last executing test programs: 3.406395193s ago: executing program 0 (id=4036): r0 = socket(0x2, 0x3, 0xff) setsockopt$inet_int(r0, 0x0, 0x3, 0x0, 0x0) socket(0x1e, 0x4, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000000)={'veth0_to_team\x00', 0x400}) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) socket$pptp(0x18, 0x1, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x28, r3, 0x4c1dad3e3d6a7499, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000080}, 0x2400c000) 3.098499398s ago: executing program 0 (id=4039): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = accept(r0, &(0x7f0000000080), 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x1b, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_BSS(r2, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={0x0, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x24000000) connect$bt_rfcomm(r0, &(0x7f0000000040)={0x1f, @any, 0x2}, 0xa) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x884) connect$bt_rfcomm(r4, &(0x7f00000001c0)={0x1f, @none, 0x1}, 0xa) shutdown(r0, 0x1) gettid() sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004c40)=[{{&(0x7f0000000040)=@abs={0x0, 0x0, 0x4e24}, 0x6e, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18, 0x40004}}], 0x1, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000a80)) getgid() r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0902000000000000000001000000050002000a00000014000700ff00000000000000000000000000000108000b00", @ANYRESOCT], 0x38}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = gettid() sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="942a000004000600140012800900010076657468000000000454f88008001300", @ANYRES32=r9], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008040) 2.798418023s ago: executing program 4 (id=4044): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, 0x0, 0x40810) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r0, 0x2000012, 0xd, 0x0, &(0x7f00000004c0)="63eced8e46dc3f2ddf33c9e9b9", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 2.674439602s ago: executing program 4 (id=4045): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x2000d00, 0x3, 0x0, &(0x7f0000000140)="a06ad8", 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x50) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b0000000a000000fe8000000000000000000000000000aa00000000040000000000000000000000000000000777976b"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r2, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r2, &(0x7f0000004d00), 0x7fffffffffffd33, 0x20000890) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) socket$packet(0x11, 0x3, 0x300) r5 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r5, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r5, &(0x7f0000002140)={0xa, 0x4e28, 0x8, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4001c00) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$FITRIM(r3, 0xc0185879, &(0x7f0000000300)={0x14d, 0x35, 0x6}) write(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x53, 0x0, &(0x7f0000000040)=0xf) 2.158642918s ago: executing program 0 (id=4051): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da97e22f4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ad0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bff3b89c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c2ed01faa7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497dad64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6fba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd2310801570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb414c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a000000000000000000000000000000000000000000000000000000a0cc2b89ce1525748ce167cbabb881f060599a6a59f645edca1d5c24b2f6b8c997a8f3e1b7679984a566d98d4d31198ee4c5ea7be0d99cf89bba4a6fd0bec12e7792bec3c5038e13b1"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r1, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000700)={0x0, 0x81, 0x10}, &(0x7f0000000040)=0xc) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_open_procfs$namespace(0x0, 0x0) unshare(0x6a040000) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) unshare(0x6a040000) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'wrr\x00', 0x0, 0xff, 0x12}, 0x2c) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, 0x0, 0x0) 1.899002637s ago: executing program 1 (id=4053): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, 0x0, 0x0, 0x931766f6319eed40) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000fbffffff00000000000000008500000041000000850000001100010095000000000000001324287584fa8591db1b54fb1fa002d0623fe331814284b3df1d728cb3f27ee19de56c7dd7f017518ce509a60629a4153fb861956545ea9b1f24d7b548df845e4f20212f207ab2c4e591adeff10063fc29e43bb0b3e8b48d184fc5efab217e44"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket(0x840000000002, 0x3, 0x100) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10) sendmmsg$inet(r2, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_msfilter(r2, 0x0, 0x29, 0x0, 0x1c) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000040)={0x2000003c, &(0x7f0000000280)}) bind$bt_hci(r6, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) connect$inet(r5, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) write$bt_hci(r6, &(0x7f0000000040)=ANY=[], 0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2800000070000100000000000000000007000000", @ANYRES32=r9, @ANYBLOB="10000180040004"], 0x28}}, 0x0) bind$nfc_llcp(r4, &(0x7f0000000240)={0x27, 0x0, 0x0, 0x2, 0x0, 0x6, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0x10000000000003}, 0x60) close(r4) ioctl$TUNSETLINK(r3, 0x400454cd, 0x118) socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f00000001c0)={'syzkaller1\x00', @broadcast}) write$tun(r3, &(0x7f0000001400)=ANY=[@ANYBLOB='\x00\x00\x00\f'], 0x152) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 1.886816031s ago: executing program 3 (id=4054): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@private0={0xfc, 0x0, '\x00', 0x4}, @in6=@dev={0xfe, 0x80, '\x00', 0x11}, 0x0, 0x0, 0x4, 0x0, 0x2}, {0x0, 0x4, 0x913d, 0x0, 0x0, 0xf42, 0x8}, {0x0, 0x0, 0xfffffffffffffffc, 0xfffefffffffffffe}, 0x0, 0x0, 0x1, 0x0, 0x4}, {{@in6=@private2, 0x0, 0x33}, 0x0, @in=@multicast1, 0x3502, 0x0, 0x2, 0x4, 0x5, 0x0, 0x1}}, 0xe8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) 1.704358446s ago: executing program 3 (id=4055): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x30}}, 0x0) 1.573387414s ago: executing program 2 (id=4056): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x2) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x40, 0x0, 0x38, 0x8}, {0x6, 0xfc}]}) ioctl$PPPIOCSDEBUG(r0, 0x40047440, &(0x7f0000000240)=0x10001) write(r0, &(0x7f0000000280)="4591", 0x5e) 1.530038523s ago: executing program 1 (id=4057): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000480)="b19ccccf84f531d9", 0x8) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40020}, 0x24044195) r3 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000ec0)=ANY=[@ANYBLOB="1000000000000000840000000800000018000000000000008400000002"], 0x28}, 0x41) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r4, &(0x7f00000003c0)={0x1f, 0x3, @any, 0xfff9}, 0xe) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="660a00000700000061114c0000000000850000"], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x41000}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0xd, 0x1, 'connmark\x00'}, @NFTA_MATCH_INFO={0x10, 0x3, "a62a1a4094b2c56d78942e97"}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x9}}}, 0x88}}, 0x0) r5 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) write$ppp(r5, &(0x7f00000004c0)="9b2ec04694fdc0db12a55b65093b1f7490232481ce3611984107b04b1c36e9221d3b0b8cc2ace8ee6ea31deec91f744450d9941528f9c8edbe97a4ca1f279d2aece69803e0b253c2c144709708879a12f2a35f5dde2b4b13f3cdf7ea61f17f700a6f1041d408aafeb798d647b295ce90cff04d0563b8572025418b7d37e8159c482fb7b58230f4d536a915388a78786401fab056a02dd30adb2a6fc8237683d6", 0xa0) close(0x3) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000002400010325bd7000fcdfffff01000000c7a8e4fb902a53e7fc4eaee77886d461453392c6644ef9079d77a1ea146957b026c390202cd164ce7bb6d6e6d2b014e0217ff998557b53e2ea034c74cb5ed93d"], 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x1) r6 = socket(0x1e, 0x4, 0x0) connect$tipc(r6, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) sendmmsg$unix(r6, &(0x7f0000004400), 0x400000000000203, 0x0) connect$can_bcm(r6, &(0x7f0000000080)={0x1e}, 0x10) recvmmsg(r2, &(0x7f00000009c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000600)=""/42, 0x2a}], 0x1}, 0x8}], 0x1, 0x2160, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) 1.489117878s ago: executing program 3 (id=4058): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000003b00)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x3da, 0x4) sendto$packet(r0, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe955, 0x0, &(0x7f0000000540)={0xc9, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 1.364848702s ago: executing program 4 (id=4059): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000400)={0xa, 0x4e27, 0x0, @loopback, 0x5a1}, 0x1c, 0x0}}], 0x1, 0x4) recvmmsg(r0, &(0x7f0000000800), 0x62, 0x12141, 0x0) 1.349260555s ago: executing program 3 (id=4060): syz_emit_ethernet(0xbe, &(0x7f00000008c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x500, 0x0, 0x0, 0x11, 0x0, @dev={0xac, 0x14, 0x14, 0xff}, @local}, {0x800, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "6fdfa0d2001efbb3e29a4ac275ca11b984ff5def6ed2e4ea9bc0eabdd34c732b", "df23520b57e4c98679c7795a27c7bf3e7d776b600ba8d82d6ba417e219edd86fb708441efcf75fe803412dae374281c2", "5df814aa2e34e4f8a759805b993e2d69a8f476de686861a9850edbe3", {"2cfee9b9d5b0b2b171b51f9174963b0c", "e40ca7e0a7b4bbc4bc9720c876a57954"}}}}}}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'erspan0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000180)="0b032200e0ff25000212475400f6a13bb1000000080086dd4803", 0x1a, 0x0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1c}, @NFTA_SET_ID={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x40}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x6}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_KEY_END={0x4}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd8}}, 0x4000000) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) r6 = socket$kcm(0x10, 0x2, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0x1, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x58, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'vcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00'}) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, &(0x7f0000000680)={0x1, 0x8, @status={[0xfffffffffffffffe, 0x0, 0x100000000, 0x8, 0x4, 0xfb4]}, [0x7, 0x417, 0x1cde, 0x81, 0x5, 0x40, 0x7, 0x100000001, 0xee, 0x2, 0xfffffffffffffff7, 0x7, 0x200, 0x1, 0xffff, 0xfffffffffffffffc, 0x9, 0x1, 0xd27, 0x6, 0x2, 0x480000000000000, 0xffbd, 0x1000, 0x7, 0xff, 0x4bd, 0x18000000, 0x8, 0x62, 0x8001, 0xb1b, 0x7, 0x9, 0x81, 0x0, 0x0, 0x5, 0x8, 0x2, 0x9, 0x0, 0xfffffffffffffff9, 0xb24c, 0x4, 0x800, 0x0, 0x2, 0xe, 0x3, 0x9, 0xffffffff, 0x1, 0x3, 0x6, 0x7fff, 0x401, 0x1, 0xfffffffffffffffd, 0xf, 0x100000001, 0x0, 0x6, 0x8]}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'ip6tnl0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0xc4, r1, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000600)=@get={0x1, &(0x7f0000000500)=""/247, 0x7ff}) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000002d00010026bdf000fcdbdf25040000000400190008000c"], 0x20}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 1.236133528s ago: executing program 4 (id=4061): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = accept(r0, &(0x7f0000000080), &(0x7f0000000000)=0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1b, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_BSS(r1, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={0x0, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x24000000) connect$bt_rfcomm(r0, &(0x7f0000000040)={0x1f, @any, 0x2}, 0xa) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x884) connect$bt_rfcomm(r3, &(0x7f00000001c0)={0x1f, @none, 0x1}, 0xa) shutdown(r0, 0x1) gettid() sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004c40)=[{{&(0x7f0000000040)=@abs={0x0, 0x0, 0x4e24}, 0x6e, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18, 0x40004}}], 0x1, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000a80)) getgid() r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0902000000000000000001000000050002000a00000014000700ff00000000000000000000000000000108000b00", @ANYRESOCT], 0x38}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = gettid() sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="942a000004000600140012800900010076657468000000000454f88008001300", @ANYRES32=r8], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008040) 1.20137587s ago: executing program 0 (id=4062): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000002180)=ANY=[@ANYBLOB="000086dd00000a0000008d00000867650db711c8000020010000000000000000000000000001fc0200000000000000000000000000007301"], 0x11fe) 1.138163259s ago: executing program 1 (id=4063): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r2, 0x1, 0x70bd26, 0x25dfdbfe, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa5}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}]}, 0x34}}, 0x20) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000080850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r5}, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r6) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r6, 0x9) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r9, @ANYBLOB="010000000000fbdbdf25010000000800020000000000050005000000000008000300010000004800018005000200200000000600"], 0x84}, 0x1, 0x0, 0x0, 0x4800}, 0x20000000) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r9, 0x1, 0x70bd2c, 0x25dbdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x54) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) 1.137813968s ago: executing program 2 (id=4064): syz_emit_ethernet(0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendto$packet(r2, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x14) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x4000000) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000", 0x2c}], 0x1}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'vcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00'}) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, &(0x7f0000000680)={0x1, 0x8, @status={[0xfffffffffffffffe, 0x0, 0x100000000, 0x8, 0x4, 0xfb4]}, [0x7, 0x417, 0x1cde, 0x81, 0x5, 0x40, 0x7, 0x100000001, 0xee, 0x2, 0xfffffffffffffff7, 0x7, 0x200, 0x1, 0xffff, 0xfffffffffffffffc, 0x9, 0x1, 0xd27, 0x6, 0x2, 0x480000000000000, 0xffbd, 0x1000, 0x7, 0xff, 0x4bd, 0x18000000, 0x8, 0x62, 0x8001, 0xb1b, 0x7, 0x9, 0x81, 0x0, 0x0, 0x5, 0x8, 0x2, 0x9, 0x0, 0xfffffffffffffff9, 0xb24c, 0x4, 0x800, 0x0, 0x2, 0xe, 0x3, 0x9, 0xffffffff, 0x1, 0x3, 0x6, 0x7fff, 0x401, 0x1, 0xfffffffffffffffd, 0xf, 0x100000001, 0x0, 0x6, 0x8]}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'ip6tnl0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0xc4, r1, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000002d00010026bdf000fcdbdf25040000000400190008000c"], 0x20}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 962.721806ms ago: executing program 4 (id=4065): sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000980)={0x10, 0x22, 0x1}, 0x10}], 0x1}, 0x80) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x94}, 0xe) r1 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f0000000000)=ANY=[@ANYRES32=r0]) 830.132432ms ago: executing program 3 (id=4066): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = accept(r0, &(0x7f0000000080), 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x1b, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_BSS(r2, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={0x0, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x24000000) connect$bt_rfcomm(r0, &(0x7f0000000040)={0x1f, @any, 0x2}, 0xa) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x884) connect$bt_rfcomm(r4, &(0x7f00000001c0)={0x1f, @none, 0x1}, 0xa) shutdown(r0, 0x1) gettid() sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004c40)=[{{&(0x7f0000000040)=@abs={0x0, 0x0, 0x4e24}, 0x6e, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18, 0x40004}}], 0x1, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000a80)) getgid() r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0902000000000000000001000000050002000a00000014000700ff00000000000000000000000000000108000b00", @ANYRESOCT], 0x38}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = gettid() sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="942a000004000600140012800900010076657468000000000454f88008001300", @ANYRES32=r9], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008040) 542.541673ms ago: executing program 1 (id=4067): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, 0x0, 0x0, 0x931766f6319eed40) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000001440)={0x0, 0x7}, 0x8) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket(0x840000000002, 0x3, 0x100) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10) sendmmsg$inet(r2, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_msfilter(r2, 0x0, 0x29, 0x0, 0x1c) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000040)={0x2000003c, &(0x7f0000000280)}) bind$bt_hci(r6, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) connect$inet(r5, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) write$bt_hci(r6, &(0x7f0000000040)=ANY=[], 0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2800000070000100000000000000000007000000", @ANYRES32=r9, @ANYBLOB="10000180040004"], 0x28}}, 0x0) bind$nfc_llcp(r4, &(0x7f0000000240)={0x27, 0x0, 0x0, 0x2, 0x0, 0x6, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0x10000000000003}, 0x60) close(r4) ioctl$TUNSETLINK(r3, 0x400454cd, 0x118) socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f00000001c0)={'syzkaller1\x00', @broadcast}) write$tun(r3, &(0x7f0000001400)=ANY=[@ANYBLOB='\x00\x00\x00\f'], 0x152) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 541.804544ms ago: executing program 2 (id=4068): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x38, 0x0, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x38}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r1, @ANYBLOB="00001700000000001c0037800b"], 0x44}, 0x1, 0x0, 0x0, 0x4008010}, 0x0) 500.51487ms ago: executing program 0 (id=4069): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, 0x0, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001640)={0x58, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}, @NL80211_ATTR_FTM_RESPONDER={0x4}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x58}}, 0x0) 499.127521ms ago: executing program 3 (id=4070): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x2000d00, 0x3, 0x0, &(0x7f0000000140)="a06ad8", 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x50) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b0000000a000000fe8000000000000000000000000000aa00000000040000000000000000000000000000000777976b"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r2, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r2, &(0x7f0000004d00), 0x7fffffffffffd33, 0x20000890) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) socket$packet(0x11, 0x3, 0x300) r5 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r5, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r5, &(0x7f0000002140)={0xa, 0x4e28, 0x8, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4001c00) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) write(r6, 0x0, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x53, 0x0, &(0x7f0000000040)=0xf) 354.158255ms ago: executing program 2 (id=4071): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000838500000071000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(r1, &(0x7f0000000340)={&(0x7f00000002c0)=@in6={0xa, 0x4e23, 0x0, @loopback}, 0x80, 0x0}, 0x200ce0c0) close(r1) 334.078592ms ago: executing program 0 (id=4072): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da97e22f4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ad0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bff3b89c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c2ed01faa7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497dad64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6fba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd2310801570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb414c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a000000000000000000000000000000000000000000000000000000a0cc2b89ce1525748ce167cbabb881f060599a6a59f645edca1d5c24b2f6b8c997a8f3e1b7679984a566d98d4d31198ee4c5ea7be0d99cf89bba4a6fd0bec12e7792bec3c5038e13b1982f80cdecd07f8908a983a7c9fb81c2ba7f7e87c991f30e50d1b3bbe4"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r1, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000700)={0x0, 0x81, 0x10}, &(0x7f0000000040)=0xc) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_open_procfs$namespace(0x0, 0x0) unshare(0x6a040000) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) unshare(0x6a040000) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'wrr\x00', 0x0, 0xff, 0x12}, 0x2c) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, 0x0, 0x0) 330.640562ms ago: executing program 1 (id=4073): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r0) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r0) recvmmsg(r0, &(0x7f0000008200)=[{{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000840)=""/153, 0x99}, {&(0x7f0000001c40)=""/4096, 0x1000}, {&(0x7f0000002c40)=""/196, 0xc4}], 0x3}, 0x9}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000380)=""/172, 0xac}, {&(0x7f0000000540)=""/237, 0xed}, {&(0x7f0000000980)=""/51, 0x33}, {&(0x7f00000000c0)=""/77, 0x4d}, {&(0x7f0000002d40)=""/4115, 0x1013}, {&(0x7f0000000640)=""/55, 0x37}, {&(0x7f00000006c0)=""/243, 0xf3}], 0x7}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x27}], 0x5, 0x12002, 0x0) 213.208776ms ago: executing program 2 (id=4074): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000480)="b19ccccf84f531d9", 0x8) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40020}, 0x24044195) r3 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000ec0)=ANY=[@ANYBLOB="1000000000000000840000000800000018000000000000008400000002"], 0x28}, 0x41) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r4, &(0x7f00000003c0)={0x1f, 0x3, @any, 0xfff9}, 0xe) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="660a00000700000061114c0000000000850000"], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x41000}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0xd, 0x1, 'connmark\x00'}, @NFTA_MATCH_INFO={0x10, 0x3, "a62a1a4094b2c56d78942e97"}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x9}}}, 0x88}}, 0x0) r5 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) write$ppp(r5, &(0x7f00000004c0)="9b2ec04694fdc0db12a55b65093b1f7490232481ce3611984107b04b1c36e9221d3b0b8cc2ace8ee6ea31deec91f744450d9941528f9c8edbe97a4ca1f279d2aece69803e0b253c2c144709708879a12f2a35f5dde2b4b13f3cdf7ea61f17f700a6f1041d408aafeb798d647b295ce90cff04d0563b8572025418b7d37e8159c482fb7b58230f4d536a915388a78786401fab056a02dd30adb2a6fc8237683d6", 0xa0) close(0x3) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000002400010325bd7000fcdfffff01000000c7a8e4fb902a53e7fc4eaee77886d461453392c6644ef9079d77a1ea146957b026c390202cd164ce7bb6d6e6d2b014e0217ff998557b53e2ea034c74cb5ed93d"], 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x1) r6 = socket(0x1e, 0x4, 0x0) connect$tipc(r6, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) sendmmsg$unix(r6, &(0x7f0000004400), 0x400000000000203, 0x0) connect$can_bcm(r6, &(0x7f0000000080)={0x1e}, 0x10) recvmmsg(r2, &(0x7f00000009c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000600)=""/42, 0x2a}], 0x1}, 0x8}], 0x1, 0x2160, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) 212.339934ms ago: executing program 1 (id=4075): socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet_mptcp(0x2, 0x1, 0x106) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) listen(r0, 0x6) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/14], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r3}, 0x18) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(0xffffffffffffffff, 0x0, 0x20000090) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xc, 0x9, 0x4}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000980)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) ppoll(&(0x7f0000000500)=[{r5}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x40000000000, 0x3, 0x4, 0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x4, 0x0, 0x9, 0x0, 0x0, 0x80000003}, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) close(0x4) 6.408498ms ago: executing program 4 (id=4076): syz_emit_ethernet(0xbe, &(0x7f00000008c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x500, 0x0, 0x0, 0x11, 0x0, @dev={0xac, 0x14, 0x14, 0xff}, @local}, {0x800, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "6fdfa0d2001efbb3e29a4ac275ca11b984ff5def6ed2e4ea9bc0eabdd34c732b", "df23520b57e4c98679c7795a27c7bf3e7d776b600ba8d82d6ba417e219edd86fb708441efcf75fe803412dae374281c2", "5df814aa2e34e4f8a759805b993e2d69a8f476de686861a9850edbe3", {"2cfee9b9d5b0b2b171b51f9174963b0c", "e40ca7e0a7b4bbc4bc9720c876a57954"}}}}}}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'erspan0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000180)="0b032200e0ff25000212475400f6a13bb1000000080086dd4803", 0x1a, 0x0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1c}, @NFTA_SET_ID={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x40}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x6}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_KEY_END={0x4}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd8}}, 0x4000000) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) r6 = socket$kcm(0x10, 0x2, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0x1, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x58, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'vcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00'}) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, &(0x7f0000000680)={0x1, 0x8, @status={[0xfffffffffffffffe, 0x0, 0x100000000, 0x8, 0x4, 0xfb4]}, [0x7, 0x417, 0x1cde, 0x81, 0x5, 0x40, 0x7, 0x100000001, 0xee, 0x2, 0xfffffffffffffff7, 0x7, 0x200, 0x1, 0xffff, 0xfffffffffffffffc, 0x9, 0x1, 0xd27, 0x6, 0x2, 0x480000000000000, 0xffbd, 0x1000, 0x7, 0xff, 0x4bd, 0x18000000, 0x8, 0x62, 0x8001, 0xb1b, 0x7, 0x9, 0x81, 0x0, 0x0, 0x5, 0x8, 0x2, 0x9, 0x0, 0xfffffffffffffff9, 0xb24c, 0x4, 0x800, 0x0, 0x2, 0xe, 0x3, 0x9, 0xffffffff, 0x1, 0x3, 0x6, 0x7fff, 0x401, 0x1, 0xfffffffffffffffd, 0xf, 0x100000001, 0x0, 0x6, 0x8]}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'ip6tnl0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0xc4, r1, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000600)=@get={0x1, &(0x7f0000000500)=""/247, 0x7ff}) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000002d00010026bdf000fcdbdf25040000000400190008000c"], 0x20}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 0s ago: executing program 2 (id=4077): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r2, 0x1, 0x70bd26, 0x25dfdbfe, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa5}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}]}, 0x34}}, 0x20) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000080850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r5}, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r6) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r6, 0x9) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r9, @ANYBLOB="010000000000fbdbdf25010000000800020000000000050005000000000008000300010000004800018005000200200000000600"], 0x84}, 0x1, 0x0, 0x0, 0x4800}, 0x20000000) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r9, 0x1, 0x70bd2c, 0x25dbdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x54) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) kernel console output (not intermixed with test programs): type 4 has an invalid length. [ 487.355451][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 487.792458][T15882] netlink: 'syz.0.2516': attribute type 3 has an invalid length. [ 487.800830][T15888] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2517'. [ 487.810645][T15884] lo speed is unknown, defaulting to 1000 [ 488.356729][T15871] wg1 speed is unknown, defaulting to 1000 [ 488.395403][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 488.758248][T15884] wg1 speed is unknown, defaulting to 1000 [ 488.761982][T15903] netlink: 'syz.3.2520': attribute type 10 has an invalid length. [ 488.810490][T15903] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2520'. [ 488.856087][T15903] !: entered promiscuous mode [ 488.868669][T15903] bridge0: port 1(0!) entered blocking state [ 488.875049][T15903] bridge0: port 1(0!) entered disabled state [ 488.881392][ T5183] Bluetooth: hci4: command 0x0406 tx timeout [ 488.888378][T15903] !: entered allmulticast mode [ 488.996926][T15911] netlink: 'syz.1.2523': attribute type 13 has an invalid length. [ 489.009511][T15914] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2524'. [ 489.019585][T15911] netlink: 'syz.1.2523': attribute type 17 has an invalid length. [ 489.182833][T15911] tipc: Resetting bearer [ 489.213951][T15911] tipc: Resetting bearer [ 489.230534][T15911] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 489.256029][T15915] xfrm0: entered promiscuous mode [ 489.261967][T15915] xfrm0: entered allmulticast mode [ 489.435583][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 489.592466][T15919] lo speed is unknown, defaulting to 1000 [ 490.475457][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 490.693554][T15919] wg1 speed is unknown, defaulting to 1000 [ 490.773710][T15938] af_packet: tpacket_rcv: packet too big, clamped from 3956 to 3952. macoff=96 [ 491.293918][ T30] audit: type=1800 audit(1758856385.038:16): pid=15939 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2528" name="memory.events" dev="tmpfs" ino=2541 res=0 errno=0 [ 491.515543][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 491.914156][T15954] lo speed is unknown, defaulting to 1000 [ 492.173011][T15967] netlink: 'syz.2.2537': attribute type 1 has an invalid length. [ 492.329115][T15971] bond3: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 492.356717][ T1338] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 492.368904][T15967] 8021q: adding VLAN 0 to HW filter on device bond3 [ 492.406630][T15954] wg1 speed is unknown, defaulting to 1000 [ 492.414754][T15975] siw: device registration error -23 [ 492.432765][T15967] veth9: entered promiscuous mode [ 492.442018][T15967] bond3: (slave veth9): Enslaving as a backup interface with a down link [ 492.480858][ T1334] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 492.490833][T15967] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 492.555447][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 492.842123][T15978] lo speed is unknown, defaulting to 1000 [ 492.887313][T15984] tipc: Resetting bearer [ 492.895809][T15984] syzkaller0: left promiscuous mode [ 492.902260][T15984] syzkaller0: left allmulticast mode [ 492.921468][T15984] gtp0: left promiscuous mode [ 492.926846][T15984] gtp0: left allmulticast mode [ 492.957272][T15984] veth9: left promiscuous mode [ 492.970423][T15990] tipc: Enabling of bearer rejected, failed to enable media [ 492.988282][T15986] syzkaller0: entered promiscuous mode [ 493.005532][T15986] syzkaller0: entered allmulticast mode [ 493.087537][T15992] !: renamed from dummy0 [ 493.123138][T15992] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 493.277764][T15978] wg1 speed is unknown, defaulting to 1000 [ 493.335658][T15998] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2544'. [ 493.426745][T15992] lo speed is unknown, defaulting to 1000 [ 493.595585][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 493.967539][T15992] wg1 speed is unknown, defaulting to 1000 [ 494.635381][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 495.039226][T16021] vxcan0: entered promiscuous mode [ 495.145975][T16029] netlink: 'syz.4.2552': attribute type 1 has an invalid length. [ 495.197088][T16029] bond6: (slave vxcan1): The slave device specified does not support setting the MAC address [ 495.209650][T16029] bond6: (slave vxcan1): Error -95 calling set_mac_address [ 495.330890][T16033] gretap2: entered promiscuous mode [ 495.359205][T16033] bond6: (slave gretap2): making interface the new active one [ 495.368333][T16033] bond6: (slave gretap2): Enslaving as an active interface with an up link [ 495.386856][T16038] tipc: Enabling of bearer rejected, failed to enable media [ 495.619531][T16044] netlink: 'syz.4.2555': attribute type 4 has an invalid length. [ 495.675389][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 495.681706][T16044] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2555'. [ 495.694921][T16047] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2557'. [ 495.863944][T16055] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2555'. [ 496.060086][T16062] dummy0: left promiscuous mode [ 496.190260][T16062] wg1: left promiscuous mode [ 496.205501][T16062] wg1: left allmulticast mode [ 496.230955][T16062] gretap2: left promiscuous mode [ 496.396167][ T55] block nbd2: Possible stuck request ffff8880255f0000: control (read@0,1024B). Runtime 330 seconds [ 496.408265][ T55] block nbd2: Possible stuck request ffff8880255f01c0: control (read@1024,1024B). Runtime 330 seconds [ 496.425859][ T55] block nbd2: Possible stuck request ffff8880255f0380: control (read@2048,1024B). Runtime 330 seconds [ 496.437686][ T55] block nbd2: Possible stuck request ffff8880255f0540: control (read@3072,1024B). Runtime 330 seconds [ 496.603072][T16077] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 38192 - 0 [ 496.614361][T16077] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 49821 - 0 [ 496.679986][T16079] netlink: 'syz.4.2565': attribute type 1 has an invalid length. [ 496.715531][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 496.761788][T16079] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2565'. [ 496.849044][T16077] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 38192 - 0 [ 496.892526][T16077] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 49821 - 0 [ 497.082043][T16077] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 38192 - 0 [ 497.138254][T16077] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 49821 - 0 [ 497.194349][T16076] lo speed is unknown, defaulting to 1000 [ 497.210598][T16088] netlink: 'syz.2.2566': attribute type 10 has an invalid length. [ 497.219331][T16088] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2566'. [ 497.231682][T16088] A link change request failed with some changes committed already. Interface 0! may have been left with an inconsistent configuration, please check. [ 497.281642][T16077] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 38192 - 0 [ 497.406585][T16077] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 49821 - 0 [ 497.694754][ T6182] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 49821 - 0 [ 497.726694][ T6182] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 38192 - 0 [ 497.755607][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 497.793232][ T6182] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 49821 - 0 [ 497.805705][ T6182] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 38192 - 0 [ 497.870299][ T1338] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 49821 - 0 [ 497.880937][ T1338] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 38192 - 0 [ 497.882440][T16096] netlink: 'syz.2.2568': attribute type 13 has an invalid length. [ 497.963067][ T6172] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 49821 - 0 [ 497.985786][ T6172] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 38192 - 0 [ 498.004369][T16076] wg1 speed is unknown, defaulting to 1000 [ 498.180678][T16112] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2570'. [ 498.399024][T16119] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2573'. [ 498.700067][T16127] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2576'. [ 498.795475][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 498.900308][T16137] netlink: 'syz.0.2578': attribute type 10 has an invalid length. [ 498.908438][T16137] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2578'. [ 498.957504][T16137] bridge0: port 1(0!) entered blocking state [ 498.963903][T16137] bridge0: port 1(0!) entered disabled state [ 499.000747][T16137] !: entered allmulticast mode [ 499.016357][T16139] syzkaller0: Caught tx_queue_len zero misconfig [ 499.616001][T16146] lo speed is unknown, defaulting to 1000 [ 499.724999][T16152] lo speed is unknown, defaulting to 1000 [ 499.835547][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 499.859030][T16166] netlink: 'syz.0.2584': attribute type 10 has an invalid length. [ 499.912336][T16166] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2584'. [ 500.685589][T16177] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2589'. [ 500.691200][T16146] wg1 speed is unknown, defaulting to 1000 [ 500.783887][T16185] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2589'. [ 500.807687][T16185] netlink: 34 bytes leftover after parsing attributes in process `syz.0.2589'. [ 500.875384][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 500.996402][T16194] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2588'. [ 501.214582][T16152] wg1 speed is unknown, defaulting to 1000 [ 501.441531][T16207] netlink: 'syz.1.2593': attribute type 13 has an invalid length. [ 501.471958][T16207] netlink: 'syz.1.2593': attribute type 17 has an invalid length. [ 501.550359][T16207] tipc: Resetting bearer [ 501.571520][T16207] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 501.666926][T16210] vxcan0: entered promiscuous mode [ 501.815270][T16211] lo speed is unknown, defaulting to 1000 [ 501.915529][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 502.018025][T16218] netlink: 'syz.4.2596': attribute type 10 has an invalid length. [ 502.036842][T16218] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2596'. [ 502.065955][T16218] dummy0: entered promiscuous mode [ 502.073991][T16220] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2597'. [ 502.090644][T16218] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 502.137773][T16220] !: left allmulticast mode [ 502.142669][T16220] bridge0: port 1(0!) entered disabled state [ 502.381851][T16220] vlan0 (unregistering): left allmulticast mode [ 502.389995][T16220] bridge0 (unregistering): left allmulticast mode [ 502.410670][T16220] vlan0 (unregistering): left promiscuous mode [ 502.417857][T16233] netlink: 'syz.3.2601': attribute type 13 has an invalid length. [ 502.435825][T16233] netlink: 'syz.3.2601': attribute type 17 has an invalid length. [ 502.436396][T16220] bridge0 (unregistering): left promiscuous mode [ 502.453330][T16220] bridge2: port 1(vlan0) entered disabled state [ 502.668613][T16233] bridge0: port 1(0!) entered blocking state [ 502.674962][T16233] bridge0: port 1(0!) entered forwarding state [ 502.692309][T16233] 8021q: adding VLAN 0 to HW filter on device bond0 [ 502.702939][T16233] 8021q: adding VLAN 0 to HW filter on device team0 [ 502.716840][T16233] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 502.734861][T16211] wg1 speed is unknown, defaulting to 1000 [ 502.823365][T16237] lo speed is unknown, defaulting to 1000 [ 502.903847][T16229] lo speed is unknown, defaulting to 1000 [ 502.955432][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 503.114867][T16251] netlink: 'syz.2.2604': attribute type 303 has an invalid length. [ 503.423274][T16252] __nla_validate_parse: 2 callbacks suppressed [ 503.423293][T16252] netlink: 200 bytes leftover after parsing attributes in process `syz.0.2603'. [ 503.475722][T16250] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2603'. [ 503.617302][T16237] wg1 speed is unknown, defaulting to 1000 [ 503.641640][T16229] wg1 speed is unknown, defaulting to 1000 [ 503.713053][T16256] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2606'. [ 503.816834][T16256] nbd: socks must be embedded in a SOCK_ITEM attr [ 503.995401][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 504.202719][ T7691] udevd[7691]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 504.233048][ T7693] udevd[7693]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 504.599349][T16260] lo speed is unknown, defaulting to 1000 [ 504.880182][T16274] netlink: 'syz.2.2609': attribute type 10 has an invalid length. [ 504.888479][T16274] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2609'. [ 504.901573][T16274] A link change request failed with some changes committed already. Interface 0! may have been left with an inconsistent configuration, please check. [ 505.035477][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 505.134570][T16278] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 505.151380][T16260] wg1 speed is unknown, defaulting to 1000 [ 505.155247][T16278] warn_alloc: 1 callbacks suppressed [ 505.155266][T16278] syz.2.2611: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 505.163003][T16272] rdma_rxe: rxe_newlink: failed to add lo [ 505.164392][T16278] ,cpuset=/,mems_allowed=0-1 [ 505.189652][T16278] CPU: 1 UID: 0 PID: 16278 Comm: syz.2.2611 Not tainted syzkaller #0 PREEMPT(full) [ 505.189677][T16278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 505.189689][T16278] Call Trace: [ 505.189698][T16278] [ 505.189706][T16278] dump_stack_lvl+0x189/0x250 [ 505.189733][T16278] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 505.189763][T16278] ? __pfx_dump_stack_lvl+0x10/0x10 [ 505.189787][T16278] ? __pfx__printk+0x10/0x10 [ 505.189815][T16278] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 505.189837][T16278] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 505.189861][T16278] warn_alloc+0x214/0x310 [ 505.189891][T16278] ? stack_depot_save_flags+0x40/0x860 [ 505.189920][T16278] ? __pfx_warn_alloc+0x10/0x10 [ 505.189948][T16278] ? kasan_save_track+0x4f/0x80 [ 505.189971][T16278] ? xskq_create+0x56/0x170 [ 505.189994][T16278] ? xsk_init_queue+0xb0/0x110 [ 505.190018][T16278] ? xsk_setsockopt+0x4dc/0x8d0 [ 505.190044][T16278] ? do_sock_setsockopt+0x17c/0x1b0 [ 505.190065][T16278] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 505.190087][T16278] ? do_syscall_64+0xfa/0x3b0 [ 505.190105][T16278] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 505.190133][T16278] __vmalloc_node_range_noprof+0x125/0x12f0 [ 505.190193][T16278] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 505.190223][T16278] ? xskq_create+0x56/0x170 [ 505.190254][T16278] ? __kasan_kmalloc+0x93/0xb0 [ 505.190283][T16278] vmalloc_user_noprof+0xad/0xf0 [ 505.190324][T16278] ? xskq_create+0xbf/0x170 [ 505.190353][T16278] xskq_create+0xbf/0x170 [ 505.190384][T16278] xsk_init_queue+0xb0/0x110 [ 505.190416][T16278] xsk_setsockopt+0x4dc/0x8d0 [ 505.190448][T16278] ? __pfx_xsk_setsockopt+0x10/0x10 [ 505.190475][T16278] ? __pfx_aa_sk_perm+0x10/0x10 [ 505.190508][T16278] ? aa_sock_opt_perm+0xff/0x1b0 [ 505.190529][T16278] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 505.190549][T16278] ? __pfx_xsk_setsockopt+0x10/0x10 [ 505.190578][T16278] do_sock_setsockopt+0x17c/0x1b0 [ 505.190607][T16278] __x64_sys_setsockopt+0x13f/0x1b0 [ 505.190637][T16278] do_syscall_64+0xfa/0x3b0 [ 505.190658][T16278] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 505.190677][T16278] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 505.190697][T16278] ? clear_bhb_loop+0x60/0xb0 [ 505.190721][T16278] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 505.190741][T16278] RIP: 0033:0x7f5660f8eec9 [ 505.190759][T16278] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 505.190777][T16278] RSP: 002b:00007f5661de9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 505.190798][T16278] RAX: ffffffffffffffda RBX: 00007f56611e5fa0 RCX: 00007f5660f8eec9 [ 505.190812][T16278] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006 [ 505.190824][T16278] RBP: 00007f5661011f91 R08: 0000000000000004 R09: 0000000000000000 [ 505.190837][T16278] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 505.190850][T16278] R13: 00007f56611e6038 R14: 00007f56611e5fa0 R15: 00007ffc670c1d78 [ 505.190883][T16278] [ 505.190891][T16278] Mem-Info: [ 505.448703][T16279] netlink: 'syz.2.2611': attribute type 4 has an invalid length. [ 505.463758][T16278] active_anon:13752 inactive_anon:0 isolated_anon:0 [ 505.463758][T16278] active_file:3269 inactive_file:40050 isolated_file:0 [ 505.463758][T16278] unevictable:768 dirty:546 writeback:0 [ 505.463758][T16278] slab_reclaimable:12606 slab_unreclaimable:143780 [ 505.463758][T16278] mapped:35526 shmem:4232 pagetables:1260 [ 505.463758][T16278] sec_pagetables:0 bounce:0 [ 505.463758][T16278] kernel_misc_reclaimable:0 [ 505.463758][T16278] free:1269044 free_pcp:18739 free_cma:0 [ 505.548830][T16278] Node 0 active_anon:55008kB inactive_anon:0kB active_file:13076kB inactive_file:160000kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:142104kB dirty:2180kB writeback:0kB shmem:15392kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13056kB pagetables:4912kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 505.554132][T16283] netlink: 'syz.2.2611': attribute type 4 has an invalid length. [ 505.589066][T16278] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 505.624782][T16278] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 505.655820][T16278] lowmem_reserve[]: 0 2499 2501 2501 2501 [ 505.661675][T16278] Node 0 DMA32 free:1177928kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:54964kB inactive_anon:0kB active_file:13076kB inactive_file:158180kB unevictable:1536kB writepending:2180kB present:3129332kB managed:2559900kB mlocked:0kB bounce:0kB free_pcp:56584kB local_pcp:29072kB free_cma:0kB [ 505.695972][T16278] lowmem_reserve[]: 0 0 1 1 1 [ 505.717787][T16278] Node 0 Normal free:28kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1820kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 505.847243][T16278] lowmem_reserve[]: 0 0 0 0 0 [ 505.852023][T16278] Node 1 Normal free:3882660kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:18080kB local_pcp:12800kB free_cma:0kB [ 505.925450][T16278] lowmem_reserve[]: 0 0 0 0 0 [ 505.930229][T16278] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 506.007118][T16278] Node 0 DMA32: 1423*4kB (UE) 989*8kB (UME) 89*16kB (UME) 1010*32kB (UME) 608*64kB (UME) 106*128kB (UME) 23*256kB (UM) 35*512kB (UME) 23*1024kB (UM) 5*2048kB (UM) 248*4096kB (M) = 1173236kB [ 506.027088][T16290] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2613'. [ 506.043009][T16278] Node 0 Normal: 1*4kB (M) 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 28kB [ 506.063136][T16290] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2613'. [ 506.075519][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 506.086314][T16278] Node 1 Normal: 191*4kB (UME) 53*8kB (UME) 46*16kB (UME) 161*32kB (UME) 58*64kB (UME) 15*128kB (UME) 3*256kB (UM) 3*512kB (ME) 1*1024kB (M) 2*2048kB (UE) 943*4096kB (M) = 3882660kB [ 506.103217][T16290] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2613'. [ 506.126711][T16278] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 506.147104][T16290] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2613'. [ 506.213301][T16278] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 506.295911][T16278] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 506.364049][T16298] netlink: 'syz.0.2615': attribute type 1 has an invalid length. [ 506.390196][T16278] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 506.423031][T16302] dvmrp0: entered allmulticast mode [ 506.460629][T16278] 46569 total pagecache pages [ 506.464637][T16303] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2615'. [ 506.465720][T16278] 0 pages in swap cache [ 506.516106][T16278] Free swap = 124996kB [ 506.520326][T16278] Total swap = 124996kB [ 506.545747][T16278] 2097051 pages RAM [ 506.574975][T16278] 0 pages HighMem/MovableOnly [ 506.585094][T16278] 424986 pages reserved [ 506.595778][T16278] 0 pages cma reserved [ 506.848491][T16314] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2617'. [ 506.850141][T16310] lo speed is unknown, defaulting to 1000 [ 507.024979][T16318] netlink: 'syz.4.2619': attribute type 6 has an invalid length. [ 507.053939][T16318] netlink: 'syz.4.2619': attribute type 12 has an invalid length. [ 507.115451][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 507.159806][T16320] netlink: 'syz.2.2620': attribute type 10 has an invalid length. [ 507.194776][T16320] A link change request failed with some changes committed already. Interface 0! may have been left with an inconsistent configuration, please check. [ 507.703312][T16339] netlink: 'syz.0.2623': attribute type 4 has an invalid length. [ 507.742217][T16341] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 507.749560][T16341] IPv6: NLM_F_CREATE should be set when creating new route [ 507.756884][T16341] IPv6: NLM_F_CREATE should be set when creating new route [ 507.864533][T16310] wg1 speed is unknown, defaulting to 1000 [ 507.872869][T16346] netlink: 'syz.4.2625': attribute type 1 has an invalid length. [ 507.981389][T16351] geneve3: entered promiscuous mode [ 508.010999][T16351] geneve3: entered allmulticast mode [ 508.050886][ T6182] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 33704 - 0 [ 508.080015][T16345] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 508.155389][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 508.182640][T16359] netlink: 'syz.0.2628': attribute type 10 has an invalid length. [ 508.205004][ T6182] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 33704 - 0 [ 508.215746][ T6182] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 33704 - 0 [ 508.224063][ T6182] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 33704 - 0 [ 508.244582][T16361] netlink: 'syz.4.2629': attribute type 1 has an invalid length. [ 508.264358][T16359] A link change request failed with some changes committed already. Interface 0! may have been left with an inconsistent configuration, please check. [ 508.528068][T16363] bond7: (slave ip6gretap3): Enslaving as a backup interface with an up link [ 508.612342][T16366] 8021q: adding VLAN 0 to HW filter on device bond7 [ 508.627363][T16361] 8021q: adding VLAN 0 to HW filter on device bond7 [ 508.651493][T16363] veth13: entered promiscuous mode [ 508.661292][T16363] bond7: (slave veth13): Enslaving as a backup interface with a down link [ 508.683458][T16364] veth0_to_bond: left allmulticast mode [ 508.689276][T16364] veth0_to_bond: left promiscuous mode [ 508.695357][T16364] bridge0: port 2(veth0_to_bond) entered disabled state [ 508.909671][T16380] __nla_validate_parse: 9 callbacks suppressed [ 508.909690][T16380] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2633'. [ 508.921926][T16382] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2634'. [ 509.017487][T16384] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2635'. [ 509.176225][T16391] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2636'. [ 509.187203][T16391] netlink: 43 bytes leftover after parsing attributes in process `syz.2.2636'. [ 509.196300][ C0] net_ratelimit: 3 callbacks suppressed [ 509.196318][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 509.211662][T16391] netlink: 'syz.2.2636': attribute type 5 has an invalid length. [ 509.220615][T16391] netlink: 43 bytes leftover after parsing attributes in process `syz.2.2636'. [ 509.373986][T16391] lo speed is unknown, defaulting to 1000 [ 509.387561][T16396] netlink: 192 bytes leftover after parsing attributes in process `syz.2.2636'. [ 509.556734][T16403] IPVS: set_ctl: invalid protocol: 48500 127.0.0.1:20000 [ 509.565952][T16405] netlink: 'syz.4.2640': attribute type 10 has an invalid length. [ 509.586839][T16405] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2640'. [ 509.620946][T16405] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 509.773743][T16391] wg1 speed is unknown, defaulting to 1000 [ 509.877107][T16409] netlink: 'syz.3.2641': attribute type 1 has an invalid length. [ 509.905559][T16409] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2641'. [ 509.960674][T16421] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2645'. [ 510.117724][T16425] netlink: 'syz.4.2644': attribute type 1 has an invalid length. [ 510.235535][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 510.814366][T16449] netlink: 'syz.2.2652': attribute type 10 has an invalid length. [ 510.823419][T16449] A link change request failed with some changes committed already. Interface 0! may have been left with an inconsistent configuration, please check. [ 511.107433][T16458] lo speed is unknown, defaulting to 1000 [ 511.275551][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 511.413618][T16479] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 511.512208][T16458] wg1 speed is unknown, defaulting to 1000 [ 512.048535][T16490] netlink: 'syz.2.2663': attribute type 1 has an invalid length. [ 512.157670][T16428] Bluetooth: hci4: command 0x0406 tx timeout [ 512.315568][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 512.406607][T16501] dummy0: left promiscuous mode [ 512.428064][T16501] geneve3: left promiscuous mode [ 512.435600][T16501] veth13: left promiscuous mode [ 512.505475][ T6187] bond7: (slave ip6gretap3): link status up again after 0 ms [ 512.545798][ T6187] bond7: (slave ip6gretap3): failed to get link speed/duplex [ 512.655500][ T6187] bond7: (slave ip6gretap3): failed to get link speed/duplex [ 512.774498][T16510] lo: Caught tx_queue_len zero misconfig [ 513.110771][T16519] lo speed is unknown, defaulting to 1000 [ 513.204657][T16521] lo speed is unknown, defaulting to 1000 [ 513.453419][T16535] lo speed is unknown, defaulting to 1000 [ 513.716090][T16519] wg1 speed is unknown, defaulting to 1000 [ 514.236936][T16428] Bluetooth: hci4: command 0x0406 tx timeout [ 514.291403][T16549] __nla_validate_parse: 14 callbacks suppressed [ 514.291424][T16549] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2680'. [ 514.319679][ T6182] net_ratelimit: 9 callbacks suppressed [ 514.319698][ T6182] bond7: (slave ip6gretap3): failed to get link speed/duplex [ 514.395430][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 514.455420][T16555] lo speed is unknown, defaulting to 1000 [ 514.495748][ T6182] bond7: (slave ip6gretap3): failed to get link speed/duplex [ 514.625541][ T6172] bond7: (slave ip6gretap3): failed to get link speed/duplex [ 514.755502][ T6172] bond7: (slave ip6gretap3): failed to get link speed/duplex [ 514.865913][ T6187] bond7: (slave ip6gretap3): failed to get link speed/duplex [ 515.005767][ T6172] bond7: (slave ip6gretap3): failed to get link speed/duplex [ 515.055135][T16521] wg1 speed is unknown, defaulting to 1000 [ 515.067605][T16535] wg1 speed is unknown, defaulting to 1000 [ 515.255909][ T6187] bond7: (slave ip6gretap3): failed to get link speed/duplex [ 515.366153][ T1334] bond7: (slave ip6gretap3): failed to get link speed/duplex [ 515.385691][T16555] wg1 speed is unknown, defaulting to 1000 [ 515.393502][T16565] siw: device registration error -23 [ 515.435417][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 515.571883][T16582] validate_nla: 1 callbacks suppressed [ 515.571901][T16582] netlink: 'syz.4.2684': attribute type 10 has an invalid length. [ 515.586965][T16582] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2684'. [ 515.617209][T16582] dummy0: entered promiscuous mode [ 515.630805][T16580] lo speed is unknown, defaulting to 1000 [ 515.850962][T16583] lo speed is unknown, defaulting to 1000 [ 516.858226][T16583] wg1 speed is unknown, defaulting to 1000 [ 516.968716][T16580] wg1 speed is unknown, defaulting to 1000 [ 517.892286][T16623] netlink: 'syz.2.2694': attribute type 10 has an invalid length. [ 517.915955][T16623] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2694'. [ 518.123835][T16628] bridge0: entered promiscuous mode [ 518.145607][T16628] bridge0: entered allmulticast mode [ 518.154555][T16628] team0: Port device bridge0 added [ 518.925230][T16646] lo speed is unknown, defaulting to 1000 [ 518.989127][T16649] lo speed is unknown, defaulting to 1000 [ 519.377922][T16668] lo: Caught tx_queue_len zero misconfig [ 519.430362][T16664] tipc: Enabled bearer , priority 0 [ 519.443404][T16646] wg1 speed is unknown, defaulting to 1000 [ 519.455995][ T6182] net_ratelimit: 27 callbacks suppressed [ 519.456015][ T6182] bond7: (slave ip6gretap3): failed to get link speed/duplex [ 519.595647][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 519.628147][T16663] tipc: Disabling bearer [ 519.646473][ T6187] bond7: (slave ip6gretap3): failed to get link speed/duplex [ 519.975397][ T6187] bond7: (slave ip6gretap3): failed to get link speed/duplex [ 520.023393][T16675] netlink: 'syz.1.2706': attribute type 10 has an invalid length. [ 520.031928][T16675] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2706'. [ 520.091594][T16649] wg1 speed is unknown, defaulting to 1000 [ 520.101325][T16666] siw: device registration error -23 [ 520.105463][ T1334] bond7: (slave ip6gretap3): failed to get link speed/duplex [ 520.153963][T16677] lo speed is unknown, defaulting to 1000 [ 520.246065][ T1334] bond7: (slave ip6gretap3): failed to get link speed/duplex [ 520.362291][T16679] netlink: 'syz.0.2707': attribute type 10 has an invalid length. [ 520.401582][T16679] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2707'. [ 520.415985][ T1334] bond7: (slave ip6gretap3): failed to get link speed/duplex [ 520.418964][T16685] netlink: 'syz.4.2709': attribute type 3 has an invalid length. [ 520.481820][T16679] batman_adv: batadv0: Adding interface: virt_wifi0 [ 520.489688][T16681] netlink: 'syz.2.2708': attribute type 10 has an invalid length. [ 520.498106][T16681] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2708'. [ 520.517213][T16679] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 520.581417][T16679] batman_adv: batadv0: Interface activated: virt_wifi0 [ 520.608591][T16681] A link change request failed with some changes committed already. Interface 0! may have been left with an inconsistent configuration, please check. [ 520.635449][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 520.656061][ T6172] bond7: (slave ip6gretap3): failed to get link speed/duplex [ 520.752272][T16677] wg1 speed is unknown, defaulting to 1000 [ 521.369777][T16704] netlink: 788 bytes leftover after parsing attributes in process `syz.0.2714'. [ 521.790806][T16715] netlink: 'syz.2.2716': attribute type 13 has an invalid length. [ 521.809723][T16715] netlink: 'syz.2.2716': attribute type 17 has an invalid length. [ 522.232588][T16715] 8021q: adding VLAN 0 to HW filter on device bond0 [ 522.275220][T16715] 8021q: adding VLAN 0 to HW filter on device team0 [ 522.385835][T16702] lo speed is unknown, defaulting to 1000 [ 523.172718][T16737] netlink: 'syz.4.2722': attribute type 10 has an invalid length. [ 523.182365][T16702] wg1 speed is unknown, defaulting to 1000 [ 523.189559][T16718] lo speed is unknown, defaulting to 1000 [ 523.195634][T16737] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2722'. [ 523.260129][T16728] lo speed is unknown, defaulting to 1000 [ 523.317240][T16742] netlink: 'syz.0.2723': attribute type 1 has an invalid length. [ 523.379707][T16742] bond8 (unregistering): Released all slaves [ 523.906110][T16718] wg1 speed is unknown, defaulting to 1000 [ 524.496163][ T6187] net_ratelimit: 22 callbacks suppressed [ 524.496186][ T6187] bond7: (slave ip6gretap3): failed to get link speed/duplex [ 524.616337][ T6187] bond7: (slave ip6gretap3): failed to get link speed/duplex [ 524.661745][T16728] wg1 speed is unknown, defaulting to 1000 [ 524.795453][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 524.837074][T16762] lo speed is unknown, defaulting to 1000 [ 524.953036][T16765] lo speed is unknown, defaulting to 1000 [ 524.966897][ T6187] bond7: (slave ip6gretap3): failed to get link speed/duplex [ 525.085912][ T6187] bond7: (slave ip6gretap3): failed to get link speed/duplex [ 525.220946][ T6187] bond7: (slave ip6gretap3): failed to get link speed/duplex [ 525.345812][ T6187] bond7: (slave ip6gretap3): failed to get link speed/duplex [ 525.461625][T16772] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2729'. [ 525.471058][ T1338] bond7: (slave ip6gretap3): failed to get link speed/duplex [ 525.480830][T16765] wg1 speed is unknown, defaulting to 1000 [ 525.645967][ T6172] bond7: (slave ip6gretap3): failed to get link speed/duplex [ 525.765460][ T6172] bond7: (slave ip6gretap3): failed to get link speed/duplex [ 525.808557][T16762] wg1 speed is unknown, defaulting to 1000 [ 526.106071][ T30] audit: type=1800 audit(1758856419.858:17): pid=16776 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2730" name="memory.events" dev="tmpfs" ino=2813 res=0 errno=0 [ 526.478731][ T55] block nbd2: Possible stuck request ffff8880255f0000: control (read@0,1024B). Runtime 360 seconds [ 526.489921][ T55] block nbd2: Possible stuck request ffff8880255f01c0: control (read@1024,1024B). Runtime 360 seconds [ 526.501430][ T55] block nbd2: Possible stuck request ffff8880255f0380: control (read@2048,1024B). Runtime 360 seconds [ 526.513571][ T55] block nbd2: Possible stuck request ffff8880255f0540: control (read@3072,1024B). Runtime 360 seconds [ 527.109259][T16793] netlink: 'syz.3.2734': attribute type 10 has an invalid length. [ 527.117612][T16793] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2734'. [ 527.265368][T16799] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2736'. [ 527.485905][T16805] netlink: 'syz.4.2739': attribute type 4 has an invalid length. [ 527.505573][T16805] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.2739'. [ 527.643136][T16814] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2742'. [ 527.660911][T16816] netlink: 'syz.2.2743': attribute type 13 has an invalid length. [ 527.670542][T16816] netlink: 'syz.2.2743': attribute type 17 has an invalid length. [ 527.818648][T16816] 8021q: adding VLAN 0 to HW filter on device bond0 [ 527.834707][T16816] 8021q: adding VLAN 0 to HW filter on device team0 [ 527.848523][T16824] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 527.871538][T16826] dummy0: left promiscuous mode [ 528.112950][T16816] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 528.194729][T16826] geneve3: left allmulticast mode [ 528.349048][T16823] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 528.374630][ T6182] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 33704 - 0 [ 528.386054][ T6182] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 33704 - 0 [ 528.466998][T16832] tipc: Enabled bearer , priority 0 [ 528.482190][ T6182] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 33704 - 0 [ 528.497401][ T6182] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 33704 - 0 [ 528.515223][T16825] sch_tbf: burst 9 is lower than device syzkaller0 mtu (1514) ! [ 528.527015][T16818] lo speed is unknown, defaulting to 1000 [ 528.529481][T16825] tipc: Resetting bearer [ 528.790411][T16845] lo speed is unknown, defaulting to 1000 [ 528.818020][T16847] lo speed is unknown, defaulting to 1000 [ 528.939137][T16846] lo speed is unknown, defaulting to 1000 [ 529.059870][T16815] tipc: Disabling bearer [ 529.191602][T16818] wg1 speed is unknown, defaulting to 1000 [ 529.276134][ T5871] Bluetooth: hci4: command 0x0406 tx timeout [ 529.995476][ C0] net_ratelimit: 16 callbacks suppressed [ 529.995498][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 530.410743][T16847] wg1 speed is unknown, defaulting to 1000 [ 530.450391][T16845] wg1 speed is unknown, defaulting to 1000 [ 530.507937][T16846] wg1 speed is unknown, defaulting to 1000 [ 531.035369][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 531.278209][T16874] netlink: 'syz.3.2755': attribute type 4 has an invalid length. [ 531.438134][T16885] tipc: Resetting bearer [ 531.514358][ T6187] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 49821 - 0 [ 531.523534][ T6187] netdevsim netdevsim1 eth0: unset [1, 1] type 2 family 0 port 38192 - 0 [ 531.543868][ T6187] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 49821 - 0 [ 531.556417][ T6187] netdevsim netdevsim1 eth1: unset [1, 1] type 2 family 0 port 38192 - 0 [ 531.590967][ T6187] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 49821 - 0 [ 531.615079][ T6187] netdevsim netdevsim1 eth2: unset [1, 1] type 2 family 0 port 38192 - 0 [ 531.655125][ T6187] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 49821 - 0 [ 531.682475][ T6187] netdevsim netdevsim1 eth3: unset [1, 1] type 2 family 0 port 38192 - 0 [ 531.743378][T14491] syz1: Port: 1 Link DOWN [ 531.851140][T16901] syzkaller0: entered promiscuous mode [ 531.887305][T16901] syzkaller0: entered allmulticast mode [ 532.075500][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 532.078595][T16895] lo speed is unknown, defaulting to 1000 [ 532.436554][T16911] : renamed from bond_slave_0 [ 532.756477][T16915] lo speed is unknown, defaulting to 1000 [ 532.896010][T16895] wg1 speed is unknown, defaulting to 1000 [ 533.018239][T16921] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2764'. [ 533.115503][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 533.261567][T16926] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2765'. [ 533.961474][T16915] wg1 speed is unknown, defaulting to 1000 [ 533.978258][T16939] lo speed is unknown, defaulting to 1000 [ 534.156602][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 534.877381][T16939] wg1 speed is unknown, defaulting to 1000 [ 535.113015][T16953] lo speed is unknown, defaulting to 1000 [ 535.195444][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 535.256537][T16956] lo speed is unknown, defaulting to 1000 [ 535.327783][T16957] lo speed is unknown, defaulting to 1000 [ 535.386751][T16960] lo speed is unknown, defaulting to 1000 [ 535.651540][T16965] syzkaller0: entered promiscuous mode [ 535.676186][T16965] syzkaller0: entered allmulticast mode [ 535.749290][T16953] wg1 speed is unknown, defaulting to 1000 [ 535.861854][T16968] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2775'. [ 536.027198][T16971] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2776'. [ 536.207593][T16976] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2777'. [ 536.235368][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 536.856223][T16990] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2780'. [ 537.048039][T16990] team0: Port device bridge0 removed [ 537.212206][T16960] wg1 speed is unknown, defaulting to 1000 [ 537.264459][T16956] wg1 speed is unknown, defaulting to 1000 [ 537.275371][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 537.342645][T16957] wg1 speed is unknown, defaulting to 1000 [ 537.513965][T16996] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2781'. [ 537.632075][T16996] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2781'. [ 537.662677][T16996] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 537.708986][T16994] lo speed is unknown, defaulting to 1000 [ 537.921113][T16994] wg1 speed is unknown, defaulting to 1000 [ 538.315362][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 538.963176][T17001] lo speed is unknown, defaulting to 1000 [ 539.193058][T17011] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2786'. [ 539.355761][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 539.639470][T17020] lo speed is unknown, defaulting to 1000 [ 539.697068][T17030] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.2789'. [ 540.826525][T17001] wg1 speed is unknown, defaulting to 1000 [ 540.901035][T17041] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2791'. [ 541.066506][T17045] netlink: 'syz.1.2793': attribute type 1 has an invalid length. [ 541.094673][T17045] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2793'. [ 541.336251][T17047] sch_fq: defrate 0 ignored. [ 541.582248][T17020] wg1 speed is unknown, defaulting to 1000 [ 541.790583][T17056] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2795'. [ 541.868286][T17056] lo speed is unknown, defaulting to 1000 [ 542.184470][T17056] wg1 speed is unknown, defaulting to 1000 [ 542.251029][T17062] netlink: 'syz.1.2797': attribute type 10 has an invalid length. [ 542.450838][T17067] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2798'. [ 542.489120][T17069] siw: device registration error -23 [ 543.059333][T17077] lo speed is unknown, defaulting to 1000 [ 543.065232][T17082] netlink: 'syz.3.2803': attribute type 15 has an invalid length. [ 543.987097][T17108] veth0_macvtap: Caught tx_queue_len zero misconfig [ 544.040426][T17077] wg1 speed is unknown, defaulting to 1000 [ 544.087686][T17105] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2807'. [ 544.699477][T17119] netlink: 'syz.2.2811': attribute type 10 has an invalid length. [ 544.721553][T17123] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2812'. [ 544.891288][T17129] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2810'. [ 544.989533][T17129] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2810'. [ 545.064594][T17121] lo speed is unknown, defaulting to 1000 [ 545.376051][T17143] netlink: 'syz.3.2816': attribute type 10 has an invalid length. [ 545.453040][T17143] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2816'. [ 545.545106][T17150] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2817'. [ 545.657294][T17152] block nbd4: server does not support multiple connections per device. [ 545.735846][T17152] block nbd4: shutting down sockets [ 546.050296][T17153] ip6tnl1: entered promiscuous mode [ 546.060587][T17153] ip6tnl1: entered allmulticast mode [ 546.321378][T17121] wg1 speed is unknown, defaulting to 1000 [ 546.518631][T17176] siw: device registration error -23 [ 546.699775][T17181] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2826'. [ 547.034199][T17184] netlink: 'syz.3.2827': attribute type 10 has an invalid length. [ 547.081470][T17184] bridge0: port 1(0!) entered disabled state [ 547.097443][T17184] !: left allmulticast mode [ 547.102077][T17184] !: left promiscuous mode [ 547.118267][T17184] bridge0: port 1(0!) entered disabled state [ 547.139343][T17184] team0: Failed to send port change of device 0! via netlink (err -105) [ 547.163132][T17184] team0: Failed to send options change via netlink (err -105) [ 547.172458][T17184] team0: Port device 0! added [ 547.300416][T17192] netlink: 'syz.4.2829': attribute type 10 has an invalid length. [ 547.326091][T17192] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2829'. [ 547.353525][T17192] dummy0: entered promiscuous mode [ 547.368931][T17192] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 547.414626][T17195] netlink: 'syz.3.2831': attribute type 10 has an invalid length. [ 547.423035][T17195] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2831'. [ 547.443339][T17195] !: entered promiscuous mode [ 547.475161][T17195] team0: Port device 0! removed [ 547.494693][T17195] bridge0: port 1(0!) entered blocking state [ 547.504301][T17195] bridge0: port 1(0!) entered disabled state [ 547.511682][T17195] !: entered allmulticast mode [ 547.738733][T17206] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2835'. [ 547.767727][T17206] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2835'. [ 548.054205][T17213] lo speed is unknown, defaulting to 1000 [ 548.068962][T17216] batman_adv: batadv0: Removing interface: gretap2 [ 548.155200][T17216] netlink: 'syz.1.2838': attribute type 10 has an invalid length. [ 549.139972][T17213] wg1 speed is unknown, defaulting to 1000 [ 549.280432][T17239] netlink: 'syz.1.2843': attribute type 4 has an invalid length. [ 549.504173][T17245] netlink: 'syz.1.2845': attribute type 10 has an invalid length. [ 550.005657][T17260] __nla_validate_parse: 6 callbacks suppressed [ 550.005675][T17260] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2848'. [ 550.025960][T17260] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2848'. [ 550.037258][T17260] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2848'. [ 550.050599][T17260] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2848'. [ 550.381345][T17274] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2853'. [ 550.704666][T17287] netlink: 'syz.4.2858': attribute type 10 has an invalid length. [ 550.712803][T17287] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2858'. [ 550.724077][T17287] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 550.877487][T17297] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2860'. [ 551.316554][T17307] netlink: 200 bytes leftover after parsing attributes in process `syz.1.2862'. [ 551.363515][T17306] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2862'. [ 551.427530][T17310] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 551.487481][T17310] bridge0: entered promiscuous mode [ 551.500743][T17310] bridge0: entered allmulticast mode [ 551.531338][T17310] team0: Port device bridge0 added [ 551.551366][T17313] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2864'. [ 552.061944][T17324] netlink: 'syz.0.2865': attribute type 13 has an invalid length. [ 552.096545][T17324] netlink: 'syz.0.2865': attribute type 17 has an invalid length. [ 552.234222][T17324] 8021q: adding VLAN 0 to HW filter on device bond0 [ 552.282072][T17324] 8021q: adding VLAN 0 to HW filter on device team0 [ 552.296998][T17324] !: left promiscuous mode [ 552.347251][T17324] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 552.474095][T17333] lo speed is unknown, defaulting to 1000 [ 552.531605][T17326] lo speed is unknown, defaulting to 1000 [ 552.570810][T17343] dummy0: left promiscuous mode [ 552.818279][T17322] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 553.194833][T17368] lo speed is unknown, defaulting to 1000 [ 553.312632][T17372] lo speed is unknown, defaulting to 1000 [ 553.552620][T17333] wg1 speed is unknown, defaulting to 1000 [ 554.119448][T17384] netlink: 'syz.4.2877': attribute type 15 has an invalid length. [ 554.390958][T17372] wg1 speed is unknown, defaulting to 1000 [ 554.406429][T17326] wg1 speed is unknown, defaulting to 1000 [ 554.454179][T17368] wg1 speed is unknown, defaulting to 1000 [ 555.499670][T17402] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2882'. [ 555.605346][T17403] netlink: 200 bytes leftover after parsing attributes in process `syz.3.2879'. [ 555.656705][T17396] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2879'. [ 555.806388][T17412] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2883'. [ 556.553180][T17436] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2889'. [ 556.563045][ T55] block nbd2: Possible stuck request ffff8880255f0000: control (read@0,1024B). Runtime 390 seconds [ 556.575889][ T55] block nbd2: Possible stuck request ffff8880255f01c0: control (read@1024,1024B). Runtime 390 seconds [ 556.591348][ T55] block nbd2: Possible stuck request ffff8880255f0380: control (read@2048,1024B). Runtime 390 seconds [ 556.603271][ T55] block nbd2: Possible stuck request ffff8880255f0540: control (read@3072,1024B). Runtime 390 seconds [ 556.635920][T17440] netlink: 'syz.1.2888': attribute type 10 has an invalid length. [ 557.266108][T17449] netem: incorrect ge model size [ 557.271512][T17449] netem: change failed [ 557.521156][T17450] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 557.592608][T17459] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 557.630338][T17459] bridge0: entered promiscuous mode [ 557.656981][T17459] bridge0: entered allmulticast mode [ 557.680263][T17459] team0: Port device bridge0 added [ 557.929702][T17463] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2899'. [ 558.351593][ T5233] udevd[5233]: worker [5863] /devices/virtual/block/nbd2 timeout; kill it [ 558.369279][ T5233] udevd[5233]: seq 14519 '/devices/virtual/block/nbd2' killed [ 558.531683][T17485] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 558.586074][T17486] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2902'. [ 558.737062][T17489] ip6tnl1: entered promiscuous mode [ 558.742321][T17489] ip6tnl1: entered allmulticast mode [ 558.789125][T17489] team0: Device ip6tnl1 is of different type [ 558.890632][T17490] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 559.443523][T17509] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 559.468101][T17509] bridge10: entered promiscuous mode [ 559.536736][T17509] bridge10: entered allmulticast mode [ 559.553449][T17509] team0: Port device bridge10 added [ 560.675066][T17554] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2916'. [ 561.003869][T17564] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 561.084940][T17564] bridge11: entered promiscuous mode [ 561.090591][T17564] bridge11: entered allmulticast mode [ 561.103313][T17564] team0: Port device bridge11 added [ 561.488175][T17584] rdma_rxe: rxe_newlink: failed to add veth1_to_hsr [ 561.523083][T17585] netlink: 100 bytes leftover after parsing attributes in process `syz.3.2925'. [ 561.703532][T17587] veth11: entered promiscuous mode [ 561.856370][T17597] sctp: [Deprecated]: syz.2.2928 (pid 17597) Use of struct sctp_assoc_value in delayed_ack socket option. [ 561.856370][T17597] Use struct sctp_sack_info instead [ 562.406413][T17603] lo speed is unknown, defaulting to 1000 [ 563.018701][T17617] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2933'. [ 563.028792][T17603] wg1 speed is unknown, defaulting to 1000 [ 563.067884][T17617] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2933'. [ 563.301899][T17627] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 563.350164][T17627] bridge9: entered promiscuous mode [ 563.357167][T17627] bridge9: entered allmulticast mode [ 563.366958][T17627] team0: Port device bridge9 added [ 564.056009][T17655] siw: device registration error -23 [ 564.309103][T17668] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 564.433188][T17668] mac80211_hwsim hwsim6 wlan0: Caught tx_queue_len zero misconfig [ 564.631321][T17670] batadv_slave_0: entered promiscuous mode [ 564.659449][T17670] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2948'. [ 564.685776][T17668] netlink: 428 bytes leftover after parsing attributes in process `syz.2.2948'. [ 564.694888][T17668] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2948'. [ 564.863544][T17687] netlink: 'syz.1.2952': attribute type 10 has an invalid length. [ 564.871617][T17687] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2952'. [ 564.942523][T17682] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 565.016430][T17682] bridge10: entered promiscuous mode [ 565.021794][T17682] bridge10: entered allmulticast mode [ 565.057164][T17682] team0: Port device bridge10 added [ 565.242478][T17699] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2954'. [ 565.440308][T17708] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2957'. [ 565.458845][T17700] lo speed is unknown, defaulting to 1000 [ 565.948908][T17700] wg1 speed is unknown, defaulting to 1000 [ 566.387690][T17729] netlink: 248 bytes leftover after parsing attributes in process `syz.0.2960'. [ 567.500414][T17756] netlink: 'syz.4.2966': attribute type 10 has an invalid length. [ 567.537488][T17756] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2966'. [ 567.569593][T17756] dummy0: entered promiscuous mode [ 567.582260][T17756] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 567.815835][T17765] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2969'. [ 567.891447][T17773] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2968'. [ 568.154948][T17779] siw: device registration error -23 [ 568.226849][T17766] lo speed is unknown, defaulting to 1000 [ 568.270974][T17785] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2973'. [ 568.320674][ T30] audit: type=1800 audit(1758856462.068:18): pid=17786 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2972" name="memory.events" dev="tmpfs" ino=3119 res=0 errno=0 [ 568.431254][ T30] audit: type=1804 audit(1758856462.068:19): pid=17786 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.2972" name="memory.events" dev="tmpfs" ino=3119 res=1 errno=0 [ 568.454822][T17791] netlink: 'syz.1.2972': attribute type 1 has an invalid length. [ 568.645728][T17789] netlink: 'syz.2.2974': attribute type 10 has an invalid length. [ 568.996652][T17797] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2975'. [ 569.251813][T17766] wg1 speed is unknown, defaulting to 1000 [ 570.278676][T17816] lo speed is unknown, defaulting to 1000 [ 570.307504][T17816] wg1 speed is unknown, defaulting to 1000 [ 571.314174][T17833] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2983'. [ 571.735877][T17831] lo speed is unknown, defaulting to 1000 [ 571.760749][T17831] wg1 speed is unknown, defaulting to 1000 [ 573.418033][T17877] lo speed is unknown, defaulting to 1000 [ 573.558072][T17877] wg1 speed is unknown, defaulting to 1000 [ 573.824536][T17880] lo speed is unknown, defaulting