last executing test programs: 13.750831662s ago: executing program 2 (id=6485): bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x13, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000007301bd000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0xfdff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) 13.631570157s ago: executing program 2 (id=6487): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5c01000010000100feffffff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000940)=ANY=[@ANYBLOB="400100001a000100feffffff00010000ac1e0101000000000000000000000000fc010000000000000000000000000001000107174e2300050a0000203a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000fc010000000000000000000000000001fe000000000000009201000000000010a39b000000000800ffff0000000000001c250800000000000500000000000000fcffffffffffffff0400000000000100ffffffffffffffff00000000000000001f00000000000000fefffffffffffffffefffffff9030000000000007e00000005350000020001002000000000000000480003006465666c61746500000000000200000000000000000000000000000000000000000000000000000000000000000035d200"/233], 0x140}}, 0x844) 13.437255486s ago: executing program 2 (id=6490): ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000200)={0xffffffffffffffff, &(0x7f0000000100)='+\xee@,\x00', 0x341000, &(0x7f0000000140)={@align=0x4df, {0x4, 0x2, 0x2, 0x5}}, 0x8, &(0x7f0000000180), &(0x7f00000001c0)=0x2}) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000280), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x24}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000600)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x64, r1, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6gre0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x0) r2 = socket$l2tp(0x2, 0x2, 0x73) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_DISABLE(r3, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)={0x1dc, r4, 0x25e6b6d74a7be5e8, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x68, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xbe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc97b}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0xd4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "094ac6698440256051aa5036fd5c5be47a23cd551fcaa26f93f2edb12f2ee7"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0x72, 0x3, "cc8ec3c60a042866f13260a5fae870194298746c3e3ed482d7a08a34e8f0ce375db7ad5f688369ae79338947662e5e8ed2e5ce284012e3e21f785baecd6e01b093b2043800ce29f3f6c49cb8bafdfb4a28e0076a522d43723007702db076ef3d44958c3177dad85307bb5111c146"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2f}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x80000001}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x36}, @TIPC_NLA_PUBL_UPPER={0x8}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x19d3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7ffffffd}]}, @TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x100}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7b1f75}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0xfffffffffffffef4, 0x2, 0x61d8}]}]}, 0x1dc}, 0x1, 0x0, 0x0, 0xdcbfa4b5e17abc9d}, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007ba200000000000007020000f8ffffffb703f237000008000000b7040000000000008500000c03000000950082efd6170000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) close(r5) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(r5) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffffc}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a40)={{r7, 0xffffffffffffffff}, &(0x7f00000009c0), &(0x7f0000000a00)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r8, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) r9 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[@ANYBLOB="700000001200030200"/56, @ANYRES32=0x0, @ANYBLOB="814b00000000000000000000000000002100010008081c000a"], 0x70}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x6, &(0x7f0000000080)=ANY=[@ANYBLOB="18020000b4b2000000000000000000008510000001000000950000000000000085000000ad00000095"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x2a, &(0x7f0000001300)=""/156, 0x41000, 0xa}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r10, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'virt_wifi0\x00', &(0x7f0000000040)=@ethtool_ts_info={0x2c}}) 13.18006298s ago: executing program 2 (id=6495): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f0000000340)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x240}, {}, {}, {}, {}, {0x7, 0x0, 0x0, 0x4, 0x0, 0x900}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x6a}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 12.940548921s ago: executing program 2 (id=6499): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140), 0x200002, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x6, @loopback}, 0x2, 0xfffffffd, 0x3}}, 0x2e) r3 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_BINDTODEVICE_wg(r3, 0x1, 0x19, &(0x7f0000000080)='wg0\x00', 0x4) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(blowfish)\x00'}, 0x58) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000200)="ad49d856a7170dc102e7c0119678c124e5a18299b72e2dd27c867f8ee6cb103ef6511e890f4835a90fb9e3e244d299b00b5037e842880fafa1e3c0e7140606cea389bdccb78c038f323944c010f0de651b4f89039561e3ed88cc842c7e2755a468c43605cb2b3a73ffee07917663e3cfecfac9829f64341645da78e00ed0a25dcb743f27dc6ba79c09801e09b82bcb625168911773384c9a7cdb5ed9a9a40067c3b2f7087313ebb7b5852f9d6988fbb743bd3ebb7ddec1e4ccd6cef05da353d241d606d15dd84e053d98549645bfea4399b9490c7e2efc059050f24c71c57bd4ed3c", 0xe2) r5 = accept4(r4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r5) close(r1) socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000180)=@pppol2tp={0x18, 0x1, {0x0, r5, {0x2, 0x4e20, @rand_addr=0x64010100}, 0x4, 0x1, 0x2, 0x4}}, 0x26) close(0x3) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r6, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)=@newtaction={0x18, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x37}]}, 0x18}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x5, 0x2, 0xff, 0x2, 0x4, 0xa001}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r7, 0x8b32, &(0x7f0000000040)) openat$cgroup_type(r0, &(0x7f00000000c0), 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 11.69667155s ago: executing program 2 (id=6510): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000300000001000000000000010000000000000000000000000000000105000000100000000000000000000003000000000100000002"], 0x0, 0x53, 0x0, 0x1}, 0x28) r2 = socket$kcm(0xa, 0x2, 0x0) getsockopt$inet6_udp_int(r1, 0x11, 0x65, &(0x7f0000000080), &(0x7f0000000100)=0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b80)=ANY=[@ANYBLOB="3800000040000100feffffffffdbdf25017c0000040042800c00018006000600800a0000140002800c000680080001"], 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x890b, &(0x7f0000000000)) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x9}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r4, &(0x7f0000000bc0), &(0x7f0000000c00)=@udp6=r1}, 0x20) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=ANY=[@ANYBLOB="600000001200050926bd7000fedbdf2521094b004e224e26fcffffff23090000000000000600000001040000040000000300000002000000", @ANYRES32=0x0, @ANYBLOB="000001000520000031000000040000001400010007141400029c"], 0x60}, 0x1, 0x0, 0x0, 0x2000010}, 0x20000000) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) 4.648322814s ago: executing program 1 (id=6578): ppoll(0x0, 0x0, &(0x7f0000002640)={0x0, 0x3938700}, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000040000701fefffff8ff000000017c0000040042800c00018006000600800a000014000280100014800c0016800800b600884709"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc800) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r3 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r1, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xffffffffffffff05, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x10) 4.396966893s ago: executing program 0 (id=6579): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'netdevsim0\x00', 0x0}) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c0100001000130700000000ffdbdf25fc010000000000000000000000000000ff0200000000000000000000000000010004fffe4e2100020000000021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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", @ANYRES32=r3, @ANYRES16=r0], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) 4.256677237s ago: executing program 0 (id=6580): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x6, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000002c0)={"6b2f3b6a399bc2f1af59106a2a1667f8", 0x0, 0x0, {0x9, 0x9d5f}, {0xd, 0x41}, 0xffff, [0xde99, 0x8e9, 0xc, 0x1d, 0x43, 0xfffffffffffffffb, 0x28, 0x6, 0x34e0000, 0x7ffffffffffffffb, 0x9, 0x5, 0x6, 0x8, 0x7, 0x4]}) write$cgroup_subtree(r2, &(0x7f0000000280)=ANY=[], 0x10448) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x91}, 0x24044884) r9 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000040)={'lo\x00', {0x2, 0x4e22, @empty=0x2000000}}) close(0xffffffffffffffff) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0e00f46ff251e66d9119886cc0ae1c67c5d20be9bd", @ANYRES16=r10, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r12, @ANYBLOB], 0x1c}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, 0x0, 0x5a) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x11fe726f7e78fcf0}, 0x28) 4.256344394s ago: executing program 1 (id=6581): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000480)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f00000001c0)=@assoc_value={r2}, &(0x7f0000000200)=0x8) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000040)={0x6, {{0x2, 0x4e22, @rand_addr=0x64010101}}}, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x7}}]}}]}, 0x48}}, 0x4c840) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x50, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xfff3, 0xfff3}, {0x0, 0xfff3}, {0x2, 0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8847}, @TCA_FLOWER_KEY_MPLS_BOS={0x5}, @TCA_FLOWER_KEY_ARP_THA_MASK={0xa, 0x42, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 4.195337295s ago: executing program 1 (id=6582): syz_emit_ethernet(0x7a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd6000000000442f00fe8000000000000000000000000000bbfc0200000000000000000002000000002421880b000000030000002100"], 0x0) 4.034636938s ago: executing program 1 (id=6584): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5c01000010000100feffffff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000940)=ANY=[@ANYBLOB="400100001a000100feffffff00010000ac1e0101000000000000000000000000fc010000000000000000000000000001000107174e2300050a0000203a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000fc010000000000000000000000000001fe000000000000009201000000000010a39b000000000800ffff0000000000001c250800000000000500000000000000fcffffffffffffff0400000000000000ffffffffffffffff00000000000000001f00000000000000fefffffffffffffffefffffff9030000000000007e00000005350000020001002000000000000000480003006465666c61746500000000000200000000000000000000000000000000000000000000000000000000000000000035d200"/233], 0x140}, 0x1, 0x80ff}, 0x844) 3.99403089s ago: executing program 1 (id=6586): socket$inet_smc(0x2b, 0x1, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000600)={0x0, 0x1}, &(0x7f0000000640)=0x8) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = accept4$tipc(r2, &(0x7f0000000500)=@name, &(0x7f0000000540)=0x10, 0x80800) getsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f0000000580), &(0x7f00000005c0)=0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x2, 0x5aa, 0x80000001, 0x5, 0x8104, r1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x5, 0x0, @value=r2}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x26, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x3ff}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6}, @cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffffe}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @map_idx={0x18, 0x6, 0x5, 0x0, 0xd}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000200)='GPL\x00', 0xc, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f0000000240)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x3, 0xe, 0xb}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000380)=[r2, r1, r1, r1, r2, r4], &(0x7f00000003c0)=[{0x5, 0x3, 0x4, 0x4}, {0x1, 0x5, 0x8}, {0x2, 0x1, 0xe, 0xa}, {0x1, 0x1, 0xc, 0x8}, {0x2, 0x4, 0xb, 0x4}]}, 0x94) write(r2, &(0x7f0000000340), 0x11000) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0xd, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000001000000000000000000000e18150000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000014000000850000000500000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r6, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x5, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x400000f, 0x4, 0x0, 0x7fffffff}, 0x0, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 3.565426354s ago: executing program 4 (id=6594): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="b8000000190001000000000000000100e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="080000000000ff00100000000000000002000000010000800000000000fcff00ff0f00000000000073b4ffffffffffff00ffffffffffffff0000000000000000000000001000000000000000000000200200000000000000ffffffffffffffffffffffff"], 0xb8}}, 0x4004) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000020000000000000000000000000000000a00000087"], 0xb8}}, 0x2c000010) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0xfffffffffffffffb}, {0x0, 0x40000000000000, 0x200000000000000}, 0xfffffffe}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) 3.535397362s ago: executing program 4 (id=6596): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a40), r0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1f, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b00)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x1, 0x0, &(0x7f0000000040)="03827307167f209b8157f08e2d9fc91800", 0x0, 0x0, 0x0, 0xfffffffe}, 0x4) r3 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000080)="be2b1cc591f7da37ead6efb8383f73fb67e329f87c6d958330ec68b60c20a0cc58d3ddcb5fbdd4de982878c95a770c36b3671619c42d0afdbce3f7cf70c978b2ad16a3623339eff9d591712c79a4d34406083ff547eb6513ca54b2364b5fd578891e1560ec8ce080fcac17e264429c30e4ddde68827b5efe15cb078a407256a110918f941f9ce0863530fbe2b3f014c7d7a94f2ba89e", 0x96) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x28, r1, 0x901, 0x70bd2b, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x20000080) 3.44850046s ago: executing program 4 (id=6598): socket$inet_smc(0x2b, 0x1, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x11000) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x400000f, 0x4, 0x0, 0x7fffffff}, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) (fail_nth: 4) 2.84863383s ago: executing program 3 (id=6599): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'netdevsim0\x00', 0x0}) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c0100001000130700000000ffdbdf25fc010000000000000000000000000000ff0200000000000000000000000000010004fffe4e2100020000000021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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", @ANYRES32=r2], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) 2.794804529s ago: executing program 1 (id=6600): syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r0, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000001c0)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x36) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000300000000000000f7ffffff850000007b00000085000000d000000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r3}, 0xc) 2.685523317s ago: executing program 3 (id=6601): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff000000000300000000000000000000000200000000000000000000000000000a030000000000001000000002"], 0x0, 0x56}, 0x20) 2.612336555s ago: executing program 3 (id=6602): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3f0, 0x220, 0x308, 0x220, 0x308, 0x308, 0x308, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0xffffff00, 0x1, 0x0, {@empty, {[0x0, 0x0, 0xff]}}, {@mac=@local}, 0x0, 0x7, 0x2, 0x0, 0x800, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00', {}, {}, 0x0, 0x180}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @loopback, @broadcast, 0x6, 0xfffffffe}}}, {{@arp={@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101, 0x0, 0x0, 0x0, 0xfd, {}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00', {}, {}, 0x0, 0xc}, 0xc0, 0x220}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}, @broadcast, @dev={0xac, 0x14, 0x14, 0x12}, 0x1, 0x308}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x9}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) 2.555634813s ago: executing program 4 (id=6603): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffc}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x201}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94) 2.501271382s ago: executing program 3 (id=6604): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000001c0)={0x5813}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000001e008d2a22000000000000000a0000"], 0x1c}}, 0x0) 2.461017865s ago: executing program 4 (id=6605): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) (async) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10) sendmsg$inet(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000780)='}', 0x1}], 0x1}, 0x0) (async) sendmsg$inet(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000780)='}', 0x1}], 0x1}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f00000002c0)=r0}, 0x20) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) recvmsg$unix(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000800)=""/229, 0x8ec1}], 0x1}, 0x2002) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[], 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r5}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0920000000000035090100000008009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000020000b7050000080000001c20000000000000bf980000000000005608000000000000850000001b000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) 2.454584279s ago: executing program 3 (id=6606): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'netdevsim0\x00', 0x0}) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c0100001000130700000000ffdbdf25fc010000000000000000000000000000ff0200000000000000000000000000010004fffe4e2100020000000021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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", @ANYRES32=r3, @ANYRES16=r0], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) 2.33648132s ago: executing program 4 (id=6607): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006140)=@newtfilter={0x1730, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x5c, 