last executing test programs: 4.848892699s ago: executing program 4 (id=2108): r0 = socket$netlink(0x10, 0x3, 0x14) (async) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async) socket$kcm(0x10, 0x2, 0x0) (async) r3 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f00000002c0)={0x0, 0x6000, &(0x7f0000000600)=[{&(0x7f0000000300)="2e00000010008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000100020400bf050005001201", 0x67}], 0x100002ad, 0x0, 0xffffffffffffff37}, 0x8001) (async) bind$bt_hci(r2, 0x0, 0x0) (async) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x0, @fixed, 0x0, 0x1}, 0xe) (async) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x1001, @fixed}, 0xe) (async) accept(r0, &(0x7f0000000180)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, &(0x7f0000000200)=0x80) ioctl$SIOCRSSCAUSE(r5, 0x89e1, &(0x7f0000000240)=0x8) (async) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0xc, &(0x7f0000000000)=0x8000006, 0x4) r6 = socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000480)={0x0, @in6={{0xa, 0x4e24, 0x9251, @private2={0xfc, 0x2, '\x00', 0xfd}, 0x7}}, 0x4, 0x1, 0xfffffffa, 0xf, 0x68, 0xfffff995}, &(0x7f0000000280)=0x9c) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, &(0x7f0000000540)={r7, @in={{0x2, 0x4e22, @loopback}}}, 0x84) r8 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000001800010000000000000000001d01000008000a00", @ANYRES32=0x0, @ANYBLOB="5fa9c30d1ba06b32f34ccfa27220af89a8d8ca205f67c30700bf73f9920460f4fa471b782a000000003bcddbae98c77dd24d9f0aa9e6de483fe0e9ec43d9ab67159cc2a0980ced2b5cfde2a27aef9405150b97271200000000000000000000000000005e08d289db13176bc3f10e29e84dc48e0c808906964679ddd301e0c7fc9273de1c185773cbb049754f232d427970a7fc17ed1af6896f0f379be74a29e30b25ed37a9d7e8e5ed0b19d1adfffd3b5c77e011c2871673c54b78e5b1779c439ac7753dca", @ANYRES32=0x0, @ANYBLOB="08000e00", @ANYRES32=r9, @ANYBLOB="15000400030000e00a0100000325175362eb4cf204000000"], 0x44}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001bc0)=ANY=[@ANYBLOB="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", @ANYRES32=r9, @ANYBLOB="921152767a19d3bae6b16c68d6221b3e44b64e18a13ab60000"], 0x12e0}, 0x1, 0x0, 0x0, 0x4008001}, 0x44) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000880)=ANY=[@ANYBLOB="1c0000000000000000000a000000750ec696b5000000"], 0x1c}}, 0x0) 4.488741599s ago: executing program 4 (id=2114): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) (async, rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) (async) recvmmsg(r2, &(0x7f0000002980)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000005c0)=""/4075, 0xfeb}, {&(0x7f00000003c0)=""/130, 0x82}], 0x2}, 0x7e0}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/96, 0x60}, {&(0x7f0000001740)=""/4090, 0xffa}, {&(0x7f0000003740)=""/4083, 0xff3}, {&(0x7f00000001c0)=""/126, 0x7e}], 0x4}, 0x8000}], 0x3, 0x40002122, 0x0) (async) r3 = socket$inet6(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYRESHEX], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) sendmmsg$inet6(r3, &(0x7f00000065c0)=[{{&(0x7f0000000180)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x42}}}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="120000000000000011000000"], 0x28}}], 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f00000002c0)={'sit0\x00', &(0x7f0000000140)=@ethtool_cmd={0x20, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45}}) ioctl$SIOCPNENABLEPIPE(r0, 0x89e0, 0x500) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={0xffffffffffffffff, 0x2000012, 0xffe, 0x0, &(0x7f0000000c40), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.484014119s ago: executing program 2 (id=2115): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_IP_PROTO={0x5, 0x1b, 0x1}]}, 0x24}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r2, 0x0, 0x1, 0x0, &(0x7f000000a500)) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000ff0100007b8af8ff00000000bfa200000000000007020000f8ffffffb703000004000000b704000000000000850000001500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0857f9f582f0300000000000000", 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), r0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x3c, r5, 0x1, 0x70bd27, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x884}, 0x4850) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x4}}}]}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x4}]}], {0x14}}, 0x6c}, 0x1, 0x0, 0x0, 0x34028800}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f00000003c0)={0x50, r5, 0x100, 0x70bd25, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0xd265}, {0xc, 0x90, 0x7}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000010}, 