to 1000 [ 574.016290][T17880] wg1 speed is unknown, defaulting to 1000 [ 574.380110][T17895] lo speed is unknown, defaulting to 1000 [ 574.457011][T17895] wg1 speed is unknown, defaulting to 1000 [ 575.076495][T17913] netlink: 'syz.3.2999': attribute type 10 has an invalid length. [ 575.129442][T17913] !: left allmulticast mode [ 575.139883][T17913] !: left promiscuous mode [ 575.155739][T17913] bridge0: port 1(0!) entered disabled state [ 575.220194][T17913] bond0: (slave 0!): Enslaving as an active interface with an up link [ 575.228905][ T1338] bond0: (slave 0!): interface is now down [ 575.249073][ T1338] bond0: (slave 0!): interface is now down [ 575.265708][ T6172] bond0: (slave 0!): interface is now down [ 575.280196][ T6172] bond0: now running without any active interface! [ 575.367638][T17933] netlink: 'syz.4.3005': attribute type 1 has an invalid length. [ 575.436656][T17927] geneve2: entered promiscuous mode [ 575.472026][T17927] geneve2: entered allmulticast mode [ 575.877866][T17933] 8021q: adding VLAN 0 to HW filter on device bond8 [ 576.043885][T17935] 8021q: adding VLAN 0 to HW filter on device bond8 [ 576.066058][T17935] bond8: (slave vxcan1): The slave device specified does not support setting the MAC address [ 576.085881][T17935] bond8: (slave vxcan1): Error -95 calling set_mac_address [ 576.229260][T17936] veth15: entered promiscuous mode [ 576.243905][T17936] bond8: (slave veth15): Enslaving as an active interface with a down link [ 576.268726][T17926] lo speed is unknown, defaulting to 1000 [ 576.319465][T17926] wg1 speed is unknown, defaulting to 1000 [ 576.634668][T17947] tipc: Disabling bearer [ 576.689191][T17947] team0 (unregistering): Port device bridge0 removed [ 576.703681][T17947] team0 (unregistering): Port device bridge9 removed [ 576.770548][T17957] veth0_to_bridge: entered promiscuous mode [ 576.899505][T17945] lo speed is unknown, defaulting to 1000 [ 577.069960][T17945] wg1 speed is unknown, defaulting to 1000 [ 577.070267][T17949] veth0_to_bridge: left promiscuous mode [ 577.180754][T17970] lo speed is unknown, defaulting to 1000 [ 577.229695][T17969] lo speed is unknown, defaulting to 1000 [ 577.237576][T17970] wg1 speed is unknown, defaulting to 1000 [ 577.268868][T17969] wg1 speed is unknown, defaulting to 1000 [ 577.774874][T17984] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3013'. [ 578.462722][T18013] netlink: 'syz.1.3019': attribute type 13 has an invalid length. [ 578.671540][T18019] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 578.760348][T18013] lo speed is unknown, defaulting to 1000 [ 578.949076][T18013] wg1 speed is unknown, defaulting to 1000 [ 579.010044][T18021] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3020'. [ 579.020112][T18021] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3020'. [ 579.039807][T18021] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3020'. [ 579.057452][T18021] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3020'. [ 579.084052][T18029] lo speed is unknown, defaulting to 1000 [ 579.117223][T18029] wg1 speed is unknown, defaulting to 1000 [ 579.334874][T18039] netlink: 'syz.0.3023': attribute type 10 has an invalid length. [ 579.555957][T18039] team0: Port device 0! added [ 579.806932][T18052] lo speed is unknown, defaulting to 1000 [ 579.983960][T18052] wg1 speed is unknown, defaulting to 1000 [ 580.001082][T18054] lo speed is unknown, defaulting to 1000 [ 580.089023][T18054] wg1 speed is unknown, defaulting to 1000 [ 580.324028][T18061] A link change request failed with some changes committed already. Interface 0! may have been left with an inconsistent configuration, please check. [ 580.739061][T18079] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode [ 580.899360][T18079] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode [ 581.110323][T18093] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3034'. [ 581.237039][T18084] batadv_slave_0: left promiscuous mode [ 581.264166][T18084] tipc: Resetting bearer [ 581.271733][T18084] syzkaller0: left promiscuous mode [ 581.285426][T18084] syzkaller0: left allmulticast mode [ 581.323269][T18084] ip6tnl1: left promiscuous mode [ 581.331559][T18084] ip6tnl1: left allmulticast mode [ 581.397464][T18097] lo speed is unknown, defaulting to 1000 [ 581.406011][T18097] wg1 speed is unknown, defaulting to 1000 [ 581.595650][T16428] Bluetooth: hci4: command 0x0406 tx timeout [ 581.794066][T18103] netlink: 'syz.2.3037': attribute type 10 has an invalid length. [ 582.610571][T18125] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3040'. [ 582.817074][T18125] nbd: socks must be embedded in a SOCK_ITEM attr [ 582.856177][T18129] lo speed is unknown, defaulting to 1000 [ 582.893956][T18129] wg1 speed is unknown, defaulting to 1000 [ 583.129223][T18137] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3042'. [ 583.163967][ T7693] udevd[7693]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 583.315154][T18137] lo speed is unknown, defaulting to 1000 [ 583.340574][T18137] wg1 speed is unknown, defaulting to 1000 [ 583.915670][T18151] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3045'. [ 584.319537][T18154] lo speed is unknown, defaulting to 1000 [ 584.330973][T18156] lo speed is unknown, defaulting to 1000 [ 584.366045][T18154] wg1 speed is unknown, defaulting to 1000 [ 584.570861][T18160] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3047'. [ 584.603763][T18156] wg1 speed is unknown, defaulting to 1000 [ 584.729719][T18160] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3047'. [ 584.772479][T18158] lo speed is unknown, defaulting to 1000 [ 584.798281][T18158] wg1 speed is unknown, defaulting to 1000 [ 585.086207][T18165] lo speed is unknown, defaulting to 1000 [ 585.141838][T18172] netlink: 'syz.0.3049': attribute type 13 has an invalid length. [ 585.142746][T18165] wg1 speed is unknown, defaulting to 1000 [ 585.175739][T18172] netlink: 'syz.0.3049': attribute type 17 has an invalid length. [ 585.313697][T18172] 8021q: adding VLAN 0 to HW filter on device bond0 [ 585.325188][T18175] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3049'. [ 585.339657][T18172] 8021q: adding VLAN 0 to HW filter on device team0 [ 585.354035][T18172] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 585.527509][T18172] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 585.765185][T18173] lo speed is unknown, defaulting to 1000 [ 585.900900][T18173] wg1 speed is unknown, defaulting to 1000 [ 585.951037][T18181] lo speed is unknown, defaulting to 1000 [ 585.960731][T18181] wg1 speed is unknown, defaulting to 1000 [ 586.449332][T18197] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3055'. [ 586.638435][ T55] block nbd2: Possible stuck request ffff8880255f0000: control (read@0,1024B). Runtime 420 seconds [ 586.649704][ T55] block nbd2: Possible stuck request ffff8880255f01c0: control (read@1024,1024B). Runtime 420 seconds [ 586.661471][ T55] block nbd2: Possible stuck request ffff8880255f0380: control (read@2048,1024B). Runtime 420 seconds [ 586.672682][ T55] block nbd2: Possible stuck request ffff8880255f0540: control (read@3072,1024B). Runtime 420 seconds [ 586.687136][T18200] dvmrp0: left allmulticast mode [ 586.768409][T18206] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3056'. [ 586.807822][T18209] netlink: 'syz.0.3058': attribute type 13 has an invalid length. [ 586.876323][T18209] netlink: 'syz.0.3058': attribute type 17 has an invalid length. [ 587.204752][T18219] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 587.337766][T18219] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 587.438064][T18219] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 587.572659][T18205] bond0 (unregistering): Released all slaves [ 587.612406][T18209] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 587.749956][T18218] lo speed is unknown, defaulting to 1000 [ 587.777365][T18218] wg1 speed is unknown, defaulting to 1000 [ 587.778752][T18222] lo speed is unknown, defaulting to 1000 [ 587.852477][T18227] netlink: 'syz.2.3061': attribute type 1 has an invalid length. [ 587.911539][T18227] 8021q: adding VLAN 0 to HW filter on device bond0 [ 587.923952][T18222] wg1 speed is unknown, defaulting to 1000 [ 587.941755][T18211] lo speed is unknown, defaulting to 1000 [ 587.984992][T18229] 8021q: adding VLAN 0 to HW filter on device bond0 [ 587.992250][T18229] bond0: (slave vxcan2): The slave device specified does not support setting the MAC address [ 588.004955][T18229] bond0: (slave vxcan2): Error -95 calling set_mac_address [ 588.047476][T18221] lo speed is unknown, defaulting to 1000 [ 588.064464][T18211] wg1 speed is unknown, defaulting to 1000 [ 588.141263][T18227] veth21: entered promiscuous mode [ 588.162098][T18227] bond0: (slave veth21): Enslaving as an active interface with a down link [ 588.188235][T18221] wg1 speed is unknown, defaulting to 1000 [ 588.415092][T18234] netlink: 'syz.2.3062': attribute type 13 has an invalid length. [ 588.446026][T18234] netlink: 'syz.2.3062': attribute type 17 has an invalid length. [ 588.529518][T18234] 8021q: adding VLAN 0 to HW filter on device team0 [ 588.549390][T18234] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 588.569359][T18236] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 588.658590][T18235] lo speed is unknown, defaulting to 1000 [ 588.671144][T18235] wg1 speed is unknown, defaulting to 1000 [ 589.137663][T18246] netlink: 'syz.3.3066': attribute type 10 has an invalid length. [ 589.272304][T18246] bond0: (slave 0!): Releasing backup interface [ 589.310180][T18246] team0: Port device 0! added [ 589.332745][T18243] lo speed is unknown, defaulting to 1000 [ 589.390485][T18243] wg1 speed is unknown, defaulting to 1000 [ 589.929310][T18262] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3068'. [ 590.149557][T18261] lo speed is unknown, defaulting to 1000 [ 590.164113][T18261] wg1 speed is unknown, defaulting to 1000 [ 590.419682][T18267] netlink: 'syz.2.3069': attribute type 13 has an invalid length. [ 590.680861][T18275] netlink: 'syz.0.3072': attribute type 1 has an invalid length. [ 590.758701][T18275] 8021q: adding VLAN 0 to HW filter on device bond8 [ 590.884098][T18279] 8021q: adding VLAN 0 to HW filter on device bond8 [ 590.903316][T18279] bond8: (slave vxcan1): The slave device specified does not support setting the MAC address [ 590.942127][T18279] bond8: (slave vxcan1): Error -95 calling set_mac_address [ 590.943020][T18293] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3075'. [ 591.091613][T18275] veth31: entered promiscuous mode [ 591.168338][T18275] bond8: (slave veth31): Enslaving as an active interface with a down link [ 591.466511][T18298] netlink: 'syz.4.3076': attribute type 1 has an invalid length. [ 591.474436][T18298] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3076'. [ 591.492615][T18298] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3076'. [ 591.566753][T18299] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3076'. [ 592.276767][T18325] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3082'. [ 592.490643][T18327] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3084'. [ 592.769961][T18325] vlan0: left allmulticast mode [ 592.786197][T18325] veth1: left allmulticast mode [ 592.809334][T18325] vlan0: left promiscuous mode [ 592.814581][T18325] veth1: left promiscuous mode [ 592.822733][T18325] bridge0: port 3(vlan0) entered disabled state [ 592.833560][T18325] veth9: left allmulticast mode [ 592.838821][T18325] veth9: left promiscuous mode [ 592.844012][T18325] bridge0: port 1(veth9) entered disabled state [ 593.244451][T18327] team0: Port device bridge0 removed [ 593.838273][T18346] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3087'. [ 593.956931][T18346] vlan4: entered allmulticast mode [ 593.972358][T18346] bridge0: entered allmulticast mode [ 593.982807][T18346] bridge7: port 1(vlan4) entered blocking state [ 593.997837][T18346] bridge7: port 1(vlan4) entered disabled state [ 594.018455][T18346] vlan4: entered promiscuous mode [ 594.023540][T18346] bridge0: entered promiscuous mode [ 594.070178][T18346] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 594.413216][T18366] lo speed is unknown, defaulting to 1000 [ 594.444938][T18366] wg1 speed is unknown, defaulting to 1000 [ 594.456499][T18374] netlink: 'syz.1.3095': attribute type 10 has an invalid length. [ 594.898836][T18381] netlink: 16386 bytes leftover after parsing attributes in process `syz.1.3096'. [ 595.574922][T18399] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 596.189435][T18409] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3103'. [ 596.248347][T18409] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3103'. [ 596.277946][T18409] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3103'. [ 596.642501][T18424] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3108'. [ 596.653764][T18424] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3108'. [ 596.668206][T18424] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3108'. [ 596.677401][T18424] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3108'. [ 596.789852][T18430] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3107'. [ 597.167854][T18428] lo speed is unknown, defaulting to 1000 [ 597.191213][T18428] wg1 speed is unknown, defaulting to 1000 [ 597.822082][T18451] lo speed is unknown, defaulting to 1000 [ 597.831403][T18451] wg1 speed is unknown, defaulting to 1000 [ 597.989373][T18455] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 599.357334][T18481] lo speed is unknown, defaulting to 1000 [ 599.386025][T18481] lo speed is unknown, defaulting to 1000 [ 599.418108][T18481] lo speed is unknown, defaulting to 1000 [ 599.581925][T18481] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 599.664926][T18481] lo speed is unknown, defaulting to 1000 [ 599.682722][T18494] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3125'. [ 599.694700][T18481] lo speed is unknown, defaulting to 1000 [ 599.728415][T18481] lo speed is unknown, defaulting to 1000 [ 599.962854][T18501] netlink: 'syz.3.3126': attribute type 12 has an invalid length. [ 599.993929][T18481] lo speed is unknown, defaulting to 1000 [ 600.016412][T18481] lo speed is unknown, defaulting to 1000 [ 600.471982][T18524] lo speed is unknown, defaulting to 1000 [ 600.485732][T18524] wg1 speed is unknown, defaulting to 1000 [ 600.494268][T18524] lo speed is unknown, defaulting to 1000 [ 600.730549][T18528] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3130'. [ 600.930056][T18530] 8021q: adding VLAN 0 to HW filter on device bond0 [ 601.080913][T18536] netlink: 'syz.4.3134': attribute type 10 has an invalid length. [ 601.102134][T18536] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 601.434617][T18545] __nla_validate_parse: 1 callbacks suppressed [ 601.434638][T18545] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3136'. [ 601.541503][T18549] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3137'. [ 601.643889][T18553] ip6tnl0: Caught tx_queue_len zero misconfig [ 601.904803][T18565] netlink: 'syz.2.3139': attribute type 10 has an invalid length. [ 601.913243][T18565] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3139'. [ 602.036111][T18565] A link change request failed with some changes committed already. Interface 0! may have been left with an inconsistent configuration, please check. [ 602.081431][T18566] pim6reg: entered allmulticast mode [ 602.088303][T18553] pim6reg: left allmulticast mode [ 602.400062][ T5871] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 602.406700][ T5871] Bluetooth: hci2: command 0x0406 tx timeout [ 603.238613][T18595] netlink: 'syz.3.3146': attribute type 10 has an invalid length. [ 603.266727][T18595] team0: Port device 0! removed [ 603.303905][T18595] bond0: (slave 0!): Enslaving as an active interface with an up link [ 603.323670][ T6187] bond0: (slave 0!): interface is now down [ 603.331743][ T6187] bond0: now running without any active interface! [ 604.196084][T18624] netlink: 'syz.3.3152': attribute type 10 has an invalid length. [ 604.203961][T18624] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3152'. [ 604.274882][T18624] !: entered promiscuous mode [ 604.306977][T18624] bond0: (slave 0!): Releasing backup interface [ 604.337762][T18616] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 604.369604][T18624] bridge0: port 1(0!) entered blocking state [ 604.389315][T18624] bridge0: port 1(0!) entered disabled state [ 604.409384][T18624] !: entered allmulticast mode [ 604.436595][T18616] netlink: 'syz.4.3151': attribute type 4 has an invalid length. [ 604.971400][T18645] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3157'. [ 605.004870][T18648] netlink: 3 bytes leftover after parsing attributes in process `syz.4.3158'. [ 605.013556][T18645] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3157'. [ 605.390570][T18641] bond0 (unregistering): (slave veth21): Releasing active interface [ 605.408964][T18641] bond0 (unregistering): Released all slaves [ 605.474956][T18648] batadv1: entered promiscuous mode [ 605.497662][T18648] batadv1: entered allmulticast mode [ 605.679738][T18666] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3162'. [ 605.826701][T18666] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3162'. [ 606.092170][T18680] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3164'. [ 606.162013][T18682] netlink: 'syz.2.3165': attribute type 10 has an invalid length. [ 606.170678][T18682] A link change request failed with some changes committed already. Interface 0! may have been left with an inconsistent configuration, please check. [ 606.546569][T18688] lo speed is unknown, defaulting to 1000 [ 606.591030][T18688] wg1 speed is unknown, defaulting to 1000 [ 606.599088][T18690] lo speed is unknown, defaulting to 1000 [ 606.612526][T18690] wg1 speed is unknown, defaulting to 1000 [ 606.621285][T18690] lo speed is unknown, defaulting to 1000 [ 606.630317][T18688] lo speed is unknown, defaulting to 1000 [ 606.977226][T18699] netlink: 'syz.4.3169': attribute type 13 has an invalid length. [ 608.002792][T18722] bridge10: entered promiscuous mode [ 608.018314][T18722] bridge10: entered allmulticast mode [ 609.063990][T18755] netlink: 'syz.1.3176': attribute type 13 has an invalid length. [ 609.079972][T18755] netlink: 'syz.1.3176': attribute type 17 has an invalid length. [ 609.493435][T18737] dvmrp0: entered allmulticast mode [ 609.574900][T18769] __nla_validate_parse: 1 callbacks suppressed [ 609.574921][T18769] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3180'. [ 609.759584][T18755] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 609.783169][ T5871] Bluetooth: hci4: command 0x0406 tx timeout [ 609.995092][T18758] lo speed is unknown, defaulting to 1000 [ 610.018663][T18758] wg1 speed is unknown, defaulting to 1000 [ 610.039917][T18758] lo speed is unknown, defaulting to 1000 [ 610.350470][T18781] netlink: 'syz.0.3182': attribute type 4 has an invalid length. [ 611.189893][T18807] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3187'. [ 611.381097][T18814] netlink: 'syz.2.3190': attribute type 10 has an invalid length. [ 611.439856][T18814] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3190'. [ 611.496173][T18814] A link change request failed with some changes committed already. Interface 0! may have been left with an inconsistent configuration, please check. [ 611.539426][T18807] lo speed is unknown, defaulting to 1000 [ 611.564406][T18815] lo speed is unknown, defaulting to 1000 [ 611.580727][T18807] wg1 speed is unknown, defaulting to 1000 [ 611.615415][T18815] wg1 speed is unknown, defaulting to 1000 [ 611.623632][T18807] lo speed is unknown, defaulting to 1000 [ 611.680545][T18815] lo speed is unknown, defaulting to 1000 [ 612.197057][T18850] netlink: 'syz.0.3194': attribute type 1 has an invalid length. [ 612.233648][ T6187] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 612.242173][ T6187] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 613.524277][T18876] lo speed is unknown, defaulting to 1000 [ 613.574720][T18881] netlink: 'syz.1.3202': attribute type 10 has an invalid length. [ 613.596484][T18881] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3202'. [ 613.617191][T18876] wg1 speed is unknown, defaulting to 1000 [ 613.672578][T18876] lo speed is unknown, defaulting to 1000 [ 