last executing test programs: 5.167609779s ago: executing program 2 (id=2124): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xffffff1f, 0xfffffffe, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x1}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x44000) 5.03705217s ago: executing program 2 (id=2125): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x3c, 0x107, 0xfffffffc, 0x0, {0x2, 0x7c}, [@nested={0x4, 0x136}, @nested={0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) 4.887396883s ago: executing program 2 (id=2127): socket$isdn_base(0x22, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) getsockopt(0xffffffffffffffff, 0x0, 0x6, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x4000) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x34, 0x0, 0x0) unshare(0x62040200) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r4}, 0x50) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000300)={'gre0\x00', 0x0}) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r5}, 0x38) shutdown(0xffffffffffffffff, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000000180), 0x3db66e6159adff3, 0x10100, 0x0) unshare(0x24060400) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb010018000000000000006e0000006e0000000b000000040000000600000f020000000500000005000000070000000200000006000000000000000100000001000100010100000300000006000000070000000100000009000002000000000000000005000000050000006edd02"], 0x0, 0x93, 0x0, 0x0, 0x1}, 0x28) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x5) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x4, 0xfffffffffffffffd, 0x9323, 0xfffffffffffffffe, 0x7ff, 0x2}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x1, 0xb, 0x7fffffff, 0x2}, 0x0, 0x0) 3.094558455s ago: executing program 4 (id=2147): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000000aa40)={0x0, 0x0, &(0x7f000000aa00)={&(0x7f000000a9c0)=@ipv4_getnexthop={0x20, 0x6a, 0xb42f34edc2dba65f, 0x70bd2b, 0x25dfdbfe, {}, [@NHA_MASTER={0x8}]}, 0x20}}, 0x20000804) 3.010000548s ago: executing program 4 (id=2148): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='vegas\x00', 0x6) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) 2.945692034s ago: executing program 3 (id=2150): unshare(0x2a020400) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in6=@mcast2, 0x0, 0x2b}, 0x0, @in=@empty}}, 0xe8) r3 = openat$ppp(0xffffffffffffff9c, 0x0, 0x101042, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000000c0)={'wlan1\x00', &(0x7f0000000080)=@ethtool_stats}) sendmsg$SOCK_DESTROY(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001500000125bd7000dbdf250900000000"], 0x14}, 0x1, 0x0, 0x0, 0x24040804}, 0x20008800) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$sock(r5, &(0x7f0000003640), 0x0, 0x20040059) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x14) socket$nl_route(0x10, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r8, @ANYBLOB="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", @ANYRES16=r7], 0x21c}}, 0x0) socket(0x1d, 0x2, 0x6) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x3}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000840)={r6, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000040)={'sit0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='fsi_master_gpio_break\x00'}, 0x18) socket$netlink(0x10, 0x3, 0x0) 2.107306864s ago: executing program 4 (id=2156): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = getuid() sendmsg$nl_generic(r2, &(0x7f00000002c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000001680)=ANY=[@ANYBLOB="cc0100003500000226bd7000fcdbdf25000000f207bb3002000000011400ef0000000000000000000000ffffe000000108004a00", @ANYRES32=r3, @ANYBLOB="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"], 0x1cc}}, 0x801) sendmsg$netlink(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000640)=ANY=[@ANYBLOB="100000002e0001002abd7000000000003065390aa02c2110b684793f375a6ec6324879052a5f077a58ea68cc250d16a6b4e98e43c2cf5b5fa8b56a60151d30a433963ee90259467cdcd19dcc06a4c763f9cffa579aa08f"], 0x10}], 0x1}, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x28, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000002c0)="2300000001", 0x5) socket$nl_route(0x10, 0x3, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x10) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r6, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000740)={'wlan1\x00'}) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000600)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000440)={0x11c, 0x3d, 0x400, 0x70bd29, 0x25dfdbff, {0x1f}, [@typed={0x4, 0x17}, @nested={0x102, 0xb9, 0x0, 0x1, [@generic, @typed={0xc, 0x1c, 0x0, 0x0, @binary="748ab6b0c60feccd"}, @generic="de98da3112c84bed39dbcc5886037e89bf3736c453d0bb742fd43c6e9f7be27a6b573e06087d3609da5c25f193e846e95fba135b3ef54f6d96ac634c81238ee387ab7881c44cbb1758f40c87c37e7ba8371fae7f561c955f17db6eba57377315b43be1a65c44470ff485f8bfd225380e3eea7cb997df4e8dea284a2a725f14e02777c7ed180017c2d1b3511b38a61452011e60a8932e42c705db58c92543942861d6c87ebbe82dd133cc1667a6128c3f31e54fc07b1cee8cb0c3366688c4c63a46e2f402fdfd056d27f865b54a001ecb65684d4a82503bb49febc59de5c67c4e901744a905c7301898941fcf0c9f9113467c"]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x40000}, 0x10) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x2c, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x99}]}, 0x2c}}, 0x0) sendmmsg(r0, &(0x7f000000ca40)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000000c0)="cfe6dde0c37efdbb43dc9b530735ea4ad3bf3cff834a5e80ea0801a83a3b9dbe6b7bf3c289f5c083a73c6d1fdf2caec8388cccb3f13cca087d2a42b6fd5cbcfc4812ae7551c08ea285e17540f689e769433ab0eefa6e88bc818c9c6e10753912699110c240bcbdefe5814fcde6253a65ca23784e8eaea0ca74728e94a95ae45c69ba0602cc340659a9f75d", 0x8b}, {&(0x7f0000000940)="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", 0x4c4}], 0x2}}], 0x1, 0x40) 2.069202174s ago: executing program 0 (id=2157): unshare(0x2a020400) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in6=@mcast2, 0x0, 0x2b}, 0x0, @in=@empty}}, 0xe8) r3 = openat$ppp(0xffffffffffffff9c, 0x0, 0x101042, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000000c0)={'wlan1\x00', &(0x7f0000000080)=@ethtool_stats}) sendmsg$SOCK_DESTROY(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001500000125bd7000dbdf250900000000"], 0x14}, 0x1, 0x0, 0x0, 0x24040804}, 0x20008800) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$sock(r5, &(0x7f0000003640), 0x0, 0x20040059) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x14) socket$nl_route(0x10, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r8, @ANYBLOB="01000000000000000000010000001400020077673100000000000000000000000000f4010880700000804800098028a25880060001000a00000014000200fe8000000000000000000000000000aa05000300000000001c000080060001000200000008000200e0000001050003000000000024000100000000000000000000000000000000000000000000000000000000000000000080010080200004000a004e2000000005200100000000000000000000000000000800000006000500b01f00000800030006000000060005000500000008000a000100000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff200004000a004e200000040100000000000000000000ffffac14142a06000000240001000000000000000000000000000000000000000000000000000000000000000000d400", @ANYRES16=r7], 0x21c}}, 0x0) socket(0x1d, 0x2, 0x6) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x3}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000840)={r6, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000040)={'sit0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='fsi_master_gpio_break\x00'}, 0x18) socket$netlink(0x10, 0x3, 0x0) 2.036265636s ago: executing program 1 (id=2158): sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000080)=ANY=[@ANYBLOB="400e0000", @ANYBLOB="cf0400000000000000001300", @ANYBLOB="0400130006001200000000000600b500850100000a0006"], 0x40}}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000280)="20e1", 0x2) socketpair$unix(0x1, 0x2, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x4c, &(0x7f0000000000), 0x4) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="00012dbd7000fcdbdf250e0000002c000980080001008100000008000200040000000800010000000000080001002f3e00000800010001000100200007800c000400010000000000000008000200030000000800010000000000200004801c000780080003000008000008000400050000000800040017640000"], 0x80}, 0x1, 0x0, 0x0, 0x40}, 0x8840) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="c0260000410007010000000007000000017c00000400fc80a72601"], 0x26c0}}, 0x4010) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004a40)=ANY=[@ANYBLOB="c0260000410007010000000007000000027c00000400fc80a72601"], 0x26c0}}, 0x4010) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r4, 0x400448e3, &(0x7f0000000100)={0x0, 0x4000, '\x00', 0x2}) 1.706220054s ago: executing program 1 (id=2159): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=@bridge_newneigh={0x28, 0x1c, 0x401, 0x70bd29, 0x25dfdbff, {0x7, 0x0, 0x0, r1, 0x2, 0x1ce, 0x2}, [@NDA_LLADDR={0xa, 0x2, @link_local}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x24040040) 1.531304006s ago: executing program 2 (id=2160): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="280000001e00431b000000000000000007", @ANYRES32=0x0], 0x28}}, 0x2000c058) 1.526852773s ago: executing program 4 (id=2161): r0 = socket$kcm(0x10, 0x2, 0x4) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xd68210}], 0x1, 0x0, 0x1f00000000000000, 0x200000}, 0x1f00) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40", 0x36}], 0x1}, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0xffffffffffffffb0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000002b0009ef"], 0x14}}, 0x84) recvmmsg(r4, &(0x7f0000003bc0)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x10000, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000001080)='dctcp\x00', 0x6) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x24040ffd, &(0x7f0000000440)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r3, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x182, 0x0, 0x27) r5 = socket$nl_rdma(0x10, 0x3, 0x14) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000300)={'syzkaller1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0xd}}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000400003802c00038004000100766c616e3100000000"], 0xfc}}, 0x0) write$tun(r6, &(0x7f0000000100)={@val, @void, @eth={@random="8c5d673ef776", @local, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x6, 0x1c, 0xe4, 0x0, 0x8, 0x11, 0x0, @dev={0xac, 0x14, 0x14, 0x29}, @loopback}, "c72975ea5f954511"}}}}}, 0x2e) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x30, 0x1410, 0x1, 0x70bd2c, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x24044836}, 0xc094) 1.371311186s ago: executing program 1 (id=2162): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f00000002c0)=0x6, 0x4) 1.204393821s ago: executing program 1 (id=2163): r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000006c0)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0xfffffffc}, 0x1c, 0x0}}, {}], 0x2, 0x2000c8c0) sendmmsg$inet6(r0, &(0x7f0000001000)=[{{&(0x7f0000000080)={0xa, 0x4e20, 0x6c5cd9f0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x101}, 0x1c, 0x0}}], 0x1, 0x40) 1.203979143s ago: executing program 2 (id=2164): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000340)=0x2) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x189a42, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000040)=0xfffffffd) close(r1) r3 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) close(0x3) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000890}, 0x80) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x11}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}]}, 0x60}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000400)="4c5a1d7b44464d14aa8260bca676028f1d71e8ea6927fb0c4949d8cbfdeed9e995e058d6128dd611e93c73f158b8efb03f0b193d5b79b7e52d4d4c9a616888d4767cd5fb3cd13b63734db0810561e22fd069761f1a4cc3fc16ba1601bfb7e9f5112d640b85f7a7f9432da9ca9d95e51e0f00f234bc302dbd060fc324fd5af245411f1df76b19f9b4978f8fc74db99993bc0a886c21be4133d98bf996827bf0e69ae51540e1f53b49e63ea3c1446712d898e00bdf170127a8e0ed1ec17c5a403215f1657a9c9ebdc598bdb4a1ee7bf94d3967b374bfb52f", 0xd7}, {&(0x7f0000000580)="cff1a5110008bb3139cec59f8f99186a49d525d0fba12ccc0abe178b98323ff5256b4e9ff68c29390b1998e4ce07a20ef0b3d32dd68789dac415a63a88203e2c0604b0e91772904b6e16d74d70ed404289206cb99750c501aaa65285a3beff46ce12c53878f6a484e4d1fedbea77daf919c805ff9d2ed1de5739a48e8aa12ee96357a904bceec2c15764939c15e4c3e8e796c53005457df6c57629bd69ef20ab1b261155a340fac24179fbf317071699b75d82fc43edd4f70c33691f263c5b4bd3300d1e7b8b5c547c4b706d331c9aca0b4a5838cffdf5a8f66857d13f", 0xdd}], 0x2) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuset.memory_pressure\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r7, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0x2, &(0x7f0000001a00)=@raw=[@cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f0000000340)='syzkaller\x00', 0x7, 0x1000, &(0x7f0000000680)=""/4096, 0x41000, 0x14, '\x00', 0x0, @sk_reuseport=0x28, r7, 0x8, &(0x7f0000000500)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000001680)={0x3, 0x9, 0x5, 0x7f}, 0x10, 0x0, 0xffffffffffffffff, 0x7, 0x0, &(0x7f0000001700)=[{0x2, 0x4, 0x9, 0xb}, {0x2, 0x1, 0x7, 0x9}, {0x1, 0x5, 0x10, 0x4}, {0x4, 0x5, 0xc, 0x3}, {0x2, 0x5, 0x6, 0x6}, {0x3, 0x4, 0x7, 0x6}, {0x0, 0x1, 0x10, 0xa}], 0x10, 0x2}, 0x94) socket$kcm(0xa, 0x922000000003, 0x11) socket$kcm(0xa, 0x922000000003, 0x11) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x6c, r8, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4, 0x0, @loopback}}, {0x12, 0x2, @in6={0xa, 0x0, 0x0, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x6c}}, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000019c0)={'dvmrp0\x00', {0x2, 0x4e20, @loopback}}) 1.138733476s ago: executing program 1 (id=2165): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="b40500000000000079109c000000000005000000000000009500000000000020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000001c0)=0x6f1b, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000000)=0x40, 0x4) recvmmsg(r0, &(0x7f0000003e00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/27, 0x1b}, 0x7}], 0x1, 0x45833af92e4b39ff, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000c40), 0x12) r7 = openat$cgroup_procs(r4, &(0x7f0000000140)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000000100), 0x12) r8 = openat$cgroup_procs(r3, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r9 = openat$cgroup_procs(r3, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f00000000c0), 0x40) pread64(r9, &(0x7f0000001840)=""/4096, 0x1000, 0x1) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a090400000000000000000200000044000480140001800c0001006e6f747261636b00040002802c0001800e000100696d6d656469617465000000180002800c00028005000100c400000008000140000000090900010073797a30000000000900020073797a320000000020000000080a05000000000000000000020000000900010073797a300000000014000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4002840}, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r1, 0x0) socket$rds(0x15, 0x5, 0x0) r10 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) setsockopt$inet_sctp_SCTP_RTOINFO(r10, 0x84, 0x0, &(0x7f0000000040)={0x0, 0xfffffffb, 0x7, 0x6}, 0x10) 1.044439132s ago: executing program 0 (id=2166): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000002d80)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000030c0)=@base={0x1f, 0x9, 0xe, 0x3, 0x1000, 0xffffffffffffffff, 0x10, '\x00', r1, 0xffffffffffffffff, 0x3, 0x5}, 0x50) 908.010506ms ago: executing program 1 (id=2167): unshare(0x2a020400) socket$xdp(0x2c, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, 0x0, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in6=@mcast2, 0x0, 0x2b}, 0x0, @in=@empty}}, 0xe8) r2 = openat$ppp(0xffffffffffffff9c, 0x0, 0x101042, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000000c0)={'wlan1\x00', &(0x7f0000000080)=@ethtool_stats}) sendmsg$SOCK_DESTROY(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001500000125bd7000dbdf250900000000"], 0x14}, 0x1, 0x0, 0x0, 0x24040804}, 0x20008800) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$sock(r4, &(0x7f0000003640), 0x0, 0x20040059) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x14) socket$nl_route(0x10, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r7, @ANYBLOB="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", @ANYRES16=r6], 0x21c}}, 0x0) socket(0x1d, 0x2, 0x6) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x3}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000840)={r5, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000040)={'sit0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='fsi_master_gpio_break\x00'}, 0x18) socket$netlink(0x10, 0x3, 0x0) 859.444227ms ago: executing program 0 (id=2168): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="b40500000000000079109c0000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x9, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000032e8d800007f12f8ff108458688a354c9c582ef915ca"], &(0x7f0000000080)='GPL\x00'}, 0x94) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000001c0)=0x6f1b, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000000)=0x40, 0x4) recvmmsg(r0, &(0x7f0000003e00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/27, 0x1b}, 0x7}], 0x1, 0x45833af92e4b39ff, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000c40), 0x12) r7 = openat$cgroup_procs(r4, &(0x7f0000000140)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000000100), 0x12) r8 = openat$cgroup_procs(r3, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r9 = openat$cgroup_procs(r3, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f00000000c0), 0x40) pread64(r9, &(0x7f0000001840)=""/4096, 0x1000, 0x1) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a090400000000000000000200000044000480140001800c0001006e6f747261636b00040002802c0001800e000100696d6d656469617465000000180002800c00028005000100c400000008000140000000090900010073797a30000000000900020073797a320000000020000000080a05000000000000000000020000000900010073797a300000000014000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4002840}, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r1, 0x0) socket$rds(0x15, 0x5, 0x0) r10 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) setsockopt$inet_sctp_SCTP_RTOINFO(r10, 0x84, 0x0, &(0x7f0000000040)={0x0, 0xfffffffb, 0x7, 0x6}, 0x10) 791.407675ms ago: executing program 2 (id=2169): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="b40500000000000079109c0000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x9, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000032e8d800007f12f8ff108458688a354c9c582ef915ca"], &(0x7f0000000080)='GPL\x00'}, 