, 0x0, 0x8, 0x9, 0x3e}, {0x4, 0x7, 0x7fffffff, 0x6, 0xfffff287, 0x3}, {0x10001, 0x979, 0x40, 0x6, 0x2, 0xff}, {0x6, 0x40, 0xef, 0x0, 0x4, 0x3}, {0x101, 0x5, 0xfe, 0xc7, 0x32, 0x1}, {0xffffffff, 0x0, 0x0, 0x0, 0x7fffffff, 0xb0a}, {0x1fd6, 0x7, 0x6, 0x2, 0x7, 0x5}, {0xffff, 0x9, 0xc, 0xf06, 0x8, 0x2}, {0x9, 0x5, 0xbd, 0x275, 0x7, 0x3}, {0x4, 0x1ff, 0x5, 0x88, 0x2, 0x8}, {0xb, 0x8, 0x3, 0x3cc3, 0x80000001}, {0x1, 0x743, 0x2, 0x57, 0x6, 0x1}, {0x5, 0xc, 0x2, 0x6, 0x4b0, 0x3}, {0x0, 0x401, 0x8, 0x8, 0x6}, {0x3, 0x8, 0x3, 0xb3, 0x1a327d9d, 0x39e}, {0x4, 0x5, 0xce, 0x1, 0x3, 0x888f}, {0xfffffff7, 0x7, 0x8be7, 0x4, 0x81, 0x8}, {0xfc, 0x9, 0x200, 0x3, 0x6, 0x81}, {0x9, 0x6, 0x100, 0x6, 0x1, 0x7fff}, {0x5, 0x5, 0x40, 0x7a, 0x7, 0x1000}, {0x7, 0x5, 0x9, 0x400, 0x5, 0x4}, {0xd, 0x19, 0x773d, 0x2c1, 0x81, 0x1}, {0x3, 0x9, 0xfff, 0x7, 0x4}, {0x6, 0x9, 0x40, 0x2, 0x7, 0x6}, {0x7, 0x5d9, 0x3, 0x80000001, 0x6, 0x4}, {0x80000000, 0x101, 0x5, 0x0, 0x10001, 0x6}, {0xbb, 0x4, 0x8001, 0x4, 0x8001, 0x7}, {0x8, 0x2616, 0x3, 0x4, 0xffffffff, 0x2f4f}, {0x3, 0x7ff, 0x2, 0x6, 0x10, 0x8}, {0x951, 0xc, 0x7, 0x3, 0xfffffffb, 0x40}, {0x7, 0x40, 0xff, 0x193, 0x8, 0xc0000000}, {0x10007, 0xe978, 0x8, 0x7, 0x7, 0x7}, {0x9, 0x81, 0x5, 0x6, 0x9, 0x400}, {0x0, 0x101, 0x0, 0x32d62169, 0x167ddc9, 0x9}, {0x4393a33, 0x0, 0xfff, 0x3, 0x7fff, 0x3}, {0xffffffff, 0x6, 0xfffffff7, 0x8, 0x30000000, 0x4}, {0x5, 0x6, 0x400, 0x6, 0xfffffff7, 0x7fff}, {0x200, 0x8, 0x53, 0x2dc, 0x3, 0xe}, {0x6, 0x9, 0x309085d1, 0x1ff, 0x3, 0x7}, {0x7, 0x7f, 0x101, 0x4d23, 0xb, 0xfff}, {0x7, 0x6, 0xcd, 0xcb93571e, 0xa, 0x5}, {0x800, 0x8, 0x2, 0x9, 0x7f, 0xfffffe00}, {0x0, 0x2, 0x7, 0x8, 0xffff}, {0xa, 0x7ffb, 0xfffffffe, 0x3d, 0x8, 0x7}, {0x5, 0x10001, 0x9130, 0x264, 0x4, 0x2}, {0x7ff, 0x1, 0x3, 0x400, 0x2, 0xdac00000}, {0x2, 0x51, 0x5, 0x0, 0x405, 0x7fff}, {0x1f, 0x3, 0x9, 0x6, 0x68d96f84, 0x10001}, {0xa, 0x9, 0x4, 0x567b, 0xff}, {0x29, 0x0, 0x0, 0x9, 0x75e, 0x9c}, {0x0, 0x401, 0x0, 0x7, 0xd1, 0x5}, {0xe, 0x1, 0x4f27, 0x101, 0x9, 0xfffffffd}, {0x1, 0x8, 0xf, 0x0, 0x6, 0x2}, {0x9, 0x4, 0x4, 0x7fffffff, 0x1, 0x5}, {0x80000001, 0x6, 0x5252, 0x5, 0x7, 0x100}, {0x0, 0x90, 0x7, 0x1, 0x4, 0x8}, {0x2, 0x67, 0xefa, 0x7, 0x2f87, 0xfffffffa}, {0x413c07b2, 0x7, 0x7, 0xcf33, 0x1, 0x9}, {0x5, 0x200009, 0xfffffffd, 0x7, 0x401, 0x6}, {0x3, 0x0, 0x6c4, 0x4, 0x6, 0x1ff}, {0x9, 0x80000001, 0x9, 0xd, 0x2, 0x3}, {0x447fb3a9, 0x8001, 0x200, 0x10, 0x2, 0x5}, {0x7, 0xfffffffd, 0x1, 0xe, 0x7}, {0x3, 0x7, 0x88e, 0x0, 0x6, 0x7}, {0xffffffff, 0xffffffde, 0x81, 0x0, 0x7fff, 0xffff}, {0xd43, 0x855, 0x4, 0x41aa, 0x2, 0xf09c}, {0xaf, 0x61f784e8, 0xed, 0xea, 0x400, 0x5}, {0x7, 0xa, 0x1, 0x6656, 0xfff, 0xb}], [{}, {0x3}, {0x4, 0x1}, {0x0, 0x3aa157f48d3b3bb3}, {}, {0x3}, {0x0, 0x1}, {0x1, 0x1}, {0x2}, {0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x3}, {0x5}, {0x5}, {0x1}, {0x2, 0x1}, {0x3}, {}, {0x1}, {0x1}, {0x5, 0x1}, {}, {0x5, 0x1}, {}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x4, 0x1}, {0x2, 0x1}, {0x4}, {0x1, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x1}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x5, 0x1}, {0x4}, {0x5}, {0x1, 0x1}, {0x3}, {}, {0x3, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x3}, {0x0, 0x1}, {0x1, 0x1}, {0x2}, {0x5}, {0x5}, {0x3}, {0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2, 0x3}, {0x3}, {0x2, 0x1}, {0x3}, {0x3}, {0x3, 0x1}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x4}, {0x4, 0xd26d20c064367a2c}, {0x5, 0x1}, {0x5, 0x1}, {0x4}, {0x4, 0x1}, {0x4}, {0x3, 0x1}, {0x2}, {0x1}, {0x3}, {0x5, 0x1}, {0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x5}, {0x2, 0x1}, {0x3}, {0x1}, {0x5}, {0x1}, {0x1}, {}, {}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x2}, {0x3}, {0x0, 0x1}, {0x5}, {0x5, 0x1}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x5}, {0x3}, {0x3, 0x1}, {0x3, 0x1}, {}, {0x0, 0x1}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$kcm(r6, &(0x7f0000002900)={&(0x7f0000000500)=@xdp={0x2c, 0x8, r4, 0x10c}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000380)="da", 0x5dc}], 0x1}, 0x4000880) 4.543530145s ago: executing program 1 (id=18233): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0x20000c40) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r4) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newtfilter={0x88, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xc, 0xfff3}, {}, {0x8, 0x10}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0x202, 0x10000000, 0x1000, 0x8}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x8080) r6 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000140)=@xdp={0x2c, 0x8, r3, 0x3c}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000540)='\'', 0x1}], 0x1}, 0x4011) r7 = socket$kcm(0x11, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r9, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030028590214600600002fb96dbcf706e10500000086ddffff1144ee162fd4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 4.015174645s ago: executing program 3 (id=18236): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="0827e0", 0x3}], 0x1}}], 0x1, 0x4400c800) sendto$inet6(r0, &(0x7f0000000140)="222818fc13ef339b9d0789c480ff08abe7b8e655f6c3f6bc", 0x18, 0x3b00, 0x0, 0x0) 3.901914865s ago: executing program 5 (id=18237): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a6c000000060a0b040000000000000000020000004000048018000180080001006f7366000c000280080001400000000424000180090001006d6574610000000014000280080002400000000c08000340000000150900010073797a30000000000900020073797a320000000014000000110001"], 0x94}, 0x1, 0x0, 0x0, 0x40801}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) 3.886824507s ago: executing program 0 (id=18238): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00'}) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x20000000) r2 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x10) 3.198765734s ago: executing program 0 (id=18240): r0 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @random, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @private=0xa010101, @multicast1}, {0x15, 0x0, 0x0, @empty}}}}}, 0x0) sendmsg(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0xe}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) 3.02378834s ago: executing program 3 (id=18241): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="0b03feff4f00021202004788aa96a13bb1000011000088", 0x17, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) 2.855427192s ago: executing program 2 (id=18242): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, 0x0, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r2, 0x0, 0x0) sendmsg$sock(r1, 0x0, 0x0) 2.847894596s ago: executing program 5 (id=18243): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001300050000000000feffffff07000000", @ANYRES32=r1], 0x34}, 0x1, 0x0, 0x0, 0x800c000}, 0x0) 2.847120564s ago: executing program 0 (id=18244): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xf}, 0x15, 0x3, 'sed\x00', 0x1, 0x6, 0x3d}, 0x2c) r1 = socket$kcm(0xa, 0x2, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, 0x0, 0x0) sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @loopback, 0x4e21, 0x3, 'lblcr\x00', 0x0, 0x81, 0x39}, {@rand_addr=0x64010500, 0x4e25, 0x3, 0xc3, 0xfffffff8, 0x12d5c}}, 0x44) r4 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000140)=@in6={0x2, 0x15, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 2.846751707s ago: executing program 1 (id=18245): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x4, &(0x7f0000000140)={0x11, 0x88a8, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'erspan0\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x8, 0x1, 0x0, 0x6, {{0x29, 0x4, 0x2, 0x2b, 0xa4, 0x64, 0x0, 0x7, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@generic={0x44, 0x10, "d608857ecb9bf6a1b189ebb7b356"}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x34, 0x94, 0x3, 0x6, [{@rand_addr=0x64010101}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xf}, {@multicast1, 0x9}, {@empty, 0x20000000}, {@private=0xa010100, 0x8}, {@rand_addr=0x64010100, 0x1}]}, @lsrr={0x83, 0x17, 0x65, [@local, @remote, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2]}, @timestamp={0x44, 0x8, 0x7d, 0x0, 0xa, [0xfffffffc]}, @ssrr={0x89, 0x27, 0x6f, [@loopback, @loopback, @dev={0xac, 0x14, 0x14, 0x39}, @rand_addr=0x64010100, @remote, @dev={0xac, 0x14, 0x14, 0x38}, @dev={0xac, 0x14, 0x14, 0x1e}, @rand_addr=0x64010100, @empty]}]}}}}}) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000600)={'wpan1\x00', 0x0}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000100)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7000080000000a0000000400308008000300", @ANYRES32=r2], 0x20}, 0x1, 0x0, 0x0, 0x100}, 0x24000000) 2.594860363s ago: executing program 3 (id=18246): setsockopt$llc_int(0xffffffffffffffff, 0x6a, 0x6, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c000780080012400000000505000500020000000500040001000000110003006861"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a3100000000050001000700"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000100)=ANY=[@ANYBLOB="28000000030605000000000000000000020000050900020073797a31000000000500010007"], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x14) 2.453612063s ago: executing program 5 (id=18247): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000340)={0x1c, r1, 0x1, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4008081}, 0x40) 2.388651141s ago: executing program 2 (id=18248): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="6c0000001000010400"/20, @ANYBLOB="5d580000000000001c001a8018000a801400070000000000000000000000000000000001140003006970766c616e310000000000"], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x84) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc142e00004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 2.273956616s ago: executing program 0 (id=18249): getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000240)={0x8, 0x8000, 0x80000000, 0x7}, &(0x7f0000000280)=0x10) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_lsm={0x1d, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x41000, 0x68, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000240)=[{0x1, 0x5, 0x5, 0x1}], 0x10, 0x5}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r2, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="02000000040000000800000001", @ANYRESHEX=r1], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000002700)={r4, &(0x7f0000000240), 0x0}, 0x20) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f0000000000)=0x8, 0x4) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x23c, 0x19, 0x1, 0x0, 0x0, {{@in=@private, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x100000000, 0xca8}}, [@tmpl={0x184, 0x5, [{{@in=@local, 0x4d5, 0x3c}, 0x0, @in=@broadcast}, {{@in6=@remote, 0x0, 0x3c}, 0x0, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x1}, {{@in=@remote, 0x0, 0x6c}, 0x0, @in=@local}, {{@in6=@local, 0x0, 0x33}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x3, 0x0, 0x0, 0x81}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfffffffe, 0x6c}, 0x0, @in=@multicast1, 0x0, 0x0, 0x0, 0x3}, {{@in6=@mcast1, 0x0, 0x6d}, 0xa, @in6=@private1, 0x0, 0x4, 0x0, 0x2}]}]}, 0x23c}}, 0x0) socket$netlink(0x10, 0x3, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendfile(r8, r7, 0x0, 0xbdc4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x6, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', r3, 0x2}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r9, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="140000001d000137440000000000487007"], 0x14}}, 0x0) connect$inet6(r6, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) 2.136256843s ago: executing program 1 (id=18250): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r0, 0x18000000000002a0, 0x15, 0x0, &(0x7f0000001840)="b9ff0307683a268cb8091a990053", 0x0, 0xfe, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.851673118s ago: executing program 5 (id=18251): r0 = socket$inet6(0xa, 0x3, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000980)={{{@in=@multicast1, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x4e1f, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x3b}, {0x10000, 0x200000004, 0x40000000007, 0x6811221d, 0x100000000, 0x8000000000000001, 0x200000003, 0x9}, {0x5, 0xfffffffffffffffd, 0x7}, 0x1, 0x0, 0x1, 0x0, 0x6}, {{@in=@empty, 0x0, 0x6c}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x3502, 0x1, 0x0, 0x0, 0x9, 0x3}}, 0xe8) connect$inet6(r0, 0x0, 0x0) 1.810452574s ago: executing program 2 (id=18252): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x30, r1, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x143c}]]}, 0x30}, 0x1, 0x0, 0x0, 0x85}, 0x4c040) 1.656532466s ago: executing program 3 (id=18253): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@bridge_dellink={0x34, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x4, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x7, 0x0, 0x0, 0x8}]}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x50005}, 0x0) 1.57328836s ago: executing program 1 (id=18254): r0 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @random, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @private=0xa010101, @multicast1}, {0x15, 0x0, 0x0, @empty}}}}}, 0x0) sendmsg(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0xe}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) 1.189940749s ago: executing program 0 (id=18255): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x84) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc142e00004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 1.131084833s ago: executing program 5 (id=18256): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="0b03feff4f00021202004788aa96a13bb1000011000088", 0x17, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) 1.085860113s ago: executing program 2 (id=18257): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001300050000000000feffffff07000000", @ANYRES32=r1], 0x34}, 0x1, 0x0, 0x0, 0x800c000}, 0x0) 765.486923ms ago: executing program 1 (id=18258): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000780)=ANY=[@ANYBLOB="e8000000", @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="cc00330080000000ffffffffffff080211000000f70b87594b3f000000000000"], 0xe8}, 0x1, 0x0, 0x0, 0x44800}, 0x0) 693.807976ms ago: executing program 3 (id=18259): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="0001000016000100000000000000000000000000000000000000000000000000ffffffff0000000000000000000000004e200000000000000000a00000000000", @ANYRES32=0x0, @ANYBLOB="ac1414aa0000000000000000000000000000000033000000ac1414bb00000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000002000000000000000000000000000000001000000000000000000000000000000000000001000000000000000a00000000000000000000000500000005000000080023"], 0x100}}, 0x0) 606.904307ms ago: executing program 2 (id=18260): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r3}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 521.786159ms ago: executing program 5 (id=18261): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x28, r1, 0x63d, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}, 0x1, 0x0, 0x0, 0x48801}, 0x20002884) 455.147475ms ago: executing program 0 (id=18262): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="6c0000001000010400"/20, @ANYBLOB="5d580000000000001c001a8018000a801400070000000000000000000000000000000001140003006970766c616e310000000000"], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x84) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc142e00004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 217.488903ms ago: executing program 1 (id=18263): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings]}, 0x28}, 0x1, 0x0, 0x0, 0x2000c080}, 0x0) 73.129416ms ago: executing program 3 (id=18264): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r0, 0x18000000000002a0, 0x15, 0x0, &(0x7f0000001840)="b9ff0307683a268cb8091a990053", 0x0, 0xfe, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) 0s ago: executing program 2 (id=18265): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0xfffe, 0x3000001, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="600000000206010800000000000000000100000a"], 0x60}, 0x1, 0x0, 0x0, 0x2002d0c4}, 0x24004090) write(r0, &(0x7f00000000c0)="8f2a0a65bd8c002b0304000e0580a7b6070d63e286a5cefe", 0x5ac) kernel console output (not intermixed with test programs): space 0, times 0 [ 1204.376159][T14466] netlink: 'syz.5.16807': attribute type 1 has an invalid length. [ 1204.618798][T14464] CPU: 0 UID: 0 PID: 14464 Comm: syz.2.16806 Not tainted syzkaller #0 PREEMPT(full) [ 1204.618823][T14464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1204.618833][T14464] Call Trace: [ 1204.618841][T14464] [ 1204.618848][T14464] dump_stack_lvl+0xe8/0x150 [ 1204.618874][T14464] should_fail_ex+0x412/0x560 [ 1204.618909][T14464] should_failslab+0xa8/0x100 [ 1204.618935][T14464] __kmalloc_cache_noprof+0x88/0x660 [ 1204.618955][T14464] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 1204.618980][T14464] ? sctp_add_bind_addr+0x8c/0x370 [ 1204.619006][T14464] sctp_add_bind_addr+0x8c/0x370 [ 1204.619031][T14464] sctp_copy_local_addr_list+0x314/0x4f0 [ 1204.619056][T14464] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 1204.619077][T14464] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1204.619099][T14464] ? sctp_v6_is_any+0x64/0x80 [ 1204.619223][T14464] ? sctp_copy_one_addr+0x93/0x360 [ 1204.619248][T14464] sctp_bind_addr_copy+0x189/0x3c0 [ 1204.619277][T14464] sctp_connect_new_asoc+0x2ff/0x6b0 [ 1204.619298][T14464] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1204.619319][T14464] ? __ipv6_addr_type+0x14d/0x2f0 [ 1204.619377][T14464] ? sctp_inet6_send_verify+0x6e/0x300 [ 1204.619396][T14464] ? sctp_endpoint_lookup_assoc+0xd1/0x260 [ 1204.619417][T14464] __sctp_connect+0x5cb/0xdc0 [ 1204.619443][T14464] ? __pfx___sctp_connect+0x10/0x10 [ 1204.619457][T14464] ? sctp_inet_connect+0xa0/0x210 [ 1204.619478][T14464] ? __local_bh_enable_ip+0xd0/0x130 [ 1204.619499][T14464] sctp_inet_connect+0x12e/0x210 [ 1204.619523][T14464] __sys_connect+0x312/0x450 [ 1204.619544][T14464] ? __pfx___sys_connect+0x10/0x10 [ 1204.619571][T14464] ? __pfx_ksys_write+0x10/0x10 [ 1204.619601][T14464] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1204.619618][T14464] __x64_sys_connect+0x7a/0x90 [ 1204.619636][T14464] do_syscall_64+0x15f/0xf80 [ 1204.619656][T14464] ? trace_irq_disable+0x3b/0x140 [ 1204.619676][T14464] ? clear_bhb_loop+0x40/0x90 [ 1204.619694][T14464] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1204.619708][T14464] RIP: 0033:0x7f2404b9ce59 [ 1204.619724][T14464] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1204.619734][T14464] RSP: 002b:00007f24059e2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 1204.619750][T14464] RAX: ffffffffffffffda RBX: 00007f2404e15fa0 RCX: 00007f2404b9ce59 [ 1204.619761][T14464] RDX: 000000000000001c RSI: 0000200000000100 RDI: 0000000000000003 [ 1204.619770][T14464] RBP: 00007f24059e2090 R08: 0000000000000000 R09: 