614.357367][T18908] netlink: 'syz.2.3207': attribute type 1 has an invalid length. [ 614.399616][T18908] 8021q: adding VLAN 0 to HW filter on device bond0 [ 614.540973][T18910] 8021q: adding VLAN 0 to HW filter on device bond0 [ 614.549494][T18910] bond0: (slave vxcan2): The slave device specified does not support setting the MAC address [ 614.569784][T18910] bond0: (slave vxcan2): Error -95 calling set_mac_address [ 614.708846][T18908] veth23: entered promiscuous mode [ 614.730461][T18908] bond0: (slave veth23): Enslaving as an active interface with a down link [ 614.754891][T18917] dvmrp0: left allmulticast mode [ 614.796630][T18918] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 614.808143][ T1079] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 614.809043][T18920] rdma_rxe: rxe_newlink: failed to add lo [ 614.817333][ T1079] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 614.903870][T18918] bridge8: entered promiscuous mode [ 614.921330][T18918] bridge8: entered allmulticast mode [ 614.953267][T18918] team0: Port device bridge8 added [ 615.012308][T18928] netlink: 'syz.1.3211': attribute type 10 has an invalid length. [ 615.064998][T18924] 8021q: adding VLAN 0 to HW filter on device bond0 [ 615.078073][T18924] 8021q: adding VLAN 0 to HW filter on device team0 [ 615.086049][ T8474] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 615.097414][T18924] dummy0: left promiscuous mode [ 615.109946][T18924] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 615.132133][ T5956] lo speed is unknown, defaulting to 1000 [ 615.156664][ T5956] syz2: Port: 1 Link ACTIVE [ 615.231061][T18931] bridge0: entered promiscuous mode [ 615.236506][T18931] bridge0: entered allmulticast mode [ 615.244568][T18931] team0: Port device bridge0 added [ 615.317236][ T68] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 615.345951][ T8474] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 615.516793][T18936] lo speed is unknown, defaulting to 1000 [ 615.548218][T18936] wg1 speed is unknown, defaulting to 1000 [ 615.558879][T18936] lo speed is unknown, defaulting to 1000 [ 615.761748][T18956] netlink: 'syz.4.3219': attribute type 1 has an invalid length. [ 615.892215][T18956] 8021q: adding VLAN 0 to HW filter on device bond9 [ 616.049629][T18959] 8021q: adding VLAN 0 to HW filter on device bond9 [ 616.102556][T18959] bond9: (slave vxcan1): The slave device specified does not support setting the MAC address [ 616.269562][T18959] bond9: (slave vxcan1): Error -95 calling set_mac_address [ 616.651463][T18964] veth23: entered promiscuous mode [ 616.661830][T18964] bond9: (slave veth23): Enslaving as an active interface with a down link [ 616.694629][T18976] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3221'. [ 616.711152][ T68] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 616.716177][ T55] block nbd2: Possible stuck request ffff8880255f0000: control (read@0,1024B). Runtime 450 seconds [ 616.724683][ T68] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 616.734940][ T55] block nbd2: Possible stuck request ffff8880255f01c0: control (read@1024,1024B). Runtime 450 seconds [ 616.752755][ T55] block nbd2: Possible stuck request ffff8880255f0380: control (read@2048,1024B). Runtime 450 seconds [ 616.764773][ T55] block nbd2: Possible stuck request ffff8880255f0540: control (read@3072,1024B). Runtime 450 seconds [ 616.946060][ T8475] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 617.568489][T19013] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3228'. [ 617.813109][T19028] lo speed is unknown, defaulting to 1000 [ 617.827347][T19028] wg1 speed is unknown, defaulting to 1000 [ 617.838654][T19028] lo speed is unknown, defaulting to 1000 [ 618.882069][T19045] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3235'. [ 619.326927][T19059] netlink: 'syz.1.3236': attribute type 83 has an invalid length. [ 619.475925][T19068] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3238'. [ 619.544051][T19052] lo speed is unknown, defaulting to 1000 [ 619.558433][T19052] wg1 speed is unknown, defaulting to 1000 [ 619.601706][T19052] lo speed is unknown, defaulting to 1000 [ 619.640280][T19070] lo speed is unknown, defaulting to 1000 [ 619.678911][T19070] wg1 speed is unknown, defaulting to 1000 [ 619.706558][T19070] lo speed is unknown, defaulting to 1000 [ 620.261954][T19087] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3243'. [ 620.314493][T19092] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3244'. [ 620.412988][T19094] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.3244'. [ 620.425648][T19094] netlink: zone id is out of range [ 620.430831][T19094] netlink: zone id is out of range [ 620.436971][T19094] netlink: get zone limit has 8 unknown bytes [ 620.602374][T19096] lo speed is unknown, defaulting to 1000 [ 620.624108][T19096] wg1 speed is unknown, defaulting to 1000 [ 620.671085][T19096] lo speed is unknown, defaulting to 1000 [ 620.671655][T19097] lo speed is unknown, defaulting to 1000 [ 620.689188][T19097] wg1 speed is unknown, defaulting to 1000 [ 620.809619][T19097] lo speed is unknown, defaulting to 1000 [ 620.955611][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 621.033492][T19107] netlink: 256 bytes leftover after parsing attributes in process `syz.3.3248'. [ 621.079398][T19107] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3248'. [ 621.342636][T19119] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3251'. [ 621.803062][T19132] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3256'. [ 621.928589][T19142] syzkaller0: Caught tx_queue_len zero misconfig [ 621.950069][T19142] siw: device registration error -23 [ 622.025116][T19144] wg1 speed is unknown, defaulting to 1000 [ 622.208111][T19144] lo speed is unknown, defaulting to 1000 [ 622.245583][ T5871] Bluetooth: hci4: command 0x0406 tx timeout [ 622.485019][T19150] wg1 speed is unknown, defaulting to 1000 [ 622.493152][T19150] lo speed is unknown, defaulting to 1000 [ 622.812107][T19151] wg1 speed is unknown, defaulting to 1000 [ 622.859438][T19157] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3261'. [ 622.868906][T19151] lo speed is unknown, defaulting to 1000 [ 622.938939][T19155] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 623.087900][T19175] wg1 speed is unknown, defaulting to 1000 [ 623.094950][T19175] lo speed is unknown, defaulting to 1000 [ 623.212011][T19171] wg1 speed is unknown, defaulting to 1000 [ 623.257714][T19181] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3265'. [ 623.470241][T19171] lo speed is unknown, defaulting to 1000 [ 623.891563][T19197] IPVS: Error connecting to the multicast addr [ 624.663465][T19205] team0 (unregistering): Port device geneve0 removed [ 624.679785][T19205] team0 (unregistering): Port device bridge8 removed [ 624.774181][T19201] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 625.280644][T19231] wg1 speed is unknown, defaulting to 1000 [ 625.335669][T19231] lo speed is unknown, defaulting to 1000 [ 625.826992][T19244] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3279'. [ 626.125621][T19257] wg1 speed is unknown, defaulting to 1000 [ 626.133367][T19257] lo speed is unknown, defaulting to 1000 [ 626.891612][T19278] netlink: 'syz.2.3286': attribute type 10 has an invalid length. [ 626.933524][T19278] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3286'. [ 627.068188][T19279] syzkaller0: entered promiscuous mode [ 627.073795][T19279] syzkaller0: entered allmulticast mode [ 627.112452][T19278] A link change request failed with some changes committed already. Interface 0! may have been left with an inconsistent configuration, please check. [ 627.214091][T19293] netlink: 'syz.0.3290': attribute type 13 has an invalid length. [ 627.233421][T19293] netlink: 'syz.0.3290': attribute type 17 has an invalid length. [ 627.561480][T19293] 8021q: adding VLAN 0 to HW filter on device bond0 [ 627.570897][T19293] 8021q: adding VLAN 0 to HW filter on device team0 [ 627.611744][T19293] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 627.647663][T19295] xfrm0: entered promiscuous mode [ 627.694702][T19295] xfrm0: entered allmulticast mode [ 627.940478][T19287] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 628.501314][T19306] netlink: 'syz.2.3294': attribute type 6 has an invalid length. [ 629.515486][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 630.410873][T19298] wg1 speed is unknown, defaulting to 1000 [ 630.417442][T19316] bond4: option mode: unable to set because the bond device has slaves [ 630.430152][T19320] !: left allmulticast mode [ 630.435004][T19320] bridge0: port 1(0!) entered disabled state [ 630.444482][T19320] bond5: (slave wlan0): Releasing active interface [ 630.453393][T19320] bond0: (slave wlan1): Releasing backup interface [ 630.466626][T19320] bond3: (slave gretap1): Releasing active interface [ 630.473546][T19320] gretap1: left allmulticast mode [ 630.483741][T19320] bond4: (slave vcan1): Releasing backup interface [ 630.493609][T19320] vlan4: left promiscuous mode [ 630.498991][T19320] bridge0: left promiscuous mode [ 630.504431][T19320] bridge7: port 1(vlan4) entered disabled state [ 630.526117][T19298] lo speed is unknown, defaulting to 1000 [ 630.540855][T19303] wg1 speed is unknown, defaulting to 1000 [ 630.568615][T19303] lo speed is unknown, defaulting to 1000 [ 630.574456][T19309] wg1 speed is unknown, defaulting to 1000 [ 630.588859][T19309] lo speed is unknown, defaulting to 1000 [ 630.693013][T19331] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3301'. [ 630.703277][T19331] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3301'. [ 630.723468][T19331] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3301'. [ 630.734755][T19331] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3301'. [ 630.828292][T19333] netlink: 'syz.3.3301': attribute type 1 has an invalid length. [ 630.889944][T19332] wg1 speed is unknown, defaulting to 1000 [ 631.009160][T19332] lo speed is unknown, defaulting to 1000 [ 632.407913][T19367] netlink: 'syz.0.3310': attribute type 10 has an invalid length. [ 632.441837][T19367] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3310'. [ 632.452401][T19367] !: entered promiscuous mode [ 632.514285][T19367] team0: Port device 0! removed [ 632.547867][T19367] A link change request failed with some changes committed already. Interface 0! may have been left with an inconsistent configuration, please check. [ 632.702982][T19356] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3308'. [ 632.712313][T19356] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3308'. [ 633.201482][T19390] wg1 speed is unknown, defaulting to 1000 [ 633.276131][T19390] lo speed is unknown, defaulting to 1000 [ 633.828590][T19413] lo speed is unknown, defaulting to 1000 [ 633.834848][T19413] lo speed is unknown, defaulting to 1000 [ 633.842743][T19409] wg1 speed is unknown, defaulting to 1000 [ 633.878641][T19409] lo speed is unknown, defaulting to 1000 [ 633.964942][T19413] lo speed is unknown, defaulting to 1000 [ 634.024968][T19413] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 634.091671][T19413] lo speed is unknown, defaulting to 1000 [ 634.130212][T19413] lo speed is unknown, defaulting to 1000 [ 634.154712][T19413] lo speed is unknown, defaulting to 1000 [ 634.422498][T19413] lo speed is unknown, defaulting to 1000 [ 634.460121][T19435] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3330'. [ 634.561583][T19413] lo speed is unknown, defaulting to 1000 [ 634.577234][T19413] lo speed is unknown, defaulting to 1000 [ 634.587482][T19413] lo speed is unknown, defaulting to 1000 [ 634.923267][T19447] wg1 speed is unknown, defaulting to 1000 [ 634.970082][T19447] lo speed is unknown, defaulting to 1000 [ 635.026775][T19447] lo speed is unknown, defaulting to 1000 [ 635.699708][T19463] wg1 speed is unknown, defaulting to 1000 [ 635.800276][T19463] lo speed is unknown, defaulting to 1000 [ 635.893832][T19463] lo speed is unknown, defaulting to 1000 [ 636.839500][T19508] wg1 speed is unknown, defaulting to 1000 [ 636.867455][T19508] lo speed is unknown, defaulting to 1000 [ 636.917657][T19508] lo speed is unknown, defaulting to 1000 [ 637.300278][T19520] wg1 speed is unknown, defaulting to 1000 [ 637.312713][T19520] lo speed is unknown, defaulting to 1000 [ 637.328886][T19520] lo speed is unknown, defaulting to 1000 [ 638.484834][T19543] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 639.698995][T19581] wg1 speed is unknown, defaulting to 1000 [ 639.717529][T19581] lo speed is unknown, defaulting to 1000 [ 639.750879][T19581] lo speed is unknown, defaulting to 1000 [ 640.072948][T19585] wg1 speed is unknown, defaulting to 1000 [ 640.090524][T19585] lo speed is unknown, defaulting to 1000 [ 640.178452][T19585] lo speed is unknown, defaulting to 1000 [ 640.868523][T19610] netlink: 'syz.1.3378': attribute type 10 has an invalid length. [ 640.968288][T19612] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3380'. [ 641.175124][T19622] netlink: 'syz.0.3382': attribute type 13 has an invalid length. [ 641.470061][T19636] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3387'. [ 641.788511][T19648] wg1 speed is unknown, defaulting to 1000 [ 641.849957][T19648] lo speed is unknown, defaulting to 1000 [ 641.880536][T19648] lo speed is unknown, defaulting to 1000 [ 643.069992][T19674] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3396'. [ 643.168043][T19677] netlink: 'syz.4.3398': attribute type 10 has an invalid length. [ 643.188176][T19676] netlink: 'syz.1.3397': attribute type 10 has an invalid length. [ 643.206268][T19677] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3398'. [ 643.266315][T19677] dummy0: entered promiscuous mode [ 643.277827][T19677] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 643.280555][T19682] siw: device registration error -23 [ 643.331769][T19682] lo: Caught tx_queue_len zero misconfig [ 643.387938][T19680] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3399'. [ 643.397291][T19680] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3399'. [ 643.406631][T19680] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3399'. [ 643.416537][T19680] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3399'. [ 643.539502][T19689] wg1 speed is unknown, defaulting to 1000 [ 643.560816][T19689] lo speed is unknown, defaulting to 1000 [ 643.573261][T19689] lo speed is unknown, defaulting to 1000 [ 644.080897][T19705] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 644.084631][T19704] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3407'. [ 644.156724][T19705] bridge11: entered promiscuous mode [ 644.163483][T19705] bridge11: entered allmulticast mode [ 644.199446][T19705] team0: Port device bridge11 added [ 644.483499][T19715] wg1 speed is unknown, defaulting to 1000 [ 644.567696][T19715] lo speed is unknown, defaulting to 1000 [ 644.853810][T19715] lo speed is unknown, defaulting to 1000 [ 644.947588][T19719] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3411'. [ 645.658482][T19751] wg1 speed is unknown, defaulting to 1000 [ 645.684849][T19751] lo speed is unknown, defaulting to 1000 [ 645.699323][T19751] lo speed is unknown, defaulting to 1000 [ 646.010102][T19770] wg1 speed is unknown, defaulting to 1000 [ 646.018177][T19770] lo speed is unknown, defaulting to 1000 [ 646.027808][T19770] lo speed is unknown, defaulting to 1000 [ 646.795551][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 646.804872][ T55] block nbd2: Possible stuck request ffff8880255f0000: control (read@0,1024B). Runtime 480 seconds [ 646.816578][ T55] block nbd2: Possible stuck request ffff8880255f01c0: control (read@1024,1024B). Runtime 480 seconds [ 646.829063][ T55] block nbd2: Possible stuck request ffff8880255f0380: control (read@2048,1024B). Runtime 480 seconds [ 646.841732][ T55] block nbd2: Possible stuck request ffff8880255f0540: control (read@3072,1024B). Runtime 480 seconds [ 647.439606][T19824] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not bonding slave [ 647.488089][T19824] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 647.524840][T19828] wg1 speed is unknown, defaulting to 1000 [ 647.533934][T19828] lo speed is unknown, defaulting to 1000 [ 647.542605][T19830] __nla_validate_parse: 1 callbacks suppressed [ 647.542622][T19830] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3456'. [ 647.630882][T19828] lo speed is unknown, defaulting to 1000 [ 648.897704][T19868] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 648.969039][T19868] bridge12: entered promiscuous mode [ 648.989767][T19868] bridge12: entered allmulticast mode [ 649.008308][T19868] team0: Port device bridge12 added [ 649.377871][T19886] netlink: 'syz.4.3474': attribute type 13 has an invalid length. [ 649.436662][ T5929] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 649.470621][ T8455] lo speed is unknown, defaulting to 1000 [ 649.853061][T19912] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3482'. [ 650.173546][T19927] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3488'. [ 650.379275][T19936] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3492'. [ 650.388976][T19936] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3492'. [ 650.420171][T19936] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3492'. [ 650.431872][T19936] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3492'. [ 650.449680][T19934] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3490'. [ 650.475902][ T5929] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 650.762231][T19950] wg1 speed is unknown, defaulting to 1000 [ 650.793520][T19950] lo speed is unknown, defaulting to 1000 [ 650.803440][T19950] lo speed is unknown, defaulting to 1000 [ 650.955956][ T5871] Bluetooth: hci4: command 0x0406 tx timeout [ 651.998404][T20001] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3515'. [ 652.313539][T20010] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 652.355098][T20012] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3519'. [ 653.036455][ T5871] Bluetooth: hci4: command 0x0406 tx timeout [ 653.066806][T20031] wg1 speed is unknown, defaulting to 1000 [ 653.106575][T20031] lo speed is unknown, defaulting to 1000 [ 653.114570][T20031] lo speed is unknown, defaulting to 1000 [ 653.394427][T20045] __nla_validate_parse: 1 callbacks suppressed [ 653.394446][T20045] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3530'. [ 653.572834][T20053] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3534'. [ 653.579388][T20051] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3531'. [ 654.103552][T20072] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3543'. [ 654.138486][T20076] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3545'. [ 654.170621][T20075] netlink: 'syz.4.3544': attribute type 13 has an invalid length. [ 654.227306][T14491] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 654.273034][T20081] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3547'. [ 654.359785][T20087] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3550'. [ 654.566892][T14491] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 654.590612][T20103] netlink: 'syz.3.3556': attribute type 1 has an invalid length. [ 654.634673][T20105] xt_socket: unknown flags 0xfc [ 654.690979][T20107] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3560'. [ 654.854278][T20120] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3564'. [ 655.063270][T20129] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3569'. [ 655.090709][T20129] netlink: 'syz.0.3569': attribute type 1 has an invalid length. [ 655.423665][T20147] bridge13: entered promiscuous mode [ 655.429673][T20147] bridge13: entered allmulticast mode [ 655.441519][T20147] team0: Port device bridge13 added [ 656.073102][T20173] netlink: 'syz.3.3584': attribute type 10 has an invalid length. [ 656.108496][T20173] bridge0: port 1(0!) entered blocking state [ 656.129212][T20173] bridge0: port 1(0!) entered disabled state [ 656.149009][T20173] !: entered allmulticast mode [ 656.303244][T20191] bridge0: entered promiscuous mode [ 656.308831][T20191] bridge0: entered allmulticast mode [ 656.330979][T20191] team0: Port device bridge0 added [ 656.672841][T20203] wg1 speed is unknown, defaulting to 1000 [ 656.696792][T20203] lo speed is unknown, defaulting to 1000 [ 656.716686][T20203] lo speed is unknown, defaulting to 