0x94) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000001c0)=0x6f1b, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000000)=0x40, 0x4) recvmmsg(r0, &(0x7f0000003e00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/27, 0x1b}, 0x7}], 0x1, 0x45833af92e4b39ff, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000c40), 0x12) r7 = openat$cgroup_procs(r4, &(0x7f0000000140)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000000100), 0x12) r8 = openat$cgroup_procs(r3, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r9 = openat$cgroup_procs(r3, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f00000000c0), 0x40) pread64(r9, &(0x7f0000001840)=""/4096, 0x1000, 0x1) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a090400000000000000000200000044000480140001800c0001006e6f747261636b00040002802c0001800e000100696d6d656469617465000000180002800c00028005000100c400000008000140000000090900010073797a30000000000900020073797a320000000020000000080a05000000000000000000020000000900010073797a300000000014000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4002840}, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r1, 0x0) socket$rds(0x15, 0x5, 0x0) r10 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) setsockopt$inet_sctp_SCTP_RTOINFO(r10, 0x84, 0x0, &(0x7f0000000040)={0x0, 0xfffffffb, 0x7, 0x6}, 0x10) 758.508182ms ago: executing program 3 (id=2170): socket(0x2, 0x80805, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000580)={{0x84, @broadcast, 0x4e23, 0x3, 'lc\x00', 0x2, 0x3, 0x181a}, {@multicast2, 0x4e20, 0x2, 0x400000a, 0x80012d58, 0x12d5c}}, 0x44) 591.241717ms ago: executing program 3 (id=2171): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, 0x0, {0x0, 0xe}, {0x2, 0xb}, {0xffe0, 0xb}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0xf, 0x0, 0x4}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2404c0f1}, 0x4008000) r9 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x802, r9}, 0x38) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 334.301559ms ago: executing program 3 (id=2172): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xf, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x301}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xa2, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='tlb_flush\x00', r1}, 0x10) 333.063061ms ago: executing program 0 (id=2173): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0xbe, &(0x7f0000000140)={@link_local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0xfb, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x24, 0x0, {0x25, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x9, @loopback, @local, {[@cipso={0x86, 0x77, 0xffffffffffffffff, [{0x0, 0xc, "0800b28c590300000052"}, {0x2, 0x9, "020007651442eb"}, {0x0, 0xe, "7434954373561de584b703c8"}, {0x0, 0x9, "e706d30bd224f8"}, {0x2, 0x7, "cfa11cab1a"}, {0x7, 0x10, "8475be675de6a70a05a0dc91e5c6"}, {0x7, 0xa, "0000000000800000"}, {0x0, 0x12, "73bc95a70000ffa30900a301c8460000"}, {0x0, 0x12, "c8f46976e79ea788f03d9d3205927e3d"}]}, @cipso={0x86, 0x6, 0xffffffffffffffff}]}}}}}}}, 0x0) 316.928504ms ago: executing program 4 (id=2174): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000006d40)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x18000000, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_DATA={0x4}]}]}]}], {0x14, 0x10}}, 0xc4}}, 0x0) 203.51978ms ago: executing program 0 (id=2175): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1}, 0x94) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x12, 0x0, &(0x7f0000000000)="b9ff03076044238c9e9e15f088a84cb688a8", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r4, &(0x7f0000000c40)={0x24, @none={0x0, 0x2}}, 0x14) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) preadv(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x726, 0x7) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001500)=@newqdisc={0x70, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{0x1ff, 0x4, 0x0, 0x20, 0xfffffffd, 0x8}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x80000001, 0x6, 0x8, 0x7, 0xd99d}}]}]}}}]}, 0x70}}, 0x4) sendto$packet(r5, &(0x7f00000002c0)="44c33b69ebc9e05e9bdec0c288a8", 0xe, 0x870, &(0x7f0000000440)={0x11, 0x0, r8, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x14) r9 = syz_init_net_socket$llc(0x1a, 0x802, 0x1800000000000000) bind$llc(r9, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) close(r9) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x403, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x88afa5b4, 0x40}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x3}]}, 0x3c}}, 0x0) socket$alg(0x26, 0x5, 0x0) r10 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r10, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) 143.427607ms ago: executing program 3 (id=2176): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000006800090300000000070000000a0000000000000004000400060007"], 0x24}}, 0x0) 143.138768ms ago: executing program 4 (id=2177): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r0, 0x0, 0x6a, 0xdb, &(0x7f00000005c0)="9248397243668473b5a9e02df1f5dc9e9828febbedda27141e605aa0190a1f6fc2ba520f434df957a450242ca2947c4f60ba2a2f3d79aa047b70c6c3528d8b535394270a789fdf383c4726606a74fe07dc87be21622f0cdf6742f8e9eaac405b6daa74b2721508be71d7", &(0x7f0000000640)=""/219, 0x0, 0x0, 0x8f, 0x84, &(0x7f0000000740)="3e9251ba000f98c363dbbc45f014e4548f54dd2fe9bd97e0080681d535a05a9899bbc7a19c18e9a8581bda9572e09f4b0146a778075939ce2bd868fa72e674455be803c1913527b64c30693ec120a841de5473793db4f0d17c8883139a41acda52fe9e37634de6bd7e91fcea2129301d7077415453fa4bccde2e3c5fbb9c4b15e072212e7b66e766e0e85a33498732", &(0x7f0000000800)="b392037e223ed4cb0ecf10ad9057ff17883fe1f4ce5263ecd86022f91fa0d9052621983c58d5c772bf11b12981afe61b73076962cc5bc429c7834827cc737ed9a0c095c8b593eb93159f25bdda492f7df03ae27a9b0645950acc17f26e5f915d0878a880ff821fede56d03d552be134af439f0966fcdc8b82afbe280b172739b521c9b3e", 0x4, 0x0, 0x100}, 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r1, 0x0, 0x4}, 0x18) r2 = socket$alg(0x26, 0x5, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x319) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400}) r4 = socket$inet(0x2, 0x2, 0x0) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r6, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r7 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r7, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r8 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_buf(r8, 0x6, 0xd, &(0x7f00000008c0)='.', 0x1) listen(r8, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000040)={'vxcan0\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$inet_msfilter(r7, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) setsockopt$inet_mreqsrc(r4, 0x0, 0x27, &(0x7f0000000440)={@multicast2, @loopback, @private=0xa010100}, 0xc) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r9 = accept4(r2, 0x0, 0x0, 0x80800) setsockopt$sock_int(r9, 0x1, 0x20, &(0x7f0000000940)=0x1000008, 0x4) sendmmsg$alg(r9, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), r9) 17.765538ms ago: executing program 0 (id=2178): unshare(0x2a020400) socket$xdp(0x2c, 0x3, 0x0) r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r0, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in6=@mcast2, 0x0, 0x2b}, 0x0, @in=@empty}}, 0xe8) r2 = openat$ppp(0xffffffffffffff9c, 0x0, 0x101042, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000000c0)={'wlan1\x00', &(0x7f0000000080)=@ethtool_stats}) sendmsg$SOCK_DESTROY(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001500000125bd7000dbdf250900000000"], 0x14}, 0x1, 0x0, 0x0, 0x24040804}, 0x20008800) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$sock(r4, &(0x7f0000003640), 0x0, 0x20040059) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x14) socket$nl_route(0x10, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r7, @ANYBLOB="01000000000000000000010000001400020077673100000000000000000000000000f4010880700000804800098028a25880060001000a00000014000200fe8000000000000000000000000000aa05000300000000001c000080060001000200000008000200e0000001050003000000000024000100000000000000000000000000000000000000000000000000000000000000000080010080200004000a004e2000000005200100000000000000000000000000000800000006000500b01f00000800030006000000060005000500000008000a000100000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff200004000a004e200000040100000000000000000000ffffac14142a06000000240001000000000000000000000000000000000000000000000000000000000000000000d400", @ANYRES16=r6], 0x21c}}, 0x0) socket(0x1d, 0x2, 0x6) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x3}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000840)={r5, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000040)={'sit0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='fsi_master_gpio_break\x00'}, 0x18) socket$netlink(0x10, 0x3, 0x0) 0s ago: executing program 3 (id=2179): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000340)=0x2) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x189a42, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000040)=0xfffffffd) close(r1) r3 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) close(0x3) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000890}, 0x80) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x11}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}]}, 0x60}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000400)="4c5a1d7b44464d14aa8260bca676028f1d71e8ea6927fb0c4949d8cbfdeed9e995e058d6128dd611e93c73f158b8efb03f0b193d5b79b7e52d4d4c9a616888d4767cd5fb3cd13b63734db0810561e22fd069761f1a4cc3fc16ba1601bfb7e9f5112d640b85f7a7f9432da9ca9d95e51e0f00f234bc302dbd060fc324fd5af245411f1df76b19f9b4978f8fc74db99993bc0a886c21be4133d98bf996827bf0e69ae51540e1f53b49e63ea3c1446712d898e00bdf170127a8e0ed1ec17c5a403215f1657a9c9ebdc598bdb4a1ee7bf94d3967b374bfb52f", 0xd7}, {&(0x7f0000000580)="cff1a5110008bb3139cec59f8f99186a49d525d0fba12ccc0abe178b98323ff5256b4e9ff68c29390b1998e4ce07a20ef0b3d32dd68789dac415a63a88203e2c0604b0e91772904b6e16d74d70ed404289206cb99750c501aaa65285a3beff46ce12c53878f6a484e4d1fedbea77daf919c805ff9d2ed1de5739a48e8aa12ee96357a904bceec2c15764939c15e4c3e8e796c53005457df6c57629bd69ef20ab1b261155a340fac24179fbf317071699b75d82fc43edd4f70c33691f263c5b4bd3300d1e7b8b5c547c4b706d331c9aca0b4a5838cffdf5a8f66857d13f", 0xdd}], 0x2) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuset.memory_pressure\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r7, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0x2, &(0x7f0000001a00)=@raw=[@cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f0000000340)='syzkaller\x00', 0x7, 0x1000, &(0x7f0000000680)=""/4096, 0x41000, 0x14, '\x00', 0x0, @sk_reuseport=0x28, r7, 0x8, &(0x7f0000000500)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000001680)={0x3, 0x9, 0x5, 0x7f}, 0x10, 0x0, 0xffffffffffffffff, 0x7, 0x0, &(0x7f0000001700)=[{0x2, 0x4, 0x9, 0xb}, {0x2, 0x1, 0x7, 0x9}, {0x4, 0x5, 0xc, 0x3}, {0x2, 0x5, 0x6, 0x6}, {0x3, 0x4, 0x7, 0x6}, {0x0, 0x4, 0x8, 0x2}, {0x0, 0x1, 0x10, 0xa}], 0x10, 0x2}, 0x94) socket$kcm(0xa, 0x922000000003, 0x11) socket$kcm(0xa, 0x922000000003, 0x11) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x6c, r8, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4, 0x0, @loopback}}, {0x12, 0x2, @in6={0xa, 0x0, 0x0, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x6c}}, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000019c0)={'dvmrp0\x00', {0x2, 0x4e20, @loopback}}) kernel console output (not intermixed with test programs): 145.304379][ T7514] syzkaller1: entered allmulticast mode [ 145.836149][ T7521] netlink: 56 bytes leftover after parsing attributes in process `syz.1.359'. [ 146.440468][ T7545] netlink: 'syz.4.369': attribute type 4 has an invalid length. [ 146.589991][ T7553] netlink: 728 bytes leftover after parsing attributes in process `syz.0.370'. [ 147.070792][ T7568] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 147.130581][ T7568] veth0_to_team: entered promiscuous mode [ 147.145090][ T7568] veth0_to_team: entered allmulticast mode [ 147.263130][ T7572] IPVS: Scheduler module ip_vs_sip not found [ 147.271218][ T7576] syzkaller1: entered allmulticast mode [ 147.326228][ T7574] syzkaller1: entered allmulticast mode [ 147.491258][ T7586] syzkaller1: entered allmulticast mode [ 148.622637][ T7605] syzkaller1: entered allmulticast mode [ 149.161367][ T7631] netlink: 248 bytes leftover after parsing attributes in process `syz.3.395'. [ 149.482978][ T55] block nbd0: Possible stuck request ffff88802504e000: control (read@0,1024B). Runtime 30 seconds [ 149.495405][ T55] block nbd0: Possible stuck request ffff88802504e1c0: control (read@1024,1024B). Runtime 30 seconds [ 149.507010][ T55] block nbd0: Possible stuck request ffff88802504e380: control (read@2048,1024B). Runtime 30 seconds [ 149.518690][ T55] block nbd0: Possible stuck request ffff88802504e540: control (read@3072,1024B). Runtime 30 seconds [ 149.756433][ T7646] syzkaller1: entered allmulticast mode [ 149.827546][ T7652] netlink: 28 bytes leftover after parsing attributes in process `syz.1.400'. [ 150.421239][ T7672] lo speed is unknown, defaulting to 1000 [ 151.002574][ T7689] syzkaller1: entered allmulticast mode [ 151.228135][ T7701] netlink: 'syz.1.412': attribute type 1 has an invalid length. [ 151.240487][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 151.322577][ T7701] 8021q: adding VLAN 0 to HW filter on device bond1 [ 151.463326][ T7706] 8021q: adding VLAN 0 to HW filter on device bond1 [ 151.500841][ T7706] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 151.523435][ T7706] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 151.746672][ T7701] veth3: entered promiscuous mode [ 151.778789][ T7701] bond1: (slave veth3): Enslaving as an active interface with a down link [ 152.181585][ T7724] bridge0: port 3(erspan0) entered blocking state [ 152.188360][ T7724] bridge0: port 3(erspan0) entered disabled state [ 152.224356][ T7724] erspan0: entered allmulticast mode [ 152.258868][ T7724] erspan0: entered promiscuous mode [ 152.294681][ T7724] bridge0: port 3(erspan0) entered blocking state [ 152.301409][ T7724] bridge0: port 3(erspan0) entered listening state [ 152.341870][ T7726] erspan0: left allmulticast mode [ 152.377348][ T7726] erspan0: left promiscuous mode [ 152.423245][ T7726] bridge0: port 3(erspan0) entered disabled state [ 152.621510][ T7738] batman_adv: batadv0: Adding interface: ip6gretap1 [ 152.667523][ T7738] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 152.708510][ T7738] batman_adv: batadv0: Interface activated: ip6gretap1 [ 153.460386][ T7759] syzkaller1: entered allmulticast mode [ 153.507018][ T7772] netlink: 'syz.1.426': attribute type 13 has an invalid length. [ 153.543859][ T7772] netlink: 'syz.1.426': attribute type 17 has an invalid length. [ 153.796777][ T7772] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 153.877959][ T7773] lo speed is unknown, defaulting to 1000 [ 154.300515][ T7771] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 154.816757][ T7801] syzkaller1: entered allmulticast mode [ 155.080116][ T7785] lo speed is unknown, defaulting to 1000 [ 155.876024][ T7812] IPVS: Scheduler module ip_vs_sip not found [ 155.944412][ T7821] Unsupported ieee802154 address type: 0 [ 156.417700][ T7829] lo speed is unknown, defaulting to 1000 [ 156.548572][ T7840] syzkaller1: entered allmulticast mode [ 156.754508][ T7847] netlink: 364 bytes leftover after parsing attributes in process `syz.4.445'. [ 156.782081][ T7847] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 157.047583][ T7835] lo speed is unknown, defaulting to 1000 [ 157.138453][ T7855] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.160449][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 157.169073][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 157.230154][ T7856] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 157.289795][ T7858] Unsupported ieee802154 address type: 0 [ 157.308470][ T7858] netlink: 12 bytes leftover after parsing attributes in process `syz.4.450'. [ 157.327638][ T7855] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.438059][ T7855] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.533929][ T7855] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.040402][ T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.082700][ T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.094625][ T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.165329][ T6054] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.637596][ T7936] syzkaller1: entered allmulticast mode [ 159.738492][ T7944] lo speed is unknown, defaulting to 1000 [ 160.243904][ T7953] netlink: 696 bytes leftover after parsing attributes in process `syz.2.482'. [ 160.443903][ T7970] Unsupported ieee802154 address type: 0 [ 160.451635][ T7970] netlink: 12 bytes leftover after parsing attributes in process `syz.1.487'. [ 160.831423][ T7980] lo speed is unknown, defaulting to 1000 [ 161.287511][ T7989] lo speed is unknown, defaulting to 1000 [ 161.440613][ T7993] lo speed is unknown, defaulting to 1000 [ 161.496796][ T7997] netlink: 'syz.4.495': attribute type 4 has an invalid length. [ 161.551438][ T7998] netlink: 'syz.4.495': attribute type 4 has an invalid length. [ 161.745246][ T8002] batman_adv: batadv0: Adding interface: gretap1 [ 161.754278][ T8002] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 161.795046][ T8002] batman_adv: batadv0: Interface activated: gretap1 [ 161.822947][ T8005] netlink: 'syz.3.497': attribute type 4 has an invalid length. [ 161.864173][ T8006] netlink: 'syz.3.497': attribute type 4 has an invalid length. [ 161.950341][ T8010] Unsupported ieee802154 address type: 0 [ 161.994301][ T8010] netlink: 12 bytes leftover after parsing attributes in process `syz.0.498'. [ 162.101916][ T5933] lo speed is unknown, defaulting to 1000 [ 162.361279][ T5933] lo speed is unknown, defaulting to 1000 [ 162.693283][ T5932] lo speed is unknown, defaulting to 1000 [ 162.707057][ T8021] netlink: 696 bytes leftover after parsing attributes in process `syz.0.499'. [ 163.221185][ T8026] lo speed is unknown, defaulting to 1000 [ 163.643589][ T8038] syzkaller1: entered allmulticast mode [ 163.790991][ T8040] syzkaller1: entered allmulticast mode [ 164.744637][ T8067] Unsupported ieee802154 address type: 0 [ 164.774084][ T8067] netlink: 12 bytes leftover after parsing attributes in process `syz.1.509'. [ 164.875142][ T8065] lo speed is unknown, defaulting to 1000 [ 165.235668][ T8085] netlink: 60 bytes leftover after parsing attributes in process `syz.0.515'. [ 165.257089][ T8085] netlink: 16 bytes leftover after parsing attributes in process `syz.0.515'. [ 165.274852][ T8085] netlink: 60 bytes leftover after parsing attributes in process `syz.0.515'. [ 166.005402][ T8093] syzkaller1: entered allmulticast mode [ 166.717836][ T8115] syzkaller1: entered allmulticast mode [ 166.760771][ T8112] lo speed is unknown, defaulting to 1000 [ 166.959932][ T8141] Unsupported ieee802154 address type: 0 [ 166.991717][ T8141] netlink: 12 bytes leftover after parsing attributes in process `syz.2.524'. [ 167.972900][ T8169] syzkaller1: entered allmulticast mode [ 168.190825][ T8176] syzkaller1: entered allmulticast mode [ 168.888839][ T8193] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.064937][ T8193] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.129350][ T8200] ipvlan2: entered promiscuous mode [ 169.141453][ T8200] ipvlan2: entered allmulticast mode [ 169.158405][ T8200] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 169.210663][ T8193] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.283434][ T8193] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.403736][ T8209] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 169.446950][ T8209] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 169.473211][ T8212] macsec0: entered allmulticast mode [ 169.481350][ T8215] veth1_macvtap: entered allmulticast mode [ 169.498020][ T8215] macsec0: left allmulticast mode [ 169.504110][ T8215] veth1_macvtap: left allmulticast mode [ 169.870114][ T49] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.944318][ T6718] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.997474][ T6054] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.060330][ T6056] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.193465][ T8236] lo speed is unknown, defaulting to 1000 [ 170.380107][ T8256] Unsupported ieee802154 address type: 0 [ 170.388015][ T8256] netlink: 12 bytes leftover after parsing attributes in process `syz.0.572'. [ 170.819508][ T8262] syzkaller1: entered allmulticast mode [ 171.698002][ T8291] lo speed is unknown, defaulting to 1000 [ 172.401534][ T8314] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.457450][ T8314] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.791354][ T8314] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.086328][ T8314] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.113951][ T8325] syzkaller1: entered allmulticast mode [ 173.188067][ T8342] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.315790][ T8342] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.426731][ T6054] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.452652][ T8342] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.500900][ T6056] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.522092][ T8351] tipc: Started in network mode [ 173.527172][ T8351] tipc: Node identity 0000000000005f120000000000000001, cluster identity 4711 [ 173.566990][ T8351] tipc: Enabling of bearer rejected, failed to enable media [ 173.602719][ T6718] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.641597][ T8342] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.757306][ T49] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.811381][ T49] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.842762][ T6718] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.894378][ T6718] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.945922][ T49] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.052543][ T8367] netlink: 16 bytes leftover after parsing attributes in process `syz.3.611'. [ 174.151572][ T8373] Unsupported ieee802154 address type: 0 [ 174.288757][ T8377] lo speed is unknown, defaulting to 1000 [ 174.330030][ T8381] netlink: 'syz.4.617': attribute type 4 has an invalid length. [ 174.369583][ T8381] netlink: 'syz.4.617': attribute type 4 has an invalid length. [ 174.562610][ T8387] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.687879][ T8387] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.016528][ T8387] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.122303][ T8387] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.269507][ T8402] syzkaller1: entered allmulticast mode [ 175.817142][ T8425] lo speed is unknown, defaulting to 1000 [ 175.948269][ T8432] Unsupported ieee802154 address type: 0 [ 176.224067][ T8437] Unsupported ieee802154 address type: 0 [ 176.232280][ T8437] netlink: 12 bytes leftover after parsing attributes in process `syz.0.631'. [ 176.561653][ T8444] netlink: 32 bytes leftover after parsing attributes in process `syz.2.634'. [ 176.702857][ T8447] netlink: 'syz.2.635': attribute type 4 has an invalid length. [ 176.716234][ T8447] netlink: 'syz.2.635': attribute type 4 has an invalid length. [ 176.938634][ T8451] netlink: 8 bytes leftover after parsing attributes in process `syz.4.636'. [ 177.128247][ T8455] netlink: 'syz.4.637': attribute type 4 has an invalid length. [ 177.554694][ T6056] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.674261][ T49] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.730574][ T8461] syzkaller1: entered allmulticast mode [ 177.841897][ T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.878792][ T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.023654][ T8470] netlink: 596 bytes leftover after parsing attributes in process `syz.4.640'. [ 178.142700][ T8469] lo speed is unknown, defaulting to 1000 [ 178.857353][ T8496] netlink: 'syz.4.644': attribute type 1 has an invalid length. [ 179.147087][ T8508] batman_adv: batadv0: Adding interface: ip6gretap1 [ 179.162693][ T8508] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.202356][ T8511] netlink: 'syz.1.649': attribute type 4 has an invalid length. [ 179.217240][ T8508] batman_adv: batadv0: Interface activated: ip6gretap1 [ 179.253583][ T8516] netlink: 'syz.1.649': attribute type 4 has an invalid length. [ 179.314060][ T8515] tun0: tun_chr_ioctl cmd 1074025672 [ 179.322058][ T8515] tun0: ignored: set checksum disabled [ 179.562907][ T55] block nbd0: Possible stuck request ffff88802504e000: control (read@0,1024B). Runtime 60 seconds [ 179.574500][ T55] block nbd0: Possible stuck request ffff88802504e1c0: control (read@1024,1024B). Runtime 60 seconds [ 179.586514][ T55] block nbd0: Possible stuck request ffff88802504e380: control (read@2048,1024B). Runtime 60 seconds [ 179.598692][ T55] block nbd0: Possible stuck request ffff88802504e540: control (read@3072,1024B). Runtime 60 seconds [ 180.333414][ T8546] syzkaller1: entered allmulticast mode [ 180.400723][ T8551] netlink: 52 bytes leftover after parsing attributes in process `syz.1.656'. [ 180.417872][ T8551] netlink: 52 bytes leftover after parsing attributes in process `syz.1.656'. [ 180.705037][ T8561] netlink: 'syz.4.658': attribute type 16 has an invalid length. [ 180.734109][ T8561] netlink: 'syz.4.658': attribute type 3 has an invalid length. [ 180.747535][ T8561] netlink: 64066 bytes leftover after parsing attributes in process `syz.4.658'. [ 181.218877][ T8572] netlink: 'syz.2.663': attribute type 3 has an invalid length. [ 181.384081][ T8588] netlink: 'syz.2.666': attribute type 4 has an invalid length. [ 181.426242][ T8588] netlink: 'syz.2.666': attribute type 4 has an invalid length. [ 181.960262][ T8607] lo speed is unknown, defaulting to 1000 [ 182.442967][ T8619] netlink: 'syz.4.676': attribute type 3 has an invalid length. [ 182.483203][ T8622] netlink: 48 bytes leftover after parsing attributes in process `syz.1.677'. [ 182.851699][ T8637] netlink: 12 bytes leftover after parsing attributes in process `syz.0.682'. [ 183.006294][ T8640] batman_adv: batadv0: Adding interface: ip6gretap1 [ 183.025478][ T8640] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 183.075842][ T8649] netlink: 'syz.4.683': attribute type 4 has an invalid length. [ 183.111226][ T8640] batman_adv: batadv0: Interface activated: ip6gretap1 [ 183.128766][ T8653] netlink: 'syz.4.683': attribute type 4 has an invalid length. [ 183.320940][ T8632] lo speed is unknown, defaulting to 1000 [ 183.452031][ T8648] syzkaller1: entered allmulticast mode [ 184.694698][ T8683] syzkaller1: entered allmulticast mode [ 185.238453][ T8696] lo speed is unknown, defaulting to 1000 [ 185.716017][ T8716] syzkaller1: entered allmulticast mode [ 185.912850][ T8701] lo speed is unknown, defaulting to 1000 [ 186.227259][ T8719] lo speed is unknown, defaulting to 1000 [ 186.557358][ T8729] netlink: 16 bytes leftover after parsing attributes in process `syz.1.700'. [ 187.239730][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 187.246987][ C1] bridge0: topology change detected, propagating [ 187.254613][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 187.261914][ C1] bridge0: topology change detected, propagating [ 187.338463][ T8737] sctp: [Deprecated]: syz.2.704 (pid 8737) Use of struct sctp_assoc_value in delayed_ack socket option. [ 187.338463][ T8737] Use struct sctp_sack_info instead [ 187.608273][ T8745] macsec0: entered allmulticast mode [ 187.633878][ T8745] dummy0: entered allmulticast mode [ 187.660588][ T8745] dummy0: left allmulticast mode [ 187.899014][ T8749] lo speed is unknown, defaulting to 1000 [ 188.001593][ T8764] syzkaller1: entered allmulticast mode [ 188.935191][ T8795] lo speed is unknown, defaulting to 1000 [ 189.463829][ T8813] lo speed is unknown, defaulting to 1000 [ 189.822526][ T8809] syzkaller1: entered allmulticast mode [ 189.911813][ T8823] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.035634][ T8823] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.124923][ T8832] pim6reg1: entered allmulticast mode [ 190.262027][ T8823] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.378401][ T8840] netlink: 'syz.0.731': attribute type 13 has an invalid length. [ 190.402462][ T8840] netlink: 'syz.0.731': attribute type 17 has an invalid length. [ 190.453583][ T8823] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.805723][ T8840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 190.854418][ T8840] 8021q: adding VLAN 0 to HW filter on device team0 [ 190.899908][ T8840] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 190.927373][ T8851] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 191.056096][ T8845] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.134266][ T6056] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.151991][ T8845] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.207730][ T8841] lo speed is unknown, defaulting to 1000 [ 191.207849][ T6056] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.270520][ T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.303064][ T6056] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.371785][ T8845] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.481663][ T8845] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.704479][ T49] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.721178][ T8858] lo speed is unknown, defaulting to 1000 [ 191.829282][ T6056] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.867189][ T49] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.910445][ T49] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.208001][ T8882] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.263960][ T8879] IPv6: Can't replace route, no match found [ 192.372076][ T8882] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.525499][ T8884] lo speed is unknown, defaulting to 1000 [ 192.552602][ T8882] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.778491][ T8882] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.042478][ T8878] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 193.289238][ T8905] netlink: 40 bytes leftover after parsing attributes in process `syz.3.744'. [ 193.477496][ T8909] netlink: 84 bytes leftover after parsing attributes in process `syz.0.746'. [ 193.790694][ T8913] syzkaller1: entered allmulticast mode [ 194.162109][ T8924] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 194.766170][ T8941] lo speed is unknown, defaulting to 1000 [ 195.123981][ T8954] netlink: 32 bytes leftover after parsing attributes in process `syz.1.758'. [ 195.492496][ T6718] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.561924][ T6718] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.623771][ T6056] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.657428][ T12] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.365535][ T5869] Bluetooth: hci2: command 0x0406 tx timeout [ 196.365546][ T5868] Bluetooth: hci3: command 0x0406 tx timeout [ 196.369711][ T8981] syzkaller1: entered allmulticast mode [ 196.372367][ T5873] Bluetooth: hci1: command 0x0406 tx timeout [ 196.685948][ T8994] netlink: 8 bytes leftover after parsing attributes in process `syz.1.773'. [ 196.720209][ T8996] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.897987][ T8996] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.027275][ T8996] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.114469][ T8996] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.478501][ T9016] lo speed is unknown, defaulting to 1000 [ 197.763838][ T9026] netlink: 596 bytes leftover after parsing attributes in process `syz.3.786'. [ 198.269209][ T9042] netlink: 8 bytes leftover after parsing attributes in process `syz.1.792'. [ 199.172065][ T9070] netlink: 4 bytes leftover after parsing attributes in process `syz.3.802'. [ 199.411517][ T6718] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.488673][ T13] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.525592][ T49] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.548157][ T49] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.684318][ T9083] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge0 [ 200.331416][ T9106] lo speed is unknown, defaulting to 1000 [ 201.181233][ T9143] netlink: 71 bytes leftover after parsing attributes in process `syz.4.831'. [ 201.421588][ T9145] syzkaller1: entered allmulticast mode [ 201.545138][ T9150] netlink: 32 bytes leftover after parsing attributes in process `syz.4.834'. [ 201.712605][ T5864] Bluetooth: hci4: link tx timeout [ 201.717765][ T5864] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 202.134755][ T9163] netlink: 48 bytes leftover after parsing attributes in process `syz.4.838'. [ 202.302727][ T9167] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.406639][ T9167] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.501958][ T9167] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.608889][ T9167] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.015488][ T9193] netlink: 312 bytes leftover after parsing attributes in process `syz.0.851'. [ 203.041910][ T9192] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.149058][ T9192] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.264364][ T6718] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.312092][ T9192] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.362814][ T9200] lo speed is unknown, defaulting to 1000 [ 203.368701][ T13] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.424555][ T9192] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.518077][ T12] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.549094][ T6718] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.755533][ T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.801225][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 203.878392][ T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.957930][ T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.992588][ T9222] Unsupported ieee802154 address type: 0 [ 204.002827][ T9222] netlink: 12 bytes leftover after parsing attributes in process `syz.2.858'. [ 204.012735][ T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.570302][ T9238] netlink: 'syz.4.862': attribute type 4 has an invalid length. [ 204.624981][ T9240] netlink: 'syz.4.862': attribute type 4 has an invalid length. [ 205.301891][ T9250] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.657854][ T9250] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.786612][ T9250] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.956489][ T9250] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.127866][ T9259] lo speed is unknown, defaulting to 1000 [ 207.293185][ T9296] lo speed is unknown, defaulting to 1000 [ 207.446986][ T49] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.477189][ T49] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.686035][ T49] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.755291][ T49] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.335758][ T9328] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.414527][ T9333] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.571332][ T9328] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.608077][ T9333] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.676726][ T9345] netlink: 'syz.3.898': attribute type 7 has an invalid length. [ 208.732932][ T9328] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.801806][ T9333] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.867631][ T9333] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.907068][ T9328] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.035104][ T6054] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.066836][ T6056] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.098977][ T6056] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.129520][ T6056] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.647137][ T55] block nbd0: Possible stuck request ffff88802504e000: control (read@0,1024B). Runtime 90 seconds [ 209.658768][ T55] block nbd0: Possible stuck request ffff88802504e1c0: control (read@1024,1024B). Runtime 90 seconds [ 209.670700][ T55] block nbd0: Possible stuck request ffff88802504e380: control (read@2048,1024B). Runtime 90 seconds [ 209.682693][ T55] block nbd0: Possible stuck request ffff88802504e540: control (read@3072,1024B). Runtime 90 seconds [ 210.083099][ T9395] syzkaller1: entered promiscuous mode [ 210.088723][ T9395] syzkaller1: entered allmulticast mode [ 210.701007][ T9418] netlink: 5 bytes leftover after parsing attributes in process `syz.3.924'. [ 210.937425][ T49] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.008714][ T6054] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.040715][ T49] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.097701][ T6054] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.242723][ T9436] netlink: 'syz.1.932': attribute type 4 has an invalid length. [ 211.262221][ T9436] netlink: 'syz.1.932': attribute type 4 has an invalid length. [ 212.032943][ T9452] netlink: 84 bytes leftover after parsing attributes in process `syz.2.938'. [ 212.642569][ T9454] infiniband syz2: set down [ 212.654665][ T9454] infiniband syz2: added bond0 [ 212.718782][ T9454] RDS/IB: syz2: added [ 212.727899][ T9454] smc: adding ib device syz2 with port count 1 [ 212.744406][ T9454] smc: ib device syz2 port 1 has pnetid [ 212.751044][ T9469] lo speed is unknown, defaulting to 1000 [ 213.206619][ T9479] lo speed is unknown, defaulting to 1000 [ 215.348935][ T9501] lo speed is unknown, defaulting to 1000 [ 217.294423][ T9530] Unsupported ieee802154 