0000000000000000 [ 1204.619778][T14464] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1204.619786][T14464] R13: 00007f2404e16038 R14: 00007f2404e15fa0 R15: 00007ffc84c81938 [ 1204.619810][T14464] [ 1205.045681][T14466] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1205.102920][T14476] bond0: (slave geneve4): making interface the new active one [ 1205.111763][T14476] bond0: (slave geneve4): Enslaving as an active interface with an up link [ 1205.166175][T14477] gretap3: left promiscuous mode [ 1205.177056][T14477] gretap3: left allmulticast mode [ 1205.204681][T14477] ip6tnl4: left promiscuous mode [ 1205.210040][T14477] team1: left promiscuous mode [ 1205.216922][T14477] team1: left allmulticast mode [ 1205.222280][T14477] bond11: left promiscuous mode [ 1205.230003][T14477] vti0: left promiscuous mode [ 1205.298866][T14477] team2: left promiscuous mode [ 1205.314279][T14477] team2: left allmulticast mode [ 1205.326685][T14477] vlan3: left promiscuous mode [ 1205.333175][T14477] bond12: left promiscuous mode [ 1205.339634][T14477] bridge9: left promiscuous mode [ 1205.350815][T14477] vlan3: left allmulticast mode [ 1205.356019][T14477] bond12: left allmulticast mode [ 1205.361335][T14477] bridge9: left allmulticast mode [ 1205.385962][T14477] veth11: left promiscuous mode [ 1205.406744][T14477] veth11: left allmulticast mode [ 1205.425195][T14477] bond15: left promiscuous mode [ 1205.436808][T14477] veth15: left allmulticast mode [ 1205.453935][T23450] netdevsim netdevsim5 netdevsim0: set [1, 2] type 2 family 0 port 20004 - 0 [ 1205.582907][T23450] netdevsim netdevsim5 netdevsim1: set [1, 2] type 2 family 0 port 20004 - 0 [ 1205.616405][T23450] netdevsim netdevsim5 netdevsim2: set [1, 2] type 2 family 0 port 20004 - 0 [ 1205.633187][T23450] netdevsim netdevsim5 netdevsim3: set [1, 2] type 2 family 0 port 20004 - 0 [ 1205.726233][T14520] FAULT_INJECTION: forcing a failure. [ 1205.726233][T14520] name failslab, interval 1, probability 0, space 0, times 0 [ 1205.759027][T14520] CPU: 1 UID: 0 PID: 14520 Comm: syz.5.16822 Not tainted syzkaller #0 PREEMPT(full) [ 1205.759052][T14520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1205.759061][T14520] Call Trace: [ 1205.759068][T14520] [ 1205.759075][T14520] dump_stack_lvl+0xe8/0x150 [ 1205.759101][T14520] should_fail_ex+0x412/0x560 [ 1205.759125][T14520] should_failslab+0xa8/0x100 [ 1205.759147][T14520] __kmalloc_cache_noprof+0x88/0x660 [ 1205.759165][T14520] ? __sctp_v6_cmp_addr+0x1e6/0x510 [ 1205.759186][T14520] ? sctp_add_bind_addr+0x8c/0x370 [ 1205.759211][T14520] sctp_add_bind_addr+0x8c/0x370 [ 1205.759236][T14520] sctp_copy_local_addr_list+0x314/0x4f0 [ 1205.759261][T14520] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 1205.759282][T14520] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1205.759305][T14520] ? sctp_v6_is_any+0x64/0x80 [ 1205.759327][T14520] ? sctp_copy_one_addr+0x93/0x360 [ 1205.759350][T14520] sctp_bind_addr_copy+0xb3/0x3c0 [ 1205.759374][T14520] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1205.759397][T14520] sctp_connect_new_asoc+0x2ff/0x6b0 [ 1205.759418][T14520] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1205.759438][T14520] ? __ipv6_addr_type+0x14d/0x2f0 [ 1205.759462][T14520] ? sctp_inet6_send_verify+0x6e/0x300 [ 1205.759484][T14520] ? sctp_endpoint_lookup_assoc+0xd1/0x260 [ 1205.759502][T14520] __sctp_connect+0x5cb/0xdc0 [ 1205.759532][T14520] ? __pfx___sctp_connect+0x10/0x10 [ 1205.759547][T14520] ? sctp_inet_connect+0xa0/0x210 [ 1205.759570][T14520] ? __local_bh_enable_ip+0xd0/0x130 [ 1205.759592][T14520] sctp_inet_connect+0x12e/0x210 [ 1205.759617][T14520] __sys_connect+0x312/0x450 [ 1205.759638][T14520] ? __pfx___sys_connect+0x10/0x10 [ 1205.759669][T14520] ? __pfx_ksys_write+0x10/0x10 [ 1205.759697][T14520] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1205.759715][T14520] __x64_sys_connect+0x7a/0x90 [ 1205.759735][T14520] do_syscall_64+0x15f/0xf80 [ 1205.759756][T14520] ? trace_irq_disable+0x3b/0x140 [ 1205.759778][T14520] ? clear_bhb_loop+0x40/0x90 [ 1205.759799][T14520] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1205.759814][T14520] RIP: 0033:0x7f8b3839ce59 [ 1205.759831][T14520] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1205.759844][T14520] RSP: 002b:00007f8b3917d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 1205.759861][T14520] RAX: ffffffffffffffda RBX: 00007f8b38615fa0 RCX: 00007f8b3839ce59 [ 1205.759872][T14520] RDX: 000000000000001c RSI: 0000200000000100 RDI: 0000000000000003 [ 1205.759880][T14520] RBP: 00007f8b3917d090 R08: 0000000000000000 R09: 0000000000000000 [ 1205.759888][T14520] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1205.759896][T14520] R13: 00007f8b38616038 R14: 00007f8b38615fa0 R15: 00007ffc0754a038 [ 1205.759931][T14520] [ 1206.158313][T14517] syzkaller0: entered promiscuous mode [ 1206.176347][T14517] syzkaller0: entered allmulticast mode [ 1206.362738][T14539] __nla_validate_parse: 3 callbacks suppressed [ 1206.362757][T14539] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16826'. [ 1206.529225][T14551] hsr0: left promiscuous mode [ 1206.579935][T14551] gretap4: left promiscuous mode [ 1206.592150][T14551] gretap4: left allmulticast mode [ 1206.610975][T14555] netlink: 64 bytes leftover after parsing attributes in process `syz.1.16828'. [ 1206.617702][T14554] netlink: 'syz.0.16831': attribute type 11 has an invalid length. [ 1206.660663][T14554] netlink: 'syz.0.16831': attribute type 4 has an invalid length. [ 1206.711358][T14554] netlink: 'syz.0.16831': attribute type 6 has an invalid length. [ 1206.748245][T14554] netlink: 199556 bytes leftover after parsing attributes in process `syz.0.16831'. [ 1207.065661][T14582] netlink: 28 bytes leftover after parsing attributes in process `syz.2.16838'. [ 1207.077792][T14582] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16838'. [ 1207.260705][T14588] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16840'. [ 1207.684378][T14613] netlink: 36 bytes leftover after parsing attributes in process `syz.0.16845'. [ 1207.925417][T14629] netlink: 'syz.5.16849': attribute type 1 has an invalid length. [ 1207.978634][T14629] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 1208.072924][T14639] netlink: 64 bytes leftover after parsing attributes in process `syz.3.16852'. [ 1208.155908][T14644] tunl0: entered promiscuous mode [ 1208.196341][T14644] netlink: 'syz.5.16854': attribute type 3 has an invalid length. [ 1208.217774][T14644] netlink: 9 bytes leftover after parsing attributes in process `syz.5.16854'. [ 1208.595121][T14671] bond11: entered allmulticast mode [ 1208.610789][T14671] vti0: entered allmulticast mode [ 1208.645687][T14674] netlink: 36 bytes leftover after parsing attributes in process `syz.0.16864'. [ 1208.662198][T14669] bond11: left allmulticast mode [ 1208.683457][T14669] vti0: left allmulticast mode [ 1209.387501][T14719] ip6tnl4: entered promiscuous mode [ 1209.393675][T13337] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 1209.432615][T13337] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 1209.613480][T14732] xt_hashlimit: size too large, truncated to 1048576 [ 1209.784422][T13337] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 1210.233873][T14775] IPVS: Unknown mcast interface: vcan0 [ 1210.392894][T14784] syz_tun: entered allmulticast mode [ 1210.447306][T14784] pimreg: entered allmulticast mode [ 1210.477186][T14782] syz_tun: left allmulticast mode [ 1210.482969][T14789] net_ratelimit: 18 callbacks suppressed [ 1210.482990][T14789] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1210.678687][T14801] bond17: entered promiscuous mode [ 1210.684830][T14801] bond17: entered allmulticast mode [ 1210.690719][T14801] 8021q: adding VLAN 0 to HW filter on device bond17 [ 1211.312722][T14840] netlink: 'syz.3.16923': attribute type 1 has an invalid length. [ 1211.986343][T14860] netlink: 'syz.5.16931': attribute type 5 has an invalid length. [ 1212.005717][T14860] __nla_validate_parse: 15 callbacks suppressed [ 1212.005739][T14860] netlink: 4 bytes leftover after parsing attributes in process `syz.5.16931'. [ 1212.017237][T14878] netlink: 20 bytes leftover after parsing attributes in process `syz.2.16936'. [ 1212.061379][T14880] netlink: 32 bytes leftover after parsing attributes in process `syz.1.16937'. [ 1212.215369][T14889] netlink: 64 bytes leftover after parsing attributes in process `syz.0.16938'. [ 1212.430306][T14893] netlink: 208240 bytes leftover after parsing attributes in process `syz.3.16942'. [ 1212.477517][T14905] netlink: 28 bytes leftover after parsing attributes in process `syz.1.16946'. [ 1212.489165][T14905] IPVS: Unknown mcast interface: vcan0 [ 1212.699959][T14918] netlink: 8 bytes leftover after parsing attributes in process `syz.5.16950'. [ 1212.735879][T14918] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 1212.759112][T14918] netlink: 24 bytes leftover after parsing attributes in process `syz.5.16950'. [ 1212.838322][T14926] bond11: entered allmulticast mode [ 1212.848449][T14926] vti0: entered allmulticast mode [ 1212.868856][T14925] bond11: left allmulticast mode [ 1212.886101][T14925] vti0: left allmulticast mode [ 1213.005273][T14934] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16955'. [ 1213.097976][T14942] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16955'. [ 1213.133264][T14941] netlink: 'syz.5.16959': attribute type 10 has an invalid length. [ 1213.607516][ T8127] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x1 [ 1214.807268][T15036] bond0: Device is already in use. [ 1215.060570][T15056] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048) [ 1215.078803][T15056] netlink: 'syz.0.16995': attribute type 23 has an invalid length. [ 1215.180231][T15062] netlink: 'syz.0.16997': attribute type 16 has an invalid length. [ 1215.191347][T15062] netlink: 'syz.0.16997': attribute type 17 has an invalid length. [ 1215.216595][T15062] ip_vti0: left promiscuous mode [ 1215.235536][T15062] 8021q: adding VLAN 0 to HW filter on device .` [ 1215.285725][T15062] veth1_virt_wifi: left promiscuous mode [ 1215.298225][T15062] macsec0: left promiscuous mode [ 1215.304388][T15062] macsec0: left allmulticast mode [ 1215.309723][T15062] veth1_macvtap: left allmulticast mode [ 1215.346893][T15062] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode [ 1215.354587][T15062] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode [ 1215.378506][T15062] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check. [ 1215.703925][T15090] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 1215.711453][T15090] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 1215.802247][T15094] netlink: 'syz.0.17008': attribute type 2 has an invalid length. [ 1216.141949][T15114] bond7: left allmulticast mode [ 1216.162507][T15114] bond7: left promiscuous mode [ 1216.197803][T15114] bridge0: port 3(bond7) entered disabled state [ 1216.809279][T15144] netlink: 'syz.2.17022': attribute type 1 has an invalid length. [ 1217.118176][T15166] bond18: (slave bond_slave_1): Device is not bonding slave [ 1217.126174][T15166] bond18: option active_slave: invalid value (bond_slave_1) [ 1217.139277][T15166] bond18 (unregistering): Released all slaves [ 1217.811447][T15202] __nla_validate_parse: 11 callbacks suppressed [ 1217.811466][T15202] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17039'. [ 1217.842709][T15202] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17039'. [ 1217.882832][T15209] netlink: 28 bytes leftover after parsing attributes in process `syz.2.17042'. [ 1217.907266][T15209] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17042'. [ 1217.943938][T15212] vlan0: entered promiscuous mode [ 1218.005461][T15221] netlink: 16 bytes leftover after parsing attributes in process `syz.0.17043'. [ 1218.029457][T15218] IPVS: Unknown mcast interface: vcan0 [ 1218.102650][T15223] bond11: entered allmulticast mode [ 1218.108135][T15223] vti0: entered allmulticast mode [ 1218.117088][T15222] bond11: left allmulticast mode [ 1218.123446][T15222] vti0: left allmulticast mode [ 1218.222865][T15225] syzkaller0: entered promiscuous mode [ 1218.240164][T15225] syzkaller0: entered allmulticast mode [ 1218.345598][T15240] netlink: 64 bytes leftover after parsing attributes in process `syz.0.17049'. [ 1218.365766][T15230] netlink: 256 bytes leftover after parsing attributes in process `syz.3.17046'. [ 1219.141702][T15265] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17058'. [ 1221.240601][T15230] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1221.391553][T15298] netlink: 28 bytes leftover after parsing attributes in process `syz.5.17065'. [ 1221.521313][T15305] netlink: 64 bytes leftover after parsing attributes in process `syz.0.17067'. [ 1221.657402][T15314] netlink: 'syz.2.17072': attribute type 1 has an invalid length. [ 1221.798187][T15323] syzkaller0: entered promiscuous mode [ 1221.816000][T15323] syzkaller0: entered allmulticast mode [ 1222.131593][T15348] IPVS: Unknown mcast interface: vcan0 [ 1222.225140][T15351] syzkaller0: entered promiscuous mode [ 1222.230979][T15351] syzkaller0: entered allmulticast mode [ 1222.455976][T15360] nbd: must specify at least one socket [ 1222.476797][T15367] netlink: 'syz.3.17091': attribute type 1 has an invalid length. [ 1222.488416][T15367] workqueue: Failed to create a rescuer kthread for wq "bond13": -EINTR [ 1222.594160][T15377] sctp: [Deprecated]: syz.1.17094 (pid 15377) Use of int in maxseg socket option. [ 1222.594160][T15377] Use struct sctp_assoc_value instead [ 1222.640226][T15379] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1222.958203][T15400] netlink: 'syz.2.17102': attribute type 16 has an invalid length. [ 1222.995416][T15400] netlink: 'syz.2.17102': attribute type 17 has an invalid length. [ 1223.014663][T15404] netlink: 'syz.5.17103': attribute type 16 has an invalid length. [ 1223.027374][T15404] netlink: 'syz.5.17103': attribute type 17 has an invalid length. [ 1223.059158][T15400] tipc: Resetting bearer [ 1223.065488][T15400] tipc: Resetting bearer [ 1223.071453][T15400] erspan0: left promiscuous mode [ 1223.101955][T15407] block nbd1: NBD_DISCONNECT [ 1223.125993][T15400] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1223.152744][T15400] 8021q: adding VLAN 0 to HW filter on device team0 [ 1223.166389][T15400] batman_adv: batadv0: Interface activated: dummy0 [ 1223.176421][T15400] dummy0: left promiscuous mode [ 1223.194312][T15400] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1223.227888][T15400] bridge_slave_0: left promiscuous mode [ 1223.256490][T15400] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1223.300397][T15400] veth1_vlan: left promiscuous mode [ 1223.316420][T15400] veth0_vlan: left promiscuous mode [ 1223.323340][T15400] veth0_vlan: entered promiscuous mode [ 1223.335602][T15400] veth1_vlan: entered promiscuous mode [ 1223.348868][T15400] tipc: Resetting bearer [ 1223.356987][T15400] tipc: Resetting bearer [ 1223.367705][T15400] veth0_macvtap: left promiscuous mode [ 1223.378443][T15400] veth0_macvtap: entered promiscuous mode [ 1223.387057][T15400] veth1_macvtap: entered promiscuous mode [ 1223.452818][T15418] sctp: [Deprecated]: syz.0.17109 (pid 15418) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1223.452818][T15418] Use struct sctp_sack_info instead [ 1223.469770][T15400] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1223.491518][T15400] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1223.538098][T15400] erspan0: entered promiscuous mode [ 1223.545992][T15400] bond0: entered promiscuous mode [ 1223.551191][T15400] bond_slave_1: entered promiscuous mode [ 1223.558685][T15400] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1223.596748][T15400] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1223.610296][T15400] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1223.625687][T15400] A link change request failed with some changes committed already. Interface @ may have been left with an inconsistent configuration, please check. [ 1223.651694][T15404] tunl0: left promiscuous mode [ 1223.670403][T15404] tipc: Resetting bearer [ 1223.699978][T15404] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1223.719693][T15404] A link change request failed with some changes committed already. Interface vxlan0 may have been left with an inconsistent configuration, please check. [ 1223.888025][T13332] syz0: Port: 1 Link ACTIVE [ 1223.911908][ T8127] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1223.932371][ T8127] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1223.948851][ T8127] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 256 - 0 [ 1223.959498][ T8127] netdevsim netdevsim2 eth0: set [1, 2] type 2 family 0 port 47584 - 0 [ 1223.981210][ T8127] netdevsim netdevsim2 eth0: set [1, 3] type 2 family 0 port 20004 - 0 [ 1224.057669][ T8127] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1224.082699][ T8127] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1224.102199][ T8127] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 256 - 0 [ 1224.110747][ T8127] netdevsim netdevsim2 eth1: set [1, 2] type 2 family 0 port 47584 - 0 [ 1224.120452][ T8127] netdevsim netdevsim2 eth1: set [1, 3] type 2 family 0 port 20004 - 0 [ 1224.192157][ T8127] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1224.212432][ T8127] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1224.256694][ T8127] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 256 - 0 [ 1224.311182][ T8127] netdevsim netdevsim2 eth2: set [1, 2] type 2 family 0 port 47584 - 0 [ 1224.343957][ T8127] netdevsim netdevsim2 eth2: set [1, 3] type 2 family 0 port 20004 - 0 [ 1224.367521][ T8127] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1224.376180][ T8127] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1224.385655][ T8127] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 256 - 0 [ 1224.395403][ T8127] netdevsim netdevsim2 eth3: set [1, 2] type 2 family 0 port 47584 - 0 [ 1224.404780][ T8127] netdevsim netdevsim2 eth3: set [1, 3] type 2 family 0 port 20004 - 0 [ 1224.407006][T15452] netlink: 'syz.3.17121': attribute type 16 has an invalid length. [ 1224.431160][T15440] __nla_validate_parse: 5 callbacks suppressed [ 1224.431179][T15440] netlink: 28 bytes leftover after parsing attributes in process `syz.1.17117'. [ 1224.448733][T15452] netlink: 'syz.3.17121': attribute type 17 has an invalid length. [ 1224.456245][T15454] netlink: 64 bytes leftover after parsing attributes in process `syz.2.17120'. [ 1224.464525][T15444] netlink: 24 bytes leftover after parsing attributes in process `syz.5.17118'. [ 1224.529398][T15452] erspan0: left promiscuous mode [ 1224.603205][T15452] batadv0: left promiscuous mode [ 1224.620438][T15452] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1224.694269][T15452] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1224.715074][T15452] veth1_vlan: left promiscuous mode [ 1224.725072][T15452] veth0_vlan: left promiscuous mode [ 1224.732130][T15452] veth0_vlan: entered promiscuous mode [ 1224.744249][T15452] veth1_vlan: entered promiscuous mode [ 1224.777358][T15452] veth1_macvtap: left promiscuous mode [ 1224.798926][T15452] veth0_macvtap: left promiscuous mode [ 1224.813531][T15452] veth0_macvtap: entered promiscuous mode [ 1224.820830][T15452] veth1_macvtap: entered promiscuous mode [ 1224.847409][T15452] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1224.855637][T15452] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1224.865700][T15452] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1224.881775][T15452] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1224.903743][T15452] erspan0: entered promiscuous mode [ 1224.911529][T15452] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1224.919867][T15452] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1224.930023][T15452] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1224.939166][T15452] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1224.948370][T15452] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1224.958370][T15452] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1224.972975][T15452] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1224.985607][T15452] 8021q: adding VLAN 0 to HW filter on device eth0 [ 1224.999021][T15452] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1225.010348][T15452] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1225.018182][T15452] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1225.026409][T15452] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1225.034845][T15452] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1225.046695][T15452] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1225.059153][T15452] bond0: entered promiscuous mode [ 1225.065021][T15452] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1225.073769][T15452] batadv0: entered promiscuous mode [ 1225.079566][T15452] 8021q: adding VLAN 0 to HW filter on device macsec2 [ 1225.093435][T15452] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 1225.103847][T15452] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1225.114647][ T8127] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1225.123415][ T8127] netdevsim netdevsim3 eth0: set [0, 1] type 1 family 0 port 2816 - 0 [ 1225.131632][ T8127] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1225.380781][T15459] tipc: Resetting bearer [ 1225.507297][T15459] A link change request failed with some changes committed already. Interface veth0_to_bridge may have been left with an inconsistent configuration, please check. [ 1225.538249][ T8127] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1225.552872][ T8127] netdevsim netdevsim3 eth1: set [0, 1] type 1 family 0 port 2816 - 0 [ 1225.561258][ T8127] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1225.590928][ T8127] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1225.599691][ T8127] netdevsim netdevsim3 eth2: set [0, 1] type 1 family 0 port 2816 - 0 [ 1225.608298][ T8127] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1225.636951][T15479] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 1225.669076][T15476] netlink: 12 bytes leftover after parsing attributes in process `syz.2.17128'. [ 1225.693138][ T8127] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1225.722784][ T8127] netdevsim netdevsim3 eth3: set [0, 1] type 1 family 0 port 2816 - 0 [ 1225.750054][ T8127] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1225.903259][T23450] wlan1: Trigger new scan to find an IBSS to join [ 1226.075162][T15497] netlink: 'syz.1.17135': attribute type 16 has an invalid length. [ 1226.109603][T15497] netlink: 'syz.1.17135': attribute type 17 has an invalid length. [ 1226.113143][T15499] netlink: 64 bytes leftover after parsing attributes in process `syz.5.17136'. [ 1226.186585][T15497] 8021q: adding VLAN 0 to HW filter on device  [ 1226.197388][T15497] 8021q: adding VLAN 0 to HW filter on device team0 [ 1226.205457][T15497] tipc: Resetting bearer [ 1226.211572][T15497] tipc: Resetting bearer [ 1226.242192][T15507] netlink: 36 bytes leftover after parsing attributes in process `syz.3.17139'. [ 1226.287143][T15497] tipc: Resetting bearer [ 1226.300388][T15497] tipc: Resetting bearer [ 1226.343297][T15497] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1226.361622][T15497] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1226.374279][T15497] 8021q: adding VLAN 0 to HW filter on device hsr0 [ 1226.382996][T15497] veth0_macvtap: left promiscuous mode [ 1226.390267][T15497] veth0_macvtap: entered promiscuous mode [ 1226.406842][T15497] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1226.415891][T15497] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1226.429584][T15497] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1226.438239][T15497] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1226.456715][T15497] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1226.471292][T15497] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1226.480319][T15497] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1226.497598][T15497] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1226.507218][T15497] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1226.519255][T15497] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1226.530877][T15497] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1226.548339][T15497] A link change request failed with some changes committed already. Interface rose0 may have been left with an inconsistent configuration, please check. [ 1226.600039][ T8127] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1226.614149][ T8127] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1226.632499][T13333] hsr0 speed is unknown, defaulting to 1000 [ 1226.639126][T13333] syz1: Port: 1 Link ACTIVE [ 1226.650279][ T8127] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1226.686157][ T8127] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1226.698405][T15518] nbd1: detected capacity change from 0 to 63 [ 1226.728239][ T8127] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1226.744952][ T8372] block nbd1: Receive control failed (result -32) [ 1226.752607][ T8127] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1226.754317][ T8127] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1226.768824][T15443] block nbd1: Dead connection, failed to find a fallback [ 1226.782068][T15443] block nbd1: shutting down sockets [ 1226.790964][T15443] blk_print_req_error: 284 callbacks suppressed [ 1226.790985][T15443] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1226.809815][T15443] buffer_io_error: 286 callbacks suppressed [ 1226.809848][T15443] Buffer I/O error on dev nbd1, logical block 0, async page read [ 1226.824445][T15443] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1226.833879][T15443] Buffer I/O error on dev nbd1, logical block 1, async page read [ 1226.841878][T15443] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1226.862034][T15443] Buffer I/O error on dev nbd1, logical block 2, async page read [ 1226.891580][T15443] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1226.901793][ T8127] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1226.935615][T15443] Buffer I/O error on dev nbd1, logical block 3, async page read [ 1226.948574][T15443] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1227.027504][T15443] Buffer I/O error on dev nbd1, logical block 0, async page read [ 1227.045814][T15443] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1227.075193][T15443] Buffer I/O error on dev nbd1, logical block 1, async page read [ 1227.120120][T15443] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1227.139784][T15443] Buffer I/O error on dev nbd1, logical block 2, async page read [ 1227.153995][T15443] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1227.164716][T15443] Buffer I/O error on dev nbd1, logical block 3, async page read [ 1227.174903][T15443] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1227.195044][T15443] Buffer I/O error on dev nbd1, logical block 0, async page read [ 1227.211025][T15443] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1227.230985][T15443] Buffer I/O error on dev nbd1, logical block 1, async page read [ 1227.258107][T15443] ldm_validate_partition_table(): Disk read failed. [ 1227.297657][T15443] Dev nbd1: unable to read RDB block 0 [ 1227.348958][T15443] nbd1: unable to read partition table [ 1227.391458][T15443] ldm_validate_partition_table(): Disk read failed. [ 1227.418141][T15443] Dev nbd1: unable to read RDB block 0 [ 1227.434648][T15443] nbd1: unable to read partition table [ 1227.506656][T15566] netlink: 16 bytes leftover after parsing attributes in process `syz.0.17157'. [ 1228.862579][ T8137] wlan1: Trigger new scan to find an IBSS to join [ 1229.758216][T15526] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1229.963899][T15580] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1230.052012][T15590] netlink: 12 bytes leftover after parsing attributes in process `syz.1.17161'. [ 1230.244574][T15599] vcan0: entered allmulticast mode [ 1230.259342][T15599] netlink: 12 bytes leftover after parsing attributes in process `syz.5.17169'. [ 1230.268340][T15602] FAULT_INJECTION: forcing a failure. [ 1230.268340][T15602] name failslab, interval 1, probability 0, space 0, times 0 [ 1230.302674][T15602] CPU: 0 UID: 0 PID: 15602 Comm: syz.1.17170 Not tainted syzkaller #0 PREEMPT(full) [ 1230.302698][T15602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1230.302708][T15602] Call Trace: [ 1230.302714][T15602] [ 1230.302721][T15602] dump_stack_lvl+0xe8/0x150 [ 1230.302749][T15602] should_fail_ex+0x412/0x560 [ 1230.302774][T15602] should_failslab+0xa8/0x100 [ 1230.302799][T15602] __kmalloc_noprof+0xe8/0x760 [ 1230.302820][T15602] ? sock_kmalloc+0xd6/0x160 [ 1230.302846][T15602] sock_kmalloc+0xd6/0x160 [ 1230.302867][T15602] ____sys_sendmsg+0x1c2/0x9f0 [ 1230.302894][T15602] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1230.302921][T15602] ? import_iovec+0x73/0xa0 [ 1230.302944][T15602] ___sys_sendmsg+0x2a5/0x360 [ 1230.302961][T15602] ? __lock_acquire+0x6b5/0x2cf0 [ 1230.302983][T15602] ? __pfx____sys_sendmsg+0x10/0x10 [ 1230.303036][T15602] ? __fget_files+0x2a/0x420 [ 1230.303054][T15602] ? __fget_files+0x3a0/0x420 [ 1230.303081][T15602] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1230.303135][T15602] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1230.303163][T15602] ? __pfx_ksys_write+0x10/0x10 [ 1230.303193][T15602] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1230.303211][T15602] do_syscall_64+0x15f/0xf80 [ 1230.303236][T15602] ? clear_bhb_loop+0x40/0x90 [ 1230.303256][T15602] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1230.303271][T15602] RIP: 0033:0x7fe76c19ce59 [ 1230.303289][T15602] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1230.303302][T15602] RSP: 002b:00007fe76cffe028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1230.303320][T15602] RAX: ffffffffffffffda RBX: 00007fe76c415fa0 RCX: 00007fe76c19ce59 [ 1230.303331][T15602] RDX: 0000000000000040 RSI: 00002000000052c0 RDI: 0000000000000003 [ 1230.303341][T15602] RBP: 00007fe76cffe090 R08: 0000000000000000 R09: 0000000000000000 [ 1230.303351][T15602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1230.303360][T15602] R13: 00007fe76c416038 R14: 00007fe76c415fa0 R15: 00007ffcef13e778 [ 1230.303388][T15602] [ 1230.351510][T15599] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1230.569061][T15606] ipvlan2: entered allmulticast mode [ 1230.574824][T15606] bond6: entered allmulticast mode [ 1230.646638][T15613] nbd2: detected capacity change from 0 to 63 [ 1230.656131][ T8372] block nbd2: Receive control failed (result -32) [ 1230.658907][T15614] bond6: (slave ipip0): refused to change device type [ 1230.674569][T15443] block nbd2: Dead connection, failed to find a fallback [ 1230.683404][T15443] block nbd2: shutting down sockets [ 1230.695539][T15443] ldm_validate_partition_table(): Disk read failed. [ 1230.705588][T15443] Dev nbd2: unable to read RDB block 0 [ 1230.715708][T15443] nbd2: unable to read partition table [ 1230.729995][T15443] ldm_validate_partition_table(): Disk read failed. [ 1230.738625][T15443] Dev nbd2: unable to read RDB block 0 [ 1230.747437][T15443] nbd2: unable to read partition table [ 1230.826325][T15621] netlink: 24 bytes leftover after parsing attributes in process `syz.2.17177'. [ 1230.974533][T15631] netlink: 64 bytes leftover after parsing attributes in process `syz.0.17180'. [ 1231.304972][T15650] nbd3: detected capacity change from 0 to 63 [ 1231.325645][T15656] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1231.334947][ T8372] block nbd3: Receive control failed (result -32) [ 1231.368684][T14090] block nbd3: Dead connection, failed to find a fallback [ 1231.389338][T14090] block nbd3: shutting down sockets [ 1231.402260][T14090] ldm_validate_partition_table(): Disk read failed. [ 1231.424565][T14090] Dev nbd3: unable to read RDB block 0 [ 1231.443240][T14090] nbd3: unable to read partition table [ 1231.479582][T14090] ldm_validate_partition_table(): Disk read failed. [ 1231.515272][T14090] Dev nbd3: unable to read RDB block 0 [ 1231.530927][T14090] nbd3: unable to read partition table [ 1231.688783][T15673] openvswitch: netlink: nsh attr 13535 is out of range max 3 [ 1231.751744][T15675] netlink: 'syz.5.17198': attribute type 1 has an invalid length. [ 1231.776467][T15672] netlink: 40 bytes leftover after parsing attributes in process `syz.2.17196'. [ 1231.796101][T15675] netlink: 224 bytes leftover after parsing attributes in process `syz.5.17198'. [ 1231.903082][ T8132] wlan1: Trigger new scan to find an IBSS to join [ 1231.949666][T15685] FAULT_INJECTION: forcing a failure. [ 1231.949666][T15685] name failslab, interval 1, probability 0, space 0, times 0 [ 1231.995567][T15685] CPU: 1 UID: 0 PID: 15685 Comm: syz.1.17202 Not tainted syzkaller #0 PREEMPT(full) [ 1231.995591][T15685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1231.995601][T15685] Call Trace: [ 1231.995608][T15685] [ 1231.995615][T15685] dump_stack_lvl+0xe8/0x150 [ 1231.995638][T15685] should_fail_ex+0x412/0x560 [ 1231.995664][T15685] should_failslab+0xa8/0x100 [ 1231.995688][T15685] __kmalloc_cache_noprof+0x88/0x660 [ 1231.995707][T15685] ? nfnetlink_rcv+0xfdf/0x27b0 [ 1231.995730][T15685] nfnetlink_rcv+0xfdf/0x27b0 [ 1231.995776][T15685] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1231.995806][T15685] ? ref_tracker_free+0x693/0x840 [ 1231.995851][T15685] ? __netlink_deliver_tap+0x807/0x850 [ 1231.995881][T15685] ? netlink_deliver_tap+0x2e/0x1b0 [ 1231.995898][T15685] ? netlink_deliver_tap+0x2e/0x1b0 [ 1231.995921][T15685] netlink_unicast+0x75c/0x8e0 [ 1231.995948][T15685] netlink_sendmsg+0x813/0xb40 [ 1231.995978][T15685] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1231.996002][T15685] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1231.996026][T15685] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1231.996051][T15685] ____sys_sendmsg+0x972/0x9f0 [ 1231.996072][T15685] ? __might_fault+0xaf/0x130 [ 1231.996098][T15685] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1231.996128][T15685] ? import_iovec+0x73/0xa0 [ 1231.996152][T15685] ___sys_sendmsg+0x2a5/0x360 [ 1231.996182][T15685] ? __lock_acquire+0x6b5/0x2cf0 [ 1231.996203][T15685] ? __pfx____sys_sendmsg+0x10/0x10 [ 1231.996257][T15685] ? __fget_files+0x2a/0x420 [ 1231.996274][T15685] ? __fget_files+0x3a0/0x420 [ 1231.996303][T15685] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1231.996326][T15685] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1231.996364][T15685] ? __pfx_ksys_write+0x10/0x10 [ 1231.996395][T15685] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1231.996419][T15685] do_syscall_64+0x15f/0xf80 [ 1231.996443][T15685] ? clear_bhb_loop+0x40/0x90 [ 1231.996463][T15685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1231.996479][T15685] RIP: 0033:0x7fe76c19ce59 [ 1231.996496][T15685] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1231.996509][T15685] RSP: 002b:00007fe76cffe028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1231.996527][T15685] RAX: ffffffffffffffda RBX: 00007fe76c415fa0 RCX: 00007fe76c19ce59 [ 1231.996538][T15685] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1231.996548][T15685] RBP: 00007fe76cffe090 R08: 0000000000000000 R09: 0000000000000000 [ 1231.996558][T15685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1231.996567][T15685] R13: 00007fe76c416038 R14: 00007fe76c415fa0 R15: 00007ffcef13e778 [ 1231.996597][T15685] [ 1232.539819][T15705] netlink: 24 bytes leftover after parsing attributes in process `syz.1.17210'. [ 1232.556937][T15705] FAULT_INJECTION: forcing a failure. [ 1232.556937][T15705] name failslab, interval 1, probability 0, space 0, times 0 [ 1232.573076][T15705] CPU: 1 UID: 0 PID: 15705 Comm: syz.1.17210 Not tainted syzkaller #0 PREEMPT(full) [ 1232.573099][T15705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1232.573108][T15705] Call Trace: [ 1232.573115][T15705] [ 1232.573122][T15705] dump_stack_lvl+0xe8/0x150 [ 1232.573145][T15705] should_fail_ex+0x412/0x560 [ 1232.573167][T15705] should_failslab+0xa8/0x100 [ 1232.573190][T15705] __kmalloc_noprof+0xe8/0x760 [ 1232.573210][T15705] ? fib_create_info+0x1723/0x31f0 [ 1232.573360][T15705] fib_create_info+0x1723/0x31f0 [ 1232.573386][T15705] ? rcu_is_watching+0x15/0xb0 [ 1232.573411][T15705] ? __mutex_lock+0x319/0x1550 [ 1232.573442][T15705] fib_table_insert+0xc8/0x1b50 [ 1232.573459][T15705] ? inet_rtm_newroute+0x12b/0x250 [ 1232.573476][T15705] ? __pfx___mutex_lock+0x10/0x10 [ 1232.573494][T15705] ? rtm_to_fib_config+0x107f/0x13c0 [ 1232.573520][T15705] ? fib_new_table+0x10a/0x2d0 [ 1232.573576][T15705] inet_rtm_newroute+0x14f/0x250 [ 1232.573591][T15705] ? __local_bh_enable_ip+0xd0/0x130 [ 1232.573606][T15705] ? __dev_queue_xmit+0x2b6/0x3950 [ 1232.573630][T15705] ? __pfx_inet_rtm_newroute+0x10/0x10 [ 1232.573663][T15705] ? __pfx_inet_rtm_newroute+0x10/0x10 [ 1232.573676][T15705] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 1232.573699][T15705] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1232.573716][T15705] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1232.573731][T15705] ? ref_tracker_free+0x693/0x840 [ 1232.573755][T15705] ? __pfx_ref_tracker_free+0x10/0x10 [ 1232.573785][T15705] netlink_rcv_skb+0x232/0x4b0 [ 1232.573808][T15705] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1232.573829][T15705] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1232.573861][T15705] ? netlink_deliver_tap+0x2e/0x1b0 [ 1232.573879][T15705] ? netlink_deliver_tap+0x2e/0x1b0 [ 1232.573904][T15705] netlink_unicast+0x75c/0x8e0 [ 1232.573933][T15705] netlink_sendmsg+0x813/0xb40 [ 1232.573962][T15705] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1232.573984][T15705] ? __fget_files+0x2a/0x420 [ 1232.574002][T15705] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1232.574022][T15705] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1232.574040][T15705] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1232.574058][T15705] __sys_sendto+0x672/0x710 [ 1232.574081][T15705] ? __pfx___sys_sendto+0x10/0x10 [ 1232.574097][T15705] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 1232.574128][T15705] ? __fget_files+0x3a0/0x420 [ 1232.574153][T15705] ? ksys_write+0x242/0x270 [ 1232.574176][T15705] ? __pfx_ksys_write+0x10/0x10 [ 1232.574201][T15705] __x64_sys_sendto+0xde/0x100 [ 1232.574220][T15705] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1232.574236][T15705] do_syscall_64+0x15f/0xf80 [ 1232.574255][T15705] ? trace_irq_disable+0x3b/0x140 [ 1232.574275][T15705] ? clear_bhb_loop+0x40/0x90 [ 1232.574295][T15705] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1232.574309][T15705] RIP: 0033:0x7fe76c19ce59 [ 1232.574327][T15705] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1232.574338][T15705] RSP: 002b:00007fe76cffe028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1232.574354][T15705] RAX: ffffffffffffffda RBX: 00007fe76c415fa0 RCX: 00007fe76c19ce59 [ 1232.574364][T15705] RDX: 000000000000009a RSI: 0000200000003b00 RDI: 0000000000000003 [ 1232.574382][T15705] RBP: 00007fe76cffe090 R08: 0000000000000000 R09: 0000000000000000 [ 1232.574391][T15705] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1232.574399][T15705] R13: 00007fe76c416038 R14: 00007fe76c415fa0 R15: 00007ffcef13e778 [ 1232.574431][T15705] [ 1232.577325][T15706] netlink: 64 bytes leftover after parsing attributes in process `syz.3.17209'. [ 1232.981370][T15723] xt_l2tp: wrong L2TP version: 0 [ 1232.981767][T15721] netlink: 'syz.0.17214': attribute type 10 has an invalid length. [ 1233.000716][T15723] netlink: 190972 bytes leftover after parsing attributes in process `syz.1.17216'. [ 1233.118056][ T8136] wlan1: Creating new IBSS network, BSSID a6:b6:c8:19:53:79 [ 1233.295155][T15740] A link change request failed with some changes committed already. Interface »»»»»» may have been left with an inconsistent configuration, please check. [ 1233.401829][T15744] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17223'. [ 1233.639961][T15758] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1233.733657][T15767] sctp: [Deprecated]: syz.0.17231 (pid 15767) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1233.733657][T15767] Use struct sctp_sack_info instead [ 1233.766654][T15764] nbd4: detected capacity change from 0 to 63 [ 1233.786269][ T8372] block nbd4: Receive control failed (result -32) [ 1233.789956][T14090] block nbd4: Send control failed (result -32) [ 1233.829013][T14090] block nbd4: Request send failed, requeueing [ 1233.871737][ T25] block nbd4: Dead connection, failed to find a fallback [ 1233.879404][ T25] block nbd4: shutting down sockets [ 1233.885147][ T25] blk_print_req_error: 434 callbacks suppressed [ 1233.885164][ T25] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1233.901401][ T25] buffer_io_error: 434 callbacks suppressed [ 1233.901418][ T25] Buffer I/O error on dev nbd4, logical block 0, async page read [ 1233.916789][T14090] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1233.925925][T14090] Buffer I/O error on dev nbd4, logical block 1, async page read [ 1233.934467][T14090] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1233.943665][T14090] Buffer I/O error on dev nbd4, logical block 2, async page read [ 1233.953655][T14090] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1233.962992][T14090] Buffer I/O error on dev nbd4, logical block 3, async page read [ 1233.971490][T14090] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1233.981051][T14090] Buffer I/O error on dev nbd4, logical block 0, async page read [ 1233.994084][T14090] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1234.003428][T14090] Buffer I/O error on dev nbd4, logical block 1, async page read [ 1234.011417][T14090] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1234.020585][T14090] Buffer I/O error on dev nbd4, logical block 2, async page read [ 1234.028935][T14090] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1234.038120][T14090] Buffer I/O error on dev nbd4, logical block 3, async page read [ 1234.046288][T14090] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1234.055945][T14090] Buffer I/O error on dev nbd4, logical block 0, async page read [ 1234.064595][T15783] netlink: 'syz.5.17234': attribute type 16 has an invalid length. [ 1234.074130][T14090] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1234.083467][T15783] netlink: 'syz.5.17234': attribute type 17 has an invalid length. [ 1234.093027][T14090] Buffer I/O error on dev nbd4, logical block 1, async page read [ 1234.104473][T14090] ldm_validate_partition_table(): Disk read failed. [ 1234.127141][T14090] Dev nbd4: unable to read RDB block 0 [ 1234.147132][T14090] nbd4: unable to read partition table [ 1234.176356][T14090] ldm_validate_partition_table(): Disk read failed. [ 1234.188398][T15783] 8021q: adding VLAN 0 to HW filter on device team0 [ 1234.200784][T14090] Dev nbd4: unable to read RDB block 0 [ 1234.207830][T15783] tipc: Resetting bearer [ 1234.215507][T14090] nbd4: unable to read partition table [ 1234.221667][T15783] tipc: Resetting bearer [ 1234.241256][T15783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1234.316143][T15783] A link change request failed with some changes committed already. Interface vxlan0 may have been left with an inconsistent configuration, please check. [ 1234.505158][T15805] netlink: 'syz.5.17237': attribute type 16 has an invalid length. [ 1234.514406][T15805] netlink: 'syz.5.17237': attribute type 17 has an invalid length. [ 1234.527646][T15805] tipc: Resetting bearer [ 1234.565403][T15805] A link change request failed with some changes committed already. Interface vxlan0 may have been left with an inconsistent configuration, please check. [ 1236.578938][T15758] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1236.817947][T15824] bond11: entered allmulticast mode [ 1236.840228][T15824] vti0: entered allmulticast mode [ 1236.859682][T15822] bond11: left allmulticast mode [ 1236.887059][T15822] vti0: left allmulticast mode [ 1236.947786][T15836] __nla_validate_parse: 5 callbacks suppressed [ 1236.947803][T15836] netlink: 36 bytes leftover after parsing attributes in process `syz.3.17248'. [ 1236.968239][T15828] nbd5: detected capacity change from 0 to 63 [ 1236.986918][ T8372] block nbd5: Receive control failed (result -32) [ 1237.004036][T15443] block nbd5: Dead connection, failed to find a fallback [ 1237.025736][T15443] block nbd5: shutting down sockets [ 1237.036488][T15443] ldm_validate_partition_table(): Disk read failed. [ 1237.045180][T15443] Dev nbd5: unable to read RDB block 0 [ 1237.069160][T15443] nbd5: unable to read partition table [ 1237.093969][T15842] netlink: 'syz.1.17250': attribute type 16 has an invalid length. [ 1237.101930][T15443] ldm_validate_partition_table(): Disk read failed. [ 1237.104695][T15443] Dev nbd5: unable to read RDB block 0 [ 1237.146799][T15443] nbd5: unable to read partition table [ 1237.180926][T15845] netlink: 52 bytes leftover after parsing attributes in process `syz.5.17252'. [ 1237.201195][T15842] netlink: 'syz.1.17250': attribute type 17 has an invalid length. [ 1237.230598][T15842] tipc: Resetting bearer [ 1237.270803][T15842] tipc: Resetting bearer [ 1237.311701][T15842] A link change request failed with some changes committed already. Interface rose0 may have been left with an inconsistent configuration, please check. [ 1237.344868][T13333] hsr0 speed is unknown, defaulting to 1000 [ 1237.352392][T13333] syz1: Port: 1 Link DOWN [ 1237.878538][T15883] nbd6: detected capacity change from 0 to 63 [ 1237.928546][ T8372] block nbd6: Receive control failed (result -104) [ 1238.288266][T15911] netlink: 'syz.5.17268': attribute type 16 has an invalid length. [ 1238.316555][T15911] netlink: 'syz.5.17268': attribute type 17 has an invalid length. [ 1238.340162][T15911] tipc: Resetting bearer [ 1238.394411][T15911] A link change request failed with some changes committed already. Interface vxlan0 may have been left with an inconsistent configuration, please check. [ 1238.394929][T15920] netlink: 28 bytes leftover after parsing attributes in process `syz.3.17273'. [ 1238.620668][T15920] syzkaller0: entered promiscuous mode [ 1238.627445][T15920] syzkaller0: entered allmulticast mode [ 1238.635406][T15927] netlink: 36 bytes leftover after parsing attributes in process `syz.5.17275'. [ 1238.635871][T15920] netlink: 14 bytes leftover after parsing attributes in process `syz.3.17273'. [ 1238.663777][T15920] bridge10: port 1(H) entered disabled state [ 1238.690784][T15920] H (unregistering): left allmulticast mode [ 1238.705616][T15920] H (unregistering): left promiscuous mode [ 1238.715866][T15920] bridge10: port 1(H) entered disabled state [ 1238.798051][T15938] netlink: 8 bytes leftover after parsing attributes in process `syz.5.17281'. [ 1238.808484][T15945] netlink: 8 bytes leftover after parsing attributes in process `syz.5.17281'. [ 1238.859365][T15937] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1239.110541][T15959] netlink: 'syz.2.17285': attribute type 16 has an invalid length. [ 1239.142988][T15959] netlink: 'syz.2.17285': attribute type 17 has an invalid length. [ 1243.855366][T15959] tipc: Resetting bearer [ 1243.907206][T15959] tipc: Resetting bearer [ 1243.920736][T15959] tipc: Resetting bearer [ 1243.994476][T15959] A link change request failed with some changes committed already. Interface @ may have been left with an inconsistent configuration, please check. [ 1244.044363][T15982] sctp: [Deprecated]: syz.5.17290 (pid 15982) Use of int in maxseg socket option. [ 1244.044363][T15982] Use struct sctp_assoc_value instead [ 1244.052942][ T8136] tipc: Resetting bearer [ 1244.297992][T15992] netlink: 'syz.2.17292': attribute type 1 has an invalid length. [ 1244.426504][T15992] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1244.611251][T16015] IPVS: Unknown mcast interface: vcan0 [ 1244.620108][T16016] netlink: 'syz.5.17302': attribute type 16 has an invalid length. [ 1244.631998][T16016] netlink: 'syz.5.17302': attribute type 17 has an invalid length. [ 1244.668826][T16016] tipc: Resetting bearer [ 1244.755498][T16016] A link change request failed with some changes committed already. Interface vxlan0 may have been left with an inconsistent configuration, please check. [ 1245.201582][T16050] netlink: 'syz.2.17309': attribute type 1 has an invalid length. [ 1245.235751][T16050] netlink: 'syz.2.17309': attribute type 1 has an invalid length. [ 1245.389598][T16060] bond11: entered allmulticast mode [ 1245.400504][T16060] vti0: entered allmulticast mode [ 1245.431761][T16065] netlink: 'syz.3.17317': attribute type 16 has an invalid length. [ 1245.444423][T16065] netlink: 'syz.3.17317': attribute type 17 has an invalid length. [ 1245.625957][T16058] bond11: left allmulticast mode [ 1245.662085][T16058] vti0: left allmulticast mode [ 1245.956836][T16087] A link change request failed with some changes committed already. Interface 26±ÿª¨úrBº“ may have been left with an inconsistent configuration, please check. [ 1245.973665][T16089] netlink: 108 bytes leftover after parsing attributes in process `syz.0.17323'. [ 1246.190336][T16097] netlink: 28 bytes leftover after parsing attributes in process `syz.2.17329'. [ 1246.227379][T16097] IPVS: Unknown mcast interface: vcan0 [ 1246.300231][ T5634] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1246.317311][ T5634] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1246.339261][ T5634] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1246.361164][ T5634] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1246.370085][ T5634] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1246.538735][T16106] netlink: 'syz.1.17332': attribute type 16 has an invalid length. [ 1246.562610][ T8136] wlan1: Selected IBSS BSSID a6:b6:c8:19:53:79 based on configured SSID [ 1246.565469][T16106] netlink: 'syz.1.17332': attribute type 17 has an invalid length. [ 1246.612048][T16106] tipc: Resetting bearer [ 1246.669807][T16106] tipc: Resetting bearer [ 1246.724204][T16106] A link change request failed with some changes committed already. Interface rose0 may have been left with an inconsistent configuration, please check. [ 1246.740404][T16092] netlink: 40 bytes leftover after parsing attributes in process `syz.3.17328'. [ 1246.895679][T16121] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17333'. [ 1246.957192][T16115] netlink: 12 bytes leftover after parsing attributes in process `syz.0.17333'. [ 1246.993650][T16112] netlink: 36 bytes leftover after parsing attributes in process `syz.0.17333'. [ 1247.101056][T16125] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17335'. [ 1247.156773][T16125] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17335'. [ 1247.398198][T16095] hsr0 speed is unknown, defaulting to 1000 [ 1247.551944][T16149] netlink: 'syz.2.17343': attribute type 16 has an invalid length. [ 1247.594570][T16149] tipc: Resetting bearer [ 1247.672994][T16149] tipc: Resetting bearer [ 1247.683556][T16160] netlink: 24 bytes leftover after parsing attributes in process `syz.0.17347'. [ 1247.740896][T16149] A link change request failed with some changes committed already. Interface @ may have been left with an inconsistent configuration, please check. [ 1247.951027][T16180] netlink: 24 bytes leftover after parsing attributes in process `syz.3.17352'. [ 1248.177510][T16193] A link change request failed with some changes committed already. Interface »»»»»» may have been left with an inconsistent configuration, please check. [ 1248.378272][T16204] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode [ 1248.386219][T16204] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode [ 1248.389188][ T5634] Bluetooth: hci2: command tx timeout [ 1248.394612][T16204] tipc: Resetting bearer [ 1248.436024][T16204] tipc: Resetting bearer [ 1248.482071][T16204] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1248.517971][T16204] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1248.570097][T16204] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1248.604493][T16204] bridge5: left promiscuous mode [ 1248.611768][T16204] bridge5: left allmulticast mode [ 1248.621674][T16204] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1248.663982][T16204] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1248.681561][T16204] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1248.695688][T16204] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1248.721367][T16204] .`: entered promiscuous mode [ 1248.727355][T16204] netdevsim netdevsim0 netdevsim1: entered promiscuous mode [ 1248.742514][ T8132] bond10: (slave bridge7): link status up again after 0 ms [ 1248.744532][T16204] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 1248.766925][T16204] bond11: left promiscuous mode [ 1248.772141][T16204] bridge8: left promiscuous mode [ 1248.779950][T16204] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1248.793280][ T12] bond10: (slave bridge7): link status up again after 0 ms [ 1248.793725][T16204] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1248.812672][ T12] bond10: (slave bridge7): link status up again after 0 ms [ 1248.816451][T16218] NCSI netlink: No device for ifindex 0 [ 1248.829713][ T12] bond10: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1248.846102][T16204] veth7: left promiscuous mode [ 1248.856687][T16204] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1248.867640][T16204] €Â: entered promiscuous mode [ 1249.003041][ T8137] net_ratelimit: 16 callbacks suppressed [ 1249.003061][ T8137] bond10: (slave bridge7): link status up again after 0 ms [ 1249.025217][ T8136] bond12: (slave veth7): link status definitely up, 10000 Mbps full duplex [ 1249.072632][ T12] bond10: (slave bridge7): link status up again after 0 ms [ 1249.085458][ T8136] bond12: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1249.125088][ T8137] bond10: (slave bridge7): link status up again after 0 ms [ 1249.135606][ T8136] bond12: active interface up! [ 1249.186733][ T8129] bond10: (slave bridge7): link status up again after 0 ms [ 1249.243441][ T8127] bond10: (slave bridge7): link status up again after 0 ms [ 1249.295864][T23450] bond10: (slave bridge7): link status up again after 0 ms [ 1249.335701][ T8132] bond10: (slave bridge7): link status up again after 0 ms [ 1249.364086][ T8137] bond10: (slave bridge7): link status up again after 0 ms [ 1249.383376][ T8134] bond12: (slave ip6gretap1): failed to get link speed/duplex [ 1249.973413][T16260] validate_nla: 5 callbacks suppressed [ 1249.973433][T16260] netlink: 'syz.2.17378': attribute type 30 has an invalid length. [ 1250.003973][T16095] bridge0: port 1(bridge_slave_0) entered blocking state [ 1250.023013][T16095] bridge0: port 1(bridge_slave_0) entered disabled state [ 1250.030647][T16095] bridge_slave_0: entered allmulticast mode [ 1250.041255][T16095] bridge_slave_0: entered promiscuous mode [ 1250.174788][T16095] bridge0: port 2(bridge_slave_1) entered blocking state [ 1250.197396][T16095] bridge0: port 2(bridge_slave_1) entered disabled state [ 1250.218591][T16095] bridge_slave_1: entered allmulticast mode [ 1250.231799][T16095] bridge_slave_1: entered promiscuous mode [ 1250.321615][T16095] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1250.359038][T16095] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1250.462900][ T5634] Bluetooth: hci2: command tx timeout [ 1250.475267][T16095] team0: Port device team_slave_0 added [ 1250.536461][T16095] team0: Port device team_slave_1 added [ 1250.671077][T16095] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1250.697653][T16095] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1250.769362][T16095] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1250.796246][T16095] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1250.814592][T16095] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1250.852783][T16095] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1251.029584][T16095] hsr_slave_0: entered promiscuous mode [ 1251.054421][T16095] hsr_slave_1: entered promiscuous mode [ 1251.068745][T16095] debugfs: 'hsr0' already exists in 'hsr' [ 1251.076341][T16095] Cannot create hsr debugfs directory [ 1251.238586][T16318] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 1251.246696][T16318] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 1251.255900][T16318] tipc: Resetting bearer [ 1251.301865][T16318] __nla_validate_parse: 6 callbacks suppressed [ 1251.301883][T16318] netlink: 12 bytes leftover after parsing attributes in process `syz.0.17394'. [ 1251.453674][T16327] nbd7: detected capacity change from 0 to 63 [ 1251.482747][T16328] netlink: 'syz.2.17398': attribute type 1 has an invalid length. [ 1251.516506][T16328] netlink: 224 bytes leftover after parsing attributes in process `syz.2.17398'. [ 1251.570060][T16095] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1251.586124][T16095] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1251.621306][T16095] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1251.634204][T16095] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 