last executing test programs: 4.764058298s ago: executing program 4 (id=3225): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000007a00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r3, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r1}, 0x20) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x10}, 0x1, 0x0, 0x0, 0x140000c4}, 0x4000004) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r5, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c0001800500020000000000080004000500000008000100020000"], 0x7c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f00000000c0)={@initdev, @multicast1, 0x0}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r6, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)=@ipv6_newaddrlabel={0x24, 0x48, 0x400, 0x70bd25, 0x25dfdbff, {0xa, 0x0, 0x80, 0x0, r7, 0xfffffff9}, [@IFAL_LABEL={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40894}, 0x20000000) 4.416016049s ago: executing program 4 (id=3228): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r0, &(0x7f0000000100)="2ae04eea", 0x4, 0x4044, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000d80), 0x4000000000001e9, 0x10162, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x20}, 0x10}, 0x94) 4.049531862s ago: executing program 4 (id=3232): socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000540)={0x42, 0x4, 0x1}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x1, {0x41, 0x2, 0xfffffffd}}, 0x10) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) bind$tipc(r2, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) bind$tipc(r2, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) bind$tipc(r1, 0x0, 0x0) 4.043374712s ago: executing program 4 (id=3236): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000001f00)) sendmmsg(r0, &(0x7f0000007180)=[{{0x0, 0x0, &(0x7f00000027c0)=[{0x0}], 0x1}}], 0x1, 0x10014) 3.960225977s ago: executing program 4 (id=3237): sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x70, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_CQM={0x3c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x4}, @NL80211_ATTR_CQM_TXE_INTVL={0x8}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x1]}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0xd6}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x5}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x5d2}]}]}, 0x70}}, 0x0) (async) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket$inet(0x2, 0x3, 0x1) sendmsg$inet(r2, &(0x7f00000005c0)={&(0x7f0000000400)={0x2, 0x0, @multicast1}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000080)='\x00\x00', 0x2}, {0x0}], 0x2, &(0x7f0000000240)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @empty}}}], 0x20}, 0x24008004) (async) getpeername(r1, &(0x7f0000000340)=@phonet, &(0x7f0000000440)=0x80) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newtaction={0x68, 0x30, 0x200, 0x400, 0x0, {}, [{0x54, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x1, 0x0, 0x0, 0xfffffffb}, 0x2}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}]}]}, 0x68}}, 0x8) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000000203030001"], 0x14}}, 0x0) (async) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000100)={0x3, 0x4, "88394a", 0xc, 0x9}) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="140100001f000504000000000000000005"], 0x114}], 0x1}, 0x0) (async) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r0, 0x942e, 0x0) 3.61604825s ago: executing program 4 (id=3241): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="c00100001000030400"/20, @ANYRESDEC=r0, @ANYBLOB="00000000480000004800128009000100766c616e00000000380002800c0003000000000005000000280004800c200100ff0f0000000000000c00010006000000050000000c000100060000000900000014000300766c616e30"], 0x1c0}, 0x1, 0xba01}, 0x20048054) 3.421563791s ago: executing program 1 (id=3243): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000480)={'vcan0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000002300)=[{{&(0x7f00000002c0)={0x2, 0x4e21, @broadcast}, 0x10, &(0x7f0000001d80)=[{&(0x7f0000000300)="13b9a4a8139143089d49d73881c19daf5e39efcfb82cddca441acf42feed5c1c4ed69074b50d2fab6365", 0x2a}, {&(0x7f0000000880)="fe83b60e585cf732a98c8dd7e3caa9a94ac56502125e13b26137489d913028261f791d38d9c6c523de8878d736106ef22167a6a9ccbdda6ff523f913bc1b2a35372c622546d167578aa04745c8116df980fe651fd5610b738836eaef9377fd0006c62964334e82fe446e319890fab1348768ff8d432981e0ad8a81b526168d32cdd3b02021508fd257bca43b7812c95e28f8efdd89266f11ffe417c7dcf3e695e932cce8f92b85b91cdd139034219deccab656bc0927bd8b0b46d69b6f", 0xbd}, {&(0x7f0000000940)="044b6861ccbacbfd93cd1867c01a4f9b9df7a9eec1ad83ea170011b7682dc1393122de990fbf878be114249c563c79cd68847be5ab1e6c04a8226fa483fcf82f755732a96ca96530e684175274e3460aa951813c6d66e8ef3bad66ca93be75afde9fb4901a1c7f4ee3d93b3bfc9d995f0ecea91fd49b6d52a0f2fda6977feee698c2e65dc7536b90d0768222f9f399f301fc7f068088f653316dba4373b6a0a5b88760f9ba77e693442b6e2be88a93d48214f81583495d633fb07942dce338b385746151993b73d0a8c1673ba8c496329147abb46019de6d95ac63284ab6b32a22fdd91e0da803b2825a", 0xea}, {&(0x7f0000000a40)="861647c669d6aebaad53d68c5a366a3df47e6884a99fe647a68ebe7519b8c5834db1e66b5e43f6d39ae4370173a746221f66710ac4903b6d135afc852078358331490b474392e3b7f50c7ec4d2c195b50c99", 0x52}, {&(0x7f0000000c80)="4506bb9385f772b9b4f2e931a8baadcfac5726352e347def90cbd9e5c2762651bd09cb8a43a8d83687328c8cdb294009b26e34c32f1191ec778513351f5bfdbe2ce30ea453992f6a", 0x48}, {&(0x7f0000000d00)="da7edc43b411bced3c0979bf7cd9e735e0b09777b80ad76278ba9fdfbf459d0d1d60ea6b1e897258cd2948cb8cc9ff5c10b0b24e9f4dd1db486c3becb788af524bd55a1a2b1d2d0e74aa69f3a1d42357d3facd5ff36df186c771680edcf22c39b7b03429871daf7f191b8be86d49b9294f861c0defce", 0x76}, {&(0x7f0000000d80)="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", 0x1000}, {&(0x7f0000002740)="c42250d17c59b0ee30bdfb52f47cd1aebde43f8b6db129789aa2b26f95780c7debfa9fbfd11badde6528bcd4016565597b6e8681c8c5e54990df1a8656b3d435662536a264b6fc753f3a8d41985c562e92657f293023bd35f68b0a6984bdcb10cdeea5d800efde467c6782ede175a809b5c13f2866ff936bfa01dbda04fc760374b5335a1c5522e8b2b4c762ae96fd022fc81c2eb871a14a82bbaa2488f6d12839d96c2d0d3d8883e773e52d6e06fa85673f0c0078eb6ee1ea28be539aac8f87e717a7984e457f5c0d58f81c3ee209b6117588a42a531ad3cc76ebb2ace166e40294c5d486b3ac211af9ee0533af225234a3d012b21c49d6a896cf20e0cbfadf251d744aa6958f89a52809b8ffbbb6749b80159c7650b9688db676c656c3683bf0491df6504dd870b318b4506a28d99572727a6a12e03bc04024c7c652393aa15cb270bebae7b9565c3047b31ad5fbc8e8f2e6e974cd66e0dc7bb9618f0a654504f822746a772d7d41cac5c5f0179781abc1d41183d1ddf6158b00468eba6abacf092336d9ca334fa56908f2f32892fd5b2f75ca1580e8d6b1696f59177ca0b603d409d997fc3ff743848b7958f64a34f6ccd9df1f43db42a356e9c22829e1c472ee8664034fe6b2f1f8c75b57c01944afb38d82a0095d46724110153b51dc0bb58fc8edf5494181ad5b0b6cd0aee23f0b684fae2bdecf8037cf4b895b5661f309c15ac0fc0e4cabcd8748735ce95c38ba1085d5063195b4ebebc0bcfaa37c5868d5964289ebd11364b801578686b42d7c8cba33c49151e02f1cdf0e8e64b0f26f4452ff833e175ff37cb436e8149c6e461b101fc3a57fe4d4abd6abb85758bfea39c3624224bb979dd7cdadde60b9222a44848f2594f0c81ff43a5b3dfc94827b4b81a62c30af421ed25f02acf314e529558aebfbbe13c42fbff05fa5c75df82291d2d98012f527113fab08b56dab321c82fe3afc543135834ded1037240718239ca4dacffe8a57aa2543ca38d0329786b216ec6497bae1b4cdd2cb58cdc38efae30ea9d7c2f110fb3aa4beab38540cd4d1be815f9694c43d58809362a1d71c1978965decb362b7f31dfcba8f55dbc93315c1d3ab6bf037d38bdae320ec70444f62a8d41b868ea20de408ff9e03598ecdf17ac195a4be9d8a506bad39ec6ab7c2426141e770b26cd91e2213beb1b6e4963f57051ccd15c0f6c29d9502e3f3c28cbb66b7b5532f240dde63d5666fcbf34000d539b3fc8d494e149e2471469ca96b473ad5ddfe05a4e0d444a583169107f5f6b6948768f1f067e699b13ce6957097991344d3b41570f477720a34a19046eb087a46a7e7f2d2a2cba03b121ab3af2b3ff768b129d273004812dd28cea5b3daf8ad28acacf4a0e2aa6cd184a28b01a0a9e8f0b697e75f4bbdbfc6f3eaca1ebe6fad242ac099a27a6a93bc3b4bef58e1deaa557d9e8ed749c9d1d98aadd6cde8f358b5a1c7f5050ddce024e3711a4db7b97ac522921ee22f9ae731a43a3020f7dde449dd78cd01e41dfa44517b0f0e1e95df700ad7266bf995bd3c5c1c2c751f12f18c1fb6f1ea3b25a77d6920a5bfa5f10053136878e2483f36f97e5f1baed212916de94a071b0fce9a5e79e3c734c9d6425f248410f2024f6c24aa26741836267afe662fdf35c0c0e2d2093309004b47f539d39fc8e46d1b1d82c5d855dc8ca8b8d6ea5299ea1cca222a618c607b7fae6bbd6b637f90aa70797e9ccc3dddf4afce1dfca1f1f2673aa34fd9bd5121fe5b9eda595bef137341ad18c59887b4562b95e4aeca5b161e3b1c658e51e3edb090492e3620e7abe225724929e67e0bdbdf18a7aaaed4112536d909fd92c6f96a8dcd27b32b1fa02b50a618f51509a0ffcea6de5ddc74d2af02663fff67c82b030686bc0ccf88c83b88dca67ca588e3e0dc163e069f9b63c3792920dd333845edb56fdd40826de40737df37d244e9d8d567c4abbf049f4b6e222356e6efa36b107be7acf378ed150018ce3962d27195254497d804e3229a426dfda51114de365b9867616f189bb953e3d3a184bf189f40a24c1107e85fbfa70ab11f65b99be197f3606e291976a6c880a088992d80a07b55e81ebaf8adcda54894eac53876a9252e84ac1c0145d2c6acdf27666bc44617b5ef26424a4c56fa0df3e9fe5a091f4d696f6899c43b508d904551061e98cef52ad6f11529f2897682618563dd96a94ad248c9d17c22d559371402d8a345a0f218b679d3a8cc014a97222bbb8116a94ae8be5d76443cbf906fc95a2aca86869bb12ab17ca5710232cf4418f16bfd69c28b3294dd9576e42d9552b3cdb3012138456b11a535877ac1e85cc3a8ed92a091502de73ddde6cfe65554c79117109b48f5c4c424c179d133fa5c1fb572e18f2b04b4a2af2a4e1b2fffa959c13d8afd484c2487186002d6defa603dc1297fbd9140f6607a7fcba7fedd04307e81676df4286049b93135867563de1a6c61614a77beb50da3caeaaf1c116c3e113951adcfa02debdbfb360693a87fe95b6f6b0f8e0defc2c50b2fb972178fb8c2543696c706405aba33ae571bafbba6de6799177c61e7425595b99cfaef01fe52a1bb8a5919f0456bc36e8a10fd87eebf29c444fb91f20fd5c3bc4043f8b0e7c442366dd5dfcd6d27d25a5afaadd457ac0db73716e5df61d164505428a5186efe6f77d849da32dd42b1a69b1b079e504594ad6baf066c1f3dc4d5b3ca680052d8b18e926f382e8ac4b1b095d24d95542f594213a1cfb1d093ad89b55a0fa0d8c43d55c26c4242bb414a8e1295591f878cfa8378b3b82a640985450a0ebe313382ab01552555ebb6641aca39ca2234ea1f22ed77e8dbd454c1a646359e439d41ecddf6868f0f96b9f0c5642d1d1ab67e53ef70ac4537019d0377b489e9674a03a8740fabb2db1ff6ab25cad6c42337f5725d35ce8928756a7430da76d7bc3855d35f07156d6480a23b02625ee48edac736c94ae0b8dec50c47b1963536f025ed598370dcf9ebb7355a221ab64d36e1af41cd6284d7454867316322e8eb3ffedb7544dbad61edd6f58ac3eec6d78a2b7c4c9419c1ab92a4045a658600d32f0976f38b34a083658040c709c6204bec94bbd3ef5bd87b2d95a5ce007040059ba7bf1fb6e0ddc5cc802e7605afbc849f279244c1a7184e9fd62050b82fbba8e80ced3b8d1bbcbd1fc9cf9a910007f26b81da20144c93a5523d29934ae9b18f1fe9c5022fbe356dac9ff9153b78792ffa6252b3ce6d218b43b245e43ee1942cc77378bbddedb8f969be19fd064d93844aa40c2c2831a0eba93b997577cdc9b4c953b577d9ca29f6ea722f9ca9b74fd9b6d6a4b635a97fd32271236c26b17f7051cceb0188761980e6c9a1077eb829deb5d9805dc493fee9e9ae7d408adb8ccddcefa30378642a8b189f029adfba3e97a7e6dc420f5b580f492f2b8b4460e8b5d8887d1d071e72da9bd70fc7c9ef97fd5b1ec8a0b8cf2f317675560483490919fbd458fe0a5d31b8489abd77295b6bedd9f353ccd7edf6c3a52d5292c65ad8619c0e2602bb9af1f2817d19d1f6544ac247385281e9f9cbc22a3e06937044cb6ff3bd5a8cafa6bbcbd3dc01db43e0bcfe2474181f444360051e7d33a69ff0d389cfd3268f0991da63cefff390735177ed4c4e00723e56a17124cec89f43115c51b67d26b72e7d57f6d75f9fb340b198ebe8b373d86451b305cb3f34d6e2de559277f7c381adbc388e6adc61e9d153ce9a26cf20da7135bb518283cd18bc08a29128b982f46d7045d908df59a20b61a0b004d261003946ed5200821333745692facffcba3b4a24c8bd8feb6b2eeda345768fa0be4667e8d750a0a71fc15dfe26872349774b1194c91be9accf781e399640faab1526608e347600b0cc209a1147aaecb56898a8854ee49a9bb816808d31628d195aba1b7d45839685d77e58f7287acbbe2cdeb5897d30436b050f599190b803af9149e88722e86079ab014c84e558a5e493ceff22082c864df339565b7572b16217e83721df7939ee50acc02ff95ffa3a8a8e8efa14c03af369599f4b03c7d3919e3b03c122a93301f3ea9df140b8d5adb5a29699be60a5c4556f4e5c0e4ff5c9aa91efce477c40b0c0a0ca6580960d9f8bfec82a2e250f9c81d3664f8cec3534e5aa260d5cef15a255d070d5156904ba493bcb633dd8c42f1ebdeac43048d074b3efe5c9f8eb2fb25891df6d1397437ba147bd8169bd1941af9d7986dcdb60a4a73cde0f7db2c966ec5a54aa07732f9dae8e8a8a194c15024bacdbd8a9ee91c8f777f401949814c526fc7668430aea0a3662d98e57e05ba64ca06eeff48399945ee4aee5bbf4a5996f895963aa8c8c5cad9ca6193f6b831df0d55cb772bf4bf9b16bbcf6e5ae5ad8e0ba932ebd1281d764d383291360f652c047000bf241984dbc738859bd3fff4087d99e6abbf7852d1d4de2be8cf68634dc37ca5aef652ceecdfae6f69fddddd86af46022e6de221b59b323c932167b344134f24153cde40e12c954699b53f4d83cc5e4c2a143695cec13277e04334fb456958109c0fd1d7792ad8c7f680817f805019c3f56a73f94f660ac1d5862c7919b29e5ae073a666356137c78d2ec41e75a6ba51c170494e29814ad24e986922209f8bbf45b0b46919ee7d478dc1acf2936bf026ed379eb4b04419cbdbe23847ff4139fbcdfd3aaa9519e4ab1def7887b67a99f947618cd11df70797701a4a075118ec3f0a4a437a2820e2adb8f401b4f3e8ae6a4625e74b39259f00bda7f4912ee6148c4904a2bdb927f50c8acaae5ced1193e2985beffc42b72fd058a00aa0550e16b2e22bfa6177706d404a7ed6f323628bbb0b2954ac0bdcc1def23252bd112c04fd69597403a0490d402436b04cce10163eba14d076e9ca0c4682ad6465d31db10e88a74d40797efd54a273734429ff386c2c195abd31a29474bdf0dcc6d68545daa8f4c70ea26e52ff49a99138832668f654415d9f1611e3dab9ee289c2bac0bb32084d397a8cbf220914fe28e7f379cdd05d5fc68fcc6a4b1250a14aede7218433b6a4ed9f3bea0a94a8eed5dc10d381b353224f4bf00e20b46ff8393718e1307b6fd7bc744dbe7ff72aca0a8dd06639ca64d342e5300c984428a54366fc19638f92f3276b2b865b84a3ee456f0f65c98bcf7b55623d6c0da8a90850326e3f0933ad1f525ea9d957b8fa309a1a8eaa4515baae1b54b31e20146f2b0b600793e02d70fd8ffb2b79c2029d7efd0b8ba6ef0ce8166fa40d87b9e76339bec513e20c562c399ac3e225fa81a72916ce36d046cbdf10a2f25579ae6141ae6c11796a4d7628ee8378cd0020e628bde63761c9764388b167ca9d49af610a16cd54bd24a7e2322923ebbbb588d9fe92bac5879f835c7672aa258eb43d263d63b37f7d75838ece7ad6593d59e9b31a689a50ef8361dbdaf638e3ffe80763f7707f7105f68289edb985a55e6d87f3a0b0df93a3befd488004b95589fbe3697dbded13858b5a94d6aa65e1cd0584755ef7cf7926fe8736097e3f2badc7431aa7286d3983af21a95f7924a701881deca03184b8dc0ed37f4b7a3032ce2251595c9aa6aca8519be9baf2509e62ddf9b0558b7b49ebee37438be4b121551c849c82e691ec6cd46b805714f201245e506692480890de510b92142cfdc535df2b8482522e67b0a2ff688a862719f92a7e564fb0e1a23a341a000b72ae4144eaf0440c538ef8f8b19f0cdbc9eb6c5b724bf2cd0fe2ae56200f482f3998c08c801eb2af45efeca197880ed14b7a411563fe655e", 0x1000}], 0x8, &(0x7f0000001e00)=ANY=[@ANYBLOB="1400000000000000000000000200000005000000000000001400000000000000000000000200000007000000000000001100000000000000000000000100000001000000000000001400000000000000000000000200000004000000000000001c000000000000000000000008000000", @ANYRES32=r1, @ANYBLOB="000000000a010100000000001400000000000000000000000200000006000000000000003c000000000000000000000007000000442ceec1ac14143f000000010100000001ffac1414bb000000b0ac1e0001000003ff7f00000100000010000000001100000000000000000000000100000004000000000000000000"], 0xf0}}, {{&(0x7f0000000640)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000ac0)=[{&(0x7f0000001f00)="7ec936b350dda7b0a0288bc855a051365f3afcac772f6d3107f96fe27a77cfe784b8b1668aa79e8d9725b51c6cbd12f5b7ba17a5dadb38193fed815a11e8361a628bfd9a6ddaba07ed8dc20a5f1a", 0x4e}], 0x1}}, {{&(0x7f0000000c00)={0x2, 0x4e21, @multicast2}, 0x10, &(0x7f0000001f80)}}, {{&(0x7f0000001fc0)={0x2, 0x4e20, @broadcast}, 0x10, &(0x7f0000002240)=[{&(0x7f0000002000)="c5", 0x1}, {&(0x7f0000002040)="26bce763671f733dcfbbc4c53f14cb821fbdc1", 0x13}, {&(0x7f0000002080)="a8f21bf1a36ccd86a71f36cb1b90b6a18f157fa77890e6b8c95fb5d57f778ef0c2b2679c4c7516b990effa3ad8bb677840df", 0x32}, {&(0x7f00000020c0)="d1415b1c25225610e12a31c9f5788b35cc323db1f9d43afb860c3513da1d631d1b535c88ee0a74908d502e505423823d14dd3dc46e0c5b98550a48105c7879d5b89739107aac016c76f2aa22dea586307181", 0x52}, {&(0x7f0000002140)="1875eb85874876defda5eaca4750f802d850", 0x12}, {&(0x7f0000002180)="b3215378b88b1ea72af39b5685a367cf33e29959c9efe6f3bf5bc8150eaddf72ac68433db931c99479fda3fcd76d5dee6fafbbc3f63ea4707353f6cbee0a68159c144c9158447cecf7341bb2479cf58b687f903259100b84180a2dc4c9bb50eded468d37f9391b14f0f56ebd54d8c185d3e1e93705e1e8782115a018e76a276c7f8dfb70f1f36b5df69b78b5d6e5c8a7c889833fe7baff245ba97d9092c2e78db2f382f570f9b830b3016f99258e5505a47fba78fd2ffe8d1a13b49d2168ec", 0xbf}], 0x6, &(0x7f00000022c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0xc8df}}], 0x18}}], 0x4, 0x20000080) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1b, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x20}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1004}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xeb48195b69e85694, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r3, 0x0, 0x5}, 0x18) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f00000003c0)=[@fadd={0x58, 0x114, 0x6, {{0x4, 0xffffff40}, &(0x7f0000000100)=0x1, 0x0, 0x2d5b, 0x3, 0x4, 0x83e, 0x12, 0x101}}], 0x58}, 0x0) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000080)={0x4000, 0x3, 0x0, 0xffdfffff}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000160001f47efde4be701161000a000000040000800400", @ANYRES32=r4], 0x1c}}, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYRESOCT=r4], 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001f80)={r5, 0x58, &(0x7f0000002400)}, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000200)={r5, 0xffffffffffffffff}, 0x4) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r7, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000680)="76389e6a65585578f830e9000000", 0x0, 0x10001, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x18, 0x3, &(0x7f0000000bc0)=@framed, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000280)={'syzkaller0\x00', 0x2}) r10 = socket$unix(0x1, 0x1, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0xf}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x5, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0xe0, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='contention_begin\x00', r8}, 0x18) r13 = socket(0x2b, 0x80801, 0x1) getsockopt$IP_VS_SO_GET_TIMEOUT(r13, 0x0, 0x486, &(0x7f0000000000), &(0x7f0000000040)=0xc) ioctl$sock_inet_udp_SIOCINQ(r4, 0x541b, &(0x7f00000000c0)) 2.935470905s ago: executing program 1 (id=3248): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.stat\x00', 0x0, 0x0) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x4, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xffffffffffffffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44081}, 0x20040010) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10) listen(r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r3 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$sock_timeval(r3, 0x1, 0x14, &(0x7f0000000600)={0x0, 0xea60}, 0x10) recvmsg$kcm(r3, &(0x7f0000000200), 0x2) 2.708032713s ago: executing program 1 (id=3251): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0600000000010000000000000001410000001c001700000000000000006574683a7365ce005b67f03737e7b9aab5db1decc408ee1245576c65c49808dfeb88a2ae397f1e227f006f583f288064d399eaf247802c01199914f74d1634aa568eff446888c05352fb7ee9c986836d29e96148c458eea42e8f231b4ec16700"/141], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x408040, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/ipc\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) socket$rds(0x15, 0x5, 0x0) r6 = socket(0x14, 0x2, 0x4) shutdown(r6, 0x0) close(r5) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket$inet(0x2, 0x80000, 0x5) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff1, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x0, 0x5, 0xfffffffd, 0x40000006}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) bpf$ITER_CREATE(0x21, &(0x7f0000000140), 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYRES16], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x94) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e00000004000000080000000700000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000be5d26960000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r11}, 0x10) 1.933379643s ago: executing program 2 (id=3255): socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000540)={0x42, 0x4, 0x1}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x1, {0x41, 0x2, 0xfffffffd}}, 0x10) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) bind$tipc(0xffffffffffffffff, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(0xffffffffffffffff, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) bind$tipc(0xffffffffffffffff, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) bind$tipc(0xffffffffffffffff, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) bind$tipc(r1, 0x0, 0x0) 1.888050997s ago: executing program 2 (id=3256): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000500)={0x26, 'hash\x00', 0x0, 0x0, 'md5-generic\x00'}, 0x73) unshare(0x2c060000) unshare(0x24020400) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0xb4}]}]}, 0x58}}, 0x2) r3 = accept4(r0, 0x0, 0x0, 0x80000) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c8, &(0x7f0000000380)={r4, r4, 0xabf, 0xd, 0x0, 0x82, 0x4a, 0x15c2, 0x5886, 0x801, 0x3, 0x9, 'syz0\x00'}) sendmsg$TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000580)={0x300, 