0x2) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_IP_PROTO={0x5, 0x1b, 0x1}]}, 0x24}}, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) getsockopt$bt_hci(r2, 0x0, 0x1, 0x0, &(0x7f000000a500)) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000ff0100007b8af8ff00000000bfa200000000000007020000f8ffffffb703000004000000b704000000000000850000001500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0857f9f582f0300000000000000", 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000200), r0) (async) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x3c, r5, 0x1, 0x70bd27, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x884}, 0x4850) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x4}}}]}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x4}]}], {0x14}}, 0x6c}, 0x1, 0x0, 0x0, 0x34028800}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f00000003c0)={0x50, r5, 0x100, 0x70bd25, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0xd265}, {0xc, 0x90, 0x7}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000010}, 0x2) (async) 4.396800783s ago: executing program 3 (id=2118): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) (async) r2 = socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@newqdisc={0xb8, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {0x0, 0xf}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x88, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1], 0x0, [0x5, 0x6, 0x2, 0x0, 0x8, 0x0, 0x9, 0x24, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, 0x1000, 0x0, 0x0, 0x8000]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x2c, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x3}]}, {0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xf11}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x7}]}]}]}}]}, 0xb8}}, 0x0) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_lsm={0x10, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="7910480000000000790030000000000095"], &(0x7f0000000100)='GPL\x00'}, 0x80) 4.313984129s ago: executing program 2 (id=2120): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) (async) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x4f}, @call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 4.218422648s ago: executing program 3 (id=2121): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000021c0)=0x1, 0x4) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000100)="9d2f037e8507", 0x6}, {&(0x7f0000000200)="b91701811a1e42b5ba4375aa85a84e4f9c95a6c555a1f5c9a528732192fc2f922cad1ab69dcd8fe6992886e8a95d7a0869644c5e1fd07d9e2867458a5d5b13c9e077ce1b8df3c8827af7b4f1f325f69f92ee22e5a8f58df2959db69d163a50f24485ecba1927b9eb6c227224ad5720a2d097fe61894aec1d383ed10e1b29006a82cd282b002c4b719584521d4d36f5be684cc81c0d8953d890bba2eb57b8f4816437e2af2415b7601bb030b5", 0xac}, {&(0x7f00000002c0)="5d1e22c7a9d9fc71674e3ba89c4ba8c82c43d879e5745e8574270be9d8df337b2046a5bc7b16a534952872a27f03901db7d368492efd4641ee77ac945ffe68546a97cb4f523bbc93c8550a9c01bd0db6de2f8377af4372b43726203a637dcef20426f0701691fca7fb8cd80755a195b463764e5d5f77c4b8fc147b166a539fdba5", 0x81}], 0x3}, 0x4000) socket(0x10, 0x3, 0x0) bind$inet6(r0, &(0x7f0000000580)={0xa, 0x4e21, 0x3, @mcast1, 0x82}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) sendmmsg(r2, &(0x7f0000000ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001400)}], 0x1}}, {{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000880)}], 0x2}}], 0x2, 0x11) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r7, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) r9 = socket(0x10, 0x3, 0x0) recvmmsg(r9, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)}}], 0x1, 0x10122, 0x0) setsockopt$sock_int(r9, 0x1, 0x10, &(0x7f0000000080)=0x1, 0x4) write(r9, &(0x7f0000000380)="240000001e005f0214e0ffffffffff8dd5d6d87c998ff807000000000000000000000003", 0x7e) setsockopt(r0, 0x1, 0x10000000000009, &(0x7f0000000100)="0100ddff", 0x507b420f2d51f971) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e1d, 0x80000003, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x1c) 4.140644115s ago: executing program 2 (id=2124): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_netdev_private(r0, 0x89fc, &(0x7f0000000140)="ddf2754f1176dc2ddaf55145d8540467b5e28fcb2a4860784e41d6d722b959abbdac1791f973e87b7991fa581b4a95") r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$SO_COOKIE(r4, 0x1, 0x10, &(0x7f0000000100), &(0x7f0000000240)=0x8) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0xa4, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}]}}]}, 0xa4}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r6, &(0x7f0000000280)={0x2c, 0xd, r2, 0x38}, 