address type: 0 [ 217.344932][ T9530] netlink: 12 bytes leftover after parsing attributes in process `syz.4.965'. [ 217.775937][ T9550] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 217.798617][ T9548] lo speed is unknown, defaulting to 1000 [ 218.114926][ T9559] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.212332][ T9559] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.286510][ T9559] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.384530][ T9559] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.612097][ T6054] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.735833][ T6054] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.864304][ T6056] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.020742][ T9576] Unsupported ieee802154 address type: 0 [ 219.027495][ T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.028274][ T9576] netlink: 12 bytes leftover after parsing attributes in process `syz.3.980'. [ 219.472975][ T9583] lo speed is unknown, defaulting to 1000 [ 219.912262][ T9599] netlink: 52 bytes leftover after parsing attributes in process `syz.3.989'. [ 219.955683][ T9599] netlink: 52 bytes leftover after parsing attributes in process `syz.3.989'. [ 220.163372][ T9605] netlink: 'syz.3.991': attribute type 4 has an invalid length. [ 220.548425][ T9613] netlink: 'syz.2.995': attribute type 11 has an invalid length. [ 220.705545][ T9619] netlink: 'syz.3.998': attribute type 29 has an invalid length. [ 220.730814][ T9619] netlink: 'syz.3.998': attribute type 29 has an invalid length. [ 220.760566][ T9619] netlink: 500 bytes leftover after parsing attributes in process `syz.3.998'. [ 221.117724][ T9626] lo speed is unknown, defaulting to 1000 [ 221.587801][ T9639] sctp: [Deprecated]: syz.4.1007 (pid 9639) Use of struct sctp_assoc_value in delayed_ack socket option. [ 221.587801][ T9639] Use struct sctp_sack_info instead [ 221.634552][ T9641] Unsupported ieee802154 address type: 0 [ 221.642765][ T9641] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1006'. [ 221.818763][ T9643] netlink: 'syz.4.1009': attribute type 4 has an invalid length. [ 221.972013][ T9652] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1011'. [ 223.073353][ T9670] netlink: 'syz.1.1017': attribute type 4 has an invalid length. [ 223.116902][ T9670] netlink: 'syz.1.1017': attribute type 4 has an invalid length. [ 224.392719][ T9688] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1022'. [ 224.512941][ T9683] lo speed is unknown, defaulting to 1000 [ 224.515367][ T9690] netlink: 'syz.3.1023': attribute type 4 has an invalid length. [ 224.813471][ T9695] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.908860][ T9695] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.033756][ T9695] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.137679][ T9695] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.412751][ T6054] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.578385][ T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.586824][ T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.683023][ T49] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.912159][ T9726] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.028219][ T9726] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.107247][ T9737] netlink: 'syz.3.1040': attribute type 4 has an invalid length. [ 226.145184][ T9726] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.241398][ T9726] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.521570][ T6054] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.533287][ T6054] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.711306][ T6054] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.749457][ T6054] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.848662][ T9748] lo speed is unknown, defaulting to 1000 [ 227.164159][ T9768] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 227.497744][ T9774] lo speed is unknown, defaulting to 1000 [ 228.314989][ T9785] netlink: 'syz.4.1054': attribute type 4 has an invalid length. [ 228.770995][ T9798] syzkaller1: entered allmulticast mode [ 229.312803][ T9801] lo speed is unknown, defaulting to 1000 [ 230.756152][ T9833] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1071'. [ 230.769433][ T9833] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1071'. [ 230.952669][ T9835] sctp: [Deprecated]: syz.1.1072 (pid 9835) Use of struct sctp_assoc_value in delayed_ack socket option. [ 230.952669][ T9835] Use struct sctp_sack_info instead [ 231.291353][ C1] vcan0: j1939_tp_rxtimer: 0xffff888058cd8400: rx timeout, send abort [ 231.372069][ T9845] syzkaller1: entered allmulticast mode [ 231.800702][ C1] vcan0: j1939_tp_rxtimer: 0xffff888058cd8400: abort rx timeout. Force session deactivation [ 232.408701][ T9869] netlink: 'syz.1.1084': attribute type 4 has an invalid length. [ 232.463172][ T9871] sctp: [Deprecated]: syz.4.1085 (pid 9871) Use of struct sctp_assoc_value in delayed_ack socket option. [ 232.463172][ T9871] Use struct sctp_sack_info instead [ 233.032330][ T9883] netlink: 'syz.3.1089': attribute type 4 has an invalid length. [ 233.064455][ T6611] lo speed is unknown, defaulting to 1000 [ 233.071723][ T9883] netlink: 'syz.3.1089': attribute type 4 has an invalid length. [ 233.080213][ T6611] s: Port: 1 Link DOWN [ 233.118670][ T6611] lo speed is unknown, defaulting to 1000 [ 233.146649][ T6611] lo speed is unknown, defaulting to 1000 [ 233.158872][ T9885] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.161171][ T6611] s: Port: 1 Link ACTIVE [ 233.263896][ T9885] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.416640][ T9885] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.535003][ T9885] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.650235][ T154] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.681778][ T6718] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.708755][ T154] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.788689][ T9907] bond0: entered promiscuous mode [ 233.794592][ T9907] bond_slave_0: entered promiscuous mode [ 233.807546][ T9907] bond_slave_1: entered promiscuous mode [ 233.818804][ T9907] batadv0: entered promiscuous mode [ 233.826360][ T9907] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 233.837339][ T9907] hsr1: entered allmulticast mode [ 233.842754][ T9907] bond0: entered allmulticast mode [ 233.848012][ T9907] bond_slave_0: entered allmulticast mode [ 233.854480][ T9907] bond_slave_1: entered allmulticast mode [ 233.868067][ T9907] batadv0: entered allmulticast mode [ 233.876582][ T9907] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 233.897020][ T9907] bond0: left promiscuous mode [ 233.903494][ T9907] bond_slave_0: left promiscuous mode [ 233.910110][ T9907] bond_slave_1: left promiscuous mode [ 233.918143][ T9907] batadv0: left promiscuous mode [ 233.945297][ T6718] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.116251][ T9914] netlink: 'syz.0.1101': attribute type 4 has an invalid length. [ 234.495286][ T9929] netlink: 'syz.1.1107': attribute type 4 has an invalid length. [ 234.520682][ T9929] netlink: 'syz.1.1107': attribute type 4 has an invalid length. [ 234.565820][ T9932] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1109'. [ 234.618962][ T9932] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1109'. [ 234.944584][ T9946] lo speed is unknown, defaulting to 1000 [ 236.125849][ T9965] syzkaller1: entered allmulticast mode [ 237.065523][ T9992] siw: device registration error -23 [ 237.262392][T10002] syzkaller1: entered allmulticast mode [ 237.277498][T10000] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1129'. [ 237.419189][T10006] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.484503][T10008] netlink: 596 bytes leftover after parsing attributes in process `syz.3.1132'. [ 237.510857][T10006] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.588372][T10006] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.646918][T10006] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.767109][ T6718] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.807698][ T49] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.853759][ T12] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.875408][T10025] syzkaller1: entered allmulticast mode [ 237.891228][ T12] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.170412][T10034] lo speed is unknown, defaulting to 1000 [ 238.808385][T10046] lo speed is unknown, defaulting to 1000 [ 239.723579][ T55] block nbd0: Possible stuck request ffff88802504e000: control (read@0,1024B). Runtime 120 seconds [ 239.735061][ T55] block nbd0: Possible stuck request ffff88802504e1c0: control (read@1024,1024B). Runtime 120 seconds [ 239.750252][ T55] block nbd0: Possible stuck request ffff88802504e380: control (read@2048,1024B). Runtime 120 seconds [ 239.761946][ T55] block nbd0: Possible stuck request ffff88802504e540: control (read@3072,1024B). Runtime 120 seconds [ 240.358825][T10076] syzkaller1: entered allmulticast mode [ 241.151799][T10103] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1159'. [ 241.265098][T10106] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.297025][T10105] netlink: 596 bytes leftover after parsing attributes in process `syz.0.1161'. [ 241.377819][T10106] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.458327][T10106] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.597690][T10106] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.771321][ T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.790865][T10126] lo speed is unknown, defaulting to 1000 [ 241.846840][ T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.865445][ T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.879822][T10132] syzkaller1: entered allmulticast mode [ 241.921136][ T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.723507][ T12] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 242.966091][T10160] lo speed is unknown, defaulting to 1000 [ 243.108816][T10168] netlink: 'syz.4.1178': attribute type 1 has an invalid length. [ 243.352560][T10173] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1180'. [ 243.882259][T10184] syzkaller1: entered allmulticast mode [ 244.025227][T10188] lo speed is unknown, defaulting to 1000 [ 244.552030][T10202] netlink: 596 bytes leftover after parsing attributes in process `syz.0.1189'. [ 245.081006][T10215] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1193'. [ 245.256497][T10217] lo speed is unknown, defaulting to 1000 [ 246.696309][T10240] netlink: 596 bytes leftover after parsing attributes in process `syz.0.1201'. [ 247.041900][T10244] syzkaller1: entered allmulticast mode [ 248.318179][T10273] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 248.324041][T10271] vcan0: tx drop: invalid da for name 0xfffffffffffffffb [ 248.368960][T10270] lo speed is unknown, defaulting to 1000 [ 248.483483][T10279] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 248.918677][T10288] lo speed is unknown, defaulting to 1000 [ 248.998128][T10283] syzkaller1: entered allmulticast mode [ 249.566131][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805523a800: rx timeout, send abort [ 249.661785][T10298] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1217'. [ 249.683999][T10298] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1217'. [ 249.759866][T10298] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1217'. [ 249.779714][ T13] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 249.779825][T10298] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1217'. [ 249.797765][ T13] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 249.858187][ T13] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 249.876520][ T13] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 249.991671][T10296] lo speed is unknown, defaulting to 1000 [ 250.074433][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805523a800: abort rx timeout. Force session deactivation [ 250.768457][T10329] netlink: 'syz.4.1225': attribute type 4 has an invalid length. [ 250.776619][T10325] syzkaller0: tun_chr_ioctl cmd 1074812117 [ 250.834592][T10331] netlink: 'syz.4.1225': attribute type 4 has an invalid length. [ 251.029134][T10334] lo speed is unknown, defaulting to 1000 [ 251.843118][T10344] netlink: 'syz.0.1231': attribute type 11 has an invalid length. [ 251.870331][T10344] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1231'. [ 251.948989][ T49] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 251.949128][T10344] netlink: 'syz.0.1231': attribute type 11 has an invalid length. [ 251.961126][ T49] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 251.980927][T10344] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1231'. [ 252.029828][ T49] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 252.058099][ T49] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 252.409035][T10349] lo speed is unknown, defaulting to 1000 [ 252.993553][T10362] syzkaller1: entered promiscuous mode [ 252.999065][T10362] syzkaller1: entered allmulticast mode [ 253.096265][T10364] netlink: 'syz.0.1237': attribute type 12 has an invalid length. [ 253.112771][T10364] netlink: 'syz.0.1237': attribute type 29 has an invalid length. [ 253.122208][T10364] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1237'. [ 253.134167][T10364] netlink: 'syz.0.1237': attribute type 12 has an invalid length. [ 253.172578][T10364] netlink: 'syz.0.1237': attribute type 29 has an invalid length. [ 253.219770][T10364] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1237'. [ 253.444810][T10372] netlink: 'syz.4.1241': attribute type 4 has an invalid length. [ 253.486365][T10372] netlink: 'syz.4.1241': attribute type 4 has an invalid length. [ 253.585937][T10375] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 254.756444][T10394] batadv_slave_1: entered promiscuous mode [ 254.792040][T10393] batadv_slave_1: left promiscuous mode [ 254.997072][T10404] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1254'. [ 255.084444][ T6054] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 255.100016][T10404] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1254'. [ 255.120408][ T6054] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 255.195007][ T6054] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 255.222000][ T6054] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 255.583042][T10422] lo speed is unknown, defaulting to 1000 [ 255.747597][T10428] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.814866][T10428] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.857171][T10430] validate_nla: 2 callbacks suppressed [ 255.857189][T10430] netlink: 'syz.1.1264': attribute type 8 has an invalid length. [ 255.885336][T10428] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.957918][T10428] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.134890][ T49] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.191884][ T49] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.201170][T10434] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 256.231200][ T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.264741][ T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.676096][T10439] "syz.0.1267" (10439) uses obsolete ecb(arc4) skcipher [ 256.708978][T10442] lo speed is unknown, defaulting to 1000 [ 257.098292][T10466] netlink: 'syz.1.1275': attribute type 4 has an invalid length. [ 257.479085][T10477] syzkaller1: entered allmulticast mode [ 258.242461][T10489] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.326406][T10494] netlink: 'syz.3.1282': attribute type 8 has an invalid length. [ 258.455162][T10489] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.688686][T10489] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.932060][T10489] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.045296][T10499] syzkaller1: entered allmulticast mode [ 259.454930][T10518] netlink: 'syz.0.1289': attribute type 4 has an invalid length. [ 259.837080][ T154] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.894176][ T154] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.094696][ T6054] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.147073][ T6054] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.542309][T10540] syzkaller1: entered allmulticast mode [ 260.703606][T10551] syzkaller1: entered allmulticast mode [ 260.880700][T10554] syzkaller1: entered allmulticast mode [ 260.942527][T10559] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 260.990099][T10559] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.120633][T10559] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 261.144024][T10559] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.215370][T10562] netlink: 'syz.4.1300': attribute type 7 has an invalid length. [ 261.266604][T10559] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 261.289941][T10559] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.386474][T10559] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 261.404935][T10559] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.461212][T10567] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 261.601619][ T6054] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 261.610207][ T6054] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.656684][ T49] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 261.689811][ T49] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.751235][T10571] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 261.824750][ T49] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 261.840218][ T49] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.853420][ T49] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 261.872760][ T49] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.001333][T10571] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 262.093407][T10574] netlink: 'syz.0.1303': attribute type 8 has an invalid length. [ 262.249032][T10571] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 262.361956][T10571] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 262.498010][T10599] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1312'. [ 262.636490][T10605] syzkaller1: entered allmulticast mode [ 262.875728][ T6054] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 262.924874][ T49] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 262.967000][ T13] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 263.016124][ T6054] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 263.229175][T10621] netlink: 'syz.4.1317': attribute type 14 has an invalid length. [ 263.262773][T10621] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1317'. [ 263.291264][T10617] syzkaller1: entered allmulticast mode [ 263.297482][T10621] netlink: 'syz.4.1317': attribute type 14 has an invalid length. [ 