last executing test programs: 2.631197006s ago: executing program 1 (id=20585): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="1f003300d0000000080211000001080211000000505050505050"], 0x3c}}, 0x10) 2.548324953s ago: executing program 1 (id=20586): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, 0x0, 0x10) sendmmsg(r2, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000000140)="e7", 0x1}], 0x1}}], 0x1, 0x811) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r3) 2.544489618s ago: executing program 4 (id=20587): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000001880)=@req3={0x5b000000, 0x7, 0x0, 0x8, 0x8, 0x5e7, 0x9}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001480)=ANY=[@ANYRES16=0x0, @ANYBLOB], 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000041) sendmsg$nl_generic(r1, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) recvmmsg(r1, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/189, 0xbd}, {&(0x7f00000003c0)=""/152, 0x98}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3}}], 0x7, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f00000015c0), r1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x2}, 0x6) setsockopt$sock_int(r2, 0x1, 0x25, &(0x7f0000000300)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x28, 0x2, 0x7, 0x201, 0x0, 0x0, {0xd, 0x0, 0x9}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x57a}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x6}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x800) sendmsg$TEAM_CMD_PORT_LIST_GET(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)={0x20, r5, 0x211, 0x70bd25, 0x25dfdbfb, {}, [{{0x8}, {0x4}}]}, 0x20}}, 0x20044010) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$tipc(&(0x7f0000001700), r1) sendmsg$TIPC_CMD_SET_LINK_TOL(r1, 0x0, 0x4001) sendmsg$IPSET_CMD_LIST(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000000706010300000068416a8fb4e89743090500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x44000}, 0x8000) close(r7) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000004788031c09103b28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@ipv6_newrule={0x44, 0x1a, 0x1, 0x0, 0x0, {0x81, 0x80, 0x80}, [@FRA_SRC={0x14, 0x2, @private1}, @FRA_DST={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x44}}, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000240)) 2.455487636s ago: executing program 4 (id=20588): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f00000000c0)="91b8a91fd3108691bbc4173c3d6f357d027273117b3d0f171ba4ac4703cad036e68907e50e9997cd9c", 0x29}, {&(0x7f0000001c00)="4490137c227c56ee66c372f3105eb186dd8062fad2d5b5bfb0ba068e74a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9afda48e71255a747b6d03097385fb05cf8db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61210c410d799168ffc4b64677af924affd442035db81e18c2d2462d0bb25fff9d3b1ce903597992b2a4d541611ce77f58dce7c9500118229e7cdf4ca7f6adca92c73d97ce54164c1942b25686866f6b53fe7e75cf6854284d501f8535bec8e020b41fb2f8", 0xea}, {&(0x7f00000003c0)="641a6a2b863c0dd898013a3f97a834ebb75a925ab48c844221841a232932fc2e37e327de21450df098c113e179a0d340", 0x30}, {&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c42200fd9232f5aa6a361816bf21afb8473a064f1988536d4b5888807b3aaafaf59f53121782a0a9370dc0feae13c8c2a1dcc8a3122aaa3dcd5b9247a915378e6492e5b94073dcdc87e7c794fb262a7e9ee0b9432f", 0xc6}], 0x4}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000140)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001d7545517fd18b5d29978f32a5b5c81755cb89cc0490958", 0x75}, {&(0x7f0000000740)="31cef842d9c50636f60fc0cfdac56c75f1687f0c56287423f5eed69f117e766bdbad0c2171ad6227e1173ab6efa2fcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490fbe385ea382294882839a22674037b8910bd8a1420e33eb1be6f10cfb24eb7cccdf1528ef33b34ab07cdb0909a9ba9547e1e343b451d9025c4e153612d4674b9411fb4de295599abbcb388d291aa839ab0954e6a", 0x9c}, {&(0x7f0000000840)="8d684aa45f4b69499d707f3c8d114132fee1eafdcbbc5a16cb7b2841192b5779f99579e5c788b15b023df831028b9e6b5e9edd619e22626535212de5a998c5b793abdd7336cd8eb19e2fbd9a6ac2ca9c0f138ee10572672999ca4f51c09f9810459bad7e7bc28fc8890224dc01efcc276e62afe52450049cb6a165ce771a64b46f9b283ba8083e05c82291", 0x8b}, {&(0x7f0000000a00)="a7c652df859ed2764e960e7f50a64153fba30cbb8e57f06f55dc0ae10dc21fcd48944b17170f070271208ec6eed721805abd1d46290d3fa170a218b0348a277697884eeb0682edd2e557fab3ea869c1920c576a12a3e669d3688abb7db23544f78bd0580b8545dde37241ced32a9e92a4295af773a12336be811402a6731", 0x7e}, {&(0x7f00000021c0)="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", 0x361}], 0x5}}], 0x2, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 2.444419063s ago: executing program 2 (id=20589): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@newtaction={0xf0, 0x30, 0x101, 0x70bd2b, 0x25dfdbfe, {}, [{0xa4, 0x1, [@m_simple={0xa0, 0x18, 0x0, 0x0, {{0xb}, {0x4}, {0x74, 0x6, "1cb72a0d004a5c6799e72fccea79d240b866dc36cafcd105bb9bda437e04a39917c1b592230051b580d2ef2f1d06b4410ba3bd4e07f8e2806928104167947d9996404a71de46982432812ccbb4369e29e517f695dcdab5eaebb89f913805c288d25bf5274c6f74becc045de947b1504c"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}]}, {0x38, 0x1, [@m_simple={0x34, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x5, 0x6, "11"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x4000880}, 0x20008084) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf, 0xa1}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001400)=ANY=[@ANYBLOB="14000000520001f6"], 0x14}, 0x1, 0x0, 0x0, 0x404c000}, 0x40) 2.397022165s ago: executing program 2 (id=20590): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty, 0x4000006}, 0x1c) listen(r1, 0x6) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) accept(r0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[], 0x84}}, 0x0) 1.708014457s ago: executing program 0 (id=20593): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000380)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7000fcdbdf252100000008000300", @ANYRES32=r2], 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) 1.609016478s ago: executing program 1 (id=20595): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x101a00, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xd}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x5}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x40004) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0x5, 0xb}, {0xfff3, 0xfffe}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x240040e0}, 0x40000) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, 0x0, 0x0, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @multicast}, 0x14) 1.571245576s ago: executing program 4 (id=20596): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="1f003300d0000000080211000001080211000000505050505050"], 0x3c}}, 0x10) 1.495389406s ago: executing program 2 (id=20597): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{}, 0x0, &(0x7f0000000180)}, 0x20) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f000001f580), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000004c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r1, @ANYBLOB="010025bd7000fcdbdf253f00000008000300", @ANYRES32=r2, @ANYBLOB="04005e801c005e8008000700c5f133694bbd07cb55000000080003006e8f000030005e800800020003000000080002491acf00000c0001"], 0x8c}, 0x1, 0x0, 0x0, 0x4080}, 0x4004000) 1.475168653s ago: executing program 4 (id=20598): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000001880)=@req3={0x5b000000, 0x7, 0x0, 0x8, 0x8, 0x5e7, 0x9}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001480)=ANY=[@ANYRES16=0x0, @ANYBLOB="02002abd7000fddbdf2513000000100007800c000400ff01007e83031f59cac09c6f910000000000440003800800030022000000080003000001000008000300517fff040000000000"], 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000041) sendmsg$nl_generic(r1, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) recvmmsg(r1, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/189, 0xbd}, {&(0x7f00000003c0)=""/152, 0x98}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3}}], 0x7, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f00000015c0), r1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x2}, 0x6) setsockopt$sock_int(r2, 0x1, 0x25, &(0x7f0000000300)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x28, 0x2, 0x7, 0x201, 0x0, 0x0, {0xd, 0x0, 0x9}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x57a}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x6}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x800) sendmsg$TEAM_CMD_PORT_LIST_GET(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)={0x20, r5, 0x211, 0x70bd25, 0x25dfdbfb, {}, [{{0x8}, {0x4}}]}, 0x20}}, 0x20044010) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$tipc(&(0x7f0000001700), r1) sendmsg$TIPC_CMD_SET_LINK_TOL(r1, 0x0, 0x4001) sendmsg$IPSET_CMD_LIST(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000000706010300000068416a8fb4e89743090500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x44000}, 0x8000) close(r7) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000004788031c09103b28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@ipv6_newrule={0x44, 0x1a, 0x1, 0x0, 0x0, {0x81, 0x80, 0x80}, [@FRA_SRC={0x14, 0x2, @private1}, @FRA_DST={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x44}}, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000240)) 1.426929666s ago: executing program 0 (id=20599): socket$tipc(0x1e, 0x5, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)={0x18, r1, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4008000}, 0x4) 1.363845784s ago: executing program 3 (id=20600): r0 = socket(0x2b, 0x80801, 0x1) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x5, @empty, 0xfffffffe}, 0x1c) read(r0, &(0x7f0000000200)=""/119, 0x77) 1.328988416s ago: executing program 4 (id=20601): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f00000000c0)="91b8a91fd3108691bbc4173c3d6f357d027273117b3d0f171ba4ac4703cad036e68907e50e9997cd9c", 0x29}, {&(0x7f0000001c00)="4490137c227c56ee66c372f3105eb186dd8062fad2d5b5bfb0ba068e74a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9afda48e71255a747b6d03097385fb05cf8db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61210c410d799168ffc4b64677af924affd442035db81e18c2d2462d0bb25fff9d3b1ce903597992b2a4d541611ce77f58dce7c9500118229e7cdf4ca7f6adca92c73d97ce54164c1942b25686866f6b53fe7e75cf6854284d501f8535bec8e020b41fb2f8", 0xea}, {&(0x7f00000003c0)="641a6a2b863c0dd898013a3f97a834ebb75a925ab48c844221841a232932fc2e37e327de21450df098c113e179a0d340", 0x30}, {&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c42200fd9232f5aa6a361816bf21afb8473a064f1988536d4b5888807b3aaafaf59f53121782a0a9370dc0feae13c8c2a1dcc8a3122aaa3dcd5b9247a915378e6492e5b94073dcdc87e7c794fb262a7e9ee0b9432f74331c6e9412", 0xcc}], 0x4}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000140)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001d7545517fd18b5d29978f32a5b5c81755cb89cc0490958", 0x75}, {&(0x7f0000000740)="31cef842d9c50636f60fc0cfdac56c75f1687f0c56287423f5eed69f117e766bdbad0c2171ad6227e1173ab6efa2fcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490fbe385ea382294882839a22674037b8910bd8a1420e33eb1be6f10cfb24eb7cccdf1528ef33b34ab07cdb0909a9ba9547e1e343b451d9025c4e153612d4674b9411fb4de295599abbcb388d291aa839ab0954e6a8d", 0x9d}, {&(0x7f0000000840)="8d684aa45f4b69499d707f3c8d114132fee1eafdcbbc5a16cb7b2841192b5779f99579e5c788b15b023df831028b9e6b5e9edd619e22626535212de5a998c5b793abdd7336cd8eb19e2fbd9a6ac2ca9c0f138ee10572672999ca4f51c09f9810459bad7e7bc28fc8890224dc01efcc276e62afe52450049cb6a165ce771a64b46f9b283ba8083e05c82291ed3bf4408b57142db3ae3da83206613704b856045dabb7e6e1ccf2a22b6d59b635ba3bc1f37bb759ce245877eba8aa82c0465c8d1bf7057ed0fcbdf5cf8d06bab48b66bcac445bc7e7", 0xd4}, {&(0x7f0000000a00)="a7c652df859ed2764e960e7f50a64153fba30cbb8e57f06f55dc0ae10dc21fcd48944b17170f070271208ec6eed721805abd1d46290d3fa170a218b0348a277697884eeb0682edd2e557fab3ea869c1920c576a12a3e669d3688abb7db23544f78bd0580b8545dde37241ced32a9e92a4295af773a12336be811402a6731", 0x7e}, {&(0x7f00000021c0)="d317b0ddf805c029d66c50f61f6e1b90bd02c1c2e324ab02219e3cef175c99254ff1c10c27155c41bd5cee7a3663ed4a127c6c18ebb7a51008a0053ac96edeb5843d7b59b6c02532b26ca1c490d9b8113cbdbe99a123e3d5335c531c1c50b15be67220f38338a1e7c494acc2da3b410cf4cf7129cbb5faa24dd84e800249b234bdb2e91f3af98057ad0674eff7875169861ce6274b379522d411d3766aa7de767671efa60a1fb949feae7ec37efdfbcf1afd4d5cf86a0f9ae55644480d6a5e735b84303583d6c2534badb3981b5448037697faa59cc666dd9ac5c7d019b47f102d78fcc0f1b609fdc51fd8d0ff81d918cbd51e9215d34ed61bd9b1bdc7afd86dc924080a278f4a7c1031bd8c64d14781e109678224f0af3631ca72a0f9c1da8d03e2f9fda9368b50f087578e25371749e0ba68e30e020b44de5ce89e0ee0bc6f843647bed3295d40858bc264defce7e12a15aea29c34861634a2c6768676349fdb9496607461a6d87cf9ae33a1bb2227a97c80a0442a79f5e268a06751322cb161d0d952368dd4c7eae22466981250b4a6de41b00e121a01b26b23bb1804c7f2d92834965cd55f0cb95d60be7dec94b05ccd6ca29191bbd26ac4241fedbd649806a3a904381bbf5e13a25cc40161c73daa80a01d682cc0ed95e15d2ad32d87b4eb88d8240dcd2e6e935d35f7229b3fa299c036276924cf034f4187516b4246a6591ff2f9a32a7ea652741703b3a4aa4de4977d61078ea09962ce6435b65ff94de3eb1248c8e80b9d146e6c09e5d1e639285b9b162c6cf08ec8e86cd865522f5af1a76b8a1cd8672d5367c90310016f806b42512891c2c11110b44abf6dba45bbf8daf3a6a85c5d5d838499e5e5a207f2a29d577a841f64", 0x277}], 0x5}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000bc0)="fec6c7785009f0b017e1ecf8ecf2d228ebc66170c6749d48f61455f18c6fb718f18c461bd01601f8251d1568e2cf69ba9ed31b6a98e262eb81dbf29ba3b66fd8f804281145fc639270bd91c33f04b08225", 0x51}], 0x1}}], 0x3, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 1.262849979s ago: executing program 0 (id=20602): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@loopback, 0x0, 0x8, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x2, 0x4, 0x3}]}]}, 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x0) 1.258415662s ago: executing program 1 (id=20603): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f00000000c0)="91b8a91fd3108691bbc4173c3d6f357d027273117b3d0f171ba4ac4703cad036e68907e50e9997cd9c", 0x29}, {&(0x7f0000001c00)="4490137c227c56ee66c372f3105eb186dd8062fad2d5b5bfb0ba068e74a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9afda48e71255a747b6d03097385fb05cf8db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61210c410d799168ffc4b64677af924affd442035db81e18c2d2462d0bb25fff9d3b1ce903597992b2a4d541611ce77f58dce7c9500118229e7cdf4ca7f6adca92c73d97ce54164c1942b25686866f6b53fe7e75cf6854284d501f8535bec8e020b41fb2f8", 0xea}, {&(0x7f00000003c0)="641a6a2b863c0dd898013a3f97a834ebb75a925ab48c844221841a232932fc2e37e327de21450df098c113e179a0d340", 0x30}, {&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c42200fd9232f5aa6a361816bf21afb8473a064f1988536d4b5888807b3aaafaf59f53121782a0a9370dc0feae13c8c2a1dcc8a3122aaa3dcd5b9247a915378e6492e5b94073dcdc87e7c794fb262a7e9ee0b9432f74331c6e9412", 0xcc}], 0x4}}, {{0x0, 0x0, &(0x7f0000000340)}}], 0x2, 0x2090) 1.241504309s ago: executing program 2 (id=20604): unshare(0x22020600) r0 = socket(0x23, 0x80805, 0x0) bind$x25(r0, 0x0, 0x0) 1.190877414s ago: executing program 0 (id=20605): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, 0x0, 0x10) sendmmsg(r2, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000000140)="e7", 0x1}], 0x1}}], 0x1, 0x811) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r3) 1.190571841s ago: executing program 3 (id=20606): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f00000000c0)="91b8a91fd3108691bbc4173c3d6f357d027273117b3d0f171ba4ac4703cad036e68907e50e9997cd9c", 0x29}, {&(0x7f0000001c00)="4490137c227c56ee66c372f3105eb186dd8062fad2d5b5bfb0ba068e74a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9afda48e71255a747b6d03097385fb05cf8db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61210c410d799168ffc4b64677af924affd442035db81e18c2d2462d0bb25fff9d3b1ce903597992b2a4d541611ce77f58dce7c9500118229e7cdf4ca7f6adca92c73d97ce54164c1942b25686866f6b53fe7e75cf6854284d501f8535bec8e020b41fb2f8", 0xea}, {&(0x7f00000003c0)="641a6a2b863c0dd898013a3f97a834ebb75a925ab48c844221841a232932fc2e37e327de21450df098c113e179a0d340", 0x30}, {&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c42200fd9232f5aa6a361816bf21afb8473a064f1988536d4b5888807b3aaafaf59f53121782a0a9370dc0feae13c8c2a1dcc8a3122aaa3dcd5b9247a915378e6492e5b94073dcdc87e7c794fb262a7e9ee0b9432f", 0xc6}], 0x4}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000140)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001d7545517fd18b5d29978f32a5b5c81755cb89cc0490958", 0x75}, {&(0x7f0000000740)="31cef842d9c50636f60fc0cfdac56c75f1687f0c56287423f5eed69f117e766bdbad0c2171ad6227e1173ab6efa2fcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490fbe385ea382294882839a22674037b8910bd8a1420e33eb1be6f10cfb24eb7cccdf1528ef33b34ab07cdb0909a9ba9547e1e343b451d9025c4e153612d4674b9411fb4de295599abbcb388d291aa839ab0954e6a", 0x9c}, {&(0x7f0000000840)="8d684aa45f4b69499d707f3c8d114132fee1eafdcbbc5a16cb7b2841192b5779f99579e5c788b15b023df831028b9e6b5e9edd619e22626535212de5a998c5b793abdd7336cd8eb19e2fbd9a6ac2ca9c0f138ee10572672999ca4f51c09f9810459bad7e7bc28fc8890224dc01efcc276e62afe52450049cb6a165ce771a64b46f9b283ba8083e05c82291", 0x8b}, {&(0x7f0000000a00)="a7c652df859ed2764e960e7f50a64153fba30cbb8e57f06f55dc0ae10dc21fcd48944b17170f070271208ec6eed721805abd1d46290d3fa170a218b0348a277697884eeb0682edd2e557fab3ea869c1920c576a12a3e669d3688abb7db23544f78bd0580b8545dde37241ced32a9e92a4295af773a12336be811402a6731", 0x7e}, {&(0x7f00000021c0)="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", 0x361}], 0x5}}], 0x2, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 1.091185388s ago: executing program 2 (id=20607): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty, 0x4000006}, 0x1c) listen(r1, 0x6) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) accept(r0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[], 0x84}}, 0x0) 1.090692028s ago: executing program 3 (id=20608): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000010029bd7000ffdbdf2500000000", @ANYRES32=r2, @ANYBLOB="100804002010000024001280110001006272696467655f736c618c65000000000c000580050019"], 0x44}, 0x1, 0x0, 0x0, 0x404c1}, 0x40040d4) 1.023349519s ago: executing program 3 (id=20609): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='cdg', 0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 375.583411ms ago: executing program 4 (id=20610): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x20008000) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r3, r2, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000280)=""/146, 0x92}], 0x1}, 0x0) 300.38835ms ago: executing program 0 (id=20611): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000001880)=@req3={0x5b000000, 0x7, 0x0, 0x8, 0x8, 0x5e7, 0x9}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001480)=ANY=[@ANYRES16=0x0, @ANYBLOB="02002abd7000fddbdf2513000000100007800c000400ff01007e83031f59cac09c6f910000000000440003800800030022000000080003000001000008000300517fff040000000000"], 