1000 [ 656.784405][T20208] wg1 speed is unknown, defaulting to 1000 [ 656.848906][T20212] wg1 speed is unknown, defaulting to 1000 [ 656.856115][T20208] lo speed is unknown, defaulting to 1000 [ 656.868901][T20212] lo speed is unknown, defaulting to 1000 [ 656.882616][T20208] lo speed is unknown, defaulting to 1000 [ 656.979763][T20212] lo speed is unknown, defaulting to 1000 [ 657.420958][T20233] bridge14: entered promiscuous mode [ 657.428979][T20233] bridge14: entered allmulticast mode [ 657.467999][T20233] team0: Port device bridge14 added [ 657.787596][T20247] netlink: 'syz.2.3608': attribute type 9 has an invalid length. [ 657.808087][T20247] netlink: 'syz.2.3608': attribute type 6 has an invalid length. [ 657.838460][T20247] netlink: 'syz.2.3608': attribute type 7 has an invalid length. [ 657.879485][T20247] netlink: 'syz.2.3608': attribute type 8 has an invalid length. [ 658.069832][T20237] wg1 speed is unknown, defaulting to 1000 [ 658.078896][T20237] lo speed is unknown, defaulting to 1000 [ 658.137629][T20237] lo speed is unknown, defaulting to 1000 [ 658.141588][T20258] wg1 speed is unknown, defaulting to 1000 [ 658.272875][T20258] lo speed is unknown, defaulting to 1000 [ 658.371630][T20260] wg1 speed is unknown, defaulting to 1000 [ 658.374996][T20258] lo speed is unknown, defaulting to 1000 [ 658.381288][T20260] lo speed is unknown, defaulting to 1000 [ 658.457037][T20260] lo speed is unknown, defaulting to 1000 [ 658.792547][T20275] __nla_validate_parse: 7 callbacks suppressed [ 658.792564][T20275] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3614'. [ 658.820128][T20275] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3614'. [ 658.830718][T20275] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3614'. [ 659.313781][T20286] ip6tnl0: Caught tx_queue_len zero misconfig [ 659.485103][T20291] bridge9: entered promiscuous mode [ 659.496399][T20291] bridge9: entered allmulticast mode [ 660.060414][T20318] wg1 speed is unknown, defaulting to 1000 [ 660.069494][T20318] lo speed is unknown, defaulting to 1000 [ 660.107172][T20318] lo speed is unknown, defaulting to 1000 [ 660.107189][T20316] wg1 speed is unknown, defaulting to 1000 [ 660.108868][T20316] lo speed is unknown, defaulting to 1000 [ 660.221983][T20316] lo speed is unknown, defaulting to 1000 [ 661.039953][T20346] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3636'. [ 661.271416][T20351] netlink: 'syz.1.3637': attribute type 10 has an invalid length. [ 661.295746][T20351] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3637'. [ 662.155765][T20370] wg1 speed is unknown, defaulting to 1000 [ 662.173828][T20375] wg1 speed is unknown, defaulting to 1000 [ 662.184123][T20383] netlink: 'syz.2.3649': attribute type 10 has an invalid length. [ 662.193150][T20370] lo speed is unknown, defaulting to 1000 [ 662.195781][T20383] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3649'. [ 662.210350][T20383] A link change request failed with some changes committed already. Interface 0! may have been left with an inconsistent configuration, please check. [ 662.231798][T20375] lo speed is unknown, defaulting to 1000 [ 662.250646][T20381] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3648'. [ 662.278462][T20370] lo speed is unknown, defaulting to 1000 [ 662.295077][T20375] lo speed is unknown, defaulting to 1000 [ 663.112810][T20409] wg1 speed is unknown, defaulting to 1000 [ 663.120822][T20409] lo speed is unknown, defaulting to 1000 [ 663.129187][T20409] lo speed is unknown, defaulting to 1000 [ 663.560273][T20424] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3660'. [ 663.589410][T20426] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3662'. [ 663.970393][T20440] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3666'. [ 664.059916][T20443] netlink: 'syz.3.3668': attribute type 4 has an invalid length. [ 664.075993][T20443] netlink: 17 bytes leftover after parsing attributes in process `syz.3.3668'. [ 664.856204][T20483] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3685'. [ 665.209000][T20495] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3692'. [ 665.391503][T20504] wg1 speed is unknown, defaulting to 1000 [ 665.448242][T20504] lo speed is unknown, defaulting to 1000 [ 665.474741][T20504] lo speed is unknown, defaulting to 1000 [ 665.550854][T20509] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3697'. [ 665.848477][T20516] netlink: 'syz.2.3699': attribute type 1 has an invalid length. [ 665.916515][ T5871] Bluetooth: hci4: command 0x0406 tx timeout [ 666.064829][T20519] gretap0: entered promiscuous mode [ 666.080954][T20519] vlan2: entered promiscuous mode [ 666.472270][T20527] wg1 speed is unknown, defaulting to 1000 [ 666.486735][T20527] lo speed is unknown, defaulting to 1000 [ 666.497907][T20527] lo speed is unknown, defaulting to 1000 [ 667.759258][T20561] netlink: 'syz.3.3715': attribute type 10 has an invalid length. [ 667.791971][T20561] !: left allmulticast mode [ 667.806208][T20561] !: left promiscuous mode [ 667.819540][T20561] bridge0: port 1(0!) entered disabled state [ 668.239637][T20573] bond0: Caught tx_queue_len zero misconfig [ 670.155094][T20629] netlink: 79 bytes leftover after parsing attributes in process `syz.0.3742'. [ 670.537419][T20643] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 671.474131][T20666] netlink: 'syz.1.3759': attribute type 1 has an invalid length. [ 671.483988][T20666] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3759'. [ 671.514248][T20672] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 673.253247][T20708] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 673.514111][T20718] wg1 speed is unknown, defaulting to 1000 [ 673.567371][T20718] lo speed is unknown, defaulting to 1000 [ 673.596742][T20718] lo speed is unknown, defaulting to 1000 [ 673.649809][T20724] wg1 speed is unknown, defaulting to 1000 [ 673.707139][T20724] lo speed is unknown, defaulting to 1000 [ 673.735967][T20724] lo speed is unknown, defaulting to 1000 [ 673.971852][T20747] netlink: 'syz.4.3788': attribute type 39 has an invalid length. [ 674.060555][T20746] wg1 speed is unknown, defaulting to 1000 [ 674.072079][T20746] lo speed is unknown, defaulting to 1000 [ 674.082146][T20746] lo speed is unknown, defaulting to 1000 [ 675.279280][T20784] wg1 speed is unknown, defaulting to 1000 [ 675.336347][T20784] lo speed is unknown, defaulting to 1000 [ 675.372164][T20784] lo speed is unknown, defaulting to 1000 [ 675.994091][T20793] wg1 speed is unknown, defaulting to 1000 [ 676.025755][T20793] lo speed is unknown, defaulting to 1000 [ 676.033957][T20793] lo speed is unknown, defaulting to 1000 [ 676.041724][T20796] wg1 speed is unknown, defaulting to 1000 [ 676.066096][T20796] lo speed is unknown, defaulting to 1000 [ 676.083750][T20796] lo speed is unknown, defaulting to 1000 [ 676.351039][T20809] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3805'. [ 676.601557][T20811] wg1 speed is unknown, defaulting to 1000 [ 676.612756][T20818] netlink: 'syz.4.3809': attribute type 10 has an invalid length. [ 676.638438][T20811] lo speed is unknown, defaulting to 1000 [ 676.648110][T20818] dummy0: left promiscuous mode [ 676.728216][T20818] team0: Failed to send options change via netlink (err -105) [ 676.756456][T20818] team0: Port device dummy0 added [ 676.806019][T20811] lo speed is unknown, defaulting to 1000 [ 676.847941][T20823] wg1 speed is unknown, defaulting to 1000 [ 676.877136][ T55] block nbd2: Possible stuck request ffff8880255f0000: control (read@0,1024B). Runtime 510 seconds [ 676.888851][ T55] block nbd2: Possible stuck request ffff8880255f01c0: control (read@1024,1024B). Runtime 510 seconds [ 676.900927][ T55] block nbd2: Possible stuck request ffff8880255f0380: control (read@2048,1024B). Runtime 510 seconds [ 676.913595][ T55] block nbd2: Possible stuck request ffff8880255f0540: control (read@3072,1024B). Runtime 510 seconds [ 677.011565][T20823] lo speed is unknown, defaulting to 1000 [ 677.475813][T20823] lo speed is unknown, defaulting to 1000 [ 677.964468][T20849] wg1 speed is unknown, defaulting to 1000 [ 677.984018][T20849] lo speed is unknown, defaulting to 1000 [ 677.998955][T20849] lo speed is unknown, defaulting to 1000 [ 678.005165][T20852] wg1 speed is unknown, defaulting to 1000 [ 678.052966][T20852] lo speed is unknown, defaulting to 1000 [ 678.070182][T20852] lo speed is unknown, defaulting to 1000 [ 678.441186][T20873] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 678.494664][T20873] bridge0: entered promiscuous mode [ 678.515771][T20873] bridge0: entered allmulticast mode [ 678.523962][T20873] team0: Port device bridge0 added [ 678.876946][T20898] siw: device registration error -23 [ 679.448850][T20904] wg1 speed is unknown, defaulting to 1000 [ 679.462072][T20904] lo speed is unknown, defaulting to 1000 [ 679.468475][T20902] wg1 speed is unknown, defaulting to 1000 [ 679.487796][T20902] lo speed is unknown, defaulting to 1000 [ 679.494489][T20904] lo speed is unknown, defaulting to 1000 [ 679.521582][T20902] lo speed is unknown, defaulting to 1000 [ 679.523815][T20916] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 680.141347][T20939] siw: device registration error -23 [ 680.185071][T20933] wg1 speed is unknown, defaulting to 1000 [ 680.194146][T20933] lo speed is unknown, defaulting to 1000 [ 680.208835][T20933] lo speed is unknown, defaulting to 1000 [ 680.311671][T20938] wg1 speed is unknown, defaulting to 1000 [ 680.380738][T20938] lo speed is unknown, defaulting to 1000 [ 680.454214][T20938] lo speed is unknown, defaulting to 1000 [ 680.824269][T20959] wg1 speed is unknown, defaulting to 1000 [ 680.834727][T20959] lo speed is unknown, defaulting to 1000 [ 680.856554][T20959] lo speed is unknown, defaulting to 1000 [ 681.112115][T20964] wg1 speed is unknown, defaulting to 1000 [ 681.120646][T20964] lo speed is unknown, defaulting to 1000 [ 681.186710][T20964] lo speed is unknown, defaulting to 1000 [ 681.355424][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 681.897401][T20984] netlink: 'syz.4.3859': attribute type 10 has an invalid length. [ 681.925711][T20984] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3859'. [ 681.934899][T20984] dummy0: entered promiscuous mode [ 682.043555][T20994] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 682.134981][T20984] team0: Port device dummy0 removed [ 682.171354][T20984] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 682.539628][T21007] bond_slave_0: Caught tx_queue_len zero misconfig [ 682.557429][T21007] netlink: 344 bytes leftover after parsing attributes in process `syz.2.3866'. [ 682.610038][T21002] wg1 speed is unknown, defaulting to 1000 [ 682.741296][T21002] lo speed is unknown, defaulting to 1000 [ 682.771408][T21002] lo speed is unknown, defaulting to 1000 [ 682.780684][T21003] wg1 speed is unknown, defaulting to 1000 [ 682.928314][T21004] wg1 speed is unknown, defaulting to 1000 [ 682.934311][T21003] lo speed is unknown, defaulting to 1000 [ 682.972920][T21011] wg1 speed is unknown, defaulting to 1000 [ 683.051797][T21004] lo speed is unknown, defaulting to 1000 [ 683.051885][T21003] lo speed is unknown, defaulting to 1000 [ 683.059378][T21013] wg1 speed is unknown, defaulting to 1000 [ 683.090006][T21011] lo speed is unknown, defaulting to 1000 [ 683.110280][T21013] lo speed is unknown, defaulting to 1000 [ 683.142668][T21004] lo speed is unknown, defaulting to 1000 [ 683.254761][T21011] lo speed is unknown, defaulting to 1000 [ 683.282741][T21019] netlink: 'syz.0.3869': attribute type 10 has an invalid length. [ 683.293721][T21019] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3869'. [ 683.422783][T21019] A link change request failed with some changes committed already. Interface 0! may have been left with an inconsistent configuration, please check. [ 683.435938][T21013] lo speed is unknown, defaulting to 1000 [ 684.836580][T21055] wg1 speed is unknown, defaulting to 1000 [ 684.844305][T21055] lo speed is unknown, defaulting to 1000 [ 684.852134][T21055] lo speed is unknown, defaulting to 1000 [ 685.088774][T21067] netlink: 'syz.0.3882': attribute type 10 has an invalid length. [ 685.128878][T21067] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3882'. [ 685.153343][T21067] A link change request failed with some changes committed already. Interface 0! may have been left with an inconsistent configuration, please check. [ 685.209512][T21070] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3883'. [ 685.218821][T21070] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3883'. [ 685.665672][T21079] wg1 speed is unknown, defaulting to 1000 [ 685.710018][T21079] lo speed is unknown, defaulting to 1000 [ 685.723979][T21073] wg1 speed is unknown, defaulting to 1000 [ 685.737268][T21079] lo speed is unknown, defaulting to 1000 [ 685.772072][T21073] lo speed is unknown, defaulting to 1000 [ 685.780532][T21077] wg1 speed is unknown, defaulting to 1000 [ 685.853738][T21073] lo speed is unknown, defaulting to 1000 [ 685.863379][T21077] lo speed is unknown, defaulting to 1000 [ 685.978095][T21077] lo speed is unknown, defaulting to 1000 [ 686.091423][T21099] netlink: 'syz.1.3891': attribute type 10 has an invalid length. [ 686.111545][T21099] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3891'. [ 686.702690][T21114] netlink: 'syz.3.3897': attribute type 10 has an invalid length. [ 686.711332][T21114] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3897'. [ 686.724229][T21114] !: entered promiscuous mode [ 686.731497][T21114] bridge0: port 1(0!) entered blocking state [ 686.742549][T21114] bridge0: port 1(0!) entered disabled state [ 686.749305][T21114] !: entered allmulticast mode [ 687.064506][T21128] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 687.112486][T21131] wg1 speed is unknown, defaulting to 1000 [ 687.122759][T21131] lo speed is unknown, defaulting to 1000 [ 687.132373][T21131] lo speed is unknown, defaulting to 1000 [ 687.240035][T21128] bridge3: entered promiscuous mode [ 687.250967][T21128] bridge3: entered allmulticast mode [ 687.262110][T21128] team0: Port device bridge3 added [ 687.347489][T21140] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3900'. [ 687.349594][T21139] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 687.363712][T21139] IPv6: NLM_F_CREATE should be set when creating new route [ 687.931718][T21158] netlink: 'syz.0.3909': attribute type 10 has an invalid length. [ 687.940319][T21158] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3909'. [ 687.955961][T21158] A link change request failed with some changes committed already. Interface 0! may have been left with an inconsistent configuration, please check. [ 688.246181][T21173] wg1 speed is unknown, defaulting to 1000 [ 688.289111][T21166] wg1 speed is unknown, defaulting to 1000 [ 688.302607][T21173] lo speed is unknown, defaulting to 1000 [ 688.324851][T21179] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 688.330573][T21166] lo speed is unknown, defaulting to 1000 [ 688.336952][T21173] lo speed is unknown, defaulting to 1000 [ 688.367021][T21179] bridge4: entered promiscuous mode [ 688.372421][T21179] bridge4: entered allmulticast mode [ 688.384225][T21179] team0: Port device bridge4 added [ 688.434844][T21166] lo speed is unknown, defaulting to 1000 [ 689.024176][T21214] netlink: 'syz.0.3924': attribute type 10 has an invalid length. [ 689.048609][T21204] wg1 speed is unknown, defaulting to 1000 [ 689.068243][T21214] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3924'. [ 689.097458][T21214] A link change request failed with some changes committed already. Interface 0! may have been left with an inconsistent configuration, please check. [ 689.174134][T21204] lo speed is unknown, defaulting to 1000 [ 689.193349][T21204] lo speed is unknown, defaulting to 1000 [ 689.549622][T21233] wg1 speed is unknown, defaulting to 1000 [ 689.568457][T21233] lo speed is unknown, defaulting to 1000 [ 689.611213][T21233] lo speed is unknown, defaulting to 1000 [ 689.657653][T21237] wg1 speed is unknown, defaulting to 1000 [ 689.690963][T21237] lo speed is unknown, defaulting to 1000 [ 689.753542][T21237] lo speed is unknown, defaulting to 1000 [ 689.805263][T21241] wg1 speed is unknown, defaulting to 1000 [ 689.840735][T21248] lo: Caught tx_queue_len zero misconfig [ 689.875375][T21244] wg1 speed is unknown, defaulting to 1000 [ 689.881765][T21241] lo speed is unknown, defaulting to 1000 [ 689.968966][T21244] lo speed is unknown, defaulting to 1000 [ 690.000111][T21241] lo speed is unknown, defaulting to 1000 [ 690.023600][T21257] netlink: 'syz.4.3939': attribute type 10 has an invalid length. [ 690.030570][T21244] lo speed is unknown, defaulting to 1000 [ 690.053839][T21257] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3939'. [ 690.601372][T21257] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 690.915002][T21272] syzkaller1: entered promiscuous mode [ 690.950177][T21272] syzkaller1: entered allmulticast mode [ 691.286957][T21284] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3946'. [ 691.321042][T21263] wg1 speed is unknown, defaulting to 1000 [ 691.329449][T21263] lo speed is unknown, defaulting to 1000 [ 691.337036][T21263] lo speed is unknown, defaulting to 1000 [ 691.697025][T21292] wg1 speed is unknown, defaulting to 1000 [ 691.704861][T21292] lo speed is unknown, defaulting to 1000 [ 691.714894][T21292] lo speed is unknown, defaulting to 1000 [ 691.767137][T21297] netlink: 'syz.1.3952': attribute type 10 has an invalid length. [ 691.962156][T21306] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3953'. [ 692.008450][T21295] wg1 speed is unknown, defaulting to 1000 [ 692.091318][T21295] lo speed is unknown, defaulting to 1000 [ 692.168339][T21295] lo speed is unknown, defaulting to 1000 [ 692.168939][T21299] wg1 speed is unknown, defaulting to 1000 [ 692.279973][T21299] lo speed is unknown, defaulting to 1000 [ 692.354674][T21299] lo speed is unknown, defaulting to 1000 [ 692.370482][T21318] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3956'. [ 692.914969][T21329] wg1 speed is unknown, defaulting to 1000 [ 692.958486][T21331] wg1 speed is unknown, defaulting to 1000 [ 692.984898][T21329] lo speed is unknown, defaulting to 1000 [ 693.008602][T21329] lo speed is unknown, defaulting to 1000 [ 693.020107][T21331] lo speed is unknown, defaulting to 1000 [ 693.097913][T21331] lo speed is unknown, defaulting to 1000 [ 693.361245][T21354] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3973'. [ 693.623793][T21351] wg1 speed is unknown, defaulting to 1000 [ 693.719675][T21351] lo speed is unknown, defaulting to 1000 [ 693.800623][T21351] lo speed is unknown, defaulting to 1000 [ 694.433321][T21387] bridge12: entered promiscuous mode [ 694.460468][T21387] bridge12: entered allmulticast mode [ 694.502055][T21387] team0: Port device bridge12 added [ 694.568692][T21389] wg1 speed is unknown, defaulting to 1000 [ 694.571907][T21401] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3990'. [ 694.613427][T21389] lo speed is unknown, defaulting to 1000 [ 694.619476][T21393] wg1 speed is unknown, defaulting to 1000 [ 694.633551][T21393] lo speed is unknown, defaulting to 1000 [ 694.633677][T21389] lo speed is unknown, defaulting to 1000 [ 694.673136][T21393] lo speed is unknown, defaulting to 1000 [ 695.295111][T21427] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4001'. [ 695.867743][T21454] wg1 speed is unknown, defaulting to 1000 [ 695.893147][T21454] lo speed is unknown, defaulting to 1000 [ 695.918378][T21454] lo speed is unknown, defaulting to 1000 [ 695.992777][T21455] wg1 speed is unknown, defaulting to 1000 [ 696.031472][T21455] lo speed is unknown, defaulting to 1000 [ 696.041533][T21457] wg1 speed is unknown, defaulting to 1000 [ 696.058015][T21457] lo speed is unknown, defaulting to 1000 [ 696.075083][T21455] lo speed is unknown, defaulting to 1000 [ 696.172552][T21457] lo speed is unknown, defaulting to 1000 [ 696.538501][T21475] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 696.675073][T21482] netlink: 'syz.1.4012': attribute type 13 has an invalid length. [ 696.814791][T21484] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4015'. [ 696.918462][T21482] gretap0: refused to change device tx_queue_len [ 696.945430][T21482] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 697.230267][T21493] tipc: Enabling of bearer rejected, failed to enable media [ 698.003568][T21501] wg1 speed is unknown, defaulting to 1000 [ 698.043344][T21501] lo speed is unknown, defaulting to 1000 [ 698.059784][T21501] lo speed is unknown, defaulting to 1000 [ 698.210148][T21513] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4024'. [ 698.462419][T21515] wg1 speed is unknown, defaulting to 1000 [ 698.537275][T21515] lo speed is unknown, defaulting to 1000 [ 698.577150][T21518] wg1 speed is unknown, defaulting to 1000 [ 698.584764][T21515] lo speed is unknown, defaulting to 1000 [ 698.642000][T21518] lo speed is unknown, defaulting to 1000 [ 698.651580][T21530] netlink: 'syz.0.4030': attribute type 10 has an invalid length. [ 698.657396][T21518] lo speed is unknown, defaulting to 1000 [ 698.715962][T21532] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4031'. [ 698.779722][T21530] !: left promiscuous mode [ 698.834971][T21530] team0: Failed to send options change via netlink (err -105) [ 698.866744][T21530] team0: Port device 0! added [ 699.234773][T21533] wg1 speed is unknown, defaulting to 1000 [ 699.451172][T21533] lo speed is unknown, defaulting to 1000 [ 699.533367][T21533] lo speed is unknown, defaulting to 1000 [ 699.720639][T21556] netlink: 88 bytes leftover after parsing attributes in process `syz.3.4037'. [ 699.809161][T21562] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4039'. [ 700.220339][T21578] netlink: 'syz.2.4046': attribute type 10 has an invalid length. [ 700.461169][T21576] wg1 speed is unknown, defaulting to 1000 [ 700.494083][T21576] lo speed is unknown, defaulting to 1000 [ 700.538573][T21576] lo speed is unknown, defaulting to 1000 [ 700.894462][T21599] wg1 speed is unknown, defaulting to 1000 [ 700.925787][T21599] lo speed is unknown, defaulting to 1000 [ 700.943837][T21595] wg1 speed is unknown, defaulting to 1000 [ 700.948420][T21599] lo speed is unknown, defaulting to 1000 [ 701.104494][T21595] lo speed is unknown, defaulting to 1000 [ 701.154891][T21595] lo speed is unknown, defaulting to 1000 [ 701.599645][T21624] netlink: 'syz.3.4060': attribute type 10 has an invalid length. [ 701.631931][T21628] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4061'. [ 701.652109][T21624] !: left allmulticast mode [ 701.667987][T21624] !: left promiscuous mode [ 701.672782][T21624] bridge0: port 1(0!) entered disabled state [ 702.128159][T21651] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4066'. [ 702.300405][T21653] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4068'. [ 702.319684][T21653] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4068'. [ 702.558705][T21660] wg1 speed is unknown, defaulting to 1000 [ 702.567421][T21660] lo speed is unknown, defaulting to 1000 [ 702.600263][T21660] lo speed is unknown, defaulting to 1000 [ 702.622247][T21667] wg1 speed is unknown, defaulting to 1000 [ 702.656934][T21667] lo speed is unknown, defaulting to 1000 [ 702.714002][T21667] lo speed is unknown, defaulting to 1000 [ 702.883689][T21678] netlink: 'syz.4.4076': attribute type 10 has an invalid length. [ 702.934688][T21671] wg1 speed is unknown, defaulting to 1000 [ 702.935952][T21678] dummy0: left promiscuous mode [ 703.010061][T21678] team0: Failed to send options change via netlink (err -105) [ 703.032429][T21678] team0: Port device dummy0 added [ 703.117570][ T31] INFO: task udevd:5863 blocked for more than 143 seconds. [ 703.128750][ T31] Not tainted syzkaller #0 [ 703.133724][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 703.156696][ T31] task:udevd state:D stack:20328 pid:5863 tgid:5863 ppid:5233 task_flags:0x400140 flags:0x00004006 [ 703.173749][ T31] Call Trace: [ 703.194327][ T31] [ 703.202071][ T31] __schedule+0x1798/0x4cc0 [ 703.211197][ T31] ? __pfx___schedule+0x10/0x10 [ 703.221115][ T31] ? schedule+0x91/0x360 [ 703.230345][ T31] schedule+0x165/0x360 [ 703.238465][ T31] io_schedule+0x80/0xd0 [ 703.243375][ T31] folio_wait_bit_common+0x6b0/0xb90 [ 703.250299][ T31] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 703.263624][ T31] ? __pfx_wake_page_function+0x10/0x10 [ 703.280054][ T31] ? __filemap_get_folio+0x6f0/0xaf0 [ 703.298362][ T31] ? do_read_cache_folio+0x4e9/0x590 [ 703.303996][ T31] do_read_cache_folio+0x1aa/0x590 [ 703.310952][ T31] ? __pfx_blkdev_read_folio+0x10/0x10 [ 703.318053][ T31] read_part_sector+0xb6/0x2b0 [ 703.323212][ T31] adfspart_check_POWERTEC+0x8c/0xf30 [ 703.329764][ T31] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 703.336804][ T31] ? __pfx_adfspart_check_POWERTEC+0x10/0x10 [ 703.343079][ T31] bdev_disk_changed+0x75f/0x14b0 [ 703.349890][ T31] ? __pfx_bdev_disk_changed+0x10/0x10 [ 703.356588][ T31] ? wait_on_inode+0xc0/0x230 [ 703.361714][ T31] blkdev_get_whole+0x380/0x510 [ 703.367766][ T31] bdev_open+0x31e/0xd30 [ 703.372463][ T31] blkdev_open+0x457/0x600 [ 703.388306][ T31] ? __pfx_blkdev_open+0x10/0x10 [ 703.393422][ T31] do_dentry_open+0x950/0x13f0 [ 703.399078][ T31] vfs_open+0x3b/0x340 [ 703.403426][ T31] ? path_openat+0x2ecd/0x3830 [ 703.409883][ T31] path_openat+0x2ee5/0x3830 [ 703.414645][ T31] ? arch_stack_walk+0xfc/0x150 [ 703.420509][ T31] ? stack_depot_save_flags+0x40/0x860 [ 703.426552][ T31] ? __lock_acquire+0xab9/0xd20 [ 703.431533][ T31] ? __pfx_path_openat+0x10/0x10 [ 703.437846][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 703.443974][ T31] do_filp_open+0x1fa/0x410 [ 703.449045][ T31] ? __lock_acquire+0xab9/0xd20 [ 703.453944][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 703.460159][ T31] ? _raw_spin_unlock+0x28/0x50 [ 703.465053][ T31] ? alloc_fd+0x64c/0x6c0 [ 703.470933][ T31] do_sys_openat2+0x121/0x1c0 [ 703.476568][ T31] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 703.482081][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 703.487866][ T31] ? __pfx_ksys_read+0x10/0x10 [ 703.492660][ T31] ? rcu_is_watching+0x15/0xb0 [ 703.498687][ T31] __x64_sys_openat+0x138/0x170 [ 703.503566][ T31] do_syscall_64+0xfa/0x3b0 [ 703.509343][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 703.516533][ T31] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 703.523059][ T31] ? clear_bhb_loop+0x60/0xb0 [ 703.528434][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 703.534330][ T31] RIP: 0033:0x7fabd96a7407 [ 703.539810][ T31] RSP: 002b:00007fff76ad42c0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 703.548921][ T31] RAX: ffffffffffffffda RBX: 00007fabd9d48880 RCX: 00007fabd96a7407 [ 703.558189][ T31] RDX: 00000000000a0800 RSI: 0000564f7adcf920 RDI: ffffffffffffff9c [ 703.567026][ T31] RBP: 0000564f7ada7910 R08: 0000000000000000 R09: 0000000000000000 [ 703.575028][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000564f7adbae20 [ 703.584072][ T31] R13: 0000564f7adb5190 R14: 0000000000000000 R15: 0000564f7adbae20 [ 703.592909][ T31] [ 703.597203][ T31] [ 703.597203][ T31] Showing all locks held in the system: [ 703.606617][ T31] 1 lock held by khungtaskd/31: [ 703.611640][ T31] #0: ffffffff8e13a0e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 703.622778][ T31] 3 locks held by kworker/u8:8/1338: [ 703.628963][ T31] #0: ffff88802f24e148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 703.641314][ T31] #1: ffffc900046bfbc0 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 703.655788][ T31] #2: ffffffff8f53a448 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x112/0x14b0 [ 703.665865][ T31] 2 locks held by getty/5628: [ 703.670577][ T31] #0: ffff88814e1f10a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 703.681695][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 703.692124][ T31] 1 lock held by udevd/5863: [ 703.697192][ T31] #0: ffff888025522358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 703.707079][ T31] 3 locks held by kworker/u8:14/6182: [ 703.712451][ T31] #0: ffff88801a489948 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 703.724796][ T31] #1: ffffc9000b837bc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 703.736197][ T31] #2: ffffffff8f53a448 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 703.745987][ T31] 3 locks held by kworker/u8:16/6187: [ 703.751415][ T31] #0: ffff88803014a148 ((wq_completion)l2tp){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 703.762926][ T31] #1: ffffc9000b877bc0 ((work_completion)(&session->del_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 703.776730][ T31] #2: ffffffff8f53a448 (rtnl_mutex){+.+.}-{4:4}, at: l2tp_eth_delete+0x1f/0x100 [ 703.786400][ T31] 1 lock held by syz.3.4070/21658: [ 703.791530][ T31] #0: ffff888059059408 (&sb->s_type->i_mutex_key#11){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 703.802131][ T31] 2 locks held by syz.3.4070/21660: [ 703.808178][ T31] #0: ffffffff8f52d590 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 703.818523][ T31] #1: ffffffff8f53a448 (rtnl_mutex){+.+.}-{4:4}, at: register_netdev+0x18/0x60 [ 703.828799][ T31] 2 locks held by syz.0.4072/21667: [ 703.834014][ T31] #0: ffffffff8f52d590 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 703.844139][ T31] #1: ffffffff8f53a448 (rtnl_mutex){+.+.}-{4:4}, at: wg_netns_pre_exit+0x1c/0x1d0 [ 703.854085][ T31] 5 locks held by syz.0.4072/21671: [ 703.860200][ T31] #0: ffffffff8f52d590 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 703.870175][ T31] #1: ffffffff8f28cad0 (devices_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x19a/0x270 [ 703.880395][ T31] #2: ffffffff8f28cc90 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x1d2/0x270 [ 703.891128][ T31] #3: ffff8880524acf98 (&device->compat_devs_mutex){+.+.}-{4:4}, at: add_one_compat_dev+0xee/0x5c0 [ 703.902477][ T31] #4: ffffffff8f53a448 (rtnl_mutex){+.+.}-{4:4}, at: ib_get_eth_speed+0x151/0x7b0 [ 703.912808][ T31] 3 locks held by syz.1.4075/21670: [ 703.919266][ T31] #0: ffff888057468208 (&sb->s_type->i_mutex_key#11){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 703.929958][ T31] #1: ffff88805540f0d8 (sk_lock-AF_PHONET){+.+.}-{0:0}, at: pep_sock_unhash+0x2a/0x2f0 [ 703.940293][ T31] #2: ffffffff8e13fb78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 703.952376][ T31] 2 locks held by syz.4.4076/21677: [ 703.958489][ T31] #0: ffff88807e979a08 (&sb->s_type->i_mutex_key#11){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 703.969329][ T31] #1: ffffffff8e13fb78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 703.981129][ T31] 2 locks held by syz.4.4076/21683: [ 703.986820][ T31] #0: ffffffff8f51e7e8 (br_ioctl_mutex){+.+.}-{4:4}, at: sock_ioctl+0x4b4/0x790 [ 703.996757][ T31] #1: ffffffff8f53a448 (rtnl_mutex){+.+.}-{4:4}, at: br_ioctl_stub+0x199/0xc80 [ 704.006410][ T31] 3 locks held by syz.4.4076/21685: [ 704.011611][ T31] #0: ffffffff8f59ff50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 704.019933][ T31] #1: ffffffff8f59fd68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 704.028996][ T31] #2: ffffffff8f53a448 (rtnl_mutex){+.+.}-{4:4}, at: ieee80211_register_hw+0x3006/0x40a0 [ 704.039944][ T31] [ 704.044068][ T31] ============================================= [ 704.044068][ T31] [ 704.059074][ T31] NMI backtrace for cpu 1 [ 704.059091][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 704.059113][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 704.059124][ T31] Call Trace: [ 704.059132][ T31] [ 704.059140][ T31] dump_stack_lvl+0x189/0x250 [ 704.059170][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 704.059192][ T31] ? __pfx__printk+0x10/0x10 [ 704.059231][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 704.059262][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 704.059292][ T31] ? __pfx__printk+0x10/0x10 [ 704.059322][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 704.059354][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 704.059383][ T31] watchdog+0xf93/0xfe0 [ 704.059414][ T31] ? watchdog+0x1de/0xfe0 [ 704.059446][ T31] kthread+0x70e/0x8a0 [ 704.059473][ T31] ? __pfx_watchdog+0x10/0x10 [ 704.059497][ T31] ? __pfx_kthread+0x10/0x10 [ 704.059521][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 704.059549][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 704.059577][ T31] ? __pfx_kthread+0x10/0x10 [ 704.059601][ T31] ret_from_fork+0x439/0x7d0 [ 704.059623][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 704.059648][ T31] ? __switch_to_asm+0x39/0x70 [ 704.059669][ T31] ? __switch_to_asm+0x33/0x70 [ 704.059690][ T31] ? __pfx_kthread+0x10/0x10 [ 704.059713][ T31] ret_from_fork_asm+0x1a/0x30 [ 704.059752][ T31] [ 704.059758][ T31] Sending NMI from CPU 1 to CPUs 0: [ 704.102272][T21671] lo speed is unknown, defaulting to 1000 [ 704.106826][ C0] NMI backtrace for cpu 0 [ 704.106845][ C0] CPU: 0 UID: 0 PID: 21671 Comm: syz.0.4072 Not tainted syzkaller #0 PREEMPT(full) [ 704.106864][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 704.106875][ C0] RIP: 0010:__sanitizer_cov_trace_const_cmp8+0x2f/0x90 [ 704.106904][ C0] Code: 8b 04 24 65 48 8b 0c 25 08 40 9e 92 65 8b 15 78 8c de 10 81 e2 00 01 ff 00 74 11 81 fa 00 01 00 00 75 57 83 b9 3c 16 00 00 00 <74> 4e 8b 91 18 16 00 00 83 fa 03 75 43 48 8b 91 20 16 00 00 44 8b [ 704.106919][ C0] RSP: 0018:ffffc90000007a88 EFLAGS: 00000246 [ 704.106935][ C0] RAX: ffffffff899a0826 RBX: 00000010c6f7a0b5 RCX: ffff88801e745a00 [ 704.106948][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 00000010c6f7a0b5 [ 704.106959][ C0] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 704.106968][ C0] R10: dffffc0000000000 R11: fffff52000000f54 R12: 00000015798ee228 [ 704.106981][ C0] R13: 0019999999999998 R14: ffffc9001d38ce70 R15: 0000000225c17d04 [ 704.106993][ C0] FS: 00007f5c8f4136c0(0000) GS:ffff888125c3c000(0000) knlGS:0000000000000000 [ 704.107007][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 704.107019][ C0] CR2: 000000110c353e6e CR3: 000000006670a000 CR4: 00000000003526f0 [ 704.107034][ C0] Call Trace: [ 704.107041][ C0] [ 704.107046][ C0] pie_calculate_probability+0x256/0x7e0 [ 704.107088][ C0] fq_pie_timer+0x288/0x5b0 [ 704.107114][ C0] ? fq_pie_timer+0x4d/0x5b0 [ 704.107140][ C0] call_timer_fn+0x17b/0x5f0 [ 704.107161][ C0] ? __pfx_fq_pie_timer+0x10/0x10 [ 704.107184][ C0] ? call_timer_fn+0xbe/0x5f0 [ 704.107205][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 704.107231][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 704.107254][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 704.107278][ C0] ? __pfx_fq_pie_timer+0x10/0x10 [ 704.107303][ C0] __run_timer_base+0x61a/0x860 [ 704.107322][ C0] ? ktime_get+0x3e/0x1f0 [ 704.107345][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 704.107362][ C0] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 704.107390][ C0] run_timer_softirq+0xb7/0x180 [ 704.107411][ C0] handle_softirqs+0x283/0x870 [ 704.107438][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 704.107455][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 704.107481][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 704.107502][ C0] __irq_exit_rcu+0xca/0x1f0 [ 704.107516][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 704.107536][ C0] irq_exit_rcu+0x9/0x30 [ 704.107549][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 704.107573][ C0] [ 704.107578][ C0] [ 704.107584][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 704.107602][ C0] RIP: 0010:vprintk_emit+0x58f/0x7a0 [ 704.107619][ C0] Code: 85 32 01 00 00 e8 51 86 1f 00 41 89 df 4d 85 f6 48 8b 1c 24 75 07 e8 40 86 1f 00 eb 06 e8 39 86 1f 00 fb 48 c7 c7 80 e3 12 8e <31> f6 ba 01 00 00 00 31 c9 41 b8 01 00 00 00 45 31 c9 53 e8 b9 35 [ 704.107633][ C0] RSP: 0018:ffffc90005317440 EFLAGS: 00000283 [ 704.107646][ C0] RAX: ffffffff81a02887 RBX: ffffffff81a02744 RCX: 0000000000080000 [ 704.107658][ C0] RDX: ffffc9000cbeb000 RSI: 000000000004741e RDI: ffffffff8e12e380 [ 704.107670][ C0] RBP: ffffc90005317550 R08: ffffffff8fa2f237 R09: 1ffffffff1f45e46 [ 704.107683][ C0] R10: dffffc0000000000 R11: fffffbfff1f45e47 R12: dffffc0000000000 [ 704.107695][ C0] R13: 1ffff92000a62e8c R14: 0000000000000200 R15: 0000000000000027 [ 704.107709][ C0] ? vprintk_emit+0x444/0x7a0 [ 704.107724][ C0] ? vprintk_emit+0x587/0x7a0 [ 704.107743][ C0] ? vprintk_emit+0x444/0x7a0 [ 704.107760][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 704.107776][ C0] ? __mutex_lock+0xd3b/0x1350 [ 704.107800][ C0] _printk+0xcf/0x120 [ 704.107821][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 704.107839][ C0] ? __pfx__printk+0x10/0x10 [ 704.107862][ C0] ? mutex_is_locked+0x17/0x50 [ 704.107876][ C0] ? rtnl_is_locked+0x15/0x20 [ 704.107895][ C0] ? __ethtool_get_link_ksettings+0xe7/0x190 [ 704.107918][ C0] ib_get_eth_speed+0x43f/0x7b0 [ 704.107938][ C0] ? __lock_acquire+0xab9/0xd20 [ 704.107961][ C0] ? __pfx_ib_get_eth_speed+0x10/0x10 [ 704.107990][ C0] ? ib_query_port+0x384/0x830 [ 704.108014][ C0] siw_query_port+0x3c/0x4a0 [ 704.108031][ C0] ib_setup_port_attrs+0x24e/0x2070 [ 704.108051][ C0] ? rcu_is_watching+0x15/0xb0 [ 704.108070][ C0] ? trace_contention_end+0x39/0x120 [ 704.108091][ C0] ? device_add+0x9bb/0xb50 [ 704.108113][ C0] ? __pfx_ib_setup_port_attrs+0x10/0x10 [ 704.108131][ C0] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 704.108158][ C0] ? device_add+0x70b/0xb50 [ 704.108177][ C0] add_one_compat_dev+0x3d6/0x5c0 [ 704.108203][ C0] rdma_dev_init_net+0x1dd/0x270 [ 704.108227][ C0] ? __pfx_rdma_dev_init_net+0x10/0x10 [ 704.108256][ C0] ops_init+0x35c/0x5c0 [ 704.108279][ C0] setup_net+0x10c/0x320 [ 704.108296][ C0] ? __pfx_setup_net+0x10/0x10 [ 704.108313][ C0] ? copy_net_ns+0x304/0x4d0 [ 704.108327][ C0] ? down_read_killable+0x1d1/0x350 [ 704.108348][ C0] copy_net_ns+0x31b/0x4d0 [ 704.108365][ C0] create_new_namespaces+0x3f3/0x720 [ 704.108392][ C0] ? security_capable+0x7e/0x2e0 [ 704.108419][ C0] unshare_nsproxy_namespaces+0x11c/0x170 [ 704.108445][ C0] ksys_unshare+0x4c8/0x8c0 [ 704.108466][ C0] ? __pfx_ksys_unshare+0x10/0x10 [ 704.108485][ C0] ? rcu_is_watching+0x15/0xb0 [ 704.108505][ C0] __x64_sys_unshare+0x38/0x50 [ 704.108523][ C0] do_syscall_64+0xfa/0x3b0 [ 704.108538][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 704.108563][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 704.108579][ C0] ? clear_bhb_loop+0x60/0xb0 [ 704.108597][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 704.108613][ C0] RIP: 0033:0x7f5c8e58eec9 [ 704.108628][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 704.108642][ C0] RSP: 002b:00007f5c8f413038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 704.108658][ C0] RAX: ffffffffffffffda RBX: 00007f5c8e7e6090 RCX: 00007f5c8e58eec9 [ 704.108670][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 704.108680][ C0] RBP: 00007f5c8e611f91 R08: 0000000000000000 R09: 0000000000000000 [ 704.108691][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 704.108701][ C0] R13: 00007f5c8e7e6128 R14: 00007f5c8e7e6090 R15: 00007ffe1ab2b4a8 [ 704.108721][ C0] [ 704.109483][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 704.109505][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 704.109526][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 704.109539][ T31] Call Trace: [ 704.109547][ T31] [ 704.109555][ T31] dump_stack_lvl+0x99/0x250 [ 704.109581][ T31] ? __asan_memcpy+0x40/0x70 [ 704.109603][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 704.109624][ T31] ? __pfx__printk+0x10/0x10 [ 704.109662][ T31] vpanic+0x281/0x750 [ 704.109686][ T31] ? __pfx_vpanic+0x10/0x10 [ 704.109706][ T31] ? preempt_schedule+0xae/0xc0 [ 704.109736][ T31] ? preempt_schedule_common+0x83/0xd0 [ 704.109772][ T31] panic+0xb9/0xc0 [ 704.109791][ T31] ? __pfx_panic+0x10/0x10 [ 704.109821][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 704.109855][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 704.109884][ T31] watchdog+0xfd2/0xfe0 [ 704.109914][ T31] ? watchdog+0x1de/0xfe0 [ 704.109945][ T31] kthread+0x70e/0x8a0 [ 704.109972][ T31] ? __pfx_watchdog+0x10/0x10 [ 704.109996][ T31] ? __pfx_kthread+0x10/0x10 [ 704.110024][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 704.110051][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 704.110078][ T31] ? __pfx_kthread+0x10/0x10 [ 704.110101][ T31] ret_from_fork+0x439/0x7d0 [ 704.110122][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 704.110146][ T31] ? __switch_to_asm+0x39/0x70 [ 704.110168][ T31] ? __switch_to_asm+0x33/0x70 [ 704.110190][ T31] ? __pfx_kthread+0x10/0x10 [ 704.110213][ T31] ret_from_fork_asm+0x1a/0x30 [ 704.110251][ T31] [ 704.114590][ T31] Kernel Offset: disabled