0x2, [@TCA_U32_ACT={0x34, 0x7, [@m_skbedit={0x30, 0x1f, 0x0, 0x0, {{0xc}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x9, [{0xfffffffc, 0xf1, 0x4, 0x1}]}}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0x8}}, @TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_CHAIN={0x8, 0xb, 0x2c4d}, @filter_kind_options=@f_fw={{0x7}, {0x1688, 0x2, [@TCA_FW_MASK={0x8, 0x5, 0x149b}, @TCA_FW_ACT={0xdd0, 0x4, [@m_nat={0x38, 0x3, 0x0, 0x0, {{0x8}, {0x4}, {0xf, 0x6, "219df32bd516f717ff19f5"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_bpf={0x54, 0x19, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x14, 0x4, [{0xff, 0x6, 0xe4, 0x2}, {0x4, 0x8, 0xf7, 0x400}]}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x6}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_ct={0xc34, 0xd, 0x0, 0x0, {{0x7}, {0x14, 0x2, 0x0, 0x1, [@TCA_CT_ACTION={0x6, 0x3, 0x31}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @local}]}, {0xbf9, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_tunnel_key={0x64, 0x12, 0x0, 0x0, {{0xf}, {0xc, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e22}]}, {0x2c, 0x6, "a36ea6667b899437da660eb4a5a538af527511d43245b2d62eeb90075e0068b419b750cf591bb989"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_bpf={0x78, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4d, 0x6, "ff5720d528074f216fdffb3fd639fcbe2c4b65092422b5f17068a3c02f666718a10c54951e2709716f192eddc92252f9bb84e218be065913e2a0241a1352dd115e5aa32894c1fbdb40"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_simple={0x30, 0x13, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x3}}}}]}, @TCA_FW_CLASSID={0x8, 0x1, {0xc, 0x4}}, @TCA_FW_POLICE={0x4}, @TCA_FW_POLICE={0x898, 0x2, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xee}, @TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x20000001, 0x8, 0x7, 0x8, {0x2, 0x1, 0x5, 0x81, 0x6}, {0x7f, 0x2, 0x4, 0xc, 0x6, 0x9}, 0x5, 0xbef, 0x4}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0x80000000, 0x5, 0x6, 0xffff192f, 0x6, 0x3, 0xfffffffe, 0x6, 0x8, 0x9, 0x4, 0xfffffffd, 0x7, 0x7, 0x9, 0x2, 0x7fffffff, 0x7, 0x2, 0x9, 0x2, 0x40, 0xfffffffe, 0x8, 0x6, 0x2, 0xfffffffd, 0x7, 0x2, 0x8, 0x6, 0x0, 0xf, 0xffffd1b0, 0x850, 0x4, 0x8, 0x6, 0x1, 0x10, 0x401, 0x4, 0xa, 0x7, 0x3, 0x3, 0x0, 0x1, 0xd14d, 0x74e2b1e7, 0xa, 0x4, 0xfffffff8, 0x6, 0x400, 0xd41, 0x1, 0x0, 0xb, 0xea, 0x200, 0xc, 0x100, 0x316, 0x1b, 0xfffffffc, 0x1, 0x0, 0x0, 0xfffffffc, 0x9, 0xfffffff9, 0x81, 0x6, 0x3, 0x280000, 0x2, 0x8, 0x7, 0x8, 0x5, 0x3, 0x84b, 0xef94, 0x2, 0x9, 0x11f47e5b, 0x4, 0x3, 0x22, 0x80, 0x8, 0x3, 0x1ff, 0x1, 0x6, 0x4, 0x7, 0xffffffff, 0x6, 0x7, 0x69, 0x5, 0x5, 0x7, 0x9, 0xc, 0x0, 0x0, 0x200, 0xfff, 0x0, 0x2, 0x1, 0x92, 0x7, 0x3bd, 0x40, 0x9, 0x6, 0x7, 0x1, 0xdd, 0xa054, 0x9de, 0x81, 0x3, 0x5285, 0x1, 0x7, 0xfffffff9, 0x80, 0x100, 0x5, 0x5, 0xfffffff5, 0x5, 0xfffffffa, 0x0, 0x3, 0x1, 0x9, 0x7, 0x9, 0x3, 0x7f, 0x5, 0x60, 0x9, 0xd, 0x8, 0x7, 0x2, 0x8b, 0x0, 0x8, 0x5, 0x4, 0x80000000, 0x7, 0x314, 0x1, 0x4, 0x0, 0x2b, 0x7f, 0x100, 0x8, 0x86, 0xb2e, 0x80, 0x997, 0x2, 0x3662af3a, 0x2, 0x9, 0x9, 0x1, 0x8001, 0x9, 0x2, 0x5d44, 0x80, 0x3ff, 0x7, 0x3, 0x2, 0x5, 0x5, 0xef9, 0x2, 0x7, 0x4, 0xa, 0x6, 0x3, 0x3, 0x401, 0x4, 0x2, 0xf, 0x8, 0x6, 0x890, 0x5, 0x3d, 0x6, 0x0, 0x8, 0x2, 0x8, 0x2869, 0x821, 0xf46a, 0xc, 0x6, 0xe5, 0x1, 0x7, 0xecb3, 0xa2b, 0xa4eb, 0x8, 0x0, 0x80000000, 0x6, 0x3, 0x3, 0x9, 0xffff, 0x2, 0xffffff40, 0x6fb, 0xd6, 0x64, 0xdabc, 0x7, 0x4, 0x3, 0x560, 0x8, 0xa, 0xc, 0x1, 0xb, 0x9, 0x4, 0xb, 0x8, 0xf, 0xb, 0x8, 0x5, 0x6, 0x5]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0x2, 0x1, 0x10000, 0x9, 0x9, 0x7, 0x200, 0x8, 0xfffff800, 0xd3, 0x1, 0x5, 0x4, 0xe, 0x5, 0x8, 0x6, 0x0, 0xe, 0x8, 0xfffff000, 0xfffffff9, 0xd6, 0x5, 0x36, 0x5283, 0x6, 0x7, 0x8, 0xffffe32c, 0x8, 0x4, 0x9c00, 0x3, 0x2, 0xd, 0x8e1, 0x4, 0x600000, 0xfffffff7, 0x7, 0xa654, 0xfd3a64a, 0xdf, 0xd1e, 0x9, 0xc8, 0xfffffff7, 0x0, 0x3, 0xfff, 0x8, 0xffffa84f, 0x7, 0x419, 0x8001, 0x657, 0x6, 0xe, 0x4, 0x7fffffff, 0x8, 0x1, 0x7f, 0xf5, 0x3, 0x7, 0x10, 0x4, 0x4, 0x5, 0x9, 0x6f9b, 0xfd97, 0x1, 0x4, 0xde, 0x10, 0x8000, 0x10001, 0x80000000, 0x36b, 0x2, 0x3ff, 0x1c6f, 0x5, 0x8, 0x7, 0x5, 0x10, 0x4, 0x4, 0x4, 0x9a, 0x5, 0x1000, 0x7f, 0x1a04, 0x4, 0x3, 0x9, 0x800, 0x6, 0xe, 0x5, 0x2, 0xb, 0x2, 0x0, 0x8, 0xe830, 0x9, 0x3, 0x7, 0x54, 0x9, 0x3, 0x5, 0x3343, 0x3, 0xa1c, 0x200, 0x6, 0x10000, 0xfffffff8, 0x5, 0x1, 0x10, 0x7, 0x7, 0x6, 0x7c0e, 0x5, 0x33, 0x0, 0xfff, 0x5, 0x400, 0x80000001, 0x800, 0x1, 0x5, 0x9, 0x8, 0xbb, 0x2, 0x5, 0x600000, 0xbc, 0x8, 0xffffffff, 0x0, 0xffffffff, 0x8000, 0x1, 0xe7, 0x5, 0xe0, 0x6, 0x8, 0x240, 0x4, 0x7, 0x1, 0x3, 0xf, 0x5, 0x3, 0xf36c, 0x9, 0x4, 0xffff7fff, 0x2, 0x200, 0x76, 0x2, 0x5, 0x40000000, 0xfcb, 0x7, 0x26dc0f07, 0x0, 0x2, 0x2, 0x0, 0x0, 0x1, 0x5, 0x448, 0xab0a, 0x8, 0x9, 0x7fffffff, 0x8f, 0xfffffffd, 0x0, 0x5853ceb3, 0x81, 0x774f1fc6, 0x9, 0x1, 0xfffffff7, 0x1000, 0xffffffff, 0x9, 0xc425, 0x108f, 0x1, 0x8, 0x95a, 0xc0f, 0x2, 0x0, 0xb, 0x1000000, 0xffffff07, 0x3872268b, 0xfff, 0x7, 0x53, 0x101, 0x6, 0x6, 0x5dc3, 0x2, 0x9, 0x1, 0x3, 0x3, 0x6, 0x4, 0x1, 0x400, 0x0, 0x8, 0x4, 0x7, 0x8, 0x9, 0x5, 0xa, 0xbd1, 0x4, 0xe5a, 0xfffffffe, 0x6, 0xd6, 0x400, 0xcf, 0x2, 0xa2, 0x3, 0x0, 0x7, 0x1]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x6}, @TCA_POLICE_TBF={0x3c, 0x1, {0x6, 0x10000000, 0x8, 0x8000, 0x0, {0x2, 0x0, 0x4, 0x4, 0x2, 0xfffffff1}, {0x9, 0x1, 0x2, 0xffff, 0x9, 0x1}, 0xc, 0x2, 0x9234}}]}, @TCA_FW_MASK={0x8, 0x5, 0xfffffff9}]}}]}, 0x1730}}, 0x24040084) 2.329725739s ago: executing program 3 (id=6608): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0xd9e, 0x4) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) 1.202926947s ago: executing program 0 (id=6609): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="0200000004000000060000000500000000"], 0x48) bpf$ENABLE_STATS(0x20, &(0x7f0000000000), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000000c00000000000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001200)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f07df33c9f7b986", 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 999.785443ms ago: executing program 0 (id=6610): socket$inet_smc(0x2b, 0x1, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x11000) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x400000f, 0x4, 0x0, 0x7fffffff}, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x1000000000000000) 48.902566ms ago: executing program 0 (id=6611): r0 = socket$inet6(0xa, 0x3, 0x6) getsockopt$inet6_opts(r0, 0x29, 0x3a, 0x0, &(0x7f0000000100)) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x1000) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="18910000000000bdd409730000212ba9cada248ef9008000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0xe80, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) syz_emit_ethernet(0x4a, &(0x7f0000004180)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6000001f00140600fe8000000000000000000000000000aafe8000000000000000000800000000aa80004001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5042010090780000"], 0x0) 0s ago: executing program 0 (id=6612): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xe, 0xf}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x10000, 0xb, 0x1}}}}]}, 0x40}}, 0x4000010) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES64=r0, @ANYRES16=r1, @ANYBLOB="01002ebd7000000000001400000018000180140002006e657405000000696d3000000000000005000c0001000000"], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e20, @private=0xa010100}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r4, 0x84, 0x70, &(0x7f0000000540)={r6, @in6={{0xa, 0x4e20, 0x4, @mcast2, 0xd3}}, [0x9b, 0x9, 0x0, 0x6, 0x9, 0x3ff, 0x7a6f, 0xecf9, 0xe8cc, 0x388, 0x7, 0x5, 0x2, 0xf90, 0x10001]}, &(0x7f0000000640)=0x100) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f0000000080)={r6, 0x3}, 0x8) kernel console output (not intermixed with test programs): parsing attributes in process `syz.2.4642'. [ 557.422718][T22387] netlink: 17 bytes leftover after parsing attributes in process `syz.3.4647'. [ 557.645136][T22398] netlink: 'syz.1.4648': attribute type 11 has an invalid length. [ 558.254545][T22423] macvlan2: entered promiscuous mode [ 558.265834][T22423] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 558.869533][T22454] netdevsim netdevsim1: Direct firmware load for . failed with error -2 [ 558.879015][T22454] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 559.478393][T22376] Bluetooth: hci5: Opcode 0x0c1a failed: -110 [ 559.478436][ T50] Bluetooth: hci5: command 0x0406 tx timeout [ 559.493848][T22376] Bluetooth: hci5: Error when powering off device on rfkill (-110) [ 560.116547][T22496] __nla_validate_parse: 1 callbacks suppressed [ 560.116562][T22496] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4683'. [ 560.184269][T22498] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4684'. [ 560.186584][T22376] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 560.201340][T22376] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 560.233998][T22376] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 560.241284][T22376] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 560.254802][T22376] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 560.270209][T22376] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 561.040974][T22540] tipc: Enabling of bearer rejected, failed to enable media [ 561.078774][T22540] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4694'. [ 561.161342][T22549] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4697'. [ 561.189096][T22538] mac80211_hwsim hwsim24 syzkaller0: Caught tx_queue_len zero misconfig [ 561.202501][T22546] netlink: 'syz.4.4694': attribute type 1 has an invalid length. [ 561.224977][T22549] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4697'. [ 561.459125][T22553] lo speed is unknown, defaulting to 1000 [ 561.639724][T22543] net_ratelimit: 4576 callbacks suppressed [ 561.639748][T22543] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 561.656051][T22562] mac80211_hwsim hwsim24 syzkaller0: entered promiscuous mode [ 561.678280][T22543] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4695'. [ 561.693539][T22562] mac80211_hwsim hwsim24 syzkaller0: entered allmulticast mode [ 561.798046][T22567] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4702'. [ 561.961064][T22567] veth5: entered promiscuous mode [ 561.997180][T22574] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4704'. [ 562.069069][T22575] netlink: 'syz.3.4704': attribute type 1 has an invalid length. [ 562.145562][T22575] 8021q: adding VLAN 0 to HW filter on device bond4 [ 562.166725][T22584] netlink: 'syz.2.4706': attribute type 1 has an invalid length. [ 562.237738][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 562.246009][ C0] lec:lec_tx_timeout: lec0 [ 562.250830][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 562.303018][T22584] 8021q: adding VLAN 0 to HW filter on device bond2 [ 562.339901][T22593] bond2: up delay (1076) is not a multiple of miimon (100), value rounded to 1000 ms [ 562.369374][T22593] bond2: entered allmulticast mode [ 562.388606][T22589] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4707'. [ 562.456262][T22584] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 562.636732][T22608] macvlan2: entered promiscuous mode [ 562.663133][T22608] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 562.826186][T22613] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4712'. [ 563.170375][ T1737] block nbd3: Possible stuck request ffff888027645240: control (read@1024,1024B). Runtime 150 seconds [ 563.181754][ T1737] block nbd3: Possible stuck request ffff888027630000: control (read@2048,1024B). Runtime 150 seconds [ 563.192953][ T1737] block nbd3: Possible stuck request ffff8880276301c0: control (read@3072,1024B). Runtime 150 seconds [ 563.204123][ T1737] block nbd3: Possible stuck request ffff888027645080: control (read@0,1024B). Runtime 150 seconds [ 563.221599][T22622] lo speed is unknown, defaulting to 1000 [ 563.229905][T22626] atomic_op ffff8880331b6998 conn xmit_atomic 0000000000000000 [ 563.238444][T22626] sctp: [Deprecated]: syz.4.4717 (pid 22626) Use of struct sctp_assoc_value in delayed_ack socket option. [ 563.238444][T22626] Use struct sctp_sack_info instead [ 563.459873][ T6088] IPVS: starting estimator thread 0... [ 563.485268][T22631] netlink: 'syz.4.4721': attribute type 4 has an invalid length. [ 563.511395][T22631] netlink: 'syz.4.4721': attribute type 4 has an invalid length. [ 563.523609][ T7960] lo speed is unknown, defaulting to 1000 [ 563.558140][ T7960] syz2: Port: 1 Link ACTIVE [ 563.566044][T22636] IPVS: using max 26 ests per chain, 62400 per kthread [ 563.965087][T22649] lo speed is unknown, defaulting to 1000 [ 565.119266][T22720] __nla_validate_parse: 6 callbacks suppressed [ 565.120284][T22720] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4749'. [ 565.158308][T22720] netlink: 104 bytes leftover after parsing attributes in process `syz.3.4749'. [ 565.295666][T22728] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4752'. [ 565.419622][T22731] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.4754'. [ 565.720756][T22744] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4757'. [ 565.854402][T22728] bridge0: port 2(bridge_slave_1) entered disabled state [ 565.863761][T22728] bridge0: port 1(bridge_slave_0) entered disabled state [ 566.415278][T22728] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 566.468047][T22728] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 566.540607][T22728] hsr0: left promiscuous mode [ 566.854268][ T1148] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 566.881586][ T1148] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.917374][ T1148] netdevsim netdevsim0 eth0: unset [1, 1] type 2 family 0 port 256 - 0 [ 566.952538][ T1148] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 566.982360][ T1148] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.014419][ T1148] netdevsim netdevsim0 eth1: unset [1, 1] type 2 family 0 port 256 - 0 [ 567.042684][ T1148] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 567.069894][ T1148] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.102688][ T1148] netdevsim netdevsim0 eth2: unset [1, 1] type 2 family 0 port 256 - 0 [ 567.115706][T22772] netlink: 'syz.1.4763': attribute type 1 has an invalid length. [ 567.131776][ T1148] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 567.155099][ T1148] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.188759][ T1148] netdevsim netdevsim0 eth3: unset [1, 1] type 2 family 0 port 256 - 0 [ 567.257680][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 567.265806][ C0] lec:lec_tx_timeout: lec0 [ 567.271000][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 567.412147][T22772] bond1: entered promiscuous mode [ 567.430153][T22772] 8021q: adding VLAN 0 to HW filter on device bond1 [ 567.863681][T22806] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.4775'. [ 567.931768][T22809] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4777'. [ 567.984596][T22784] ipvlan2: entered promiscuous mode [ 568.005912][T22790] bond1: (slave bridge4): making interface the new active one [ 568.014586][T22790] bridge4: entered promiscuous mode [ 568.040651][T22790] bond1: (slave bridge4): Enslaving as an active interface with an up link [ 568.093134][T22811] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4777'. [ 568.364421][T22827] lo speed is unknown, defaulting to 1000 [ 568.876933][T22862] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.4791'. [ 569.171406][T22871] lo speed is unknown, defaulting to 1000 [ 569.219290][T22873] netdevsim netdevsim2: Direct firmware load for . failed with error -2 [ 569.258656][T22873] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 569.714113][T22878] lo speed is unknown, defaulting to 1000 [ 569.791106][T22885] netlink: 'syz.1.4796': attribute type 21 has an invalid length. [ 569.853160][T22885] netlink: 156 bytes leftover after parsing attributes in process `syz.1.4796'. [ 570.472476][ T30] audit: type=1804 audit(1776906938.049:4): pid=22912 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.4805" name="/newroot/404/memory.events" dev="tmpfs" ino=2081 res=1 errno=0 [ 570.538924][ T30] audit: type=1800 audit(1776906938.049:5): pid=22912 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4805" name="memory.events" dev="tmpfs" ino=2081 res=0 errno=0 [ 570.643928][T22912] bond3: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 570.662136][T22912] bond3 (unregistering): Released all slaves [ 570.714923][T22925] __nla_validate_parse: 1 callbacks suppressed [ 570.714944][T22925] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4810'. [ 571.012562][T22936] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4812'. [ 571.346982][T22929] veth3: entered allmulticast mode [ 571.582523][T22960] netlink: 168 bytes leftover after parsing attributes in process `syz.3.4823'. [ 571.824506][T22972] netlink: 'syz.1.4825': attribute type 1 has an invalid length. [ 571.890607][T22972] 8021q: adding VLAN 0 to HW filter on device bond2 [ 571.908269][T22970] lo: Caught tx_queue_len zero misconfig [ 571.919005][T22978] netlink: 220 bytes leftover after parsing attributes in process `syz.4.4826'. [ 571.954805][T22972] vlan2: entered allmulticast mode [ 571.969074][T22972] bond2: entered allmulticast mode [ 572.004970][T22980] bond2: (slave geneve2): making interface the new active one [ 572.015797][T22980] geneve2: entered allmulticast mode [ 572.024625][T22980] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 572.277736][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 572.286001][ C0] lec:lec_tx_timeout: lec0 [ 572.291066][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 572.521345][T22994] lo speed is unknown, defaulting to 1000 [ 572.729181][T23012] FAULT_INJECTION: forcing a failure. [ 572.729181][T23012] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 572.776526][T23012] CPU: 1 UID: 0 PID: 23012 Comm: syz.0.4835 Not tainted syzkaller #0 PREEMPT(full) [ 572.776557][T23012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 572.776571][T23012] Call Trace: [ 572.776580][T23012] [ 572.776590][T23012] dump_stack_lvl+0xe8/0x150 [ 572.776635][T23012] should_fail_ex+0x412/0x560 [ 572.776673][T23012] _copy_from_user+0x2d/0xb0 [ 572.776696][T23012] __sys_sendto+0x2b0/0x710 [ 572.776730][T23012] ? __pfx___sys_sendto+0x10/0x10 [ 572.776758][T23012] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 572.776800][T23012] ? __fget_files+0x3a0/0x420 [ 572.776841][T23012] ? ksys_write+0x242/0x270 [ 572.776875][T23012] ? __pfx_ksys_write+0x10/0x10 [ 572.776912][T23012] __x64_sys_sendto+0xde/0x100 [ 572.776943][T23012] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 572.776967][T23012] do_syscall_64+0x15f/0xf80 [ 572.776992][T23012] ? trace_irq_disable+0x3b/0x140 [ 572.777015][T23012] ? clear_bhb_loop+0x40/0x90 [ 572.777041][T23012] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 