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000041) sendmsg$nl_generic(r1, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) recvmmsg(r1, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/189, 0xbd}, {&(0x7f00000003c0)=""/152, 0x98}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3}}], 0x7, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f00000015c0), r1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x2}, 0x6) setsockopt$sock_int(r2, 0x1, 0x25, &(0x7f0000000300)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x28, 0x2, 0x7, 0x201, 0x0, 0x0, {0xd, 0x0, 0x9}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x57a}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x6}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x800) sendmsg$TEAM_CMD_PORT_LIST_GET(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)={0x20, r5, 0x211, 0x70bd25, 0x25dfdbfb, {}, [{{0x8}, {0x4}}]}, 0x20}}, 0x20044010) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$tipc(&(0x7f0000001700), r1) sendmsg$TIPC_CMD_SET_LINK_TOL(r1, 0x0, 0x4001) sendmsg$IPSET_CMD_LIST(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000000706010300000068416a8fb4e89743090500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x44000}, 0x8000) close(r7) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000004788031c09103b28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@ipv6_newrule={0x44, 0x1a, 0x1, 0x0, 0x0, {0x81, 0x80, 0x80}, [@FRA_SRC={0x14, 0x2, @private1}, @FRA_DST={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x44}}, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000240)) 299.876964ms ago: executing program 1 (id=20612): socket$kcm(0x2, 0xa, 0x2) socket$packet(0x11, 0x3, 0x300) socket$kcm(0x2, 0xa, 0x73) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 245.392145ms ago: executing program 2 (id=20613): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x101a00, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xd}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x5}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x40004) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0x5, 0xb}, {0xfff3, 0xfffe}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x240040e0}, 0x40000) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, 0x0, 0x0, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @multicast}, 0x14) 239.775878ms ago: executing program 0 (id=20614): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x1, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0xfffffffffffffdbc, 0x2, {{0x1, 0xd, 0x0, 0x9, 0x8}, 0x6, 0x1, 0x1, 0x4, 0x8, 0xe, 0x7, 0x1d, 0x3, 0x9, {0xa2d6, 0x200, 0xb, 0x40, 0x2, 0x1ff}}}}]}, 0x78}}, 0x0) close(0xffffffffffffffff) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfa, {0x0, 0x0, 0x0, r6, {0x0, 0x2}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_CT_LABELS={0x14, 0x61, "c92ad6ab8055fe39a5a9615d5ba410de"}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x24000810}, 0x20084084) 127.912517ms ago: executing program 3 (id=20615): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@loopback, 0x0, 0x8, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x2, 0x4, 0x3}]}]}, 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x0) 18.78783ms ago: executing program 3 (id=20616): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r3, r2, 0x7}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r3, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r1}, 0x20) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[], 0x14}}, 0x0) sendto$inet6(r1, &(0x7f0000000040)="0b11", 0x2, 0x0, 0x0, 0x0) 0s ago: executing program 1 (id=20617): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)="19f86c0897f1163a", 0x8}, 0x1, 0x0, 0x0, 0x4004000}, 0x8000) kernel console output (not intermixed with test programs): 28.600275][ T4452] syz2: Port: 1 Link ACTIVE [ 1228.664097][T21173] FAULT_INJECTION: forcing a failure. [ 1228.664097][T21173] name failslab, interval 1, probability 0, space 0, times 0 [ 1228.684435][T21176] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1228.701736][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1228.710352][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1228.713422][T21173] CPU: 1 UID: 0 PID: 21173 Comm: syz.3.17933 Not tainted syzkaller #0 PREEMPT(full) [ 1228.713447][T21173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1228.713459][T21173] Call Trace: [ 1228.713467][T21173] [ 1228.713474][T21173] dump_stack_lvl+0xe8/0x150 [ 1228.713504][T21173] should_fail_ex+0x412/0x560 [ 1228.713531][T21173] should_failslab+0xa8/0x100 [ 1228.713553][T21173] __kvmalloc_node_noprof+0x166/0x8d0 [ 1228.713575][T21173] ? nf_tables_newchain+0x1c7a/0x2890 [ 1228.713604][T21173] nf_tables_newchain+0x1c7a/0x2890 [ 1228.713650][T21173] ? __pfx_nf_tables_newchain+0x10/0x10 [ 1228.713702][T21173] ? nfnl_pernet+0x23/0x240 [ 1228.713726][T21173] ? nfnl_pernet+0x23/0x240 [ 1228.713760][T21173] ? __nla_parse+0x40/0x60 [ 1228.713787][T21173] nfnetlink_rcv+0x1240/0x27b0 [ 1228.713848][T21173] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1228.713890][T21173] ? ref_tracker_free+0x693/0x840 [ 1228.713941][T21173] ? __netlink_deliver_tap+0x807/0x850 [ 1228.713960][T21173] ? netlink_deliver_tap+0x2e/0x1b0 [ 1228.713996][T21173] netlink_unicast+0x80f/0x9b0 [ 1228.714030][T21173] ? __pfx_netlink_unicast+0x10/0x10 [ 1228.714054][T21173] ? __alloc_skb+0x193/0x390 [ 1228.714075][T21173] ? netlink_sendmsg+0x650/0xb40 [ 1228.714091][T21173] ? skb_put+0x11b/0x210 [ 1228.714116][T21173] netlink_sendmsg+0x813/0xb40 [ 1228.714144][T21173] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1228.714166][T21173] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1228.714189][T21173] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1228.714210][T21173] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1228.714228][T21173] ____sys_sendmsg+0xa68/0xad0 [ 1228.714250][T21173] ? __might_fault+0xaf/0x130 [ 1228.714281][T21173] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1228.714313][T21173] ? import_iovec+0x73/0xa0 [ 1228.714342][T21173] ___sys_sendmsg+0x2a5/0x360 [ 1228.714363][T21173] ? __lock_acquire+0x6b5/0x2cf0 [ 1228.714390][T21173] ? __pfx____sys_sendmsg+0x10/0x10 [ 1228.714451][T21173] ? __fget_files+0x2a/0x420 [ 1228.714469][T21173] ? __fget_files+0x3a0/0x420 [ 1228.714499][T21173] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1228.714525][T21173] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1228.714558][T21173] ? __pfx_ksys_write+0x10/0x10 [ 1228.714596][T21173] do_syscall_64+0xe2/0xf80 [ 1228.714615][T21173] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1228.714638][T21173] ? trace_irq_disable+0x37/0x100 [ 1228.714654][T21173] ? clear_bhb_loop+0x60/0xb0 [ 1228.714676][T21173] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1228.714692][T21173] RIP: 0033:0x7fccdc79aeb9 [ 1228.714710][T21173] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1228.714725][T21173] RSP: 002b:00007fccda9f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1228.714745][T21173] RAX: ffffffffffffffda RBX: 00007fccdca15fa0 RCX: 00007fccdc79aeb9 [ 1228.714758][T21173] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 1228.714770][T21173] RBP: 00007fccda9f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1228.714781][T21173] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1228.714791][T21173] R13: 00007fccdca16038 R14: 00007fccdca15fa0 R15: 00007fff599e1878 [ 1228.714822][T21173] [ 1229.032887][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1229.103468][T21180] netlink: 64 bytes leftover after parsing attributes in process `syz.4.17936'. [ 1229.278197][T26829] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1229.342628][ T25] block nbd0: Possible stuck request ffff888045b20000: control (read@0,4096B). Runtime 150 seconds [ 1229.399812][T26829] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1229.449542][T26829] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1229.510710][T26829] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1229.533208][T21165] chnl_net:caif_netlink_parms(): no params data found [ 1229.644147][T21165] bridge0: port 1(bridge_slave_0) entered blocking state [ 1229.651987][T21165] bridge0: port 1(bridge_slave_0) entered disabled state [ 1229.659426][T21165] bridge_slave_0: entered allmulticast mode [ 1229.673173][T21165] bridge_slave_0: entered promiscuous mode [ 1229.680377][T16293] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1229.724319][T21165] bridge0: port 2(bridge_slave_1) entered blocking state [ 1229.732364][T21165] bridge0: port 2(bridge_slave_1) entered disabled state [ 1229.740658][T21165] bridge_slave_1: entered allmulticast mode [ 1229.748756][T21165] bridge_slave_1: entered promiscuous mode [ 1229.756112][T16293] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1229.765021][T16293] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1229.803564][T16293] netdevsim netdevsim0 eth4: set [0, 0] type 1 family 0 port 8472 - 0 [ 1229.836474][T21165] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1229.869772][T26829] veth5: left allmulticast mode [ 1229.876126][T26829] veth5: left promiscuous mode [ 1229.884302][T26829] bridge7: port 1(veth5) entered disabled state [ 1230.223810][T21212] netlink: 'syz.4.17940': attribute type 1 has an invalid length. [ 1230.542354][ T9652] Bluetooth: hci5: command tx timeout [ 1230.827021][T26829] tipc: Disabling bearer [ 1231.544442][T26829] bond23 (unregistering): (slave bridge0): Releasing backup interface [ 1231.553512][T26829] bridge0 (unregistering): left allmulticast mode [ 1231.777736][T26829] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 1231.786984][T26829] mac80211_hwsim hwsim6 wlan1: left promiscuous mode [ 1231.795105][T26829] bond0 (unregistering): Released all slaves [ 1231.901854][ T65] net_ratelimit: 3 callbacks suppressed [ 1231.901870][ T65] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1231.916557][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1231.973876][T26829] bond1 (unregistering): Released all slaves [ 1231.987846][T26829] bond2 (unregistering): Released all slaves [ 1232.000700][T26829] bond3 (unregistering): Released all slaves [ 1232.077949][ T65] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1232.174053][T26829] bond4 (unregistering): Released all slaves [ 1232.327243][T26829] bond5 (unregistering): Released all slaves [ 1232.487511][T26829] bond6 (unregistering): Released all slaves [ 1232.504367][T26829] bond7 (unregistering): (slave bond8): Releasing backup interface [ 1232.513490][T26829] bond7 (unregistering): Released all slaves [ 1232.631197][ T9652] Bluetooth: hci5: command tx timeout [ 1232.673202][T26829] bond8 (unregistering): Released all slaves [ 1232.686458][T26829] bond9 (unregistering): Released all slaves [ 1232.699079][T26829] bond10 (unregistering): Released all slaves [ 1232.713854][T26829] bond11 (unregistering): Released all slaves [ 1232.729902][T26829] bond12 (unregistering): Released all slaves [ 1232.751128][T26829] bond13 (unregistering): Released all slaves [ 1232.765294][T26829] bond14 (unregistering): Released all slaves [ 1232.782515][T26829] bond15 (unregistering): Released all slaves [ 1232.803707][T26829] bond16 (unregistering): Released all slaves [ 1232.820420][T26829] bond17 (unregistering): Released all slaves [ 1232.837269][T26829] bond18 (unregistering): Released all slaves [ 1232.852267][T26829] bond19 (unregistering): Released all slaves [ 1232.873475][T26829] bond20 (unregistering): Released all slaves [ 1233.030054][T26829] bond21 (unregistering): Released all slaves [ 1233.201938][ T65] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1233.212457][T26829] bond22 (unregistering): Released all slaves [ 1233.226702][T26829] bond23 (unregistering): Released all slaves [ 1233.240127][T26829] bond24 (unregistering): Released all slaves [ 1233.391427][T26829] bond25 (unregistering): (slave veth11): Releasing active interface [ 1233.402032][T26829] bond25 (unregistering): Released all slaves [ 1233.547951][T26829] bond26 (unregistering): (slave veth13): Releasing active interface [ 1233.558007][T26829] bond26 (unregistering): Released all slaves [ 1233.702781][T26829] bond27 (unregistering): (slave veth15): Releasing active interface [ 1233.713301][T26829] bond27 (unregistering): Released all slaves [ 1233.881441][T26829] bond28 (unregistering): Released all slaves [ 1233.897174][T21165] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1233.973039][ T1864] lec:lec_start_xmit: lec0:No lecd attached [ 1234.070507][T21244] FAULT_INJECTION: forcing a failure. [ 1234.070507][T21244] name failslab, interval 1, probability 0, space 0, times 0 [ 1234.103577][T21244] CPU: 0 UID: 0 PID: 21244 Comm: syz.4.17947 Not tainted syzkaller #0 PREEMPT(full) [ 1234.103609][T21244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1234.103622][T21244] Call Trace: [ 1234.103631][T21244] [ 1234.103640][T21244] dump_stack_lvl+0xe8/0x150 [ 1234.103671][T21244] should_fail_ex+0x412/0x560 [ 1234.103700][T21244] should_failslab+0xa8/0x100 [ 1234.103725][T21244] kmem_cache_alloc_node_noprof+0x8b/0x6f0 [ 1234.103755][T21244] ? __alloc_skb+0x1d7/0x390 [ 1234.103776][T21244] ? __local_bh_enable_ip+0xd0/0x130 [ 1234.103796][T21244] ? __alloc_skb+0x193/0x390 [ 1234.103820][T21244] __alloc_skb+0x1d7/0x390 [ 1234.103844][T21244] xfrm_send_state_notify+0x884/0x18d0 [ 1234.103870][T21244] ? km_state_notify+0x25/0x1f0 [ 1234.103893][T21244] ? __pfx_xfrm_send_state_notify+0x10/0x10 [ 1234.103912][T21244] ? km_state_notify+0x25/0x1f0 [ 1234.103934][T21244] ? xfrm_state_add+0x56e/0xc40 [ 1234.103953][T21244] ? __local_bh_enable_ip+0xd0/0x130 [ 1234.103969][T21244] ? km_state_notify+0x25/0x1f0 [ 1234.103989][T21244] ? km_state_notify+0x25/0x1f0 [ 1234.104010][T21244] ? __pfx_xfrm_send_state_notify+0x10/0x10 [ 1234.104031][T21244] km_state_notify+0x110/0x1f0 [ 1234.104055][T21244] pfkey_add+0x2008/0x2df0 [ 1234.104089][T21244] ? __pfx_pfkey_add+0x10/0x10 [ 1234.104103][T21244] ? pfkey_broadcast+0x3c2/0x3e0 [ 1234.104142][T21244] pfkey_sendmsg+0xc56/0x1120 [ 1234.104159][T21244] ? unwind_next_frame+0xa5/0x23c0 [ 1234.104196][T21244] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 1234.104245][T21244] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1234.104271][T21244] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1234.104294][T21244] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 1234.104322][T21244] ____sys_sendmsg+0xa68/0xad0 [ 1234.104348][T21244] ? __might_fault+0xaf/0x130 [ 1234.104384][T21244] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1234.104420][T21244] ? import_iovec+0x73/0xa0 [ 1234.104453][T21244] ___sys_sendmsg+0x2a5/0x360 [ 1234.104477][T21244] ? __lock_acquire+0x6b5/0x2cf0 [ 1234.104509][T21244] ? __pfx____sys_sendmsg+0x10/0x10 [ 1234.104577][T21244] ? __fget_files+0x2a/0x420 [ 1234.104599][T21244] ? __fget_files+0x3a0/0x420 [ 1234.104634][T21244] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1234.104664][T21244] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1234.104702][T21244] ? __pfx_ksys_write+0x10/0x10 [ 1234.104746][T21244] do_syscall_64+0xe2/0xf80 [ 1234.104768][T21244] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1234.104787][T21244] ? trace_irq_disable+0x37/0x100 [ 1234.104807][T21244] ? clear_bhb_loop+0x60/0xb0 [ 1234.104831][T21244] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1234.104851][T21244] RIP: 0033:0x7f67e939aeb9 [ 1234.104872][T21244] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1234.104889][T21244] RSP: 002b:00007f67ea1dd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1234.104911][T21244] RAX: ffffffffffffffda RBX: 00007f67e9615fa0 RCX: 00007f67e939aeb9 [ 1234.104926][T21244] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 1234.104939][T21244] RBP: 00007f67ea1dd090 R08: 0000000000000000 R09: 0000000000000000 [ 1234.104952][T21244] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1234.104964][T21244] R13: 00007f67e9616038 R14: 00007f67e9615fa0 R15: 00007fff93fd3158 [ 1234.105000][T21244] [ 1234.465942][ T3120] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1234.475081][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1234.507692][T21165] team0: Port device team_slave_0 added [ 1234.542075][T21165] team0: Port device team_slave_1 added [ 1234.555897][ T3120] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1234.642866][T21257] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17951'. [ 1234.701032][ T9652] Bluetooth: hci5: command tx timeout [ 1234.734071][T26829] tipc: Disabling bearer [ 1234.755033][T26829] tipc: Disabling bearer [ 1234.780278][T26829] tipc: Left network mode [ 1234.791873][T21165] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1234.798967][T21165] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1234.940941][T21165] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1235.109612][T21165] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1235.123305][T21165] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1235.180969][T21165] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1235.638592][T21290] netlink: 12 bytes leftover after parsing attributes in process `syz.2.17956'. [ 1235.737944][ T65] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1235.821999][T21297] netlink: 36 bytes leftover after parsing attributes in process `syz.3.17959'. [ 1235.855188][T21297] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1235.889165][T21165] hsr_slave_0: entered promiscuous mode [ 1235.896884][T21165] hsr_slave_1: entered promiscuous mode [ 1235.915711][T21165] debugfs: 'hsr0' already exists in 'hsr' [ 1235.921800][T21165] Cannot create hsr debugfs directory [ 1236.227087][T21319] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17963'. [ 1236.713219][T21338] netlink: zone id is out of range [ 1236.718758][T21338] netlink: zone id is out of range [ 1236.780949][ T9652] Bluetooth: hci5: command tx timeout [ 1236.876976][T21165] netdevsim netdevsim0 eth4 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1236.988709][T21165] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1237.030312][T16293] net_ratelimit: 4 callbacks suppressed [ 1237.030334][T16293] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1237.045988][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1237.140030][T21165] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1237.235534][T21165] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1237.769117][T26829] hsr_slave_1: left promiscuous mode [ 1238.011207][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1238.680590][T26829] smc: removing net device caif0 with user defined pnetid SYZ2 [ 1238.736305][T21299] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1238.747007][T26829] smc: removing net device team0 with user defined pnetid SYZ2 [ 1238.893827][T21165] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1238.987134][T21165] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1239.006708][T21383] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1239.020807][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5050 