0x0, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x2c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_LINK={0x60, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x55}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}]}]}, @TIPC_NLA_BEARER={0xb0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0xffff7468, @private0, 0xf}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x3, @dev={0xfe, 0x80, '\x00', 0x3e}, 0x4}}}}, @TIPC_NLA_BEARER_NAME={0x16, 0x1, @l2={'eth', 0x3a, 'veth1_to_team\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x4, @private1, 0x6}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_PUBL={0x4}, @TIPC_NLA_LINK={0xac, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x55c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}]}, @TIPC_NLA_NODE={0xdc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "bf15536d32e5ffc93252fccafbfb2db4d8cb0560d0"}}, @TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "2d157cebacde5e4706c9a9f53b1a1af7379d6864db0c18c68cfdc8a21006d366e03b57"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "e1d3f10025d9010ad74f034197441b52e3ea99a1af"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x52}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffffffd}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x34a}]}]}, 0x300}, 0x1, 0x0, 0x0, 0x45}, 0x8080) write(r3, &(0x7f0000000040)="cb", 0xfffffdef) setsockopt$sock_int(r3, 0x1, 0x22, &(0x7f00000000c0)=0xfefffffd, 0x4) 1.69116077s ago: executing program 2 (id=3259): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000001f00)) sendmmsg(r0, &(0x7f0000007180)=[{{0x0, 0x0, &(0x7f00000027c0)=[{&(0x7f0000000340)}], 0x1}}], 0x1, 0x10014) 1.551179196s ago: executing program 3 (id=3261): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x100}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x440a00, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'wlan0\x00', 0x20}) close(r1) socket$netlink(0x10, 0x3, 0x0) preadv(r2, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/124, 0x3}], 0x3e8, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYRES32=r3, @ANYRES16=r4, @ANYRESOCT=r3], 0x38}}, 0x0) r5 = socket(0xa, 0xa, 0x10001) bpf$MAP_CREATE(0x0, &(0x7f0000010140)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0xfbfffffe, 0x0, 0x0, 0x0, 0x68}, 0x94) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="fcfc05000000010029bd02000000df25ff010000000000000000000000000001fe8000000000000000000000000000bb000000000000000002000000000000006e026b856908f40081c2bb6165157bea59c228b530db3860f1777409f0596b6ee3536735dbec4e08f28e5fbfd7c6ac87af59cbeea2d641d6d704c4498ac0e188683578dce7e317305b6b", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000030000000000000000000000000000000200000000000000fdffffffffffffff000000000000000000000000000000000500000000000000060000000000000000000000000000000000000000000000010002000000000044000500fe800000000000000000000000000044000004d42b0000000a000000e00000010000000000000000000000000000000004000000ce00"/180], 0xfc}, 0x1, 0x0, 0x0, 0x24008040}, 0x8000) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r7, &(0x7f0000000480)={0x2, 0x4e24, @multicast1}, 0x10) setsockopt$sock_int(r7, 0x1, 0x35, &(0x7f0000000040)=0x1, 0x4) r8 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) pwritev(r8, &(0x7f0000000180)=[{&(0x7f00000001c0)="e7", 0x1}, {&(0x7f00000003c0)="b48eb69ea948a2961f2b17bab965b22237a0bf1e5d9dba23847321172d2689fce92a619199ec075a0ceff1358f3b70320ef0790bf03b4b3194155025582e312eca91d6513f31dcd6cb74547a3174aa1b6998281f5c8b60217d33de", 0x5b}], 0x2, 0x2, 0x82) pwrite64(r8, 0x0, 0x0, 0xda8) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r9}, 0x10) setsockopt$MRT6_ADD_MIF(r5, 0x29, 0xca, &(0x7f0000000000)={0x2, 0x1, 0x0, 0x0, 0x9}, 0xc) setsockopt$MRT6_FLUSH(r5, 0x29, 0xd4, &(0x7f0000000080)=0x8, 0x4) syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r5) 1.511010419s ago: executing program 2 (id=3262): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000700)=ANY=[@ANYBLOB="e000000010000b0500000000000200006f6d8864d22a3f2ffaa46c88bcbd0000002b0e13e735a3184f1b3d6da2f1acfac0ee50d2b184b27db1f302de337c0004060000000000bf852c89867f6691b01b2d44e4ff282d2d2c"], 0xe0}], 0x1}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32=r2], 0x1c}}, 0x0) pwritev(r0, &(0x7f0000000400)=[{&(0x7f0000000340)="577a29be4c834fe105e3399e08de3d945090b935490a65b37419c3391c7a68c302f06f897abc0381c27dd32f", 0x2c}], 0x1, 0x48, 0x3) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000340)='cgroup\x00'}, 0x30) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000340)) preadv(r5, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/11, 0x53}], 0x1, 0x4, 0x0) pread64(r5, &(0x7f0000000080)=""/49, 0x31, 0x800) write$nci(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="500401f7c038e1"], 0x7) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)=ANY=[@ANYRES64=r5], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000540)={r6, &(0x7f0000000400), 0x0}, 0x20) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000002c0)="140000001d000b63d25a80648c2594", 0xf}, {&(0x7f0000000580)="3f1c2725e7", 0x5}], 0x2}, 0x4000000) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="380000004800010100000000000000000a008000", @ANYRES32=0x0, @ANYBLOB="0000000014000100"], 0x38}}, 0x0) r9 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b0000000000b30146d66d8d73e2efa304000000", @ANYRESHEX=r2, @ANYBLOB="92b14dc700000000000000000000000000000100", @ANYRESHEX=r6, @ANYRES32, @ANYBLOB='\x00'/28, @ANYRESHEX=r0, @ANYRES8=r6, @ANYRESOCT=r2, @ANYRESOCT=r1, @ANYRES16=r7, @ANYRES64=r7, @ANYRES16=r6], 0x48) sendmsg$kcm(r7, &(0x7f0000000040)={&(0x7f0000000240)=@can, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000480)="e027c917871eba1b59c3754907a18e818183a14580ae446b19f193e3cac0c742e52e9ae0aa1f80366684ff63d413cda84497b904f8bae52ec9ca6732307085b884b397887a20aa828e0fc7eaca266cebeecd430bba9efc468e12b13286fa5ed9b2f8a9d5a05b3bfb44bea9e7840be768408851abdbf605cc20789a82", 0x7c}, {&(0x7f0000000980)="80dc036647f7b548b0afc8f06c321913dd2a8e8415cce8a268009ad82e1686f119e091e5272980097a632f276f1303fe495685bec386847f2411c061c462e038dd8dcedad1031db560b8a0153fbe505dc3d2bc4cd67013022f7ea1c719c75caea012fc0bc2374056b574619a77a34fd793087bf97dfba0750ab467fd2fb76d3789495fd26a52861352d78138208c9bea404f508383e7eca161ea198bb3fbe84a317021fa10dc215e59d981129aa6788e5e8fb42e6662d3c9445d73236ee5ba93d31c4fff6f3f2257f33a14933099ab8a3a738b0d40b18b116e07f3563d", 0xdd}, {&(0x7f0000000a80)="8ceb88bd6ceb567dd23afefbef5153c840571d8e049a77e2e62a821890b3a847a5e5a27793f078d75770830ea7c15ecce8a14b8a505be5314d8b3148976191701bd4fc7156108d97e39b29ce8e6b624fa55ef4e0de610818a4d67a8f21c8ba8af5b954cdca6fe9212e86081c0bcc540174b1665bdcd5ade760696c6e51d87b75a57c1e307c0ffc41363b63a4319a12d061d8d0adc33745174862d06025c41671d5f5c28e5fd9d8f1abef600ab57c545ca15ea6eb97cdc2bb5e2289122542ef20badd157a2363ac5086ffc7784390cc7f0675e5e30413180940281ff6df6394e471ec62171ab2ee8b90bbfe248fb78ce6de58e67aa6", 0xf5}, {&(0x7f0000000600)="b69f9c9ba3cbcb276a623da3945f6ba76b327c3c5ddedea677108cce3d1b30c197c4cee2c6b01895ad6ff1fd39231aae496b29e5eda380508c3d9ea66f4dd6a6a122d7b53e174617519c38d404710568c05c531b12bece7d5ee817072bf40cd426f54c5b5488ca3c019d07c9803a9c035c637f61132cb0", 0x77}, {&(0x7f0000000780)="0bffa8c075b641a6208b843aaad5dd7718ae53921e5e972959d9a16beb589f340134fd65b16541d11492bab78c2bb0f3bdf7d74441c07b778a3f7429c35fc85ab48614e459fc036c51246c96b431e9703977eeb4832273fe38c9d1769fb3f37629ebea3666dccf28c7e1409f3f6c910281a71a456ace7da1c396992e3b27", 0x7e}, {&(0x7f0000000b80)="df12bb27f93ff8b92edbfdee15303e2a50cd2cbec34f37d7bc283fb50c77bbe5c18a8100cd9185bd2f3846290f16990a9daa5f79899b19d669893e3f7725629d57600ded5f0bbd8e97cba837536ddb3c0de592a5c9e1b6b6084feaa2818adca979859082746fb4b2906c37b35b68e7a683f28272df0f24f13cada8510a931f2c0c63f81c832ede7b0f15bc7355086cf59ef02198cc26c5b4c84ce20792762901690a38c46beac971f13a33db072d9ca657458afc94006b9fa2fe1d07328aa4d39b58df5ce597f607ab082eb3b9191c287ef6fe0587830c885cf1c19729e250cc164c9c9ce4", 0xe5}, {&(0x7f0000000c80)="89a24ceb453011a6a6fae6789c1733cdf87b5270a04461af44de605cb3304d02e95aafa0101db07b45b9eaacd3e89f026eaa30599074d62ac11e8fe71de5d84afcfe18606fe98c35092437d286cd59fe01c004c52f85fc7c0fb0c268bab1ba0fb6cd1d23b163877ab8094e987d", 0x6d}, {&(0x7f0000000d00)="1e4e588e16ab5356e2b956095b687d5159d31b120ce3c87f3ed8f037eda7ebf0106f4add2b6bf5b5e39e23440aa4dd07b7edc63dff79841c662f7ea666ee57c468b3960d0092a61365ecc7c739effe7bf3e092f9582eaefd06da10a084c73de483af09b13af044a3d24c515f228a4dc6f42bc85909cf916e53d5f4e3b94816571bd7b8517d37241cd03e6bb4472ea3970d979b9675a0fbfe1fa86bfb330de5b90ff58ea48a793146a30bac4cb96e2bc587b0087e2093025886891f21d82bbb8c77121e0f686bd2368f2a12e7b04039c46f045f614301ad4d1975a2b25b1c1da11b", 0xe1}], 0x8, &(0x7f0000000e80)=[{0x50, 0x101, 0x25, "3ea1ff71573106a397541b90e65c7550a9e50845119d49678c733147d775d438bd1b3d6ebf54d6a4230f7819589240397a99882789c7c98909bf"}, {0x70, 0x115, 0x9, "f4c475925f4318acdf247a4690f62c3d626117db7d731cdeb1237def8f10eaea7adccfb4f8f89190a8efa506cbdd82148435d82882965d840f387ace50ba63641a2196c79654bf316e477c8a749c7dd2ec28fc9ed24bf2771198"}, {0xd8, 0x3a, 0x9, "0df2d638db0ce36ce3ef9e2e0c9ea26409586cd6e6fd7ed6f443d095d12620898b2e08414c240dcec3a5b73a08c5669db166e605b8ce336694a6c5d7288493512d8d2f9a6abcc896b6309c884493cdc39ab611863e3b89a744675ee3fc648cb97207b8272ad47c8db691119fb6b9e14b82f8b1cec1335e5eab59851963c1188f20771f0530777843e3ed74cde2957f97c2b3f795ff31dc3d3892f9f81015fdd2ad40915f8a227166da2d1dc8dff041844322abd25e9a333113ad19dda1eadbcfe5cb0b"}, {0x48, 0x3a, 0x7, "b16d4f01edf92641ffdae6ef8ff74cb4170073ce4a2bfb298a3d9b988ecf0fd67a66b998c9d54b4e34773ada7c4c714463cd"}], 0x1e0}, 0x40000) bind$tipc(r6, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xf, &(0x7f0000001540)=ANY=[@ANYBLOB="1803000000000020000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b5020000000000008500000086000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000000700000085000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x9, 0x1003, &(0x7f0000001e40)=""/4099, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1006}, 0x94) socket$inet_udp(0x2, 0x2, 0x0) 1.468547999s ago: executing program 1 (id=3263): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a3100000000090003007379"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0xe45}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1.246599037s ago: executing program 1 (id=3264): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2b}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x40) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x40}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$INCFS_IOC_CREATE_FILE(r3, 0xc058671e, &(0x7f00000007c0)={{'\x00', 0x2}, {0x9}, 0x60, 0x0, 0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)="cc13a877d6d394cff9427e26112491f0e8e521d7b5698751e73dbe7f9bc5d5f8fecaaa3071f63a1ee28238f84f24d70461ccb8bcfa2811fd70926e656c943ea9d4af0e2e43021c45aa806b5ab023d5dfe3456a756760142dd3e78ac391864e87388934da4a0333af1db35d4e08f29a795ff5accb3e427aa8b4185214378d3a079243a3614955cefb72296d65de2886d4abbfdef6f306f2167144b5977ff4e3484ff38db8166419145c3e63efdb0a", 0xae, 0x0, &(0x7f0000000540)={0x2, 0x175, {0x1, 0xc, 0xe3, "f9347fa369fb84a9ec5acb0de58752bb5c5265e1eb7eea9ced18fa7e43327e2e65685e082133b86d85cae4163489005702c0aee60ef3cdd330a3d19b8e26354ea6b36d010587ba48549ebf8aeb326b075748a0d85b043b369318a65c4da01a70fe59674fd3b8c7b8ea8fa1e23291376ea60a698a9cde63fad8b1ae52a72a74d5ac4639db4197956dc4005b11e691458c573417aa204f45697b83df362fe65c050a21b1ba71e7de2e2ab645bf5bb299954d64179fba7492e171daac6dee4821234599ef7e6a508bb97cc1950388ebe786f61ad72efcc76b4b769af82016af578a651523", 0x85, "d67b8d46f62afac701059d318712aca72d6744a67a79c9e943b43187bc77c6f362d824c201d37230b892d468353fd5fdd59be4470de629ace12f1f56c032c18aa2a0d52622d4c4df6c7c6d97aa5bc0d7dd1ab5979212afc9fbc649823c7cedfb8994cc9e0b7e238f9188512db3f11fa39ed17052c4bd5938ffd52950ce4402662dcc98cd2f"}, 0xea, "107415e47714220325eb3196650f417651bfda161dfdbf5daa8d89a50254dbe7250106708c58c74fb275066afcb5e403e6d8a5753567f8b51806c35b8a2950f2dfa7bd2f9ada1bf33898f903c01a9f2ae03267021d9e4c555e3a0f57b769d877181eba185d637c72b6629fb091802261bc45e50f97f48b6a9d62330089206fa72e45f259a6abbfa40bdf879f6325da6f643c6866b15e5bfa376bbfee922eb303fec48db86537da2b23416bcbbe3c60c81ffbf7d54e11e95727110c291e4e9f2acc0d2b85ee52335c2ff081c95bfacd94a2d65f8360ad1ca0756f5c0f99e0e2053c82122b639798bb50ea"}, 0x26b}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x9}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(r3, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a4000000", @ANYRES16=r4, @ANYBLOB="f1acc5837000feb2df25110000009b070300", @ANYRES32=r8, @ANYBLOB="060036000900000006001000510700000900130084816003980000000a00060008021100000100005700be00a3261b4127a73d81209535e8b1ac278596809a4f277970575eb196247534e6f71809f61eff65853b0b55596b9f5f9d208b5e9efca7cd9b64e05ca9b721ea8a34bcca612949ef6844f361cfbce6fc290d47cbb3000600b50059010000"], 0xa4}, 0x1, 0x0, 0x0, 0x4044081}, 0x20008000) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000240)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x14) bpf$MAP_CREATE(0x0, 0x0, 0x48) r9 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) connect$llc(r9, &(0x7f0000000180)={0x1a, 0x0, 0xf9, 0x8, 0x0, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, 0x10) r10 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000000)={'gre0\x00', 0x0, 0x1, 0x8, 0x2, 0xb, {{0x41, 0x4, 0x2, 0x2a, 0x104, 0x67, 0x0, 0x5b, 0x4, 0x0, @broadcast, @private=0xa010100, {[@timestamp_addr={0x44, 0x34, 0x21, 0x1, 0x1, [{@broadcast, 0x2}, {@empty, 0xd7}, {@dev={0xac, 0x14, 0x14, 0x2c}, 0x7000000}, {@rand_addr=0x64010101, 0x8}, {@multicast2, 0xa}, {@private=0xa010101, 0x5}]}, @noop, @timestamp_addr={0x44, 0x2c, 0xa9, 0x1, 0xd, [{@remote, 0x8001}, {@loopback, 0x4}, {@dev={0xac, 0x14, 0x14, 0x41}, 0x100}, {@rand_addr=0x64010101, 0x2}, {@private=0xa010101, 0x75b}]}, @ssrr={0x89, 0xf, 0x38, [@multicast1, @loopback, @multicast2]}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x44, 0x7a, 0x1, 0x2, [{@rand_addr=0x64010102, 0x10}, {@private=0xa010102, 0x1}, {@broadcast, 0x4}, {@remote, 0xcbf}, {@multicast2, 0x2}, {@multicast1, 0x101}, {@broadcast, 0x5}, {@local, 0x9}]}, @timestamp={0x44, 0x18, 0x3f, 0x0, 0x5, [0x6, 0xa4, 0x1, 0x1, 0x1302]}, @timestamp={0x44, 0xc, 0xee, 0x0, 0xa, [0x9, 0x3]}, @timestamp_addr={0x44, 0x14, 0xd, 0x1, 0x5, [{@empty, 0x7fff}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1ff}]}]}}}}}) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000c80)={0x6c, r10, 0x1, 0xffffffff, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4040811}, 0x0) 1.120011079s ago: executing program 0 (id=3265): socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000540)={0x42, 0x4, 0x1}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x1, {0x41, 0x2, 0xfffffffd}}, 0x10) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) bind$tipc(0xffffffffffffffff, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(0xffffffffffffffff, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) bind$tipc(0xffffffffffffffff, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) bind$tipc(0xffffffffffffffff, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) bind$tipc(r1, 0x0, 0x0) 1.027788471s ago: executing program 3 (id=3266): accept$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000140)) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f0000000180)=0x5, 0x4) connect$netrom(0xffffffffffffffff, &(0x7f00000000c0)={{0xa, @bcast, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, 0x48) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f00000002c0)) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="200000003e00010326"], 0x20}}, 0x8004) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000060000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000e3ff000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, &(0x7f0000000400), &(0x7f0000000440)}, 0x20) socket(0x2a, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0600000004000000400200000700000000000000c40eacad30a2c2c452a3529a920cf4603165d25218d00f1faa8a78335d88b7bcf9abdc2a8617ffb435ab4b7823ce38ccb277f9cb0ff6e71cd193111b9dc9fbc7768f809c375040807c8f", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000380), 0xfff, r3, 0x0, 0xa0028000}, 0x38) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000540)=ANY=[@ANYBLOB="e80100002e000305000000000000000017fe018ef5b54effe0d36fbe7dddcf7ef2dde4de3d49cc017c5a55b0828d39fe9e9a6acd6b344e93fc6519e52c2b7453648904a40d8af02ace0f09389ce53cbdb080d8598ab12f9f7bf3f9a55ed5a908dd22f7ea4f2bf2d71b2baac0f2494eb6ef6ab1ba7d7aa97f0701dcf500bf34d3aa4b3e8d6d000050f28efbece0c4e61c523601f22d8a6b69e6a3b39c4b9c1d1fdf9304b826ab58a9cc38d16826d749ffb6c840b144132b9fd33b72745a425fe08f3a0a5bc1a38fd93f91b062c0516aadad566bbe0f45772b18e82ef7fcf23c00000000000000", @ANYRES32=r4, @ANYBLOB="04000080ec005b80ee5c4e21864f48896e1bc8dbcb64793ad778573b950142d933f9c539b46e12f8ff611f1c3d04bee891b9cc77728e28ca3d25defda4ca40b6fadccf6e8fb420f30d9a4692c9c3d9a16b29f0ed6c6d4a2c7ce388cf7b16b6db23c8843da5605ffdc45d5277967ebab2a10176151f46a03e781deb07a86ee3d82420c404869e6f8a924b6d2c67afe25969cc3e492e26a3578a8e83b991494b958bb46744087241410d78f1c54012ea7e517a4fe7c8c6e2bc554abd2b2ed14df1fd44bf4b0e75a44acb9e34be3e504f0f33aeeca3e52c7fe84f2a9ea6d15f5c3eda089d076254a9a808", @ANYRES32, @ANYBLOB='\x00'], 0x1e8}], 0x1}, 0x80) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a44, 0x1700) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x7a05, 0x1700) sendfile(r6, r5, 0x0, 0x10000) unshare(0x0) r7 = socket$rds(0x15, 0x5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000200)={'veth1_to_bond\x00', 0x0}) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000fbffeb330000000000950000000000b8df"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r9}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8}, 0x4c) setsockopt$SO_RDS_TRANSPORT(r7, 0x114, 0x8, &(0x7f0000000380)=0x2, 0x4) r11 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r11, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) bind$inet(r11, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) 995.093957ms ago: executing program 0 (id=3267): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000100000008000100e4ff"], 0x6c}}, 0x0) (async) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r4, 0x29, 0xd0, &(0x7f0000000000)=0x9, 0x4) (async) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x20, r1, 0x101, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x84) 983.822021ms ago: executing program 2 (id=3268): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e23, 0xc4f, @loopback}, 0x1c) write(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000021c0), 0x5b, 0x40, 0x0) sendto$inet6(r0, &(0x7f00000002c0)="9e", 0x1, 0x41, &(0x7f0000000200)={0xa, 0x4e23, 0x10003, @loopback, 0x7}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000300)={0x0, 0xfffeffff, 0x20}, 0xc) writev(r0, &(0x7f0000000640), 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000340)=',', 0x34000}], 0x1) close(0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r3) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0x401, 0xa4, 0xfffffc00, 0x6, 0x0, 0x3, 0xff, 0x3ff}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 696.103122ms ago: executing program 0 (id=3269): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) ioctl$sock_netdev_private(r0, 0x89f0, &(0x7f0000000000)) r1 = epoll_create(0x20000000) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) setsockopt(r4, 0x84, 0x11, &(0x7f0000000040)="020c0000098011e8", 0x8) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r7 = accept4(r6, 0x0, 0x0, 0x80800) sendmmsg$alg(r7, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000180)="98ac3c6741a40ce1997f49fba70d946a07f2178b8bc77dc9339505c7", 0x1c}, {&(0x7f0000000140)="f3e41672c645e11018dc0400000000000000a4c47b311e714b5aab5a85ab5f", 0x1f}, {&(0x7f00000002c0)="390ea240d45db5fcbed46fe54ba61b38faa36d565c3ed3685df9f01173ce90c93393750e9e37617c255ddb6d56", 0x2d}], 0x4, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2, 0x0, 0x0, 0xf5000000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x1a4, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x178, 0x4, 0x0, 0x1, [{0x160, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x150, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0xb, 0x1, 'policy\x00'}, @NFTA_MATCH_INFO={0x138, 0x3, "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"}]}}}, {0x14, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0xffffffffffffff67, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x20}}, 0x1cc}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) recvmmsg(r2, &(0x7f0000004400)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001d00)=[{0xfffffffffffffffd}], 0x1}}], 0x2, 0x0, 