572.777063][T23012] RIP: 0033:0x7efeddf9c819 [ 572.777083][T23012] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 572.777102][T23012] RSP: 002b:00007efedeec8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 572.777125][T23012] RAX: ffffffffffffffda RBX: 00007efede215fa0 RCX: 00007efeddf9c819 [ 572.777141][T23012] RDX: 0000000000000004 RSI: 00002000000000c0 RDI: 0000000000000003 [ 572.777155][T23012] RBP: 00007efedeec8090 R08: 0000200000000080 R09: 0000000000000014 [ 572.777170][T23012] R10: 0000000000000b01 R11: 0000000000000246 R12: 0000000000000001 [ 572.777183][T23012] R13: 00007efede216038 R14: 00007efede215fa0 R15: 00007ffd2fa5b518 [ 572.777218][T23012] [ 572.979596][T23017] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4834'. [ 573.264523][T23031] netlink: 'syz.4.4842': attribute type 1 has an invalid length. [ 573.274833][T23026] netlink: 'syz.0.4838': attribute type 22 has an invalid length. [ 573.283921][T23031] netlink: 'syz.4.4842': attribute type 2 has an invalid length. [ 573.292469][T23031] netlink: 'syz.4.4842': attribute type 2 has an invalid length. [ 573.300724][T23027] netlink: 'syz.0.4838': attribute type 22 has an invalid length. [ 573.309469][T23031] netlink: 'syz.4.4842': attribute type 2 has an invalid length. [ 573.319532][T23026] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4838'. [ 573.329108][T23031] netlink: 'syz.4.4842': attribute type 1 has an invalid length. [ 573.340534][T23027] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4838'. [ 573.350962][T23031] netlink: 'syz.4.4842': attribute type 2 has an invalid length. [ 573.377692][T23032] netlink: 'syz.4.4842': attribute type 1 has an invalid length. [ 573.390299][T23037] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.4841'. [ 573.397433][T23032] netlink: 'syz.4.4842': attribute type 2 has an invalid length. [ 573.437142][ T62] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 573.437263][T23027] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4838'. [ 573.457187][ T62] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 573.466147][T23026] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4838'. [ 573.507099][ T62] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 573.546035][ T62] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 573.641976][T23042] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-alb(6) [ 573.720161][T22994] syzkaller0: entered promiscuous mode [ 573.727381][T22994] syzkaller0: entered allmulticast mode [ 573.892540][T23057] atomic_op ffff8880349b5198 conn xmit_atomic 0000000000000000 [ 576.119033][T23186] x_tables: unsorted underflow at hook 2 [ 577.297946][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 577.306122][ C0] lec:lec_tx_timeout: lec0 [ 577.310968][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 579.022085][T23171] validate_nla: 7 callbacks suppressed [ 579.022099][T23171] netlink: 'syz.1.4886': attribute type 25 has an invalid length. [ 579.035705][T23171] netlink: 'syz.1.4886': attribute type 28 has an invalid length. [ 579.324362][T23208] __nla_validate_parse: 4 callbacks suppressed [ 579.324382][T23208] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.4894'. [ 579.604266][T23214] lo speed is unknown, defaulting to 1000 [ 579.718001][T23234] netlink: 'syz.3.4902': attribute type 1 has an invalid length. [ 579.811431][T23233] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4903'. [ 579.832561][T23235] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4903'. [ 579.917353][T23234] 8021q: adding VLAN 0 to HW filter on device bond5 [ 579.991700][T23228] veth5: entered promiscuous mode [ 580.026376][T23228] bond5: (slave veth5): Enslaving as an active interface with an up link [ 580.677188][T23276] FAULT_INJECTION: forcing a failure. [ 580.677188][T23276] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 580.691014][T23276] CPU: 1 UID: 0 PID: 23276 Comm: syz.2.4915 Not tainted syzkaller #0 PREEMPT(full) [ 580.691045][T23276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 580.691059][T23276] Call Trace: [ 580.691068][T23276] [ 580.691078][T23276] dump_stack_lvl+0xe8/0x150 [ 580.691119][T23276] should_fail_ex+0x412/0x560 [ 580.691156][T23276] _copy_to_user+0x31/0xb0 [ 580.691182][T23276] simple_read_from_buffer+0xe1/0x170 [ 580.691217][T23276] proc_fail_nth_read+0x1bb/0x230 [ 580.691295][T23276] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 580.691330][T23276] ? rw_verify_area+0x2a6/0x4d0 [ 580.691369][T23276] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 580.691401][T23276] vfs_read+0x20c/0xa70 [ 580.691439][T23276] ? __pfx___mutex_lock+0x10/0x10 [ 580.691468][T23276] ? __pfx_vfs_read+0x10/0x10 [ 580.691501][T23276] ? __fget_files+0x2a/0x420 [ 580.691535][T23276] ? __fget_files+0x3a0/0x420 [ 580.691561][T23276] ? __fget_files+0x2a/0x420 [ 580.691599][T23276] ksys_read+0x150/0x270 [ 580.691634][T23276] ? __pfx_ksys_read+0x10/0x10 [ 580.691675][T23276] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 580.691700][T23276] do_syscall_64+0x15f/0xf80 [ 580.691726][T23276] ? trace_irq_disable+0x3b/0x140 [ 580.691750][T23276] ? clear_bhb_loop+0x40/0x90 [ 580.691778][T23276] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 580.691799][T23276] RIP: 0033:0x7ff040f5d04e [ 580.691821][T23276] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 580.691839][T23276] RSP: 002b:00007ff041dbffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 580.691864][T23276] RAX: ffffffffffffffda RBX: 00007ff041dc06c0 RCX: 00007ff040f5d04e [ 580.691880][T23276] RDX: 000000000000000f RSI: 00007ff041dc00a0 RDI: 0000000000000005 [ 580.691894][T23276] RBP: 00007ff041dc0090 R08: 0000000000000000 R09: 0000000000000000 [ 580.691916][T23276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 580.691928][T23276] R13: 00007ff041216038 R14: 00007ff041215fa0 R15: 00007ffc032ecc58 [ 580.691967][T23276] [ 581.395298][T23301] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4920'. [ 581.430925][T23271] bridge0: port 2(bridge_slave_1) entered disabled state [ 581.438735][T23271] bridge0: port 1(bridge_slave_0) entered disabled state [ 581.448687][T23303] trusted_key: syz.2.4920 sent an empty control message without MSG_MORE. [ 582.317692][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 582.325922][ C0] lec:lec_tx_timeout: lec0 [ 582.330600][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 583.458677][T23271] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 583.472120][T23271] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 583.495195][T23271] hsr0: left promiscuous mode [ 583.671424][ T7589] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 583.707101][ T7589] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 583.748755][ T7589] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 583.788435][ T7589] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 583.837286][ T7589] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 583.865017][ T7589] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 583.896599][T23266] lo speed is unknown, defaulting to 1000 [ 583.897118][ T7589] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 583.937302][ T7589] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 584.052149][T23327] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4928'. [ 584.364000][T23347] lo speed is unknown, defaulting to 1000 [ 584.429425][T23351] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4935'. [ 584.461687][T23351] gtp0: entered promiscuous mode [ 584.466965][T23351] gtp0: entered allmulticast mode [ 584.920936][T23373] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4942'. [ 585.249612][T23365] bond3: invalid ARP target 0.0.0.0 specified for addition [ 585.265735][T23365] bond3: option arp_ip_target: invalid value (0) [ 585.295168][T23365] bond3 (unregistering): Released all slaves [ 585.674672][T23378] lo speed is unknown, defaulting to 1000 [ 585.790111][T23401] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4951'. [ 585.807980][T23401] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4951'. [ 585.835085][T23401] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4951'. [ 586.171137][T23415] tipc: Enabled bearer , priority 0 [ 586.187290][T23416] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4956'. [ 586.227186][T23409] tipc: Resetting bearer [ 586.282087][T23409] xt_hashlimit: size too large, truncated to 1048576 [ 586.464414][T23430] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4959'. [ 586.634423][T23434] bridge0: port 1(syz_tun) entered blocking state [ 586.672441][T23434] bridge0: port 1(syz_tun) entered disabled state [ 586.703399][T23434] syz_tun: entered allmulticast mode [ 586.759639][T23434] syz_tun: entered promiscuous mode [ 587.218296][ T5894] tipc: Node number set to 2574859312 [ 588.117664][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5790 ms [ 588.126183][ C0] lec:lec_tx_timeout: lec0 [ 588.131545][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 588.631836][T23498] lo speed is unknown, defaulting to 1000 [ 588.670388][T23500] netlink: 'syz.3.4971': attribute type 1 has an invalid length. [ 588.701995][T23500] 8021q: adding VLAN 0 to HW filter on device bond6 [ 588.723076][T23500] vlan2: entered allmulticast mode [ 588.728450][T23500] bond6: entered allmulticast mode [ 588.748376][T23498] bond6: (slave geneve3): making interface the new active one [ 588.755927][T23498] geneve3: entered allmulticast mode [ 588.765440][T23498] bond6: (slave geneve3): Enslaving as an active interface with an up link [ 588.775147][ T48] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 588.784053][T23498] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 588.792583][ T48] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 588.806193][ T48] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 588.815706][ T48] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.347177][T23440] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 589.645853][T23515] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.4974'. [ 589.783456][T23509] lo speed is unknown, defaulting to 1000 [ 590.167030][T23534] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4982'. [ 590.232243][T23534] netlink: 356 bytes leftover after parsing attributes in process `syz.1.4982'. [ 590.735745][T23557] netlink: zone id is out of range [ 590.760282][T23557] netlink: zone id is out of range [ 590.774986][T23557] netlink: zone id is out of range [ 590.785796][T23557] netlink: zone id is out of range [ 590.824281][T23557] netlink: zone id is out of range [ 590.852211][T23557] netlink: zone id is out of range [ 590.891294][T23569] tipc: Resetting bearer [ 590.899629][T23557] netlink: zone id is out of range [ 590.929784][T23557] netlink: zone id is out of range [ 590.943270][T23557] netlink: zone id is out of range [ 590.970747][T23557] netlink: zone id is out of range [ 591.005409][T23569] debugfs: 'netdev:syzkaller0' already exists in 'phy25' [ 591.632594][T23614] lo speed is unknown, defaulting to 1000 [ 591.711598][T23624] netlink: 'syz.0.5001': attribute type 39 has an invalid length. [ 591.841208][T23627] xt_CT: You must specify a L4 protocol and not use inversions on it [ 591.990834][ T48] tipc: Subscription rejected, illegal request [ 592.026680][T23633] xt_limit: Overflow, try lower: 324382443/0 [ 593.157715][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 593.165963][ C0] lec:lec_tx_timeout: lec0 [ 593.172680][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 593.239133][ T1737] block nbd3: Possible stuck request ffff888027645240: control (read@1024,1024B). Runtime 180 seconds [ 593.250439][ T1737] block nbd3: Possible stuck request ffff888027630000: control (read@2048,1024B). Runtime 180 seconds [ 593.262002][ T1737] block nbd3: Possible stuck request ffff8880276301c0: control (read@3072,1024B). Runtime 180 seconds [ 593.273246][ T1737] block nbd3: Possible stuck request ffff888027645080: control (read@0,1024B). Runtime 180 seconds [ 593.435884][T23673] sctp: [Deprecated]: syz.4.5014 (pid 23673) Use of struct sctp_assoc_value in delayed_ack socket option. [ 593.435884][T23673] Use struct sctp_sack_info instead [ 593.711878][T23708] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5020'. [ 594.085760][T23735] netlink: 'syz.4.5027': attribute type 1 has an invalid length. [ 594.160138][T23743] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5027'. [ 594.187001][T23744] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5026'. [ 594.223505][T23735] bond3: entered promiscuous mode [ 594.229097][T23735] bond3: entered allmulticast mode [ 594.235543][T23735] 8021q: adding VLAN 0 to HW filter on device bond3 [ 594.263209][T23743] macsec2: entered promiscuous mode [ 594.276426][T23743] 8021q: adding VLAN 0 to HW filter on device macsec2 [ 594.312065][T23745] erspan1: entered allmulticast mode [ 594.339431][T23745] bond3: (slave erspan1): making interface the new active one [ 594.360774][T23745] erspan1: entered promiscuous mode [ 594.387900][T23745] bond3: (slave erspan1): Enslaving as an active interface with an up link [ 594.592460][ T48] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 594.620971][ T48] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 594.650139][ T48] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 594.681104][ T48] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 594.689851][T23763] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.5033'. [ 594.706883][T23765] syzkaller0: entered promiscuous mode [ 594.724563][T23765] syzkaller0: entered allmulticast mode [ 595.288797][T23789] sit2: entered promiscuous mode [ 595.321075][T23792] syzkaller1: entered promiscuous mode [ 595.353571][T23792] syzkaller1: entered allmulticast mode [ 595.507024][T23801] lo speed is unknown, defaulting to 1000 [ 595.725222][T23815] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.5047'. [ 596.015111][T23833] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5051'. [ 596.053215][T23833] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5051'. [ 596.063176][T23840] netlink: 'syz.3.5049': attribute type 1 has an invalid length. [ 596.248252][T23833] bond4: entered promiscuous mode [ 596.268989][T23833] 8021q: adding VLAN 0 to HW filter on device bond4 [ 596.343112][T23833] bond4 (unregistering): Released all slaves [ 596.675566][T23862] sctp: [Deprecated]: syz.4.5059 (pid 23862) Use of int in max_burst socket option. [ 596.675566][T23862] Use struct sctp_assoc_value instead [ 596.701944][T23865] xt_TCPMSS: Only works on TCP SYN packets [ 596.779935][T23869] netlink: 'syz.1.5061': attribute type 7 has an invalid length. [ 596.971200][T23876] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.5063'. [ 597.349558][T23899] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5072'. [ 597.420517][T23902] netlink: 'syz.0.5073': attribute type 1 has an invalid length. [ 597.515846][T23904] bond3: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 597.549378][T23904] bond3 (unregistering): Released all slaves [ 597.674451][T23902] 8021q: adding VLAN 0 to HW filter on device bond3 [ 597.868797][T23927] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.5079'. [ 598.175686][T23941] netlink: 'syz.3.5084': attribute type 29 has an invalid length. [ 598.187657][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 598.195900][ C0] lec:lec_tx_timeout: lec0 [ 598.196781][T23941] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5084'. [ 598.203077][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 598.236580][T23941] netlink: 'syz.3.5084': attribute type 29 has an invalid length. [ 598.256600][T23941] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5084'. [ 598.689213][T23980] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.5096'. [ 598.806925][T23986] ip6tnl0: Caught tx_queue_len zero misconfig [ 599.548397][T24034] tipc: Failed to remove unknown binding: 66,1,1/2664242746:1732069070/1732069072 [ 599.566337][T24034] tipc: Failed to remove unknown binding: 66,1,1/2664242746:1732069070/1732069072 [ 599.578268][T24034] tipc: Failed to remove unknown binding: 66,1,1/2664242746:1732069070/1732069072 [ 599.897255][T24053] syzkaller0: entered promiscuous mode [ 599.909539][T24053] syzkaller0: entered allmulticast mode [ 600.043217][T24065] __nla_validate_parse: 7 callbacks suppressed [ 600.043239][T24065] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.5125'. [ 601.166200][T24118] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.5138'. [ 601.278075][T24120] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5139'. [ 601.836007][ T13] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 601.882119][ T13] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 602.044857][T24166] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5147'. [ 602.159747][T24133] syzkaller0: entered promiscuous mode [ 602.187699][T24133] syzkaller0: entered allmulticast mode [ 602.242563][T24158] geneve4: entered promiscuous mode [ 603.229347][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 603.237665][ C0] lec:lec_tx_timeout: lec0 [ 603.243251][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 604.265435][ T5194] udevd[5194]: worker [14955] /devices/virtual/block/nbd3 timeout; kill it [ 604.289439][ T5194] udevd[5194]: seq 24029 '/devices/virtual/block/nbd3' killed [ 606.249540][ T13] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 606.270534][ T13] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 606.289243][ T13] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 55770 - 0 [ 606.309224][ T13] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 55770 - 0 [ 606.333508][ T13] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 55770 - 0 [ 606.356787][ T13] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 55770 - 0 [ 606.648597][T24210] lo speed is unknown, defaulting to 1000 [ 606.946543][T24227] net_ratelimit: 336 callbacks suppressed [ 606.946565][T24227] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 606.983963][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 606.995778][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 607.153032][T24236] lo speed is unknown, defaulting to 1000 [ 607.423154][T24251] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5169'. [ 607.677960][T24256] netlink: 'syz.4.5171': attribute type 8 has an invalid length. [ 607.694471][T24259] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5173'. [ 607.773442][T24259] veth3: entered promiscuous mode [ 607.921743][T24269] netlink: 'syz.2.5172': attribute type 1 has an invalid length. [ 607.956500][T24269] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5172'. [ 608.257600][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 608.265744][ C0] lec:lec_tx_timeout: lec0 [ 608.270621][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 608.498211][T24297] netlink: 72 bytes leftover after parsing attributes in process `syz.2.5184'. [ 