0x10) r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0) recvfrom$rose(r7, &(0x7f00000002c0)=""/40, 0x28, 0x40012022, &(0x7f0000000340)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null, @default, @null, @null]}, 0x40) sendmsg$NFNL_MSG_ACCT_GET(r5, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000900)={0x14, 0x1, 0x7, 0x5}, 0x14}}, 0x0) r8 = socket(0x1, 0x2, 0x0) bind$unix(r8, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x73, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r9, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x1}}, 0x3c) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f00000002c0)={{}, 0x0, 0x0, @inherit={0x48, &(0x7f0000019400)=ANY=[]}, @devid}) r10 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3800000056000100000000000000000007020000", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000040)={&(0x7f0000000f40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELFLOWTABLE={0x34, 0x18, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_FLAGS={0x8}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x0, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffc}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffc}, @NFTA_CHAIN_COUNTERS={0x4}]}, @NFT_MSG_NEWTABLE={0x108, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0xe1, 0x6, "902dbaa721e8a90bfa4d555da59d23897c0c1187a05a435a5261c868b62ab5859a67180c1560767e546164c6e08f34abd749692eed4716d107635db8fb045f2e96a0ca795d38df17ab6dfbbf2d2140acf39bfdbf67d27eb9026070b11b1a2d1fe6f45bbb5f86f2925874a5919bc8cc53fbc99346a5bd315304d8f0066f3bad44a22ee3b5cfe083f8a04d9f37d3b78d52b6877203e857a61c0fc050c9a253a94f2228f26ddeda8a2ae631b3b0ba151cb0883a22258dffb92e59d0e805d113d3ca9ffa942b97fd9dddee33e201d00020581e0c907ac6fe428c01ad5e04a6"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffc}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffc}]}, @NFT_MSG_DELSET={0xac, 0xb, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_DESC={0x7c, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x69d}, @NFTA_SET_DESC_CONCAT={0x68, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xb5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x40}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x400}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5b}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}]}]}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x4}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x6}]}, @NFT_MSG_DELOBJ={0x84, 0x14, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xf}, @NFTA_OBJ_USERDATA={0x3b, 0x8, "91e1a00d78f53d92927ce69a759349ddb67d2e2882e390703a110323ea7c1a51637a916b1d57ff020108427fd92594625b582c2c73679b"}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_USERDATA={0x9, 0x8, "08794413a2"}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0xe4, 0x9, 0xa, 0x202, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x1a}, @NFTA_SET_USERDATA={0xaf, 0xd, 0x1, 0x0, "c486f383ba6ec1814809da14bb9f31330b5ad3fb2522d0994d960bda4e7659eed3905b57ae8e9d9049031815507c2821ae37ecdf233bf114302686912f802e3e81d08713327a76034a21feb3aa2fe5aad37979544f1a787841840460d9265b57bab1cda7baefe462ce1e26c92d23a58cedcd9fde830f1b7ad5d47f62c1b1a975f3c8841be63b85ebbc42d34bb2aee8c9b5579bcaacc50596653e4192a30a2d801f82d2d106b862a8efddad"}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x8}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x3ec}, 0x1, 0x0, 0x0, 0x841}, 0x40085) 4.094974874s ago: executing program 4 (id=2125): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x604040, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000040)={0x8000000000000000, 0x8000000000000000, 0x4, 0x8, 0x3, 0x0, [{0xe5e0, 0x3, 0x1f3e, '\x00', 0x8b}, {0x0, 0x93, 0x4, '\x00', 0x80}, {0x0, 0x2, 0xfffffffffffffffe, '\x00', 0x901}]}) r1 = socket$phonet(0x23, 0x2, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000140)={0x4, 0xe, 0x3, 0x0, 0x0, [{{r2}, 0x80000000}, {{r0}, 0x14aa4371}, {{r0}, 0x3}]}) sendmsg$NFT_BATCH(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x4004) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000002c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f00000004c0)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000500)={"f6e9f252b9b797ddeb5e197476e873a7", r3, r4, {0xd, 0x196f}, {0x6, 0x6}, 0x5, [0x3, 0x2, 0x1, 0xfffffffffffffffb, 0xe2a9, 0x4, 0x200, 0x0, 0x7, 0x6, 0xffff, 0xda7, 0x4e2f, 0x33aa102f, 0x8, 0xf9e]}) ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f0000000640)={{r0}, 0x7, &(0x7f0000000600)=[0x8, 0x2, 0x200, 0x8, 0x72e, 0x9, 0x7fff], 0x8, 0xa}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000006c0)={r2}) listen(r5, 