1251.668971][T16327] block nbd2: NBD_DISCONNECT [ 1251.676577][T16327] block nbd2: Send disconnect failed -32 [ 1251.706007][ T5634] block nbd7: Receive control failed (result -104) [ 1251.765511][T16341] netlink: 28 bytes leftover after parsing attributes in process `syz.1.17402'. [ 1251.865322][T16095] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1251.893501][T16095] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1251.921785][T16095] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1251.935678][T16095] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 1251.952979][T16352] netlink: 48 bytes leftover after parsing attributes in process `syz.0.17406'. [ 1252.336927][T16095] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1252.365496][T16095] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1252.396799][T16095] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1252.407672][T16095] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 1252.432087][T16375] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17410'. [ 1252.553988][ T5634] Bluetooth: hci2: command tx timeout [ 1252.583569][T16385] netlink: 28 bytes leftover after parsing attributes in process `syz.0.17413'. [ 1252.594229][T16095] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1252.606494][T16095] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1252.637833][T16095] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1252.654334][T16095] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 1252.927398][T16399] netlink: 28 bytes leftover after parsing attributes in process `syz.2.17418'. [ 1252.959401][T16399] IPVS: Unknown mcast interface: vcan0 [ 1253.069498][T16411] netlink: 32 bytes leftover after parsing attributes in process `syz.0.17421'. [ 1253.098108][T16411] netlink: 32 bytes leftover after parsing attributes in process `syz.0.17421'. [ 1253.314515][T16421] netlink: 64 bytes leftover after parsing attributes in process `syz.1.17425'. [ 1253.418833][T16095] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1253.428745][T16427] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 1253.457007][T16095] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1253.473879][T16095] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1253.532749][T16095] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1253.560191][T16095] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1253.606656][T16095] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1253.624204][T16095] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1253.992967][T16448] netlink: 'syz.3.17433': attribute type 7 has an invalid length. [ 1254.143068][ C1] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 1254.441399][T16095] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1254.458392][ T8127] net_ratelimit: 31 callbacks suppressed [ 1254.458414][ T8127] bond10: (slave bridge7): failed to get link speed/duplex [ 1254.522920][ T8127] bond12: (slave ip6gretap1): failed to get link speed/duplex [ 1254.532486][T16444] IPVS: Unknown mcast interface: vcan0 [ 1254.622641][ T5634] Bluetooth: hci2: command tx timeout [ 1254.709566][T16095] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1254.743324][ T8127] bond10: (slave bridge7): failed to get link speed/duplex [ 1254.799268][T16095] 8021q: adding VLAN 0 to HW filter on device team0 [ 1254.838720][ T8129] bridge0: port 1(bridge_slave_0) entered blocking state [ 1254.845938][ T8129] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1254.905645][ T8129] bridge0: port 2(bridge_slave_1) entered blocking state [ 1254.912890][ T8129] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1254.975868][T16478] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 1254.987857][T16479] FAULT_INJECTION: forcing a failure. [ 1254.987857][T16479] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1255.007629][ T8137] bond12: (slave ip6gretap1): failed to get link speed/duplex [ 1255.028053][T16479] CPU: 0 UID: 0 PID: 16479 Comm: syz.3.17441 Not tainted syzkaller #0 PREEMPT(full) [ 1255.028076][T16479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1255.028085][T16479] Call Trace: [ 1255.028090][T16479] [ 1255.028097][T16479] dump_stack_lvl+0xe8/0x150 [ 1255.028120][T16479] should_fail_ex+0x412/0x560 [ 1255.028142][T16479] _copy_from_user+0x2d/0xb0 [ 1255.028163][T16479] ___sys_sendmsg+0x1c6/0x360 [ 1255.028185][T16479] ? __lock_acquire+0x6b5/0x2cf0 [ 1255.028205][T16479] ? __pfx____sys_sendmsg+0x10/0x10 [ 1255.028260][T16479] ? __fget_files+0x2a/0x420 [ 1255.028277][T16479] ? __fget_files+0x3a0/0x420 [ 1255.028303][T16479] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1255.028324][T16479] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1255.028353][T16479] ? __pfx_ksys_write+0x10/0x10 [ 1255.028382][T16479] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1255.028401][T16479] do_syscall_64+0x15f/0xf80 [ 1255.028419][T16479] ? trace_irq_disable+0x3b/0x140 [ 1255.028440][T16479] ? clear_bhb_loop+0x40/0x90 [ 1255.028460][T16479] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1255.028474][T16479] RIP: 0033:0x7fb40179ce59 [ 1255.028489][T16479] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1255.028501][T16479] RSP: 002b:00007fb4026ff028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1255.028518][T16479] RAX: ffffffffffffffda RBX: 00007fb401a15fa0 RCX: 00007fb40179ce59 [ 1255.028527][T16479] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 1255.028537][T16479] RBP: 00007fb4026ff090 R08: 0000000000000000 R09: 0000000000000000 [ 1255.028546][T16479] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1255.028555][T16479] R13: 00007fb401a16038 R14: 00007fb401a15fa0 R15: 00007ffc6b39d2e8 [ 1255.028583][T16479] [ 1255.034194][T23450] bond10: (slave bridge7): failed to get link speed/duplex [ 1255.255419][T16484] sctp: [Deprecated]: syz.0.17444 (pid 16484) Use of int in maxseg socket option. [ 1255.255419][T16484] Use struct sctp_assoc_value instead [ 1255.293128][ T8127] bond12: (slave ip6gretap1): failed to get link speed/duplex [ 1255.373398][ T8136] bond10: (slave bridge7): failed to get link speed/duplex [ 1255.425766][ T8137] bond12: (slave ip6gretap1): failed to get link speed/duplex [ 1255.503159][ T8127] bond10: (slave bridge7): failed to get link speed/duplex [ 1255.552970][ T8127] bond12: (slave ip6gretap1): failed to get link speed/duplex [ 1256.188548][T16095] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1256.466960][T16095] veth0_vlan: entered promiscuous mode [ 1256.485761][T16095] veth1_vlan: entered promiscuous mode [ 1256.515934][T16095] veth0_macvtap: entered promiscuous mode [ 1256.529471][T16095] veth1_macvtap: entered promiscuous mode [ 1256.549200][T16095] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1256.568399][T16095] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1256.583419][ T8127] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1256.611877][ T8127] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1256.625495][ T8127] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1256.636433][ T8127] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1258.718150][T16509] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1258.861953][T16552] IPVS: set_ctl: invalid protocol: 50 172.20.20.33:20000 [ 1258.890217][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1258.938546][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1259.031926][ T8137] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1259.049488][T16561] __nla_validate_parse: 9 callbacks suppressed [ 1259.049507][T16561] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17466'. [ 1259.063576][ T8137] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1259.069991][T16561] netlink: 20 bytes leftover after parsing attributes in process `syz.1.17466'. [ 1259.079908][T16560] hsr0 speed is unknown, defaulting to 1000 [ 1259.084083][T16561] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17466'. [ 1259.099554][T16561] netlink: 20 bytes leftover after parsing attributes in process `syz.1.17466'. [ 1259.443921][T16575] nbd2: detected capacity change from 0 to 63 [ 1259.461006][T16577] FAULT_INJECTION: forcing a failure. [ 1259.461006][T16577] name failslab, interval 1, probability 0, space 0, times 0 [ 1259.476171][ T8129] net_ratelimit: 62 callbacks suppressed [ 1259.476191][ T8129] bond12: (slave ip6gretap1): failed to get link speed/duplex [ 1259.500181][T16577] CPU: 0 UID: 0 PID: 16577 Comm: syz.5.17324 Not tainted syzkaller #0 PREEMPT(full) [ 1259.500207][T16577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1259.500217][T16577] Call Trace: [ 1259.500225][T16577] [ 1259.500232][T16577] dump_stack_lvl+0xe8/0x150 [ 1259.500260][T16577] should_fail_ex+0x412/0x560 [ 1259.500286][T16577] should_failslab+0xa8/0x100 [ 1259.500312][T16577] __kmalloc_noprof+0xe8/0x760 [ 1259.500333][T16577] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 1259.500349][T16577] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1259.500461][T16577] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 1259.500480][T16577] genl_family_rcv_msg_doit+0xd9/0x330 [ 1259.500499][T16577] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1259.500515][T16577] ? __pfx_genl_get_cmd+0x10/0x10 [ 1259.500525][T16577] ? stack_trace_save+0xa9/0x100 [ 1259.500542][T16577] ? __pfx_nbd_genl_disconnect+0x10/0x10 [ 1259.500621][T16577] ? __lock_acquire+0x6b5/0x2cf0 [ 1259.500642][T16577] genl_rcv_msg+0x61c/0x7a0 [ 1259.500660][T16577] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1259.500672][T16577] ? __pfx_nbd_genl_disconnect+0x10/0x10 [ 1259.500695][T16577] netlink_rcv_skb+0x232/0x4b0 [ 1259.500712][T16577] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1259.500725][T16577] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1259.500752][T16577] ? down_read+0x270/0x2e0 [ 1259.500762][T16577] ? genl_rcv+0xd/0x40 [ 1259.500775][T16577] genl_rcv+0x28/0x40 [ 1259.500786][T16577] netlink_unicast+0x75c/0x8e0 [ 1259.500809][T16577] netlink_sendmsg+0x813/0xb40 [ 1259.500831][T16577] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1259.500849][T16577] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1259.500867][T16577] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1259.500886][T16577] ____sys_sendmsg+0x972/0x9f0 [ 1259.500903][T16577] ? __might_fault+0xaf/0x130 [ 1259.500923][T16577] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1259.500945][T16577] ? import_iovec+0x73/0xa0 [ 1259.500965][T16577] ___sys_sendmsg+0x2a5/0x360 [ 1259.500987][T16577] ? __lock_acquire+0x6b5/0x2cf0 [ 1259.501003][T16577] ? __pfx____sys_sendmsg+0x10/0x10 [ 1259.501045][T16577] ? __fget_files+0x2a/0x420 [ 1259.501059][T16577] ? __fget_files+0x3a0/0x420 [ 1259.501080][T16577] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1259.501098][T16577] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1259.501121][T16577] ? __pfx_ksys_write+0x10/0x10 [ 1259.501144][T16577] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1259.501158][T16577] do_syscall_64+0x15f/0xf80 [ 1259.501174][T16577] ? trace_irq_disable+0x3b/0x140 [ 1259.501191][T16577] ? clear_bhb_loop+0x40/0x90 [ 1259.501206][T16577] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1259.501218][T16577] RIP: 0033:0x7f5d8199ce59 [ 1259.501232][T16577] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1259.501243][T16577] RSP: 002b:00007f5d828ec028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1259.501256][T16577] RAX: ffffffffffffffda RBX: 00007f5d81c16090 RCX: 00007f5d8199ce59 [ 1259.501265][T16577] RDX: 0000000004000810 RSI: 00002000000002c0 RDI: 0000000000000004 [ 1259.501272][T16577] RBP: 00007f5d828ec090 R08: 0000000000000000 R09: 0000000000000000 [ 1259.501279][T16577] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1259.501286][T16577] R13: 00007f5d81c16128 R14: 00007f5d81c16090 R15: 00007ffdcf2594b8 [ 1259.501307][T16577] [ 1259.828658][ T8134] bond10: (slave bridge7): failed to get link speed/duplex [ 1259.876078][ T8134] bond12: (slave ip6gretap1): failed to get link speed/duplex [ 1259.954085][ T8137] bond10: (slave bridge7): failed to get link speed/duplex [ 1259.964935][ T5634] block nbd2: Receive control failed (result -104) [ 1260.005527][ T1994] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1260.027450][ T1994] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1260.071614][ T1994] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1260.096100][ T1994] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1260.128314][ T1994] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1260.143305][ T8136] bond12: (slave ip6gretap1): failed to get link speed/duplex [ 1260.167041][ T8136] bond10: (slave bridge7): failed to get link speed/duplex [ 1260.263449][ T12] bond12: (slave ip6gretap1): failed to get link speed/duplex [ 1260.334571][ T8136] bond10: (slave bridge7): failed to get link speed/duplex [ 1260.550123][T16607] netlink: 36 bytes leftover after parsing attributes in process `syz.5.17483'. [ 1260.961281][T16626] netlink: 16 bytes leftover after parsing attributes in process `syz.2.17490'. [ 1260.995640][ T8134] bond10: (slave bridge7): failed to get link speed/duplex [ 1261.032601][T23450] bond12: (slave ip6gretap1): failed to get link speed/duplex [ 1261.220105][T16581] hsr0 speed is unknown, defaulting to 1000 [ 1261.543931][T16638] hsr0 speed is unknown, defaulting to 1000 [ 1262.208253][T16669] netlink: 24 bytes leftover after parsing attributes in process `syz.2.17503'. [ 1262.222563][ T8372] Bluetooth: hci5: command tx timeout [ 1262.669715][T16581] bridge0: port 1(bridge_slave_0) entered blocking state [ 1262.680034][T16581] bridge0: port 1(bridge_slave_0) entered disabled state [ 1262.688263][T16581] bridge_slave_0: entered allmulticast mode [ 1262.711493][T16581] bridge_slave_0: entered promiscuous mode [ 1262.720959][T16581] bridge0: port 2(bridge_slave_1) entered blocking state [ 1262.728925][T16581] bridge0: port 2(bridge_slave_1) entered disabled state [ 1262.738305][T16581] bridge_slave_1: entered allmulticast mode [ 1262.747265][T16581] bridge_slave_1: entered promiscuous mode [ 1262.884571][T16581] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1262.925071][T16581] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1263.143299][T16581] team0: Port device team_slave_0 added [ 1263.167019][T16581] team0: Port device team_slave_1 added [ 1263.235759][T16581] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1263.245851][T16581] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1263.289570][T16581] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1263.317299][T16581] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1263.325975][T16581] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1263.355598][T16581] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1263.529862][T16581] hsr_slave_0: entered promiscuous mode [ 1263.547056][T16581] hsr_slave_1: entered promiscuous mode [ 1263.559665][T16581] debugfs: 'hsr0' already exists in 'hsr' [ 1263.575794][T16581] Cannot create hsr debugfs directory [ 1263.976584][T16724] veth0: entered promiscuous mode [ 1264.051315][T16724] veth0: left promiscuous mode [ 1264.286370][T16581] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1264.302935][ T8372] Bluetooth: hci5: command tx timeout [ 1264.328807][T16581] netdevsim netdevsim3 eth3 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 1264.334648][T16744] netlink: 292 bytes leftover after parsing attributes in process `syz.0.17533'. [ 1264.354541][T16581] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1264.500332][T16747] bridge0: entered allmulticast mode [ 1264.515902][T16748] batadv2: left allmulticast mode [ 1264.521895][T16748] batadv2: left promiscuous mode [ 1264.527440][T16748] bridge0: port 2(batadv2) entered disabled state [ 1264.984559][T16748] batadv1: left allmulticast mode [ 1264.990504][T16748] batadv1: left promiscuous mode [ 1264.997130][T16748] bridge0: port 4(batadv1) entered disabled state [ 1265.192855][T16748] bond4: left allmulticast mode [ 1265.211284][T16748] bond4: left promiscuous mode [ 1265.226474][T16748] bridge0: port 1(bond4) entered disabled state [ 1265.433340][ T8132] net_ratelimit: 21 callbacks suppressed [ 1265.433361][ T8132] bond10: (slave bridge7): failed to get link speed/duplex [ 1265.473785][ T8132] bond12: (slave ip6gretap1): failed to get link speed/duplex [ 1265.604325][T16770] netlink: 60 bytes leftover after parsing attributes in process `syz.1.17544'. [ 1265.792518][T16581] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1265.812347][T16581] netdevsim netdevsim3 eth2 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 1265.840303][T16581] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1265.955227][ T8132] bond12: (slave ip6gretap1): failed to get link speed/duplex [ 1265.983462][T23450] bond10: (slave bridge7): failed to get link speed/duplex [ 1266.270042][T16581] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1266.281869][T16581] netdevsim netdevsim3 eth1 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 1266.295203][T16581] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1266.352130][T16792] syzkaller0: entered promiscuous mode [ 1266.358672][T16792] syzkaller0: entered allmulticast mode [ 1266.383434][ T8372] Bluetooth: hci5: command tx timeout [ 1266.404589][ T8132] bond12: (slave ip6gretap1): failed to get link speed/duplex [ 1266.658330][T16581] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1266.691138][T16581] netdevsim netdevsim3 eth0 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 1266.717645][T16581] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1266.881591][T16801] tun0: tun_chr_ioctl cmd 1074025680 [ 1266.895772][T16816] tap0: tun_chr_ioctl cmd 1074025677 [ 1266.905103][T16816] tap0: linktype set to 270 [ 1266.952880][ T12] bond10: (slave bridge7): failed to get link speed/duplex [ 1266.990314][ T12] bond12: (slave ip6gretap1): failed to get link speed/duplex [ 1267.084851][ T8134] bond10: (slave bridge7): failed to get link speed/duplex [ 1267.127671][ T8134] bond12: (slave ip6gretap1): failed to get link speed/duplex [ 1267.231192][ T8129] bond10: (slave bridge7): failed to get link speed/duplex [ 1267.693499][T16581] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1267.708185][T16581] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1267.721259][T16581] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1267.764080][T16581] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1267.772162][T16581] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1267.789114][T16581] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1267.807915][T16581] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1267.830215][T16581] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1267.849478][T16860] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17579'. [ 1267.939126][T16581] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1267.990042][T16581] 8021q: adding VLAN 0 to