609.114629][T24330] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.5191'. [ 609.584547][T24335] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5194'. [ 609.618216][T24335] netem: incorrect ge model size [ 609.633092][T24335] netem: change failed [ 609.885179][T24361] netlink: 'syz.1.5200': attribute type 3 has an invalid length. [ 610.165543][T24372] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.5204'. [ 610.205880][T24374] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 610.625858][T24387] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5210'. [ 610.662754][T24389] lo speed is unknown, defaulting to 1000 [ 610.885003][T24400] lo: Caught tx_queue_len zero misconfig [ 610.936525][T24400] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5211'. [ 610.959054][T24400] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5211'. [ 611.031527][T24400] netlink: 'syz.3.5211': attribute type 1 has an invalid length. [ 611.383382][T24423] macvlan2: entered promiscuous mode [ 611.394358][T24423] hsr0: entered promiscuous mode [ 611.400740][T24423] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 611.414445][T24423] hsr0: left promiscuous mode [ 611.505632][T24418] lo speed is unknown, defaulting to 1000 [ 612.568419][T24471] __nla_validate_parse: 2 callbacks suppressed [ 612.568444][T24471] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5234'. [ 612.989090][T24488] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 613.277614][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 613.294846][ C0] lec:lec_tx_timeout: lec0 [ 613.300039][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 613.820504][T24532] netlink: 'syz.1.5252': attribute type 1 has an invalid length. [ 613.849743][T24539] netlink: 'syz.3.5254': attribute type 13 has an invalid length. [ 616.741304][T24532] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 616.973523][T24592] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 617.010820][T24590] netlink: 'syz.0.5265': attribute type 13 has an invalid length. [ 617.019466][T24593] netlink: 'syz.0.5265': attribute type 13 has an invalid length. [ 617.027988][T24590] netlink: 'syz.0.5265': attribute type 17 has an invalid length. [ 617.065398][T24593] netlink: 'syz.0.5265': attribute type 17 has an invalid length. [ 617.076886][T24597] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5270'. [ 617.199680][T24590] 8021q: adding VLAN 0 to HW filter on device bond0 [ 617.211629][T24590] 8021q: adding VLAN 0 to HW filter on device team0 [ 617.224350][T24590] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 617.284106][T24593] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 617.603210][T24603] syzkaller0: entered promiscuous mode [ 617.616905][T24603] syzkaller0: entered allmulticast mode [ 617.639562][T24618] netdevsim netdevsim2: Direct firmware load for . failed with error -2 [ 617.695173][T24618] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 617.820434][T24630] netlink: 56 bytes leftover after parsing attributes in process `syz.4.5278'. [ 618.307663][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 618.317756][ C0] lec:lec_tx_timeout: lec0 [ 618.324091][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 618.595139][T24652] set match dimension is over the limit! [ 619.842834][T24679] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.5288'. [ 622.157925][T24681] sctp: [Deprecated]: syz.0.5289 (pid 24681) Use of int in maxseg socket option. [ 622.157925][T24681] Use struct sctp_assoc_value instead [ 622.204059][T24681] IPVS: set_ctl: invalid protocol: 59 224.0.0.1:20003 [ 622.488344][T24709] siw: device registration error -23 [ 622.522224][T24709] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5298'. [ 622.927688][T24735] tipc: Enabling of bearer rejected, failed to enable media [ 622.984580][T24725] lo speed is unknown, defaulting to 1000 [ 623.318310][ T1737] block nbd3: Possible stuck request ffff888027645240: control (read@1024,1024B). Runtime 210 seconds [ 623.330037][ T1737] block nbd3: Possible stuck request ffff888027630000: control (read@2048,1024B). Runtime 210 seconds [ 623.341189][ T1737] block nbd3: Possible stuck request ffff8880276301c0: control (read@3072,1024B). Runtime 210 seconds [ 623.352452][ T1737] block nbd3: Possible stuck request ffff888027645080: control (read@0,1024B). Runtime 210 seconds [ 623.364320][T24746] netlink: 72 bytes leftover after parsing attributes in process `syz.3.5305'. [ 624.117596][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5790 ms [ 624.125879][ C0] lec:lec_tx_timeout: lec0 [ 624.130760][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 624.320682][T24798] sock: sock_set_timeout: `syz.2.5321' (pid 24798) tries to set negative timeout [ 624.527016][T24788] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 625.248965][T24823] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5324'. [ 627.195590][T24790] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 627.353929][T24826] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5325'. [ 627.541705][T24837] lo speed is unknown, defaulting to 1000 [ 627.632810][T24845] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5333'. [ 627.674171][T24850] netlink: 92 bytes leftover after parsing attributes in process `syz.0.5334'. [ 627.758930][T24852] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5335'. [ 628.297329][T24875] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 628.310114][T24873] netlink: 'syz.4.5343': attribute type 1 has an invalid length. [ 628.341837][T24873] netlink: 'syz.4.5343': attribute type 1 has an invalid length. [ 628.343011][T24875] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5344'. [ 628.368747][T24873] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5343'. [ 628.400678][T24873] netlink: 1 bytes leftover after parsing attributes in process `syz.4.5343'. [ 629.025810][T24920] syzkaller1: entered promiscuous mode [ 629.032210][T24920] syzkaller1: entered allmulticast mode [ 629.041856][T24920] netlink: 80 bytes leftover after parsing attributes in process `syz.2.5359'. [ 629.052716][T24920] netlink: 'syz.2.5359': attribute type 12 has an invalid length. [ 629.060783][T24920] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5359'. [ 629.150488][T24924] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5360'. [ 629.159651][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5030 ms [ 629.159739][ C0] lec:lec_tx_timeout: lec0 [ 629.168128][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 629.186522][T24926] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5360'. [ 629.639496][T24956] block nbd0: NBD_DISCONNECT [ 629.753475][T24963] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5369'. [ 630.083927][T24974] syzkaller0: entered promiscuous mode [ 630.106499][T24974] syzkaller0: entered allmulticast mode [ 634.177668][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 634.185898][ C0] lec:lec_tx_timeout: lec0 [ 634.190970][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 634.567374][T25051] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.5390'. [ 634.765572][T25068] netlink: 'syz.0.5398': attribute type 1 has an invalid length. [ 634.813099][T25068] 8021q: adding VLAN 0 to HW filter on device bond4 [ 634.837912][T25071] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5397'. [ 634.867270][T25071] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 634.916604][T25078] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5398'. [ 634.994700][T25078] bond4 (unregistering): Released all slaves [ 635.212894][T25086] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5401'. [ 635.227356][T25065] lo speed is unknown, defaulting to 1000 [ 635.643792][T25108] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5406'. [ 635.809303][T25115] macvlan4: entered promiscuous mode [ 635.825206][T25115] hsr0: entered promiscuous mode [ 635.846278][T25115] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 635.866132][T25115] hsr0: left promiscuous mode [ 635.883511][T25109] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5406'. [ 635.894394][T25109] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5406'. [ 635.918327][T25116] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5406'. [ 635.942702][T25116] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5406'. [ 635.984349][T25120] syzkaller0: mtu less than device minimum [ 636.041176][T25125] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ^&J?=\l[[i5` [ 636.243261][T25133] macvlan2: entered promiscuous mode [ 636.252248][T25133] hsr0: entered promiscuous mode [ 636.259964][T25133] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 636.269047][T25133] hsr0: left promiscuous mode [ 636.655801][T25153] lo speed is unknown, defaulting to 1000 [ 636.971624][T25157] lo speed is unknown, defaulting to 1000 [ 637.284685][T25175] lo speed is unknown, defaulting to 1000 [ 637.745362][T25190] lo speed is unknown, defaulting to 1000 [ 638.076160][T25211] netlink: 'syz.2.5437': attribute type 6 has an invalid length. [ 638.109607][T25211] netlink: 104 bytes leftover after parsing attributes in process `syz.2.5437'. [ 638.899913][T25247] netdevsim netdevsim2: Direct firmware load for . failed with error -2 [ 638.916541][T25246] macvlan4: entered promiscuous mode [ 638.932453][T25246] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 638.945847][T25247] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 639.197710][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 639.205944][ C0] lec:lec_tx_timeout: lec0 [ 639.211020][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 640.880174][T25322] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 641.213164][T25218] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 641.283950][T25346] __nla_validate_parse: 2 callbacks suppressed [ 641.283979][T25346] netlink: 830 bytes leftover after parsing attributes in process `syz.4.5476'. [ 641.319040][T25346] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5476'. [ 641.535738][T25361] bridge_slave_0: left allmulticast mode [ 641.547832][T25361] bridge_slave_0: left promiscuous mode [ 641.553817][T25361] bridge0: port 1(bridge_slave_0) entered disabled state [ 641.571906][T25361] bridge_slave_1: left allmulticast mode [ 641.582757][T25361] bridge_slave_1: left promiscuous mode [ 641.596919][T25361] bridge0: port 2(bridge_slave_1) entered disabled state [ 641.600307][T25363] netlink: 'syz.4.5481': attribute type 2 has an invalid length. [ 641.646787][T25361] bond0: (slave bond_slave_0): Releasing backup interface [ 641.659660][T25361] bond0: (slave bond_slave_1): Releasing backup interface [ 641.669223][T25361] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 641.677484][T25361] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 641.686889][T25361] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 642.052377][T25393] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5491'. [ 642.561266][T25418] lo speed is unknown, defaulting to 1000 [ 644.056221][T25466] lo speed is unknown, defaulting to 1000 [ 644.217998][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 644.226181][ C0] lec:lec_tx_timeout: lec0 [ 644.232363][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 644.282871][T25471] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5511'. [ 644.306506][ T129] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 644.315686][ T129] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 644.324358][ T129] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 644.333531][ T129] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 644.371003][T25473] netlink: 'syz.3.5511': attribute type 10 has an invalid length. [ 644.381338][T25473] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5511'. [ 645.536550][T25421] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 645.862751][T25488] netlink: 10 bytes leftover after parsing attributes in process `syz.1.5514'. [ 645.999486][T25502] netlink: 'syz.1.5514': attribute type 10 has an invalid length. [ 646.090572][T25502] 8021q: adding VLAN 0 to HW filter on device team0 [ 646.108714][T25497] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5518'. [ 646.136690][T25502] bond0: (slave team0): Enslaving as an active interface with an up link [ 646.195780][T25491] lo speed is unknown, defaulting to 1000 [ 646.234872][T25497] geneve3: entered promiscuous mode [ 646.329309][ T48] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 646.345595][ T48] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 646.365385][T25501] lo speed is unknown, defaulting to 1000 [ 646.379622][ T48] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 646.405362][ T48] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 646.926682][T25527] tipc: Can't bind to reserved service type 2 [ 647.036895][T25536] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 647.215803][T25533] lo speed is unknown, defaulting to 1000 [ 647.401184][T25548] syzkaller1: entered promiscuous mode [ 647.407025][T25548] syzkaller1: entered allmulticast mode [ 647.692877][T25555] lo speed is unknown, defaulting to 1000 [ 647.897171][T25561] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5535'. [ 647.909429][T25561] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5535'. [ 647.961995][T25569] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5535'. [ 648.020577][T25575] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5535'. [ 648.133060][T25575] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 648.176728][T25575] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 648.202017][T25575] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 648.214691][T25575] bond0 (unregistering): Released all slaves [ 648.726032][T25598] lo speed is unknown, defaulting to 1000 [ 649.186320][T25621] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.5545'. [ 649.247578][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 649.255673][ C0] lec:lec_tx_timeout: lec0 [ 649.262447][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 650.099031][T25668] netlink: 'syz.0.5554': attribute type 1 has an invalid length. [ 650.479172][T25691] netlink: 388 bytes leftover after parsing attributes in process `syz.3.5558'. [ 650.638598][T25697] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5563'. [ 650.873931][T25699] batman_adv: batadv0: Adding interface: dummy0 [ 650.893068][T25699] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 650.920492][T25699] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 651.400029][T25717] lo speed is unknown, defaulting to 1000 [ 653.361687][T25682] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 653.418443][ T1737] block nbd3: Possible stuck request ffff888027645240: control (read@1024,1024B). Runtime 240 seconds [ 653.430232][ T1737] block nbd3: Possible stuck request ffff888027630000: control (read@2048,1024B). Runtime 240 seconds [ 653.442217][ T1737] block nbd3: Possible stuck request ffff8880276301c0: control (read@3072,1024B). Runtime 240 seconds [ 653.453495][ T1737] block nbd3: Possible stuck request ffff888027645080: control (read@0,1024B). Runtime 240 seconds [ 653.608445][T25737] x_tables: duplicate underflow at hook 2 [ 653.616675][T25733] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5570'. [ 653.698047][T25733] 8021q: adding VLAN 0 to HW filter on device bond4 [ 653.726677][T25734] bond4: (slave geneve4): Enslaving as an active interface with an up link [ 653.991632][T25762] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.5578'. [ 654.278231][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 654.286370][ C0] lec:lec_tx_timeout: lec0 [ 654.292434][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 654.319856][T25779] lo speed is unknown, defaulting to 1000 [ 654.448441][T25779] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5582'. [ 654.623754][T25787] netlink: 388 bytes leftover after parsing attributes in process `syz.3.5583'. [ 654.702982][T25789] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5584'. [ 655.349405][T25825] syzkaller1: entered promiscuous mode [ 655.355243][T25825] syzkaller1: entered allmulticast mode [ 656.266724][T25835] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5598'. [ 657.550287][T25783] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 658.506772][T25904] lo speed is unknown, defaulting to 1000 [ 659.307757][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 659.315914][ C0] lec:lec_tx_timeout: lec0 [ 659.320875][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 659.440770][T25924] netlink: 388 bytes leftover after parsing attributes in process `syz.2.5616'. [ 660.713526][T25866] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 660.981225][T25933] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5620'. [ 661.230680][T25929] lo speed is unknown, defaulting to 1000 [ 662.217151][T25987] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 662.405707][T25990] netlink: 'syz.3.5637': attribute type 13 has an invalid length. [ 662.443740][T25990] bond7: option fail_over_mac: invalid value (127) [ 662.458877][T25990] bond7 (unregistering): Released all slaves [ 662.740049][T26010] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5641'. [ 663.336692][T26039] lo speed is unknown, defaulting to 1000 [ 663.517873][T26050] netlink: 'syz.4.5653': attribute type 1 has an invalid length. [ 663.588410][T26052] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5653'. [ 663.674528][T26050] bond5: entered promiscuous mode [ 663.696345][T26055] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5654'. [ 663.697966][T26050] bond5: entered allmulticast mode [ 663.706260][T26055] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5654'. [ 663.721554][T26050] 8021q: adding VLAN 0 to HW filter on device bond5 [ 663.837349][T26055] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5654'. [ 663.856584][T26055] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5654'. [ 664.055101][T26062] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5656'. [ 664.191940][T26064] lo speed is unknown, defaulting to 1000 [ 664.327632][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 664.335743][ C0] lec:lec_tx_timeout: lec0 [ 664.340803][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 664.361136][T26076] netlink: 212188 bytes leftover after parsing attributes in process `syz.3.5660'. [ 664.549871][T26080] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5662'. [ 664.569629][T26083] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5664'. [ 664.578760][T26083] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5664'. [ 664.673704][T26080] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5662'. [ 664.826632][T26080] team0: Port device team_slave_0 removed [ 665.088981][T26100] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 665.224912][T26105] syzkaller1: entered promiscuous mode [ 665.244070][T26105] syzkaller1: entered allmulticast mode [ 