ms [ 1239.037775][ C1] lec:lec_tx_timeout: lec0 [ 1239.047211][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1239.067580][T21377] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1239.131307][ T3120] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1239.141054][T21165] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1239.170581][T21377] rdma_rxe: rxe_newlink: failed to add bond0 [ 1239.178189][T21165] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1239.396551][T21401] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1239.751323][T21165] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1239.839763][T21165] 8021q: adding VLAN 0 to HW filter on device team0 [ 1239.855611][ T3122] bridge0: port 1(bridge_slave_0) entered blocking state [ 1239.863232][ T3122] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1239.867910][T21426] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1239.907437][T21428] netlink: 4 bytes leftover after parsing attributes in process `syz.4.17986'. [ 1239.951452][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 1239.953269][T26829] IPVS: stop unused estimator thread 0... [ 1239.959067][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1239.986279][T21431] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1240.225160][T26829] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1240.235277][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1240.252029][T16293] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1240.401170][T21444] netlink: 12 bytes leftover after parsing attributes in process `syz.3.17990'. [ 1240.710197][T21456] bridge16: entered promiscuous mode [ 1240.719932][T21456] bridge16: entered allmulticast mode [ 1240.826022][T21461] syzkaller0: entered promiscuous mode [ 1240.832979][T21461] syzkaller0: entered allmulticast mode [ 1240.948237][T21465] netlink: 12 bytes leftover after parsing attributes in process `syz.1.17996'. [ 1240.982786][T21463] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17997'. [ 1240.989326][T21465] netlink: 'syz.1.17996': attribute type 1 has an invalid length. [ 1241.031752][T21465] netlink: 'syz.1.17996': attribute type 2 has an invalid length. [ 1241.054120][T21165] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1241.353281][T21165] veth0_vlan: entered promiscuous mode [ 1241.390994][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1241.418171][T21165] veth1_vlan: entered promiscuous mode [ 1241.467972][T21491] netlink: 'syz.3.18002': attribute type 24 has an invalid length. [ 1241.584619][T21165] veth0_macvtap: entered promiscuous mode [ 1241.616904][T21165] veth1_macvtap: entered promiscuous mode [ 1241.758746][T21165] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1241.825066][T21165] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1241.846936][T21508] xt_l2tp: v2 sid > 0xffff: 1114112 [ 1241.880482][T21508] xt_l2tp: v2 sid > 0xffff: 1114112 [ 1241.903695][ T65] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1241.935755][ T65] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1241.952331][ T65] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1241.994600][ T65] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1242.020437][T21520] netlink: 76 bytes leftover after parsing attributes in process `syz.2.18007'. [ 1242.054493][T21520] nbd: illegal input index -8454144 [ 1242.067039][T21522] bridge14: the hash_elasticity option has been deprecated and is always 16 [ 1242.224888][T21526] netlink: 'syz.3.18009': attribute type 1 has an invalid length. [ 1242.259054][T21532] netlink: 16 bytes leftover after parsing attributes in process `syz.2.18007'. [ 1242.437276][T21544] netlink: 16 bytes leftover after parsing attributes in process `syz.4.18011'. [ 1242.450585][ T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1242.504310][ T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1242.542459][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1242.631662][ T3122] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1242.650700][ T3122] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1242.783767][ T3122] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1242.793628][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1242.809550][T21553] netlink: 'syz.1.18013': attribute type 21 has an invalid length. [ 1243.241028][T21573] netlink: 16 bytes leftover after parsing attributes in process `syz.0.18017'. [ 1243.309341][T21573] netlink: 64 bytes leftover after parsing attributes in process `syz.0.18017'. [ 1243.459572][ T5830] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1243.487553][ T5830] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1243.513301][ T5830] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1243.545886][ T5830] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1243.557747][T21585] netlink: 36 bytes leftover after parsing attributes in process `syz.0.18020'. [ 1243.568038][ T5830] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1243.657259][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1243.714352][T21580] lo speed is unknown, defaulting to 1000 [ 1243.730360][T21580] wlan0 speed is unknown, defaulting to 1000 [ 1244.062901][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1244.072986][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 1244.081086][ C1] lec:lec_tx_timeout: lec0 [ 1244.125772][T21609] syzkaller0: entered promiscuous mode [ 1244.152721][T21609] syzkaller0: entered allmulticast mode [ 1244.280050][ T5823] syz_tun (unregistering): left allmulticast mode [ 1244.627668][T16293] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1244.657237][T16293] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1244.783130][ T65] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1244.867989][T16293] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1244.892969][T16293] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1245.030584][T16293] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1245.054392][T16293] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1245.146567][T21656] bond0: (slave gre0): The slave device specified does not support setting the MAC address [ 1245.160362][T21661] netlink: 12 bytes leftover after parsing attributes in process `syz.2.18032'. [ 1245.175219][T21656] bond0: (slave gre0): Error -95 calling set_mac_address [ 1245.257084][T16293] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1245.303966][T16293] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1245.616447][T21677] netlink: 'syz.4.18034': attribute type 1 has an invalid length. [ 1245.662276][ T9652] Bluetooth: hci3: command tx timeout [ 1245.675394][T26827] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1245.689760][T21677] netlink: 12 bytes leftover after parsing attributes in process `syz.4.18034'. [ 1245.746319][T21677] netlink: 12 bytes leftover after parsing attributes in process `syz.4.18034'. [ 1245.891984][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1245.913531][T21580] chnl_net:caif_netlink_parms(): no params data found [ 1245.937814][ T50] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1246.073570][ T50] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1246.174383][T21703] netlink: 24 bytes leftover after parsing attributes in process `syz.2.18038'. [ 1246.215020][T26827] netdevsim netdevsim1 eth4: set [0, 0] type 1 family 0 port 8472 - 0 [ 1246.304102][T21707] netlink: 24 bytes leftover after parsing attributes in process `syz.3.18040'. [ 1246.346470][T21707] netlink: 80 bytes leftover after parsing attributes in process `syz.3.18040'. [ 1246.362489][T16293] tipc: Resetting bearer [ 1246.363393][T21707] netlink: 24 bytes leftover after parsing attributes in process `syz.3.18040'. [ 1246.527091][T21717] netlink: 16 bytes leftover after parsing attributes in process `syz.3.18040'. [ 1246.559115][T21717] openvswitch: netlink: Key 32 has unexpected len 0 expected 2 [ 1246.811575][T16293] bond13 (unregistering): (slave ip6gretap1): Releasing backup interface [ 1246.820289][T16293] bond13 (unregistering): (slave ip6gretap1): the permanent HWaddr of slave - 3a:2f:2e:f8:fd:69 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 1246.998129][T16293] tipc: Disabling bearer [ 1247.087663][T16293] bond11 (unregistering): (slave gretap3): Releasing active interface [ 1247.309723][T16293] bond7 (unregistering): (slave geneve2): Releasing active interface [ 1247.741092][ T9652] Bluetooth: hci3: command tx timeout [ 1247.814753][T16293] bond10 (unregistering): (slave bridge11): Releasing backup interface [ 1247.823421][T16293] bridge11 (unregistering): left promiscuous mode [ 1248.043728][T16293] bond12 (unregistering): (slave bridge15): Releasing active interface [ 1248.052233][T16293] bridge15 (unregistering): left promiscuous mode [ 1248.058947][T16293] bridge15 (unregistering): left allmulticast mode [ 1248.124369][T16293] bond18 (unregistering): (slave bridge0): Releasing backup interface [ 1248.132821][T16293] bridge0 (unregistering): left promiscuous mode [ 1248.337742][T16293] bond0 (unregistering): Released all slaves [ 1248.353623][T16293] bond1 (unregistering): Released all slaves [ 1248.537970][T16293] bond2 (unregistering): Released all slaves [ 1248.551801][T16293] bond3 (unregistering): Released all slaves [ 1248.565347][T16293] bond4 (unregistering): Released all slaves [ 1248.578188][T16293] bond5 (unregistering): Released all slaves [ 1248.736666][T16293] bond6 (unregistering): Released all slaves [ 1248.885082][T16293] bond7 (unregistering): Released all slaves [ 1249.043723][T16293] bond8 (unregistering): Released all slaves [ 1249.184831][T16293] bond9 (unregistering): Released all slaves [ 1249.332437][T16293] bond10 (unregistering): Released all slaves [ 1249.347627][T16293] bond11 (unregistering): Released all slaves [ 1249.518992][T16293] bond12 (unregistering): Released all slaves [ 1249.533980][T16293] bond13 (unregistering): (slave veth11): Releasing backup interface [ 1249.543810][T16293] bond13 (unregistering): Released all slaves [ 1249.685551][T16293] bond14 (unregistering): Released all slaves [ 1249.824749][ T9652] Bluetooth: hci3: command tx timeout [ 1249.832813][T16293] bond15 (unregistering): Released all slaves [ 1249.973725][T16293] bond16 (unregistering): left allmulticast mode [ 1249.980267][T16293] bond16 (unregistering): left promiscuous mode [ 1249.999895][T16293] team0: Port device macvlan2 removed [ 1250.010421][T16293] bond16 (unregistering): Released all slaves [ 1250.162494][T16293] bond17 (unregistering): Released all slaves [ 1250.313548][T16293] bond18 (unregistering): Released all slaves [ 1250.450228][T16293] bond19 (unregistering): Released all slaves [ 1250.464297][T16293] bond20 (unregistering): Released all slaves [ 1250.625171][T16293] bond21 (unregistering): Released all slaves [ 1250.775802][T16293] bond22 (unregistering): Released all slaves [ 1250.924382][T16293] bond23 (unregistering): (slave veth1): Releasing active interface [ 1250.935773][T16293] bond23 (unregistering): Released all slaves [ 1251.084491][T16293] bond24 (unregistering): (slave veth15): Releasing active interface [ 1251.094800][T16293] bond24 (unregistering): (slave vlan5): Releasing active interface [ 1251.104761][T16293] bond24 (unregistering): Released all slaves [ 1251.245229][T16293] bond25 (unregistering): Released all slaves [ 1251.395761][T16293] bond26 (unregistering): (slave veth17): Releasing active interface [ 1251.405826][T16293] bond26 (unregistering): Released all slaves [ 1251.583412][T21580] bridge0: port 1(bridge_slave_0) entered blocking state [ 1251.591048][T21580] bridge0: port 1(bridge_slave_0) entered disabled state [ 1251.598873][T21580] bridge_slave_0: entered allmulticast mode [ 1251.632105][T21580] bridge_slave_0: entered promiscuous mode [ 1251.714716][T21580] bridge0: port 2(bridge_slave_1) entered blocking state [ 1251.729358][T21580] bridge0: port 2(bridge_slave_1) entered disabled state [ 1251.753049][T21580] bridge_slave_1: entered allmulticast mode [ 1251.765014][T21580] bridge_slave_1: entered promiscuous mode [ 1251.898813][T16293] tipc: Disabling bearer [ 1251.904793][T16293] tipc: Disabling bearer [ 1251.908679][ T9652] Bluetooth: hci3: command tx timeout [ 1251.942216][T16293] tipc: Left network mode [ 1251.945624][T21580] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1251.960214][T21580] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1252.128040][T21736] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1252.193333][T21580] team0: Port device team_slave_0 added [ 1252.233003][T21580] team0: Port device team_slave_1 added [ 1252.465568][T21580] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1252.483154][T21580] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1252.571042][T21580] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1252.612657][T21756] netlink: 'syz.2.18055': attribute type 6 has an invalid length. [ 1252.675575][T21580] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1252.722384][T21580] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1252.781670][T21580] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1253.160544][T21777] lo speed is unknown, defaulting to 1000 [ 1253.231050][T21580] hsr_slave_0: entered promiscuous mode [ 1253.246912][T21580] hsr_slave_1: entered promiscuous mode [ 1253.262563][T21580] debugfs: 'hsr0' already exists in 'hsr' [ 1253.278942][T21580] Cannot create hsr debugfs directory [ 1253.295903][T21777] wlan0 speed is unknown, defaulting to 1000 [ 1253.355405][T21794] netlink: 56 bytes leftover after parsing attributes in process `syz.0.18068'. [ 1253.416084][T21794] netlink: 92 bytes leftover after parsing attributes in process `syz.0.18068'. [ 1253.458663][T21794] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18068'. [ 1254.096147][T21580] netdevsim netdevsim1 eth4 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1254.236740][T21580] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1254.393938][T21580] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1254.799901][T21580] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1255.416942][T21864] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18095'. [ 1255.621554][T16293] team0: left promiscuous mode [ 1255.719862][T16293] hsr_slave_0: left promiscuous mode [ 1255.719986][T21871] netlink: 'syz.4.18097': attribute type 29 has an invalid length. [ 1255.839616][T16293] veth0_macvtap: left promiscuous mode [ 1255.851052][T16293] veth1_vlan: left promiscuous mode [ 1255.871647][T16293] veth0_vlan: left promiscuous mode [ 1256.067913][T21881] netlink: 260 bytes leftover after parsing attributes in process `syz.4.18101'. [ 1256.443672][T16293] pim6reg527 (unregistering): left allmulticast mode [ 1259.424533][ T25] block nbd0: Possible stuck request ffff888045b20000: control (read@0,4096B). Runtime 180 seconds [ 1260.379459][T21580] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1260.427542][T21948] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18128'. [ 1260.448406][T21580] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1260.491388][T21580] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1260.510088][T16293] IPVS: stop unused estimator thread 0... [ 1260.559330][T21580] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1260.693117][T21972] netlink: 'syz.2.18136': attribute type 3 has an invalid length. [ 1260.985433][T21977] lo speed is unknown, defaulting to 1000 [ 1261.030301][T21580] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1261.062850][T21977] wlan0 speed is unknown, defaulting to 1000 [ 1261.092735][T21580] 8021q: adding VLAN 0 to HW filter on device team0 [ 1261.145663][T21980] lo speed is unknown, defaulting to 1000 [ 1261.205105][ T3122] bridge0: port 1(bridge_slave_0) entered blocking state [ 1261.212444][ T3122] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1261.251914][ T3122] bridge0: port 2(bridge_slave_1) entered blocking state [ 1261.256970][T21997] netlink: 'syz.2.18143': attribute type 1 has an invalid length. [ 1261.259154][ T3122] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1261.281136][T21997] netlink: 'syz.2.18143': attribute type 2 has an invalid length. [ 1261.373299][T21980] wlan0 speed is unknown, defaulting to 1000 [ 1261.383684][T21983] lo speed is unknown, defaulting to 1000 [ 1261.434826][T21995] bridge15: entered promiscuous mode [ 1261.453805][T21989] lo speed is unknown, defaulting to 1000 [ 1261.473525][T22003] netlink: 12 bytes leftover after parsing attributes in process `syz.2.18145'. [ 1261.493623][T21983] wlan0 speed is unknown, defaulting to 1000 [ 1261.610970][T21989] wlan0 speed is unknown, defaulting to 1000 [ 1261.720325][T22011] netlink: 'syz.2.18149': attribute type 8 has an invalid length. [ 1262.919101][T21580] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1263.329108][T21580] veth0_vlan: entered promiscuous mode [ 1263.371394][T21580] veth1_vlan: entered promiscuous mode [ 1263.443356][T21580] veth0_macvtap: entered promiscuous mode [ 1263.457691][T21580] veth1_macvtap: entered promiscuous mode [ 1263.484120][T21580] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1263.528789][T21580] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1263.545520][ T65] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1263.583923][ T65] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1263.633712][ T65] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1263.765135][ T65] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1263.900097][T22104] syzkaller0: left promiscuous mode [ 1263.920212][T22104] syzkaller0: left allmulticast mode [ 1263.963342][T22104] tipc: Enabling of bearer rejected, already enabled [ 1264.298920][T26827] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1264.349420][T26827] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1264.355610][T22122] netlink: 68 bytes leftover after parsing attributes in process `syz.3.18181'. [ 1264.478511][T26827] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1264.514416][T26827] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1264.952845][T22145] netlink: 40 bytes leftover after parsing attributes in process `syz.1.18015'. [ 1265.102903][T22137] syzkaller0: entered promiscuous mode [ 1265.108747][T22137] syzkaller0: entered allmulticast mode [ 1265.426342][T22084] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1265.438365][T22084] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1265.448658][T22084] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1265.469044][T22084] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1265.482083][T22084] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1266.144816][T22154] lo speed is unknown, defaulting to 1000 [ 1266.166249][T22154] wlan0 speed is unknown, defaulting to 1000 [ 1266.361755][T22172] netlink: 'syz.4.18193': attribute type 2 has an invalid length. [ 1266.392762][T22172] netlink: 'syz.4.18193': attribute type 7 has an invalid length. [ 