0x0) syz_emit_ethernet(0x62, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa2aaaaadfe547aaaabbffff4d0000540000000000079078ac141400ac1e0001890fc99a02afe0ac1414aa0a013d64000000000ca1fad89b050000000005000000004404", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="8000000090780800080a00000000000003ff0000"], 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000180)={0x80000020}) epoll_pwait(r1, &(0x7f0000000000)=[{}], 0x1, 0x7, 0x0, 0x0) 695.874868ms ago: executing program 3 (id=3270): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="3f9d0000000001dcdf2517000000"], 0x48}, 0x1, 0x0, 0x0, 0x8010}, 0x24004801) 562.267596ms ago: executing program 3 (id=3271): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000001f00)) sendmmsg(r0, &(0x7f0000007180)=[{{0x0, 0x0, &(0x7f00000027c0)=[{&(0x7f0000000340)}], 0x1}}], 0x1, 0x10014) 502.023844ms ago: executing program 1 (id=3272): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xb, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000000000061118a0000000000850000000300000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x10000}, [@IFLA_OPERSTATE={0x5, 0x10, 0x5}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$fou(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002dbd7000000000000100000008000600e0000001050004000100000008000b0027"], 0x2c}, 0x1, 0x0, 0x0, 0x20048091}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000ec0)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r4}, @IFLA_HSR_SLAVE2={0x8, 0x2, r5}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x1}]}}}]}, 0x48}}, 0x0) 455.8569ms ago: executing program 0 (id=3273): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a3100000000090003007379"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0xe45}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 438.560716ms ago: executing program 2 (id=3274): r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x16, 0x13, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c252500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000180100002020702500000000002020207b1ad8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000080000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe, 0xfffffffffffffffd, &(0x7f00000001c0)="186bf7ffffffffffffffef0a3254", 0x0, 0xff, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r2, 0x11, 0xa, &(0x7f0000000040)=0x6, 0x4) sendmmsg$inet6(r2, &(0x7f0000000740)=[{{&(0x7f0000000100)={0x2, 0x4e21, 0x0, @empty}, 0x1c, 0x0}}], 0x300, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r5, 0x1, 0x10, &(0x7f0000000100)=0xffff, 0x4) writev(r4, &(0x7f0000000cc0)=[{&(0x7f0000000780)="1e", 0x1}], 0x1) recvmmsg(r5, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0xffffffffffffff21, 0x0, 0x0, &(0x7f00000005c0)=""/108, 0x6c}, 0x7fff}], 0x3fffffffffffcbe, 0x0, 0x0) bind$tipc(r3, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10) bind$tipc(r3, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r6, 0x29, 0xcb, &(0x7f0000000040)=0xffffffff, 0x4) bind$tipc(r0, 0x0, 0x0) 361.205299ms ago: executing program 3 (id=3275): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3000000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="020302408023001010001280080001"], 0x30}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) (async, rerun: 64) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x10, 0xfffffffe, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x3}, {0x0, 0xe}, {0x10, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x844}, 0x40084) (async, rerun: 64) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) (async, rerun: 64) r1 = socket(0x2, 0x80805, 0x0) (rerun: 64) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[], 0x30}], 0x1, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x4000040) (async) socket$inet6_sctp(0xa, 0x1, 0x84) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async, rerun: 64) r4 = socket(0x2, 0x80805, 0x0) (async, rerun: 64) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x80005, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, 0x0, 0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000000040)) (async, rerun: 64) r6 = socket$inet6_udp(0xa, 0x2, 0x0) (rerun: 64) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000180)={@loopback={0xfec0ffff00000000}, 0x8000000, 0x0, 0x2, 0x1}, 0x20) r7 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r7, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xa8400, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000000)={'\x00', 0x2}) (async, rerun: 32) ioctl$TUNSETPERSIST(r8, 0x400454cb, 0x0) (async, rerun: 32) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, 0x0, 0x0) r9 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r9, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_mreqsrc(r9, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) (async, rerun: 64) setsockopt$inet_msfilter(r9, 0x0, 0x29, &(0x7f0000000100)=ANY=[], 0x57) (rerun: 64) r10 = socket$netlink(0x10, 0x3, 0x0) writev(r10, &(0x7f0000000500)=[{0x0}, {0x0}], 0x2) 360.544917ms ago: executing program 0 (id=3276): socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000540)={0x42, 0x4, 0x1}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x1, {0x41, 0x2, 0xfffffffd}}, 0x10) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) bind$tipc(0xffffffffffffffff, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(0xffffffffffffffff, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) bind$tipc(0xffffffffffffffff, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) bind$tipc(0xffffffffffffffff, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) bind$tipc(r1, 0x0, 0x0) 155.081404ms ago: executing program 0 (id=3277): bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="31832abd70000000000019000000180001801400020065727370616e30"], 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x4886) 0s ago: executing program 3 (id=3278): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x2000300, 0xe, 0xfffffd83, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) kernel console output (not intermixed with test programs): 0] type 1 family 0 port 8472 - 0 [ 232.897331][T11939] IPVS: set_ctl: invalid protocol: 4 100.1.1.2:20002 [ 233.134999][T11952] syzkaller0: mtu less than device minimum [ 233.270997][T11960] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1464'. [ 233.304120][T11961] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 233.592441][T11968] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1466'. [ 233.617182][T11968] netlink: 'syz.2.1466': attribute type 1 has an invalid length. [ 233.639688][T11968] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1466'. [ 233.906369][T11971] wg1 speed is unknown, defaulting to 1000 [ 233.973254][T11976] netlink: 'syz.4.1467': attribute type 13 has an invalid length. [ 233.982403][T11976] netlink: 'syz.4.1467': attribute type 17 has an invalid length. [ 234.136145][T11976] gre0: left promiscuous mode [ 234.365168][T11976] 8021q: adding VLAN 0 to HW filter on device à [ 234.419476][T11976] 8021q: adding VLAN 0 to HW filter on device team0 [ 234.667784][T11976] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 234.774798][T11977] wg1 speed is unknown, defaulting to 1000 [ 235.130225][T12019] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1478'. [ 235.338978][T12026] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1480'. [ 235.354591][T12025] wg1 speed is unknown, defaulting to 1000 [ 235.366049][ T5183] Bluetooth: hci0: command tx timeout [ 235.386340][T12026] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1480'. [ 235.832568][T12045] syzkaller0: mtu less than device minimum [ 237.631369][T12088] __nla_validate_parse: 6 callbacks suppressed [ 237.631387][T12088] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1495'. [ 237.789215][T12098] tipc: Enabled bearer , priority 0 [ 237.810895][T12098] syzkaller0: entered promiscuous mode [ 237.931639][T12098] syzkaller0: entered allmulticast mode [ 238.054107][T12110] syzkaller0: mtu less than device minimum [ 238.084086][T12098] tipc: Resetting bearer [ 238.192850][T12097] tipc: Resetting bearer [ 238.232532][T12097] tipc: Disabling bearer [ 238.592226][T12122] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1505'. [ 238.824951][T12137] bridge0: port 1(syz_tun) entered blocking state [ 238.880482][T12137] bridge0: port 1(syz_tun) entered disabled state [ 238.913009][T12137] syz_tun: entered allmulticast mode [ 238.947318][T12137] syz_tun: entered promiscuous mode [ 239.064425][T12147] syzkaller0: entered promiscuous mode [ 239.077325][ T8452] IPVS: starting estimator thread 0... [ 239.119699][T12148] syzkaller1: entered promiscuous mode [ 239.136603][T12148] syzkaller1: entered allmulticast mode [ 239.195340][T12149] IPVS: using max 34 ests per chain, 81600 per kthread [ 239.261668][T12156] netlink: 'syz.4.1514': attribute type 13 has an invalid length. [ 239.936025][T12162] wg1 speed is unknown, defaulting to 1000 [ 240.242819][T12186] netlink: 'syz.4.1525': attribute type 8 has an invalid length. [ 240.363045][T12195] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1527'. [ 240.974440][T12219] wg1 speed is unknown, defaulting to 1000 [ 241.777404][T12253] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1541'. [ 242.295136][T12276] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 242.307229][T12281] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1547'. [ 242.316882][T12276] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1547'. [ 242.414666][T12284] syzkaller0: entered promiscuous mode [ 242.424647][T12284] syzkaller0: entered allmulticast mode [ 242.490479][T12293] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-xor(2) [ 242.724487][T12305] netlink: 26 bytes leftover after parsing attributes in process `syz.1.1553'. [ 242.774085][T12311] tipc: Failed to remove unknown binding: 66,1,1/11552:890131786/890131788 [ 242.789403][T12313] tipc: Failed to remove unknown binding: 66,1,1/11552:890131786/890131788 [ 242.804482][T12316] netlink: 'syz.2.1557': attribute type 13 has an invalid length. [ 242.804931][T12313] tipc: Failed to remove unknown binding: 66,1,1/11552:890131786/890131788 [ 242.827117][T12316] netlink: 'syz.2.1557': attribute type 17 has an invalid length. [ 242.827164][T12305] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1553'. [ 242.847724][T12316] netlink: 'syz.2.1557': attribute type 27 has an invalid length. [ 242.891778][T12305] batadv_slave_1 (unregistering): left promiscuous mode [ 242.977716][T12316] sit0: left promiscuous mode [ 243.032750][T12316] dummy0: left promiscuous mode [ 243.068686][T12316] veth1: left promiscuous mode [ 243.100666][T12316] veth0_to_hsr: left promiscuous mode [ 243.108197][T12316] veth0_to_hsr: left allmulticast mode [ 243.171677][T12316] gtp0: left promiscuous mode [ 243.179090][T12316] gtp0: left allmulticast mode [ 243.200405][T12316] batadv1: left promiscuous mode [ 243.206029][T12316] batadv1: left allmulticast mode [ 243.227949][T12316] syzkaller0: left promiscuous mode [ 243.233219][T12316] syzkaller0: left allmulticast mode [ 243.244341][T12316] mac80211_hwsim hwsim8 wlan0: left allmulticast mode [ 243.256699][T12316] mac80211_hwsim hwsim8 wlan0: left promiscuous mode [ 243.263952][T12316] macsec1: left promiscuous mode [ 243.269323][T12316] macsec1: left allmulticast mode [ 243.278027][T12316] bond0: left promiscuous mode [ 243.289251][T12316] macvlan3: left promiscuous mode [ 243.312762][T12316] bridge0: left promiscuous mode [ 243.318900][T12316] bridge0: left allmulticast mode [ 243.327122][T12316] bond2: left promiscuous mode [ 243.332193][T12316] bond2: left allmulticast mode [ 243.344176][T12316] gretap1: left allmulticast mode [ 243.380396][T11823] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 243.398490][T11823] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 243.409969][T11823] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 243.442261][T12331] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 243.452049][T11823] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 243.714583][T12361] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1569'. [ 243.777576][T12366] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1572'. [ 243.807386][T12372] netlink: 'syz.4.1573': attribute type 1 has an invalid length. [ 243.815511][T12372] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1573'. [ 243.824605][T12366] hsr_slave_0: left promiscuous mode [ 243.840646][T12366] hsr_slave_1: left promiscuous mode [ 244.097393][T12392] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1577'. [ 244.145021][T12392] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1577'. [ 244.272249][T12398] wg1 speed is unknown, defaulting to 1000 [ 244.439538][T12410] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1579'. [ 244.642481][T12410] syz_tun (unregistering): left allmulticast mode [ 244.649716][T12410] syz_tun (unregistering): left promiscuous mode [ 244.665541][T12410] bridge0: port 1(syz_tun) entered disabled state [ 244.856703][T12421] vlan0: entered promiscuous mode [ 245.097555][T12425] netlink: 332 bytes leftover after parsing attributes in process `syz.1.1583'. [ 245.125639][T12425] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1583'. [ 245.203978][T12432] erspan0: entered promiscuous mode [ 245.227258][T12432] batadv_slave_1: entered promiscuous mode [ 245.247987][T12432] debugfs: 'hsr0' already exists in 'hsr' [ 245.265165][T12432] Cannot create hsr debugfs directory [ 245.271225][T12432] hsr0: Slave A (erspan0) is not up; please bring it up to get a fully working HSR network [ 245.287775][T12432] hsr0: Slave B (batadv_slave_1) is not up; please bring it up to get a fully working HSR network [ 245.320772][T12430] pimreg: entered allmulticast mode [ 245.342730][T12435] openvswitch: netlink: Multiple metadata blocks provided [ 245.373400][T12430] pimreg: left allmulticast mode [ 245.536290][T12440] A link change request failed with some changes committed already. Interface macvlan1 may have been left with an inconsistent configuration, please check. [ 245.576692][T12443] netlink: 'syz.3.1589': attribute type 29 has an invalid length. [ 245.603832][T12443] netlink: 'syz.3.1589': attribute type 29 has an invalid length. [ 245.631815][T12443] netlink: 'syz.3.1589': attribute type 29 has an invalid length. [ 245.677774][T12446] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (65535) [ 245.687671][T12446] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023 [ 245.704950][T12443] netlink: 'syz.3.1589': attribute type 29 has an invalid length. [ 245.752554][T12443] netlink: 'syz.3.1589': attribute type 29 has an invalid length. [ 245.807764][T12443] netlink: 'syz.3.1589': attribute type 29 has an invalid length. [ 246.289230][T12442] infiniband !yz!: set down [ 246.331366][T12442] infiniband !yz!: added team_slave_0 [ 246.361516][T12442] !yz!: rxe_create_cq: returned err = -12 [ 246.390435][T12442] infiniband !yz!: Couldn't create ib_mad CQ [ 246.437018][T12442] infiniband !yz!: Couldn't open port 1 [ 246.473434][T12480] netlink: 'syz.1.1599': attribute type 13 has an invalid length. [ 246.505829][T12480] netlink: 'syz.1.1599': attribute type 17 has an invalid length. [ 246.548675][T12480] erspan0: left allmulticast mode [ 246.574314][T12442] RDS/IB: !yz!: added [ 246.588690][T12442] smc: adding ib device !yz! with port count 1 [ 246.606271][T12480] 8021q: adding VLAN 0 to HW filter on device bond0 [ 246.609376][T12442] smc: ib device !yz! port 1 has no pnetid [ 246.646871][T12480] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 246.901643][T12486] A link change request failed with some changes committed already. Interface macvlan1 may have been left with an inconsistent configuration, please check. [ 246.969907][T12490] netlink: 'syz.1.1602': attribute type 1 has an invalid length. [ 247.100274][T12493] wg1 speed is unknown, defaulting to 1000 [ 247.115469][T12495] !: renamed from dummy0 [ 247.213786][T12498] netlink: 'syz.1.1605': attribute type 3 has an invalid length. [ 247.237712][T12500] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 247.288506][T12502] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 247.343260][T12500] wg1 speed is unknown, defaulting to 1000 [ 247.768337][T12531] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 247.839265][T12531] __nla_validate_parse: 12 callbacks suppressed [ 247.839283][T12531] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1610'. [ 247.877301][T12531] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1610'. [ 248.052406][T12540] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1613'. [ 248.184149][T12508] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1604'. [ 248.345532][T12556] netlink: 9896 bytes leftover after parsing attributes in process `syz.0.1614'. [ 248.391568][T12556] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1614'. [ 248.449323][T12556] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1614'. [ 248.479462][T12556] A link change request failed with some changes committed already. Interface macvlan1 may have been left with an inconsistent configuration, please check. [ 248.562779][T12561] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1615'. [ 248.574323][T12561] ..0·: renamed from hsr0 [ 248.586951][T12561] ..0·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 248.601668][T12561] ..0·: entered allmulticast mode [ 248.607053][T12561] hsr_slave_0: entered allmulticast mode [ 248.616923][T12561] A link change request failed with some changes committed already. Interface ..0· may have been left with an inconsistent configuration, please check. [ 248.824271][T12571] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1618'. [ 249.059398][T12577] syz_tun: entered allmulticast mode [ 249.400206][T12577] syz_tun: left allmulticast mode [ 250.055001][T12596] tipc: Enabling of bearer rejected, failed to enable media [ 250.193032][T12593] wg1 speed is unknown, defaulting to 1000 [ 250.641137][T12608] netlink: 165 bytes leftover after parsing attributes in process `syz.3.1630'. [ 250.855130][T12612] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 251.069165][T12624] validate_nla: 3 callbacks suppressed [ 251.069184][T12624] netlink: 'syz.0.1634': attribute type 16 has an invalid length. [ 251.450387][T12638] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 251.461980][T12637] A link change request failed with some changes committed already. Interface macvlan1 may have been left with an inconsistent configuration, please check. [ 251.515075][T12638] netlink: 'syz.3.1638': attribute type 1 has an invalid length. [ 251.526658][T12638] netlink: 'syz.3.1638': attribute type 1 has an invalid length. [ 251.630471][T12643] bridge4: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 251.758659][T12649] netlink: 'syz.0.1641': attribute type 3 has an invalid length. [ 251.871424][T12655] netlink: 'syz.4.1644': attribute type 1 has an invalid length. [ 251.872205][T12653] tipc: Enabling of bearer rejected, failed to enable media [ 251.922005][T12653] netlink: 'syz.2.1643': attribute type 1 has an invalid length. [ 252.273488][T12682] A link change request failed with some changes committed already. Interface macvlan1 may have been left with an inconsistent configuration, please check. [ 252.309357][T12684] netlink: 'syz.3.1652': attribute type 1 has an invalid length. [ 252.400596][T12688] netlink: 'syz.4.1653': attribute type 11 has an invalid length. [ 252.991199][T12726] tipc: Enabling of bearer rejected, failed to enable media [ 253.002964][T12726] syzkaller0: mtu less than device minimum [ 253.009218][T12727] __nla_validate_parse: 15 callbacks suppressed [ 253.009235][T12727] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1662'. [ 253.161259][T12736] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1663'. [ 253.172386][T12736] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1663'. [ 253.183175][T12736] A link change request failed with some changes committed already. Interface macvlan1 may have been left with an inconsistent configuration, please check. [ 253.392707][T12748] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1671'. [ 253.401950][T12748] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1671'. [ 253.412135][T12748] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1671'. [ 253.421575][T12748] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1671'. [ 253.430817][T12748] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1671'. [ 253.439908][T12748] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1671'. [ 253.449230][T12748] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1671'. [ 253.933593][T12771] netlink: 'syz.2.1676': attribute type 4 has an invalid length. [ 253.963290][T12778] wg1 