665.389927][T26107] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5672'. [ 665.677697][T26115] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5675'. [ 665.741732][T26118] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5676'. [ 665.757853][T26118] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 666.165822][ T5836] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 666.181151][ T5836] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 666.191904][ T5836] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 666.205497][ T5836] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 666.217001][ T5836] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 666.310439][T26127] lo speed is unknown, defaulting to 1000 [ 666.665820][T26127] chnl_net:caif_netlink_parms(): no params data found [ 666.726881][T26139] TC_ACT_REPEAT abuse ? [ 666.737300][T26146] sctp: [Deprecated]: syz.1.5683 (pid 26146) Use of int in maxseg socket option. [ 666.737300][T26146] Use struct sctp_assoc_value instead [ 667.133463][T26149] macvlan4: entered promiscuous mode [ 667.148496][T26149] hsr0: entered promiscuous mode [ 667.158716][T26149] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 667.179239][T26149] hsr0: left promiscuous mode [ 667.351462][T26127] bridge0: port 1(bridge_slave_0) entered blocking state [ 667.359893][T26127] bridge0: port 1(bridge_slave_0) entered disabled state [ 667.367292][T26127] bridge_slave_0: entered allmulticast mode [ 667.376702][T26127] bridge_slave_0: entered promiscuous mode [ 667.386419][T26127] bridge0: port 2(bridge_slave_1) entered blocking state [ 667.394346][T26127] bridge0: port 2(bridge_slave_1) entered disabled state [ 667.402647][T26127] bridge_slave_1: entered allmulticast mode [ 667.412094][T26127] bridge_slave_1: entered promiscuous mode [ 667.501797][T26127] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 667.531913][T26127] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 667.631457][T26127] team0: Port device team_slave_0 added [ 667.652819][T26127] team0: Port device team_slave_1 added [ 667.745407][T26127] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 667.767285][T26127] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 667.794023][T26127] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 667.852949][T26127] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 667.873095][T26127] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 667.901207][T26127] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 667.980635][T26127] hsr_slave_0: entered promiscuous mode [ 667.989015][T26127] hsr_slave_1: entered promiscuous mode [ 667.995730][T26127] debugfs: 'hsr0' already exists in 'hsr' [ 668.002234][T26127] Cannot create hsr debugfs directory [ 668.279967][ T50] Bluetooth: hci2: command tx timeout [ 668.468886][T26181] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5693'. [ 669.150487][T26204] macvlan4: entered promiscuous mode [ 669.168983][T26204] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 669.241692][T26208] xt_TPROXY: Can be used only with -p tcp or -p udp [ 669.258470][T26127] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 669.294083][T26127] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 669.309425][T26127] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 669.335962][T26127] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 669.358296][T26127] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 669.385020][T26127] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 669.410458][T26127] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 669.434351][T26127] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 669.812853][T26236] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5706'. [ 670.017222][T26127] 8021q: adding VLAN 0 to HW filter on device bond0 [ 670.139936][T26127] 8021q: adding VLAN 0 to HW filter on device team0 [ 670.187359][T26243] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5707'. [ 670.221157][T21984] bridge0: port 1(bridge_slave_0) entered blocking state [ 670.228530][T21984] bridge0: port 1(bridge_slave_0) entered forwarding state [ 670.253844][ T7586] bridge0: port 2(bridge_slave_1) entered blocking state [ 670.262804][ T7586] bridge0: port 2(bridge_slave_1) entered forwarding state [ 670.359263][ T50] Bluetooth: hci2: command tx timeout [ 670.530957][T26268] xt_hashlimit: size too large, truncated to 1048576 [ 670.626627][T26252] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 670.677573][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 6340 ms [ 670.685902][ C0] lec:lec_tx_timeout: lec0 [ 670.691996][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 670.813794][T26252] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 670.913097][T26251] lo speed is unknown, defaulting to 1000 [ 670.971509][T26278] macvlan4: entered promiscuous mode [ 670.977002][T26278] hsr0: entered promiscuous mode [ 670.983926][T26278] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 670.993046][T26278] hsr0: left promiscuous mode [ 671.028165][T26252] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 671.100078][T26252] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 671.279497][ T129] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 671.300406][T26281] lo speed is unknown, defaulting to 1000 [ 671.405217][ T62] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 671.467984][ T62] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 671.513886][T21984] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 671.682944][T26127] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 671.979448][T26127] veth0_vlan: entered promiscuous mode [ 672.097480][T26127] veth1_vlan: entered promiscuous mode [ 672.202071][T26127] veth0_macvtap: entered promiscuous mode [ 672.238910][T26306] macvlan0: entered promiscuous mode [ 672.246249][T26306] hsr0: entered promiscuous mode [ 672.253526][T26306] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 672.263752][T26306] hsr0: left promiscuous mode [ 672.308466][T26127] veth1_macvtap: entered promiscuous mode [ 672.372423][T26127] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 672.418852][T26127] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 672.438082][ T50] Bluetooth: hci2: command tx timeout [ 672.446369][T26312] lo speed is unknown, defaulting to 1000 [ 672.469764][T26317] netlink: 'syz.1.5724': attribute type 12 has an invalid length. [ 672.491407][ T129] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 672.505283][ T129] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 672.542208][ T129] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 672.551485][ T129] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 672.605792][T26316] lo speed is unknown, defaulting to 1000 [ 672.612295][T26315] pim6reg1: entered promiscuous mode [ 672.621094][T26315] pim6reg1: entered allmulticast mode [ 672.742554][T26324] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5728'. [ 672.857932][T26329] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5728'. [ 673.004787][T21984] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 673.037645][T21984] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 673.203595][T26346] netlink: 'syz.4.5732': attribute type 1 has an invalid length. [ 673.226729][ T129] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 673.228703][T26346] netlink: 92 bytes leftover after parsing attributes in process `syz.4.5732'. [ 673.285293][ T129] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 673.316725][T26334] lo speed is unknown, defaulting to 1000 [ 673.480119][T26353] netlink: 76 bytes leftover after parsing attributes in process `syz.1.5735'. [ 673.519686][T26355] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5736'. [ 674.521046][ T50] Bluetooth: hci2: command tx timeout [ 674.841893][T26403] syzkaller1: entered promiscuous mode [ 674.868492][T26403] syzkaller1: entered allmulticast mode [ 675.363418][T26419] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5750'. [ 676.062892][T26447] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 676.072098][T26447] tipc: Started in network mode [ 676.081109][T26447] tipc: Node identity fed371ddf33, cluster identity 4711 [ 676.090829][T26447] tipc: Enabled bearer , priority 0 [ 676.099720][T26447] syzkaller0: entered promiscuous mode [ 676.106402][T26447] syzkaller0: entered allmulticast mode [ 676.130071][T26447] netlink: 'syz.2.5760': attribute type 1 has an invalid length. [ 676.150665][T26447] tipc: Resetting bearer [ 676.163694][T26445] tipc: Resetting bearer [ 676.194386][T26445] tipc: Disabling bearer [ 676.437578][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5740 ms [ 676.445914][ C0] lec:lec_tx_timeout: lec0 [ 676.451842][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 676.702347][T26487] syzkaller1: entered promiscuous mode [ 676.712703][T26487] syzkaller1: entered allmulticast mode [ 677.136169][T26508] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5777'. [ 677.553040][T26534] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5783'. [ 677.583520][T26534] ip6gre1: entered promiscuous mode [ 677.591804][T26534] ip6gre1: entered allmulticast mode [ 677.905841][T26549] lo speed is unknown, defaulting to 1000 [ 678.128080][T26559] bond7: option tlb_dynamic_lb: invalid value (5) [ 678.137172][T26559] bond7 (unregistering): Released all slaves [ 678.467797][T26573] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5795'. [ 678.535673][T26573] 8021q: adding VLAN 0 to HW filter on device bond7 [ 678.635567][T26574] netlink: 'syz.3.5796': attribute type 1 has an invalid length. [ 678.684007][T26574] bond7: entered promiscuous mode [ 678.691620][T26574] 8021q: adding VLAN 0 to HW filter on device bond7 [ 678.734024][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807cca7c00: rx timeout, send abort [ 678.935752][T26602] xt_hashlimit: overflow, try lower: 18446744073709551614/4 [ 679.161706][T26611] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.5808'. [ 679.245182][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807cca7c00: abort rx timeout. Force session deactivation [ 679.355889][T26622] netlink: 'syz.2.5810': attribute type 30 has an invalid length. [ 679.865608][T26652] xt_hashlimit: size too large, truncated to 1048576 [ 679.891117][T26655] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5822'. [ 680.074232][T26655] 8021q: adding VLAN 0 to HW filter on device bond4 [ 680.534688][T26689] netlink: 156 bytes leftover after parsing attributes in process `syz.2.5831'. [ 680.548042][T26689] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 680.561853][T26692] netlink: 'syz.0.5832': attribute type 13 has an invalid length. [ 680.573300][T26692] netlink: 'syz.0.5832': attribute type 17 has an invalid length. [ 680.615572][T26693] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5832'. [ 680.646751][T26692] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 680.916261][T26706] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5837'. [ 680.931361][T26708] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5839'. [ 680.956634][T26706] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5837'. [ 681.267450][T26731] lo speed is unknown, defaulting to 1000 [ 681.638172][T26750] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5847'. [ 681.667307][T26750] 8021q: adding VLAN 0 to HW filter on device bond8 [ 682.094685][T26754] lo speed is unknown, defaulting to 1000 [ 682.197571][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5740 ms [ 682.205711][ C0] lec:lec_tx_timeout: lec0 [ 682.215789][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 682.751197][T26770] bridge0: port 2(bridge_slave_1) entered disabled state [ 682.758972][T26770] bridge0: port 1(bridge_slave_0) entered disabled state [ 682.846028][T26770] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 682.865292][T26770] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 682.989851][T26771] vlan2: entered allmulticast mode [ 682.996314][T26771] bridge0: port 3(vlan2) entered blocking state [ 683.003596][T26771] bridge0: port 3(vlan2) entered disabled state [ 683.012625][T26771] vlan2: entered promiscuous mode [ 683.019055][ T62] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 683.028935][ T62] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 683.038490][ T62] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 683.048168][ T62] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 683.487791][ T1737] block nbd3: Possible stuck request ffff888027645240: control (read@1024,1024B). Runtime 270 seconds [ 683.499090][ T1737] block nbd3: Possible stuck request ffff888027630000: control (read@2048,1024B). Runtime 270 seconds [ 683.511177][ T1737] block nbd3: Possible stuck request ffff8880276301c0: control (read@3072,1024B). Runtime 270 seconds [ 683.522789][ T1737] block nbd3: Possible stuck request ffff888027645080: control (read@0,1024B). Runtime 270 seconds [ 684.056492][T26718] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 684.392143][T26798] xt_CT: You must specify a L4 protocol and not use inversions on it [ 684.511103][T26794] lo speed is unknown, defaulting to 1000 [ 685.331182][T26824] dummy0: entered promiscuous mode [ 685.352669][T26823] dummy0: left promiscuous mode [ 685.448027][T26829] lo speed is unknown, defaulting to 1000 [ 685.671079][T26826] lo speed is unknown, defaulting to 1000 [ 685.684728][T26842] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.5871'. [ 686.316667][T26865] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5878'. [ 686.447378][T26871] pimreg: entered allmulticast mode [ 686.465203][T26871] netlink: 'syz.3.5880': attribute type 30 has an invalid length. [ 686.474494][T26871] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5880'. [ 686.511263][T26871] bond9: option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4) [ 686.523963][T26871] bond9 (unregistering): Released all slaves [ 686.671262][T26880] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.5884'. [ 686.985109][T26887] lo speed is unknown, defaulting to 1000 [ 687.182401][T26901] macvlan0: entered promiscuous mode [ 687.209012][T26901] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 687.227924][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 687.236117][ C0] lec:lec_tx_timeout: lec0 [ 687.241419][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 687.429016][T26917] team_slave_1: Caught tx_queue_len zero misconfig [ 687.776598][ T5894] IPVS: starting estimator thread 0... [ 687.844310][T26933] bond4 (unregistering): Released all slaves [ 687.878030][T26936] IPVS: using max 26 ests per chain, 62400 per kthread [ 687.992549][T26943] syzkaller1: entered promiscuous mode [ 687.999630][T26943] syzkaller1: entered allmulticast mode [ 688.185453][T26955] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.5903'. [ 688.262103][T26954] lo speed is unknown, defaulting to 1000 [ 688.360270][T26964] netlink: 388 bytes leftover after parsing attributes in process `syz.4.5904'. [ 688.565218][T26970] netlink: 'syz.2.5907': attribute type 22 has an invalid length. [ 688.581522][T26970] netlink: 'syz.2.5907': attribute type 22 has an invalid length. [ 688.592194][T26970] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5907'. [ 688.654069][T26972] netlink: 136 bytes leftover after parsing attributes in process `syz.3.5908'. [ 688.664287][T26972] openvswitch: netlink: Flow key attr not present in new flow. [ 688.744346][T26980] xt_bpf: check failed: parse error [ 688.805842][T26984] sctp: [Deprecated]: syz.2.5910 (pid 26984) Use of struct sctp_assoc_value in delayed_ack socket option. [ 688.805842][T26984] Use struct sctp_sack_info instead [ 688.986550][T26851] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 689.202661][T27001] netlink: 10 bytes leftover after parsing attributes in process `syz.1.5917'. [ 689.299904][T27004] syzkaller0: entered promiscuous mode [ 689.305623][T27004] syzkaller0: entered allmulticast mode [ 689.807350][T27021] lo speed is unknown, defaulting to 1000 [ 689.901799][T27021] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5924'. [ 689.968227][T27022] netlink: 'syz.3.5924': attribute type 4 has an invalid length. [ 690.674473][T27049] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 690.989259][T27072] netlink: 'syz.2.5936': attribute type 4 has an invalid length. [ 690.997324][T27071] netlink: 'syz.2.5936': attribute type 4 has an invalid length. [ 691.043240][T27074] __nla_validate_parse: 2 callbacks suppressed [ 691.043263][T27074] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5937'. [ 691.135404][T27078] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5938'. [ 691.264038][T26957] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 691.903491][T27111] netlink: 'syz.1.5945': attribute type 10 has an invalid length. [ 691.915919][T27111] netlink: 'syz.1.5945': attribute type 2 has an invalid length. [ 691.929372][T27111] : entered promiscuous mode [ 692.065531][T27117] Unsupported ieee802154 address type: 0 [ 692.257579][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 692.265779][ C0] lec:lec_tx_timeout: lec0 [ 692.270895][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 692.302996][T27129] netlink: 144 bytes leftover after parsing attributes in process `syz.1.5950'. [ 693.088917][T27159] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5963'. [ 693.292319][T27163] xt_CT: No such helper "syz1" [ 693.298746][T27026] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 693.423962][T27159] netlink: 'syz.2.5963': attribute type 210 has an invalid length. [ 693.624650][T27167] 8021q: adding VLAN 0 to HW filter on device bond0 [ 693.651159][T27167] batman_adv: batadv0: Interface activated: dummy0 [ 693.672237][T27167] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 694.145394][T27191] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5972'. [ 694.170003][T27191] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5972'. [ 694.823646][T27220] lo speed is unknown, defaulting to 1000 [ 695.450286][T27242] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5986'. [ 695.487452][T27241] lo: Caught tx_queue_len zero misconfig [ 696.926020][ T5836] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 696.941086][ T5836] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 696.949683][ T5836] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 696.965470][ T5836] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 696.973538][ T5836] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 697.029622][T27294] tipc: Resetting bearer [ 697.113861][T27294] lo speed is unknown, defaulting to 1000 [ 697.288074][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 697.296354][ C0] lec:lec_tx_timeout: lec0 [ 697.301444][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 697.399419][T27299] lo speed is unknown, defaulting to 1000 [ 697.901223][T27310] lo speed is unknown, defaulting to 1000 [ 