1266.581777][T22181] syzkaller0: entered promiscuous mode [ 1266.587335][T22181] syzkaller0: entered allmulticast mode [ 1266.846775][T22189] syzkaller0: entered promiscuous mode [ 1266.868678][T22189] syzkaller0: entered allmulticast mode [ 1267.197929][T22201] netlink: 209608 bytes leftover after parsing attributes in process `syz.1.18201'. [ 1267.743173][T22084] Bluetooth: hci0: command tx timeout [ 1267.757146][T22154] chnl_net:caif_netlink_parms(): no params data found [ 1268.645876][T22154] bridge0: port 1(bridge_slave_0) entered blocking state [ 1268.681095][T22154] bridge0: port 1(bridge_slave_0) entered disabled state [ 1268.688618][T22154] bridge_slave_0: entered allmulticast mode [ 1268.718904][T22154] bridge_slave_0: entered promiscuous mode [ 1268.746506][T22154] bridge0: port 2(bridge_slave_1) entered blocking state [ 1268.757669][T22154] bridge0: port 2(bridge_slave_1) entered disabled state [ 1268.768226][T22154] bridge_slave_1: entered allmulticast mode [ 1268.783039][T22154] bridge_slave_1: entered promiscuous mode [ 1268.796016][T22276] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18221'. [ 1268.888245][T22268] syzkaller0: entered promiscuous mode [ 1268.894841][T22268] syzkaller0: entered allmulticast mode [ 1268.944708][T22154] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1269.064875][T22154] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1269.300277][T22291] syzkaller0: entered promiscuous mode [ 1269.340248][T22291] syzkaller0: entered allmulticast mode [ 1269.384876][T22154] team0: Port device team_slave_0 added [ 1269.823532][ T9652] Bluetooth: hci0: command tx timeout [ 1271.861505][T22154] team0: Port device team_slave_1 added [ 1271.867407][ T65] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1271.902275][ T9652] Bluetooth: hci0: command tx timeout [ 1272.180248][T22315] veth0: left promiscuous mode [ 1272.190041][T22315] wg1: left promiscuous mode [ 1272.194794][T22315] wg1: left allmulticast mode [ 1272.331423][T22315] macvlan0: left promiscuous mode [ 1272.393591][T22315] macvtap0: left allmulticast mode [ 1272.412023][T22315] geneve0: left allmulticast mode [ 1272.431422][T22315] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 1272.453996][ T5193] udevd[5193]: worker [15483] /devices/virtual/block/nbd0 timeout; kill it [ 1272.466184][ T5193] udevd[5193]: seq 31394 '/devices/virtual/block/nbd0' killed [ 1272.746687][T22315] bond7: left promiscuous mode [ 1272.785634][T22315] vlan3: left allmulticast mode [ 1272.801260][T22315] hsr0: left allmulticast mode [ 1272.806301][T22315] hsr_slave_0: left allmulticast mode [ 1272.821001][T22315] hsr_slave_1: left allmulticast mode [ 1272.848626][T22315] ip6erspan0: left allmulticast mode [ 1272.872580][T22315] bond9: left promiscuous mode [ 1272.877432][T22315] bond9: left allmulticast mode [ 1272.897457][T22315] gretap2: left promiscuous mode [ 1272.918390][T22315] tipc: Resetting bearer [ 1272.928289][T22315] syzkaller0: left promiscuous mode [ 1272.933835][T22315] syzkaller0: left allmulticast mode [ 1273.006438][T22315] bridge4: left promiscuous mode [ 1273.021144][T22315] bridge4: left allmulticast mode [ 1273.049952][T22315] bridge6: left promiscuous mode [ 1273.055435][T22315] bridge6: left allmulticast mode [ 1273.100708][T22315] vxcan0: left allmulticast mode [ 1273.109571][T22315] bond14: left promiscuous mode [ 1273.180714][T22315] bond17: left promiscuous mode [ 1273.187464][T22315] bond17: left allmulticast mode [ 1273.209845][T22315] bond19: left promiscuous mode [ 1273.216211][T22315] bond19: left allmulticast mode [ 1273.264506][T22315] veth19: left promiscuous mode [ 1273.271294][T22315] veth19: left allmulticast mode [ 1273.502486][T22340] bridge0: port 2(bridge_slave_1) entered disabled state [ 1273.510115][T22340] bridge0: port 1(bridge_slave_0) entered disabled state [ 1273.699265][T22340] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1273.715348][T22340] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1273.861641][T22342] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1273.869658][T22342] 8021q: adding VLAN 0 to HW filter on device team0 [ 1273.879932][T22342] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1273.901801][ T65] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1273.911298][ T65] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1273.933778][ T65] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1273.950824][ T65] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1273.978121][T22377] netlink: 132 bytes leftover after parsing attributes in process `syz.1.18244'. [ 1273.989811][T22154] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1273.997674][ T9652] Bluetooth: hci0: command tx timeout [ 1274.003798][T22154] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1274.031726][T22154] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1274.045118][T22154] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1274.052553][T22154] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1274.080686][T22154] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1274.132969][T22369] syzkaller0: entered promiscuous mode [ 1274.138599][T22369] syzkaller0: entered allmulticast mode [ 1274.147445][ T65] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1274.157819][ T65] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1276.834497][ T65] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1276.843850][ T65] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1276.906334][ T65] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1277.027828][T22154] hsr_slave_0: entered promiscuous mode [ 1277.050379][T22154] hsr_slave_1: entered promiscuous mode [ 1277.065718][T22154] debugfs: 'hsr0' already exists in 'hsr' [ 1277.084322][T22154] Cannot create hsr debugfs directory [ 1277.099756][ T65] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1277.124307][ T65] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1277.250042][T22410] netlink: 'syz.0.18259': attribute type 10 has an invalid length. [ 1277.261895][T22410] netlink: 40 bytes leftover after parsing attributes in process `syz.0.18259'. [ 1277.628990][ T50] erspan0 (unregistering): left promiscuous mode [ 1277.680497][ T50] gretap0 (unregistering): left promiscuous mode [ 1277.796109][ T50] bond0 (unregistering): (slave gretap2): Releasing active interface [ 1277.819756][ T50] bond14 (unregistering): (slave gretap3): Releasing active interface [ 1278.664151][ T50] bond10 (unregistering): (slave bridge14): Releasing active interface [ 1278.960266][ T50] bond1 (unregistering): Released all slaves [ 1279.127407][ T50] bond0 (unregistering): Released all slaves [ 1279.142223][ T50] bond2 (unregistering): (slave veth9): Releasing active interface [ 1279.152616][ T50] bond2 (unregistering): (slave veth11): Releasing active interface [ 1279.167591][ T50] bond2 (unregistering): Released all slaves [ 1279.181568][ T50] bond3 (unregistering): Released all slaves [ 1279.327465][ T50] bond4 (unregistering): Released all slaves [ 1279.342164][ T50] bond5 (unregistering): Released all slaves [ 1279.355230][ T50] bond6 (unregistering): Released all slaves [ 1279.497948][ T50] bond7 (unregistering): Released all slaves [ 1279.645598][ T50] bond8 (unregistering): Released all slaves [ 1279.789919][ T50] bond9 (unregistering): Released all slaves [ 1279.803386][ T50] bond10 (unregistering): Released all slaves [ 1279.955611][ T50] bond11 (unregistering): Released all slaves [ 1280.113208][ T50] bond12 (unregistering): (slave veth1): Releasing active interface [ 1280.123133][ T50] bond12 (unregistering): Released all slaves [ 1280.275821][ T50] bond13 (unregistering): (slave veth15): Releasing active interface [ 1280.286233][ T50] bond13 (unregistering): Released all slaves [ 1280.299846][ T50] bond14 (unregistering): Released all slaves [ 1280.447083][ T50] bond15 (unregistering): (slave veth17): Releasing active interface [ 1280.457208][ T50] bond15 (unregistering): Released all slaves [ 1280.471627][ T65] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1280.481812][T22408] netlink: 60 bytes leftover after parsing attributes in process `syz.4.18258'. [ 1280.493099][T22416] bridge0: port 3(syz_tun) entered blocking state [ 1280.499660][T22416] bridge0: port 3(syz_tun) entered disabled state [ 1280.522652][T22416] syz_tun: entered allmulticast mode [ 1280.540309][T22416] syz_tun: entered promiscuous mode [ 1280.561678][T22416] bridge0: port 3(syz_tun) entered blocking state [ 1280.568326][T22416] bridge0: port 3(syz_tun) entered forwarding state [ 1280.611753][T22417] bridge0: entered promiscuous mode [ 1280.715832][ T65] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1280.767909][ T12] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1280.881822][T22436] netlink: 7064 bytes leftover after parsing attributes in process `syz.0.18266'. [ 1280.885041][ T50] : left promiscuous mode [ 1280.917535][T22436] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 1280.948505][T22439] openvswitch: netlink: Key type 195 is out of range max 32 [ 1281.024353][ T12] netdevsim netdevsim3 eth4: set [0, 0] type 1 family 0 port 8472 - 0 [ 1281.079785][T22443] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18268'. [ 1281.152092][T22439] bond1: option lacp_active: invalid value (8) [ 1281.187192][T22439] bond1 (unregistering): Released all slaves [ 1281.304943][T22443] macvtap1: entered promiscuous mode [ 1281.319639][T22443] mac80211_hwsim hwsim39 wlan1: entered promiscuous mode [ 1281.353263][ T50] : left promiscuous mode [ 1281.424854][T22456] netlink: 'syz.4.18270': attribute type 10 has an invalid length. [ 1281.521608][ T50] tipc: Disabling bearer [ 1281.539660][ T50] tipc: Disabling bearer [ 1281.562811][ T50] tipc: Disabling bearer [ 1281.593292][ T50] tipc: Left network mode [ 1281.879111][T22154] netdevsim netdevsim3 eth4 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1281.929947][T22473] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1282.067690][T22475] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1282.196208][T22154] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1282.389906][T22154] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1282.672297][T22154] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1282.701359][T22359] page_pool_release_retry() stalled pool shutdown: id 100, 1 inflight 607 sec [ 1283.109070][T22515] netlink: 48 bytes leftover after parsing attributes in process `syz.2.18286'. [ 1283.713814][T22154] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1283.762469][T22357] wlan0 speed is unknown, defaulting to 1000 [ 1283.762958][T22154] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1283.768708][T22357] syz0: Port: 1 Link DOWN [ 1283.932811][T22154] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1283.994897][T22154] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1284.593210][T22585] netlink: 708 bytes leftover after parsing attributes in process `syz.0.18305'. [ 1284.636622][T22585] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 1284.639172][T22584] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1284.730172][T22154] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1284.789409][T22154] 8021q: adding VLAN 0 to HW filter on device team0 [ 1284.872601][ T65] bridge0: port 1(bridge_slave_0) entered blocking state [ 1284.880002][ T65] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1284.883624][T22593] netlink: 40 bytes leftover after parsing attributes in process `syz.0.18308'. [ 1285.036517][ T50] hsr_slave_0: left promiscuous mode [ 1285.064858][ T50] hsr_slave_1: left promiscuous mode [ 1285.578911][ T50] pim6reg527 (unregistering): left allmulticast mode [ 1285.776218][ T50] pim6reg (unregistering): left allmulticast mode [ 1286.571289][ T50] lo (unregistering): left allmulticast mode [ 1286.591487][T16293] bridge0: port 2(bridge_slave_1) entered blocking state [ 1286.598922][T16293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1287.097295][ T50] IPVS: stop unused estimator thread 0... [ 1287.266557][T22154] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1287.392268][T22154] veth0_vlan: entered promiscuous mode [ 1287.425635][T22154] veth1_vlan: entered promiscuous mode [ 1287.496847][T22154] veth0_macvtap: entered promiscuous mode [ 1287.518000][T22154] veth1_macvtap: entered promiscuous mode [ 1287.573872][T22154] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1287.622968][T22154] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1287.678183][T26829] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1287.700178][T26829] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1287.722850][T26829] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1287.752260][T26829] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1288.121887][T22606] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1288.312207][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1288.321336][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1288.444762][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1288.471600][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1289.146813][T22737] netlink: 4 bytes leftover after parsing attributes in process `syz.4.18340'. [ 1289.245525][T22732] bridge0: port 3(syz_tun) entered disabled state [ 1289.263752][T22084] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1289.275059][T22084] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1289.284852][T22084] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1289.293494][T22084] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1289.308331][T22732] bridge0: left promiscuous mode [ 1289.341475][T22084] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1289.415786][T22737] netlink: 4 bytes leftover after parsing attributes in process `syz.4.18340'. [ 1289.503386][ T25] block nbd0: Possible stuck request ffff888045b20000: control (read@0,4096B). Runtime 210 seconds [ 1289.557323][T22741] lo speed is unknown, defaulting to 1000 [ 1289.595872][T22741] wlan0 speed is unknown, defaulting to 1000 [ 1289.713111][T22359] hid-generic 0005:0006:5508.0001: hidraw0: BLUETOOTH HID vc3.36 Device [syz0] on aa:aa:aa:aa:aa:aa [ 1289.863668][ T862] IPVS: starting estimator thread 0... [ 1289.972159][T22761] IPVS: using max 30 ests per chain, 72000 per kthread [ 1290.351912][T22777] netlink: 'syz.3.18352': attribute type 1 has an invalid length. [ 1290.446527][T22780] lo: entered allmulticast mode [ 1290.486922][T22780] tunl0: entered allmulticast mode [ 1290.534845][T22780] gre0: entered allmulticast mode [ 1290.588918][T22780] gretap0: entered allmulticast mode [ 1290.761392][T22780] erspan0: entered allmulticast mode [ 1290.824457][T22780] ip_vti0: entered allmulticast mode [ 1290.851416][T22780] ip6_vti0: entered allmulticast mode [ 1290.877274][T22780] sit0: entered allmulticast mode [ 1290.907908][T22780] ip6tnl0: entered allmulticast mode [ 1290.967435][T22780] ip6gre0: entered allmulticast mode [ 1291.031697][T22780] syz_tun: entered allmulticast mode [ 1291.095566][T22780] ip6gretap0: entered allmulticast mode [ 1291.131502][T22780] bridge0: port 2(bridge_slave_1) entered disabled state [ 1291.139496][T22780] bridge0: port 1(bridge_slave_0) entered disabled state [ 1291.154480][T22780] bridge0: entered allmulticast mode [ 1291.170081][T22780] vcan0: entered allmulticast mode [ 1291.184809][T22780] bond0: entered allmulticast mode [ 1291.190158][T22780] bond_slave_0: entered allmulticast mode [ 1291.205095][T22780] bond_slave_1: entered allmulticast mode [ 1291.222363][T22780] team0: entered allmulticast mode [ 1291.227664][T22780] team_slave_0: entered allmulticast mode [ 1291.242972][T22780] team_slave_1: entered allmulticast mode [ 1291.263861][T22780] dummy0: entered allmulticast mode [ 1291.279718][T22780] nlmon0: entered allmulticast mode [ 1291.297285][T22780] caif0: entered allmulticast mode [ 1291.303977][T22780] batadv0: entered allmulticast mode [ 1291.315305][T22780] vxcan0: entered allmulticast mode [ 1291.332843][T22780] vxcan1: entered allmulticast mode [ 1291.346808][T22780] veth0: entered allmulticast mode [ 1291.365005][T22780] veth1: entered allmulticast mode [ 1291.422190][T22780] wg0: entered allmulticast mode [ 1291.422454][ T9652] Bluetooth: hci4: command tx timeout [ 1291.441575][T22780] wg1: entered allmulticast mode [ 1291.491206][T22780] wg2: entered allmulticast mode [ 1291.500583][T22780] veth0_to_bridge: entered allmulticast mode [ 1291.525751][T22780] veth1_to_bridge: entered allmulticast mode [ 1291.599571][T22780] veth0_to_bond: entered allmulticast mode [ 1291.647996][T22780] veth1_to_bond: entered allmulticast mode [ 1291.689145][T22780] veth0_to_team: entered allmulticast mode [ 1291.736644][T22780] veth1_to_team: entered allmulticast mode [ 1291.787733][T22780] veth0_to_batadv: entered allmulticast mode [ 1291.812224][T22780] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1291.832229][T22780] batadv_slave_0: entered allmulticast mode [ 1291.854314][T22780] veth1_to_batadv: entered allmulticast mode [ 1291.892014][T22780] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1291.920241][T22780] batadv_slave_1: entered allmulticast mode [ 1291.951766][T22780] xfrm0: entered allmulticast mode [ 1291.964491][T22780] veth0_to_hsr: entered allmulticast mode [ 1291.993252][T22780] hsr_slave_0: entered allmulticast mode [ 1292.018865][T22780] veth1_to_hsr: entered allmulticast mode [ 1292.043758][T22780] hsr_slave_1: entered allmulticast mode [ 1292.068253][T22780] hsr0: entered allmulticast mode [ 1292.092164][T22780] veth1_virt_wifi: entered allmulticast mode [ 1292.117574][T22780] veth0_virt_wifi: entered allmulticast mode [ 1292.132874][T22780] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 1292.144240][T22780] veth1_vlan: entered allmulticast mode [ 1292.157728][T22780] veth0_vlan: entered allmulticast mode [ 1292.198339][T22780] vlan0: entered allmulticast mode [ 1292.215654][T22780] vlan1: entered allmulticast mode [ 1292.228122][T22780] macvlan0: entered allmulticast mode [ 1292.246565][T22780] macvlan1: entered allmulticast mode [ 1292.257678][T22780] ipvlan0: entered allmulticast mode [ 1292.269762][T22780] ipvlan1: entered allmulticast mode [ 1292.276575][T22780] veth1_macvtap: entered allmulticast mode [ 1292.285485][T22780] veth0_macvtap: entered allmulticast mode [ 1292.312234][T22780] macvtap0: entered allmulticast mode [ 1292.328365][T22780] macsec0: entered allmulticast mode [ 1292.359305][T22780] geneve0: entered allmulticast mode [ 1292.371423][T22780] geneve1: entered allmulticast mode [ 1292.392191][T22780] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 1292.411685][T22780] netdevsim netdevsim0 netdevsim1: entered allmulticast mode [ 1292.432028][T22780] netdevsim netdevsim0 netdevsim2: entered allmulticast mode [ 1292.456610][T22780] netdevsim netdevsim0 netdevsim3: entered allmulticast mode [ 1292.472056][T22780] mac80211_hwsim hwsim54 wlan0: entered allmulticast mode [ 1292.479684][T22780] mac80211_hwsim hwsim55 