speed is unknown, defaulting to 1000 [ 253.983926][T12784] netlink: 'syz.2.1676': attribute type 4 has an invalid length. [ 254.068310][T12786] A link change request failed with some changes committed already. Interface macvlan1 may have been left with an inconsistent configuration, please check. [ 254.129944][T12789] tipc: Enabled bearer , priority 0 [ 254.632426][T12815] netlink: 'syz.0.1687': attribute type 1 has an invalid length. [ 254.687547][T12815] 8021q: adding VLAN 0 to HW filter on device bond9 [ 255.013986][T12828] wg1 speed is unknown, defaulting to 1000 [ 255.247079][ T5970] tipc: Node number set to 3316209046 [ 255.505388][T12839] nbd1: detected capacity change from 0 to 127 [ 255.553060][ T5183] block nbd1: Receive control failed (result -32) [ 255.911179][T12858] wg1 speed is unknown, defaulting to 1000 [ 256.230203][T12877] 8021q: adding VLAN 0 to HW filter on device  [ 256.243057][T12877] 8021q: adding VLAN 0 to HW filter on device team0 [ 256.253780][T12887] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 256.274585][T12877] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 256.497211][T12895] validate_nla: 4 callbacks suppressed [ 256.497230][T12895] netlink: 'syz.4.1706': attribute type 1 has an invalid length. [ 256.611023][T12900] bond7: entered promiscuous mode [ 256.622862][T12900] bond7: entered allmulticast mode [ 256.629219][T12900] 8021q: adding VLAN 0 to HW filter on device bond7 [ 256.667911][T12895] bridge5: entered promiscuous mode [ 256.673468][T12895] bridge5: entered allmulticast mode [ 256.680056][T12895] bond7: (slave bridge5): Enslaving as a backup interface with an up link [ 256.743838][T11823] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 256.765351][T11823] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 256.774114][T11823] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 256.804307][T11823] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 256.825786][T12904] netlink: 'syz.2.1708': attribute type 10 has an invalid length. [ 256.864454][T12904] team0: Device ipvlan1 failed to register rx_handler [ 257.087056][T12913] 8021q: adding VLAN 0 to HW filter on device bond8 [ 257.100280][T12919] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 257.211646][T12921] wg1 speed is unknown, defaulting to 1000 [ 257.793263][T12951] syz_tun: entered allmulticast mode [ 257.861303][T12950] syz_tun: left allmulticast mode [ 257.999952][T12961] gretap0: entered promiscuous mode [ 258.177063][T12974] netlink: 'syz.3.1727': attribute type 1 has an invalid length. [ 258.360702][T12974] bond5: entered promiscuous mode [ 258.390332][T12974] 8021q: adding VLAN 0 to HW filter on device bond5 [ 258.725046][T12995] 8021q: adding VLAN 0 to HW filter on device à [ 258.734553][T12995] 8021q: adding VLAN 0 to HW filter on device team0 [ 258.760738][T12995] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 258.825433][T13003] tipc: Enabling of bearer rejected, already enabled [ 259.101019][T13031] netlink: 'syz.4.1745': attribute type 12 has an invalid length. [ 259.118151][T13031] __nla_validate_parse: 59 callbacks suppressed [ 259.118171][T13031] netlink: 9472 bytes leftover after parsing attributes in process `syz.4.1745'. [ 259.931757][T13050] vlan1: entered promiscuous mode [ 260.018508][T13050] macvtap0: entered promiscuous mode [ 260.153627][T13050] delete_channel: no stack [ 260.211796][T13070] wg1 speed is unknown, defaulting to 1000 [ 260.332382][T13087] wg1 speed is unknown, defaulting to 1000 [ 260.404457][T13090] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1756'. [ 260.470087][T13095] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1758'. [ 260.888360][T13109] tipc: Enabling of bearer rejected, failed to enable media [ 260.898412][T13107] wg1 speed is unknown, defaulting to 1000 [ 260.960785][T13115] ip6gretap1: entered promiscuous mode [ 261.089832][T13118] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1767'. [ 261.942042][T13156] tipc: Enabling of bearer rejected, already enabled [ 261.994989][T13161] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1778'. [ 262.028701][T13161] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1778'. [ 262.183002][T13168] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 262.194524][T13162] bond7: (slave macvlan0): Removing an active aggregator [ 262.216818][T13162] bond7: (slave macvlan0): Releasing backup interface [ 262.314999][T13162] veth0_virt_wifi: renamed from macvlan0 [ 262.530731][T13179] sock: sock_set_timeout: `syz.0.1780' (pid 13179) tries to set negative timeout [ 262.551641][T13172] 8021q: adding VLAN 0 to HW filter on device bond4 [ 262.677043][T13181] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1781'. [ 262.692385][T13172] bond4: (slave macvlan4): Enslaving as a backup interface with a down link [ 262.767904][T13188] netlink: 'syz.0.1784': attribute type 13 has an invalid length. [ 262.804233][T13188] netlink: 'syz.0.1784': attribute type 17 has an invalid length. [ 262.927174][T13200] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 262.940039][T13188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 263.027889][T13188] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 263.118836][T13207] netlink: 'syz.2.1788': attribute type 3 has an invalid length. [ 263.198359][T13207] bond5: entered promiscuous mode [ 263.213673][T13207] 8021q: adding VLAN 0 to HW filter on device bond5 [ 263.468891][T13222] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1793'. [ 263.562132][T13228] syzkaller0: entered promiscuous mode [ 263.575074][T13228] syzkaller0: entered allmulticast mode [ 263.708152][T13240] netlink: 'syz.2.1800': attribute type 1 has an invalid length. [ 263.713275][T13241] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1801'. [ 263.718569][T13240] netlink: 232 bytes leftover after parsing attributes in process `syz.2.1800'. [ 263.863489][T13251] wg1 speed is unknown, defaulting to 1000 [ 263.892692][T13252] netlink: 'syz.1.1802': attribute type 13 has an invalid length. [ 263.905223][T13252] netlink: 'syz.1.1802': attribute type 17 has an invalid length. [ 263.966911][T13252] ..0·: left allmulticast mode [ 263.979921][T13252] hsr_slave_0: left allmulticast mode [ 263.988771][T13255] netlink: 'syz.2.1804': attribute type 2 has an invalid length. [ 264.018012][T13252] mac80211_hwsim hwsim3 wlan1: left allmulticast mode [ 264.028108][T13252] syzkaller0: left promiscuous mode [ 264.033496][T13252] syzkaller0: left allmulticast mode [ 264.098563][T13255] : entered promiscuous mode [ 264.129656][T13263] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0 [ 264.141471][T13261] IPVS: stopping backup sync thread 13263 ... [ 264.162917][T13261] tap0: tun_chr_ioctl cmd 1074025678 [ 264.169181][T13261] tap0: group set to 0 [ 264.231046][T13265] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1807'. [ 264.401693][T13272] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1810'. [ 264.550794][T13272] netlink: 'syz.4.1810': attribute type 9 has an invalid length. [ 264.812378][T13283] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1810'. [ 264.824583][T13289] netlink: 'syz.0.1815': attribute type 15 has an invalid length. [ 264.833488][T13289] netlink: 666 bytes leftover after parsing attributes in process `syz.0.1815'. [ 264.908711][T13291] syzkaller0: mtu less than device minimum [ 265.062363][T13306] smc: net device bond0 applied user defined pnetid SYZ2 [ 265.100300][T13310] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1820'. [ 265.117110][T13306] smc: net device bond0 erased user defined pnetid SYZ2 [ 265.157668][T13310] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1820'. [ 265.296705][T13327] netlink: 'syz.2.1825': attribute type 23 has an invalid length. [ 265.481687][T13336] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1827'. [ 265.519043][T13336] bridge4: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 265.537749][T13336] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1827'. [ 265.588284][T13344] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 265.608867][T13344] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 265.686648][T13352] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1832'. [ 265.746811][T13355] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1834'. [ 265.782950][T13355] bond0: (slave wlan1): Releasing backup interface [ 265.790091][T13355] bond0: (slave wlan1): the permanent HWaddr of slave - 08:02:11:00:00:01 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 265.870055][T13362] geneve0: entered promiscuous mode [ 266.195772][T13375] sctp: [Deprecated]: syz.3.1839 (pid 13375) Use of struct sctp_assoc_value in delayed_ack socket option. [ 266.195772][T13375] Use struct sctp_sack_info instead [ 266.435700][T13384] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 266.691081][T13381] wg1 speed is unknown, defaulting to 1000 [ 267.187843][T13410] tipc: Enabling of bearer rejected, already enabled [ 267.914154][T13456] wg1 speed is unknown, defaulting to 1000 [ 268.017532][T13470] wg1 speed is unknown, defaulting to 1000 [ 268.447669][T13492] IPVS: Unknown mcast interface: vcan0 [ 268.568887][T13497] batadv2: entered promiscuous mode [ 268.581245][T13497] batadv2: entered allmulticast mode [ 269.074694][T13511] batadv_slave_0: entered promiscuous mode [ 269.147363][T13514] batadv_slave_0: left promiscuous mode [ 269.522466][T13529] wg1 speed is unknown, defaulting to 1000 [ 269.547982][T13522] wg1 speed is unknown, defaulting to 1000 [ 269.592777][T13539] __nla_validate_parse: 12 callbacks suppressed [ 269.592858][T13539] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1886'. [ 270.027693][T13555] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1891'. [ 270.157577][T13559] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1891'. [ 270.538741][T13574] validate_nla: 5 callbacks suppressed [ 270.538759][T13574] netlink: 'syz.2.1894': attribute type 16 has an invalid length. [ 270.552355][T13574] netlink: 'syz.2.1894': attribute type 17 has an invalid length. [ 270.584676][T13574] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 270.854233][T13576] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 271.253212][T13589] netlink: 'syz.0.1900': attribute type 1 has an invalid length. [ 271.281842][T13589] netlink: 228 bytes leftover after parsing attributes in process `syz.0.1900'. [ 271.349202][T13589] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1900'. [ 271.387264][T13589] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1900'. [ 271.451802][T13589] erspan0: entered promiscuous mode [ 271.470292][T13589] erspan0: left promiscuous mode [ 271.531098][T13593] wg1 speed is unknown, defaulting to 1000 [ 271.739043][T13603] netlink: 'syz.1.1904': attribute type 1 has an invalid length. [ 271.741367][T13605] bridge5: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 271.746948][T13603] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1904'. [ 271.746971][T13603] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1904'. [ 271.811244][T13610] tap0: tun_chr_ioctl cmd 1074025677 [ 271.823889][T13610] tap0: linktype set to 776 [ 271.833939][T13610] netlink: 'syz.2.1906': attribute type 1 has an invalid length. [ 271.855875][T13610] netlink: 'syz.2.1906': attribute type 21 has an invalid length. [ 271.882875][T13610] netlink: 'syz.2.1906': attribute type 22 has an invalid length. [ 271.903081][T13610] netlink: 'syz.2.1906': attribute type 23 has an invalid length. [ 271.931806][T13610] netlink: 'syz.2.1906': attribute type 25 has an invalid length. [ 271.942990][T13614] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1907'. [ 271.948333][T13611] tap0: tun_chr_ioctl cmd 2147767520 [ 271.960859][T13610] netlink: 'syz.2.1906': attribute type 26 has an invalid length. [ 271.973248][T13611] pim6reg1: entered promiscuous mode [ 271.978579][T13610] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1906'. [ 272.015292][T13611] pim6reg1: entered allmulticast mode [ 272.403878][T13626] tipc: Enabling of bearer rejected, already enabled [ 274.868081][T13755] __nla_validate_parse: 12 callbacks suppressed [ 274.868098][T13755] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1945'. [ 274.912467][T13753] wg1 speed is unknown, defaulting to 1000 [ 275.621277][T13776] wg1 speed is unknown, defaulting to 1000 [ 275.857144][T13784] netlink: zone id is out of range [ 276.485587][T13799] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1956'. [ 276.509091][T13799] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1956'. [ 276.535978][T13799] validate_nla: 6 callbacks suppressed [ 276.535997][T13799] netlink: 'syz.3.1956': attribute type 13 has an invalid length. [ 276.578188][T13797] tipc: Enabling of bearer rejected, already enabled [ 276.578621][T13799] netlink: 'syz.3.1956': attribute type 11 has an invalid length. [ 276.959132][T13809] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1959'. [ 277.202973][T13817] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1961'. [ 277.209234][T13821] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1962'. [ 277.360499][T13824] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1963'. [ 277.421146][T13826] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1964'. [ 277.607099][T13835] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1966'. [ 277.710019][T11823] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 277.718675][T13835] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1966'. [ 277.735772][T11827] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 277.749723][T11827] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 277.796368][T11827] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 277.916477][T13839] netlink: set zone limit has 4 unknown bytes [ 278.233477][T13853] syzkaller0: entered promiscuous mode [ 278.253532][T13853] syzkaller0: entered allmulticast mode [ 278.629909][T13881] netlink: 'syz.4.1979': attribute type 15 has an invalid length. [ 278.686407][T13881] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 278.723963][T13888] syzkaller0: MTU too low for tipc bearer [ 278.737979][T13888] tipc: Enabling of bearer rejected, failed to enable media [ 278.770242][T13888] syzkaller0: entered promiscuous mode [ 278.784278][T13888] syzkaller0: entered allmulticast mode [ 278.894427][T13897] netlink: 'syz.2.1984': attribute type 1 has an invalid length. [ 278.902590][T13897] netlink: 'syz.2.1984': attribute type 2 has an invalid length. [ 278.926786][T13896] netlink: 'syz.2.1984': attribute type 1 has an invalid length. [ 278.952660][T13896] netlink: 'syz.2.1984': attribute type 2 has an invalid length. [ 279.121436][T13909] tipc: Enabling of bearer rejected, already enabled [ 279.819063][T13939] netlink: set zone limit has 4 unknown bytes [ 280.335105][T13974] smc: net device dvmrp0 applied user defined pnetid SYZ0 [ 280.429674][T13986] __nla_validate_parse: 14 callbacks suppressed [ 280.429693][T13986] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2008'. [ 280.466135][T13982] netlink: set zone limit has 4 unknown bytes [ 280.472843][T13986] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2008'. [ 280.580806][T13991] siw: device registration error -23 [ 281.180139][T14024] netlink: 'syz.0.2020': attribute type 13 has an invalid length. [ 281.882413][T14053] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2027'. [ 281.890162][T14055] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2028'. [ 281.941440][T14053] netlink: 92 bytes leftover after parsing attributes in process `syz.4.2027'. [ 282.157868][T14067] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2030'. [ 282.262407][T14081] netlink: 'syz.3.2031': attribute type 8 has an invalid length. [ 282.279549][T14083] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2030'. [ 282.303966][T14081] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2031'. [ 282.377505][T14088] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2033'. [ 282.709642][T14102] netlink: 'syz.3.2035': attribute type 1 has an invalid length. [ 282.722575][T14102] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2035'. [ 283.472124][T14134] netlink: set zone limit has 4 unknown bytes [ 283.496645][T14132] 8021q: adding VLAN 0 to HW filter on device bond9 [ 283.505602][T14134] A link change request failed with some changes committed already. Interface macvlan1 may have been left with an inconsistent configuration, please check. [ 283.596608][T14137] bond9: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 283.607864][T11822] bond9: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 283.629458][T14144] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0 [ 283.629625][T14143] IPVS: stopping backup sync thread 14144 ... [ 283.736928][T11822] bond9: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 283.958967][T14167] netlink: 'syz.4.2055': attribute type 13 has an invalid length. [ 283.985876][T14167] netlink: 'syz.4.2055': attribute type 17 has an invalid length. [ 284.565005][T14167] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 284.699964][T14168] wg1 speed is unknown, defaulting to 1000 [ 285.171758][T14209] lo: Caught tx_queue_len zero misconfig [ 285.315564][T14212] openvswitch: netlink: Flow actions attr not present in new flow. [ 285.472789][T14219] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 285.700308][T14226] __nla_validate_parse: 9 callbacks suppressed [ 285.700325][T14226] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2070'. [ 285.945412][T14236] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2072'. [ 286.298799][T14252] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2077'. [ 286.527696][T14251] wg1 speed is unknown, defaulting to 1000 [ 286.568621][T14255] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2078'. [ 286.724235][T14255] batman_adv: batadv0: Adding interface: ip6gretap2 [ 286.746886][T14255] batman_adv: batadv0: The MTU of interface ip6gretap2 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 286.836670][T14255] batman_adv: batadv0: Interface activated: ip6gretap2 [ 287.154462][T14272] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2082'. [ 287.164017][T14272] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2082'. [ 287.176171][T14272] A link change request failed with some changes committed already. Interface macvlan1 may have been left with an inconsistent configuration, please check. [ 287.260822][T14271] netlink: set zone limit has 4 unknown bytes [ 287.573981][T14284] netlink: 'syz.1.2086': attribute type 11 has an invalid length. [ 287.720910][T14286] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2085'. [ 287.897611][T14286] team0: Mode changed to "loadbalance" [ 288.208765][T14300] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check. [ 288.416934][T14310] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2094'. [ 288.426207][T14310] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2094'. [ 288.536143][T14312] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2095'. [ 288.608761][T14312] _ÐZ`Ô€@ÿÿ: entered promiscuous mode [ 288.871514][T14325] netlink: 'syz.3.2098': attribute type 21 has an invalid length. [ 289.006994][T14330] IPVS: length: 209 != 24 [ 289.735044][T14355] netlink: 'syz.4.2107': attribute type 1 has an invalid length. [ 289.840845][T14357] wg1 speed is unknown, defaulting to 1000 [ 290.995964][T14391] __nla_validate_parse: 2 callbacks suppressed [ 290.995982][T14391] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2121'. [ 291.080691][T14395] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 291.221637][T14401] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2126'. [ 291.263420][T14405] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2127'. [ 291.279452][T14401] smc: removing ib device !yz! [ 291.388590][T14409] netlink: 'syz.2.2128': attribute type 4 has an invalid length. [ 291.448163][T14414] netlink: 'syz.2.2128': attribute type 4 has an invalid length. [ 292.168569][T14430] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2132'. [ 292.218907][T14433] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2133'. [ 292.237868][T14430] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2132'. [ 292.912930][T14467] IPVS: Unknown mcast interface: syzkaller1 [ 292.992277][T14468] netlink: 'syz.3.2141': attribute type 1 has an invalid length. [ 293.014542][T14468] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2141'. [ 293.269985][T14473] wg1 speed is unknown, defaulting to 1000 [ 293.637491][T14494] netlink: 'syz.2.2147': attribute type 21 has an invalid length. [ 294.220908][T14528] syzkaller0 speed is unknown, defaulting to 1000 [ 294.257864][T14528] syzkaller0 speed is unknown, defaulting to 1000 [ 