263.339199][T10621] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1317'. [ 263.365715][ T5230] udevd[5230]: worker [5911] /devices/virtual/block/nbd0 is taking a long time [ 263.977990][T10629] syzkaller1: entered allmulticast mode [ 264.687430][T10679] team0: Device gtp0 is of different type [ 264.776357][T10682] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 264.965352][T10686] lo speed is unknown, defaulting to 1000 [ 265.569511][T10712] syzkaller1: entered allmulticast mode [ 266.298449][T10726] netlink: 'syz.3.1346': attribute type 4 has an invalid length. [ 266.351367][T10727] netlink: 'syz.3.1346': attribute type 4 has an invalid length. [ 266.391161][ T5940] lo speed is unknown, defaulting to 1000 [ 266.451146][ T6606] lo speed is unknown, defaulting to 1000 [ 266.459027][T10729] syzkaller1: entered promiscuous mode [ 266.519686][T10729] syzkaller1: entered allmulticast mode [ 266.586772][ T5940] lo speed is unknown, defaulting to 1000 [ 267.279153][T10751] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 267.325664][T10751] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.449188][T10753] netlink: 'syz.4.1352': attribute type 8 has an invalid length. [ 267.522231][T10751] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 267.574552][T10751] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.675389][T10751] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 267.696329][T10751] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.783401][T10751] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 267.825767][T10751] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.142833][ T12] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 268.163012][ T12] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.268950][ T154] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 268.298774][ T154] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.327997][ T154] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 268.346863][ T154] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.395196][ T6054] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 268.409906][ T6054] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.450321][T10790] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1361'. [ 268.474331][T10789] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.551861][T10789] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.637375][T10789] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.736808][T10789] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.920084][ T49] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.952824][ T49] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.975196][T10812] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 269.048631][ T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.067837][T10812] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 269.128156][ T154] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.172123][T10812] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 269.463985][T10812] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 269.520036][T10824] lo speed is unknown, defaulting to 1000 [ 269.549879][T10836] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.635896][T10836] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.698266][T10841] netlink: 'syz.1.1375': attribute type 8 has an invalid length. [ 269.741325][T10836] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.803627][ T55] block nbd0: Possible stuck request ffff88802504e000: control (read@0,1024B). Runtime 150 seconds [ 269.816196][ T55] block nbd0: Possible stuck request ffff88802504e1c0: control (read@1024,1024B). Runtime 150 seconds [ 269.817966][T10836] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.828097][ T55] block nbd0: Possible stuck request ffff88802504e380: control (read@2048,1024B). Runtime 150 seconds [ 269.849734][ T55] block nbd0: Possible stuck request ffff88802504e540: control (read@3072,1024B). Runtime 150 seconds [ 269.916325][ T154] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 269.994175][ T154] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 270.065251][ T154] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 270.077497][ T154] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 271.774098][T10896] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 271.827729][T10896] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 271.870717][T10898] netlink: 'syz.2.1397': attribute type 8 has an invalid length. [ 271.916847][T10896] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 271.978412][T10896] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 272.105312][ T6054] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 272.163598][ T6054] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 272.207794][T10908] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1401'. [ 272.217545][ T6054] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 272.265072][ T154] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 272.392947][T10914] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 272.486501][T10917] netlink: 'syz.2.1403': attribute type 8 has an invalid length. [ 272.528845][T10915] lo speed is unknown, defaulting to 1000 [ 272.554186][T10914] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 272.713969][T10914] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 272.781644][T10914] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 272.851464][ T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.894687][ T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.933714][ T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.994740][ T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.698338][ T12] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 273.773833][ T49] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 273.810055][ T49] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 273.920058][T10942] syzkaller1: entered allmulticast mode [ 273.926840][T10947] netlink: 'syz.4.1411': attribute type 4 has an invalid length. [ 273.934883][ T49] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 273.978419][T10947] netlink: 'syz.4.1411': attribute type 4 has an invalid length. [ 274.172387][T10953] Unsupported ieee802154 address type: 0 [ 274.203250][T10953] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1413'. [ 275.652645][T10991] netlink: 'syz.3.1422': attribute type 8 has an invalid length. [ 275.946862][T11005] netlink: 'syz.4.1426': attribute type 4 has an invalid length. [ 276.023459][T11011] netlink: 'syz.4.1426': attribute type 4 has an invalid length. [ 276.483454][T11024] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 276.509438][T11024] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.601518][T11024] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 276.640470][T11024] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.690707][T11035] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1438'. [ 276.726738][T11036] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1437'. [ 276.744174][T11024] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 276.769472][T11024] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.781388][T11038] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1439'. [ 276.848245][T11024] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 276.875973][T11024] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.013222][T11041] netlink: 596 bytes leftover after parsing attributes in process `syz.1.1441'. [ 277.024855][ T6718] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 277.037750][ T6718] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.154993][ T6718] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 277.204540][ T6718] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.228667][ T6718] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 277.245418][ T6718] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.331971][ T6718] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 277.369826][ T6718] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.964782][T11069] syzkaller1: entered allmulticast mode [ 278.362976][T11086] nbd: nbd0 already in use [ 278.370716][T11086] nbd: nbd0 already in use [ 278.537233][T11095] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1458'. [ 278.976828][T11103] syzkaller0: entered promiscuous mode [ 279.000527][T11103] syzkaller0: entered allmulticast mode [ 281.646622][T11131] lo speed is unknown, defaulting to 1000 [ 281.906973][T11143] netlink: 'syz.4.1471': attribute type 4 has an invalid length. [ 281.926640][T11143] netlink: 'syz.4.1471': attribute type 4 has an invalid length. [ 282.740322][T11169] syzkaller1: entered promiscuous mode [ 282.746277][T11169] syzkaller1: entered allmulticast mode [ 283.048409][T11177] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1483'. [ 283.472752][T11190] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.662944][T11190] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.802651][T11203] netlink: 'syz.2.1490': attribute type 4 has an invalid length. [ 283.857722][T11205] netlink: 'syz.2.1490': attribute type 4 has an invalid length. [ 283.870480][T11190] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.052716][T11190] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.295035][T11218] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 284.344924][ T6056] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.416374][ T49] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.498357][ T6054] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.581025][ T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.668548][T11222] lo speed is unknown, defaulting to 1000 [ 284.921868][T11233] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1499'. [ 286.855909][T11298] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 286.936394][T11290] syzkaller1: entered allmulticast mode [ 287.140369][T11299] lo speed is unknown, defaulting to 1000 [ 287.981636][T11317] lo speed is unknown, defaulting to 1000 [ 288.347125][T11335] tipc: Started in network mode [ 288.379012][T11335] tipc: Node identity de5a97611329, cluster identity 4711 [ 288.401487][T11335] tipc: Enabled bearer , priority 0 [ 288.797334][T11338] syzkaller0: entered promiscuous mode [ 288.812276][T11338] syzkaller0: entered allmulticast mode [ 288.840243][T11338] tipc: Resetting bearer [ 288.989872][ T6056] tipc: Resetting bearer [ 289.023434][T11334] tipc: Resetting bearer [ 289.450610][ T6605] tipc: Node number set to 3446904673 [ 290.953207][T11334] tipc: Disabling bearer [ 290.994608][T11358] syzkaller1: entered allmulticast mode [ 292.080301][T11374] lec:lec_vcc_attach: copy from user failed for 28 bytes [ 292.442352][T11393] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1539'. [ 292.588428][T11397] netlink: 'syz.2.1540': attribute type 4 has an invalid length. [ 292.617073][T11397] netlink: 'syz.2.1540': attribute type 4 has an invalid length. [ 293.117038][T11411] syzkaller1: entered allmulticast mode [ 293.368952][T11420] netlink: 'syz.4.1548': attribute type 39 has an invalid length. [ 293.440688][T11422] lo speed is unknown, defaulting to 1000 [ 293.963289][T11434] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 294.302540][T11443] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1558'. [ 294.689155][T11455] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1562'. [ 294.864678][T11469] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1562'. [ 295.260007][T11478] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1567'. [ 295.457155][T11477] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 295.586328][T11482] bridge0: port 2(bridge_slave_1) entered disabled state [ 295.593658][T11482] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.737698][T11487] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 295.947644][T11482] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 295.975354][T11482] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 296.324807][T11482] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 296.405161][ T3584] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 296.428121][ T3584] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.448339][ T3584] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 296.474089][ T3584] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.542931][ T3584] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 296.578921][ T3584] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.601881][T11510] syzkaller1: entered promiscuous mode [ 296.607399][T11510] syzkaller1: entered allmulticast mode [ 296.618767][ T3584] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 296.658556][ T3584] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.915245][T11519] lo speed is unknown, defaulting to 1000 [ 297.068357][T11524] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 297.149043][T11529] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1579'. [ 297.181214][T11526] ip6tnl0: mtu less than device minimum [ 297.386795][T11533] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1582'. [ 297.848065][T11545] lo speed is unknown, defaulting to 1000 [ 298.191822][T11556] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1591'. [ 299.377725][T11577] IPv4: Oversized IP packet from 127.202.26.0 [ 299.656441][T11580] netlink: 'syz.3.1596': attribute type 8 has an invalid length. [ 299.882477][ T55] block nbd0: Possible stuck request ffff88802504e000: control (read@0,1024B). Runtime 180 seconds [ 299.894745][ T55] block nbd0: Possible stuck request ffff88802504e1c0: control (read@1024,1024B). Runtime 180 seconds [ 299.907215][ T55] block nbd0: Possible stuck request ffff88802504e380: control (read@2048,1024B). Runtime 180 seconds [ 299.926781][ T55] block nbd0: Possible stuck request ffff88802504e540: control (read@3072,1024B). Runtime 180 seconds [ 300.017819][T11588] team0: No ports can be present during mode change [ 300.276661][T11592] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1601'. [ 300.461553][T11601] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1605'. [ 300.479677][T11600] lo speed is unknown, defaulting to 1000 [ 300.568119][T11604] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 301.017011][T11612] lo speed is unknown, defaulting to 1000 [ 303.652319][T11666] lo speed is unknown, defaulting to 1000 [ 305.783408][T11718] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1626'. [ 306.596133][ T5230] udevd[5230]: worker [5911] /devices/virtual/block/nbd0 timeout; kill it [ 306.606108][ T5230] udevd[5230]: seq 12891 '/devices/virtual/block/nbd0' killed [ 307.319661][T11751] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1634'. [ 307.337512][T11751] netlink: 'syz.0.1634': attribute type 7 has an invalid length. [ 307.356719][T11751] netlink: 'syz.0.1634': attribute type 8 has an invalid length. [ 307.387259][T11751] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1634'. [ 307.426988][T11751] ip6gretap0: entered promiscuous mode [ 307.434868][T11751] syz_tun: entered promiscuous mode [ 307.442130][T11751] ip6gretap0: left promiscuous mode [ 307.448772][T11751] syz_tun: left promiscuous mode [ 308.008367][T11781] netlink: 'syz.4.1640': attribute type 8 has an invalid length. [ 308.432130][T11778] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 309.236347][T11807] syzkaller1: entered allmulticast mode [ 309.360905][T11821] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1651'. [ 309.772666][T11831] lo speed is unknown, defaulting to 1000 [ 309.856453][T11836] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1657'. [ 310.398773][T11856] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1663'. [ 310.461702][T11856] ip6gretap0: entered promiscuous mode [ 310.505629][T11856] ip6gretap0: left promiscuous mode [ 310.768825][T11867] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 310.856503][T11867] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1665'. [ 310.899827][T11867] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1665'. [ 311.200649][T11879] lo speed is unknown, defaulting to 1000 [ 311.436982][T11892] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1672'. [ 311.565487][T11892] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check. [ 311.759983][T11904] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 311.788937][T11902] tipc: Enabled bearer , priority 0 [ 311.818429][T11906] IPv6: Can't replace route, no match found [ 311.819880][T11902] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode [ 311.858541][T11902] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode [ 312.046324][T11907] tipc: Resetting bearer [ 312.285867][T11919] lo speed is unknown, defaulting to 1000 [ 312.436018][T11922] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1681'. [ 312.890445][ T1166] tipc: Node number set to 117440512 [ 313.989391][T11949] Unsupported ieee802154 address type: 0 [ 314.023247][T11949] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1686'. [ 314.477375][T11960] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1688'. [ 314.698455][T11963] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 314.860806][T11963] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 315.056958][T11963] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 315.155759][T11970] lo speed is unknown, defaulting to 1000 [ 315.157523][T11963] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 315.306463][ T6056] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 315.338703][ T3573] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 315.454246][ T3573] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 315.473305][ T3573] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 315.811741][T11994] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1698'. [ 315.851769][T11994] macvlan2: entered promiscuous mode [ 315.866046][T11994] bond0: entered promiscuous mode [ 315.886233][T11994] bond_slave_0: entered promiscuous mode [ 315.908587][T11994] bond_slave_1: entered promiscuous mode [ 315.947270][T11994] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 318.680133][T12039] tipc: Enabled bearer , priority 0 [ 318.705936][T12039] syzkaller0: entered promiscuous mode [ 318.715042][T12039] syzkaller0: entered allmulticast mode [ 318.781953][T12039] tipc: Resetting bearer [ 318.798272][T12038] tipc: Resetting bearer [ 318.852088][T12038] tipc: Disabling bearer [ 318.866860][T12053] Unsupported ieee802154 address type: 0 [ 318.874137][T12045] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1710'. [ 318.884208][T12053] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1711'. [ 319.585349][T12067] tipc: Enabled bearer , priority 0 [ 319.612870][T12067] syzkaller0: entered promiscuous mode [ 319.621473][T12067] syzkaller0: entered allmulticast mode [ 