wlan1: entered allmulticast mode [ 1292.488782][T22780] syztnl2: entered allmulticast mode [ 1292.573657][T22812] tipc: Enabling of bearer rejected, failed to enable media [ 1292.625968][ T50] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1292.661530][ T50] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1292.829769][ T50] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1292.859234][ T50] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1293.019661][ T50] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1293.160374][T16293] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1293.264552][T16293] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1293.367372][ T50] netdevsim netdevsim2 eth4: set [0, 0] type 1 family 0 port 8472 - 0 [ 1293.505735][ T9652] Bluetooth: hci4: command tx timeout [ 1294.236820][ T12] bond6 (unregistering): (slave gretap1): Releasing active interface [ 1294.315976][ T12] bond11 (unregistering): (slave gretap2): Releasing active interface [ 1294.686054][ T12] bond10 (unregistering): (slave bridge3): Releasing active interface [ 1294.744772][ T12] tipc: Disabling bearer [ 1295.174921][ T12] ` (unregistering): Released all slaves [ 1295.186388][ T12] bond1 (unregistering): Released all slaves [ 1295.210568][ T12] bond0 (unregistering): Released all slaves [ 1295.380518][ T12] bond2 (unregistering): Released all slaves [ 1295.394397][ T12] bond3 (unregistering): Released all slaves [ 1295.407395][ T12] bond4 (unregistering): Released all slaves [ 1295.421472][ T12] bond5 (unregistering): Released all slaves [ 1295.436204][ T12] bond6 (unregistering): Released all slaves [ 1295.581381][ T9652] Bluetooth: hci4: command tx timeout [ 1295.602993][ T12] bond7 (unregistering): Released all slaves [ 1295.752063][ T12] bond8 (unregistering): (slave veth9): Releasing active interface [ 1295.761182][ T12] bond8 (unregistering): Released all slaves [ 1295.902381][ T12] bond9 (unregistering): Released all slaves [ 1295.915741][ T12] bond10 (unregistering): Released all slaves [ 1295.929223][ T12] bond11 (unregistering): Released all slaves [ 1296.086629][ T12] bond12 (unregistering): (slave veth13): Releasing active interface [ 1296.095694][ T12] bond12 (unregistering): Released all slaves [ 1296.256986][ T12] bond13 (unregistering): Released all slaves [ 1296.421286][ T12] bond14 (unregistering): Released all slaves [ 1296.580217][ T12] bond15 (unregistering): (slave veth15): Releasing active interface [ 1296.590194][ T12] bond15 (unregistering): Released all slaves [ 1296.752072][ T12] bond16 (unregistering): (slave veth17): Releasing active interface [ 1296.761390][ T12] bond16 (unregistering): Released all slaves [ 1296.912811][ T12] bond17 (unregistering): Released all slaves [ 1297.063470][ T12] bond18 (unregistering): Released all slaves [ 1297.224341][ T12] bond19 (unregistering): Released all slaves [ 1297.239650][ T12] bond20 (unregistering): Released all slaves [ 1297.267387][T22879] tipc: Enabling of bearer rejected, failed to enable media [ 1297.581140][ T12] : left promiscuous mode [ 1297.670843][ T9652] Bluetooth: hci4: command tx timeout [ 1297.694409][T22918] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18384'. [ 1297.714251][T22918] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18384'. [ 1297.730666][ T50] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1297.753609][ T50] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1297.784270][T22741] chnl_net:caif_netlink_parms(): no params data found [ 1297.839016][ T12] tipc: Disabling bearer [ 1297.862539][ T12] tipc: Disabling bearer [ 1297.881047][ T12] tipc: Left network mode [ 1297.886268][ T50] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1297.906012][ T50] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1298.168783][T22741] bridge0: port 1(bridge_slave_0) entered blocking state [ 1298.196974][T22741] bridge0: port 1(bridge_slave_0) entered disabled state [ 1298.205249][T22741] bridge_slave_0: entered allmulticast mode [ 1298.225943][T22741] bridge_slave_0: entered promiscuous mode [ 1298.235923][T22741] bridge0: port 2(bridge_slave_1) entered blocking state [ 1298.254178][T22741] bridge0: port 2(bridge_slave_1) entered disabled state [ 1298.272070][T22741] bridge_slave_1: entered allmulticast mode [ 1298.280176][T22741] bridge_slave_1: entered promiscuous mode [ 1298.367813][T22741] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1298.401913][T22741] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1298.452368][ T1864] lec:lec_start_xmit: lec0:No lecd attached [ 1298.494721][T22741] team0: Port device team_slave_0 added [ 1298.515002][T22741] team0: Port device team_slave_1 added [ 1298.585915][T22741] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1298.593106][T22741] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1298.651476][T22741] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1298.673236][T22741] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1298.680371][T22741] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1298.737206][T22741] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1298.988075][T22741] hsr_slave_0: entered promiscuous mode [ 1298.996209][T22741] hsr_slave_1: entered promiscuous mode [ 1299.003040][T22741] debugfs: 'hsr0' already exists in 'hsr' [ 1299.009596][T22741] Cannot create hsr debugfs directory [ 1299.223447][ T12] IPVS: stopping master sync thread 4536 ... [ 1299.749924][T22992] nbd: must specify a device to reconfigure [ 1299.982828][T22992] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1300.047869][T22995] veth0: entered promiscuous mode [ 1300.172821][ T12] mac80211_hwsim hwsim39 wlan1 (unregistering): left promiscuous mode [ 1300.283052][T22989] veth0: left promiscuous mode [ 1300.310108][T22741] netdevsim netdevsim2 eth4 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1300.469203][T22741] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1300.615982][T22741] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1300.749345][T22741] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1300.795862][T23031] : renamed from bond_slave_0 [ 1301.278721][ T12] hsr_slave_0: left promiscuous mode [ 1301.314934][ T12] hsr_slave_1: left promiscuous mode [ 1301.967959][ T12] pimreg (unregistering): left allmulticast mode [ 1302.240073][T16293] smc: removing ib device  [ 1302.886055][T23071] : renamed from bond_slave_0 (while UP) [ 1302.904441][T23080] sch_tbf: burst 7 is lower than device tunl0 mtu (1480) ! [ 1303.236966][T22741] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1303.325089][T22741] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1303.405120][T22741] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1303.511168][T22741] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1304.060825][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5610 ms [ 1304.069022][ C1] lec:lec_tx_timeout: lec0 [ 1304.074159][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1304.150604][T22741] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1304.272033][T22741] 8021q: adding VLAN 0 to HW filter on device team0 [ 1304.334576][ T3120] bridge0: port 1(bridge_slave_0) entered blocking state [ 1304.341998][ T3120] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1304.553848][T26827] bridge0: port 2(bridge_slave_1) entered blocking state [ 1304.561216][T26827] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1305.642548][T22741] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1305.842760][T23185] netlink: 5 bytes leftover after parsing attributes in process `syz.4.18456'. [ 1305.878067][T22741] veth0_vlan: entered promiscuous mode [ 1305.979777][T22741] veth1_vlan: entered promiscuous mode [ 1306.029595][ T12] IPVS: stop unused estimator thread 0... [ 1306.149615][T22741] veth0_macvtap: entered promiscuous mode [ 1306.240682][T22741] veth1_macvtap: entered promiscuous mode [ 1306.318744][T22741] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1306.357525][T22741] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1306.408737][T16293] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1306.435347][T16293] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1306.450624][T16293] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1306.460365][T16293] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1306.692772][ T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1306.712500][ T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1306.733426][T23214] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 1306.881432][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1306.908398][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1307.281394][T23230] netlink: 60 bytes leftover after parsing attributes in process `syz.0.18467'. [ 1307.338268][T23230] netlink: 60 bytes leftover after parsing attributes in process `syz.0.18467'. [ 1307.444449][T23240] netlink: 60 bytes leftover after parsing attributes in process `syz.0.18467'. [ 1307.501804][T23238] netlink: 60 bytes leftover after parsing attributes in process `syz.0.18467'. [ 1307.753826][T22084] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1307.777247][T22084] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1307.791415][T22084] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1307.805830][T22084] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1307.814968][T22084] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1307.947234][T23248] lo speed is unknown, defaulting to 1000 [ 1308.153951][T23256] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input6 [ 1308.229172][T23255] tipc: Started in network mode [ 1308.256006][T23255] tipc: Node identity 9292a184721c, cluster identity 4711 [ 1308.265842][T23255] tipc: Enabled bearer , priority 0 [ 1308.309332][T23255] tipc: Resetting bearer [ 1308.412535][T23254] tipc: Disabling bearer [ 1308.630867][T23279] netlink: 'syz.2.18481': attribute type 29 has an invalid length. [ 1308.680120][T23279] netlink: 'syz.2.18481': attribute type 29 has an invalid length. [ 1308.689743][T23282] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18482'. [ 1308.869578][T23248] chnl_net:caif_netlink_parms(): no params data found [ 1309.080776][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1309.089107][ C1] lec:lec_tx_timeout: lec0 [ 1309.319382][T23248] bridge0: port 1(bridge_slave_0) entered blocking state [ 1309.327271][T23248] bridge0: port 1(bridge_slave_0) entered disabled state [ 1309.335166][T23248] bridge_slave_0: entered allmulticast mode [ 1309.345125][T23248] bridge_slave_0: entered promiscuous mode [ 1309.362432][T23248] bridge0: port 2(bridge_slave_1) entered blocking state [ 1309.386222][T23248] bridge0: port 2(bridge_slave_1) entered disabled state [ 1309.425514][T23248] bridge_slave_1: entered allmulticast mode [ 1309.444424][T23316] netlink: 'syz.2.18491': attribute type 10 has an invalid length. [ 1309.454674][T23248] bridge_slave_1: entered promiscuous mode [ 1309.476884][T23316] team0: Port device dummy0 added [ 1309.610659][T23248] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1309.659413][T23248] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1309.735070][T23331] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18497'. [ 1309.762604][T23329] netlink: 818 bytes leftover after parsing attributes in process `syz.0.18498'. [ 1309.806338][T23331] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18497'. [ 1309.824727][T23248] team0: Port device team_slave_0 added [ 1309.857415][T23248] team0: Port device team_slave_1 added [ 1309.903011][T22084] Bluetooth: hci1: command tx timeout [ 1309.955463][T23331] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18497'. [ 1310.022491][ T36] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1310.043023][T23248] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1310.214795][T23248] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1310.302445][T23248] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1310.319881][T23248] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1310.327459][T23248] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1310.355794][T23248] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1310.399076][ T36] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1310.411510][ T36] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1310.515023][ T36] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1310.570406][T23358] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input7 [ 1310.597569][T23343] lo speed is unknown, defaulting to 1000 [ 1310.763235][T23248] hsr_slave_0: entered promiscuous mode [ 1310.770292][T23248] hsr_slave_1: entered promiscuous mode [ 1311.804226][T23405] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input8 [ 1311.987419][T22084] Bluetooth: hci1: command tx timeout [ 1312.043968][T23248] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1312.088267][T23248] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 1312.135581][T23248] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1312.328674][T23248] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1312.342258][T23248] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 1312.353671][T23248] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1312.394972][T23430] netlink: 'syz.3.18528': attribute type 30 has an invalid length. [ 1312.482165][T23248] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1312.501840][T23248] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 1312.525288][T23248] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1312.766433][T23248] bond0: (slave netdevsim0): Releasing backup interface [ 1312.808415][T23248] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1312.840281][T23248] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 1312.869641][T23248] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1313.004810][T23450] lo speed is unknown, defaulting to 1000 [ 1313.095437][T23439] lo speed is unknown, defaulting to 1000 [ 1313.195320][T23465] netlink: 'syz.0.18535': attribute type 39 has an invalid length. [ 1314.060893][T22084] Bluetooth: hci1: command tx timeout [ 1314.062234][T23248] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1314.103765][T23248] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1314.160397][T23248] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1314.208372][T23248] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1314.486912][T23248] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1314.516965][T23510] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input9 [ 1314.526879][T23248] 8021q: adding VLAN 0 to HW filter on device team0 [ 1314.558814][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1314.566096][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1314.630208][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 1314.637553][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1315.215601][T23248] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1315.874311][T23566] syzkaller0: entered promiscuous mode [ 1315.906997][T23566] syzkaller0: entered allmulticast mode [ 1316.141990][T22084] Bluetooth: hci1: command tx timeout [ 1316.386772][T23248] veth0_vlan: entered promiscuous mode [ 1316.434841][T23248] veth1_vlan: entered promiscuous mode [ 1316.548180][T23595] netlink: 'syz.2.18566': attribute type 2 has an invalid length. [ 1316.565204][T23248] veth0_macvtap: entered promiscuous mode [ 1316.606132][T23248] veth1_macvtap: entered promiscuous mode [ 1316.675148][T23248] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1316.746301][T23248] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1316.802301][ T36] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1316.841122][ T36] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1316.850157][ T36] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1316.909216][ T36] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1317.208774][T23619] syzkaller0: entered promiscuous mode [ 1317.215713][T23619] syzkaller0: entered allmulticast mode [ 1317.288571][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1317.316595][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1317.429744][ T1149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1317.452945][ T1149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1317.802319][T23645] netlink: 'syz.4.18582': attribute type 3 has an invalid length. [ 1317.819143][T23645] netlink: 'syz.4.18582': attribute type 3 has an invalid length. [ 1317.908005][T23653] __nla_validate_parse: 1 callbacks suppressed [ 1317.908027][T23653] netlink: 20 bytes leftover after parsing attributes in process `syz.2.18585'. [ 1318.292060][T23671] netlink: 4 bytes leftover after parsing attributes in process `syz.3.18590'. [ 1319.405053][T23721] netlink: 4 bytes leftover after parsing attributes in process `syz.4.18609'. [ 1319.587389][ T25] block nbd0: Possible stuck request ffff888045b20000: control (read@0,4096B). Runtime 240 seconds [ 1321.205776][T23807] syzkaller0: entered promiscuous mode [ 1321.228030][T23807] syzkaller0: entered allmulticast mode [ 1321.455733][T23813] netlink: 48 bytes leftover after parsing attributes in process `syz.1.18645'. [ 1321.680678][T23824] netlink: 'syz.2.18649': attribute type 11 has an invalid length. [ 1321.702000][T23823] tipc: Started in network mode [ 1321.706948][T23823] tipc: Node identity 3681b01cfcd6, cluster identity 4711 [ 1321.752039][T23823] tipc: Enabled bearer , priority 0 [ 1321.773540][T23823] tipc: Resetting bearer [ 1321.841577][T23821] tipc: Disabling bearer [ 1321.965742][T23842] bridge: RTM_NEWNEIGH with invalid ether address [ 1323.059240][T23900] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1323.262013][T23912] netlink: 'syz.0.18680': attribute type 25 has an invalid length. [ 1323.281262][T23912] netlink: 20 bytes leftover after parsing attributes in process `syz.0.18680'. [ 1323.333760][T23912] netlink: 44 bytes leftover after parsing attributes in process `syz.0.18680'. [ 1323.399428][T23922] netlink: 'syz.1.18685': attribute type 1 has an invalid length. [ 1323.484795][T23912] netlink: 40 bytes leftover after parsing attributes in process `syz.0.18680'. [ 1324.183117][T23963] netlink: 52 bytes leftover after parsing attributes in process `syz.2.18700'. [ 1324.532918][T23977] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18706'. [ 1324.562369][T23977] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18706'. [ 1324.685414][T26827] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1324.695688][T23977] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18706'. [ 1324.705154][ T1149] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1324.736622][T23977] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18706'. [ 1324.746108][ T1149] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1324.765293][ T1149] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1324.785028][T23987] mac80211_hwsim hwsim55 wlan1: left allmulticast mode [ 1324.797788][T22355] IPVS: starting