294.287883][T14528] syzkaller0 speed is unknown, defaulting to 1000 [ 294.353756][T14528] infiniband sLò2: RDMA CMA: cma_listen_on_dev, error -98 [ 294.645994][T14528] syzkaller0 speed is unknown, defaulting to 1000 [ 294.653774][T14528] syzkaller0 speed is unknown, defaulting to 1000 [ 294.664877][T14528] syzkaller0 speed is unknown, defaulting to 1000 [ 294.704115][T14528] syzkaller0 speed is unknown, defaulting to 1000 [ 294.758780][T14528] syzkaller0 speed is unknown, defaulting to 1000 [ 294.814153][T14543] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2159'. [ 294.931164][T14551] IPVS: set_ctl: invalid protocol: 60 0.0.0.0:20000 [ 295.006588][T14554] tipc: Enabled bearer , priority 0 [ 295.017744][T14554] syzkaller0: entered promiscuous mode [ 295.024322][T14554] syzkaller0: entered allmulticast mode [ 295.045744][T14553] tipc: Resetting bearer [ 295.079579][T14553] tipc: Disabling bearer [ 295.118680][T14559] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2165'. [ 295.174030][T14561] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2165'. [ 295.176087][T14556] wg1 speed is unknown, defaulting to 1000 [ 295.219457][T14556] syzkaller0 speed is unknown, defaulting to 1000 [ 295.535644][T14577] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 295.743932][T14583] syzkaller0: MTU too low for tipc bearer [ 295.763108][T14583] tipc: Enabling of bearer rejected, failed to enable media [ 295.874939][T14595] bond6: entered promiscuous mode [ 295.884529][T14595] 8021q: adding VLAN 0 to HW filter on device bond6 [ 296.003319][T14605] syzkaller0: MTU too low for tipc bearer [ 296.012827][T14605] tipc: Enabling of bearer rejected, failed to enable media [ 296.037908][T14607] __nla_validate_parse: 1 callbacks suppressed [ 296.037927][T14607] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2177'. [ 296.064314][T14609] netlink: 'syz.0.2178': attribute type 12 has an invalid length. [ 296.324367][T14617] wg1 speed is unknown, defaulting to 1000 [ 296.338948][T14617] syzkaller0 speed is unknown, defaulting to 1000 [ 296.582840][T14625] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2183'. [ 296.609819][T14625] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2183'. [ 296.629488][T14625] netlink: 31 bytes leftover after parsing attributes in process `syz.0.2183'. [ 296.676952][T14625] netlink: 'syz.0.2183': attribute type 3 has an invalid length. [ 296.684717][T14625] netlink: 'syz.0.2183': attribute type 2 has an invalid length. [ 296.715537][T14625] netlink: 31 bytes leftover after parsing attributes in process `syz.0.2183'. [ 296.732475][T14625] netlink: 'syz.0.2183': attribute type 2 has an invalid length. [ 296.852704][T14636] syzkaller0: MTU too low for tipc bearer [ 296.865097][T14636] tipc: Enabling of bearer rejected, failed to enable media [ 296.891198][T14637] wg1 speed is unknown, defaulting to 1000 [ 296.916988][T14637] syzkaller0 speed is unknown, defaulting to 1000 [ 297.160501][T14647] syzkaller0: MTU too low for tipc bearer [ 297.185066][T14647] tipc: Enabling of bearer rejected, failed to enable media [ 297.272349][T14655] mac80211_hwsim hwsim4 syzkaller0: Caught tx_queue_len zero misconfig [ 297.382481][T14663] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2194'. [ 297.396615][T14663] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode [ 297.403806][T14663] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode [ 297.509531][T14655] wg1 speed is unknown, defaulting to 1000 [ 297.544076][T14669] syzkaller1: entered promiscuous mode [ 297.577050][T14669] syzkaller1: entered allmulticast mode [ 297.600763][T14655] syzkaller0 speed is unknown, defaulting to 1000 [ 297.823648][T14678] !: renamed from dummy0 (while UP) [ 297.866705][T14683] syzkaller0: MTU too low for tipc bearer [ 297.906813][T14683] tipc: Enabling of bearer rejected, failed to enable media [ 298.255425][T14701] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2201'. [ 298.323303][T14691] wg1 speed is unknown, defaulting to 1000 [ 298.367321][T14691] syzkaller0 speed is unknown, defaulting to 1000 [ 299.191226][T14725] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2206'. [ 299.200895][T14731] syzkaller0: MTU too low for tipc bearer [ 299.208006][T14731] tipc: Enabling of bearer rejected, failed to enable media [ 299.495136][T14762] tipc: Enabled bearer , priority 0 [ 299.593314][T14762] syzkaller0: entered promiscuous mode [ 299.602064][T14762] syzkaller0: entered allmulticast mode [ 299.620397][T14766] syzkaller0: MTU too low for tipc bearer [ 299.628979][T14766] tipc: Disabling bearer [ 299.684353][T14768] wg1 speed is unknown, defaulting to 1000 [ 299.715400][T14768] syzkaller0 speed is unknown, defaulting to 1000 [ 299.715452][T14770] wg1 speed is unknown, defaulting to 1000 [ 299.741313][T14770] syzkaller0 speed is unknown, defaulting to 1000 [ 300.022853][ T30] audit: type=1800 audit(1757166126.946:15): pid=14787 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2219" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2321 res=0 errno=0 [ 300.053471][T14782] syzkaller0: MTU too low for tipc bearer [ 300.059964][T14782] tipc: Enabling of bearer rejected, failed to enable media [ 300.194846][T14792] netlink: 'syz.1.2222': attribute type 5 has an invalid length. [ 300.211165][T14788] tipc: Enabled bearer , priority 0 [ 300.227047][T14788] syzkaller0: entered promiscuous mode [ 300.232985][T14788] syzkaller0: entered allmulticast mode [ 300.242523][T14792] netlink: 'syz.1.2222': attribute type 5 has an invalid length. [ 300.323849][T14786] tipc: Resetting bearer [ 300.371890][T14786] tipc: Disabling bearer [ 300.414552][T14802] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2223'. [ 300.452507][T14799] netlink: set zone limit has 4 unknown bytes [ 300.486117][T14802] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2223'. [ 300.566040][T14802] A link change request failed with some changes committed already. Interface macvlan1 may have been left with an inconsistent configuration, please check. [ 300.957663][T14816] ..1·: left allmulticast mode [ 300.962769][T14816] hsr_slave_0: left allmulticast mode [ 300.977114][T14816] hsr_slave_1: left allmulticast mode [ 300.984486][T14816] vlan0: left promiscuous mode [ 300.997867][T14816] team1: left promiscuous mode [ 301.002828][T14816] team1: left allmulticast mode [ 301.009754][T14816] bond7: left promiscuous mode [ 301.014702][T14816] bridge5: left promiscuous mode [ 301.020344][T14816] bond7: left allmulticast mode [ 301.028951][T14816] bridge5: left allmulticast mode [ 301.104176][T14830] __nla_validate_parse: 1 callbacks suppressed [ 301.104196][T14830] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2231'. [ 301.121273][T14835] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2231'. [ 301.131333][T14828] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2230'. [ 301.144559][T14830] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2231'. [ 301.211150][T11827] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 301.230042][T11827] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 301.248744][T14840] netlink: 'syz.0.2233': attribute type 4 has an invalid length. [ 301.309080][T14838] netlink: 'syz.0.2233': attribute type 4 has an invalid length. [ 301.319289][T11827] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 301.336189][T11827] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 301.445764][ T5864] Bluetooth: hci4: command 0x0401 tx timeout [ 301.615531][T14857] wg1 speed is unknown, defaulting to 1000 [ 301.624695][T14857] syzkaller0 speed is unknown, defaulting to 1000 [ 301.627082][T14850] wg1 speed is unknown, defaulting to 1000 [ 301.775094][T14850] syzkaller0 speed is unknown, defaulting to 1000 [ 301.786517][T14862] lo: entered allmulticast mode [ 301.792018][T14862] lo: left allmulticast mode [ 301.948303][T14877] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 302.067425][T14884] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2243'. [ 302.105999][T14884] netlink: 'syz.3.2243': attribute type 1 has an invalid length. [ 302.420973][T14892] 8021q: adding VLAN 0 to HW filter on device bond10 [ 302.435550][T14892] bond0: (slave bond10): Enslaving as an active interface with an up link [ 302.525840][T14900] tipc: Enabling of bearer rejected, already enabled [ 302.547816][T14888] wg1 speed is unknown, defaulting to 1000 [ 302.559163][T14899] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 302.575289][T14899] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 302.584840][T14888] syzkaller0 speed is unknown, defaulting to 1000 [ 302.842389][T14907] veth13: entered promiscuous mode [ 302.915112][T14919] delete_channel: no stack [ 303.117388][T14939] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2253'. [ 303.135283][T14939] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2253'. [ 303.172285][T14939] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2253'. [ 303.246811][T14929] veth1: Caught tx_queue_len zero misconfig [ 303.827011][T14958] tipc: Enabling of bearer rejected, already enabled [ 303.897255][T14962] tipc: Enabling of bearer rejected, already enabled [ 303.905891][T14955] syzkaller0: mtu less than device minimum [ 304.071301][T14969] netlink: 216 bytes leftover after parsing attributes in process `syz.3.2264'. [ 304.107042][T14969] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2264'. [ 304.201599][T14978] ip6gretap1: entered promiscuous mode [ 304.304504][T14985] tipc: Enabled bearer , priority 0 [ 304.312391][T14985] syzkaller0: entered promiscuous mode [ 304.318002][T14985] syzkaller0: entered allmulticast mode [ 304.629955][T14999] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551612) [ 304.717742][T14999] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 305.068345][T14973] tipc: Resetting bearer [ 305.155397][T14973] tipc: Disabling bearer [ 305.166511][ T5903] IPVS: starting estimator thread 0... [ 305.174905][T15016] tipc: Failed to remove unknown binding: 66,1,1/3316209046:1551739228/1551739230 [ 305.255290][T15018] IPVS: using max 32 ests per chain, 76800 per kthread [ 305.333628][T15017] delete_channel: no stack [ 305.365846][ T5864] Bluetooth: hci4: command 0x0401 tx timeout [ 305.474993][T15022] netlink: 'syz.3.2282': attribute type 12 has an invalid length. [ 305.679723][T15044] netlink: set zone limit has 4 unknown bytes [ 305.689415][T15044] A link change request failed with some changes committed already. Interface macvlan1 may have been left with an inconsistent configuration, please check. [ 305.731653][T15042] tipc: Enabling of bearer rejected, already enabled [ 306.421421][T15086] wg1 speed is unknown, defaulting to 1000 [ 306.429660][T15086] syzkaller0 speed is unknown, defaulting to 1000 [ 306.631093][T11821] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 306.644550][T15102] netlink: 'syz.3.2302': attribute type 13 has an invalid length. [ 306.654173][T15097] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 306.661539][T15097] IPv6: NLM_F_CREATE should be set when creating new route [ 306.668832][T15097] IPv6: NLM_F_CREATE should be set when creating new route [ 306.680846][T15102] netlink: 'syz.3.2302': attribute type 17 has an invalid length. [ 306.698018][T15102] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 306.912653][T15107] wg1 speed is unknown, defaulting to 1000 [ 306.928504][T15107] syzkaller0 speed is unknown, defaulting to 1000 [ 307.649941][T15131] wg1 speed is unknown, defaulting to 1000 [ 307.656536][T15136] __nla_validate_parse: 4 callbacks suppressed [ 307.656554][T15136] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2307'. [ 307.673647][T15131] syzkaller0 speed is unknown, defaulting to 1000 [ 308.329894][T15156] wg1 speed is unknown, defaulting to 1000 [ 308.338426][T15156] syzkaller0 speed is unknown, defaulting to 1000 [ 308.792103][T15196] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2319'. [ 308.880497][T15197] vxcan4: entered promiscuous mode [ 308.964270][T15200] netlink: set zone limit has 4 unknown bytes [ 308.991570][T15200] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2323'. [ 309.111421][T15200] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2323'. [ 309.126667][T15200] A link change request failed with some changes committed already. Interface macvlan1 may have been left with an inconsistent configuration, please check. [ 309.187296][T15208] wg1 speed is unknown, defaulting to 1000 [ 309.194859][T15208] syzkaller0 speed is unknown, defaulting to 1000 [ 309.782255][T15242] netlink: 248 bytes leftover after parsing attributes in process `syz.1.2331'. [ 310.120644][T15255] syzkaller0: MTU too low for tipc bearer [ 310.134258][T15255] tipc: Enabling of bearer rejected, failed to enable media [ 310.208260][T15263] wg1 speed is unknown, defaulting to 1000 [ 310.224247][T15276] netlink: 'syz.0.2339': attribute type 7 has an invalid length. [ 310.227288][T15263] syzkaller0 speed is unknown, defaulting to 1000 [ 310.273618][T15268] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 310.424506][T15288] netlink: 'syz.1.2342': attribute type 10 has an invalid length. [ 310.462329][T15288] syz_tun: entered promiscuous mode [ 310.514864][T15288] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 310.603929][T15301] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2347'. [ 310.607778][T15305] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2348'. [ 310.615359][T15301] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2347'. [ 310.865092][T15303] wg1 speed is unknown, defaulting to 1000 [ 310.945682][T15319] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2352'. [ 310.991281][T15303] syzkaller0 speed is unknown, defaulting to 1000 [ 310.996339][T15319] netlink: 'syz.2.2352': attribute type 10 has an invalid length. [ 311.011126][T15319] : (slave wlan1): refused to change device type [ 311.029654][T15324] netlink: 'syz.3.2354': attribute type 6 has an invalid length. [ 311.033074][T15319] mac80211_hwsim hwsim10 wlan1: entered allmulticast mode [ 311.119923][T15324] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2354'. [ 311.212615][T15335] netlink: 'syz.4.2358': attribute type 1 has an invalid length. [ 311.254483][T15333] netlink: set zone limit has 4 unknown bytes [ 311.303754][T15333] A link change request failed with some changes committed already. Interface macvlan1 may have been left with an inconsistent configuration, please check. [ 311.412271][T15346] wg1 speed is unknown, defaulting to 1000 [ 311.420072][T15346] syzkaller0 speed is unknown, defaulting to 1000 [ 311.501840][T15352] wg1 speed is unknown, defaulting to 1000 [ 311.519368][T15352] syzkaller0 speed is unknown, defaulting to 1000 [ 311.586845][T15353] wg1 speed is unknown, defaulting to 1000 [ 311.601349][T15357] batadv2: entered promiscuous mode [ 311.606790][T15357] batadv2: entered allmulticast mode [ 311.644487][T15353] syzkaller0 speed is unknown, defaulting to 1000 [ 311.932170][T15364] syzkaller0: MTU too low for tipc bearer [ 311.938436][T15364] tipc: Enabling of bearer rejected, failed to enable media [ 311.969943][T15369] xt_HMARK: proto mask must be zero with L3 mode [ 312.058009][T15366] wg1 speed is unknown, defaulting to 1000 [ 312.110319][T15366] syzkaller0 speed is unknown, defaulting to 1000 [ 312.627445][T15396] tipc: Enabled bearer , priority 0 [ 312.646285][T15396] syzkaller0: entered promiscuous mode [ 312.654176][T15398] netlink: 'syz.1.2375': attribute type 33 has an invalid length. [ 312.662767][T15396] syzkaller0: entered allmulticast mode [ 312.669626][T15398] __nla_validate_parse: 9 callbacks suppressed [ 312.669642][T15398] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2375'. [ 312.710002][T15396] tipc: Resetting bearer [ 312.729149][T15395] tipc: Resetting bearer [ 312.759293][T15395] tipc: Disabling bearer [ 312.933210][T15416] syzkaller1: entered promiscuous mode [ 312.939262][T15416] syzkaller1: entered allmulticast mode [ 313.064350][T15427] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2382'. [ 313.182087][T15438] netlink: 'syz.4.2384': attribute type 21 has an invalid length. [ 313.195013][T15438] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2384'. [ 313.253890][T15438] netlink: 'syz.4.2384': attribute type 5 has an invalid length. [ 313.283118][T15438] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2384'. [ 313.861473][T15486] netlink: 'syz.3.2393': attribute type 7 has an invalid length. [ 313.881180][T15488] netlink: 240 bytes leftover after parsing attributes in process `syz.4.2394'. [ 313.884700][T15486] netlink: 'syz.3.2393': attribute type 8 has an invalid length. [ 313.892770][T15488] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2394'. [ 313.947908][T15486] veth0_to_bridge: entered promiscuous mode [ 313.962179][T15485] veth0_to_bridge: left promiscuous mode [ 314.027733][T15496] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.2396'. [ 314.252679][T15509] netlink: 'syz.1.2399': attribute type 4 has an invalid length. [ 340.838490][T15516] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2405'. [ 340.880376][T15515] netlink: 'syz.2.2403': attribute type 7 has an invalid length. [ 340.880823][T15521] can: request_module (can-proto-0) failed. [ 340.908964][T15515] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2403'. [ 340.921510][T15521] openvswitch: netlink: IP tunnel dst address not specified [ 340.983657][T15515] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2403'. [ 341.124065][T15535] syz_tun: entered allmulticast mode [ 341.453626][T15543] netlink: 'syz.2.2409': attribute type 1 has an invalid length. [ 341.467556][T15543] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2409'. [ 341.599808][T15535] syzkaller0: left promiscuous mode [ 341.605506][T15535] syzkaller0: left allmulticast mode [ 341.752761][T15535] batman_adv: batadv0: Interface deactivated: ip6gretap2 [ 341.813574][T11827] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 341.839934][T11827] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 341.909919][T15537] wg1 speed is unknown, defaulting to 1000 [ 341.916156][T11827] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 341.943864][T15537] syzkaller0 speed is unknown, defaulting to 1000 [ 341.960816][T11827] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 342.129644][T15560] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2411'. [ 342.189105][T15562] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2412'. [ 342.534065][T15576] netlink: set zone limit has 4 unknown bytes [ 342.548705][T15576] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2416'. [ 342.558594][T15576] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2416'. [ 342.579455][T15576] A link change request failed with some changes committed already. Interface macvlan1 may have been left with an inconsistent configuration, please check. [ 342.732412][T15583] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2418'. [ 342.888174][T15587] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2419'. [ 342.978417][T15591] netlink: 'syz.3.2420': attribute type 13 has an invalid length. [ 342.987506][T15591] netlink: 'syz.3.2420': attribute type 17 has an invalid length. [ 343.008895][T15591] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 343.160675][T15591] wg1 speed is unknown, defaulting to 1000 [ 343.217355][T15591] syzkaller0 speed is unknown, defaulting to 1000 [ 343.288988][T15600] netlink: 'syz.2.2423': attribute type 1 has an invalid length. [ 343.481746][T15600] 8021q: adding VLAN 0 to HW filter on device bond7 [ 343.624364][T15604] veth5: entered promiscuous mode [ 343.672838][T15604] bond7: (slave veth5): Enslaving as an active interface with an up link [ 343.686178][ T5864] Bluetooth: hci4: command 0x0401 tx timeout [ 343.988473][T15615] tipc: Enabling of bearer rejected, failed to enable media [ 344.099533][T15616] tipc: Enabling of bearer rejected, failed to enable media [ 344.708276][T15641] A link change request failed with some changes committed already. Interface macvlan1 may have been left with an inconsistent configuration, please check. [ 344.733023][T15640] netlink: set zone limit has 4 unknown bytes [ 344.811380][T15643] syzkaller0: MTU too low for tipc bearer [ 344.817648][T15643] tipc: Enabling of bearer rejected, failed to enable media [ 345.086337][T15653] macvlan0: entered promiscuous mode [ 345.149087][T15660] netlink: 'syz.1.2438': attribute type 6 has an invalid length. [ 345.495843][T15680] A link change request failed with some changes committed already. Interface macvlan1 may have been left with an inconsistent configuration, please check. [ 345.539124][T15678] netlink: set zone limit has 4 unknown bytes [ 345.808342][T15692] netlink: 'syz.3.2447': attribute type 26 has an invalid