697.969753][T27321] ip6erspan0: entered allmulticast mode [ 698.130824][T27332] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6014'. [ 698.399034][T27294] chnl_net:caif_netlink_parms(): no params data found [ 698.473655][T27340] netlink: 'syz.2.6016': attribute type 21 has an invalid length. [ 698.510325][T27340] netlink: 128 bytes leftover after parsing attributes in process `syz.2.6016'. [ 698.543082][T27340] netlink: 'syz.2.6016': attribute type 5 has an invalid length. [ 698.555359][T27340] netlink: 3 bytes leftover after parsing attributes in process `syz.2.6016'. [ 698.569242][T27348] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 698.739455][T27294] bridge0: port 1(bridge_slave_0) entered blocking state [ 698.753527][T27294] bridge0: port 1(bridge_slave_0) entered disabled state [ 698.761757][T27294] bridge_slave_0: entered allmulticast mode [ 698.770971][T27294] bridge_slave_0: entered promiscuous mode [ 698.826332][T27294] bridge0: port 2(bridge_slave_1) entered blocking state [ 698.836852][T27358] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6023'. [ 698.846810][T27294] bridge0: port 2(bridge_slave_1) entered disabled state [ 698.847248][T27294] bridge_slave_1: entered allmulticast mode [ 698.877405][T27294] bridge_slave_1: entered promiscuous mode [ 699.088646][ T5836] Bluetooth: hci0: command tx timeout [ 699.130407][T27294] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 699.150145][T27294] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 699.222044][T27372] netlink: 'syz.1.6027': attribute type 4 has an invalid length. [ 699.240956][T27375] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6027'. [ 699.252269][T27294] team0: Port device team_slave_0 added [ 699.291228][T27372] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6027'. [ 699.508211][T27294] team0: Port device team_slave_1 added [ 699.723791][ T62] bridge_slave_1: left allmulticast mode [ 699.736548][ T62] bridge_slave_1: left promiscuous mode [ 699.748604][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 699.774687][ T62] bridge_slave_0: left allmulticast mode [ 699.791140][ T62] bridge_slave_0: left promiscuous mode [ 699.801705][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 699.822698][T27398] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6035'. [ 700.968234][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 700.978664][ T62] bond0 (unregistering): Released all slaves [ 700.990511][ T62] bond1 (unregistering): Released all slaves [ 701.009195][ T62] bond2 (unregistering): Released all slaves [ 701.026491][ T62] bond3 (unregistering): Released all slaves [ 701.046502][T27294] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 701.053790][T27294] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 701.081919][T27294] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 701.098458][ T5489] 8021q: adding VLAN 0 to HW filter on device eth1 [ 701.118278][T27294] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 701.125932][T27294] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 701.175931][ T5836] Bluetooth: hci0: command tx timeout [ 701.218942][T27294] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 701.326408][T27294] hsr_slave_0: entered promiscuous mode [ 701.340502][T27294] hsr_slave_1: entered promiscuous mode [ 701.356579][T27294] debugfs: 'hsr0' already exists in 'hsr' [ 701.377627][T27294] Cannot create hsr debugfs directory [ 701.392287][ T62] tipc: Left network mode [ 702.142960][T27475] xt_hashlimit: size too large, truncated to 1048576 [ 702.307629][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 702.315841][ C0] lec:lec_tx_timeout: lec0 [ 702.321507][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 702.769119][ T62] hsr_slave_0: left promiscuous mode [ 702.790377][ T62] hsr_slave_1: left promiscuous mode [ 702.817427][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 702.841355][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 703.238257][ T5836] Bluetooth: hci0: command tx timeout [ 703.344930][ T62] team0 (unregistering): Port device team_slave_1 removed [ 703.381783][ T62] team0 (unregistering): Port device team_slave_0 removed [ 703.566665][T27518] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6074'. [ 703.655627][ T5489] 8021q: adding VLAN 0 to HW filter on device eth2 [ 704.065914][T27536] bridge0: port 1(syz_tun) entered blocking state [ 704.123106][T27536] bridge0: port 1(syz_tun) entered disabled state [ 704.152912][T27536] syz_tun: entered allmulticast mode [ 704.195654][T27536] syz_tun: entered promiscuous mode [ 704.610827][ T62] IPVS: stop unused estimator thread 0... [ 705.148942][T27574] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6092'. [ 705.201767][T27578] netlink: 64 bytes leftover after parsing attributes in process `syz.1.6092'. [ 705.327844][ T5836] Bluetooth: hci0: command tx timeout [ 705.663672][T27294] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 705.694409][T27294] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 705.719988][T27294] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 705.749221][T27294] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 705.757483][T27587] tipc: Enabling of bearer rejected, already enabled [ 705.800778][T27294] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 705.826269][T27294] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 705.848480][T27294] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 705.906326][T27294] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 705.963545][T27600] xt_CONNSECMARK: invalid mode: 66 [ 706.103499][T27613] syz_tun: entered allmulticast mode [ 706.221591][T27294] 8021q: adding VLAN 0 to HW filter on device bond0 [ 706.293728][T27294] 8021q: adding VLAN 0 to HW filter on device team0 [ 706.304607][T27620] xt_hashlimit: size too large, truncated to 1048576 [ 706.333741][T27622] ip6erspan1: entered promiscuous mode [ 706.383540][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 706.390864][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 706.476475][ T7586] bridge0: port 2(bridge_slave_1) entered blocking state [ 706.483785][ T7586] bridge0: port 2(bridge_slave_1) entered forwarding state [ 707.084591][T27649] xt_hashlimit: size too large, truncated to 1048576 [ 707.333909][T27294] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 707.541975][T27294] veth0_vlan: entered promiscuous mode [ 707.593726][T27294] veth1_vlan: entered promiscuous mode [ 707.616602][T27672] vlan0: entered promiscuous mode [ 707.763890][T27294] veth0_macvtap: entered promiscuous mode [ 707.807546][T27294] veth1_macvtap: entered promiscuous mode [ 707.896770][T27294] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 707.953890][T27294] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 708.011309][ T7584] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 708.028720][T27686] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6127'. [ 708.048971][ T7584] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 708.067893][T27686] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6127'. [ 708.093532][ T62] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 708.114267][ T62] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 708.123236][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5790 ms [ 708.123277][ C0] lec:lec_tx_timeout: lec0 [ 708.132142][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 708.273597][T27691] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6128'. [ 708.453577][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 708.486866][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 708.615334][ T7586] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 708.645778][ T7586] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 709.069573][T27722] lo speed is unknown, defaulting to 1000 [ 709.386770][ T50] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 709.408945][ T50] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 709.419418][ T50] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 709.433699][ T50] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 709.443361][ T50] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 709.895782][T27737] lo speed is unknown, defaulting to 1000 [ 709.999012][T15521] syz_tun (unregistering): left allmulticast mode [ 710.018731][T15521] syz_tun (unregistering): left promiscuous mode [ 710.040023][T15521] bridge0: port 1(syz_tun) entered disabled state [ 710.643051][T27772] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 711.141868][T27797] netlink: 68 bytes leftover after parsing attributes in process `syz.0.6167'. [ 711.193872][ T7586] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 55770 - 0 [ 711.229544][ T7586] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 711.287295][T27737] chnl_net:caif_netlink_parms(): no params data found [ 711.432340][ T7586] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 55770 - 0 [ 711.445190][ T7586] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 711.478602][T20909] Bluetooth: hci4: command tx timeout [ 711.556167][ T7586] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 55770 - 0 [ 711.569942][ T7586] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 711.591908][T27737] bridge0: port 1(bridge_slave_0) entered blocking state [ 711.600515][T27737] bridge0: port 1(bridge_slave_0) entered disabled state [ 711.612667][T27737] bridge_slave_0: entered allmulticast mode [ 711.622762][T27737] bridge_slave_0: entered promiscuous mode [ 711.634204][T27737] bridge0: port 2(bridge_slave_1) entered blocking state [ 711.646621][T27737] bridge0: port 2(bridge_slave_1) entered disabled state [ 711.658083][T27737] bridge_slave_1: entered allmulticast mode [ 711.666156][T27737] bridge_slave_1: entered promiscuous mode [ 711.707145][T27737] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 711.729914][ T7586] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 55770 - 0 [ 711.740403][ T7586] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 711.761378][T27737] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 711.771701][T27818] lo speed is unknown, defaulting to 1000 [ 711.814564][T27737] team0: Port device team_slave_0 added [ 711.840879][T27737] team0: Port device team_slave_1 added [ 711.897345][T27737] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 711.905245][T27737] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 711.935154][T27737] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 711.955679][T27737] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 711.964626][T27737] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 711.991467][T27737] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 712.229269][T27737] hsr_slave_0: entered promiscuous mode [ 712.238929][T27737] hsr_slave_1: entered promiscuous mode [ 712.246069][T27737] debugfs: 'hsr0' already exists in 'hsr' [ 712.252431][T27737] Cannot create hsr debugfs directory [ 712.417253][ T7586] pimreg: left allmulticast mode [ 712.825176][ T7586] bond6 (unregistering): (slave geneve3): Releasing active interface [ 712.841144][ T7586] geneve3 (unregistering): left allmulticast mode [ 712.855462][T27855] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6179'. [ 712.903143][ T7586] bond1 (unregistering): (slave bridge0): Releasing active interface [ 713.093208][ T7586] bond1 (unregistering): Released all slaves [ 713.111491][ T7586] bond2 (unregistering): (slave veth3): Releasing active interface [ 713.120541][ T7586] bond2 (unregistering): Released all slaves [ 713.140916][ T7586] bond0 (unregistering): Released all slaves [ 713.158529][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5030 ms [ 713.166633][ C0] lec:lec_tx_timeout: lec0 [ 713.171702][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 713.180109][ T7586] bond3 (unregistering): Released all slaves [ 713.197205][ T7586] bond4 (unregistering): Released all slaves [ 713.224225][ T7586] bond5 (unregistering): (slave veth5): Releasing backup interface [ 713.234016][ T7586] bond5 (unregistering): Released all slaves [ 713.255785][ T7586] bond6 (unregistering): Released all slaves [ 713.276349][ T7586] bond7 (unregistering): Released all slaves [ 713.293903][ T7586] bond8 (unregistering): Released all slaves [ 713.459907][T27839] syzkaller0: entered promiscuous mode [ 713.473719][T27839] syzkaller0: entered allmulticast mode [ 713.568051][T20909] Bluetooth: hci4: command tx timeout [ 713.575424][ T1737] block nbd3: Possible stuck request ffff888027645240: control (read@1024,1024B). Runtime 300 seconds [ 713.587197][ T1737] block nbd3: Possible stuck request ffff888027630000: control (read@2048,1024B). Runtime 300 seconds [ 713.600776][ T1737] block nbd3: Possible stuck request ffff8880276301c0: control (read@3072,1024B). Runtime 300 seconds [ 713.612156][ T1737] block nbd3: Possible stuck request ffff888027645080: control (read@0,1024B). Runtime 300 seconds [ 713.624289][T27859] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6183'. [ 713.835962][ T7586] tipc: Left network mode [ 715.529844][ T5489] 8021q: adding VLAN 0 to HW filter on device eth1 [ 715.584413][T27904] lo speed is unknown, defaulting to 1000 [ 715.639577][T20909] Bluetooth: hci4: command tx timeout [ 715.690256][T27920] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.6198'. [ 716.086455][T27932] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6204'. [ 717.138275][ T7586] hsr_slave_0: left promiscuous mode [ 717.144931][ T7586] hsr_slave_1: left promiscuous mode [ 717.151712][ T7586] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 717.169812][ T7586] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 717.727867][T20909] Bluetooth: hci4: command tx timeout [ 717.793281][ T7586] team0 (unregistering): Port device team_slave_1 removed [ 717.844100][ T7586] team0 (unregistering): Port device team_slave_0 removed [ 718.187566][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 718.195665][ C0] lec:lec_tx_timeout: lec0 [ 718.200838][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 718.232982][T27965] lo speed is unknown, defaulting to 1000 [ 718.765556][T28013] netlink: 'syz.1.6221': attribute type 1 has an invalid length. [ 718.954543][ T7586] IPVS: stop unused estimator thread 0... [ 719.171810][T28013] 8021q: adding VLAN 0 to HW filter on device bond5 [ 719.198960][T28009] bond5: up delay (1625) is not a multiple of miimon (100), value rounded to 1600 ms [ 719.245708][T28009] bond5: entered allmulticast mode [ 719.541794][T27737] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 719.612610][T27737] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 719.634878][T27737] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 719.665285][T27737] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 719.758275][T27737] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 719.821292][T27737] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 719.852914][T27737] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 719.918678][T27737] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 720.403141][T28078] netlink: 388 bytes leftover after parsing attributes in process `syz.4.6235'. [ 720.456441][T27737] 8021q: adding VLAN 0 to HW filter on device bond0 [ 720.473244][T28076] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6237'. [ 720.514417][T27737] 8021q: adding VLAN 0 to HW filter on device team0 [ 720.560225][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 720.567587][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 720.685306][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 720.692638][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 720.915053][T28094] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 721.421556][T27737] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 721.561951][T27737] veth0_vlan: entered promiscuous mode [ 721.593175][T27737] veth1_vlan: entered promiscuous mode [ 721.622818][T28128] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 721.635569][T28124] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 721.666724][T27737] veth0_macvtap: entered promiscuous mode [ 721.686349][T27737] veth1_macvtap: entered promiscuous mode [ 721.731601][T27737] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 721.766972][T27737] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 721.804412][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 721.836041][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 721.864750][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 721.909685][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 721.999253][T28142] Bluetooth: hci1: Opcode 0x0401 failed: -22 [ 722.414138][T28163] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6261'. [ 722.429199][T28163] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6261'. [ 722.792573][T28179] netdevsim netdevsim0: Direct firmware load for . failed with error -2 [ 722.802462][T28179] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 722.978579][T28191] hm3): entered promiscuous mode [ 723.133026][T28195] lo speed is unknown, defaulting to 1000 [ 723.207694][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 723.215967][ C0] lec:lec_tx_timeout: lec0 [ 723.221077][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 723.259357][T28068] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 723.535304][ T7584] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 723.582839][ T7584] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 723.756285][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 723.774337][T28212] syzkaller1: entered promiscuous mode [ 723.782681][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 723.795154][T28212] syzkaller1: entered allmulticast mode [ 724.318169][T28230] lo speed is unknown, defaulting to 1000 [ 724.380592][ T5836] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 724.393806][ T5836] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 724.405233][ T5836] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 724.420210][ T5836] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 724.428597][ T5836] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 724.433916][T28232] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6287'. [ 724.626815][T28233] lo speed is unknown, defaulting to 1000 [ 724.803504][T16430] syz_tun (unregistering): left allmulticast mode [ 724.811124][T16430] syz_tun (unregistering): left promiscuous mode [ 724.818099][T16430] bridge0: port 1(syz_tun) entered disabled state [ 724.986898][T28240] netdevsim netdevsim3: Direct firmware load for . failed with error -2 [ 725.006079][T28240] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 725.187469][T28254] syzkaller1: entered promiscuous mode [ 725.197187][T28254] syzkaller1: entered allmulticast mode [ 725.565181][ T12] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 725.863309][T28284] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6304'. [ 