319.697658][T12067] tipc: Resetting bearer [ 319.721795][T12066] tipc: Resetting bearer [ 319.761321][T12066] tipc: Disabling bearer [ 319.785615][T12076] tipc: Enabled bearer , priority 0 [ 319.820053][T12082] syzkaller0: entered promiscuous mode [ 319.825718][T12082] syzkaller0: entered allmulticast mode [ 319.881669][T12080] syzkaller1: entered allmulticast mode [ 320.127775][T12090] tipc: Resetting bearer [ 320.177871][T12075] tipc: Resetting bearer [ 320.270448][T12075] tipc: Disabling bearer [ 320.337982][T12099] tipc: Started in network mode [ 320.356779][T12099] tipc: Node identity ee61b7f81cac, cluster identity 4711 [ 320.367728][T12099] tipc: Enabled bearer , priority 0 [ 320.388333][T12089] lo speed is unknown, defaulting to 1000 [ 320.480872][T12104] syzkaller0: entered promiscuous mode [ 320.530816][T12104] syzkaller0: entered allmulticast mode [ 320.585839][T12104] tipc: Resetting bearer [ 320.626914][T12098] tipc: Resetting bearer [ 320.666513][T12098] tipc: Disabling bearer [ 320.913605][T12118] tipc: Enabled bearer , priority 0 [ 321.071405][T12118] syzkaller0: entered promiscuous mode [ 321.119205][T12118] syzkaller0: entered allmulticast mode [ 321.265635][T12117] tipc: Resetting bearer [ 321.481491][T12117] tipc: Disabling bearer [ 321.574939][T12127] tipc: Enabled bearer , priority 0 [ 321.584556][T12128] syzkaller0: entered promiscuous mode [ 321.605194][T12128] syzkaller0: entered allmulticast mode [ 321.852302][T12123] tipc: Resetting bearer [ 321.967677][T12122] tipc: Resetting bearer [ 322.018636][T12122] tipc: Disabling bearer [ 322.522334][T12149] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 322.629334][T12157] tipc: Enabled bearer , priority 0 [ 322.645517][T12157] syzkaller0: entered promiscuous mode [ 322.654293][T12157] syzkaller0: entered allmulticast mode [ 322.716309][T12149] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 323.027654][T12166] tipc: Resetting bearer [ 323.082074][T12149] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 323.132255][T12156] tipc: Resetting bearer [ 323.167559][T12156] tipc: Disabling bearer [ 323.232393][T12149] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 323.492193][ T6720] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 323.500768][ T6720] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 323.522606][ T3573] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 323.554591][T12177] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1735'. [ 323.617794][T12177] bond2: entered promiscuous mode [ 323.629891][T12177] 8021q: adding VLAN 0 to HW filter on device bond2 [ 323.752334][T12177] bond2 (unregistering): Released all slaves [ 323.777049][T12179] tipc: Enabled bearer , priority 0 [ 323.785019][T12184] syzkaller0: entered promiscuous mode [ 323.791492][T12186] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 323.802150][T12184] syzkaller0: entered allmulticast mode [ 323.813219][T12182] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 323.850662][T12182] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 323.853743][T12179] tipc: Resetting bearer [ 323.903838][ T6720] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 323.932839][T12178] tipc: Resetting bearer [ 323.981668][T12178] tipc: Disabling bearer [ 324.300301][T12197] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.368231][T12195] tipc: Enabled bearer , priority 0 [ 324.387614][T12195] syzkaller0: entered promiscuous mode [ 324.436972][T12195] syzkaller0: entered allmulticast mode [ 324.502824][T12197] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.602118][T12197] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.636110][T12195] tipc: Resetting bearer [ 324.655647][T12194] tipc: Resetting bearer [ 324.710324][T12194] tipc: Disabling bearer [ 324.724728][T12212] tipc: Enabling of bearer rejected, already enabled [ 324.742388][T12197] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.800173][T12214] tipc: Enabled bearer , priority 0 [ 324.812447][T12214] syzkaller0: entered promiscuous mode [ 324.817956][T12214] syzkaller0: entered allmulticast mode [ 324.919150][T12216] tipc: Enabled bearer , priority 0 [ 324.948384][ T3573] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.961353][T12216] syzkaller0: entered promiscuous mode [ 324.968144][T12216] syzkaller0: entered allmulticast mode [ 324.978787][T12214] tipc: Resetting bearer [ 325.000275][T12220] netlink: zone id is out of range [ 325.008811][T12220] netlink: zone id is out of range [ 325.014511][T12220] netlink: zone id is out of range [ 325.020159][T12220] netlink: zone id is out of range [ 325.025286][T12220] netlink: zone id is out of range [ 325.039976][T12220] netlink: zone id is out of range [ 325.059447][T12220] netlink: zone id is out of range [ 325.065557][T12226] netlink: del zone limit has 4 unknown bytes [ 325.074536][T12216] tipc: Resetting bearer [ 325.101550][T12213] tipc: Resetting bearer [ 325.147142][T12213] tipc: Disabling bearer [ 325.157224][T12220] netlink: set zone limit has 4 unknown bytes [ 325.165151][ T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.183988][ T36] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.195142][T12215] tipc: Resetting bearer [ 325.251795][T12215] tipc: Disabling bearer [ 325.288229][T12224] lo speed is unknown, defaulting to 1000 [ 325.313854][ T6720] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.562325][T12238] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 325.623643][T12236] syzkaller1: entered allmulticast mode [ 325.905904][T12245] tipc: Enabled bearer , priority 0 [ 325.947155][T12245] syzkaller0: entered promiscuous mode [ 325.974249][T12245] syzkaller0: entered allmulticast mode [ 326.028238][T12247] wireguard0: entered promiscuous mode [ 326.034400][T12247] wireguard0: entered allmulticast mode [ 326.067133][T12245] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 326.104698][T12245] tipc: Resetting bearer [ 326.148393][T12244] tipc: Resetting bearer [ 326.210264][T12244] tipc: Disabling bearer [ 326.346240][T12251] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1757'. [ 326.397535][T12251] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1757'. [ 326.527513][T12255] netlink: 252 bytes leftover after parsing attributes in process `syz.4.1758'. [ 326.606437][T12257] tipc: Enabled bearer , priority 0 [ 326.620674][T12257] syzkaller0: entered promiscuous mode [ 326.626370][T12257] syzkaller0: entered allmulticast mode [ 326.673990][T12257] tipc: Resetting bearer [ 326.717660][T12260] syzkaller0: entered promiscuous mode [ 326.723352][T12260] syzkaller0: entered allmulticast mode [ 326.732128][T12253] tipc: Resetting bearer [ 326.748545][T12253] tipc: Disabling bearer [ 329.115501][T12268] tipc: Enabling of bearer rejected, failed to enable media [ 329.252329][T12297] netlink: 'syz.2.1765': attribute type 1 has an invalid length. [ 329.357698][T12297] 8021q: adding VLAN 0 to HW filter on device bond1 [ 329.468352][T12302] tipc: Enabled bearer , priority 0 [ 329.506477][T12306] syzkaller0: entered promiscuous mode [ 329.515144][T12306] syzkaller0: entered allmulticast mode [ 329.552260][T12310] tipc: Enabled bearer , priority 0 [ 329.591774][T12310] syzkaller0: entered promiscuous mode [ 329.605919][T12310] syzkaller0: entered allmulticast mode [ 329.626199][T12302] tipc: Resetting bearer [ 329.661205][T12299] tipc: Resetting bearer [ 329.711798][T12299] tipc: Disabling bearer [ 329.738173][T12310] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 329.785764][T12320] tipc: Resetting bearer [ 329.814345][T12309] tipc: Resetting bearer [ 329.858810][T12309] tipc: Disabling bearer [ 329.970257][ T55] block nbd0: Possible stuck request ffff88802504e000: control (read@0,1024B). Runtime 210 seconds [ 329.981912][ T55] block nbd0: Possible stuck request ffff88802504e1c0: control (read@1024,1024B). Runtime 210 seconds [ 329.993720][ T55] block nbd0: Possible stuck request ffff88802504e380: control (read@2048,1024B). Runtime 210 seconds [ 329.999848][T12326] tipc: Enabled bearer , priority 0 [ 330.005603][ T55] block nbd0: Possible stuck request ffff88802504e540: control (read@3072,1024B). Runtime 210 seconds [ 330.048004][T12331] syzkaller1: entered allmulticast mode [ 330.070343][T12326] syzkaller0: entered promiscuous mode [ 330.076735][T12331] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1772'. [ 330.094478][T12326] syzkaller0: entered allmulticast mode [ 330.189912][T12305] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 330.196086][T12305] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 330.207512][T12326] tipc: Resetting bearer [ 330.252279][T12305] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 330.268468][T12323] tipc: Resetting bearer [ 330.275712][T12305] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 330.313558][T12323] tipc: Disabling bearer [ 330.319775][T12305] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 330.319816][T12305] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 330.350546][T12305] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 330.358824][T12305] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 330.409766][T12336] tipc: Enabled bearer , priority 0 [ 330.418332][T12336] syzkaller0: entered promiscuous mode [ 330.426682][T12336] syzkaller0: entered allmulticast mode [ 330.484373][T12338] tipc: Enabled bearer , priority 0 [ 330.504419][T12341] syzkaller0: entered promiscuous mode [ 330.518724][T12341] syzkaller0: entered allmulticast mode [ 330.568490][T12305] tipc: Resetting bearer [ 330.670047][T12336] tipc: Resetting bearer [ 330.713043][T12335] tipc: Resetting bearer [ 330.735150][T12335] tipc: Disabling bearer [ 330.771681][T12338] tipc: Resetting bearer [ 330.793781][T12337] tipc: Resetting bearer [ 330.836558][T12337] tipc: Disabling bearer [ 331.349056][T12370] tipc: Enabled bearer , priority 0 [ 331.376690][T12370] syzkaller0: entered promiscuous mode [ 331.395564][T12370] syzkaller0: entered allmulticast mode [ 331.455626][T12373] tipc: Enabled bearer , priority 0 [ 331.508437][T12375] lo speed is unknown, defaulting to 1000 [ 331.592609][T12370] tipc: Resetting bearer [ 331.730655][T12373] syzkaller0: entered promiscuous mode [ 331.739009][T12373] syzkaller0: entered allmulticast mode [ 331.748317][T12380] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 331.824892][T12369] tipc: Resetting bearer [ 332.002954][T12369] tipc: Disabling bearer [ 332.057266][T12373] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1782'. [ 332.110548][T12378] tipc: Resetting bearer [ 332.120031][T12372] tipc: Resetting bearer [ 332.252922][T12372] tipc: Disabling bearer [ 332.348046][T12392] tipc: Enabled bearer , priority 0 [ 332.366140][T12396] syzkaller0: entered promiscuous mode [ 332.409863][T12396] syzkaller0: entered allmulticast mode [ 332.526970][T12391] lo speed is unknown, defaulting to 1000 [ 332.530798][T12387] tipc: Resetting bearer [ 332.556102][T12385] tipc: Resetting bearer [ 332.611022][T12385] tipc: Disabling bearer [ 333.113323][T12419] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1791'. [ 333.149949][T12419] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1791'. [ 333.181564][T12419] netlink: 'syz.1.1791': attribute type 1 has an invalid length. [ 333.210683][T12419] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1791'. [ 333.311829][T12419] nbd: socks must be embedded in a SOCK_ITEM attr [ 333.323417][T12419] block nbd1: shutting down sockets [ 333.581908][T12427] tipc: Enabled bearer , priority 0 [ 333.614571][T12427] syzkaller0: entered promiscuous mode [ 333.634225][T12427] syzkaller0: entered allmulticast mode [ 333.893982][T12438] tipc: Resetting bearer [ 334.034578][T12425] tipc: Resetting bearer [ 334.136400][T12425] tipc: Disabling bearer [ 334.564214][T12451] lo speed is unknown, defaulting to 1000 [ 334.576792][T12454] tipc: Enabled bearer , priority 0 [ 334.598490][T12454] syzkaller0: entered promiscuous mode [ 334.616217][T12454] syzkaller0: entered allmulticast mode [ 334.714009][T12454] tipc: Resetting bearer [ 334.748798][T12452] tipc: Resetting bearer [ 334.875974][T12452] tipc: Disabling bearer [ 334.984342][T12461] netlink: 'syz.0.1800': attribute type 1 has an invalid length. [ 335.120977][T12461] 8021q: adding VLAN 0 to HW filter on device bond1 [ 335.282505][T12468] vlan2: entered promiscuous mode [ 335.299076][T12468] bond1: entered promiscuous mode [ 335.321788][T12468] vlan2: entered allmulticast mode [ 335.336221][T12468] bond1: entered allmulticast mode [ 335.422862][T12469] bond1: (slave gretap2): making interface the new active one [ 335.439921][T12469] gretap2: entered promiscuous mode [ 335.448971][T12469] gretap2: entered allmulticast mode [ 335.480593][T12469] bond1: (slave gretap2): Enslaving as an active interface with an up link [ 335.677174][T12480] netlink: 248 bytes leftover after parsing attributes in process `syz.0.1803'. [ 335.840868][T12473] lo speed is unknown, defaulting to 1000 [ 336.028693][T12489] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 336.266246][T12489] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 336.491034][T12496] netlink: 17 bytes leftover after parsing attributes in process `syz.3.1806'. [ 336.574899][T12489] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 336.609640][T12496] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1806'. [ 336.703776][T12489] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 336.890004][T12509] syzkaller1: entered promiscuous mode [ 336.895523][T12509] syzkaller1: entered allmulticast mode [ 337.124390][ T3573] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 337.177603][ T3573] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 337.257653][ T3573] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 337.286317][ T3573] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 337.575713][T12520] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1810'. [ 337.805350][T12532] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 338.757781][T12562] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1818'. [ 338.810573][T12562] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1818'. [ 338.852119][T12562] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1818'. [ 338.890158][T12568] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1820'. [ 338.899427][T12562] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1818'. [ 338.911630][T12569] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 339.106258][T12573] lo speed is unknown, defaulting to 1000 [ 339.289871][T12586] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1823'. [ 339.330403][T12586] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1823'. [ 339.381238][T12586] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1823'. [ 339.399386][T12586] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1823'. [ 339.916079][T12595] tipc: Enabled bearer , priority 0 [ 339.955040][T12595] syzkaller0: entered promiscuous mode [ 340.009613][T12595] syzkaller0: entered allmulticast mode [ 340.123441][T12608] tipc: Resetting bearer [ 340.160672][T12594] tipc: Resetting bearer [ 340.208352][T12594] tipc: Disabling bearer [ 340.557530][T12619] lo speed is unknown, defaulting to 1000 [ 340.821629][T12626] syzkaller1: entered allmulticast mode [ 341.923846][T12647] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 341.971710][T12635] lo speed is unknown, defaulting to 1000 [ 342.177185][T12654] batadv0: entered promiscuous mode [ 342.197519][T12654] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 342.235888][T12654] batadv0: left promiscuous mode [ 342.414981][T12650] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 342.978278][T12676] tipc: Enabled bearer , priority 0 [ 343.006275][T12676] syzkaller0: entered promiscuous mode [ 343.028880][T12676] syzkaller0: entered allmulticast mode [ 343.106331][T12676] tipc: Resetting bearer [ 343.136894][T12662] lo speed is unknown, defaulting to 1000 [ 343.272528][T12682] tipc: Enabling of bearer rejected, already enabled [ 343.713709][T12671] lo speed is unknown, defaulting to 1000 [ 343.997017][T12692] __nla_validate_parse: 2 callbacks suppressed [ 343.997035][T12692] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1842'. [ 344.008002][T12700] netlink: zone id is out of range [ 344.046577][T12700] netlink: zone id is out of range [ 344.082003][T12700] netlink: zone id is out of range [ 344.094169][T12701] netlink: del zone limit has 4 unknown bytes [ 344.097424][T12700] netlink: zone id is out of range [ 344.106052][ T5933] tipc: Node number set to 24339 [ 344.112667][T12700] netlink: zone id is out of range [ 344.118018][T12700] netlink: zone id is out of range [ 344.138334][T12700] netlink: zone id is out of range [ 344.292996][T12700] netlink: set zone limit has 4 unknown bytes [ 344.534985][T12708] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1846'. [ 344.545408][T12708] bridge0: port 3(macvlan1) entered blocking state [ 344.555071][T12708] bridge0: port 3(macvlan1) entered disabled state [ 344.563295][T12708] macvlan1: entered allmulticast mode [ 344.574278][T12708] macvlan1: entered promiscuous mode [ 344.773437][T12715] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1848'. [ 344.803758][T12715] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 345.299135][T12730] lo speed is unknown, defaulting to 1000 [ 347.213897][T12790] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1858'. [ 347.324898][T12790] bond1: entered promiscuous mode [ 347.345906][T12790] 8021q: adding VLAN 0 to HW filter on device bond1 [ 347.922743][T12790] bond1 (unregistering): Released all slaves [ 348.254448][T12801] lo speed is unknown, defaulting to 1000 [ 348.264641][T12819] x9: left allmulticast mode [ 348.285553][T12819] x9: left promiscuous mode [ 348.300065][T12819] bridge0: port 1(1x9) entered disabled state [ 348.343714][T12821] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1862'. [ 348.386767][T12819] bridge_slave_1: left allmulticast mode [ 348.398921][T12819] bridge_slave_1: left promiscuous mode [ 348.405324][T12819] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.442549][T12819] bond0: (slave bond_slave_0): Releasing backup interface [ 348.452795][T12819] bond_slave_0: left promiscuous mode [ 348.472889][T12819] bond0: (slave bond_slave_1): Releasing backup interface [ 348.490673][T12819] bond_slave_1: left promiscuous mode [ 348.501129][T12819] team0: Port device team_slave_0 removed [ 348.511264][T12819] team0: Port device team_slave_1 removed [ 348.517457][T12819] macvlan1: left allmulticast mode [ 348.524509][T12819] macvlan1: left promiscuous mode [ 348.530302][T12819] bridge0: port 3(macvlan1) entered disabled state [ 348.544879][T12821] team0: Mode changed to "broadcast" [ 348.552516][T12822] vlan0: entered promiscuous mode [ 348.643478][T12823] tipc: Enabled