length. [ 346.005096][T15699] netlink: 'syz.3.2447': attribute type 10 has an invalid length. [ 346.251179][T15709] __nla_validate_parse: 13 callbacks suppressed [ 346.251198][T15709] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2450'. [ 346.571221][T15727] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2453'. [ 346.580480][T15727] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2453'. [ 346.592201][T15727] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2453'. [ 346.604346][T15732] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2454'. [ 346.788696][T15739] netlink: 'syz.2.2457': attribute type 4 has an invalid length. [ 366.008530][T15751] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2458'. [ 366.034489][T15751] openvswitch: netlink: Flow key attr not present in new flow. [ 366.054885][T15747] can: request_module (can-proto-0) failed. [ 366.122515][T15751] can: request_module (can-proto-0) failed. [ 366.396162][T15746] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 366.489385][T15766] macvlan1: entered promiscuous mode [ 366.675115][T15766] ipvlan0: entered promiscuous mode [ 366.766043][T15766] ipvlan0: left promiscuous mode [ 366.869603][T15766] macvlan1: left promiscuous mode [ 367.234540][T15746] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 367.330126][T15768] wg1 speed is unknown, defaulting to 1000 [ 367.441165][T15746] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 367.505528][T15768] syzkaller0 speed is unknown, defaulting to 1000 [ 367.656938][T15746] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 367.739253][T15780] netlink: 'syz.1.2465': attribute type 11 has an invalid length. [ 367.873172][T11820] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 367.975693][ T2966] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 368.024137][ T2966] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 368.060810][ T2966] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 368.213730][T15787] netlink: 'syz.2.2468': attribute type 5 has an invalid length. [ 368.257397][T15789] IPVS: set_ctl: invalid protocol: 44 172.20.20.13:21 [ 368.422816][T15801] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2472'. [ 368.493042][T15807] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2471'. [ 368.648332][T15801] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2472'. [ 368.863671][T15798] netlink: 260 bytes leftover after parsing attributes in process `syz.2.2471'. [ 369.003171][T15824] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2476'. [ 369.622613][T15841] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2480'. [ 369.728763][T15845] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2480'. [ 369.804839][T15836] wireguard0: entered promiscuous mode [ 369.810511][T15836] wireguard0: entered allmulticast mode [ 370.036447][T15851] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2482'. [ 370.053973][T15851] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2482'. [ 370.065368][T15851] netlink: 'syz.0.2482': attribute type 5 has an invalid length. [ 370.077614][T15851] netlink: 'syz.0.2482': attribute type 6 has an invalid length. [ 370.808976][T15884] RDS: rds_bind could not find a transport for fc02::1, load rds_tcp or rds_rdma? [ 370.838329][T15883] erspan0: entered promiscuous mode [ 370.890274][T15883] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 370.890949][T15889] netlink: 'syz.2.2492': attribute type 7 has an invalid length. [ 371.153738][T15884] wg1 speed is unknown, defaulting to 1000 [ 371.172354][T15898] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 371.190054][T15897] __nla_validate_parse: 3 callbacks suppressed [ 371.190071][T15897] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2495'. [ 371.191702][T15884] syzkaller0 speed is unknown, defaulting to 1000 [ 371.729271][T15919] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2499'. [ 371.738858][T15919] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2499'. [ 371.921324][T15931] erspan0: entered promiscuous mode [ 372.068969][T15940] veth1_macvtap: mtu greater than device maximum [ 372.201331][T15945] wg1 speed is unknown, defaulting to 1000 [ 372.209280][T15945] syzkaller0 speed is unknown, defaulting to 1000 [ 372.801204][T15978] netlink: 'syz.4.2516': attribute type 11 has an invalid length. [ 372.818238][T15978] netlink: 'syz.4.2516': attribute type 11 has an invalid length. [ 372.838983][T15978] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2516'. [ 373.417738][T16002] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2525'. [ 373.441229][T16002] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2525'. [ 373.745952][T16009] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2529'. [ 374.015569][T16029] tipc: Enabling of bearer rejected, already enabled [ 374.078236][T16033] netlink: 844 bytes leftover after parsing attributes in process `syz.4.2533'. [ 374.215988][T16033] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2533'. [ 374.394886][T16040] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 374.596256][T16057] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2543'. [ 374.632262][T16060] tipc: Enabled bearer , priority 14 [ 374.675067][T16057] bridge6: entered allmulticast mode [ 374.811992][T16071] !: renamed from dummy0 [ 374.899954][T16076] wg1 speed is unknown, defaulting to 1000 [ 374.939732][T16076] syzkaller0 speed is unknown, defaulting to 1000 [ 375.101337][T16093] netlink: 'syz.2.2551': attribute type 1 has an invalid length. [ 375.249147][T16090] wg1 speed is unknown, defaulting to 1000 [ 375.284438][T16090] syzkaller0 speed is unknown, defaulting to 1000 [ 375.312928][T16094] wg1 speed is unknown, defaulting to 1000 [ 375.351222][T11827] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 375.435988][T16094] syzkaller0 speed is unknown, defaulting to 1000 [ 375.532100][T16114] netlink: 'syz.3.2554': attribute type 1 has an invalid length. [ 376.542579][T16146] syzkaller0: MTU too low for tipc bearer [ 376.548495][T16146] tipc: Enabling of bearer rejected, failed to enable media [ 376.654286][T16164] __nla_validate_parse: 4 callbacks suppressed [ 376.654304][T16164] netlink: 11520 bytes leftover after parsing attributes in process `syz.2.2563'. [ 376.723885][T16150] syzkaller0: entered promiscuous mode [ 376.738907][T16150] syzkaller0: entered allmulticast mode [ 377.012061][T16173] _ÐZ`Ô€@S: entered promiscuous mode [ 377.201000][T16184] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2573'. [ 377.230543][T16184] tipc: Enabling of bearer rejected, already enabled [ 377.233714][T16188] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2575'. [ 377.277137][ T5943] syzkaller0 speed is unknown, defaulting to 1000 [ 377.369946][T16192] wg1 speed is unknown, defaulting to 1000 [ 377.384934][T11823] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x1 [ 377.430673][T16192] syzkaller0 speed is unknown, defaulting to 1000 [ 377.562530][T16206] netlink: 'syz.2.2579': attribute type 1 has an invalid length. [ 377.611042][T16206] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2579'. [ 378.039863][T16223] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2581'. [ 378.046223][T11820] tipc: Resetting bearer [ 378.082580][T16223] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2581'. [ 378.125632][T16223] netlink: 31 bytes leftover after parsing attributes in process `syz.1.2581'. [ 378.240892][T16223] netlink: 'syz.1.2581': attribute type 3 has an invalid length. [ 378.274378][T16223] netlink: 'syz.1.2581': attribute type 2 has an invalid length. [ 378.286728][T16223] netlink: 31 bytes leftover after parsing attributes in process `syz.1.2581'. [ 378.317446][T16223] netlink: 'syz.1.2581': attribute type 2 has an invalid length. [ 378.743300][T16251] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2592'. [ 378.775327][T16251] netlink: 88 bytes leftover after parsing attributes in process `syz.4.2592'. [ 379.092224][T16275] netlink: 'syz.2.2595': attribute type 13 has an invalid length. [ 379.107088][T16275] netlink: 'syz.2.2595': attribute type 17 has an invalid length. [ 379.185487][T16275] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 379.391380][T16282] wg1 speed is unknown, defaulting to 1000 [ 379.416598][T16282] syzkaller0 speed is unknown, defaulting to 1000 [ 379.605391][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 380.196229][T16336] ip6tnl0: Caught tx_queue_len zero misconfig [ 380.742453][T16351] netlink: 'syz.0.2628': attribute type 3 has an invalid length. [ 380.766467][T16353] syzkaller1: entered promiscuous mode [ 380.780371][T16353] syzkaller1: entered allmulticast mode [ 380.799061][T16356] block nbd2: Unsupported socket: shutdown callout must be supported. [ 380.953835][T16368] netlink: 'syz.0.2636': attribute type 6 has an invalid length. [ 382.219758][T16429] IPVS: stopping backup sync thread 16433 ... [ 382.226804][T16433] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0 [ 382.245087][T16432] netlink: 'syz.4.2667': attribute type 10 has an invalid length. [ 382.272735][T16432] wlan1: mtu less than device minimum [ 382.299015][T16432] Ã: (slave wlan1): Error -22 calling dev_set_mtu [ 382.529044][T16447] __nla_validate_parse: 6 callbacks suppressed [ 382.529062][T16447] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2672'. [ 382.652008][T16455] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2675'. [ 382.671178][T16455] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2675'. [ 382.694567][T16455] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2675'. [ 382.822061][T16466] syzkaller0: MTU too low for tipc bearer [ 382.843651][T16466] tipc: Enabling of bearer rejected, failed to enable media [ 382.875702][T16466] syzkaller0: Caught tx_queue_len zero misconfig [ 382.908171][T16471] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2683'. [ 382.973494][T16476] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2685'. [ 383.000542][T16476] netlink: 59 bytes leftover after parsing attributes in process `syz.0.2685'. [ 383.028326][T16476] netlink: 59 bytes leftover after parsing attributes in process `syz.0.2685'. [ 383.138599][T16488] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2687'. [ 383.229027][T16493] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2689'. [ 385.988365][T16578] syzkaller1: entered promiscuous mode [ 385.994082][T16578] syzkaller1: entered allmulticast mode [ 386.253550][T16594] tipc: Enabling of bearer rejected, failed to enable media [ 386.280739][T16595] netlink: set zone limit has 4 unknown bytes [ 386.585787][T16614] netlink: 'syz.0.2744': attribute type 10 has an invalid length. [ 386.910292][T16635] netlink: set zone limit has 4 unknown bytes [ 387.063997][T16647] netlink: 'syz.2.2755': attribute type 13 has an invalid length. [ 387.085968][T16647] netlink: 'syz.2.2755': attribute type 17 has an invalid length. [ 387.144756][T16647] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 387.185513][T16639] wg1 speed is unknown, defaulting to 1000 [ 387.194494][T16639] syzkaller0 speed is unknown, defaulting to 1000 [ 387.492280][T16658] tipc: Enabled bearer , priority 0 [ 387.500830][T16660] tipc: Enabling of bearer rejected, already enabled [ 387.542909][T16660] __nla_validate_parse: 9 callbacks suppressed [ 387.542926][T16660] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2758'. [ 387.704874][T16668] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2760'. [ 387.718046][T16669] tipc: Enabling of bearer rejected, failed to enable media [ 387.750544][T16669] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2762'. [ 387.793876][T16668] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2760'. [ 387.962373][T16682] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2765'. [ 387.981993][T16675] netlink: set zone limit has 4 unknown bytes [ 388.013541][T16685] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2764'. [ 388.056579][T16679] atomic_op ffff8880284d1998 conn xmit_atomic 0000000000000000 [ 388.165373][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 388.244607][T16682] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2765'. [ 388.406932][T16679] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2766'. [ 388.421855][T11822] tipc: Resetting bearer [ 388.620560][ T8445] tipc: Node number set to 1134949488 [ 388.652209][T16717] tipc: Enabling of bearer rejected, already enabled [ 388.754670][T16719] wg1 speed is unknown, defaulting to 1000 [ 388.763369][T16719] syzkaller0 speed is unknown, defaulting to 1000 [ 388.961005][T16733] rdma_op ffff8880564471f0 conn xmit_rdma 0000000000000000 [ 388.971525][T16733] netlink: 'syz.3.2773': attribute type 10 has an invalid length. [ 389.024989][T16726] tipc: Resetting bearer [ 389.191860][T16743] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2781'. [ 389.215780][T16743] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2781'. [ 389.316076][T16749] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma? [ 389.739498][T16759] netlink: 'syz.1.2785': attribute type 1 has an invalid length. [ 390.417553][T16775] pim6reg1: entered promiscuous mode [ 390.422894][T16775] pim6reg1: entered allmulticast mode [ 390.671387][T16797] @0Ù: renamed from bond_slave_1 [ 390.967982][T16816] netlink: 'syz.4.2808': attribute type 1 has an invalid length. [ 391.031923][T16816] bond10: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 391.074954][T16816] veth3: entered promiscuous mode [ 391.084363][T16816] bond10: (slave veth3): Enslaving as a backup interface with a down link [ 391.749472][T16855] netlink: 'syz.0.2821': attribute type 12 has an invalid length. [ 391.771745][T16855] netlink: 'syz.0.2821': attribute type 12 has an invalid length. [ 391.787124][ T30] audit: type=1800 audit(1757166218.716:16): pid=16858 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2822" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2867 res=0 errno=0 [ 392.078997][T16874] wg1 speed is unknown, defaulting to 1000 [ 392.090768][T16874] syzkaller0 speed is unknown, defaulting to 1000 [ 392.222981][T16883] bridge6: entered allmulticast mode [ 392.568933][T16897] __nla_validate_parse: 13 callbacks suppressed [ 392.568951][T16897] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2829'. [ 392.761763][T16901] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2831'. [ 392.856408][T16886] wg1 speed is unknown, defaulting to 1000 [ 392.864001][T16886] syzkaller0 speed is unknown, defaulting to 1000 [ 392.960103][T16895] wg1 speed is unknown, defaulting to 1000 [ 393.160013][T16895] syzkaller0 speed is unknown, defaulting to 1000 [ 393.269321][T16922] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2839'. [ 393.412616][T16933] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2839'. [ 393.433161][T16933] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2839'. [ 393.454720][T16935] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2842'. [ 393.490876][T16935] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2842'. [ 393.608242][T16938] netlink: 'syz.2.2843': attribute type 10 has an invalid length. [ 393.617186][T16942] netlink: 'syz.2.2843': attribute type 10 has an invalid length. [ 393.653981][T16935] batman_adv: batadv0: Adding interface: ip6gretap2 [ 393.669264][T16935] batman_adv: batadv0: The MTU of interface ip6gretap2 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 393.701572][T16935] batman_adv: batadv0: Interface activated: ip6gretap2 [ 393.732777][T16938] team0: Port device 0! added [ 394.121020][T16971] netlink: 'syz.3.2851': attribute type 1 has an invalid length. [ 394.204031][T16973] netlink: 'syz.4.2852': attribute type 37 has an invalid length. [ 394.222605][T16977] sch_tbf: burst 4398 is lower than device lo mtu (11337746) ! [ 394.385267][T16979] netlink: 'syz.0.2855': attribute type 1 has an invalid length. [ 394.395697][T16979] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2855'. [ 394.461346][T16984] netlink: 'syz.1.2857': attribute type 2 has an invalid length. [ 394.475247][T16984] netlink: 'syz.1.2857': attribute type 1 has an invalid length. [ 394.492909][T16984] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2857'. [ 394.502664][T16988] netlink: 'syz.4.2858': attribute type 11 has an invalid length. [ 394.513824][T16987] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2859'. [ 394.733955][T16977] bond0: left promiscuous mode [ 394.742489][T16977] tipc: Resetting bearer [ 394.797562][T16989] netlink: 'syz.4.2858': attribute type 1 has an invalid length. [ 394.847676][T16997] batadv_slave_0: entered promiscuous mode [ 395.463127][T17034] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode [ 395.472280][T17034] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode [ 395.480332][T17034] tipc: Resetting bearer [ 396.240151][T17071] gretap0: entered promiscuous mode [ 396.248191][T17071] gretap0: left promiscuous mode [ 396.430371][T17075] tipc: Enabling of bearer rejected, already enabled [ 396.712467][T17092] tipc: Enabled bearer , priority 0 [ 396.757163][T17092] syzkaller0: entered promiscuous mode [ 396.763434][T17092] syzkaller0: entered allmulticast mode [ 396.811529][T17092] tipc: Resetting bearer [ 396.824768][T17090] tipc: Resetting bearer [ 396.861091][T17090] tipc: Disabling bearer [ 396.960718][T17103] raw_sendmsg: syz.3.2891 forgot to set AF_INET. Fix it! [ 397.028451][T17109] validate_nla: 3 callbacks suppressed [ 397.028469][T17109] netlink: 'syz.4.2894': attribute type 16 has an invalid length. [ 397.051420][T17109] netlink: 'syz.4.2894': attribute type 17 has an invalid length. [ 397.089888][T17114] IPv6: NLM_F_REPLACE set, but no existing node found! [ 397.139033][T17109] batman_adv: batadv0: Interface deactivated: ip6gretap2 [ 397.230464][T17111] wg1 speed is unknown, defaulting to 1000 [ 397.250111][T17111] syzkaller0 speed is unknown, defaulting to 1000 [ 397.758705][T17145] __nla_validate_parse: 5 callbacks suppressed [ 397.758725][T17145] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2906'. [ 398.315756][T17166] team0: Refused to change device type [ 398.409768][ T5865] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 398.420180][ T5865] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 398.435652][T17170] syzkaller0: left promiscuous mode [ 398.445282][T17170] syzkaller0: left allmulticast mode [ 398.447416][ T5865] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 398.459190][ T5865] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 398.467120][ T5865] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 398.480693][T17167] wg1 speed is unknown, defaulting to 1000 [ 398.488894][T17167] syzkaller0 speed is unknown, defaulting to 1000 [ 398.511469][T17169] wg1 speed is unknown, defaulting to 1000 [ 398.582766][T17169] syzkaller0 speed is unknown, defaulting to 1000 [ 398.617558][T17174] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2912'. [ 398.674425][T17182] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2914'. [ 398.725588][ T5183] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 398.847111][ T5859] bond0: (slave syz_tun): Releasing backup interface [ 398.866396][T17194] netlink: 45 bytes leftover after parsing attributes in process `syz.3.2918'. [ 399.140361][T17206] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2921'. [ 399.188371][T17203] netlink: set zone limit has 4 unknown bytes [ 399.215937][T17169] chnl_net:caif_netlink_parms(): no params data found [ 399.238527][T17206] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2921'. [ 399.424422][T17211] wg1 speed is unknown, defaulting to 1000 [ 399.452995][T17211] syzkaller0 speed is unknown, defaulting to 1000 [ 399.601154][T17169] bridge0: port 1(bridge_slave_0) entered blocking state [ 399.612237][T17169] bridge0: port 1(bridge_slave_0) entered disabled state [ 399.619877][T17169] bridge_slave_0: entered allmulticast mode [ 399.628300][T17169] bridge_slave_0: entered promiscuous mode [ 399.649109][T17169] bridge0: port 2(bridge_slave_1) entered blocking state [ 399.665424][T17169] bridge0: port 2(bridge_slave_1) entered disabled state [ 399.673878][T17169] bridge_slave_1: entered allmulticast mode [ 399.690415][T17169] bridge_slave_1: entered promiscuous mode [ 399.858640][T17169] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 399.941637][T17235] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2928'. [ 399.968202][T17169] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 400.074636][T17235] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2928'. [ 400.111850][T17237] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2928'. [ 400.400808][T17169] team0: Port device team_slave_0 added [ 400.458840][T17169] team0: Port device team_slave_1 added [ 400.556937][ T5183] Bluetooth: hci5: command tx timeout [ 400.668611][T17242] wg1 speed is unknown, defaulting to 1000 [ 400.722027][T17242] syzkaller0 speed is unknown, defaulting to 1000 [ 400.723593][T17169] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 400.747393][T17169] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 400.780693][T17169] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 400.812330][T17169] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 400.822793][T17169] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 400.856036][T17169] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 400.934058][T17256] netlink: 'syz.1.2932': attribute type 32 has an invalid length. [ 400.998264][T17258] A link change request failed with some changes committed already. Interface 0! may have been left with an inconsistent configuration, please check. [ 401.213655][T17169] hsr_slave_0: entered promiscuous mode [ 401.237810][T17169] hsr_slave_1: entered promiscuous mode [ 402.052038][T17294] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2941'. [ 402.212344][T17169] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 402.229871][T17169] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 402.280010][T17169] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 402.359807][T17302] wg1 speed is unknown, defaulting to 1000 [ 402.365797][T17169] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 402.431283][T17304] netlink: 'syz.3.2944': attribute type 7 has an invalid length. [ 402.463042][T17302] syzkaller0 speed is unknown, defaulting to 1000 [ 402.566319][ T5183] Bluetooth: hci5: command tx timeout [ 402.964654][T17169] 8021q: adding VLAN 0 to HW filter on device bond0 [ 403.050928][T17331] __nla_validate_parse: 1 callbacks suppressed [ 403.050947][T17331] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2947'. [ 403.059562][T17169] 8021q: adding VLAN 0 to HW filter on device team0 [ 403.109049][T11823] bridge0: port 1(bridge_slave_0) entered blocking state [ 403.116295][T11823] bridge0: port 1(bridge_slave_0) entered forwarding state [ 403.136558][T11823] bridge0: port 2(bridge_slave_1) entered blocking state [ 403.143758][T11823] bridge0: port 2(bridge_slave_1) entered forwarding state [ 403.183998][T17335] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2947'. [ 403.257416][T17338] netlink: 248 bytes leftover after parsing attributes in process `syz.3.2950'. [ 403.703397][T17169] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 403.741447][ T30] audit: type=1800 audit(1757166230.666:17): pid=17359 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2953" name="memory.events" dev="tmpfs" ino=2980 res=0 errno=0 [ 403.810853][T17365] netlink: 'syz.1.2957': attribute type 1 has an invalid length. [ 403.846665][T17365] netlink: 92 bytes leftover after parsing attributes in process `syz.1.2957'. [ 403.876909][T17352] wg1 speed is unknown, defaulting to 1000 [ 403.892528][T17352] syzkaller0 speed is unknown, defaulting to 1000 [ 404.165617][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 404.188574][T17169] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 404.259489][T17380] netlink: 'syz.3.2962': attribute type 10 has an invalid length. [ 404.441668][T17394] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2964'. [ 404.630575][T17392] wg1 speed is unknown, defaulting to 1000 [ 404.638569][T17392] syzkaller0 speed is unknown, defaulting to 1000 [ 404.645514][ T5183] Bluetooth: hci5: command tx timeout [ 404.842891][T17169] veth0_vlan: entered promiscuous mode [ 404.908923][T17169] veth1_vlan: entered promiscuous mode [ 405.205074][T17427] ip6tnl2: entered promiscuous mode [ 405.217430][T17427] ip6tnl2: entered allmulticast mode [ 405.231595][T17427] team0: Device ip6tnl2 is up. Set it down before adding it as a team port [ 405.369459][T17169] veth0_macvtap: entered promiscuous mode [ 405.411768][T17169] veth1_macvtap: entered promiscuous mode [ 405.493581][T17169] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 405.553552][T17169] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 405.603915][T11828] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.620910][T11828] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.636444][T17439] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 405.692807][T11828] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.709511][T11828] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.815589][T17444] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2976'. [ 405.858946][T17447] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2978'. [ 405.956998][T11820] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 405.968885][T17444] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2976'. [ 405.986295][T11820] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 406.108907][T11823] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 406.117261][T11823] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 406.202191][T17460] netlink: 'syz.1.2981': attribute type 6 has an invalid length. [ 406.281803][T17460] netlink: 'syz.1.2981': attribute type 12 has an invalid length. [ 406.305638][T17460] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.2981'. [ 406.350637][T17466] netlink: 11 bytes leftover after parsing attributes in process `syz.2.2983'. [ 406.725755][ T5183] Bluetooth: hci5: command tx timeout [ 407.083402][T17500] tipc: Enabling of bearer <“dp:s> rejected, media not registered [ 407.138792][ T5865] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 407.149897][ T5865] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 407.160177][ T5865] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 407.177402][ T5865] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 407.186952][ T5865] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 407.284521][T17501] wg1 speed is unknown, defaulting to 1000 [ 407.293872][T17501] syzkaller0 speed is unknown, defaulting to 1000 [ 407.562959][T17501] chnl_net:caif_netlink_parms(): no params data found [ 407.594342][T17515] netlink: 'syz.2.2995': attribute type 1 has an invalid length. [ 407.614209][T17517] wg1 speed is unknown, defaulting to 1000 [ 407.660483][T17515] 8021q: adding VLAN 0 to HW filter on device bond1 [ 407.683909][T17517] syzkaller0 speed is unknown, defaulting to 1000 [ 407.691359][T17522] bond0: (slave gretap0): Error: Device type is different from other slaves [ 407.796463][T17515] bond1: (slave gretap1): making interface the new active one [ 407.838565][T17515] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 407.926487][T17530] gretap1: entered promiscuous mode [ 408.124431][T17501] bridge0: port 1(bridge_slave_0) entered blocking state [ 408.144836][T17501] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.160944][T17501] bridge_slave_0: entered allmulticast mode [ 408.171159][T17501] bridge_slave_0: entered promiscuous mode [ 408.236151][T17501] bridge0: port 2(bridge_slave_1) entered blocking state [ 408.253874][T17501] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.290707][T17501] bridge_slave_1: entered allmulticast mode [ 408.299200][T17501] bridge_slave_1: entered promiscuous mode [ 408.523625][T17554] syz_tun: entered promiscuous mode [ 408.532689][T17554] vlan2: entered promiscuous mode [ 408.642918][T17501] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 408.666899][T17560] bridge9: entered promiscuous mode [ 408.678470][T17560] __nla_validate_parse: 5 callbacks suppressed [ 408.678488][T17560] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3009'. [ 408.682415][T17501] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 408.684881][T17560] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3009'. [ 408.789296][T17564] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3011'. [ 408.803081][T17501] team0: Port device team_slave_0 added [ 408.833181][T17501] team0: Port device team_slave_1 added [ 408.994611][T17501] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 409.019388][T17501] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 409.051987][T17573] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3015'. [ 409.061902][T17501] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 409.063946][T17501] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 409.097980][T17580] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3018'. [ 409.115831][T17501] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 409.164296][T17501] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 409.188404][T17573] netlink: 'syz.2.3015': attribute type 1 has an invalid length. [ 409.252602][T17573] 8021q: adding VLAN 0 to HW filter on device bond8 [ 409.285957][ T5183] Bluetooth: hci0: command tx timeout [ 409.341005][T17594] netlink: 'syz.1.3020': attribute type 10 has an invalid length. [ 409.341324][T17582] bond8: (slave geneve0): making interface the new active one [ 409.369620][T17582] bond8: (slave geneve0): Enslaving as an active interface with an up link [ 409.392784][T17588] netlink: set zone limit has 4 unknown bytes [ 409.445776][T11823] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.470301][T11823] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.594640][T11823] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.627470][T11823] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.683103][T17501] hsr_slave_0: entered promiscuous mode [ 409.697504][T17501] hsr_slave_1: entered promiscuous mode [ 409.714550][T17501] debugfs: 'hsr0' already exists in 'hsr' [ 409.726031][T17501] Cannot create hsr debugfs directory [ 409.776291][T17612] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3026'. [ 409.818982][T17608] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3026'. [ 409.911641][T17602] wg1 speed is unknown, defaulting to 1000 [ 409.919769][T17602] syzkaller0 speed is unknown, defaulting to 1000 [ 409.997851][T17618] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3029'. [ 410.312972][T17629] netlink: set zone limit has 4 unknown bytes [ 410.323968][T17629] netlink: 'syz.0.3032': attribute type 10 has an invalid length. [ 410.610144][T17501] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 410.623725][T17501] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 410.646672][T17501] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 410.660679][T17501] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 410.724697][T17647] netlink: 'syz.1.3038': attribute type 1 has an invalid length. [ 410.741217][T17647] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3038'. [ 410.819745][T17653] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3039'. [ 411.014123][T17657] tipc: Started in network mode [ 411.026579][T17657] tipc: Node identity 72ef2f622186, cluster identity 4711 [ 411.034023][T17657] tipc: Enabled bearer , priority 0 [ 411.093607][T17651] syzkaller0: entered promiscuous mode [ 411.112822][T17651] syzkaller0: entered allmulticast mode [ 411.272869][T17501] 8021q: adding VLAN 0 to HW filter on device bond0 [ 411.334077][T17501] 8021q: adding VLAN 0 to HW filter on device team0 [ 411.361590][T11828] bridge0: port 1(bridge_slave_0) entered blocking state [ 411.368823][T11828] bridge0: port 1(bridge_slave_0) entered forwarding state [ 411.375391][ T5183] Bluetooth: hci0: command tx timeout [ 411.400620][T11821] bridge0: port 2(bridge_slave_1) entered blocking state [ 411.407839][T11821] bridge0: port 2(bridge_slave_1) entered forwarding state [ 411.454447][T17650] tipc: Resetting bearer [ 411.491660][T17650] tipc: Disabling bearer [ 411.759755][T17679] netlink: 'syz.1.3049': attribute type 11 has an invalid length. [ 411.925242][T17501] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 412.023782][T17501] veth0_vlan: entered promiscuous mode [ 412.054640][T17693] netlink: 'syz.2.3055': attribute type 4 has an invalid length. [ 412.058022][T17501] veth1_vlan: entered promiscuous mode [ 412.103420][T17693] netlink: 'syz.2.3055': attribute type 4 has an invalid length. [ 412.197988][T17501] veth0_macvtap: entered promiscuous mode [ 412.222754][T17501] veth1_macvtap: entered promiscuous mode [ 412.284947][T17501] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 412.327183][T17501] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 412.362866][T11823] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.372428][T11823] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.393573][T11823] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.402617][T11823] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.528004][T11824] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 412.553770][T11824] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 412.640212][T11822] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 412.674937][T11822] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 412.701797][T17714] wg1 speed is unknown, defaulting to 1000 [ 412.743272][T17714] syzkaller0 speed is unknown, defaulting to 1000 [ 413.455196][ T5183] Bluetooth: hci0: command tx timeout [ 413.621498][ T30] audit: type=1800 audit(1757166240.546:18): pid=17757 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3073" name="memory.events" dev="tmpfs" ino=3086 res=0 errno=0 [ 413.682344][ T30] audit: type=1804 audit(1757166240.546:19): pid=17757 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.3073" name="/newroot/603/memory.events" dev="tmpfs" ino=3086 res=1 errno=0 [ 413.703814][ T5865] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 413.713808][ T5865] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 413.723127][ T5865] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 413.749997][ T5865] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 413.752536][T17756] netlink: 'syz.0.3075': attribute type 1 has an invalid length. [ 413.757998][ T5865] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 413.843470][T17756] 8021q: adding VLAN 0 to HW filter on device bond1 [ 413.912941][T17763] bond1: entered promiscuous mode [ 413.921869][T17763] 8021q: adding VLAN 0 to HW filter on device bond1 [ 413.994249][ T5863] syz_tun (unregistering): left allmulticast mode [ 414.004447][ T5863] bond0: (slave syz_tun): Releasing backup interface [ 414.020735][ T5863] syz_tun (unregistering): left promiscuous mode [ 414.051811][T17776] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551615) [ 414.062776][T17776] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647 [ 414.131138][T17764] wg1 speed is unknown, defaulting to 1000 [ 414.146893][T17764] syzkaller0 speed is unknown, defaulting to 1000 [ 414.448954][T17798] IPVS: sync thread started: state = BACKUP, mcast_ifn = wlan1, syncid = 0, id = 0 [ 414.458879][T17797] IPVS: stopping backup sync thread 17798 ... [ 414.479597][T17797] __nla_validate_parse: 1 callbacks suppressed [ 414.479615][T17797] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3087'. [ 414.946888][T17806] syzkaller0: entered promiscuous mode [ 414.989251][T17806] syzkaller0: entered allmulticast mode [ 415.143259][T17809] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3091'. [ 415.190998][T17764] chnl_net:caif_netlink_parms(): no params data found [ 415.522478][T17764] bridge0: port 1(bridge_slave_0) entered blocking state [ 415.541414][ T5865] Bluetooth: hci0: command tx timeout [ 415.555520][T17764] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.563166][T17764] bridge_slave_0: entered allmulticast mode [ 415.571364][T17764] bridge_slave_0: entered promiscuous mode [ 415.581491][T17764] bridge0: port 2(bridge_slave_1) entered blocking state [ 415.588842][T17764] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.596488][T17764] bridge_slave_1: entered allmulticast mode [ 415.604998][T17764] bridge_slave_1: entered promiscuous mode [ 415.657793][T17831] syzkaller1: entered promiscuous mode [ 415.664697][T17831] syzkaller1: entered allmulticast mode [ 415.678843][T17764] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 415.734701][T17831] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 415.760328][T17764] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 415.762477][T17835] netlink: 'syz.2.3101': attribute type 10 has an invalid length. [ 415.784573][T17833] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3100'. [ 415.847157][ T5865] Bluetooth: hci4: command tx timeout [ 415.900758][T17764] team0: Port device team_slave_0 added [ 415.900793][T17838] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3102'. [ 415.914216][T17764] team0: Port device team_slave_1 added [ 415.922145][T17838] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3102'. [ 416.015828][T17764] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 416.023572][T17764] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 416.057075][T17764] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 416.098915][T17764] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 416.110010][T17764] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 416.149939][T17764] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 416.211288][T17840] wg1 speed is unknown, defaulting to 1000 [ 416.228189][T17840] syzkaller0 speed is unknown, defaulting to 1000 [ 416.364191][T17764] hsr_slave_0: entered promiscuous mode [ 416.426482][T17764] hsr_slave_1: entered promiscuous mode [ 416.432934][T17764] debugfs: 'hsr0' already exists in 'hsr' [ 416.457900][T17764] Cannot create hsr debugfs directory [ 416.583620][T17867] netlink: 256 bytes leftover after parsing attributes in process `syz.3.3109'. [ 416.880469][T17873] netlink: 3752 bytes leftover after parsing attributes in process `syz.2.3112'. [ 417.281922][T17882] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 417.342305][T17884] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3114'. [ 417.701465][T17903] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3119'. [ 417.927587][ T5183] Bluetooth: hci4: command tx timeout [ 417.964331][T17919] netlink: 84 bytes leftover after parsing attributes in process `syz.0.3123'. [ 417.988575][T17911] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.996391][T17911] bridge0: port 1(bridge_slave_0) entered disabled state [ 418.182401][T17911] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 418.200832][T17911] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 418.375542][T17764] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 418.400765][T17764] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 418.418314][T17764] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 418.433657][T17915] tipc: Enabled bearer , priority 0 [ 418.455809][T17920] syzkaller0: entered promiscuous mode [ 418.461357][T17920] syzkaller0: entered allmulticast mode [ 418.488444][T17929] tipc: Resetting bearer [ 418.504994][T11821] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.520636][T11821] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.556185][T17764] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 418.576395][T11821] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.586028][T17929] tipc: Resetting bearer [ 418.604629][T17929] tipc: Disabling bearer [ 418.621205][T17913] wg1 speed is unknown, defaulting to 1000 [ 418.632380][T11821] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.647108][T17913] syzkaller0 speed is unknown, defaulting to 1000 [ 418.751162][T17939] syzkaller1: entered promiscuous mode [ 418.757650][T17939] syzkaller1: entered allmulticast mode [ 418.937693][T17944] wg1 speed is unknown, defaulting to 1000 [ 418.988873][T17944] syzkaller0 speed is unknown, defaulting to 1000 [ 419.252933][T17764] 8021q: adding VLAN 0 to HW filter on device bond0 [ 419.312671][T17764] 8021q: adding VLAN 0 to HW filter on device team0 [ 419.363489][T17764] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 419.375496][T17764] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 419.394349][T11823] bridge0: port 1(bridge_slave_0) entered blocking state [ 419.401609][T11823] bridge0: port 1(bridge_slave_0) entered forwarding state [ 419.500193][T11823] bridge0: port 2(bridge_slave_1) entered blocking state [ 419.507383][T11823] bridge0: port 2(bridge_slave_1) entered forwarding state [ 419.566993][T17956] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3128'. [ 419.804876][T17967] netlink: 'syz.3.3131': attribute type 7 has an invalid length. [ 419.856642][T17971] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3132'. [ 420.005289][ T5183] Bluetooth: hci4: command 0x040f tx timeout [ 420.281039][T17764] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 420.320476][T17992] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3140'. [ 420.345380][T17992] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3140'. [ 420.351135][T17994] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3141'. [ 420.392821][T17992] ip6tnl2: entered promiscuous mode [ 420.405702][T17992] ip6tnl2: entered allmulticast mode [ 420.444094][T17764] veth0_vlan: entered promiscuous mode [ 420.520636][T17764] veth1_vlan: entered promiscuous mode [ 420.541454][T17999] netlink: 9 bytes leftover after parsing attributes in process `syz.0.3142'. [ 420.600928][T17764] veth0_macvtap: entered promiscuous mode [ 420.630117][T17764] veth1_macvtap: entered promiscuous mode [ 420.649872][T18010] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 420.717003][T17764] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 420.763580][T17764] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 420.813553][T11821] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.849765][T11821] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.880081][T11821] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.900325][T11821] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.047480][T18025] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3148'. [ 421.086822][T11822] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 421.115085][T11822] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 421.178267][T11820] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 421.188372][T11820] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 421.324405][ T30] audit: type=1800 audit(1757166248.176:20): pid=18021 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3148" name="memory.events" dev="tmpfs" ino=3173 res=0 errno=0 [ 422.087752][ T5865] Bluetooth: hci4: command 0x040f tx timeout [ 422.272538][ T5183] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 422.319402][ T5183] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 422.331899][ T5183] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 422.347241][ T5183] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 422.357631][ T5183] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 422.455236][T18073] tipc: Enabled bearer , priority 0 [ 422.459292][T18078] netlink: 'syz.1.3162': attribute type 2 has an invalid length. [ 422.469251][T18073] syzkaller0: entered promiscuous mode [ 422.475080][T18073] syzkaller0: entered allmulticast mode [ 422.475388][T18078] netlink: 1184 bytes leftover after parsing attributes in process `syz.1.3162'. [ 422.565330][T18083] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3165'. [ 422.604621][T18073] tipc: Resetting bearer [ 422.615750][T18070] wg1 speed is unknown, defaulting to 1000 [ 422.628592][T18070] syzkaller0 speed is unknown, defaulting to 1000 [ 422.657429][T18072] tipc: Resetting bearer [ 422.730245][T18090] IPVS: set_ctl: invalid protocol: 1 255.255.255.255:20001 [ 422.758618][T18072] tipc: Disabling bearer [ 422.760219][T18091] IPVS: set_ctl: invalid protocol: 1 255.255.255.255:20001 [ 423.253508][T18116] tipc: Enabled bearer , priority 0 [ 423.276678][T18116] syzkaller0: entered promiscuous mode [ 423.301058][T18116] syzkaller0: entered allmulticast mode [ 423.363766][T18070] chnl_net:caif_netlink_parms(): no params data found [ 423.386548][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 423.394953][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 423.406771][T11823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 423.415304][T11823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 423.423901][T18128] tipc: Enabling of bearer rejected, failed to enable media [ 423.434691][T18116] tipc: Resetting bearer [ 423.441492][T18116] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 423.473871][T18115] tipc: Resetting bearer [ 423.518467][T18115] tipc: Disabling bearer [ 423.670783][T18139] vxcan2: entered promiscuous mode [ 423.907227][T18070] bridge0: port 1(bridge_slave_0) entered blocking state [ 423.931070][T18070] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.959040][T18070] bridge_slave_0: entered allmulticast mode [ 423.982145][T18070] bridge_slave_0: entered promiscuous mode [ 423.994779][T18070] bridge0: port 2(bridge_slave_1) entered blocking state [ 424.002439][T18070] bridge0: port 2(bridge_slave_1) entered disabled state [ 424.010838][T18070] bridge_slave_1: entered allmulticast mode [ 424.018869][T18070] bridge_slave_1: entered promiscuous mode [ 424.038151][T18160] netlink: 'syz.1.3187': attribute type 1 has an invalid length. [ 424.061857][T18167] netlink: 272 bytes leftover after parsing attributes in process `syz.4.3189'. [ 424.125045][T18165] netlink: set zone limit has 4 unknown bytes [ 424.139524][T18070] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 424.165331][ T5865] Bluetooth: hci4: command 0x040f tx timeout [ 424.172362][T18070] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 424.269867][T18070] team0: Port device team_slave_0 added [ 424.285876][T18070] team0: Port device team_slave_1 added [ 424.391967][T18070] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 424.405509][ T5865] Bluetooth: hci1: command tx timeout [ 424.407146][T18070] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 424.451283][T18070] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 424.492954][T18181] tap0: tun_chr_ioctl cmd 1074025677 [ 424.498849][T18181] tap0: linktype set to 0 [ 424.553215][T18070] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 424.563789][T18070] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 424.597876][T18070] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 424.723078][T18185] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3196'. [ 424.759800][T18070] hsr_slave_0: entered promiscuous mode [ 424.779646][T18070] hsr_slave_1: entered promiscuous mode [ 424.795022][T18070] debugfs: 'hsr0' already exists in 'hsr' [ 424.801280][T18070] Cannot create hsr debugfs directory [ 424.824489][T18192] tipc: Enabling of bearer rejected, failed to enable media [ 425.176463][T18203] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3200'. [ 425.340468][T18211] netlink: 308 bytes leftover after parsing attributes in process `syz.0.3203'. [ 425.350450][T18212] netlink: 308 bytes leftover after parsing attributes in process `syz.0.3203'. [ 425.362459][T18211] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3203'. [ 425.372140][T18212] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3203'. [ 425.446450][T18211] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 425.463665][T18212] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 425.630223][T18070] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 425.657869][T18070] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.760949][T18070] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 425.771587][T18227] netlink: 'syz.0.3207': attribute type 1 has an invalid length. [ 425.779539][T18070] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.893043][T18070] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 425.903879][T18070] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.944905][ T8452] IPVS: starting estimator thread 0... [ 425.994988][T18070] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 426.005950][T18070] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.035460][T18237] IPVS: using max 36 ests per chain, 86400 per kthread [ 426.266316][T18070] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 426.289419][T18070] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 426.304825][T18070] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 426.324792][T18244] tipc: Started in network mode [ 426.331313][T18244] tipc: Node identity 82100d70fe0b, cluster identity 4711 [ 426.340234][T18244] tipc: Enabled bearer , priority 0 [ 426.347231][T18070] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 426.404459][T18244] syzkaller0: entered promiscuous mode [ 426.410084][T18244] syzkaller0: entered allmulticast mode [ 426.419762][T18244] tipc: Resetting bearer [ 426.485690][ T5865] Bluetooth: hci1: command tx timeout [ 426.612492][T18070] 8021q: adding VLAN 0 to HW filter on device bond0 [ 426.624535][T18254] tipc: Enabling of bearer rejected, failed to enable media [ 426.688919][T18070] 8021q: adding VLAN 0 to HW filter on device team0 [ 426.740016][T11821] bridge0: port 1(bridge_slave_0) entered blocking state [ 426.747228][T11821] bridge0: port 1(bridge_slave_0) entered forwarding state [ 426.811082][T11824] bridge0: port 2(bridge_slave_1) entered blocking state [ 426.818307][T11824] bridge0: port 2(bridge_slave_1) entered forwarding state [ 427.002395][T18070] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 427.089064][T18266] bridge_slave_0: left allmulticast mode [ 427.094758][T18266] bridge_slave_0: left promiscuous mode [ 427.136786][T18266] bridge0: port 1(bridge_slave_0) entered disabled state [ 427.164734][T18266] bridge_slave_1: left allmulticast mode [ 427.183651][T18266] bridge_slave_1: left promiscuous mode [ 427.205050][T18266] bridge0: port 2(bridge_slave_1) entered disabled state [ 427.232483][T18266] bond0: (slave bond_slave_0): Releasing backup interface [ 427.250563][T18266] bond0: (slave bond_slave_1): Releasing backup interface [ 427.270121][T18266] team0: Port device team_slave_0 removed [ 427.284567][T18266] team0: Port device team_slave_1 removed [ 427.292179][T18266] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 427.308874][T18266] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 427.328801][T18243] tipc: Resetting bearer [ 427.475284][T10317] tipc: Node number set to 2082147696 [ 428.565616][ T5865] Bluetooth: hci1: command tx timeout [ 429.157329][T18243] tipc: Disabling bearer [ 429.260356][T18284] gretap1: left promiscuous mode [ 429.408234][T18298] tipc: Resetting bearer [ 429.453741][T18300] tap0: tun_chr_ioctl cmd 1074025677 [ 429.471582][T18300] tap0: linktype set to 0 [ 429.713120][T18313] tipc: Enabling of bearer rejected, failed to enable media [ 429.758915][T18070] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 430.008011][T18070] veth0_vlan: entered promiscuous mode [ 430.042440][T18070] veth1_vlan: entered promiscuous mode [ 430.151500][T18070] veth0_macvtap: entered promiscuous mode [ 430.194367][T18070] veth1_macvtap: entered promiscuous mode [ 430.252060][T18070] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 430.310478][T18070] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 430.437620][T11824] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.470623][T11824] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.477266][T18348] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3235'. [ 430.511154][T11824] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.545173][T11824] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.653482][ T5865] Bluetooth: hci1: command tx timeout [ 430.658437][T18355] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3237'. [ 430.731723][T11824] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 430.751558][T11824] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 430.762302][T18359] sock: sock_set_timeout: `syz.1.3238' (pid 18359) tries to set negative timeout [ 430.786460][T18361] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3238'. [ 430.792516][T11824] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 430.824177][T11824] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 430.832175][T18359] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3238'. [ 430.843980][T18364] tipc: Enabling of bearer rejected, failed to enable media [ 430.856359][T18362] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3239'. [ 430.878957][T18366] netlink: 416 bytes leftover after parsing attributes in process `syz.4.3241'. [ 430.952390][T18361] can: request_module (can-proto-0) failed. [ 431.009373][T18373] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3153'. [ 431.201448][T18379] atomic_op ffff888052c5b198 conn xmit_atomic 0000000000000000 [ 431.276895][T18379] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3243'. [ 431.334907][T18379] netlink: 1 bytes leftover after parsing attributes in process `syz.1.3243'. [ 431.778215][T18402] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3247'. [ 431.834038][T18404] tipc: Enabling of bearer rejected, failed to enable media [ 431.904350][T18404] syzkaller0: entered promiscuous mode [ 431.932054][T18404] syzkaller0: entered allmulticast mode [ 432.014603][ T5183] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 432.029939][ T5183] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 432.038993][ T5183] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 432.052133][ T5183] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 432.063762][ T5183] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 432.141182][T18411] wg1 speed is unknown, defaulting to 1000 [ 432.157432][T18411] syzkaller0 speed is unknown, defaulting to 1000 [ 432.291405][T18419] tipc: Started in network mode [ 432.304290][T18419] tipc: Node identity befbafe8914b, cluster identity 4711 [ 432.313507][T18419] tipc: Enabled bearer , priority 0 [ 432.337793][T18419] syzkaller0: entered promiscuous mode [ 432.343635][T18419] syzkaller0: entered allmulticast mode [ 432.431292][T18423] syzkaller0: mtu less than device minimum [ 432.542940][T18417] tipc: Resetting bearer [ 432.577557][T18417] tipc: Disabling bearer [ 432.725335][ T5183] Bluetooth: hci1: command tx timeout [ 432.793968][ T5943] hid-generic 0005:0004:000F.0002: item fetching failed at offset 14/120 [ 432.829701][T18411] chnl_net:caif_netlink_parms(): no params data found [ 432.837610][ T5943] hid-generic 0005:0004:000F.0002: probe with driver hid-generic failed with error -22 [ 433.091894][T18411] bridge0: port 1(bridge_slave_0) entered blocking state [ 433.103893][T18411] bridge0: port 1(bridge_slave_0) entered disabled state [ 433.121941][T18411] bridge_slave_0: entered allmulticast mode [ 433.139381][T18411] bridge_slave_0: entered promiscuous mode [ 433.157794][T18411] bridge0: port 2(bridge_slave_1) entered blocking state [ 433.167021][T18411] bridge0: port 2(bridge_slave_1) entered disabled state [ 433.174316][T18411] bridge_slave_1: entered allmulticast mode [ 433.183157][T18411] bridge_slave_1: entered promiscuous mode [ 433.207805][T11827] nci: nci_rsp_packet: unknown rsp opcode 0x73a [ 433.407246][T18411] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 433.443068][T18469] netlink: 'syz.1.3264': attribute type 13 has an invalid length. [ 433.456351][T18411] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 433.706925][T18478] tipc: Enabling of bearer rejected, failed to enable media [ 433.738364][T18411] team0: Port device team_slave_0 added [ 433.807457][T18411] team0: Port device team_slave_1 added [ 433.944462][T18411] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 433.970302][T18411] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 434.082997][T18411] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 434.153584][T18500] bridge0: port 1(bridge_slave_0) entered disabled state [ 434.172239][ T5183] Bluetooth: hci2: command tx timeout [ 434.189456][T18500] bridge0: port 2(bridge_slave_1) entered disabled state [ 434.238528][T18411] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 434.265486][T18411] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 434.298308][T18510] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 434.300315][T18411] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 434.340145][T18503] bond0: entered promiscuous mode [ 434.395259][T18503] bond_slave_0: entered promiscuous mode [ 434.436452][T18503] bond_slave_1: entered promiscuous mode [ 434.481681][T18503] batadv0: entered promiscuous mode [ 434.503037][T18503] debugfs: 'hsr1' already exists in 'hsr' [ 434.534929][T18503] Cannot create hsr debugfs directory [ 434.544783][T18503] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 434.568176][T18503] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 434.646106][T18503] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 434.885497][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 436.850282][T11827] bond0 (unregistering): Released all slaves [ 437.025917][T11827] bond1 (unregistering): Released all slaves [ 437.111159][T11827] tipc: Left network mode [ 437.337136][T18218] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN PTI [ 437.349063][T18218] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f] [ 437.357481][T18218] CPU: 0 UID: 0 PID: 18218 Comm: kbnepd bnep0 Not tainted syzkaller #0 PREEMPT(full) [ 437.367007][T18218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 437.377054][T18218] RIP: 0010:klist_del+0x49/0x110 [ 437.381975][T18218] Code: f6 49 89 dd 49 c1 ed 03 43 80 7c 25 00 00 74 08 48 89 df e8 b9 8b b2 f6 4c 8b 33 49 83 e6 fe 49 8d 7e 58 48 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 05 e8 9b 8b b2 f6 4d 8b 7e 58 4c 89 f7 e8 5f 74 [ 437.401568][T18218] RSP: 0000:ffffc90003acf768 EFLAGS: 00010202 [ 437.407650][T18218] RAX: 000000000000000b RBX: ffff888058596060 RCX: ffff88807f4d0000 [ 437.415601][T18218] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000058 [ 437.423550][T18218] RBP: ffffc90003acf890 R08: ffff88803fd195a3 R09: 1ffff11007fa32b4 [ 437.431500][T18218] R10: dffffc0000000000 R11: ffffed1007fa32b5 R12: dffffc0000000000 [ 437.439451][T18218] R13: 1ffff1100b0b2c0c R14: 0000000000000000 R15: ffff88804d8f6750 [ 437.447408][T18218] FS: 0000000000000000(0000) GS:ffff888125c14000(0000) knlGS:0000000000000000 [ 437.456328][T18218] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 437.462922][T18218] CR2: 0000200001000000 CR3: 000000000df36000 CR4: 00000000003526f0 [ 437.470883][T18218] Call Trace: [ 437.474149][T18218] [ 437.477067][T18218] device_del+0x280/0x8e0 [ 437.481385][T18218] ? _raw_spin_unlock_irq+0x2e/0x50 [ 437.486571][T18218] ? pm_runtime_set_memalloc_noio+0x1f4/0x260 [ 437.492625][T18218] ? __pfx_device_del+0x10/0x10 [ 437.497461][T18218] ? netdev_unregister_kobject+0x344/0x450 [ 437.503257][T18218] unregister_netdevice_many_notify+0x1a6b/0x1ff0 [ 437.509666][T18218] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 437.516417][T18218] ? rtnl_net_dev_lock+0x257/0x2f0 [ 437.521516][T18218] unregister_netdevice_queue+0x33c/0x380 [ 437.527222][T18218] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 437.533512][T18218] ? rtnl_net_dev_lock+0x36/0x2f0 [ 437.538542][T18218] ? rtnl_net_dev_lock+0x2de/0x2f0 [ 437.543647][T18218] unregister_netdev+0x1f/0x60 [ 437.548407][T18218] bnep_session+0x294d/0x2b40 [ 437.553073][T18218] ? rcu_is_watching+0x15/0xb0 [ 437.557820][T18218] ? trace_sched_exit_tp+0x36/0x110 [ 437.563005][T18218] ? __lock_acquire+0xab9/0xd20 [ 437.567846][T18218] ? __pfx_bnep_session+0x10/0x10 [ 437.572858][T18218] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 437.578740][T18218] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 437.585109][T18218] ? __pfx_woken_wake_function+0x10/0x10 [ 437.590755][T18218] ? __kthread_parkme+0x7b/0x200 [ 437.595685][T18218] ? __kthread_parkme+0x1a1/0x200 [ 437.600725][T18218] kthread+0x70e/0x8a0 [ 437.604787][T18218] ? __pfx_bnep_session+0x10/0x10 [ 437.609801][T18218] ? __pfx_kthread+0x10/0x10 [ 437.614378][T18218] ? _raw_spin_unlock_irq+0x23/0x50 [ 437.619575][T18218] ? lockdep_hardirqs_on+0x9c/0x150 [ 437.624757][T18218] ? __pfx_kthread+0x10/0x10 [ 437.629334][T18218] ret_from_fork+0x3fc/0x770 [ 437.633913][T18218] ? __pfx_ret_from_fork+0x10/0x10 [ 437.639032][T18218] ? __switch_to_asm+0x39/0x70 [ 437.643780][T18218] ? __switch_to_asm+0x33/0x70 [ 437.648530][T18218] ? __pfx_kthread+0x10/0x10 [ 437.653128][T18218] ret_from_fork_asm+0x1a/0x30 [ 437.657893][T18218] [ 437.660906][T18218] Modules linked in: [ 437.665940][T18218] ---[ end trace 0000000000000000 ]--- [ 437.671959][T18218] RIP: 0010:klist_del+0x49/0x110 [ 437.677036][T18218] Code: f6 49 89 dd 49 c1 ed 03 43 80 7c 25 00 00 74 08 48 89 df e8 b9 8b b2 f6 4c 8b 33 49 83 e6 fe 49 8d 7e 58 48 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 05 e8 9b 8b b2 f6 4d 8b 7e 58 4c 89 f7 e8 5f 74 [ 437.697090][T18218] RSP: 0000:ffffc90003acf768 EFLAGS: 00010202 [ 437.703191][T18218] RAX: 000000000000000b RBX: ffff888058596060 RCX: ffff88807f4d0000 [ 437.711262][T18218] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000058 [ 437.719502][T18218] RBP: ffffc90003acf890 R08: ffff88803fd195a3 R09: 1ffff11007fa32b4 [ 437.727511][T18218] R10: dffffc0000000000 R11: ffffed1007fa32b5 R12: dffffc0000000000 [ 437.735519][T18218] R13: 1ffff1100b0b2c0c R14: 0000000000000000 R15: ffff88804d8f6750 [ 437.743474][T18218] FS: 0000000000000000(0000) GS:ffff888125c14000(0000) knlGS:0000000000000000 [ 437.752444][T18218] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 437.759083][T18218] CR2: 0000200001000000 CR3: 000000000df36000 CR4: 00000000003526f0 [ 437.767145][T18218] Kernel panic - not syncing: Fatal exception [ 437.773490][T18218] Kernel Offset: disabled [ 437.777799][T18218] Rebooting in 86400 seconds..