estimator thread 0... [ 1324.804847][T23987] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 1324.890941][T23989] IPVS: using max 29 ests per chain, 69600 per kthread [ 1325.051867][T24003] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18714'. [ 1325.377716][T24019] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1325.424327][T24023] mac80211_hwsim hwsim56 wlan0: entered allmulticast mode [ 1326.732114][T24078] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18739'. [ 1327.258003][T24094] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input10 [ 1327.492806][T24104] mac80211_hwsim hwsim60 wlan0: entered allmulticast mode [ 1327.569642][T24117] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1328.847761][T24183] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1329.033082][T24198] syzkaller1: entered promiscuous mode [ 1329.038639][T24198] syzkaller1: entered allmulticast mode [ 1329.405987][T24210] netlink: 'syz.2.18785': attribute type 83 has an invalid length. [ 1329.432536][T24210] netlink: 'syz.2.18785': attribute type 1 has an invalid length. [ 1329.517513][T24210] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1329.543552][T24214] bond1: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms [ 1329.999203][T24231] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1331.031077][T24271] netlink: 'syz.3.18801': attribute type 1 has an invalid length. [ 1331.128125][T24271] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1331.225961][T24274] bond1: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms [ 1333.059263][T24242] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1333.563257][T24345] __nla_validate_parse: 1 callbacks suppressed [ 1333.563281][T24345] netlink: 12 bytes leftover after parsing attributes in process `syz.4.18818'. [ 1333.656353][T24345] bond2: entered promiscuous mode [ 1333.698655][T24345] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1333.805118][T24352] bridge1: entered promiscuous mode [ 1333.834789][T24352] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 1334.001787][T24363] netlink: 124 bytes leftover after parsing attributes in process `syz.2.18824'. [ 1334.018363][T24360] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1334.519121][T16293] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x1f [ 1334.966820][T24407] netlink: 124 bytes leftover after parsing attributes in process `syz.0.18838'. [ 1336.154985][T24437] netlink: 124 bytes leftover after parsing attributes in process `syz.2.18852'. [ 1336.616586][ T36] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x1f [ 1337.234941][T24473] netlink: 116 bytes leftover after parsing attributes in process `syz.0.18864'. [ 1337.836048][ T3120] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x1f [ 1338.388001][T24526] netlink: 116 bytes leftover after parsing attributes in process `syz.2.18886'. [ 1338.678600][T16293] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x1f [ 1338.981744][T24549] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18891'. [ 1339.147308][T24558] netlink: 'syz.2.18895': attribute type 83 has an invalid length. [ 1339.269201][T24558] bond2: Unable to set up delay as MII monitoring is disabled [ 1339.297478][T24558] bond2 (unregistering): Released all slaves [ 1339.812141][T26827] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x1f [ 1340.686273][T24616] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18914'. [ 1340.721030][T24616] netlink: 4 bytes leftover after parsing attributes in process `syz.3.18914'. [ 1340.771909][ T1149] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1340.783485][ T1149] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1340.793043][T24616] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18914'. [ 1340.803036][ T1149] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1340.805518][T24616] netlink: 4 bytes leftover after parsing attributes in process `syz.3.18914'. [ 1340.812739][ T1149] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1340.896012][ T1149] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x1f [ 1340.909363][T24632] netlink: 48 bytes leftover after parsing attributes in process `syz.3.18918'. [ 1341.339773][T24654] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18928'. [ 1341.357972][T24654] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18928'. [ 1341.370238][T24654] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18928'. [ 1341.379744][T24654] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18928'. [ 1341.645446][ T36] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x1f [ 1342.283259][ T1149] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x1f [ 1342.334917][T24715] netlink: 'syz.0.18950': attribute type 83 has an invalid length. [ 1342.347721][T24715] netlink: 'syz.0.18950': attribute type 1 has an invalid length. [ 1342.395844][T24715] bond2: Unable to set up delay as MII monitoring is disabled [ 1342.406257][T24715] bond2 (unregistering): Released all slaves [ 1342.781632][ T9652] Bluetooth: hci1: command 0x0405 tx timeout [ 1343.051145][T24757] netlink: 'syz.1.18964': attribute type 1 has an invalid length. [ 1343.062502][ T1149] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x1f [ 1343.083333][T24757] bond3: Unable to set up delay as MII monitoring is disabled [ 1343.113387][T22355] page_pool_release_retry() stalled pool shutdown: id 100, 1 inflight 667 sec [ 1343.142310][T24757] bond3 (unregistering): Released all slaves [ 1343.741373][ T1149] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x1f [ 1344.426986][T24830] __nla_validate_parse: 5 callbacks suppressed [ 1344.427010][T24830] netlink: 124 bytes leftover after parsing attributes in process `syz.4.18996'. [ 1344.690327][T24841] netlink: 'syz.0.19001': attribute type 83 has an invalid length. [ 1344.706794][T24841] netlink: 'syz.0.19001': attribute type 1 has an invalid length. [ 1344.773862][T24841] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1344.813461][T24843] bond3: Unable to set up delay as MII monitoring is disabled [ 1344.847734][T24843] bond3 (unregistering): Released all slaves [ 1345.161459][T24863] netlink: 124 bytes leftover after parsing attributes in process `syz.0.19009'. [ 1345.477813][T24883] netlink: 260 bytes leftover after parsing attributes in process `syz.4.19020'. [ 1345.509574][T24882] netlink: 'syz.0.19018': attribute type 83 has an invalid length. [ 1345.520436][T24882] netlink: 'syz.0.19018': attribute type 1 has an invalid length. [ 1345.597666][T24891] netlink: 80 bytes leftover after parsing attributes in process `syz.4.19023'. [ 1345.613558][T24882] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1345.673462][T22355] hid-generic 0005:0002:5508.0002: item fetching failed at offset 0/1 [ 1345.687187][T22355] hid-generic 0005:0002:5508.0002: probe with driver hid-generic failed with error -22 [ 1345.736269][T24889] bond4: Unable to set up delay as MII monitoring is disabled [ 1345.765112][T24889] bond4 (unregistering): Released all slaves [ 1346.077427][T24914] netlink: 8 bytes leftover after parsing attributes in process `syz.4.19032'. [ 1346.127772][T24918] netlink: 'syz.1.19033': attribute type 39 has an invalid length. [ 1346.214053][T24918] syz_tun (unregistering): left allmulticast mode [ 1346.232035][T24918] syz_tun (unregistering): left promiscuous mode [ 1346.242045][T24918] bridge0: port 3(syz_tun) entered disabled state [ 1346.309980][T24927] netlink: 40 bytes leftover after parsing attributes in process `syz.4.19039'. [ 1346.457850][T24931] netlink: 80 bytes leftover after parsing attributes in process `syz.4.19040'. [ 1346.509920][T24933] netlink: 'syz.2.19041': attribute type 83 has an invalid length. [ 1346.522288][T24933] netlink: 'syz.2.19041': attribute type 1 has an invalid length. [ 1346.728244][T24933] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1346.850954][T24936] bond3: Unable to set up delay as MII monitoring is disabled [ 1346.876587][ T12] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x1f [ 1346.897895][T24936] bond3 (unregistering): Released all slaves [ 1347.224461][ T4452] IPVS: starting estimator thread 0... [ 1347.259152][T24969] netlink: 80 bytes leftover after parsing attributes in process `syz.1.19053'. [ 1347.331086][T24967] IPVS: using max 26 ests per chain, 62400 per kthread [ 1347.715995][T24988] netlink: 'syz.2.19062': attribute type 83 has an invalid length. [ 1347.753286][T24988] netlink: 'syz.2.19062': attribute type 1 has an invalid length. [ 1347.799387][T24988] bond3: Unable to set up delay as MII monitoring is disabled [ 1347.811613][T24988] bond3 (unregistering): Released all slaves [ 1347.938934][T25001] netlink: 80 bytes leftover after parsing attributes in process `syz.4.19067'. [ 1348.106394][T25011] netlink: 20 bytes leftover after parsing attributes in process `syz.0.19071'. [ 1348.405294][T25026] netlink: 'syz.4.19078': attribute type 83 has an invalid length. [ 1348.474989][T25026] bond3: Unable to set up delay as MII monitoring is disabled [ 1348.492265][T25026] bond3 (unregistering): Released all slaves [ 1349.666158][ T25] block nbd0: Possible stuck request ffff888045b20000: control (read@0,4096B). Runtime 270 seconds [ 1349.953297][T22355] IPVS: starting estimator thread 0... [ 1350.043597][T25115] mac80211_hwsim hwsim58 wlan0: entered allmulticast mode [ 1350.071353][T25113] IPVS: using max 25 ests per chain, 60000 per kthread [ 1350.151923][T25123] validate_nla: 1 callbacks suppressed [ 1350.152007][T25123] netlink: 'syz.3.19121': attribute type 83 has an invalid length. [ 1350.168068][T25123] netlink: 'syz.3.19121': attribute type 1 has an invalid length. [ 1350.208934][T25123] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1350.249986][T25123] bond2: (slave ip6gretap1): making interface the new active one [ 1350.260076][T25123] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 1350.749744][T25153] netlink: 'syz.3.19133': attribute type 83 has an invalid length. [ 1350.760392][T25153] netlink: 'syz.3.19133': attribute type 1 has an invalid length. [ 1350.815126][T25153] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1351.106345][T25171] __nla_validate_parse: 3 callbacks suppressed [ 1351.106368][T25171] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19141'. [ 1351.126050][T25170] netlink: 60 bytes leftover after parsing attributes in process `syz.3.19140'. [ 1351.157349][T25171] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19141'. [ 1351.202992][T25171] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19141'. [ 1351.213813][T25171] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19141'. [ 1351.270560][T22355] IPVS: starting estimator thread 0... [ 1351.380890][T25182] IPVS: using max 23 ests per chain, 55200 per kthread [ 1351.550540][T25198] tipc: Started in network mode [ 1351.556057][T25198] tipc: Node identity 125f356a7c46, cluster identity 4711 [ 1351.564740][T25198] tipc: Enabled bearer , priority 0 [ 1351.573048][T25198] syzkaller0: entered promiscuous mode [ 1351.578586][T25198] syzkaller0: entered allmulticast mode [ 1351.593641][T25200] netlink: 60 bytes leftover after parsing attributes in process `syz.4.19154'. [ 1351.605035][T25198] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1351.637737][T25198] tipc: Resetting bearer [ 1351.646248][T25197] tipc: Resetting bearer [ 1351.675453][T25197] tipc: Disabling bearer [ 1351.774973][T25205] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19156'. [ 1351.791100][T25205] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19156'. [ 1352.110165][T25224] netlink: 60 bytes leftover after parsing attributes in process `syz.0.19165'. [ 1352.192938][T25230] netlink: 4 bytes leftover after parsing attributes in process `syz.0.19168'. [ 1352.240148][T25233] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1352.303744][T25233] bond_slave_0: entered promiscuous mode [ 1352.309934][T25233] bond_slave_1: entered promiscuous mode [ 1352.317398][T25233] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1352.357107][T25233] bond3: (slave macvlan2): Enslaving as a backup interface with an up link [ 1352.832464][T25267] syzkaller0: entered promiscuous mode [ 1352.838106][T25267] syzkaller0: entered allmulticast mode [ 1353.017578][T25273] syzkaller1: entered promiscuous mode [ 1353.026102][T25273] syzkaller1: entered allmulticast mode [ 1353.671279][ T9652] Bluetooth: hci5: command 0x0406 tx timeout [ 1354.594527][T25358] syzkaller0: entered promiscuous mode [ 1354.600456][T25358] syzkaller0: entered allmulticast mode [ 1355.063536][T26827] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x1f [ 1355.567702][T16293] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1355.597736][T16293] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1355.622634][T16293] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1355.650473][T16293] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1359.403223][T25436] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1359.949845][T25503] bond1: option mode: unable to set because the bond device is up [ 1361.832241][ T1301] lec:lec_start_xmit: lec0:No lecd attached [ 1362.137957][T25594] syzkaller0: entered promiscuous mode [ 1362.144125][T25594] syzkaller0: entered allmulticast mode [ 1362.339656][T25600] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1362.394737][T25603] bond4: option mode: unable to set because the bond device is up [ 1362.408405][T25603] bond4: (slave wlan0): Enslaving as a backup interface with a down link [ 1362.693257][T25615] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input11 [ 1363.446874][T25654] syzkaller0: entered promiscuous mode [ 1363.454047][T25654] syzkaller0: entered allmulticast mode [ 1363.667362][T25670] __nla_validate_parse: 19 callbacks suppressed [ 1363.667383][T25670] netlink: 4 bytes leftover after parsing attributes in process `syz.3.19358'. [ 1364.314372][T25705] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19371'. [ 1364.632155][T25723] netlink: 36 bytes leftover after parsing attributes in process `syz.2.19380'. [ 1364.714108][T25729] Bluetooth: MGMT ver 1.23 [ 1364.805383][T25734] bridge1: entered allmulticast mode [ 1364.917999][T25739] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19386'. [ 1364.992682][T25743] bond3: option mode: unable to set because the bond device has slaves [ 1365.537999][T25752] netlink: 36 bytes leftover after parsing attributes in process `syz.1.19392'. [ 1366.188694][T25783] netlink: 36 bytes leftover after parsing attributes in process `syz.2.19404'. [ 1366.515832][T25799] netlink: 12 bytes leftover after parsing attributes in process `syz.4.19412'. [ 1366.533035][T25799] netlink: 28 bytes leftover after parsing attributes in process `syz.4.19412'. [ 1366.548572][T22359] hid-generic 0005:0002:5508.0003: item fetching failed at offset 0/1 [ 1366.592218][T22359] hid-generic 0005:0002:5508.0003: probe with driver hid-generic failed with error -22 [ 1366.664916][T25808] netlink: 100 bytes leftover after parsing attributes in process `syz.0.19416'. [ 1366.806903][T25814] syzkaller0: entered promiscuous mode [ 1366.812635][T25814] syzkaller0: entered allmulticast mode [ 1367.020978][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5190 ms [ 1367.029163][ C1] lec:lec_tx_timeout: lec0 [ 1367.035563][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1367.075658][T22084] Bluetooth: hci1: link tx timeout [ 1367.081670][T22084] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 1367.093770][T22084] Bluetooth: hci1: link tx timeout [ 1367.099033][T22084] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 1367.334764][T25845] bond1: option mode: unable to set because the bond device is up [ 1367.529351][T25860] syzkaller0: entered promiscuous mode [ 1367.535547][T25860] syzkaller0: entered allmulticast mode [ 1367.556779][T25861] tipc: Started in network mode [ 1367.562333][T25861] tipc: Node identity e61297f7b133, cluster identity 4711 [ 1367.569736][T25861] tipc: Enabled bearer , priority 0 [ 1367.578282][T25861] syzkaller0: entered promiscuous mode [ 1367.585356][T25861] syzkaller0: entered allmulticast mode [ 1367.621951][T25861] tipc: Resetting bearer [ 1367.630106][T25859] tipc: Resetting bearer [ 1367.672207][T25859] tipc: Disabling bearer [ 1367.745945][T25828] Bluetooth: hci1: link tx timeout [ 1367.754298][T25828] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 1367.762420][T25828] Bluetooth: hci1: link tx timeout [ 1367.768168][T25828] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 1367.954234][T25877] bond1: option mode: unable to set because the bond device is up [ 1368.043828][T25883] syzkaller0: entered promiscuous mode [ 1368.049355][T25883] syzkaller0: entered allmulticast mode [ 1368.263413][T25828] Bluetooth: hci1: link tx timeout [ 1368.269096][T25828] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 1368.276995][T25828] Bluetooth: hci1: link tx timeout [ 1368.285474][T25828] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 1368.421383][T25900] bond4: option mode: unable to set because the bond device has slaves [ 1368.589418][T25910] syzkaller0: entered promiscuous mode [ 1368.597325][T25910] syzkaller0: entered allmulticast mode [ 1368.652352][T25912] netlink: 'syz.1.19464': attribute type 1 has an invalid length. [ 1368.754412][T25918] bond3: Unable to set up delay as MII monitoring is disabled [ 1368.773479][T25828] Bluetooth: hci1: link tx timeout [ 1368.778831][T25828] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 1368.790029][T25918] bond3 (unregistering): Released all slaves [ 1368.791623][T25828] Bluetooth: hci1: link tx timeout [ 1368.802215][T25828] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 1368.981202][T25930] syz_tun: entered allmulticast mode [ 1369.005400][T25929] syz_tun: left allmulticast mode [ 1369.023920][T25828] Bluetooth: hci3: command 0x0405 tx timeout [ 1369.205410][ T9652] Bluetooth: hci1: command 0x0405 tx timeout [ 1369.256868][T25946] syzkaller0: entered promiscuous mode [ 1369.262853][T25946] syzkaller0: entered allmulticast mode [ 1369.524540][T25957] netlink: 'syz.3.19480': attribute type 1 has an invalid length. [ 1369.568938][T25957] bond5: Unable to set up delay as MII monitoring is disabled [ 1369.583736][T25957] bond5 (unregistering): Released all slaves [ 1369.666300][T25963] syzkaller0: entered promiscuous mode [ 1369.672213][T25963] syzkaller0: entered allmulticast mode [ 1370.109790][T25986] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19488'. [ 1370.209307][T25993] netlink: 'syz.1.19493': attribute type 1 has an invalid length. [ 1370.317758][T25993] bond3: Unable to set up delay as MII monitoring is disabled [ 1370.370039][T25993] bond3 (unregistering): Released all slaves [ 1370.915188][T26033] netlink: 4 bytes leftover after parsing attributes in process `syz.4.19507'. [ 1371.073987][T26040] netlink: 36 bytes leftover after parsing attributes in process `syz.2.19511'. [ 1371.083903][T26040] netlink: 16 bytes leftover after parsing attributes in process `syz.2.19511'. [ 1371.097299][T26040] netlink: 36 bytes leftover after parsing attributes in process `syz.2.19511'. [ 1371.103587][T26043] netlink: 'syz.4.19512': attribute type 1 has an invalid length. [ 1371.109116][T26040] netlink: 36 bytes leftover after parsing attributes in process `syz.2.19511'. [ 1371.150327][T26043] bond3: Unable to set up delay as MII monitoring is disabled [ 1371.163033][T26043] bond3 (unregistering): Released all slaves [ 1371.260965][ T9652] Bluetooth: hci1: command 0x0405 tx timeout [ 1371.647024][T26069] netlink: 'syz.1.19525': attribute type 1 has an invalid length. [ 1371.698091][T26076] netlink: 4 bytes leftover after parsing attributes in process `syz.0.19522'. [ 1371.755839][T26069] bond3: Unable to set up delay as MII monitoring is disabled [ 1371.817194][T26069] bond3 (unregistering): Released all slaves [ 1372.011721][T26088] netlink: 4 bytes leftover after parsing attributes in process `syz.3.19528'. [ 1372.033683][T26088] netlink: 348 bytes leftover after parsing attributes in process `syz.3.19528'. [ 1372.057146][T26088] netlink: 4 bytes leftover after parsing attributes in process `syz.3.19528'. [ 1372.069310][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 1372.069343][ C1] lec:lec_tx_timeout: lec0 [ 1372.082054][T26092] bond1: option mode: unable to set because the bond device is up [ 1372.160227][T26092] mac80211_hwsim hwsim62 wlan0: entered allmulticast mode [ 1372.399285][T26108] syz_tun: entered allmulticast mode [ 1372.419079][T26106] syz_tun: left allmulticast mode [ 1372.577737][T26120] bond4: Unable to set up delay as MII monitoring is disabled [ 1372.599790][T26120] bond4 (unregistering): Released all slaves [ 1372.796144][T26132] syzkaller0: entered promiscuous mode [ 1372.802976][T26132] syzkaller0: entered allmulticast mode [ 1373.280441][T26155] bond4: Unable to set up delay as MII monitoring is disabled [ 1373.300213][T26155] bond4 (unregistering): Released all slaves [ 1373.355067][ T9652] Bluetooth: hci1: command 0x0405 tx timeout [ 1374.324838][T26223] syzkaller0: entered promiscuous mode [ 1374.331062][T26223] syzkaller0: entered allmulticast mode [ 1374.941796][T26257] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 1374.969948][T26259] syzkaller0: entered promiscuous mode [ 1374.976140][T26259] syzkaller0: entered allmulticast mode [ 1375.159203][T26267] __nla_validate_parse: 16 callbacks suppressed [ 1375.159227][T26267] netlink: 52 bytes leftover after parsing attributes in process `syz.0.19600'. [ 1375.343514][T26280] netlink: 8 bytes leftover after parsing attributes in process `syz.0.19605'. [ 1375.364364][T26280] netlink: 4 bytes leftover after parsing attributes in process `syz.0.19605'. [ 1375.389322][T26280] netlink: 8 bytes leftover after parsing attributes in process `syz.0.19605'. [ 1375.430507][T26280] netlink: 4 bytes leftover after parsing attributes in process `syz.0.19605'. [ 1375.432332][T26293] netlink: 4 bytes leftover after parsing attributes in process `syz.4.19604'. [ 1375.840124][T26310] syzkaller0: entered promiscuous mode [ 1375.846386][T26310] syzkaller0: entered allmulticast mode [ 1376.063100][T26323] netlink: 8 bytes leftover after parsing attributes in process `syz.4.19619'. [ 1376.072944][T26323] netlink: 4 bytes leftover after parsing attributes in process `syz.4.19619'. [ 1376.101881][T26323] netlink: 8 bytes leftover after parsing attributes in process `syz.4.19619'. [ 1376.113936][T26323] netlink: 4 bytes leftover after parsing attributes in process `syz.4.19619'. [ 1376.611660][T26348] syzkaller0: entered promiscuous mode [ 1376.617399][T26348] syzkaller0: entered allmulticast mode [ 1379.419851][T26377] syz_tun: entered allmulticast mode [ 1379.429425][T26375] syz_tun: left allmulticast mode [ 1379.763709][ T25] block nbd0: Possible stuck request ffff888045b20000: control (read@0,4096B). Runtime 300 seconds [ 1380.155004][T26419] tipc: Started in network mode [ 1380.160034][T26419] tipc: Node identity c2af95e9d6cc, cluster identity 4711 [ 1380.181062][T26419] tipc: Enabled bearer , priority 0 [ 1380.199406][T26419] syzkaller0: entered promiscuous mode [ 1380.208501][T26419] syzkaller0: entered allmulticast mode [ 1380.227963][T26419] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1380.293037][T26418] tipc: Resetting bearer [ 1380.319305][T26428] __nla_validate_parse: 10 callbacks suppressed [ 1380.319330][T26428] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19662'. [ 1380.354947][T26418] tipc: Disabling bearer [ 1380.367488][T26432] netlink: 52 bytes leftover after parsing attributes in process `syz.0.19664'. [ 1380.377701][T26432] bridge0: left allmulticast mode [ 1380.389161][T26428] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19662'. [ 1380.474513][T26435] netlink: 32 bytes leftover after parsing attributes in process `syz.0.19665'. [ 1380.686746][T26447] syz_tun: entered allmulticast mode [ 1380.715320][T26445] syz_tun: left allmulticast mode [ 1380.985203][T26465] tipc: Enabled bearer , priority 0 [ 1380.993978][T26465] syzkaller0: entered promiscuous mode [ 1380.999587][T26465] syzkaller0: entered allmulticast mode [ 1381.025404][T26465] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1381.070087][T26470] netlink: 4 bytes leftover after parsing attributes in process `syz.3.19678'. [ 1381.133085][T26470] netlink: 4 bytes leftover after parsing attributes in process `syz.3.19678'. [ 1381.146814][T26464] tipc: Resetting bearer [ 1381.221486][T26464] tipc: Disabling bearer [ 1381.350966][T26487] netlink: 224 bytes leftover after parsing attributes in process `syz.2.19686'. [ 1381.950483][T26521] syz_tun: entered allmulticast mode [ 1381.972936][T26519] syz_tun: left allmulticast mode [ 1382.216533][T26541] netlink: 'syz.1.19706': attribute type 1 has an invalid length. [ 1382.271889][T26541] netlink: 28 bytes leftover after parsing attributes in process `syz.1.19706'. [ 1382.285912][T26541] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1382.319546][T26541] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1382.349573][T26541] bond3: (slave geneve2): making interface the new active one [ 1382.360339][T26541] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 1382.377072][ T65] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0 [ 1382.387718][ T65] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0 [ 1382.397408][ T65] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0 [ 1382.410075][ T65] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0 [ 1382.542623][T26558] syz_tun: entered allmulticast mode [ 1382.549992][T26556] syz_tun: left allmulticast mode [ 1382.609219][T26560] netlink: 4 bytes leftover after parsing attributes in process `syz.4.19716'. [ 1382.624508][T26560] netlink: 4 bytes leftover after parsing attributes in process `syz.4.19716'. [ 1382.906158][T26578] nbd: must specify a size in bytes for the device [ 1383.772287][T26626] netlink: 'syz.1.19744': attribute type 1 has an invalid length. [ 1383.992436][T26631] bond4: Unable to set up delay as MII monitoring is disabled [ 1384.007518][T26631] bond4 (unregistering): Released all slaves [ 1384.716218][T26680] bond5: Unable to set up delay as MII monitoring is disabled [ 1384.725795][T26680] bond5 (unregistering): Released all slaves [ 1385.033204][T26688] netlink: 'syz.1.19768': attribute type 2 has an invalid length. [ 1385.042516][T26688] netlink: 'syz.1.19768': attribute type 1 has an invalid length. [ 1387.497617][T26690] __nla_validate_parse: 8 callbacks suppressed [ 1387.497638][T26690] netlink: 8 bytes leftover after parsing attributes in process `syz.0.19769'. [ 1387.504130][T26704] veth1_macvtap: left promiscuous mode [ 1387.519162][T26690] netlink: 4 bytes leftover after parsing attributes in process `syz.0.19769'. [ 1387.657325][T26711] netlink: 12 bytes leftover after parsing attributes in process `syz.1.19775'. [ 1387.673734][T26704] veth0_virt_wifi: renamed from macsec0 [ 1387.683296][T26706] bond4: option mode: unable to set because the bond device has slaves [ 1387.739245][T26707] : entered promiscuous mode [ 1387.744163][T26707] bond_slave_1: entered promiscuous mode [ 1387.754735][T26707] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1387.765280][T26714] netlink: 256 bytes leftover after parsing attributes in process `syz.2.19776'. [ 1387.791652][T26707] bond4: (slave macvlan3): Enslaving as a backup interface with an up link [ 1388.046314][T26731] netlink: 28 bytes leftover after parsing attributes in process `syz.1.19783'. [ 1388.126948][T26735] bond4: Unable to set up delay as MII monitoring is disabled [ 1388.157368][T26735] bond4 (unregistering): Released all slaves [ 1388.457049][T26753] netlink: 4 bytes leftover after parsing attributes in process `syz.3.19785'. [ 1388.503071][T26757] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19788'. [ 1388.526011][T26757] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19788'. [ 1388.558845][T26757] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19788'. [ 1388.597325][T26757] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19788'. [ 1389.139634][T26781] bond5: Unable to set up delay as MII monitoring is disabled [ 1389.159878][T26781] bond5 (unregistering): Released all slaves [ 1389.264567][ T5488] veth1_macvtap: entered promiscuous mode [ 1389.466884][T26800] bond1: option mode: unable to set because the bond device is up [ 1389.572997][T26800] bond_slave_0: entered promiscuous mode [ 1389.578803][T26800] bond_slave_1: entered promiscuous mode [ 1389.617509][T26800] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1389.664585][T26800] bond1: (slave macvlan3): making interface the new active one [ 1389.695525][T26800] bond1: (slave macvlan3): Enslaving as an active interface with an up link [ 1390.341018][T26854] syz_tun: entered allmulticast mode [ 1390.510665][T26864] bond1: option mode: unable to set because the bond device has slaves [ 1390.575710][T26864] bond1: (slave macvlan4): Error -98 calling set_mac_address [ 1392.025720][T26950] syzkaller0: entered promiscuous mode [ 1392.035448][T26950] syzkaller0: entered allmulticast mode [ 1392.445176][T26973] tipc: Enabling of bearer rejected, failed to enable media [ 1392.456004][T26973] syzkaller0: entered promiscuous mode [ 1392.462436][T26973] syzkaller0: entered allmulticast mode [ 1392.967242][T27005] __nla_validate_parse: 5 callbacks suppressed [ 1392.967265][T27005] netlink: 4 bytes leftover after parsing attributes in process `syz.1.19872'. [ 1393.174726][T27015] syzkaller0: entered promiscuous mode [ 1393.188778][T27015] syzkaller0: entered allmulticast mode [ 1393.457130][T27032] syzkaller0: entered promiscuous mode [ 1393.469621][T27032] syzkaller0: entered allmulticast mode [ 1393.488984][T27032] tipc: Enabled bearer , priority 0 [ 1393.522340][T27030] tipc: Resetting bearer [ 1393.575343][T27030] tipc: Disabling bearer [ 1393.722226][T27049] netlink: 4 bytes leftover after parsing attributes in process `syz.1.19891'. [ 1394.055074][T27066] syzkaller0: entered promiscuous mode [ 1394.061751][T27066] syzkaller0: entered allmulticast mode [ 1394.753103][T27104] syzkaller0: entered promiscuous mode [ 1394.759743][T27104] syzkaller0: entered allmulticast mode [ 1395.208708][T27124] netlink: 24 bytes leftover after parsing attributes in process `syz.4.19924'. [ 1395.218838][T27124] netlink: 24 bytes leftover after parsing attributes in process `syz.4.19924'. [ 1395.556862][T27141] syzkaller0: entered promiscuous mode [ 1395.562688][T27141] syzkaller0: entered allmulticast mode [ 1395.828589][T27149] netlink: 24 bytes leftover after parsing attributes in process `syz.1.19936'. [ 1395.838206][T27149] netlink: 24 bytes leftover after parsing attributes in process `syz.1.19936'. [ 1396.083654][T27165] syzkaller0: entered promiscuous mode [ 1396.089213][T27165] syzkaller0: entered allmulticast mode [ 1396.175249][T27169] syz_tun: entered allmulticast mode [ 1396.517139][T27188] netlink: 4 bytes leftover after parsing attributes in process `syz.4.19954'. [ 1396.527043][T27188] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 1396.648208][T27194] syzkaller0: entered promiscuous mode [ 1396.658869][T27194] syzkaller0: entered allmulticast mode [ 1397.253046][T27228] syzkaller0: entered promiscuous mode [ 1397.258698][T27228] syzkaller0: entered allmulticast mode [ 1397.448916][T27241] netlink: 4 bytes leftover after parsing attributes in process `syz.0.19976'. [ 1397.457809][T27240] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1397.839827][T27254] netlink: 64 bytes leftover after parsing attributes in process `syz.0.19982'. [ 1397.969852][T27262] syzkaller0: entered promiscuous mode [ 1397.975726][T27262] syzkaller0: entered allmulticast mode [ 1398.125468][T27264] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19988'. [ 1398.137146][T27264] netlink: 'syz.1.19988': attribute type 5 has an invalid length. [ 1398.150197][T27264] netlink: 12 bytes leftover after parsing attributes in process `syz.1.19988'. [ 1398.597168][T27300] syzkaller0: entered promiscuous mode [ 1398.602840][T27300] syzkaller0: entered allmulticast mode [ 1400.274560][T27307] netlink: 4 bytes leftover after parsing attributes in process `syz.4.20002'. [ 1400.284087][T27307] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 1401.228151][T27314] syzkaller0: entered promiscuous mode [ 1401.234849][T27314] syzkaller0: entered allmulticast mode [ 1401.308374][T27274] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1401.560177][T27322] syzkaller0: entered promiscuous mode [ 1401.566966][T27322] syzkaller0: entered allmulticast mode [ 1401.803139][T27340] netlink: 16 bytes leftover after parsing attributes in process `syz.2.20018'. [ 1402.385399][T27373] netlink: 40 bytes leftover after parsing attributes in process `syz.1.20034'. [ 1402.432635][T27378] netlink: 40 bytes leftover after parsing attributes in process `syz.1.20034'. [ 1403.072365][T27418] netlink: 28 bytes leftover after parsing attributes in process `syz.2.20050'. [ 1403.217439][T27428] syz_tun: entered allmulticast mode [ 1403.247220][T27426] syz_tun: left allmulticast mode [ 1403.390099][T27435] syz_tun: entered allmulticast mode [ 1403.415949][T27433] syz_tun: left allmulticast mode [ 1403.422287][T22359] page_pool_release_retry() stalled pool shutdown: id 100, 1 inflight 727 sec [ 1403.537759][T27438] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1403.577490][T27438] bond4: (slave macvlan4): Error -98 calling set_mac_address [ 1404.281178][T27470] syz_tun: left allmulticast mode [ 1404.942971][T27507] syz_tun: entered allmulticast mode [ 1405.238707][T27524] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 1405.254426][T27524] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1405.872889][T27556] netlink: 24 bytes leftover after parsing attributes in process `syz.4.20100'. [ 1405.994641][T27563] syz_tun: entered allmulticast mode [ 1406.136583][T27573] team0: Device gtp0 is of different type [ 1406.577359][T27588] netlink: 8 bytes leftover after parsing attributes in process `syz.4.20114'. [ 1406.715130][T27596] syzkaller0: entered promiscuous mode [ 1406.721626][T27596] syzkaller0: entered allmulticast mode [ 1407.552667][T27635] bond4: (slave macvlan4): Error -98 calling set_mac_address [ 1407.643871][T27638] syzkaller0: entered promiscuous mode [ 1407.651502][T27638] syzkaller0: entered allmulticast mode [ 1407.908126][T27651] netlink: 32 bytes leftover after parsing attributes in process `syz.2.20139'. [ 1408.339383][T27663] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1408.391398][T27669] bond1: (slave macvlan4): Error -98 calling set_mac_address [ 1408.420499][T27668] bond4: Unable to set up delay as MII monitoring is disabled [ 1408.663201][T27688] netlink: 8 bytes leftover after parsing attributes in process `syz.3.20154'. [ 1408.995940][T27707] bond1: (slave macvlan4): Error -98 calling set_mac_address [ 1409.075268][T27711] netlink: 20 bytes leftover after parsing attributes in process `syz.0.20163'. [ 1409.126006][T27709] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1409.134142][T27714] bond5: Unable to set up delay as MII monitoring is disabled [ 1409.183443][T27711] geneve2: entered promiscuous mode [ 1409.201686][ T3120] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1409.214597][ T1149] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1409.240907][ T65] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1409.249676][ T65] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1409.829012][ T25] block nbd0: Possible stuck request ffff888045b20000: control (read@0,4096B). Runtime 330 seconds [ 1409.894090][T27746] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1409.934032][T27746] bond2: (slave macvlan2): making interface the new active one [ 1409.937096][T27748] netlink: 'syz.3.20177': attribute type 1 has an invalid length. [ 1409.962630][T27746] bond2: (slave macvlan2): Enslaving as an active interface with an up link [ 1410.014158][T27748] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1410.028784][T27752] bond6: Unable to set up delay as MII monitoring is disabled [ 1410.204012][T27760] tipc: Enabled bearer , priority 0 [ 1410.232363][T27760] syzkaller0: entered promiscuous mode [ 1410.242177][T27760] syzkaller0: entered allmulticast mode [ 1410.347266][T27760] tipc: Resetting bearer [ 1410.371312][T27756] tipc: Resetting bearer [ 1410.422836][T27756] tipc: Disabling bearer [ 1410.444933][T27773] netlink: 12 bytes leftover after parsing attributes in process `syz.4.20188'. [ 1410.497841][T27773] bond3: entered promiscuous mode [ 1410.503847][T27773] bond3: entered allmulticast mode [ 1410.528389][T27773] ip6gretap2: entered promiscuous mode [ 1410.534638][T27773] ip6gretap2: entered allmulticast mode [ 1410.543953][T27773] bond3: (slave ip6gretap2): Enslaving as an active interface with an up link [ 1410.559683][T27773] netlink: 28 bytes leftover after parsing attributes in process `syz.4.20188'. [ 1410.608347][T27773] bond3: left promiscuous mode [ 1410.616976][T27779] netlink: 'syz.1.20191': attribute type 1 has an invalid length. [ 1410.625451][T27773] ip6gretap2: left promiscuous mode [ 1410.632188][T27773] bond3: left allmulticast mode [ 1410.637567][T27773] ip6gretap2: left allmulticast mode [ 1410.645112][T27773] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1410.654936][T27781] netlink: 'syz.3.20189': attribute type 10 has an invalid length. [ 1410.712704][T27786] netlink: 'syz.3.20189': attribute type 10 has an invalid length. [ 1410.727647][T27779] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1410.736032][T27785] bond4: Unable to set up delay as MII monitoring is disabled [ 1410.777060][T27781] team0: Port device dummy0 added [ 1410.802324][T27786] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 1410.869234][T27786] team0: Failed to send options change via netlink (err -105) [ 1410.901293][T27786] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 1410.921090][T27786] team0: Port device dummy0 removed [ 1410.930371][T27786] dummy0: entered promiscuous mode [ 1410.955468][T27786] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1411.397853][T27815] lo speed is unknown, defaulting to 1000 [ 1411.558518][T27820] bond2: (slave macvlan3): Error -98 calling set_mac_address [ 1411.832055][T27815] netlink: 20 bytes leftover after parsing attributes in process `syz.2.20198'. [ 1412.586602][T27866] netlink: 20 bytes leftover after parsing attributes in process `syz.4.20219'. [ 1412.626921][T27866] geneve2: entered promiscuous mode [ 1413.383568][T27909] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 1413.407048][T27909] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 1413.835337][T27933] netlink: 12 bytes leftover after parsing attributes in process `syz.2.20249'. [ 1413.879417][T27933] netlink: 12 bytes leftover after parsing attributes in process `syz.2.20249'. [ 1414.342601][T27962] netlink: 8 bytes leftover after parsing attributes in process `syz.4.20265'. [ 1414.355503][T27962] bridge0: port 2(bridge_slave_1) entered disabled state [ 1414.364272][T27962] bridge0: port 1(bridge_slave_0) entered disabled state [ 1414.392911][T27962] bridge0: port 3(syz_tun) entered blocking state [ 1414.399687][T27962] bridge0: port 3(syz_tun) entered disabled state [ 1414.408757][T27962] syz_tun: entered promiscuous mode [ 1414.913741][T27993] netlink: 32 bytes leftover after parsing attributes in process `syz.4.20276'. [ 1416.162860][T28062] tipc: Enabled bearer , priority 0 [ 1416.170487][T28062] syzkaller0: entered promiscuous mode [ 1416.178578][T28062] syzkaller0: entered allmulticast mode [ 1416.205261][T28061] tipc: Resetting bearer [ 1416.258837][T28061] tipc: Disabling bearer [ 1416.687265][T28091] netlink: 'syz.4.20322': attribute type 1 has an invalid length. [ 1416.814155][T28091] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1416.822213][T28100] bond4: Unable to set up delay as MII monitoring is disabled [ 1416.879006][T28101] tipc: Enabled bearer , priority 0 [ 1416.907259][T28101] syzkaller0: entered promiscuous mode [ 1416.937409][T28101] syzkaller0: entered allmulticast mode [ 1416.982999][T28098] tipc: Resetting bearer [ 1417.059545][T28098] tipc: Disabling bearer [ 1417.164776][T28118] netlink: 4 bytes leftover after parsing attributes in process `syz.0.20329'. [ 1417.264298][T28126] sctp: [Deprecated]: syz.3.20330 (pid 28126) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1417.264298][T28126] Use struct sctp_sack_info instead [ 1417.456535][T28136] netlink: 'syz.0.20338': attribute type 1 has an invalid length. [ 1417.558105][T28136] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1417.581061][T28149] bond4: Unable to set up delay as MII monitoring is disabled [ 1418.178375][T28185] netlink: 4 bytes leftover after parsing attributes in process `syz.4.20355'. [ 1418.219222][T28185] bond5: Unable to set up delay as MII monitoring is disabled [ 1418.231477][T28185] bond5 (unregistering): Released all slaves [ 1419.002965][T28225] tipc: Enabled bearer , priority 0 [ 1419.021212][T28225] syzkaller0: entered promiscuous mode [ 1419.026974][T28225] syzkaller0: entered allmulticast mode [ 1419.049001][T28225] tipc: Resetting bearer [ 1419.059903][T28223] tipc: Resetting bearer [ 1419.099151][T28223] tipc: Disabling bearer [ 1419.133613][T28230] tipc: Enabled bearer , priority 0 [ 1419.141872][T28230] syzkaller0: entered promiscuous mode [ 1419.148017][T28230] syzkaller0: entered allmulticast mode [ 1419.211191][T28230] tipc: Resetting bearer [ 1419.221253][T28229] tipc: Resetting bearer [ 1419.258288][T28229] tipc: Disabling bearer [ 1419.867639][T28260] tipc: Enabled bearer , priority 0 [ 1419.902038][T28260] syzkaller0: entered promiscuous mode [ 1419.907660][T28260] syzkaller0: entered allmulticast mode [ 1419.943736][T28262] netlink: 20 bytes leftover after parsing attributes in process `syz.4.20384'. [ 1419.977820][T28260] tipc: Resetting bearer [ 1420.009362][T28259] tipc: Resetting bearer [ 1420.133715][T28259] tipc: Disabling bearer [ 1420.613069][T28300] netlink: 20 bytes leftover after parsing attributes in process `syz.1.20402'. [ 1420.786110][T28313] netlink: 12 bytes leftover after parsing attributes in process `syz.4.20407'. [ 1421.081606][T28333] netlink: 20 bytes leftover after parsing attributes in process `syz.3.20418'. [ 1421.130485][T28333] geneve2: entered promiscuous mode [ 1421.152113][T28337] netlink: 8 bytes leftover after parsing attributes in process `syz.0.20417'. [ 1421.345061][T28350] netlink: 12 bytes leftover after parsing attributes in process `syz.2.20422'. [ 1421.414481][T28354] netlink: 120 bytes leftover after parsing attributes in process `syz.4.20425'. [ 1421.451031][T28354] netlink: 128 bytes leftover after parsing attributes in process `syz.4.20425'. [ 1421.804751][T28376] syzkaller0: entered promiscuous mode [ 1421.810387][T28376] syzkaller0: entered allmulticast mode [ 1422.257673][T28408] tipc: Enabling of bearer rejected, failed to enable media [ 1422.489082][T28428] netlink: 'syz.0.20453': attribute type 1 has an invalid length. [ 1422.511160][T28428] __nla_validate_parse: 2 callbacks suppressed [ 1422.511181][T28428] netlink: 224 bytes leftover after parsing attributes in process `syz.0.20453'. [ 1423.109255][T28462] netlink: 20 bytes leftover after parsing attributes in process `syz.3.20466'. [ 1423.272743][ T1301] lec:lec_start_xmit: lec0:No lecd attached [ 1423.852947][T28502] netlink: 28 bytes leftover after parsing attributes in process `syz.2.20481'. [ 1424.080638][T28516] netlink: 64 bytes leftover after parsing attributes in process `syz.0.20486'. [ 1424.611755][T28540] syzkaller0: entered promiscuous mode [ 1424.617529][T28540] syzkaller0: entered allmulticast mode [ 1425.629774][T28603] netlink: 28 bytes leftover after parsing attributes in process `syz.4.20523'. [ 1425.640053][T28603] netlink: 'syz.4.20523': attribute type 7 has an invalid length. [ 1425.649519][T28603] netlink: 'syz.4.20523': attribute type 8 has an invalid length. [ 1425.657656][T28603] netlink: 4 bytes leftover after parsing attributes in process `syz.4.20523'. [ 1425.675478][T28603] team0: entered promiscuous mode [ 1425.681268][T28603] team_slave_0: entered promiscuous mode [ 1425.687320][T28603] team_slave_1: entered promiscuous mode [ 1425.695282][T28603] bond0: entered promiscuous mode [ 1425.704092][T28603] bond0: left promiscuous mode [ 1425.709409][T28603] team0: left promiscuous mode [ 1425.714742][T28603] team_slave_0: left promiscuous mode [ 1425.720352][T28603] team_slave_1: left promiscuous mode [ 1425.819377][T28607] netlink: 76 bytes leftover after parsing attributes in process `syz.4.20525'. [ 1427.912853][T28702] tipc: Enabled bearer , priority 0 [ 1427.933077][T28702] syzkaller0: entered promiscuous mode [ 1427.938601][T28702] syzkaller0: entered allmulticast mode [ 1427.969869][T28702] tipc: Resetting bearer [ 1427.977778][T28697] tipc: Resetting bearer [ 1428.007154][T28697] tipc: Disabling bearer [ 1428.023324][T28707] syzkaller0: entered promiscuous mode [ 1428.028888][T28707] syzkaller0: entered allmulticast mode [ 1428.754422][T28729] x_tables: duplicate underflow at hook 2 [ 1428.846329][T28734] syzkaller0: entered promiscuous mode [ 1428.853986][T28734] syzkaller0: entered allmulticast mode [ 1428.864387][T28732] tipc: Enabled bearer , priority 0 [ 1428.922155][T28732] syzkaller0: entered promiscuous mode [ 1428.927842][T28732] syzkaller0: entered allmulticast mode [ 1428.945205][T28732] tipc: Resetting bearer [ 1428.958624][T28731] tipc: Resetting bearer [ 1429.021014][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5750 ms [ 1429.029195][ C1] lec:lec_tx_timeout: lec0 [ 1429.036331][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1429.062704][T28731] tipc: Disabling bearer [ 1429.994744][T28770] netlink: 36 bytes leftover after parsing attributes in process `syz.0.20593'. [ 1430.124009][T28773] syzkaller0: entered promiscuous mode [ 1430.135463][T28773] syzkaller0: entered allmulticast mode [ 1430.256724][T28779] netlink: 32 bytes leftover after parsing attributes in process `syz.2.20597'. [ 1430.294690][T28779] netlink: 16 bytes leftover after parsing attributes in process `syz.2.20597'. [ 1430.461562][T22084] Bluetooth: hci4: command 0x0406 tx timeout [ 1431.429258][T28817] netlink: 76 bytes leftover after parsing attributes in process `syz.0.20614'. [ 1431.581088][ T31] INFO: task udevd:15483 blocked for more than 143 seconds. [ 1431.591271][ T31] Not tainted syzkaller #0 [ 1431.598699][ T31] Blocked by coredump. [ 1431.608833][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1431.644169][ T31] task:udevd state:D stack:23416 pid:15483 tgid:15483 ppid:5193 task_flags:0x40054c flags:0x00080003 [ 1431.668217][ T31] Call Trace: [ 1431.681309][ T31] [ 1431.684320][ T31] __schedule+0x14ea/0x5050 [ 1431.688869][ T31] ? lockdep_unlock+0x5d/0xd0 [ 1431.701181][ T31] ? __lock_acquire+0x146e/0x2cf0 [ 1431.706323][ T31] ? __pfx___schedule+0x10/0x10 [ 1431.730746][ T31] ? schedule+0x90/0x360 [ 1431.735071][ T31] schedule+0x164/0x360 [ 1431.739254][ T31] io_schedule+0x7f/0xd0 [ 1431.744984][ T31] folio_wait_bit_common+0x6d8/0xbc0 [ 1431.745366][T28823] syzkaller0: entered promiscuous mode [ 1431.750339][ T31] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 1431.750381][ T31] ? __pfx_wake_page_function+0x10/0x10 [ 1431.759109][T28823] syzkaller0: entered allmulticast mode [ 1431.763295][ T31] ? __filemap_get_folio_mpol+0x81/0xb00 [ 1431.780620][ T31] __filemap_get_folio_mpol+0x13e/0xb00 [ 1431.786513][ T31] ? __pfx___filemap_fdatawait_range+0x10/0x10 [ 1431.792875][ T31] truncate_inode_pages_range+0x48b/0xe30 [ 1431.798767][ T31] ? __pfx_truncate_inode_pages_range+0x10/0x10 [ 1431.805554][ T31] ? __pfx_call_function_single_prep_ipi+0x10/0x10 [ 1431.812323][ T31] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 1431.818935][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1431.824633][ T31] ? __pfx_has_bh_in_lru+0x10/0x10 [ 1431.829865][ T31] blkdev_flush_mapping+0x109/0x2f0 [ 1431.835550][ T31] bdev_release+0x417/0x650 [ 1431.840195][ T31] ? __pfx_blkdev_release+0x10/0x10 [ 1431.845632][ T31] blkdev_release+0x15/0x20 [ 1431.850422][ T31] __fput+0x44f/0xa70 [ 1431.854592][ T31] task_work_run+0x1d9/0x270 [ 1431.859291][ T31] ? __pfx_task_work_run+0x10/0x10 [ 1431.864995][ T31] ? do_raw_spin_unlock+0xf5/0x210 [ 1431.870217][ T31] do_exit+0x69b/0x2310 [ 1431.874739][ T31] ? cgroup1_freezing+0x20/0x350 [ 1431.879704][ T31] ? __pfx_do_exit+0x10/0x10 [ 1431.884428][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 1431.889681][ T31] do_group_exit+0x21b/0x2d0 [ 1431.894621][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1431.899929][ T31] get_signal+0x1284/0x1330 [ 1431.904660][ T31] arch_do_signal_or_restart+0xbc/0x830 [ 1431.910479][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1431.916939][ T31] ? ksys_read+0x1fc/0x270 [ 1431.921716][ T31] exit_to_user_mode_loop+0x86/0x480 [ 1431.927013][ T31] ? rcu_is_watching+0x15/0xb0 [ 1431.931883][ T31] do_syscall_64+0x2b7/0xf80 [ 1431.936712][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1431.942863][ T31] ? trace_irq_disable+0x37/0x100 [ 1431.947996][ T31] ? clear_bhb_loop+0x60/0xb0 [ 1431.953332][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1431.959238][ T31] RIP: 0033:0x7f38f18a7407 [ 1431.963793][ T31] RSP: 002b:00007fff75e3d6a0 EFLAGS: 00000202 ORIG_RAX: 0000000000000000 [ 1431.972472][ T31] RAX: fffffffffffffffc RBX: 00007f38f2060880 RCX: 00007f38f18a7407 [ 1431.980539][ T31] RDX: 0000000000000200 RSI: 00007f38f205f000 RDI: 0000000000000009 [ 1431.989337][ T31] RBP: 000055e1a4d2d050 R08: 0000000000000000 R09: 0000000000000000 [ 1431.997500][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 1432.005673][ T31] R13: 0000000000000000 R14: 000055e1a4d2e638 R15: 00007f38f218739c [ 1432.014367][ T31] [ 1432.017585][ T31] [ 1432.017585][ T31] Showing all locks held in the system: [ 1432.042097][ T31] 1 lock held by khungtaskd/31: [ 1432.070996][ T31] #0: ffffffff8e55a360 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1432.081908][ T31] 2 locks held by getty/5584: [ 1432.086687][ T31] #0: ffff88814e3a30a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1432.096768][ T31] #1: ffffc900036bb2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 1432.107812][ T31] 1 lock held by udevd/15483: [ 1432.112940][ T31] #0: ffff888028ac6358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_release+0x1a9/0x650 [ 1432.122998][ T31] 2 locks held by kworker/u8:7/16293: [ 1432.128622][ T31] #0: ffff88813fe69948 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0 [ 1432.141347][ T31] #1: ffffc9001cd37bc0 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0 [ 1432.154744][ T31] 2 locks held by syz.2.20613/28818: [ 1432.160072][ T31] #0: ffffffff8f9ac0c8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 1432.169225][ T31] #1: ffffffff8e560c78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 1432.180893][ T31] 2 locks held by dhcpcd/28830: [ 1432.185887][ T31] #0: ffff8880323f2260 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x33/0xe10 [ 1432.195974][ T31] #1: ffffffff8e560c78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 1432.207340][ T31] [ 1432.209798][ T31] ============================================= [ 1432.209798][ T31] [ 1432.218750][ T31] NMI backtrace for cpu 0 [ 1432.218769][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1432.218789][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1432.218801][ T31] Call Trace: [ 1432.218809][ T31] [ 1432.218817][ T31] dump_stack_lvl+0xe8/0x150 [ 1432.218847][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 1432.218875][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1432.218905][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1432.218933][ T31] sys_info+0x135/0x170 [ 1432.218955][ T31] watchdog+0xf90/0xfe0 [ 1432.218990][ T31] ? watchdog+0x209/0xfe0 [ 1432.219016][ T31] kthread+0x726/0x8b0 [ 1432.219041][ T31] ? __pfx_watchdog+0x10/0x10 [ 1432.219059][ T31] ? __pfx_kthread+0x10/0x10 [ 1432.219082][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1432.219110][ T31] ? __pfx_kthread+0x10/0x10 [ 1432.219131][ T31] ret_from_fork+0x51b/0xa40 [ 1432.219163][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1432.219189][ T31] ? __switch_to+0xc82/0x1410 [ 1432.219217][ T31] ? __pfx_kthread+0x10/0x10 [ 1432.219239][ T31] ret_from_fork_asm+0x1a/0x30 [ 1432.219280][ T31] [ 1432.219288][ T31] Sending NMI from CPU 0 to CPUs 1: [ 1432.341681][ C1] NMI backtrace for cpu 1 [ 1432.341700][ C1] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted syzkaller #0 PREEMPT(full) [ 1432.341719][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1432.341738][ C1] Workqueue: events_unbound toggle_allocation_gate [ 1432.341764][ C1] RIP: 0010:check_preemption_disabled+0x0/0xe0 [ 1432.341786][ C1] Code: c7 20 39 07 8c 48 c7 c6 60 39 07 8c eb 1c 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <55> 41 57 41 56 53 65 8b 05 c7 96 5b 07 65 8b 0d bc 96 5b 07 f7 c1 [ 1432.341800][ C1] RSP: 0018:ffffc90000117690 EFLAGS: 00000002 [ 1432.341813][ C1] RAX: 0000000000000000 RBX: 0000000000000202 RCX: 0000000080000001 [ 1432.341825][ C1] RDX: 0000000000000000 RSI: ffffffff8dce2879 RDI: ffffffff8c073980 [ 1432.341838][ C1] RBP: ffffc90000117810 R08: ffff88813fe64063 R09: 1ffff11027fcc80c [ 1432.341849][ C1] R10: dffffc0000000000 R11: ffffed1027fcc80d R12: dffffc0000000000 [ 1432.341861][ C1] R13: ffffffff8169dfe4 R14: ffffffff8e55a360 R15: ffff88801ce8db80 [ 1432.341873][ C1] FS: 0000000000000000(0000) GS:ffff8881257f5000(0000) knlGS:0000000000000000 [ 1432.341887][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1432.341899][ C1] CR2: 00007f82929e3358 CR3: 000000000e346000 CR4: 00000000003526f0 [ 1432.341916][ C1] Call Trace: [ 1432.341923][ C1] [ 1432.341930][ C1] lock_release+0xa1/0x3a0 [ 1432.341952][ C1] ? __kmalloc_node_noprof+0xfe/0x7f0 [ 1432.341967][ C1] ? do_raw_spin_unlock+0xf5/0x210 [ 1432.341987][ C1] ? __kmalloc_node_noprof+0xfe/0x7f0 [ 1432.342001][ C1] __text_poke+0x840/0x990 [ 1432.342022][ C1] ? __pfx_text_poke_memcpy+0x10/0x10 [ 1432.342039][ C1] ? rcu_is_watching+0x15/0xb0 [ 1432.342054][ C1] ? __kmalloc_node_noprof+0xfe/0x7f0 [ 1432.342069][ C1] ? __pfx___text_poke+0x10/0x10 [ 1432.342091][ C1] smp_text_poke_batch_finish+0xd36/0x1160 [ 1432.342115][ C1] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 1432.342136][ C1] ? arch_jump_label_transform_queue+0x97/0x110 [ 1432.342162][ C1] arch_jump_label_transform_apply+0x1c/0x30 [ 1432.342183][ C1] static_key_disable_cpuslocked+0xc5/0x1a0 [ 1432.342206][ C1] static_key_disable+0x1a/0x20 [ 1432.342225][ C1] toggle_allocation_gate+0x1fe/0x290 [ 1432.342242][ C1] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 1432.342259][ C1] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1432.342280][ C1] ? process_scheduled_works+0xa0f/0x17a0 [ 1432.342301][ C1] ? process_scheduled_works+0xa0f/0x17a0 [ 1432.342322][ C1] process_scheduled_works+0xaec/0x17a0 [ 1432.342356][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1432.342376][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 1432.342394][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1432.342409][ C1] ? schedule+0x90/0x360 [ 1432.342428][ C1] worker_thread+0xda6/0x1360 [ 1432.342461][ C1] kthread+0x726/0x8b0 [ 1432.342480][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1432.342501][ C1] ? __pfx_kthread+0x10/0x10 [ 1432.342519][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1432.342540][ C1] ? __pfx_kthread+0x10/0x10 [ 1432.342558][ C1] ret_from_fork+0x51b/0xa40 [ 1432.342580][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1432.342601][ C1] ? __switch_to+0xc82/0x1410 [ 1432.342622][ C1] ? __pfx_kthread+0x10/0x10 [ 1432.342640][ C1] ret_from_fork_asm+0x1a/0x30 [ 1432.342668][ C1] [ 1432.682431][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1432.689475][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1432.698704][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1432.708784][ T31] Call Trace: [ 1432.712088][ T31] [ 1432.715041][ T31] vpanic+0x1e0/0x670 [ 1432.719049][ T31] panic+0xc5/0xd0 [ 1432.722825][ T31] ? __pfx_panic+0x10/0x10 [ 1432.727361][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1432.732785][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 1432.738958][ T31] watchdog+0xfda/0xfe0 [ 1432.743130][ T31] ? watchdog+0x209/0xfe0 [ 1432.747772][ T31] kthread+0x726/0x8b0 [ 1432.751851][ T31] ? __pfx_watchdog+0x10/0x10 [ 1432.756540][ T31] ? __pfx_kthread+0x10/0x10 [ 1432.761158][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1432.766550][ T31] ? __pfx_kthread+0x10/0x10 [ 1432.771236][ T31] ret_from_fork+0x51b/0xa40 [ 1432.775849][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1432.780987][ T31] ? __switch_to+0xc82/0x1410 [ 1432.786117][ T31] ? __pfx_kthread+0x10/0x10 [ 1432.790997][ T31] ret_from_fork_asm+0x1a/0x30 [ 1432.795923][ T31] [ 1432.799520][ T31] Kernel Offset: disabled [ 1432.803848][ T31] Rebooting in 86400 seconds..