bearer , priority 0 [ 348.746847][T12825] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1863'. [ 348.756325][T12825] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1863'. [ 348.827486][T12825] Bluetooth: MGMT ver 1.23 [ 348.861008][T12825] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.1863'. [ 348.963095][T12832] openvswitch: netlink: Flow actions attr not present in new flow. [ 350.207420][T12841] lo speed is unknown, defaulting to 1000 [ 350.603693][T12858] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 350.993171][T12865] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 351.123213][T12869] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 351.212852][T12862] lo speed is unknown, defaulting to 1000 [ 351.344895][T12875] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1878'. [ 351.586775][T12882] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 351.672993][T12886] netlink: 'syz.3.1880': attribute type 4 has an invalid length. [ 351.724740][T12888] netlink: 'syz.3.1880': attribute type 4 has an invalid length. [ 352.079901][ T1166] lo speed is unknown, defaulting to 1000 [ 352.099690][ T9] lo speed is unknown, defaulting to 1000 [ 352.110579][ T5983] lo speed is unknown, defaulting to 1000 [ 352.842648][T12906] Unsupported ieee802154 address type: 0 [ 352.850975][T12906] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1883'. [ 352.979458][T12911] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1884'. [ 353.100086][T12914] : renamed from batadv_slave_1 (while UP) [ 353.144373][T12917] openvswitch: netlink: Tunnel attr 227 out of range max 16 [ 354.300200][T12946] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1892'. [ 354.428319][T12948] syzkaller0: left promiscuous mode [ 354.444523][T12948] syzkaller0: left allmulticast mode [ 355.090350][T12956] Unsupported ieee802154 address type: 0 [ 355.119668][T12956] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1896'. [ 355.630287][T12962] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1898'. [ 355.649990][T12962] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1898'. [ 355.687114][T12962] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1898'. [ 355.913991][T12969] lo speed is unknown, defaulting to 1000 [ 356.565312][T12979] netlink: 'syz.1.1901': attribute type 1 has an invalid length. [ 356.584371][T12979] netlink: 'syz.1.1901': attribute type 1 has an invalid length. [ 356.620003][T12979] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1901'. [ 356.650426][T12976] lo speed is unknown, defaulting to 1000 [ 357.239326][T12985] veth1_macvtap: left promiscuous mode [ 357.348537][T12985] veth1_macvtap: entered promiscuous mode [ 358.072219][T12993] vlan2: entered promiscuous mode [ 358.099834][T12993] macvtap0: entered promiscuous mode [ 358.123715][T12992] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1906'. [ 358.283662][T12996] veth0_to_team: left promiscuous mode [ 358.289192][T12996] veth0_to_team: left allmulticast mode [ 358.907411][T13015] netlink: 'syz.4.1910': attribute type 16 has an invalid length. [ 358.917890][T13015] netlink: 'syz.4.1910': attribute type 17 has an invalid length. [ 359.031811][T13015] 8021q: adding VLAN 0 to HW filter on device bond0 [ 359.043232][T13015] 8021q: adding VLAN 0 to HW filter on device team0 [ 359.083391][T13015] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 359.161665][T13003] lo speed is unknown, defaulting to 1000 [ 360.040430][ T55] block nbd0: Possible stuck request ffff88802504e000: control (read@0,1024B). Runtime 240 seconds [ 360.052074][ T55] block nbd0: Possible stuck request ffff88802504e1c0: control (read@1024,1024B). Runtime 240 seconds [ 360.063847][ T55] block nbd0: Possible stuck request ffff88802504e380: control (read@2048,1024B). Runtime 240 seconds [ 360.075977][ T55] block nbd0: Possible stuck request ffff88802504e540: control (read@3072,1024B). Runtime 240 seconds [ 360.320003][T13034] bridge0: entered allmulticast mode [ 360.375618][T13034] pim6reg: entered allmulticast mode [ 360.550346][T13041] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1915'. [ 360.612897][T13041] macvtap1: entered promiscuous mode [ 360.618225][T13041] batadv0: entered promiscuous mode [ 360.657526][T13041] macvtap1: entered allmulticast mode [ 360.676788][T13041] batadv0: entered allmulticast mode [ 360.701278][T13041] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 360.730788][T13042] batadv0: left allmulticast mode [ 360.749003][T13042] batadv0: left promiscuous mode [ 360.795967][T13044] pimreg: entered allmulticast mode [ 361.334784][T13052] lo speed is unknown, defaulting to 1000 [ 361.634442][T13058] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 362.553353][T13074] netlink: 'syz.3.1926': attribute type 1 has an invalid length. [ 362.561216][T13074] netlink: 208 bytes leftover after parsing attributes in process `syz.3.1926'. [ 362.654231][T13077] syzkaller0: entered promiscuous mode [ 362.685585][T13077] syzkaller0: entered allmulticast mode [ 363.331891][T13088] lo speed is unknown, defaulting to 1000 [ 363.466209][T13096] netlink: 192 bytes leftover after parsing attributes in process `syz.3.1931'. [ 363.475586][T13096] netlink: zone id is out of range [ 363.481361][T13096] netlink: zone id is out of range [ 363.490210][T13096] netlink: zone id is out of range [ 363.497045][T13096] netlink: zone id is out of range [ 363.502679][T13096] netlink: zone id is out of range [ 363.507880][T13096] netlink: zone id is out of range [ 363.550139][T13096] netlink: zone id is out of range [ 363.578929][T13096] netlink: zone id is out of range [ 364.146327][T13106] netlink: 'syz.3.1932': attribute type 1 has an invalid length. [ 364.154268][T13106] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1932'. [ 364.173044][T13106] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1932'. [ 365.384916][T13134] s: rxe_newlink: already configured on lo [ 365.449661][T13133] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 365.883425][T13148] IPVS: length: 148 != 24 [ 366.120671][T13156] net_ratelimit: 30 callbacks suppressed [ 366.120692][T13156] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 366.240421][T13156] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1941'. [ 366.311530][T13164] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 366.571868][T13164] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 366.963985][T13164] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 367.063166][T13178] lo speed is unknown, defaulting to 1000 [ 367.146696][T13164] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 367.446809][ T6720] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 367.455259][ T6720] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 367.519999][ T3573] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 367.575938][ T3573] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 367.793578][T13199] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1947'. [ 367.831621][T13199] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1947'. [ 367.942758][T13204] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1948'. [ 367.955709][T13204] bridge_slave_1: left allmulticast mode [ 367.969870][T13204] bridge_slave_1: left promiscuous mode [ 367.975812][T13204] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.029185][T13204] bridge_slave_0: left allmulticast mode [ 368.054957][T13204] bridge_slave_0: left promiscuous mode [ 368.073188][T13204] bridge0: port 1(bridge_slave_0) entered disabled state [ 368.353632][T13214] team0: No ports can be present during mode change [ 368.383036][T13217] vlan0: entered promiscuous mode [ 368.427578][T13220] tipc: Enabled bearer , priority 0 [ 368.521656][T13221] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1951'. [ 368.581077][T13221] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1951'. [ 368.726363][T13226] netlink: 'syz.0.1952': attribute type 4 has an invalid length. [ 368.747409][T13226] netlink: 'syz.0.1952': attribute type 4 has an invalid length. [ 369.371925][T13241] team0: Device gtp0 is of different type [ 370.184721][T13258] lo speed is unknown, defaulting to 1000 [ 370.746120][T13270] svc: failed to register nfsdv3 RPC service (errno 111). [ 370.802210][T13270] svc: failed to register nfsaclv3 RPC service (errno 111). [ 371.536777][T13283] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.665508][T13291] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1963'. [ 371.693917][T13283] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.844513][T13301] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1964'. [ 371.903959][ T5230] udevd[5230]: worker [5996] terminated by signal 33 (Unknown signal 33) [ 372.406393][T13291] bond0: (slave team0): Releasing backup interface [ 372.423018][T13291] team0 (unregistering): Port device team_slave_0 removed [ 372.433510][T13291] team0 (unregistering): Port device team_slave_1 removed [ 372.480737][T13300] netlink: 'syz.1.1962': attribute type 8 has an invalid length. [ 372.546142][T13283] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.734209][T13283] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.916732][T13313] lo speed is unknown, defaulting to 1000 [ 373.020838][ T6056] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.074993][ T6056] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.090011][ T6056] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.126938][ T6056] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.182957][T13322] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 373.227686][T13320] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1969'. [ 373.276533][T13326] netlink: 'syz.1.1970': attribute type 4 has an invalid length. [ 373.369757][T13330] netlink: 'syz.1.1970': attribute type 4 has an invalid length. [ 373.408611][T13322] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 373.577219][T13328] netlink: 'syz.0.1968': attribute type 8 has an invalid length. [ 373.607747][T13322] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 373.680885][T13339] Unsupported ieee802154 address type: 0 [ 373.695429][T13339] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1971'. [ 373.714259][T13322] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 374.133777][ T3573] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 374.159798][ T3573] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 374.249128][ T3573] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 374.318924][ T6720] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 374.537717][T13349] tipc: Enabling of bearer rejected, already enabled [ 374.578751][T13350] syzkaller1: entered allmulticast mode [ 374.694631][T13360] netlink: 1041 bytes leftover after parsing attributes in process `syz.0.1974'. [ 375.027471][T13356] lo speed is unknown, defaulting to 1000 [ 375.154278][T13369] tipc: New replicast peer: 255.255.255.255 [ 375.165284][T13369] tipc: Enabled bearer , priority 10 [ 375.207914][T13373] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 375.225995][T13371] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1978'. [ 375.270643][T13371] hsr_slave_0: left promiscuous mode [ 375.276703][T13374] netlink: 'syz.2.1978': attribute type 39 has an invalid length. [ 375.295881][T13371] hsr_slave_1: left promiscuous mode [ 375.454136][T13378] netlink: 'syz.1.1981': attribute type 1 has an invalid length. [ 375.463601][T13378] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1981'. [ 375.676030][T13385] netlink: 'syz.3.1980': attribute type 8 has an invalid length. [ 375.807853][T13388] netlink: 'syz.2.1983': attribute type 4 has an invalid length. [ 375.842500][T13388] netlink: 'syz.2.1983': attribute type 4 has an invalid length. [ 376.238370][T13395] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 376.391859][T13395] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 376.435835][T13398] netlink: 'syz.0.1985': attribute type 8 has an invalid length. [ 376.494366][T13395] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 376.592979][T13395] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 376.718563][T13404] lo speed is unknown, defaulting to 1000 [ 377.021026][ T6720] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 377.056264][ T6720] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 377.085105][ T3573] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 377.116385][ T3573] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 377.726896][T13411] lo speed is unknown, defaulting to 1000 [ 377.870619][T13422] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1992'. [ 378.011369][T13424] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1993'. [ 378.138678][T13426] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1994'. [ 378.172269][T13426] sctp: [Deprecated]: syz.0.1994 (pid 13426) Use of int in max_burst socket option deprecated. [ 378.172269][T13426] Use struct sctp_assoc_value instead [ 378.361626][T13428] netlink: 'syz.0.1995': attribute type 1 has an invalid length. [ 378.369642][T13428] netlink: 172 bytes leftover after parsing attributes in process `syz.0.1995'. [ 379.057957][T13443] tipc: Resetting bearer [ 379.073886][T13443] vlan0: left promiscuous mode [ 379.087194][T13443] batman_adv: batadv0: Interface deactivated: gretap1 [ 379.111856][T13443] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 379.125684][T13443] tipc: Resetting bearer [ 379.140335][T13443] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode [ 379.147803][T13443] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode [ 379.190509][T13443] vlan2: left promiscuous mode [ 379.195318][T13443] bond1: left promiscuous mode [ 379.201316][T13443] gretap2: left promiscuous mode [ 379.206588][T13443] vlan2: left allmulticast mode [ 379.213088][T13443] bond1: left allmulticast mode [ 379.217936][T13443] gretap2: left allmulticast mode [ 379.330463][ T3573] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 379.339048][ T3573] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 379.448742][ T3573] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 379.464331][ T3573] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 379.528161][T13446] Unsupported ieee802154 address type: 0 [ 379.536836][T13446] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2000'. [ 380.081224][T13454] syz.4.2002 (13454) used greatest stack depth: 17864 bytes left [ 380.624139][T13468] netlink: 'syz.2.2006': attribute type 7 has an invalid length. [ 381.017968][T13456] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2003'. [ 381.063009][T13479] netlink: 248 bytes leftover after parsing attributes in process `syz.2.2008'. [ 381.567905][T13489] lo speed is unknown, defaulting to 1000 [ 381.688464][T13492] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 381.741739][T13492] tipc: Failed to remove unknown binding: 66,1,1/0:4285810980/4285810982 [ 381.824605][T13492] tipc: Failed to remove unknown binding: 66,1,1/0:4285810980/4285810982 [ 381.846127][T13492] tipc: Failed to remove unknown binding: 66,1,1/0:4285810980/4285810982 [ 381.876835][T13492] netlink: 788 bytes leftover after parsing attributes in process `syz.4.2010'. [ 381.900061][T13495] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 382.182647][T13499] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 382.306616][T13503] netlink: 'syz.3.2014': attribute type 7 has an invalid length. [ 382.315129][T13503] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2014'. [ 382.563480][T13506] svc: failed to register nfsdv3 RPC service (errno 111). [ 382.596817][T13506] svc: failed to register nfsaclv3 RPC service (errno 111). [ 382.774764][T13518] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2017'. [ 383.369863][T13530] netlink: 'syz.0.2018': attribute type 7 has an invalid length. [ 383.393852][T13534] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2020'. [ 383.461387][T13524] lo speed is unknown, defaulting to 1000 [ 383.474220][T13528] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2020'. [ 383.640843][T13538] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2021'. [ 383.961493][T13542] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2023'. [ 384.066864][T13549] netlink: del zone limit has 4 unknown bytes [ 384.231659][T13547] netlink: 'syz.3.2023': attribute type 2 has an invalid length. [ 384.305816][T13547] k*]: entered promiscuous mode [ 384.337604][T13554] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 384.904649][T13570] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 385.142092][T13576] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2032'. [ 385.637992][T13578] bridge3: port 1(veth7) entered blocking state [ 385.660162][T13578] bridge3: port 1(veth7) entered disabled state [ 385.666674][T13578] veth7: entered allmulticast mode [ 385.690627][T13578] veth7: entered promiscuous mode [ 386.060612][T13585] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2034'. [ 386.061199][T13595] lo speed is unknown, defaulting to 1000 [ 386.071222][T13585] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2034'. [ 386.157637][T13598] netlink: del zone limit has 4 unknown bytes [ 386.791441][T13610] syzkaller0: entered promiscuous mode [ 386.797371][T13610] syzkaller0: entered allmulticast mode [ 386.850866][T13614] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 386.858154][T13616] bridge0: port 1(erspan0) entered blocking state [ 386.865223][T13616] bridge0: port 1(erspan0) entered disabled state [ 386.884302][T13616] erspan0: entered allmulticast mode [ 386.903928][T13616] erspan0: entered promiscuous mode [ 386.922270][T13617] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2040'. [ 386.936113][T13616] bridge0: port 1(erspan0) entered blocking state [ 386.942832][T13616] bridge0: port 1(erspan0) entered forwarding state [ 387.082404][T13616] erspan0: left allmulticast mode [ 387.105936][T13616] erspan0: left promiscuous mode [ 387.113448][T13616] bridge0: port 1(erspan0) entered disabled state [ 387.601636][T13637] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 387.732855][T13640] af_packet: tpacket_rcv: packet too big, clamped from 3956 to 3952. macoff=96 [ 387.969722][T13646] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2047'. [ 387.998884][T13646] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2047'. [ 388.089022][T13648] dvmrp8: entered allmulticast mode [ 388.227736][T13649] netlink: 'syz.4.2048': attribute type 23 has an invalid length. [ 388.282402][T13648] lo speed is unknown, defaulting to 1000 [ 388.651168][T13656] netlink: 'syz.1.2049': attribute type 9 has an invalid length. [ 388.687858][T13656] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2049'. [ 388.755318][T13660] netlink: 'syz.1.2049': attribute type 1 has an invalid length. [ 389.012736][T13647] dvmrp8: left allmulticast