725.911949][ T12] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 725.986548][T28288] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.6306'. [ 725.999577][T28233] chnl_net:caif_netlink_parms(): no params data found [ 726.032297][ T12] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 726.122280][ T12] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 726.294508][T28299] netdevsim netdevsim2: Direct firmware load for . failed with error -2 [ 726.305834][T28233] bridge0: port 1(bridge_slave_0) entered blocking state [ 726.313617][T28233] bridge0: port 1(bridge_slave_0) entered disabled state [ 726.321310][T28233] bridge_slave_0: entered allmulticast mode [ 726.330937][T28233] bridge_slave_0: entered promiscuous mode [ 726.341478][T28233] bridge0: port 2(bridge_slave_1) entered blocking state [ 726.349359][T28233] bridge0: port 2(bridge_slave_1) entered disabled state [ 726.356889][T28233] bridge_slave_1: entered allmulticast mode [ 726.366940][T28233] bridge_slave_1: entered promiscuous mode [ 726.410791][T28299] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 726.444238][T28233] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 726.460395][T28233] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 726.518879][T20909] Bluetooth: hci5: command tx timeout [ 726.529569][T28233] team0: Port device team_slave_0 added [ 726.612920][T28233] team0: Port device team_slave_1 added [ 726.837846][T28233] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 726.850649][T28233] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 726.909206][T28233] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 726.985902][T28233] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 726.994735][T28233] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 727.060153][T28233] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 727.480969][ T12] bond3 (unregistering): (slave erspan1): Releasing active interface [ 727.532920][T28328] Bluetooth: MGMT ver 1.23 [ 727.564684][ T12] bond4 (unregistering): (slave geneve4): Releasing backup interface [ 727.844186][ T12] bond0 (unregistering): Released all slaves [ 727.863882][ T12] bond1 (unregistering): Released all slaves [ 727.884353][ T12] bond2 (unregistering): Released all slaves [ 727.934921][ T12] bond3 (unregistering): Released all slaves [ 727.965499][ T12] bond4 (unregistering): Released all slaves [ 727.992568][ T12] bond5 (unregistering): Released all slaves [ 728.016737][ T12] bond6 (unregistering): Released all slaves [ 728.048299][ T12] bond7 (unregistering): Released all slaves [ 728.121444][T28314] lo speed is unknown, defaulting to 1000 [ 728.183106][T28233] hsr_slave_0: entered promiscuous mode [ 728.195781][T28233] hsr_slave_1: entered promiscuous mode [ 728.229190][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 728.237458][ C0] lec:lec_tx_timeout: lec0 [ 728.243746][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 728.253461][T28233] debugfs: 'hsr0' already exists in 'hsr' [ 728.286781][T28233] Cannot create hsr debugfs directory [ 728.392581][ T12] tipc: Disabling bearer [ 728.421167][ T12] tipc: Left network mode [ 728.431853][T28345] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.6322'. [ 728.457894][T28349] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6324'. [ 728.526101][T28351] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 728.607834][T20909] Bluetooth: hci5: command tx timeout [ 728.841169][T28358] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6327'. [ 728.851139][T28358] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6327'. [ 728.870916][T28358] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6327'. [ 728.880003][T28358] netlink: 108 bytes leftover after parsing attributes in process `syz.0.6327'. [ 728.891772][T28359] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6326'. [ 728.916244][ T12] debugfs: 'netdev:syzkaller0' already exists in 'phy25' [ 729.899414][T28394] netlink: 'syz.3.6333': attribute type 1 has an invalid length. [ 729.921199][T28394] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6333'. [ 730.215492][ T5894] lo speed is unknown, defaulting to 1000 [ 730.223330][ T5894] syz2: Port: 1 Link DOWN [ 730.395649][ T5489] 8021q: adding VLAN 0 to HW filter on device eth1 [ 730.687976][T20909] Bluetooth: hci5: command tx timeout [ 730.955665][T28409] netdevsim netdevsim0: Direct firmware load for . failed with error -2 [ 730.988282][T28409] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 731.039753][ T12] IPVS: stop unused estimator thread 0... [ 731.722530][T28233] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 731.776213][T28233] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 731.805193][T28233] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 731.859426][T28233] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 731.919072][T28233] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 731.950636][T28233] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 731.976687][T28233] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 732.008813][T28233] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 732.326567][T28465] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6351'. [ 732.532421][T28233] 8021q: adding VLAN 0 to HW filter on device bond0 [ 732.554391][T28477] nbd: must specify a size in bytes for the device [ 732.589971][T28233] 8021q: adding VLAN 0 to HW filter on device team0 [ 732.626644][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 732.633931][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 732.757756][T20909] Bluetooth: hci5: command tx timeout [ 732.825416][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 732.832868][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 733.077090][T28504] netlink: 240 bytes leftover after parsing attributes in process `syz.1.6359'. [ 733.257564][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 733.265718][ C0] lec:lec_tx_timeout: lec0 [ 733.270612][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 733.420823][T28233] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 733.613101][T28523] netlink: 'syz.0.6365': attribute type 1 has an invalid length. [ 733.622755][T28523] netlink: 172 bytes leftover after parsing attributes in process `syz.0.6365'. [ 733.636656][T28526] netlink: 'syz.0.6365': attribute type 1 has an invalid length. [ 733.645581][T28526] netlink: 172 bytes leftover after parsing attributes in process `syz.0.6365'. [ 734.201288][T28543] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 734.348621][T28547] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 734.414824][T28553] geneve2: entered promiscuous mode [ 734.513059][T28565] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.6380'. [ 734.523838][ T129] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 734.542413][ T129] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 734.573900][ T129] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 734.610190][ T129] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 734.731064][T28233] veth0_vlan: entered promiscuous mode [ 734.784077][T28233] veth1_vlan: entered promiscuous mode [ 734.871927][T28233] veth0_macvtap: entered promiscuous mode [ 734.894295][T28233] veth1_macvtap: entered promiscuous mode [ 734.950709][T28233] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 734.955042][T28578] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 734.976580][T28233] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 735.027483][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 735.056350][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 735.081418][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 735.130477][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 735.346619][T28590] netlink: 'syz.0.6389': attribute type 1 has an invalid length. [ 735.385136][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 735.417832][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 735.433463][T28590] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6389'. [ 735.490145][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 735.499245][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 735.525993][T28590] netlink: 'syz.0.6389': attribute type 1 has an invalid length. [ 735.538094][T28590] netlink: 16150 bytes leftover after parsing attributes in process `syz.0.6389'. [ 735.628519][ T7961] IPVS: starting estimator thread 0... [ 735.727706][T28601] IPVS: using max 28 ests per chain, 67200 per kthread [ 735.849738][T28612] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.6395'. [ 735.866595][T28614] syzkaller1: entered promiscuous mode [ 735.874036][T28614] syzkaller1: entered allmulticast mode [ 736.534010][T28648] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.6410'. [ 736.795052][ T5836] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 736.806229][ T5836] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 736.819884][ T5836] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 736.842476][ T5836] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 736.856720][ T5836] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 737.019029][T28663] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 737.283161][T28658] chnl_net:caif_netlink_parms(): no params data found [ 737.418897][T17375] syz_tun (unregistering): left allmulticast mode [ 737.604654][T28681] netlink: 104 bytes leftover after parsing attributes in process `syz.0.6420'. [ 737.649824][T28658] bridge0: port 1(bridge_slave_0) entered blocking state [ 737.657445][T28658] bridge0: port 1(bridge_slave_0) entered disabled state [ 737.664880][T28658] bridge_slave_0: entered allmulticast mode [ 737.673316][T28658] bridge_slave_0: entered promiscuous mode [ 737.684611][T28658] bridge0: port 2(bridge_slave_1) entered blocking state [ 737.694331][T28658] bridge0: port 2(bridge_slave_1) entered disabled state [ 737.704072][T28658] bridge_slave_1: entered allmulticast mode [ 737.712476][T28658] bridge_slave_1: entered promiscuous mode [ 737.789896][T28685] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.6422'. [ 737.803036][T28658] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 737.822300][T28658] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 737.834031][T28687] netlink: 'syz.0.6423': attribute type 6 has an invalid length. [ 737.950520][T28658] team0: Port device team_slave_0 added [ 737.971729][T28658] team0: Port device team_slave_1 added [ 738.046772][T28696] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6426'. [ 738.059877][T28658] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 738.070880][T28658] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 738.101443][T28658] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 738.128658][T28696] tipc: New replicast peer: 255.255.255.255 [ 738.135738][T28696] tipc: Enabled bearer , priority 26 [ 738.145916][T28658] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 738.161670][T28658] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 738.198614][T28658] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 738.277580][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 738.286118][ C0] lec:lec_tx_timeout: lec0 [ 738.291012][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 738.384892][T28658] hsr_slave_0: entered promiscuous mode [ 738.400600][T28658] hsr_slave_1: entered promiscuous mode [ 738.417741][T28658] debugfs: 'hsr0' already exists in 'hsr' [ 738.426862][T28707] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6430'. [ 738.440436][T28708] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6428'. [ 738.456235][T28658] Cannot create hsr debugfs directory [ 738.505681][T28710] syzkaller1: entered promiscuous mode [ 738.511475][T28710] syzkaller1: entered allmulticast mode [ 738.921650][ T5836] Bluetooth: hci3: command tx timeout [ 739.260331][ T797] tipc: Node number set to 233009629 [ 739.454300][T28751] syzkaller1: entered promiscuous mode [ 739.460993][T28751] syzkaller1: entered allmulticast mode [ 739.910527][T28775] tipc: Enabling of bearer rejected, failed to enable media [ 740.084791][T28782] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6457'. [ 740.257871][T28658] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 740.272935][T28658] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 740.293150][T28658] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 740.329978][T28658] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 740.346984][T28658] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 740.389632][T28658] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 740.406769][T28658] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 740.407449][T28797] netlink: 88 bytes leftover after parsing attributes in process `syz.2.6461'. [ 740.447159][T28658] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 740.653708][T28816] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6464'. [ 740.997650][ T5836] Bluetooth: hci3: command tx timeout [ 741.113564][T28833] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.6471'. [ 741.545346][T28842] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6474'. [ 741.688213][T28658] 8021q: adding VLAN 0 to HW filter on device bond0 [ 741.730799][T28658] 8021q: adding VLAN 0 to HW filter on device team0 [ 741.766591][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 741.773872][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 741.824654][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 741.831980][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 742.008573][T28861] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 742.513988][T28658] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 742.645349][T28658] veth0_vlan: entered promiscuous mode [ 742.690042][T28658] veth1_vlan: entered promiscuous mode [ 742.795045][T28658] veth0_macvtap: entered promiscuous mode [ 742.815867][T28658] veth1_macvtap: entered promiscuous mode [ 742.829857][T28898] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 742.881917][T28658] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 742.921626][T28658] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 742.968503][ T48] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 742.994438][ T48] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 743.034606][ T48] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 743.052075][T28907] __nla_validate_parse: 2 callbacks suppressed [ 743.052097][T28907] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6500'. [ 743.078141][ T5836] Bluetooth: hci3: command tx timeout [ 743.091442][ T48] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 743.297609][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 743.305768][ C0] lec:lec_tx_timeout: lec0 [ 743.312353][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 743.481730][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 743.506304][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 743.641101][ T1737] block nbd3: Possible stuck request ffff888027645240: control (read@1024,1024B). Runtime 330 seconds [ 743.652380][ T1737] block nbd3: Possible stuck request ffff888027630000: control (read@2048,1024B). Runtime 330 seconds [ 743.663564][ T1737] block nbd3: Possible stuck request ffff8880276301c0: control (read@3072,1024B). Runtime 330 seconds [ 743.674934][ T1737] block nbd3: Possible stuck request ffff888027645080: control (read@0,1024B). Runtime 330 seconds [ 743.717076][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 743.736659][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 743.924843][T28928] netdevsim netdevsim0: Direct firmware load for . failed with error -2 [ 743.953575][T28928] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 744.154100][T28941] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 744.271377][T28943] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 744.694887][T28958] syzkaller0: entered promiscuous mode [ 744.700839][T28958] syzkaller0: entered allmulticast mode [ 744.727021][T28960] netlink: 'syz.4.6518': attribute type 3 has an invalid length. [ 744.744530][T28960] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6518'. [ 744.835148][T28967] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6517'. [ 745.157718][ T5836] Bluetooth: hci3: command tx timeout [ 745.734778][T28985] sctp: [Deprecated]: syz.4.6523 (pid 28985) Use of int in maxseg socket option. [ 745.734778][T28985] Use struct sctp_assoc_value instead [ 748.333644][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 748.341760][ C0] lec:lec_tx_timeout: lec0 [ 748.346378][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 748.671899][T28997] bridge0: port 3(vlan2) entered blocking state [ 748.684870][T28997] bridge0: port 3(vlan2) entered disabled state [ 748.692419][T28997] vlan2: entered allmulticast mode [ 748.705632][T28997] geneve0: entered allmulticast mode [ 748.716292][T28997] vlan2: entered promiscuous mode [ 748.722008][T28997] geneve0: entered promiscuous mode [ 748.732858][T28998] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6529'. [ 748.742694][T28998] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6529'. [ 748.777134][T29006] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6533'. [ 748.971182][T29015] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 749.241008][T29031] netlink: 'syz.0.6540': attribute type 2 has an invalid length. [ 749.314004][T29037] bridge_slave_1: left allmulticast mode [ 749.331730][T29039] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6544'. [ 749.339105][T29037] bridge_slave_1: left promiscuous mode [ 749.358691][T29037] bridge0: port 2(bridge_slave_1) entered disabled state [ 749.375792][T29037] bridge_slave_0: left allmulticast mode [ 749.387831][T29037] bridge_slave_0: left promiscuous mode [ 749.400869][T29037] bridge0: port 1(bridge_slave_0) entered disabled state [ 749.614902][T29056] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 749.842673][T29064] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6551'. [ 750.122963][T29080] netlink: 'syz.0.6557': attribute type 11 has an invalid length. [ 750.143938][T29080] netlink: 'syz.0.6557': attribute type 23 has an invalid length. [ 750.170253][T29080] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6557'. [ 750.284207][T29094] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 750.444650][T29102] RDS: rds_bind could not find a transport for ::1400:0:0:0, load rds_tcp or rds_rdma? [ 750.725110][T29117] mac80211_hwsim hwsim47 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 750.926550][T29131] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 751.119307][T29143] FAULT_INJECTION: forcing a failure. [ 751.119307][T29143] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 751.133403][T29143] CPU: 0 UID: 0 PID: 29143 Comm: syz.3.6576 Not tainted syzkaller #0 PREEMPT(full) [ 751.133435][T29143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 