0xe) sendto$inet(r5, &(0x7f0000000700)="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", 0x1000, 0x8000, &(0x7f0000001700)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r6, &(0x7f0000001800)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x20, 0x1, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}]}, 0x20}}, 0x8840) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r5, 0x84, 0x1c, &(0x7f0000001840), &(0x7f0000001880)=0x4) r7 = accept$netrom(r5, 0x0, &(0x7f00000018c0)) ioctl$VFAT_IOCTL_READDIR_SHORT(r7, 0x82307202, &(0x7f0000001900)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r0, 0x8002f515, &(0x7f0000001b40)) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000001b80)="fab07e708105a61352c8e008e4c9089265b72224625f21b3b691391d3e9c8e32944c08a32734c30e77fe341fb0b6ed8366c7692612543a9a83707736f696717bba83b25b2c2d7f4b73c1f822cbf9939f2eb36fa6d0f196ec09d91c65e727acc523448a305084de6f052f5503f34cb75c8dad3caaab17a6eee7864c832181af0c5df7d9102101d105fc53796e3a05a0dce62843abe103c31b8670106df01b142e3a5fc0b1172340a578b70ce285825bb69a2150ad39ca9ed64a58f4b633eceae8d6823981163dd7072abc1bad17f5ff62be1b04db8aec8d6a698cca6588c183e705bfc62920df7a733aca18e7b902666e96e1dd4d8e7d7dc1e608dcb5e80a4519") getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000001c80)={0x0, 0x3, 0x6}, &(0x7f0000001cc0)=0x8) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r7, 0x8983, &(0x7f0000001d00)) sendto$inet(r5, &(0x7f0000001d40)="94a453ddec6141d825f4d0e8967af306c8a2dcf88d67bb85e1578ba839883a41", 0x20, 0x8000, &(0x7f0000001d80)={0x2, 0x4e21, @empty}, 0x10) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r5, 0x84, 0x21, &(0x7f0000001dc0)=0x3, 0x4) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x73, &(0x7f0000001e00)={r8, 0x3, 0x10, 0x7, 0x8000000000000000}, &(0x7f0000001e40)=0x18) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001ec0), r5) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r9, &(0x7f0000002000)={&(0x7f0000001e80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001fc0)={&(0x7f0000001f00)={0x84, r10, 0x400, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0xfffffffd, 0xf}}}}, [@NL80211_ATTR_REKEY_DATA={0x18, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="c28ef3c4d0b7ba8cfa7ebab8f93c6565"}]}, @NL80211_ATTR_REKEY_DATA={0x28, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="438f26b4275e80000f05d4bbc88bcf9a9747706f2f2893d3"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x3}]}, @NL80211_ATTR_REKEY_DATA={0x1c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "b9476d13546a989b"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "6c619834206bb01d"}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000000}, 0x20) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r5, 0x84, 0x19, &(0x7f0000002040)={r8, 0x3}, 0x8) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000021c0)={&(0x7f0000002080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000002180)={&(0x7f0000002100)={0x70, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x50) 3.973243412s ago: executing program 4 (id=2127): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x6, 0x12, r1, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$SIOCAX25OPTRT(r2, 0x89e7, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=@newsa={0xf0, 0x10, 0x713, 0x40000, 0x0, {{@in=@private=0xa010102, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@mcast1, 0x0, 0x32}, @in=@local, {0x102, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000}, {0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0x0, 0x0, 0x2}, 0x0, 0x0, 0xa, 0x5, 0xb}}, 0xf0}}, 0x20000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)={0x88, r6, 0x1, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x6c, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x9}, @broadcast, @device_a, @initial, {0xf, 0x5}}, 0xffffffffffffffff, @default, 0x1000, @val={0x0, 0x6, @default_ibss_ssid}, @void, @val={0x3, 0x1, 0x2c}, @void, @val={0x6, 0x2, 0x1fc}, @val={0x5, 0x3, {0x5, 0x97, 0x5}}, @void, @val={0x2a, 0x1, {0x0, 0x0, 0x1}}, @void, @val={0x2d, 0x1a, {0x400, 0x2, 0x5, 0x0, {0x2, 0xb7b, 0x0, 0x347, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x100, 0x1}}, @void, @val={0x71, 0x7, {0x69, 0x0, 0x1, 0xffffffffffffffff, 0x1, 0x7, 0x20}}, @val={0x76, 0x6, {0x3, 0x0, 0x2f, 0x6}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r7 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$inet6_int(r7, 0x29, 0x18, 0x0, 0x2e) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x413, 0x0, 0x0, {0x0, 0x0, 0x63}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_OKEY={0x8, 0x5, 0x4}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x44}}, 