HW filter on device team0 [ 1268.011874][ T8137] bridge0: port 1(bridge_slave_0) entered blocking state [ 1268.021889][ T8137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1268.116985][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1268.124182][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1268.243579][ T1744] block nbd6: Possible stuck request ffff888027b97000: control (read@0,1024B). Runtime 30 seconds [ 1268.254856][ T1744] block nbd6: Possible stuck request ffff888027b971c0: control (read@1024,1024B). Runtime 30 seconds [ 1268.266409][ T1744] block nbd6: Possible stuck request ffff888027b97380: control (read@2048,1024B). Runtime 30 seconds [ 1268.278458][ T1744] block nbd6: Possible stuck request ffff888027b97540: control (read@3072,1024B). Runtime 30 seconds [ 1268.473527][ T8372] Bluetooth: hci5: command tx timeout [ 1269.145627][T16581] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1269.311441][T16581] veth0_vlan: entered promiscuous mode [ 1269.349924][T16581] veth1_vlan: entered promiscuous mode [ 1269.460072][T16581] veth0_macvtap: entered promiscuous mode [ 1269.494768][T16581] veth1_macvtap: entered promiscuous mode [ 1269.565843][T16581] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1269.591424][T16581] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1269.660238][ T8137] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1269.677781][ T8137] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1269.709572][ T8137] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1269.721333][ T8137] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1269.996266][ T8137] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1270.034685][ T8137] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1270.126124][ T8129] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1270.162143][T16958] xt_hashlimit: max too large, truncated to 1048576 [ 1270.165300][ T8129] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1270.300073][T16965] FAULT_INJECTION: forcing a failure. [ 1270.300073][T16965] name failslab, interval 1, probability 0, space 0, times 0 [ 1270.337759][T16965] CPU: 1 UID: 0 PID: 16965 Comm: syz.3.17472 Not tainted syzkaller #0 PREEMPT(full) [ 1270.337782][T16965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1270.337792][T16965] Call Trace: [ 1270.337799][T16965] [ 1270.337806][T16965] dump_stack_lvl+0xe8/0x150 [ 1270.337832][T16965] should_fail_ex+0x412/0x560 [ 1270.337857][T16965] should_failslab+0xa8/0x100 [ 1270.337881][T16965] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 1270.337901][T16965] ? __alloc_skb+0x186/0x7d0 [ 1270.337919][T16965] ? __alloc_skb+0x1d0/0x7d0 [ 1270.337935][T16965] ? __local_bh_enable_ip+0xd0/0x130 [ 1270.337955][T16965] __alloc_skb+0x1d0/0x7d0 [ 1270.337976][T16965] netlink_sendmsg+0x5d4/0xb40 [ 1270.338004][T16965] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1270.338027][T16965] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1270.338050][T16965] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1270.338073][T16965] ____sys_sendmsg+0x972/0x9f0 [ 1270.338094][T16965] ? __might_fault+0xaf/0x130 [ 1270.338119][T16965] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1270.338145][T16965] ? import_iovec+0x73/0xa0 [ 1270.338171][T16965] ___sys_sendmsg+0x2a5/0x360 [ 1270.338189][T16965] ? __lock_acquire+0x6b5/0x2cf0 [ 1270.338211][T16965] ? __pfx____sys_sendmsg+0x10/0x10 [ 1270.338273][T16965] ? __fget_files+0x2a/0x420 [ 1270.338291][T16965] ? __fget_files+0x3a0/0x420 [ 1270.338319][T16965] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1270.338342][T16965] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1270.338371][T16965] ? __pfx_ksys_write+0x10/0x10 [ 1270.338401][T16965] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1270.338417][T16965] do_syscall_64+0x15f/0xf80 [ 1270.338437][T16965] ? trace_irq_disable+0x3b/0x140 [ 1270.338459][T16965] ? clear_bhb_loop+0x40/0x90 [ 1270.338479][T16965] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1270.338492][T16965] RIP: 0033:0x7f51ad19ce59 [ 1270.338508][T16965] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1270.338521][T16965] RSP: 002b:00007f51adfcd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1270.338539][T16965] RAX: ffffffffffffffda RBX: 00007f51ad415fa0 RCX: 00007f51ad19ce59 [ 1270.338551][T16965] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 1270.338560][T16965] RBP: 00007f51adfcd090 R08: 0000000000000000 R09: 0000000000000000 [ 1270.338570][T16965] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1270.338579][T16965] R13: 00007f51ad416038 R14: 00007f51ad415fa0 R15: 00007ffeec7a2648 [ 1270.338607][T16965] [ 1270.625005][ T8134] net_ratelimit: 37 callbacks suppressed [ 1270.625026][ T8134] bond10: (slave bridge7): failed to get link speed/duplex [ 1270.792252][ T8134] bond10: (slave bridge7): failed to get link speed/duplex [ 1270.802498][ T12] bond12: (slave ip6gretap1): failed to get link speed/duplex [ 1270.902597][ T8137] bond10: (slave bridge7): failed to get link speed/duplex [ 1270.932637][ T8137] bond12: (slave ip6gretap1): failed to get link speed/duplex [ 1271.143592][ T1994] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1271.165874][ T1994] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1271.179102][ T1994] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1271.194918][ T1994] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1271.208759][ T1994] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1271.382448][ T8137] bond12: (slave ip6gretap1): failed to get link speed/duplex [ 1271.427693][ T1622] bond10: (slave bridge7): failed to get link speed/duplex [ 1271.526058][ T12] bond12: (slave ip6gretap1): failed to get link speed/duplex [ 1271.619010][T17000] team0 (unregistering): Port device team_slave_0 removed [ 1271.659265][T17000] team0 (unregistering): Port device team_slave_1 removed [ 1271.702917][ T8137] bond10: (slave bridge7): failed to get link speed/duplex [ 1271.736160][ T12] bond12: (slave ip6gretap1): failed to get link speed/duplex [ 1271.994013][T16983] hsr0 speed is unknown, defaulting to 1000 [ 1272.058944][T17026] netlink: 'syz.5.17635': attribute type 1 has an invalid length. [ 1272.073028][T17026] netlink: 'syz.5.17635': attribute type 2 has an invalid length. [ 1272.099920][T17027] netlink: 64 bytes leftover after parsing attributes in process `syz.1.17636'. [ 1272.255413][T17031] hsr0 speed is unknown, defaulting to 1000 [ 1272.841685][T17055] tipc: Resetting bearer [ 1272.867069][T17055] tipc: Resetting bearer [ 1273.059816][ T8134] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1273.071023][ T8134] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1273.126329][T17060] netlink: 24 bytes leftover after parsing attributes in process `syz.3.17649'. [ 1273.264933][ T1994] Bluetooth: hci3: command tx timeout [ 1273.453535][ T8134] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1273.467276][ T8134] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1273.705118][ T8134] .`: (slave netdevsim1): Releasing backup interface [ 1273.719125][ T8134] netdevsim netdevsim0 netdevsim1 (unregistering): left promiscuous mode [ 1273.736158][ T8134] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1273.748593][ T8134] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1273.835234][T17068] hsr0 speed is unknown, defaulting to 1000 [ 1273.843861][T16983] bridge0: port 1(bridge_slave_0) entered blocking state [ 1273.851196][T16983] bridge0: port 1(bridge_slave_0) entered disabled state [ 1273.858834][T16983] bridge_slave_0: entered allmulticast mode [ 1273.866256][T16983] bridge_slave_0: entered promiscuous mode [ 1273.873770][T17085] syzkaller0: tun_chr_ioctl cmd 1074025681 [ 1275.343609][ T1994] Bluetooth: hci3: command tx timeout [ 1277.195716][ T8127] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1277.422660][ T1994] Bluetooth: hci3: command tx timeout [ 1278.703186][T16983] bridge0: port 2(bridge_slave_1) entered blocking state [ 1278.710441][T16983] bridge0: port 2(bridge_slave_1) entered disabled state [ 1278.719023][T16983] bridge_slave_1: entered allmulticast mode [ 1278.727088][T16983] bridge_slave_1: entered promiscuous mode [ 1278.771542][ T8134] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1278.783720][ T8134] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1278.906935][T16983] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1278.933933][T16983] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1279.002868][ T8127] net_ratelimit: 13 callbacks suppressed [ 1279.002890][ T8127] bond10: (slave bridge7): failed to get link speed/duplex [ 1279.129922][T16983] team0: Port device team_slave_0 added [ 1279.156752][T16983] team0: Port device team_slave_1 added [ 1279.303759][T16983] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1279.332623][T16983] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1279.359825][T16983] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1279.502578][ T1994] Bluetooth: hci3: command tx timeout [ 1280.001978][T16983] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1280.027195][T16983] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1280.061134][T16983] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1280.445903][T16983] hsr_slave_0: entered promiscuous mode [ 1280.453058][T16983] hsr_slave_1: entered promiscuous mode [ 1280.463108][T16983] debugfs: 'hsr0' already exists in 'hsr' [ 1280.468932][T16983] Cannot create hsr debugfs directory [ 1280.693565][T17137] netlink: 28 bytes leftover after parsing attributes in process `syz.5.17673'. [ 1280.713220][T17134] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17674'. [ 1280.842796][T17143] netlink: 28 bytes leftover after parsing attributes in process `syz.1.17677'. [ 1280.861076][ T8134] pimreg: left allmulticast mode [ 1281.678900][ T1744] block nbd7: Possible stuck request ffff888027c07000: control (read@0,1024B). Runtime 30 seconds [ 1281.689983][ T1744] block nbd7: Possible stuck request ffff888027c071c0: control (read@1024,1024B). Runtime 30 seconds [ 1281.701037][ T1744] block nbd7: Possible stuck request ffff888027c07380: control (read@2048,1024B). Runtime 30 seconds [ 1281.712395][ T1744] block nbd7: Possible stuck request ffff888027c07540: control (read@3072,1024B). Runtime 30 seconds [ 1281.782736][ T8134] bond12 (unregistering): (slave ip6gretap1): Releasing backup interface [ 1281.791990][ T8134] bond12 (unregistering): (slave ip6gretap1): the permanent HWaddr of slave - 5e:77:1d:ca:97:72 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 1281.991260][ T5765] hid_parser_main: 17 callbacks suppressed [ 1281.991281][ T5765] hid-generic 0005:10CF:0040.0005: unknown main item tag 0x0 [ 1282.022649][ T5765] hid-generic 0005:10CF:0040.0005: unknown main item tag 0x0 [ 1282.041580][ T5765] hid-generic 0005:10CF:0040.0005: unknown main item tag 0x0 [ 1282.052172][ T5765] hid-generic 0005:10CF:0040.0005: unknown main item tag 0x0 [ 1282.060249][ T5765] hid-generic 0005:10CF:0040.0005: unknown main item tag 0x0 [ 1282.068082][ T5765] hid-generic 0005:10CF:0040.0005: unknown main item tag 0x0 [ 1282.075708][ T5765] hid-generic 0005:10CF:0040.0005: unknown main item tag 0x0 [ 1282.083976][ T5765] hid-generic 0005:10CF:0040.0005: unknown main item tag 0x0 [ 1282.091437][ T5765] hid-generic 0005:10CF:0040.0005: unknown main item tag 0x0 [ 1282.099634][ T5765] hid-generic 0005:10CF:0040.0005: unknown main item tag 0x0 [ 1282.117752][ T5765] hid-generic 0005:10CF:0040.0005: hidraw0: BLUETOOTH HID vc3.36 Device [syz0] on aa:aa:aa:aa:aa:aa [ 1282.237586][ T8134] bond14 (unregistering): (slave gretap0): Releasing active interface [ 1282.331393][ T8134] bond13 (unregistering): (slave geneve4): Releasing active interface [ 1282.348773][ T8134] bond6 (unregistering): (slave geneve3): Releasing active interface [ 1282.537310][ T8134] team0: Port device bridge5 removed [ 1282.616702][ T8134] bond10 (unregistering): (slave bridge7): Removing an active aggregator [ 1282.628818][ T8134] bond10 (unregistering): (slave bridge7): Releasing backup interface [ 1282.660386][ T8134] bond11 (unregistering): (slave bridge8): Releasing backup interface [ 1282.891896][ T8134] .` (unregistering): left promiscuous mode [ 1282.903418][ T8134] .` (unregistering): Released all slaves [ 1282.915457][ T8134] bond1 (unregistering): Released all slaves [ 1282.929585][ T8134] bond2 (unregistering): Released all slaves [ 1282.945810][ T8134] bond3 (unregistering): Released all slaves [ 1282.962636][ T8134] bond4 (unregistering): Released all slaves [ 1282.987170][ T8134] bond5 (unregistering): Released all slaves [ 1283.000930][ T8134] bond6 (unregistering): Released all slaves [ 1283.023893][ T8134] bond7 (unregistering): Released all slaves [ 1283.047372][ T8134] bond8 (unregistering): Released all slaves [ 1283.064437][ T8134] bond9 (unregistering): Released all slaves [ 1283.078065][ T8134] bond10 (unregistering): Released all slaves [ 1283.091701][ T8134] bond11 (unregistering): Released all slaves [ 1283.111418][ T8134] bond12 (unregistering): (slave veth7): Removing an active aggregator [ 1283.123567][ T8134] bond12 (unregistering): (slave veth7): Releasing backup interface [ 1283.136407][ T8134] bond12 (unregistering): Released all slaves [ 1283.150169][ T8134] bond13 (unregistering): Released all slaves [ 1283.167176][ T8134] bond14 (unregistering): Released all slaves [ 1283.180722][ T8134] bond15 (unregistering): Released all slaves [ 1283.200049][ T8134] bond16 (unregistering): Released all slaves [ 1283.220412][ T8134] bond0 (unregistering): Released all slaves [ 1283.235296][ T8134] bond17 (unregistering): Released all slaves [ 1283.262249][T17137] bridge1: entered promiscuous mode [ 1283.270537][T17137] bridge1: entered allmulticast mode [ 1283.393210][ T5290] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1283.405404][T17187] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1283.556697][T17189] netlink: 'syz.5.17688': attribute type 12 has an invalid length. [ 1284.116754][ T8134] tipc: Disabling bearer [ 1284.168924][ T8134] tipc: Disabling bearer [ 1284.234503][ T8134] tipc: Left network mode [ 1284.264084][T17225] netlink: 24 bytes leftover after parsing attributes in process `syz.3.17700'. [ 1284.340816][T17221] syzkaller0: entered promiscuous mode [ 1284.370781][T17221] syzkaller0: entered allmulticast mode [ 1285.041091][T17240] netlink: 'syz.1.17703': attribute type 12 has an invalid length. [ 1286.552037][T17289] netlink: 60 bytes leftover after parsing attributes in process `syz.1.17721'. [ 1286.634245][T17291] netlink: 60 bytes leftover after parsing attributes in process `syz.1.17721'. [ 1287.181126][T17314] netlink: 36 bytes leftover after parsing attributes in process `syz.1.17730'. [ 1287.211355][T17314] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17730'. [ 1287.811715][T17332] syzkaller0: entered promiscuous mode [ 1287.819663][T17332] syzkaller0: entered allmulticast mode [ 1287.891486][T17351] netlink: 'syz.2.17739': attribute type 61 has an invalid length. [ 1288.104051][T17359] netlink: 24 bytes leftover after parsing attributes in process `syz.2.17740'. [ 1288.346996][T16983] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1288.376344][T16983] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1288.830828][T16983] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1288.874197][T16983] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1288.894275][T16983] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1288.916583][T16983] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1288.946464][T17392] netlink: 44 bytes leftover after parsing attributes in process `syz.3.17749'. [ 1289.045902][T17376] syzkaller0: entered promiscuous mode [ 1289.057158][T17376] syzkaller0: entered allmulticast mode [ 1289.943992][T17406] netlink: 4 bytes leftover after parsing attributes in process `syz.5.17751'. [ 1290.009987][ T25] block nbd2: Possible stuck request ffff888027a46200: control (read@0,1024B). Runtime 30 seconds [ 1290.022668][ T25] block nbd2: Possible stuck request ffff888027a463c0: control (read@1024,1024B). Runtime 30 seconds [ 1290.041840][ T25] block nbd2: Possible stuck request ffff888027a46580: control (read@2048,1024B). Runtime 30 seconds [ 1290.059799][ T25] block nbd2: Possible stuck request ffff888027a46740: control (read@3072,1024B). Runtime 30 seconds [ 1293.833685][T16983] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1293.843768][T16983] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1298.308118][ T1744] block nbd6: Possible stuck request ffff888027b97000: control (read@0,1024B). Runtime 60 seconds [ 1298.319088][ T1744] block nbd6: Possible stuck request ffff888027b971c0: control (read@1024,1024B). Runtime 60 seconds [ 1298.330328][ T1744] block nbd6: Possible stuck request ffff888027b97380: control (read@2048,1024B). Runtime 60 seconds [ 1298.341646][ T1744] block nbd6: Possible stuck request ffff888027b97540: control (read@3072,1024B). Runtime 60 seconds [ 1299.428162][T16983] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1299.498835][T16983] 8021q: adding VLAN 0 to HW filter on device team0 [ 1299.601441][ T8137] bridge0: port 1(bridge_slave_0) entered blocking state [ 1299.608723][ T8137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1299.672283][T23450] bridge0: port 2(bridge_slave_1) entered blocking state [ 1299.679538][T23450] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1299.928628][ T8134] hsr_slave_0: left promiscuous mode [ 1299.939448][ T8134] hsr_slave_1: left promiscuous mode [ 1299.971596][ T8134] veth1_macvtap: left promiscuous mode [ 1299.991767][ T8134] veth0_macvtap: left promiscuous mode [ 1300.796606][ T8134] pim6reg527 (unregistering): left allmulticast mode [ 1301.272849][T17469] ip6gretap0: entered promiscuous mode [ 1302.379824][T16983] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1302.614650][T17560] syzkaller0: entered promiscuous mode [ 1302.658935][T17560] syzkaller0: entered allmulticast mode [ 1303.020734][T13332] IPVS: starting estimator thread 0... [ 1303.144684][T17587] IPVS: using max 32 ests per chain, 76800 per kthread [ 1306.174579][ T4995] udevd[4995]: worker [15443] /devices/virtual/block/nbd6 is taking a long time [ 1309.132072][ T8134] IPVS: stop unused estimator thread 0... [ 1309.188454][T23450] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1309.202696][T17637] netlink: 'syz.1.17808': attribute type 3 has an invalid length. [ 1309.242146][T17637] netlink: 666 bytes leftover after parsing attributes in process `syz.1.17808'. [ 1309.358661][T16983] veth0_vlan: entered promiscuous mode [ 1309.410173][T17645] syzkaller0: entered promiscuous mode [ 1309.447865][T17645] syzkaller0: entered allmulticast mode [ 1309.530329][T16983] veth1_vlan: entered promiscuous mode [ 1309.847330][T16983] veth0_macvtap: entered promiscuous mode [ 1310.200328][T16983] veth1_macvtap: entered promiscuous mode [ 1310.417267][T17671] syzkaller0: entered promiscuous mode [ 1310.433068][T17671] syzkaller0: entered allmulticast mode [ 1310.754606][T17693] netlink: 44 bytes leftover after parsing attributes in process `syz.5.17826'. [ 1311.759969][ T1744] block nbd7: Possible stuck request ffff888027c07000: control (read@0,1024B). Runtime 60 seconds [ 1311.772024][ T1744] block nbd7: Possible stuck request ffff888027c071c0: control (read@1024,1024B). Runtime 60 seconds [ 1311.785460][ T1744] block nbd7: Possible stuck request ffff888027c07380: control (read@2048,1024B). Runtime 60 seconds [ 1311.798134][ T1744] block nbd7: Possible stuck request ffff888027c07540: control (read@3072,1024B). Runtime 60 seconds [ 1313.683577][ T4995] udevd[4995]: worker [14090] /devices/virtual/block/nbd7 is taking a long time [ 1316.525366][T17743] netlink: 64 bytes leftover after parsing attributes in process `syz.1.17831'. [ 1316.557283][T16983] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1316.715319][T16983] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1316.919904][T23450] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1316.959611][T23450] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1317.003651][T23450] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1317.090225][T23450] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1317.252775][T17771] netlink: 44 bytes leftover after parsing attributes in process `syz.1.17844'. [ 1317.439410][T17777] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17848'. [ 1317.977602][ T8132] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1318.020636][ T8132] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1318.195050][T23450] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1318.227458][T23450] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1318.301076][T17807] netlink: 44 bytes leftover after parsing attributes in process `syz.5.17859'. [ 1318.389584][T17813] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17861'. [ 1318.637806][T17821] netlink: 16 bytes leftover after parsing attributes in process `syz.3.17865'. [ 1318.874185][T17826] xt_hashlimit: size too large, truncated to 1048576 [ 1319.031187][ T8372] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1319.046804][ T8372] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1319.070203][ T8372] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1319.088408][ T8372] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1319.105004][ T8372] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1319.397049][T17845] netlink: 44 bytes leftover after parsing attributes in process `syz.3.17872'. [ 1319.536732][T17848] netlink: 76 bytes leftover after parsing attributes in process `syz.5.17873'. [ 1319.639924][T17850] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17874'. [ 1319.655750][T17853] netlink: 20 bytes leftover after parsing attributes in process `syz.3.17875'. [ 1320.065883][ T25] block nbd2: Possible stuck request ffff888027a46200: control (read@0,1024B). Runtime 60 seconds [ 1320.077729][ T25] block nbd2: Possible stuck request ffff888027a463c0: control (read@1024,1024B). Runtime 60 seconds [ 1320.090327][ T25] block nbd2: Possible stuck request ffff888027a46580: control (read@2048,1024B). Runtime 60 seconds [ 1320.104383][ T25] block nbd2: Possible stuck request ffff888027a46740: control (read@3072,1024B). Runtime 60 seconds [ 1320.143799][T17835] hsr0 speed is unknown, defaulting to 1000 [ 1321.150617][T17905] tipc: Started in network mode [ 1321.155954][T17905] tipc: Node identity 4, cluster identity 4711 [ 1321.169050][T17905] tipc: Node number set to 4 [ 1321.184181][ T1994] Bluetooth: hci4: command tx timeout [ 1321.373530][T17835] bridge0: port 1(bridge_slave_0) entered blocking state [ 1321.385375][T17835] bridge0: port 1(bridge_slave_0) entered disabled state [ 1321.401482][T17835] bridge_slave_0: entered allmulticast mode [ 1321.419407][T17835] bridge_slave_0: entered promiscuous mode [ 1321.453280][T17920] tipc: Started in network mode [ 1321.471284][T17920] tipc: Node identity 4, cluster identity 4711 [ 1321.489902][T17920] tipc: Node number set to 4 [ 1321.502001][T17835] bridge0: port 2(bridge_slave_1) entered blocking state [ 1321.521684][T17835] bridge0: port 2(bridge_slave_1) entered disabled state [ 1321.541042][T17835] bridge_slave_1: entered allmulticast mode [ 1321.570229][T17835] bridge_slave_1: entered promiscuous mode [ 1321.672588][T17931] __nla_validate_parse: 1 callbacks suppressed [ 1321.672608][T17931] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17905'. [ 1321.722185][T17835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1321.752077][T17835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1321.821945][T17835] team0: Port device team_slave_0 added [ 1321.847993][T17835] team0: Port device team_slave_1 added [ 1321.932855][T17835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1321.947292][T17835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1322.004600][T17835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1322.056729][T17835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1322.072477][T17835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1322.125204][T17835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1322.249407][T17835] hsr_slave_0: entered promiscuous mode [ 1322.268147][T17835] hsr_slave_1: entered promiscuous mode [ 1323.147901][T17835] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1323.170618][T17835] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1323.263471][ T1994] Bluetooth: hci4: command tx timeout [ 1323.480971][T17835] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1323.521897][T17835] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1323.788449][T17835] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1323.828585][T17835] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1324.195366][T17835] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1324.236424][T17835] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1324.249563][T18024] xt_hashlimit: size too large, truncated to 1048576 [ 1324.417393][T18028] bridge_slave_0: left allmulticast mode [ 1324.432917][T18028] bridge_slave_0: left promiscuous mode [ 1324.447238][T18028] bridge0: port 1(bridge_slave_0) entered disabled state [ 1325.006275][T17835] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1325.056939][T17835] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1325.087662][T17835] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1325.136438][T17835] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1325.156659][T17835] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1325.179517][T17835] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1325.204456][T17835] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1325.230550][T17835] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1325.342852][ T1994] Bluetooth: hci4: command tx timeout [ 1325.478937][T17835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1325.527762][T17835] 8021q: adding VLAN 0 to HW filter on device team0 [ 1325.546130][ T8136] bridge0: port 1(bridge_slave_0) entered blocking state [ 1325.553351][ T8136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1325.577239][ T8132] bridge0: port 2(bridge_slave_1) entered blocking state [ 1325.584496][ T8132] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1325.833167][T18086] netlink: 36 bytes leftover after parsing attributes in process `syz.0.17972'. [ 1325.867756][T18086] netlink: 12 bytes leftover after parsing attributes in process `syz.0.17972'. [ 1326.046510][T18095] syzkaller0: entered promiscuous mode [ 1326.052145][T18095] syzkaller0: entered allmulticast mode [ 1326.661240][T18120] tipc: Invalid UDP bearer configuration [ 1326.661359][T18120] tipc: Enabling of bearer rejected, failed to enable media [ 1326.712639][T17835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1326.921250][T17835] veth0_vlan: entered promiscuous mode [ 1326.966176][T17835] veth1_vlan: entered promiscuous mode [ 1327.019186][T17835] veth0_macvtap: entered promiscuous mode [ 1327.051406][T17835] veth1_macvtap: entered promiscuous mode [ 1327.107974][T17835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1327.200478][T17835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1327.266811][T18134] syzkaller0: entered promiscuous mode [ 1327.283487][T18134] syzkaller0: entered allmulticast mode [ 1327.310105][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1327.410188][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1327.424411][ T1994] Bluetooth: hci4: command tx timeout [ 1327.439123][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1327.538983][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1327.786980][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1327.823781][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1327.907770][T23450] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1327.916849][T23450] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1328.397346][ T1744] block nbd6: Possible stuck request ffff888027b97000: control (read@0,1024B). Runtime 90 seconds [ 1328.409159][ T1744] block nbd6: Possible stuck request ffff888027b971c0: control (read@1024,1024B). Runtime 90 seconds [ 1328.421810][ T1744] block nbd6: Possible stuck request ffff888027b97380: control (read@2048,1024B). Runtime 90 seconds [ 1328.434045][ T1744] block nbd6: Possible stuck request ffff888027b97540: control (read@3072,1024B). Runtime 90 seconds [ 1328.580595][T18179] netlink: 12 bytes leftover after parsing attributes in process `syz.3.18013'. [ 1328.602440][T18179] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18013'. [ 1329.472122][ T8372] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1329.486250][ T8372] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1329.505066][ T8372] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1329.518730][ T8372] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1329.529099][ T8372] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1329.730739][T18218] netlink: 12 bytes leftover after parsing attributes in process `syz.0.18027'. [ 1329.756894][T18220] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18028'. [ 1330.338283][T18213] hsr0 speed is unknown, defaulting to 1000 [ 1331.390980][T18213] bridge0: port 1(bridge_slave_0) entered blocking state [ 1331.412483][T18213] bridge0: port 1(bridge_slave_0) entered disabled state [ 1331.420168][T18213] bridge_slave_0: entered allmulticast mode [ 1331.429069][T18213] bridge_slave_0: entered promiscuous mode [ 1331.446818][T18213] bridge0: port 2(bridge_slave_1) entered blocking state [ 1331.458231][T18213] bridge0: port 2(bridge_slave_1) entered disabled state [ 1331.471539][T18213] bridge_slave_1: entered allmulticast mode [ 1331.484227][T18213] bridge_slave_1: entered promiscuous mode [ 1331.588171][ T8372] Bluetooth: hci0: command tx timeout [ 1331.708468][T18213] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1331.722886][T18213] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1331.854100][T18213] team0: Port device team_slave_0 added [ 1331.878273][T18213] team0: Port device team_slave_1 added [ 1331.943252][T18213] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1331.950245][T18213] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1331.989410][T18213] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1332.015758][T18213] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1332.022914][T18213] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1332.049301][T18213] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1332.136749][T18213] hsr_slave_0: entered promiscuous mode [ 1332.144651][T18213] hsr_slave_1: entered promiscuous mode [ 1332.155041][T18213] debugfs: 'hsr0' already exists in 'hsr' [ 1332.160951][T18213] Cannot create hsr debugfs directory [ 1332.498144][T18213] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1332.511385][T18213] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1332.524646][T18213] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1332.535233][T18213] netdevsim netdevsim2 eth3 (unregistering): unset [1, 2] type 2 family 0 port 47584 - 0 [ 1332.547820][T18213] netdevsim netdevsim2 eth3 (unregistering): unset [1, 3] type 2 family 0 port 20004 - 0 [ 1332.915484][T18312] syzkaller0: entered promiscuous mode [ 1332.929293][T18312] syzkaller0: entered allmulticast mode [ 1333.150090][T18333] IPVS: sed: FWM 3 0x00000003 - no destination available [ 1333.158111][ T5643] IPVS: starting estimator thread 0... [ 1333.292549][T18334] IPVS: using max 41 ests per chain, 98400 per kthread [ 1333.328357][T18343] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18068'. [ 1333.674516][ T8372] Bluetooth: hci0: command tx timeout [ 1335.743161][ T8372] Bluetooth: hci0: command tx timeout [ 1337.260897][ T4995] udevd[4995]: worker [16340] /devices/virtual/block/nbd2 is taking a long time [ 1337.835553][ T8372] Bluetooth: hci0: command tx timeout [ 1338.474716][T18213] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1338.484736][T18213] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1338.495387][T18213] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1338.506554][T18213] netdevsim netdevsim2 eth2 (unregistering): unset [1, 2] type 2 family 0 port 47584 - 0 [ 1338.518222][T18213] netdevsim netdevsim2 eth2 (unregistering): unset [1, 3] type 2 family 0 port 20004 - 0 [ 1338.661104][T18213] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1338.685678][T18213] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1338.696505][T18213] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1338.707519][T18213] netdevsim netdevsim2 eth1 (unregistering): unset [1, 2] type 2 family 0 port 47584 - 0 [ 1338.729395][T18213] netdevsim netdevsim2 eth1 (unregistering): unset [1, 3] type 2 family 0 port 20004 - 0 [ 1338.889345][T18213] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1338.909432][T18213] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1338.925840][T18213] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1338.938587][T18213] netdevsim netdevsim2 eth0 (unregistering): unset [1, 2] type 2 family 0 port 47584 - 0 [ 1338.972900][T18213] netdevsim netdevsim2 eth0 (unregistering): unset [1, 3] type 2 family 0 port 20004 - 0 [ 1339.373986][T18397] netlink: 44 bytes leftover after parsing attributes in process `syz.5.18082'. [ 1339.702079][T18213] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1339.726522][T18213] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1339.738990][T18213] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1339.755859][T18213] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1339.784241][T18213] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1339.797972][T18213] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1339.818669][T18213] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1339.846919][T18213] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1340.130369][T18213] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1340.240400][T18213] 8021q: adding VLAN 0 to HW filter on device team0 [ 1340.275429][T23450] bridge0: port 1(bridge_slave_0) entered blocking state [ 1340.283373][T23450] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1340.313650][T18428] syzkaller0: entered promiscuous mode [ 1340.319905][T18428] syzkaller0: entered allmulticast mode [ 1340.356589][ T8136] bridge0: port 2(bridge_slave_1) entered blocking state [ 1340.363833][ T8136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1340.396782][T18432] netlink: 28 bytes leftover after parsing attributes in process `syz.5.18095'. [ 1340.458695][T18432] geneve2: entered promiscuous mode [ 1341.063234][T18455] netlink: 64 bytes leftover after parsing attributes in process `syz.1.18101'. [ 1341.482190][T18213] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1341.579518][T18213] veth0_vlan: entered promiscuous mode [ 1341.601142][T18213] veth1_vlan: entered promiscuous mode [ 1341.662859][T18213] veth0_macvtap: entered promiscuous mode [ 1341.679121][T18213] veth1_macvtap: entered promiscuous mode [ 1341.682505][T18475] IPVS: sed: FWM 3 0x00000003 - no destination available [ 1341.693947][ T5643] IPVS: starting estimator thread 0... [ 1341.707638][T18213] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1341.733636][T18213] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1341.779582][ T8136] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1341.783133][T18476] IPVS: using max 41 ests per chain, 98400 per kthread [ 1341.791069][ T8136] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1341.813398][ T8136] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1341.826320][ T1744] block nbd7: Possible stuck request ffff888027c07000: control (read@0,1024B). Runtime 90 seconds [ 1341.837470][ T8136] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1341.848764][ T1744] block nbd7: Possible stuck request ffff888027c071c0: control (read@1024,1024B). Runtime 90 seconds [ 1341.861395][ T1744] block nbd7: Possible stuck request ffff888027c07380: control (read@2048,1024B). Runtime 90 seconds [ 1341.874014][ T1744] block nbd7: Possible stuck request ffff888027c07540: control (read@3072,1024B). Runtime 90 seconds [ 1342.332913][ T8136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1342.350293][ T8136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1342.415671][T23450] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1342.430400][T23450] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1342.970203][T18515] IPVS: sed: FWM 3 0x00000003 - no destination available [ 1343.275649][T18529] IPVS: sed: FWM 3 0x00000003 - no destination available [ 1343.284081][T18529] IPVS: sed: FWM 3 0x00000003 - no destination available [ 1343.899624][T18550] netlink: 204 bytes leftover after parsing attributes in process `syz.3.18142'. [ 1344.364688][T13602] IPVS: starting estimator thread 0... [ 1344.397719][T18567] IPVS: sed: FWM 3 0x00000003 - no destination available [ 1344.477534][T18568] IPVS: using max 43 ests per chain, 103200 per kthread [ 1344.516902][T18573] IPVS: sed: FWM 3 0x00000003 - no destination available [ 1344.601675][T18574] bridge_slave_0: left allmulticast mode [ 1344.621452][T18574] bridge_slave_0: left promiscuous mode [ 1344.640053][T18574] bridge0: port 1(bridge_slave_0) entered disabled state [ 1344.674914][T18579] netlink: 204 bytes leftover after parsing attributes in process `syz.5.18155'. [ 1344.695055][T18574] bridge_slave_1: left allmulticast mode [ 1344.709266][T18574] bridge_slave_1: left promiscuous mode [ 1344.728443][T18574] bridge0: port 2(bridge_slave_1) entered disabled state [ 1344.883969][T18574] bond0: (slave bond_slave_0): Releasing backup interface [ 1344.945872][T18574] bond0: (slave bond_slave_1): Releasing backup interface [ 1345.018984][T18574] team0: Port device team_slave_0 removed [ 1345.057642][T18574] team0: Port device team_slave_1 removed [ 