751.133450][T29143] Call Trace: [ 751.133460][T29143] [ 751.133469][T29143] dump_stack_lvl+0xe8/0x150 [ 751.133510][T29143] should_fail_ex+0x412/0x560 [ 751.133550][T29143] _copy_to_iter+0x1e4/0x17d0 [ 751.133601][T29143] ? __pfx__copy_to_iter+0x10/0x10 [ 751.133636][T29143] ? rcu_is_watching+0x15/0xb0 [ 751.133676][T29143] ? splice_from_pipe_next+0x61c/0x670 [ 751.133709][T29143] ? page_copy_sane+0x4e/0x270 [ 751.133756][T29143] copy_page_to_iter+0x10c/0x1c0 [ 751.133794][T29143] pipe_to_user+0xa8/0x140 [ 751.133829][T29143] __splice_from_pipe+0x34d/0x920 [ 751.133874][T29143] ? __pfx_pipe_to_user+0x10/0x10 [ 751.133910][T29143] __se_sys_vmsplice+0x384/0x1490 [ 751.133941][T29143] ? get_pid_task+0x20/0x1f0 [ 751.133974][T29143] ? get_pid_task+0x20/0x1f0 [ 751.133993][T29143] ? get_pid_task+0x20/0x1f0 [ 751.134020][T29143] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 751.134068][T29143] ? ksys_write+0x1e6/0x270 [ 751.134105][T29143] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 751.134138][T29143] ? __pfx_vfs_write+0x10/0x10 [ 751.134175][T29143] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 751.134219][T29143] ? fput+0xa0/0xd0 [ 751.134246][T29143] ? ksys_write+0x242/0x270 [ 751.134294][T29143] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 751.134320][T29143] do_syscall_64+0x15f/0xf80 [ 751.134348][T29143] ? trace_irq_disable+0x3b/0x140 [ 751.134373][T29143] ? clear_bhb_loop+0x40/0x90 [ 751.134400][T29143] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 751.134422][T29143] RIP: 0033:0x7f89f1b9c819 [ 751.134444][T29143] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 751.134464][T29143] RSP: 002b:00007f89f29f5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 751.134490][T29143] RAX: ffffffffffffffda RBX: 00007f89f1e16180 RCX: 00007f89f1b9c819 [ 751.134507][T29143] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 0000000000000004 [ 751.134522][T29143] RBP: 00007f89f29f5090 R08: 0000000000000000 R09: 0000000000000000 [ 751.134536][T29143] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 751.134551][T29143] R13: 00007f89f1e16218 R14: 00007f89f1e16180 R15: 00007ffdf8969098 [ 751.134587][T29143] [ 751.460826][T29148] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 751.578693][T29152] sctp: [Deprecated]: syz.1.6581 (pid 29152) Use of struct sctp_assoc_value in delayed_ack socket option. [ 751.578693][T29152] Use struct sctp_sack_info instead [ 751.630850][T29122] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 751.773514][T29158] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6584'. [ 751.915020][T29165] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 751.955022][T29168] netlink: 'syz.4.6588': attribute type 1 has an invalid length. [ 751.965175][T29168] netlink: 'syz.4.6588': attribute type 2 has an invalid length. [ 751.976466][T29168] netlink: 'syz.4.6588': attribute type 1 has an invalid length. [ 751.984924][T29168] netlink: 'syz.4.6588': attribute type 2 has an invalid length. [ 752.402094][T29149] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 752.501136][T29199] FAULT_INJECTION: forcing a failure. [ 752.501136][T29199] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 752.515388][T29199] CPU: 1 UID: 0 PID: 29199 Comm: syz.4.6598 Not tainted syzkaller #0 PREEMPT(full) [ 752.515420][T29199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 752.515436][T29199] Call Trace: [ 752.515446][T29199] [ 752.515457][T29199] dump_stack_lvl+0xe8/0x150 [ 752.515497][T29199] should_fail_ex+0x412/0x560 [ 752.515537][T29199] prepare_alloc_pages+0x22a/0x650 [ 752.515572][T29199] __alloc_frozen_pages_noprof+0x12f/0x380 [ 752.515601][T29199] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 752.515631][T29199] ? __pfx_policy_nodemask+0x10/0x10 [ 752.515659][T29199] ? __lock_acquire+0x6b5/0x2cf0 [ 752.515694][T29199] alloc_pages_mpol+0x232/0x4a0 [ 752.515724][T29199] vma_alloc_folio_noprof+0xea/0x210 [ 752.515753][T29199] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 752.515789][T29199] do_wp_page+0x1204/0x5a00 [ 752.515828][T29199] ? __pte_offset_map+0x29/0x240 [ 752.515870][T29199] ? __pfx_do_wp_page+0x10/0x10 [ 752.515894][T29199] ? do_raw_spin_lock+0x12b/0x2f0 [ 752.515922][T29199] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 752.515958][T29199] handle_mm_fault+0x1520/0x3310 [ 752.516003][T29199] ? handle_mm_fault+0xee/0x3310 [ 752.516042][T29199] ? __pfx_handle_mm_fault+0x10/0x10 [ 752.516096][T29199] ? __pfx___schedule+0x10/0x10 [ 752.516119][T29199] ? __lock_acquire+0x6b5/0x2cf0 [ 752.516153][T29199] ? lock_mm_and_find_vma+0xa7/0x340 [ 752.516191][T29199] do_user_addr_fault+0x75b/0x1340 [ 752.516285][T29199] exc_page_fault+0x6a/0xc0 [ 752.516314][T29199] asm_exc_page_fault+0x26/0x30 [ 752.516337][T29199] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 752.516372][T29199] Code: cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 752.516392][T29199] RSP: 0018:ffffc90003f1f818 EFLAGS: 00050206 [ 752.516414][T29199] RAX: ffffffff84ad5501 RBX: ffff88804b61e000 RCX: 0000000000000500 [ 752.516431][T29199] RDX: 0000000000000000 RSI: ffff88804b61eb00 RDI: 0000200000002000 [ 752.516447][T29199] RBP: ffffc90003f1f9a0 R08: ffff88804b61efff R09: 1ffff110096c3dff [ 752.516464][T29199] R10: dffffc0000000000 R11: ffffed10096c3e00 R12: 1ffff920007e3fc7 [ 752.516482][T29199] R13: 0000200000001500 R14: ffffc90003f1fe48 R15: 0000000000001000 [ 752.516507][T29199] ? _copy_to_iter+0x1c1/0x17d0 [ 752.516553][T29199] _copy_to_iter+0x255/0x17d0 [ 752.516604][T29199] ? __pfx__copy_to_iter+0x10/0x10 [ 752.516640][T29199] ? rcu_is_watching+0x15/0xb0 [ 752.516678][T29199] ? splice_from_pipe_next+0x61c/0x670 [ 752.516708][T29199] ? page_copy_sane+0x4e/0x270 [ 752.516747][T29199] copy_page_to_iter+0x10c/0x1c0 [ 752.516786][T29199] pipe_to_user+0xa8/0x140 [ 752.516821][T29199] __splice_from_pipe+0x34d/0x920 [ 752.516867][T29199] ? __pfx_pipe_to_user+0x10/0x10 [ 752.516904][T29199] __se_sys_vmsplice+0x384/0x1490 [ 752.516935][T29199] ? get_pid_task+0x20/0x1f0 [ 752.516968][T29199] ? get_pid_task+0x20/0x1f0 [ 752.516987][T29199] ? get_pid_task+0x20/0x1f0 [ 752.517014][T29199] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 752.517069][T29199] ? ksys_write+0x1e6/0x270 [ 752.517107][T29199] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 752.517137][T29199] ? __pfx_vfs_write+0x10/0x10 [ 752.517175][T29199] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 752.517220][T29199] ? fput+0xa0/0xd0 [ 752.517247][T29199] ? ksys_write+0x242/0x270 [ 752.517296][T29199] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 752.517321][T29199] do_syscall_64+0x15f/0xf80 [ 752.517347][T29199] ? trace_irq_disable+0x3b/0x140 [ 752.517372][T29199] ? clear_bhb_loop+0x40/0x90 [ 752.517400][T29199] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 752.517423][T29199] RIP: 0033:0x7fb83419c819 [ 752.517444][T29199] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 752.517464][T29199] RSP: 002b:00007fb8323ac028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 752.517487][T29199] RAX: ffffffffffffffda RBX: 00007fb834416180 RCX: 00007fb83419c819 [ 752.517515][T29199] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 0000000000000004 [ 752.517529][T29199] RBP: 00007fb8323ac090 R08: 0000000000000000 R09: 0000000000000000 [ 752.517544][T29199] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 752.517561][T29199] R13: 00007fb834416218 R14: 00007fb834416180 R15: 00007ffc0b847db8 [ 752.517602][T29199] [ 753.156693][T29203] syzkaller0: entered promiscuous mode [ 753.163331][ T48] wlan1: Trigger new scan to find an IBSS to join [ 753.173465][T29203] syzkaller0: entered allmulticast mode [ 754.528278][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 6180 ms [ 754.536442][ C0] lec:lec_tx_timeout: lec0 [ 754.542964][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 756.439468][ T31] INFO: task udevd:14955 blocked for more than 143 seconds. [ 756.449095][ T31] Not tainted syzkaller #0 [ 756.454239][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 756.465410][ T31] task:udevd state:D stack:20360 pid:14955 tgid:14955 ppid:5194 task_flags:0x400140 flags:0x00080802 [ 756.478083][ T31] Call Trace: [ 756.481464][ T31] [ 756.484433][ T31] __schedule+0x17b4/0x5680 [ 756.489328][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 756.494388][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 756.500132][ T31] ? __pfx___schedule+0x10/0x10 [ 756.505069][ T31] ? schedule+0x90/0x360 [ 756.509834][ T31] schedule+0x164/0x360 [ 756.514078][ T31] io_schedule+0x7f/0xd0 [ 756.518891][ T31] folio_wait_bit_common+0x6d8/0xbc0 [ 756.524337][ T31] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 756.530399][ T31] ? filemap_read_folio+0x23e/0x3b0 [ 756.535678][ T31] ? __pfx_wake_page_function+0x10/0x10 [ 756.541518][ T31] ? __filemap_get_folio_mpol+0x7a9/0xb00 [ 756.547336][ T31] do_read_cache_folio+0x1ad/0x590 [ 756.553004][ T31] ? __pfx_blkdev_read_folio+0x10/0x10 [ 756.558801][ T31] read_part_sector+0xb6/0x2b0 [ 756.563751][ T31] adfspart_check_POWERTEC+0x9a/0x7a0 [ 756.569466][ T31] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 756.575882][ T31] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 756.581660][ T31] ? __pfx_adfspart_check_POWERTEC+0x10/0x10 [ 756.588328][ T31] bdev_disk_changed+0x817/0x1770 [ 756.593726][ T31] ? __pfx_bdev_disk_changed+0x10/0x10 [ 756.602097][ T31] blkdev_get_whole+0x380/0x510 [ 756.607096][ T31] bdev_open+0x31e/0xd30 [ 756.611773][ T31] blkdev_open+0x470/0x610 [ 756.616276][ T31] ? __pfx_blkdev_open+0x10/0x10 [ 756.621616][ T31] do_dentry_open+0x785/0x14e0 [ 756.626498][ T31] vfs_open+0x3b/0x340 [ 756.631606][ T31] ? path_openat+0x2df0/0x3860 [ 756.636476][ T31] path_openat+0x2e08/0x3860 [ 756.642965][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 756.648714][ T31] ? stack_depot_save_flags+0x33/0x810 [ 756.654371][ T31] ? __pfx_path_openat+0x10/0x10 [ 756.659474][ T31] ? __x64_sys_openat+0x138/0x170 [ 756.664564][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 756.669672][ T31] do_file_open+0x23e/0x4a0 [ 756.674259][ T31] ? __pfx_do_file_open+0x10/0x10 [ 756.680693][ T31] ? _raw_spin_unlock+0x28/0x50 [ 756.685813][ T31] ? alloc_fd+0x64b/0x6c0 [ 756.690325][ T31] do_sys_openat2+0x113/0x200 [ 756.695063][ T31] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 756.701983][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 756.707290][ T31] ? rcu_is_watching+0x15/0xb0 [ 756.712343][ T31] __x64_sys_openat+0x138/0x170 [ 756.717390][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 756.723762][ T31] do_syscall_64+0x15f/0xf80 [ 756.728550][ T31] ? clear_bhb_loop+0x40/0x90 [ 756.733384][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 756.740238][ T31] RIP: 0033:0x7fee8b8a7407 [ 756.744857][ T31] RSP: 002b:00007ffe601d5620 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 756.753539][ T31] RAX: ffffffffffffffda RBX: 00007fee8c050880 RCX: 00007fee8b8a7407 [ 756.761792][ T31] RDX: 00000000000a0800 RSI: 0000563b4ae49360 RDI: ffffffffffffff9c [ 756.769969][ T31] RBP: 0000563b4ae48910 R08: 0000000000000000 R09: 0000000000000000 [ 756.778228][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000563b4ae5cba0 [ 756.786504][ T31] R13: 0000563b4ae56190 R14: 0000000000000000 R15: 0000563b4ae5cba0 [ 756.794643][ T31] [ 756.811607][ T31] [ 756.811607][ T31] Showing all locks held in the system: [ 756.819574][ T31] 4 locks held by kworker/u8:0/12: [ 756.824755][ T31] #0: ffff88801be9e940 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 756.836053][ T31] #1: ffffc90000117c40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 756.846955][ T31] #2: ffffffff8fdc01c8 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf4/0x800 [ 756.856650][ T31] #3: ffffffff8fdceac0 (rtnl_mutex){+.+.}-{4:4}, at: caif_exit_net+0x6a/0x4a0 [ 756.866024][ T31] 1 lock held by khungtaskd/31: [ 756.871021][ T31] #0: ffffffff8e95d020 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 756.881146][ T31] 2 locks held by getty/5580: [ 756.885928][ T31] #0: ffff8880369e10a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 756.896002][ T31] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13a0 [ 756.906233][ T31] 1 lock held by udevd/14955: [ 756.911034][ T31] #0: ffff8880275fb350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 756.920658][ T31] 2 locks held by syz.2.6510/28941: [ 756.925896][ T31] #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 756.934281][ T31] #1: ffffffff8ec88660 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x141/0x1670 [ 756.945475][ T31] 2 locks held by syz.1.6600/29202: [ 756.950863][ T31] #0: ffffffff8fdceac0 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 756.960156][ T31] #1: ffffffff8e963328 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 756.971310][ T31] 1 lock held by syz.4.6607/29219: [ 756.976556][ T31] #0: ffffffff8fdceac0 (rtnl_mutex){+.+.}-{4:4}, at: tc_new_tfilter+0x4dd/0x1780 [ 756.986311][ T31] 2 locks held by syz.3.6608/29221: [ 756.991642][ T31] #0: ffffffff8fdc01c8 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730 [ 757.001305][ T31] #1: ffffffff8fdceac0 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x1a/0xa0 [ 757.011930][ T31] 1 lock held by syz.0.6612/29233: [ 757.017098][ T31] #0: ffffffff8fdceac0 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x722/0xbe0 [ 757.026854][ T31] [ 757.043755][ T31] ============================================= [ 757.043755][ T31] [ 757.057639][ T31] NMI backtrace for cpu 0 [ 757.057662][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 757.057684][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 757.057697][ T31] Call Trace: [ 757.057708][ T31] [ 757.057717][ T31] dump_stack_lvl+0xe8/0x150 [ 757.057753][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 757.057890][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 757.057920][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 757.057953][ T31] sys_info+0x135/0x170 [ 757.057985][ T31] watchdog+0xfaa/0x1000 [ 757.058023][ T31] ? watchdog+0x209/0x1000 [ 757.058050][ T31] kthread+0x388/0x470 [ 757.058070][ T31] ? __pfx_watchdog+0x10/0x10 [ 757.058088][ T31] ? __pfx_kthread+0x10/0x10 [ 757.058108][ T31] ret_from_fork+0x514/0xb70 [ 757.058160][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 757.058186][ T31] ? __switch_to+0xc79/0x1410 [ 757.058212][ T31] ? __pfx_kthread+0x10/0x10 [ 757.058232][ T31] ret_from_fork_asm+0x1a/0x30 [ 757.058277][ T31] [ 757.058321][ T31] Sending NMI from CPU 0 to CPUs 1: [ 757.173104][ C1] NMI backtrace for cpu 1 [ 757.173127][ C1] CPU: 1 UID: 0 PID: 27294 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 757.173149][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 757.173161][ C1] RIP: 0010:__update_load_avg_se+0x530/0xbe0 [ 757.173221][ C1] Code: bd 7e b6 00 00 80 7c 24 20 00 0f 85 5d ff ff ff 4c 8b 6c 24 38 41 0f b6 44 35 00 84 c0 0f 85 5f 06 00 00 45 89 08 22 54 24 07 <4d> 85 e4 74 4e 89 e8 4c 0f af e0 49 c1 e4 0a 4c 8d bb 10 01 00 00 [ 757.173238][ C1] RSP: 0018:ffffc9000d9f7728 EFLAGS: 00000002 [ 757.173256][ C1] RAX: 1ffff11014979409 RBX: ffff8880a4bc9f40 RCX: 000000000000031c [ 757.173270][ C1] RDX: ffff8880a4bc9f01 RSI: dffffc0000000000 RDI: ffff8880a4bc9f98 [ 757.173284][ C1] RBP: 0000000000000003 R08: ffff8880a4bca05c R09: 1ffffffff20642b6 [ 757.173297][ C1] R10: dffffc0000000000 R11: fffffbfff20642b7 R12: 0000000000000001 [ 757.173310][ C1] R13: 1ffff1101497940b R14: 000000a1dd7c7000 R15: ffff8880a4bca048 [ 757.173325][ C1] FS: 0000555567548500(0000) GS:ffff888125345000(0000) knlGS:0000000000000000 [ 757.173341][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 757.173354][ C1] CR2: 00007f59872bfff8 CR3: 000000006b16a000 CR4: 00000000003526f0 [ 757.173371][ C1] Call Trace: [ 757.173379][ C1] [ 757.173391][ C1] ? update_se+0x311/0x610 [ 757.173420][ C1] update_load_avg+0x1a5/0x1eb0 [ 757.173450][ C1] dequeue_entities+0x468/0x3aa0 [ 757.173472][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 757.173501][ C1] dequeue_task_fair+0x200/0x660 [ 757.173523][ C1] __schedule+0x6dc/0x5680 [ 757.173550][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 757.173580][ C1] ? __pfx___schedule+0x10/0x10 [ 757.173606][ C1] ? schedule+0x90/0x360 [ 757.173627][ C1] schedule+0x164/0x360 [ 757.173648][ C1] do_nanosleep+0x1c2/0x620 [ 757.173667][ C1] ? do_nanosleep+0x80/0x620 [ 757.173686][ C1] ? __pfx_do_nanosleep+0x10/0x10 [ 757.173703][ C1] ? __asan_memset+0x22/0x50 [ 757.173728][ C1] ? __hrtimer_setup+0x1b7/0x260 [ 757.173755][ C1] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 757.173776][ C1] hrtimer_nanosleep+0x18f/0x3a0 [ 757.173806][ C1] ? __pfx_hrtimer_nanosleep+0x10/0x10 [ 757.173838][ C1] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 757.173864][ C1] __se_sys_clock_nanosleep+0x35b/0x3b0 [ 757.173884][ C1] ? __pfx___se_sys_clock_nanosleep+0x10/0x10 [ 757.173908][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 757.173928][ C1] do_syscall_64+0x15f/0xf80 [ 757.173952][ C1] ? clear_bhb_loop+0x40/0x90 [ 757.173974][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 757.173992][ C1] RIP: 0033:0x7f598635d04e [ 757.174009][ C1] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 757.174025][ C1] RSP: 002b:00007ffca3c7b1c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 [ 757.174043][ C1] RAX: ffffffffffffffda RBX: 0000555567548500 RCX: 00007f598635d04e [ 757.174057][ C1] RDX: 00007ffca3c7b220 RSI: 0000000000000000 RDI: 0000000000000000 [ 757.174069][ C1] RBP: 00007ffca3c7b28c R08: 0000000000000000 R09: 0000000000000000 [ 757.174081][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000001388 [ 757.174093][ C1] R13: 00000000000927c0 R14: 00000000000b8ba3 R15: 00007ffca3c7b2e0 [ 757.174116][ C1] [ 757.555533][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 757.562503][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 757.571781][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 757.581985][ T31] Call Trace: [ 757.585329][ T31] [ 757.588309][ T31] vpanic+0x56c/0xa60 [ 757.592361][ T31] ? __pfx___schedule+0x10/0x10 [ 757.597553][ T31] ? __pfx_vpanic+0x10/0x10 [ 757.602212][ T31] ? __pfx_console_unlock+0x10/0x10 [ 757.607572][ T31] panic+0xc5/0xd0 [ 757.611354][ T31] ? __pfx_panic+0x10/0x10 [ 757.615812][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 757.621337][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 757.627554][ T31] watchdog+0xff4/0x1000 [ 757.631940][ T31] ? watchdog+0x209/0x1000 [ 757.636412][ T31] kthread+0x388/0x470 [ 757.640520][ T31] ? __pfx_watchdog+0x10/0x10 [ 757.645242][ T31] ? __pfx_kthread+0x10/0x10 [ 757.649878][ T31] ret_from_fork+0x514/0xb70 [ 757.654520][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 757.659773][ T31] ? __switch_to+0xc79/0x1410 [ 757.664482][ T31] ? __pfx_kthread+0x10/0x10 [ 757.669108][ T31] ret_from_fork_asm+0x1a/0x30 [ 757.673936][ T31] [ 757.677609][ T31] Kernel Offset: disabled [ 757.681956][ T31] Rebooting in 86400 seconds..