0x0) 3.972550703s ago: executing program 3 (id=2128): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r1, &(0x7f00000000c0)='+7', 0x2, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000013c0), r3) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f0000000000)={0x40, r4, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x2}]}]}, 0x40}}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x34, r4, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x20, 0xc, 0x0, 0x1, [{0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6297}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5ea7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xcbe9}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) listen(r1, 0xfff) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r0) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x68, r5, 0x800, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_LEVEL={0x24, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x7}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_LEVEL={0x1c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x4}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x7}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x68}, 0x1, 0x0, 0x0, 0x44}, 0x20040040) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r6, &(0x7f0000000240)=[{&(0x7f0000000340)=""/136, 0x88}], 0x1) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETVNETHDRSZ(r6, 0x400454d8, &(0x7f0000000100)=0x730) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) accept4(r1, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x6, [@const={0xd, 0x0, 0x0, 0xa, 0x3}, @typedef={0x5, 0x0, 0x0, 0x8, 0x5}, @typedef={0x1}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x1, 0x7}}]}, {0x0, [0x3e, 0x30, 0x2e, 0x30]}}, &(0x7f00000003c0)=""/210, 0x5a, 0xd2, 0x1, 0x7}, 0x28) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000180)={0x14, r8, 0x2, 0xffffffff}, 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x20000000) 3.827446972s ago: executing program 2 (id=2131): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x5, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xa}, 0x80) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x20, r1, 0xb03, 0x0, 0x0, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x6}]}, @TIPC_NLA_SOCK={0x0, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x0, 0x1, 0x2}, @TIPC_NLA_SOCK_REF={0x0, 0x2, 0x4}, @TIPC_NLA_SOCK_CON={0x0, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x0, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x0, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x0, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x0, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x0, 0x2, 0x80000000}, @TIPC_NLA_CON_NODE={0x0, 0x2, 0x10}, @TIPC_NLA_CON_NODE, @TIPC_NLA_CON_NODE={0x0, 0x2, 0x40}, @TIPC_NLA_CON_NODE={0x0, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x0, 0x1, 0x2}]}, @TIPC_NLA_SOCK_CON={0x0, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x0, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x0, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x0, 0x1, 0x3}]}, @TIPC_NLA_SOCK_REF={0x0, 0x2, 0xa}, @TIPC_NLA_SOCK_ADDR={0x0, 0x1, 0x7}, @TIPC_NLA_SOCK_HAS_PUBL, @TIPC_NLA_SOCK_REF={0x0, 0x2, 0x7}, @TIPC_NLA_SOCK_CON={0x0, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x0, 0x1, 0x3}]}, @TIPC_NLA_SOCK_HAS_PUBL]}]}, 0x20}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_lsm={0x2, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="6eaa000000000000791098000000000018090000", @ANYRES32, @ANYBLOB="000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) 3.820220878s ago: executing program 4 (id=2132): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) (async) r3 = gettid() (async) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001fc0)=ANY=[@ANYBLOB="2800000010000304f9fffffffedbdf2500007400", @ANYRES32=r2, @ANYBLOB="049c01000750050008001300", @ANYRES32=r3, @ANYBLOB="9a953691c0060cf5a3a24ef2e242571a5f76e0f664d5dfeaadb2cfdc9c156e98393a2c78759dee1942e9278b092a8d0a7fbc45e686fb1eb5e5610dfa4ad19e22849f2c55997139c4b875e4832c912045365a808182112ddb236b0a2b1e4f3f23828154d5091c1748650af1b7f8d9b1b1ad47ec1913fa07340a0d8525d69fcbdfbf7e4f24d8fa9238fcaaa0e2e70b9f88572c9c8a915a66da4b44dad7c1cfe4b7e83ece6ab5465612b709b6c689"], 0x28}, 0x1, 0x0, 0x0, 0x4802}, 0x0) (async) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$int_in(r5, 0x5452, &(0x7f0000000180)=0x401) listen(r5, 0x0) (async) r6 = gettid() ioctl$sock_SIOCSPGRP(r5, 0x8902, &(0x7f0000000080)=r6) (async) sendmsg$nl_netfilter(r0, &(0x7f0000001f80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001e80)={&(0x7f0000000c00)={0x1270, 