1345.068192][T18574] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1345.078512][T18574] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1345.111640][T18574] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1345.120370][T18574] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1345.132136][T18574] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1345.191243][T18578] ip6gre1: entered allmulticast mode [ 1345.269820][T18578] team0: Port device ip6gre1 added [ 1345.786066][T18602] IPVS: sed: FWM 3 0x00000003 - no destination available [ 1345.819733][T18603] tipc: Started in network mode [ 1345.853543][T18603] tipc: Node identity 4, cluster identity 4711 [ 1345.860756][T18603] tipc: Node number set to 4 [ 1346.023540][T18615] netlink: 204 bytes leftover after parsing attributes in process `syz.1.18170'. [ 1346.091705][T18617] IPVS: sed: FWM 3 0x00000003 - no destination available [ 1346.116624][T18617] IPVS: sed: FWM 3 0x00000003 - no destination available [ 1346.537852][T18627] netlink: 232 bytes leftover after parsing attributes in process `syz.1.18176'. [ 1346.615907][T18632] syzkaller0: entered promiscuous mode [ 1346.632423][T18632] syzkaller0: entered allmulticast mode [ 1346.983772][T18646] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18186'. [ 1347.274329][T18656] netlink: 232 bytes leftover after parsing attributes in process `syz.5.18190'. [ 1348.400593][ T1240] IPVS: starting estimator thread 0... [ 1348.415173][T18697] net_ratelimit: 1 callbacks suppressed [ 1348.415190][T18697] IPVS: sed: FWM 3 0x00000003 - no destination available [ 1348.512520][T18700] IPVS: using max 31 ests per chain, 74400 per kthread [ 1348.687394][T18712] lo: entered allmulticast mode [ 1348.780253][T18718] netlink: 64 bytes leftover after parsing attributes in process `syz.0.18211'. [ 1348.951098][T18726] IPVS: sed: FWM 3 0x00000003 - no destination available [ 1349.151347][T18733] IPVS: sed: FWM 3 0x00000003 - no destination available [ 1349.477598][T18753] IPVS: sed: FWM 3 0x00000003 - no destination available [ 1350.001345][T18757] syzkaller0: entered promiscuous mode [ 1350.038996][T18757] syzkaller0: entered allmulticast mode [ 1350.224397][ T25] block nbd2: Possible stuck request ffff888027a46200: control (read@0,1024B). Runtime 90 seconds [ 1350.244265][ T25] block nbd2: Possible stuck request ffff888027a463c0: control (read@1024,1024B). Runtime 90 seconds [ 1350.264159][ T25] block nbd2: Possible stuck request ffff888027a46580: control (read@2048,1024B). Runtime 90 seconds [ 1350.282787][ T25] block nbd2: Possible stuck request ffff888027a46740: control (read@3072,1024B). Runtime 90 seconds [ 1351.460938][T18782] IPVS: sed: FWM 3 0x00000003 - no destination available [ 1351.780605][T18788] netlink: 40 bytes leftover after parsing attributes in process `syz.3.18246'. [ 1353.681567][T18816] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18259'. [ 1357.612281][ C1] sched: DL replenish lagged too much [ 1375.862341][ T5634] Bluetooth: hci2: command 0x0406 tx timeout [ 1460.342218][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1460.349224][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P18823/1:b..l [ 1460.357909][ C1] rcu: (detected by 1, t=10503 jiffies, g=278497, q=322611 ncpus=2) [ 1460.366014][ C1] task:syz.1.18263 state:R running task stack:27904 pid:18823 tgid:18822 ppid:17835 task_flags:0x400040 flags:0x00080002 [ 1460.381351][ C1] Call Trace: [ 1460.384667][ C1] [ 1460.387625][ C1] __schedule+0x1821/0x5740 [ 1460.392190][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 1460.397427][ C1] ? __pfx___schedule+0x10/0x10 [ 1460.402313][ C1] ? nlmon_xmit+0xb0/0x100 [ 1460.406884][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 1460.412290][ C1] preempt_schedule_common+0x82/0xd0 [ 1460.417605][ C1] ? __dev_queue_xmit+0x2b6/0x3950 [ 1460.422776][ C1] preempt_schedule_thunk+0x16/0x30 [ 1460.428019][ C1] __local_bh_enable_ip+0xe1/0x130 [ 1460.433160][ C1] ? __dev_queue_xmit+0x2b6/0x3950 [ 1460.438308][ C1] __dev_queue_xmit+0x1fe5/0x3950 [ 1460.443369][ C1] ? do_syscall_64+0x15f/0xf80 [ 1460.448173][ C1] ? __dev_queue_xmit+0x2b6/0x3950 [ 1460.453334][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1460.458752][ C1] ? __copy_skb_header+0xa3/0x4a0 [ 1460.463834][ C1] ? skb_clone+0x246/0x3a0 [ 1460.468295][ C1] __netlink_deliver_tap+0x5ad/0x850 [ 1460.473625][ C1] ? netlink_deliver_tap+0x2e/0x1b0 [ 1460.478862][ C1] netlink_deliver_tap+0x19c/0x1b0 [ 1460.484012][ C1] netlink_unicast+0x730/0x8e0 [ 1460.488825][ C1] netlink_sendmsg+0x813/0xb40 [ 1460.493630][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1460.498950][ C1] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1460.503924][ C1] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1460.509237][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1460.514559][ C1] __sys_sendto+0x672/0x710 [ 1460.519113][ C1] ? __pfx___sys_sendto+0x10/0x10 [ 1460.524188][ C1] ? exc_page_fault+0x6a/0xc0 [ 1460.528901][ C1] ? do_user_addr_fault+0xc6f/0x1340 [ 1460.534220][ C1] __x64_sys_sendto+0xde/0x100 [ 1460.539014][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1460.545100][ C1] do_syscall_64+0x15f/0xf80 [ 1460.549733][ C1] ? trace_irq_disable+0x3b/0x140 [ 1460.554800][ C1] ? clear_bhb_loop+0x40/0x90 [ 1460.559505][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1460.565424][ C1] RIP: 0033:0x7fa8c2f5d68e [ 1460.569866][ C1] RSP: 002b:00007fa8c3f0ae88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1460.578307][ C1] RAX: ffffffffffffffda RBX: 00007fa8c3f0c6c0 RCX: 00007fa8c2f5d68e [ 1460.586301][ C1] RDX: 0000000000000020 RSI: 00007fa8c3f0b000 RDI: 0000000000000004 [ 1460.594300][ C1] RBP: 0000000000000000 R08: 00007fa8c3f0af04 R09: 000000000000000c [ 1460.602298][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1460.610286][ C1] R13: 00007fa8c3f0af58 R14: 00007fa8c3f0b000 R15: 0000000000000000 [ 1460.618296][ C1] [ 1460.621330][ C1] rcu: rcu_preempt kthread starved for 324 jiffies! g278497 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 1460.632456][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1460.642443][ C1] rcu: RCU grace-period kthread stack dump: [ 1460.648339][ C1] task:rcu_preempt state:R running task stack:27536 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 1460.661857][ C1] Call Trace: [ 1460.665162][ C1] [ 1460.668114][ C1] __schedule+0x1821/0x5740 [ 1460.672647][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 1460.677644][ C1] ? __pfx___schedule+0x10/0x10 [ 1460.682540][ C1] ? schedule+0x90/0x360 [ 1460.686817][ C1] schedule+0x164/0x360 [ 1460.690998][ C1] schedule_timeout+0x158/0x2c0 [ 1460.695872][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 1460.701269][ C1] ? __pfx_process_timeout+0x10/0x10 [ 1460.706596][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1460.712445][ C1] ? prepare_to_swait_event+0x340/0x370 [ 1460.718030][ C1] rcu_gp_fqs_loop+0x312/0x11d0 [ 1460.723006][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 1460.729186][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1460.734491][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1460.739734][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1460.745581][ C1] rcu_gp_kthread+0x9e/0x2b0 [ 1460.750208][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1460.755433][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1460.761271][ C1] ? __kthread_parkme+0x7a/0x1f0 [ 1460.766240][ C1] ? __kthread_parkme+0x19c/0x1f0 [ 1460.771300][ C1] kthread+0x389/0x470 [ 1460.775398][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1460.780622][ C1] ? __pfx_kthread+0x10/0x10 [ 1460.785258][ C1] ret_from_fork+0x514/0xb70 [ 1460.789881][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1460.795016][ C1] ? __switch_to+0xc79/0x1410 [ 1460.799724][ C1] ? __pfx_kthread+0x10/0x10 [ 1460.804343][ C1] ret_from_fork_asm+0x1a/0x30 [ 1460.809159][ C1] [ 1460.812193][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 1460.818541][ C1] Sending NMI from CPU 1 to CPUs 0: [ 1460.823785][ C0] NMI backtrace for cpu 0 [ 1460.823806][ C0] CPU: 0 UID: 0 PID: 20624 Comm: kworker/R-bond6 Not tainted syzkaller #0 PREEMPT(full) [ 1460.823824][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1460.823835][ C0] Workqueue: bond6 bond_3ad_state_machine_handler [ 1460.823980][ C0] RIP: 0010:native_apic_msr_write+0x39/0x50 [ 1460.824012][ C0] Code: 74 2a 83 ff 30 74 25 eb 10 81 ff d0 00 00 00 74 1b 81 ff e0 00 00 00 74 13 c1 ef 04 81 c7 00 08 00 00 89 f9 89 f0 31 d2 0f 30 <66> 90 e9 c0 37 36 0a cc 89 f6 31 d2 e9 66 65 7a 03 66 0f 1f 44 00 [ 1460.824024][ C0] RSP: 0000:ffffc90000006690 EFLAGS: 00000046 [ 1460.824037][ C0] RAX: 0000000000000612 RBX: ffff8880b8623e40 RCX: 0000000000000838 [ 1460.824048][ C0] RDX: 0000000000000000 RSI: 0000000000000612 RDI: 0000000000000838 [ 1460.824057][ C0] RBP: ffffc90000006758 R08: ffffffff81b2e675 R09: ffffffff9a490588 [ 1460.824069][ C0] R10: 0000000000000003 R11: ffffffff817446c0 R12: 0000000000000612 [ 1460.824078][ C0] R13: dffffc0000000000 R14: 0000000010004824 R15: 0000000000000020 [ 1460.824089][ C0] FS: 0000000000000000(0000) GS:ffff88812528a000(0000) knlGS:0000000000000000 [ 1460.824101][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1460.824111][ C0] CR2: 00007f2c58200000 CR3: 0000000054db8000 CR4: 00000000003526f0 [ 1460.824125][ C0] Call Trace: [ 1460.824132][ C0] [ 1460.824138][ C0] lapic_next_event+0x11/0x20 [ 1460.824154][ C0] clockevents_program_event+0x385/0x630 [ 1460.824179][ C0] ? __pfx_clockevents_program_event+0x10/0x10 [ 1460.824200][ C0] ? tick_program_event+0x8f/0x120 [ 1460.824223][ C0] __hrtimer_rearm_deferred+0x270/0x450 [ 1460.824245][ C0] irqentry_exit+0x6d5/0x760 [ 1460.824271][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1460.824287][ C0] RIP: 0010:rcu_is_watching+0x5a/0xb0 [ 1460.824306][ C0] Code: f0 48 c1 e8 03 42 80 3c 38 00 74 08 4c 89 f7 e8 1c 24 86 00 48 c7 c3 d8 99 3a 93 49 03 1e 48 89 d8 48 c1 e8 03 42 0f b6 04 38 <84> c0 75 34 8b 03 65 ff 0d 29 82 8e 11 74 11 83 e0 04 c1 e8 02 5b [ 1460.824318][ C0] RSP: 0000:ffffc900000068b0 EFLAGS: 00000a02 [ 1460.824330][ C0] RAX: 0000000000000000 RBX: ffff8880b86339d8 RCX: 0000000080000101 [ 1460.824340][ C0] RDX: ffffc90000006a01 RSI: ffffffff8c28af40 RDI: ffffffff8c28af00 [ 1460.824351][ C0] RBP: dffffc0000000000 R08: ffffc90005937cb8 R09: 0000000000000000 [ 1460.824361][ C0] R10: ffffc90000006a58 R11: fffff52000000d4d R12: ffffc90005937cc8 [ 1460.824371][ C0] R13: ffffffff8176f256 R14: ffffffff8e266790 R15: dffffc0000000000 [ 1460.824383][ C0] ? unwind_next_frame+0xa6/0x2550 [ 1460.824409][ C0] ? unwind_next_frame+0xa6/0x2550 [ 1460.824426][ C0] lock_release+0x4b/0x3c0 [ 1460.824441][ C0] ? deref_stack_reg+0x19f/0x230 [ 1460.824461][ C0] ? unwind_next_frame+0xa6/0x2550 [ 1460.824478][ C0] unwind_next_frame+0x1bba/0x2550 [ 1460.824498][ C0] ? unwind_next_frame+0xa6/0x2550 [ 1460.824515][ C0] ? process_scheduled_works+0xb5d/0x1860 [ 1460.824533][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1460.824556][ C0] arch_stack_walk+0x11b/0x150 [ 1460.824577][ C0] ? rescuer_thread+0x827/0x1130 [ 1460.824596][ C0] stack_trace_save+0xa9/0x100 [ 1460.824617][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1460.824639][ C0] ? __kasan_kmalloc+0x93/0xb0 [ 1460.824669][ C0] ? __kmalloc_cache_noprof+0x31c/0x660 [ 1460.824689][ C0] ? kmem_cache_free+0x156/0x650 [ 1460.824708][ C0] ? nf_conntrack_free+0x2f7/0x380 [ 1460.824758][ C0] ? nf_conntrack_in+0x9a9/0x15b0 [ 1460.824773][ C0] ? nf_hook_slow+0xc5/0x220 [ 1460.824821][ C0] ? nf_hook+0x22a/0x3a0 [ 1460.824893][ C0] ? __ip_local_out+0x558/0x6a0 [ 1460.824915][ C0] kasan_save_stack+0x3e/0x60 [ 1460.824933][ C0] ? kasan_save_stack+0x3e/0x60 [ 1460.824951][ C0] ? kasan_record_aux_stack+0xbd/0xd0 [ 1460.824967][ C0] ? kmem_cache_free+0x44f/0x650 [ 1460.824986][ C0] ? nf_conntrack_free+0x2f7/0x380 [ 1460.825000][ C0] ? nf_conntrack_in+0x9a9/0x15b0 [ 1460.825015][ C0] ? nf_hook_slow+0xc5/0x220 [ 1460.825035][ C0] ? nf_hook+0x22a/0x3a0 [ 1460.825054][ C0] ? __ip_local_out+0x558/0x6a0 [ 1460.825074][ C0] ? ip_local_out+0x2a/0x190 [ 1460.825093][ C0] ? synproxy_send_client_synack+0x8c1/0xe30 [ 1460.825160][ C0] ? nft_synproxy_eval_v4+0x34a/0x4e0 [ 1460.825199][ C0] ? nft_synproxy_do_eval+0x305/0x580 [ 1460.825212][ C0] ? nft_do_chain+0x48d/0x1ae0 [ 1460.825226][ C0] ? nft_do_chain_inet+0x360/0x4b0 [ 1460.825241][ C0] ? nf_hook_slow+0xc5/0x220 [ 1460.825261][ C0] ? NF_HOOK+0x21f/0x3c0 [ 1460.825277][ C0] ? NF_HOOK+0x336/0x3c0 [ 1460.825293][ C0] ? process_backlog+0xaa3/0x1950 [ 1460.825336][ C0] ? __napi_poll+0xae/0x340 [ 1460.825351][ C0] ? net_rx_action+0x627/0xf70 [ 1460.825366][ C0] ? handle_softirqs+0x22a/0x840 [ 1460.825381][ C0] ? __irq_exit_rcu+0xca/0x220 [ 1460.825394][ C0] ? irq_exit_rcu+0x9/0x30 [ 1460.825407][ C0] ? sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1460.825427][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1460.825442][ C0] ? queue_delayed_work_on+0x17a/0x1e0 [ 1460.825459][ C0] ? bond_3ad_state_machine_handler+0x5b07/0x5bf0 [ 1460.825477][ C0] ? process_scheduled_works+0xb5d/0x1860 [ 1460.825505][ C0] ? nf_conntrack_free+0x2f7/0x380 [ 1460.825519][ C0] kasan_record_aux_stack+0xbd/0xd0 [ 1460.825536][ C0] kmem_cache_free+0x44f/0x650 [ 1460.825556][ C0] ? nf_conntrack_free+0x2e8/0x380 [ 1460.825573][ C0] nf_conntrack_free+0x2f7/0x380 [ 1460.825589][ C0] nf_conntrack_in+0x9a9/0x15b0 [ 1460.825616][ C0] ? __pfx_nf_conntrack_in+0x10/0x10 [ 1460.825636][ C0] ? ipt_do_table+0x2b2/0x1630 [ 1460.825663][ C0] ? nf_hook+0xa1/0x3a0 [ 1460.825683][ C0] ? nf_hook+0xa1/0x3a0 [ 1460.825703][ C0] ? ipv4_conntrack_defrag+0x2a0/0x5b0 [ 1460.825725][ C0] ? ipv4_conntrack_local+0x126/0x210 [ 1460.825764][ C0] ? __pfx_ipv4_conntrack_local+0x10/0x10 [ 1460.825779][ C0] nf_hook_slow+0xc5/0x220 [ 1460.825802][ C0] ? __pfx_dst_output+0x10/0x10 [ 1460.825822][ C0] nf_hook+0x22a/0x3a0 [ 1460.825844][ C0] ? nf_hook+0xa1/0x3a0 [ 1460.825863][ C0] ? __pfx_nf_hook+0x10/0x10 [ 1460.825883][ C0] ? __ip_local_out+0x152/0x6a0 [ 1460.825904][ C0] ? __pfx_dst_output+0x10/0x10 [ 1460.825927][ C0] ? __ip_local_out+0x152/0x6a0 [ 1460.825949][ C0] __ip_local_out+0x558/0x6a0 [ 1460.825969][ C0] ? __pfx_dst_output+0x10/0x10 [ 1460.825992][ C0] ip_local_out+0x2a/0x190 [ 1460.826014][ C0] synproxy_send_client_synack+0x8c1/0xe30 [ 1460.826044][ C0] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 1460.826066][ C0] ? nft_log_init+0x938/0x9a0 [ 1460.826108][ C0] ? synproxy_pernet+0x45/0x270 [ 1460.826125][ C0] nft_synproxy_eval_v4+0x34a/0x4e0 [ 1460.826142][ C0] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 1460.826158][ C0] ? nf_ip_checksum+0x13c/0x510 [ 1460.826176][ C0] nft_synproxy_do_eval+0x305/0x580 [ 1460.826189][ C0] ? __ip_vs_conn_in_get+0xa6/0x10f0 [ 1460.826233][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 1460.826246][ C0] ? nft_trace_init+0x283/0x4c0 [ 1460.826264][ C0] ? __pfx___ip_vs_conn_in_get+0x10/0x10 [ 1460.826281][ C0] nft_do_chain+0x48d/0x1ae0 [ 1460.826299][ C0] ? ip_vs_service_find+0x152/0x3c0 [ 1460.826345][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 1460.826370][ C0] ? ip_vs_in_hook+0xc50/0x1bf0 [ 1460.826386][ C0] ? ip_vs_in_hook+0xc84/0x1bf0 [ 1460.826409][ C0] nft_do_chain_inet+0x360/0x4b0 [ 1460.826425][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 1460.826443][ C0] ? nf_nat_ipv4_local_in+0x223/0x720 [ 1460.826465][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 1460.826481][ C0] nf_hook_slow+0xc5/0x220 [ 1460.826504][ C0] NF_HOOK+0x21f/0x3c0 [ 1460.826523][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 1460.826542][ C0] ? NF_HOOK+0x9e/0x3c0 [ 1460.826559][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 1460.826575][ C0] ? ip_rcv_finish_core+0xda3/0x1c00 [ 1460.826595][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 1460.826616][ C0] ? ip_local_deliver+0x12a/0x1b0 [ 1460.826636][ C0] NF_HOOK+0x336/0x3c0 [ 1460.826676][ C0] ? seqcount_lockdep_reader_access+0xd4/0x100 [ 1460.826700][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 1460.826717][ C0] ? NF_HOOK+0x9e/0x3c0 [ 1460.826734][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 1460.826753][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 1460.826774][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 1460.826791][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 1460.826808][ C0] ? process_backlog+0x3eb/0x1950 [ 1460.826825][ C0] process_backlog+0xaa3/0x1950 [ 1460.826852][ C0] __napi_poll+0xae/0x340 [ 1460.826866][ C0] ? skb_defer_free_flush+0x233/0x260 [ 1460.826883][ C0] net_rx_action+0x627/0xf70 [ 1460.826907][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 1460.826923][ C0] ? xfrm_dev_backlog+0x24b/0x3c0 [ 1460.826951][ C0] ? net_tx_action+0x5b6/0xc30 [ 1460.826969][ C0] ? net_tx_action+0xbfb/0xc30 [ 1460.826988][ C0] handle_softirqs+0x22a/0x840 [ 1460.827005][ C0] ? __irq_exit_rcu+0xca/0x220 [ 1460.827023][ C0] __irq_exit_rcu+0xca/0x220 [ 1460.827039][ C0] irq_exit_rcu+0x9/0x30 [ 1460.827052][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1460.827072][ C0] [ 1460.827077][ C0] [ 1460.827083][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1460.827099][ C0] RIP: 0010:queue_delayed_work_on+0x17a/0x1e0 [ 1460.827116][ C0] Code: 00 4d 85 f6 75 16 e8 c5 79 38 00 eb 15 e8 be 79 38 00 e8 79 6a 1b 0a 4d 85 f6 74 ea e8 af 79 38 00 fb 65 48 8b 05 66 15 ac 11 <48> 3b 44 24 20 75 56 89 d8 48 83 c4 28 5b 41 5c 41 5d 41 5e 41 5f [ 1460.827129][ C0] RSP: 0000:ffffc90005937880 EFLAGS: 00000293 [ 1460.827142][ C0] RAX: e6fe91c9e324c400 RBX: ffff88802acd9301 RCX: ffff88806aaf8000 [ 1460.827153][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1460.827162][ C0] RBP: 0000000000000008 R08: ffffffff9030bff7 R09: 1ffffffff20617fe [ 1460.827172][ C0] R10: dffffc0000000000 R11: fffffbfff20617ff R12: 0000000002000001 [ 1460.827182][ C0] R13: 0000000000000000 R14: 0000000000000200 R15: 0000000000000000 [ 1460.827200][ C0] ? __local_bh_enable_ip+0xd0/0x130 [ 1460.827217][ C0] bond_3ad_state_machine_handler+0x5b07/0x5bf0 [ 1460.827240][ C0] ? irqentry_exit+0x218/0x760 [ 1460.827262][ C0] ? irqentry_exit+0x218/0x760 [ 1460.827281][ C0] ? trace_irq_disable+0x3b/0x140 [ 1460.827302][ C0] ? bond_3ad_state_machine_handler+0xd0/0x5bf0 [ 1460.827321][ C0] ? __pfx_bond_3ad_state_machine_handler+0x10/0x10 [ 1460.827339][ C0] ? process_scheduled_works+0xa70/0x1860 [ 1460.827358][ C0] ? process_scheduled_works+0xa70/0x1860 [ 1460.827372][ C0] ? process_scheduled_works+0xa70/0x1860 [ 1460.827387][ C0] process_scheduled_works+0xb5d/0x1860 [ 1460.827416][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 1460.827430][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 1460.827459][ C0] rescuer_thread+0x827/0x1130 [ 1460.827480][ C0] ? rescuer_thread+0xbb/0x1130 [ 1460.827505][ C0] kthread+0x389/0x470 [ 1460.827524][ C0] ? __pfx_rescuer_thread+0x10/0x10 [ 1460.827539][ C0] ? __pfx_kthread+0x10/0x10 [ 1460.827558][ C0] ret_from_fork+0x514/0xb70 [ 1460.827575][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1460.827589][ C0] ? __switch_to+0xc79/0x1410 [ 1460.827612][ C0] ? __pfx_kthread+0x10/0x10 [ 1460.827631][ C0] ret_from_fork_asm+0x1a/0x30 [ 1460.827664][ C0]