mode [ 389.273093][T13656] netlink: 'syz.1.2049': attribute type 5 has an invalid length. [ 390.112918][T13679] lo speed is unknown, defaulting to 1000 [ 390.120019][ T55] block nbd0: Possible stuck request ffff88802504e000: control (read@0,1024B). Runtime 270 seconds [ 390.131333][ T55] block nbd0: Possible stuck request ffff88802504e1c0: control (read@1024,1024B). Runtime 270 seconds [ 390.142801][ T55] block nbd0: Possible stuck request ffff88802504e380: control (read@2048,1024B). Runtime 270 seconds [ 390.154625][ T55] block nbd0: Possible stuck request ffff88802504e540: control (read@3072,1024B). Runtime 270 seconds [ 390.537784][T13691] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2058'. [ 390.783059][T13695] lo speed is unknown, defaulting to 1000 [ 391.408561][T13702] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2062'. [ 391.937276][T13710] netlink: 'syz.3.2063': attribute type 3 has an invalid length. [ 392.542240][T13713] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2064'. [ 392.579971][T13713] openvswitch: netlink: Flow key attr not present in new flow. [ 392.693407][T13714] netlink: 'syz.0.2064': attribute type 1 has an invalid length. [ 392.701923][T13714] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2064'. [ 392.721329][T13714] netlink: 'syz.0.2064': attribute type 2 has an invalid length. [ 392.729183][T13714] netlink: 'syz.0.2064': attribute type 1 has an invalid length. [ 393.422813][T13730] Unsupported ieee802154 address type: 0 [ 393.430454][T13730] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2069'. [ 393.819075][T13740] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2071'. [ 393.964010][T13746] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2072'. [ 394.113305][T13745] lo speed is unknown, defaulting to 1000 [ 394.594130][T13758] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2075'. [ 395.934082][T13769] !: renamed from dummy0 (while UP) [ 396.304262][T13792] IPVS: Error connecting to the multicast addr [ 396.465791][T13796] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2082'. [ 396.657883][T13801] pimreg: entered allmulticast mode [ 396.892303][T13801] pimreg: left allmulticast mode [ 396.962486][T13797] syzkaller1: entered allmulticast mode [ 397.621320][T13814] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2087'. [ 397.757240][T13815] nbd2: detected capacity change from 0 to 63 [ 397.778425][T13818] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 397.795833][T13817] block nbd0: NBD_DISCONNECT [ 397.841188][T13817] block nbd0: Send disconnect failed -32 [ 397.847238][T13817] block nbd0: shutting down sockets [ 397.921322][ C1] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 397.930773][ C1] Buffer I/O error on dev nbd0, logical block 0, async page read [ 397.940395][ C1] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 397.942872][ T5864] block nbd2: Receive control failed (result -32) [ 397.949509][ C1] Buffer I/O error on dev nbd0, logical block 1, async page read [ 397.949589][ C1] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 397.972966][ C1] Buffer I/O error on dev nbd0, logical block 2, async page read [ 397.980816][ C1] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 397.989903][ C1] Buffer I/O error on dev nbd0, logical block 3, async page read [ 398.009618][ T5911] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 398.029112][ T5911] Buffer I/O error on dev nbd0, logical block 0, async page read [ 398.045540][ T5911] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 398.064955][ T5911] Buffer I/O error on dev nbd0, logical block 1, async page read [ 398.080739][ T5911] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 398.109530][ T5911] Buffer I/O error on dev nbd0, logical block 2, async page read [ 398.139514][ T5911] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 398.179068][ T5911] Buffer I/O error on dev nbd0, logical block 3, async page read [ 398.209665][ T5911] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 398.229540][ T5911] Buffer I/O error on dev nbd0, logical block 0, async page read [ 398.239631][ T5911] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 398.248699][ T5911] Buffer I/O error on dev nbd0, logical block 1, async page read [ 398.305625][ T5911] ldm_validate_partition_table(): Disk read failed. [ 398.332653][ T5911] Dev nbd0: unable to read RDB block 0 [ 398.358283][ T5911] nbd0: unable to read partition table [ 398.491320][T13837] syzkaller1: entered allmulticast mode [ 398.508981][T13837] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2093'. [ 398.555054][T13840] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2096'. [ 398.796296][T13840] lo speed is unknown, defaulting to 1000 [ 399.017342][T13848] netlink: 'syz.0.2100': attribute type 7 has an invalid length. [ 399.312300][T13857] tipc: Resetting bearer [ 399.371067][T13857] veth7: left allmulticast mode [ 399.394559][T13857] veth7: left promiscuous mode [ 399.422613][T13857] bridge3: port 1(veth7) entered disabled state [ 400.110436][T13867] tipc: Enabling of bearer rejected, failed to enable media [ 400.561608][T13889] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 400.867062][T13897] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2114'. [ 401.001854][T13889] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 401.471790][T13889] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 401.670099][T13908] syzkaller1: entered allmulticast mode [ 401.847759][T13889] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 401.973972][ T6056] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 401.985228][T13915] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.078884][T13915] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.110946][ T12] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 402.151630][ T12] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 402.193702][T13915] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.212634][ T6056] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 402.291775][T13915] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.437498][T13930] netlink: 'syz.0.2120': attribute type 13 has an invalid length. [ 402.467413][T13930] netlink: 'syz.0.2120': attribute type 17 has an invalid length. [ 402.485444][ T6725] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.607270][T13931] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2119'. [ 402.664526][T13930] 8021q: adding VLAN 0 to HW filter on device bond0 [ 402.684427][T13930] 8021q: adding VLAN 0 to HW filter on device team0 [ 402.695208][T13930] tipc: Resetting bearer [ 402.703684][T13930] tipc: Resetting bearer [ 402.718800][T13930] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 402.780683][ T6725] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.788953][ T6725] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.837669][T13936] syzkaller1: entered allmulticast mode [ 402.996625][T13935] lo speed is unknown, defaulting to 1000 [ 403.003091][ T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.304305][T13951] tipc: Enabled bearer , priority 0 [ 403.312766][T13951] syzkaller0: entered promiscuous mode [ 403.318259][T13951] syzkaller0: entered allmulticast mode [ 403.355431][T13951] tipc: Resetting bearer [ 403.370854][T13950] tipc: Resetting bearer [ 403.450632][T13950] tipc: Disabling bearer [ 403.643994][T13961] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2132'. [ 403.721157][T13948] lo speed is unknown, defaulting to 1000 [ 404.414356][T13982] syzkaller1: entered allmulticast mode [ 404.453313][T13982] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2139'. [ 406.094013][T14023] netlink: zone id is out of range [ 406.102220][T14023] netlink: zone id is out of range [ 406.137944][T14023] netlink: zone id is out of range [ 406.160552][T14023] netlink: zone id is out of range [ 406.175992][T14023] netlink: zone id is out of range [ 406.197566][T14023] netlink: zone id is out of range [ 406.208068][T14023] netlink: zone id is out of range [ 406.277490][T14023] netlink: set zone limit has 4 unknown bytes [ 406.674394][T14039] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2160'. [ 406.808808][T14043] syzkaller1: entered allmulticast mode [ 406.842030][T14043] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2161'. [ 407.515863][T14066] tipc: Enabling of bearer rejected, already enabled [ 407.574780][T14067] syzkaller0: entered promiscuous mode [ 407.586356][T14067] syzkaller0: entered allmulticast mode [ 407.883603][T14075] Unsupported ieee802154 address type: 0 [ 407.910334][T14075] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2175'. [ 407.925361][T14079] netlink: 'syz.4.2177': attribute type 4 has an invalid length. [ 407.994671][T14080] netlink: 'syz.4.2177': attribute type 4 has an invalid length. [ 408.041218][ C1] ------------[ cut here ]------------ [ 408.047028][ C1] WARNING: CPU: 1 PID: 23 at ./include/linux/skbuff.h:1165 nf_reject_fill_skb_dst+0x2a4/0x330 [ 408.057473][ C1] Modules linked in: [ 408.061701][ C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Not tainted syzkaller #0 PREEMPT(full) [ 408.071060][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 408.081189][ C1] RIP: 0010:nf_reject_fill_skb_dst+0x2a4/0x330 [ 408.087386][ C1] Code: 8b 0d 60 6e 8b 08 48 3b 8c 24 e0 00 00 00 75 5d 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d e9 03 7a 67 01 cc e8 4d ca aa f7 90 <0f> 0b 90 e9 38 ff ff ff 44 89 f9 80 e1 07 fe c1 38 c1 0f 8c 2b fe [ 408.107078][ C1] RSP: 0018:ffffc900001d6fe0 EFLAGS: 00010246 [ 408.113217][ C1] RAX: ffffffff8a14e1e3 RBX: ffff888039d2e000 RCX: ffff88801d2e5a00 [ 408.121249][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 408.129368][ C1] RBP: ffffc900001d7110 R08: ffffffff8fa37c37 R09: 1ffffffff1f46f86 [ 408.137374][ C1] R10: dffffc0000000000 R11: fffffbfff1f46f87 R12: ffff88803076a101 [ 408.145420][ C1] R13: dffffc0000000001 R14: 1ffff9200003ae00 R15: 0000000000000000 [ 408.153448][ C1] FS: 0000000000000000(0000) GS:ffff888125d1b000(0000) knlGS:0000000000000000 [ 408.162458][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 408.169054][ C1] CR2: 00007fe350b4b4e8 CR3: 000000000df36000 CR4: 00000000003526f0 [ 408.177083][ C1] Call Trace: [ 408.180414][ C1] [ 408.183373][ C1] ? __pfx_nf_reject_fill_skb_dst+0x10/0x10 [ 408.189349][ C1] nf_send_unreach+0x17b/0x6e0 [ 408.194133][ C1] ? __lock_acquire+0xab9/0xd20 [ 408.199015][ C1] ? __pfx_nf_send_unreach+0x10/0x10 [ 408.204359][ C1] ? __lock_acquire+0xab9/0xd20 [ 408.209243][ C1] nft_reject_inet_eval+0x4bc/0x690 [ 408.214549][ C1] nft_do_chain+0x40c/0x1920 [ 408.219197][ C1] ? unwind_next_frame+0xa5/0x2390 [ 408.224380][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 408.229464][ C1] ? unwind_next_frame+0x19ae/0x2390 [ 408.234794][ C1] ? rcu_read_lock_bh_held+0x79/0xe0 [ 408.240143][ C1] ? arch_stack_walk+0x11c/0x150 [ 408.245114][ C1] nft_do_chain_inet+0x25d/0x340 [ 408.250108][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 408.255590][ C1] ? __lock_acquire+0xab9/0xd20 [ 408.260523][ C1] ? NF_HOOK+0x9a/0x3a0 [ 408.264710][ C1] ? NF_HOOK+0x9a/0x3a0 [ 408.268895][ C1] ? ip_sabotage_in+0x57/0x270 [ 408.273766][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 408.279286][ C1] nf_hook_slow+0xc5/0x220 [ 408.283743][ C1] NF_HOOK+0x206/0x3a0 [ 408.287933][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 408.293113][ C1] ? NF_HOOK+0x9a/0x3a0 [ 408.297292][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 408.301944][ C1] ? ip_rcv_core+0x7f7/0xd00 [ 408.306561][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 408.311749][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 408.316275][ C1] __netif_receive_skb+0x143/0x380 [ 408.321445][ C1] ? process_backlog+0x2d5/0x14f0 [ 408.326488][ C1] process_backlog+0x60e/0x14f0 [ 408.331427][ C1] ? __pfx_process_backlog+0x10/0x10 [ 408.336741][ C1] ? rcu_is_watching+0x15/0xb0 [ 408.341557][ C1] __napi_poll+0xc7/0x360 [ 408.345903][ C1] ? net_rx_action+0x46d/0xe30 [ 408.350826][ C1] net_rx_action+0x707/0xe30 [ 408.355439][ C1] ? __lock_acquire+0xab9/0xd20 [ 408.360373][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 408.365515][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 408.370788][ C1] ? __pfx_sched_clock_cpu+0x10/0x10 [ 408.376101][ C1] ? __local_bh_disable_ip+0xf1/0x190 [ 408.381554][ C1] handle_softirqs+0x283/0x870 [ 408.386344][ C1] ? run_ksoftirqd+0x9b/0x100 [ 408.391090][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 408.396461][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 408.401547][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 408.406586][ C1] run_ksoftirqd+0x9b/0x100 [ 408.411148][ C1] ? __pfx_run_ksoftirqd+0x10/0x10 [ 408.416286][ C1] smpboot_thread_fn+0x542/0xa60 [ 408.421286][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 408.426341][ C1] kthread+0x711/0x8a0 [ 408.430483][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 408.435959][ C1] ? __pfx_kthread+0x10/0x10 [ 408.440611][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 408.445840][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 408.451098][ C1] ? __pfx_kthread+0x10/0x10 [ 408.455750][ C1] ret_from_fork+0x3f9/0x770 [ 408.460410][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 408.465544][ C1] ? __switch_to_asm+0x39/0x70 [ 408.470361][ C1] ? __switch_to_asm+0x33/0x70 [ 408.475153][ C1] ? __pfx_kthread+0x10/0x10 [ 408.479805][ C1] ret_from_fork_asm+0x1a/0x30 [ 408.484608][ C1] [ 408.487650][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 408.495071][ C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Not tainted syzkaller #0 PREEMPT(full) [ 408.504354][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 408.514416][ C1] Call Trace: [ 408.517784][ C1] [ 408.520704][ C1] dump_stack_lvl+0x99/0x250 [ 408.525294][ C1] ? __asan_memcpy+0x40/0x70 [ 408.530051][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 408.535241][ C1] ? __pfx__printk+0x10/0x10 [ 408.539842][ C1] vpanic+0x281/0x750 [ 408.543822][ C1] ? __pfx__printk+0x10/0x10 [ 408.548414][ C1] ? __pfx_vpanic+0x10/0x10 [ 408.552908][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 408.558111][ C1] panic+0xb9/0xc0 [ 408.561822][ C1] ? __pfx_panic+0x10/0x10 [ 408.566245][ C1] __warn+0x31b/0x4b0 [ 408.570220][ C1] ? nf_reject_fill_skb_dst+0x2a4/0x330 [ 408.575764][ C1] ? nf_reject_fill_skb_dst+0x2a4/0x330 [ 408.581304][ C1] report_bug+0x2be/0x4f0 [ 408.585735][ C1] ? nf_reject_fill_skb_dst+0x2a4/0x330 [ 408.591273][ C1] ? nf_reject_fill_skb_dst+0x2a4/0x330 [ 408.596812][ C1] ? nf_reject_fill_skb_dst+0x2a6/0x330 [ 408.602351][ C1] handle_bug+0x84/0x160 [ 408.606607][ C1] exc_invalid_op+0x1a/0x50 [ 408.611101][ C1] asm_exc_invalid_op+0x1a/0x20 [ 408.615936][ C1] RIP: 0010:nf_reject_fill_skb_dst+0x2a4/0x330 [ 408.622080][ C1] Code: 8b 0d 60 6e 8b 08 48 3b 8c 24 e0 00 00 00 75 5d 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d e9 03 7a 67 01 cc e8 4d ca aa f7 90 <0f> 0b 90 e9 38 ff ff ff 44 89 f9 80 e1 07 fe c1 38 c1 0f 8c 2b fe [ 408.641687][ C1] RSP: 0018:ffffc900001d6fe0 EFLAGS: 00010246 [ 408.647790][ C1] RAX: ffffffff8a14e1e3 RBX: ffff888039d2e000 RCX: ffff88801d2e5a00 [ 408.655763][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 408.663735][ C1] RBP: ffffc900001d7110 R08: ffffffff8fa37c37 R09: 1ffffffff1f46f86 [ 408.671702][ C1] R10: dffffc0000000000 R11: fffffbfff1f46f87 R12: ffff88803076a101 [ 408.679666][ C1] R13: dffffc0000000001 R14: 1ffff9200003ae00 R15: 0000000000000000 [ 408.687640][ C1] ? nf_reject_fill_skb_dst+0x2a3/0x330 [ 408.693204][ C1] ? __pfx_nf_reject_fill_skb_dst+0x10/0x10 [ 408.699130][ C1] nf_send_unreach+0x17b/0x6e0 [ 408.703892][ C1] ? __lock_acquire+0xab9/0xd20 [ 408.708748][ C1] ? __pfx_nf_send_unreach+0x10/0x10 [ 408.714027][ C1] ? __lock_acquire+0xab9/0xd20 [ 408.718881][ C1] nft_reject_inet_eval+0x4bc/0x690 [ 408.724078][ C1] nft_do_chain+0x40c/0x1920 [ 408.728668][ C1] ? unwind_next_frame+0xa5/0x2390 [ 408.733776][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 408.738803][ C1] ? unwind_next_frame+0x19ae/0x2390 [ 408.744088][ C1] ? rcu_read_lock_bh_held+0x79/0xe0 [ 408.749366][ C1] ? arch_stack_walk+0x11c/0x150 [ 408.754305][ C1] nft_do_chain_inet+0x25d/0x340 [ 408.759229][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 408.764676][ C1] ? __lock_acquire+0xab9/0xd20 [ 408.769526][ C1] ? NF_HOOK+0x9a/0x3a0 [ 408.773677][ C1] ? NF_HOOK+0x9a/0x3a0 [ 408.777824][ C1] ? ip_sabotage_in+0x57/0x270 [ 408.782575][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 408.788021][ C1] nf_hook_slow+0xc5/0x220 [ 408.792492][ C1] NF_HOOK+0x206/0x3a0 [ 408.796580][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 408.801702][ C1] ? NF_HOOK+0x9a/0x3a0 [ 408.805891][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 408.810474][ C1] ? ip_rcv_core+0x7f7/0xd00 [ 408.815059][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 408.820173][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 408.824677][ C1] __netif_receive_skb+0x143/0x380 [ 408.829787][ C1] ? process_backlog+0x2d5/0x14f0 [ 408.834891][ C1] process_backlog+0x60e/0x14f0 [ 408.839747][ C1] ? __pfx_process_backlog+0x10/0x10 [ 408.845030][ C1] ? rcu_is_watching+0x15/0xb0 [ 408.850045][ C1] __napi_poll+0xc7/0x360 [ 408.854364][ C1] ? net_rx_action+0x46d/0xe30 [ 408.859125][ C1] net_rx_action+0x707/0xe30 [ 408.863705][ C1] ? __lock_acquire+0xab9/0xd20 [ 408.868564][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 408.873671][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 408.878867][ C1] ? __pfx_sched_clock_cpu+0x10/0x10 [ 408.884231][ C1] ? __local_bh_disable_ip+0xf1/0x190 [ 408.889606][ C1] handle_softirqs+0x283/0x870 [ 408.894361][ C1] ? run_ksoftirqd+0x9b/0x100 [ 408.899030][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 408.904391][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 408.909417][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 408.914423][ C1] run_ksoftirqd+0x9b/0x100 [ 408.918916][ C1] ? __pfx_run_ksoftirqd+0x10/0x10 [ 408.924034][ C1] smpboot_thread_fn+0x542/0xa60 [ 408.928981][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 408.934013][ C1] kthread+0x711/0x8a0 [ 408.938098][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 408.943570][ C1] ? __pfx_kthread+0x10/0x10 [ 408.948174][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 408.953445][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 408.958647][ C1] ? __pfx_kthread+0x10/0x10 [ 408.963236][ C1] ret_from_fork+0x3f9/0x770 [ 408.967818][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 408.972924][ C1] ? __switch_to_asm+0x39/0x70 [ 408.977682][ C1] ? __switch_to_asm+0x33/0x70 [ 408.982444][ C1] ? __pfx_kthread+0x10/0x10 [ 408.987038][ C1] ret_from_fork_asm+0x1a/0x30 [ 408.991827][ C1] [ 408.995087][ C1] Kernel Offset: disabled [ 408.999439][ C1] Rebooting in 86400 seconds..