0x5, 0xb, 0x801, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x6}, [@nested={0x119f, 0x30, 0x0, 0x1, [@nested={0x4, 0x121}, @typed={0x8, 0x4, 0x0, 0x0, @pid=r3}, @nested={0x4, 0x11}, @generic="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", @typed={0x8, 0x93, 0x0, 0x0, @uid=0xee00}, @typed={0xc, 0x103, 0x0, 0x0, @u64=0x3}, @generic="3baee0c246c78365b81a5ce7e1397ca72f52a9a282fa65ac344ea399ca616a2349faa447b73bd30e96ab46c49282b9655cb80f5b7deabac845f1fe38e81561658628a72dc04a67df2bd9e8f738f8cbb60bea4a5cd76b68ba5f7756a6cc4edae1774829dc3408ac37e50e2f7b0aec1109a2778d074b3bc138622f490d8ba1fa0130927e80868ce425143014868937612a0c3d53ba9e", @typed={0x8, 0xfe, 0x0, 0x0, @u32}, @generic="552f6c1038021bef3b973bea79d31374e17ed3a9efd2aaf3c871870c6291a73a17c0b8376b373f966a22b475137164b985850a24d973b55b697505613399e691e14bd26943afc7ac4abec85452088d8a0cf09afc8535d983990339f3383a111ff9056e3b9168277bed143c4f0786c63e428afc6b2f25698df7487c7f1e6844d2a9413f1a71147986037103ae74bc55f5ff783f0b1a0faf92fc9dc9b03dbd20bca62a5c665c496660d9745ae81ea43a2b85386417333b9c8f2b79b5899e0858ef324f52bc7c2395cf6568c5758c1cbfca25b7da632f0b669fa416"]}, @generic="409d2ccc244cbecd59467c0a3e90f988fa", @typed={0x8, 0x6, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @generic="7d3dd3f687b7f4bc3cca8c41809ce5bbb27ebc450691a3e0b221c2d2c31085d584a2ab7103b795006fde2c05f64637657d9992be1356b7ce96235288d5bde561dee56550f62a28c9156c15e8c0acad7a3066f1336495963c97679eb3", @typed={0x8, 0xe9, 0x0, 0x0, @pid=r6}, @generic="1c10974ffb1eeb7c68bdffd5b4b693ed9f55abbf56d9b2f68fc65933e56feac68271e7a0430c17b34e031ad75e586715a304e9c57778db", @typed={0x8, 0x11a, 0x0, 0x0, @str='$\xc3%\x00'}]}, 0x1270}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, 0x0, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000b80)) (async) sendmsg$nl_route(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001f00)=ANY=[@ANYBLOB="380000ebff02cc001800dd8d0000000000000000020000000000ff0000000000060015000400000014001680100008800c0003800500030085830823f592dd68c4f6dc02efe2070d43"], 0x38}}, 0x0) (async) r8 = socket$can_raw(0x1d, 0x3, 0x1) (async) r9 = socket$netlink(0x10, 0x3, 0x0) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000002a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r10, 0xe0, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r12 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r11}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r12, 0x108, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f09df33c9f7b986", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) bind$can_raw(r8, &(0x7f00000004c0)={0x1d, r13}, 0x10) r14 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r14, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0xb20, 0x0, 0x43, 0xa0, 0x1c0, 0x98, 0xa88, 0x178, 0x178, 0xa88, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x1a0, 0x1c0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x11, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x3, {0x100000001}}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x888, 0x8c8, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0xb}]}}, @common=@unspec=@u32={{0x7e0}, {[{[{0x9}, {0x3}, {0x1, 0x1}, {0x0, 0x3}, {0x4, 0x2}, {0xb1d}, {0x3}, {0x8}, {0x2, 0x3}, {0x3}, {0x103}], [{0xe8f3, 0x5}, {0x1d, 0x6}, {0x4, 0x8}, {0x0, 0x4}, {0x4, 0xc3e}, {0x1, 0x100}, {0x6, 0x7}, {0x3, 0x3}, {0xf2, 0x3}, {0x3ff, 0x8}, {0x10, 0x3}], 0x6, 0x6}, {[{0x80, 0x3}, {0x2}, {0x6, 0x1}, {0x355cbac3, 0x2}, {0x0, 0x2}, {0x0, 0x2}, {0x7}, {0xe7, 0x2}, {0x3, 0x3}, {0x5598e8fe, 0x2}, {0x6, 0x1}], [{0x9, 0x9097}, {0x7, 0x9}, {0x7, 0xa}, {0x6, 0x8}, {0x20080, 0x5}, {0x13, 0xc0000000}, {0x40, 0x8}, {0x9, 0x6}, {0x4, 0x2}, {0x6, 0x7fffffff}, {0x7fffffff, 0x400}], 0x7}, {[{0x84, 0x2}, {}, {0x0, 0x2}, {0xffffffff, 0x1}, {}, {0x7, 0x1}, {0x5, 0x2}, {0x8, 0x3}, {0x2, 0x3}, {0x8, 0x1}, {0x7, 0x1}], [{0x9, 0x5}, {0x80, 0x32}, {0x0, 0xfffffff7}, {0xff, 0x1}, {0x7, 0x6}, {0xdb9, 0xff4}, {0x6, 0x3ff}, {0x3, 0x6}, {0x5, 0x10}, {0x9, 0x6}, {0x10000, 0x2}], 0x4, 0xa}, {[{0x3, 0x2}, {0xa, 0x1}, {0x6, 0x1}, {0x10, 0x3}, {0x2, 0x2}, {0x2, 0x2}, {0x3, 0x1}, {0x2, 0x3}, {0x3, 0x1}, {0x2, 0x2}, {0x477d, 0x1}], [{0x4, 0xffffffff}, {0x200, 0x6}, {0x4be1, 0x4044}, {0x1}, {0x5, 0xc}, {0x3, 0x4}, {0x2, 0x4}, {0x800, 0x8000}, {0x8, 0x800}, {0x7, 0x2}, {0xe, 0x8000}], 0x4, 0xb}, {[{0x7, 0x1}, {0xd}, {0x5}, {0x61}, {0x9}, {}, {0x2}, {0x1}, {0x0, 0x2}, {0x9, 0x3}, {0x5, 0x3}], [{0x58d, 0x3ff}, {0x0, 0x7f}, {0x6}, {0xfc9b, 0x80000001}, {0x101, 0x7}, {0x7, 0x1}, {0x7, 0x8001}, {0x2, 0x1}, {0x2, 0x2}, {0x9, 0x4cf}, {0x7, 0x10000}], 0x1}, {[{0x2}, {0x9}, {0x8, 0x1}, {0x2, 0x3}, {0x71, 0x3}, {0x0, 0x2}, {0xe, 0x2}, {0x6, 0x2}, {0x5}, {0x3000000, 0x3}, {0x6, 0x1}], [{0x9, 0x3}, {0x5, 0x7fffffff}, {0xffff, 0x4}, {0x0, 0x80000007}, {0x8, 0xb502}, {0x1ff, 0x86}, {0x6, 0xffffffff}, {0x3, 0x4}, {0x5, 0x6}, {0xf, 0xf93}, {0x5, 0x4}], 0x3, 0x3}, {[{0x7, 0x1}, {0x3, 0x1}, {0x45d7}, {0xfff, 0x3}, {0xc4f, 0x3}, {0x0, 0x2}, {0x400, 0x1}, {0x2, 0x1}, {0x4, 0x2}, {0xfffffffd}, {0x2}], [{0x3, 0x6}, {0xed, 0xd}, {0x80, 0xb81d}, {0x2ca, 0x80000000}, {0x8, 0xff}, {0x7, 0x45a8}, {0x8, 0x6}, {0x4, 0x1}, {0x2, 0x6}, {0xfc, 0x6}, {0xd, 0x138c}], 0x6}, {[{0x4, 0x1}, {0x800}, {0x9, 0x2}, {0xf0000000, 0x2}, {0x6, 0x3}, {0x3, 0x2}, {0x8, 0x2}, {}, {0x9}, {0x400, 0x2}, {0x8, 0x3}], [{0x7, 0xfffffffd}, {0x2}, {0x2, 0x2}, {0x8f, 0x6}, {0x7, 0x5}, {0x8, 0x7}, {0xb, 0x82c6}, {0xb1b}, {0xbd5c, 0xffff}, {0x1, 0x9b8d}, {0xec, 0x5}], 0x2, 0x6}, {[{0x8}, {0x0, 0x1}, {0xac000000}, {0x6, 0x2}, {0x2d8, 0x3}, {0x7e3e24bc}, {0x8, 0x1}, {0x4f, 0x3}, {0x4, 0x2}, {0xfffffff7}, {0x3, 0x2}], [{0x5, 0x42}, {0x76a74689, 0x4}, {0x1}, {0x8000, 0x7}, {0x400, 0xdd}, {0xfff, 0x8}, {0x76b, 0xfffffffe}, {0xa6d00, 0xfffffff7}, {0x10001, 0xfc8d}, {0x0, 0x10001}, {0x4, 0x3}], 0x1, 0x9}, {[{0x8, 0x1}, {0x3, 0x3}, {0x18, 0x3}, {0x3ff, 0x3}, {0x7fffffff}, {0x8}, {0x1}, {0x8, 0x3}, {0xf1b6}, {0x80, 0x3}, {0x4, 0x2}], [{0x2, 0x4}, {0x3, 0xf}, {0x9, 0x6}, {0x7f, 0x8}, {0x7, 0x273e1899}, {0x4, 0x1}, {0x6, 0x3}, {0x1, 0xb7}, {0x8, 0x3}, {0x3, 0x1}, {0x7ff, 0x63}], 0xb, 0x3}, {[{0x1, 0x2}, {0x6, 0x3}, {0xffff, 0x1}, {0x1}, {0x4, 0x3}, {0x4, 0x3}, {0xaa7}, {0x100, 0x3}, {0x2}, {0xfffffff7, 0xb90af65875a5dc08}, {0x4, 0x3}], [{0x3}, {0x8001, 0x7}, {0x10000, 0x7524}, {0x73d, 0x4}, {0x0, 0x280000}, {0x3, 0x3af}, {0x5, 0x2}, {0x101, 0xbf}, {0x10000, 0x6}, {0x3, 0x800}], 0x8, 0x5}], 0x3}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "f1c098b60204ed02d82cf440fef5497b80c29d381d41116000"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0xb80) 3.77256768s ago: executing program 2 (id=2133): syz_emit_ethernet(0x86, &(0x7f0000000040)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}, @random="ce3500590a7f", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x15, 0x78, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e22, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x4, 0x0, "fc3e8734819324f72c8646a9b06bfea1c7025ea7f593ef0342032e82b60c7952", "6902f4cf91912dd79d157ce18a178be3", {"85171dc503e274bfff96813e488be5b2", "0eb94f35f3f34ed8d8a6e6fcaa10e9de"}}}}}}}, 0x0) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f0000000000)={0x6, 0x0, 0x8, 0x4, 0x40}) 3.607162776s ago: executing program 2 (id=2136): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x18}, [@ldst={0x4}]}, &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='percpu_create_chunk\x00', r0}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='percpu_create_chunk\x00', r0}, 0x10) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c0000001800dd8d00000000000000000200000000000005000000000600150001000000280016802400010000000000000000000004010020000020000000000000000000000300000001"], 0x4c}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c0000001800dd8d00000000000000000200000000000005000000000600150001000000280016802400010000000000000000000004010020000020000000000000000000000300000001"], 0x4c}}, 0x0) r2 = socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) (async) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newqdisc={0x40, 0x24, 0x3fe3aa0262d8c58b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x6, 0x2, @TCA_ETF_PARMS={0x8, 0x1, {0x0, 0x0, 0x2}}}}]}, 0x40}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020f02500000000002020207b1af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf07f}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffeb1, 0x0, 0x0, 0x0, 0x49, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="6c000000020601000600000600000000000000000e0003006269746d61703a69ffff000005000400000000000900020073797a3000000000240007800c00028008000140000000000c00018008000140000000000800064000000a0005000500020000000500010006000000"], 0x6c}}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="6c000000020601000600000600000000000000000e0003006269746d61703a69ffff000005000400000000000900020073797a3000000000240007800c00028008000140000000000c00018008000140000000000800064000000a0005000500020000000500010006000000"], 0x6c}}, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x34, r6, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x8f}, 0x1, 0x0, 0x0, 0x41}, 0x8000) (async) sendmsg$DEVLINK_CMD_RATE_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x34, r6, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x8f}, 0x1, 0x0, 0x0, 0x41}, 0x8000) 2.875660946s ago: executing program 0 (id=2145): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x80000004, 0x4) (async) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000640)={0x1, &(0x7f00000000c0)=[{0x6, 0x81, 0xca, 0x9}]}, 0x10) (async, rerun: 64) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x1, @empty, 0xfffffffc}, 0x1c) (async, rerun: 64) listen(r0, 0xb) (async, rerun: 64) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (rerun: 64) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async, rerun: 64) r2 = socket$kcm(0x2, 0x3, 0x2) (rerun: 64) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) (async) write$tun(r1, &(0x7f0000000100)={@val={0x8, 0x800}, @void, @ipv4=@tcp={{0x5, 0x4, 0x2, 0x3, 0x28, 0x65, 0x0, 0x52, 0x6, 0x0, @private=0xa010102, @broadcast}, {{0x4e23, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x10, 0x0, 0x7}}}}, 0x2c) 2.739017338s ago: executing program 3 (id=2147): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0xfffffffffffffdfb, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x37, &(0x7f0000000840)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0xe, &(0x7f0000000180), &(0x7f0000000080), 0x8, 0xf9, 0x8, 0x8, &(0x7f0000000140)}}, 0xfffffe71) r1 = socket(0x11, 0x800000003, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000500)={'syztnl2\x00', r0, 0x4, 0xa, 0x80, 0x400, 0x30, @private1, @ipv4={'\x00', '\xff\xff', @remote}, 0x8000, 0x40, 0x7, 0x8}}) syz_genetlink_get_family_id$devlink(&(0x7f00000005c0), r1) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000800)={@mcast2, 0x50, r0}) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="0300000300e3ffffffffffffff00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="020000000200"/28], 0x50) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000d40)=@raw={'raw\x00', 0x3c1, 0x3, 0x378, 0x0, 0x1170, 0x1398, 0x120, 0x1170, 0x2a8, 0x1398, 0x1398, 0x2a8, 0x1398, 0x3, 0x0, {[{{@ipv6={@empty, @mcast1, [0xff, 0xffffffff], [], 'veth1_to_bridge\x00', 'veth0_to_hsr\x00', {}, {}, 0x2b, 0x3b, 0x3}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@inet=@set2={{0x28}, {{0x1, 0x3, 0x1}}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0xfffe, 0x10, 0x2}}}, {{@uncond, 0x0, 0x160, 0x188, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @common=@srh1={{0x90}, {0x1, 0x0, 0x0, 0x0, 0x0, @loopback, @private0, @loopback, [0x0, 0x0, 0x0, 0xff], [], [0xffffff, 0x0, 0xff000000], 0x0, 0x803}}]}, @common=@unspec=@NFQUEUE0={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d8) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000008c0)={0x1b, 0x0, 0x0, 0x0, 0x0, r1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2}, 0x50) ioctl$INCFS_IOC_CREATE_FILE(r2, 0xc058671e, &(0x7f0000000600)={{'\x00', 0xff}, {0x9}, 0x42, 0x0, 0x0, &(0x7f0000000b00)='./file0\x00', &(0x7f0000000b40)='./file0\x00', &(0x7f0000000b80)="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", 0x149, 0x0, &(0x7f0000001140)={0x2, 0x1011, {0x1, 0xc, 0x1000, "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", 0x4, "56527d87"}, 0xb6, "99491bcdaf1eb1c4692d2a99c03e58f82e3fe12c076b24aa7153db0687e4495ac2d39538c6eee6b54a3c8f69d7bba042c3feed62b5df5eb1908310034f2a9c27ce094a5eae3c079172e17924f8210fe5d52c4b7c10ea8f39362ad1256e9eb2125745302fee8a5706b3156359daa9a55d5371e24c0e82ecb341099f0a1eb1459f2e83a6c69807f4618f02dd9008110f"}, 0x10ac}) r5 = socket(0x26, 0xa, 0x0) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000002280)={0x0, @hci={0x1f, 0xffffffffffffffff, 0x3}, @llc={0x1a, 0x312, 0xa5, 0x30, 0x81, 0x3, @broadcast}, @in={0x2, 0x4e22, @loopback}, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0xc0000000, 0x7}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r6, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r5}, 0x20) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(r7, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r7, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000064c0)={0x0, 0x0, &(0x7f0000006480)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000100001000000000000e9e4000500000a200000000e0a010200000000000000000a0000090900010073797ab100000000140000001100010000000000000000000700000af346eb24"], 0x48}, 0x1, 0x0, 0x0, 0x20040890}, 0x4000000) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x1c, 0x3, 0x1000, 0x8, 0x1241, 0x1, 0x10000, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x1}, 0x50) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r11 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r10}, 0x10) r12 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r11}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="1100"/12, @ANYRES32=r12, @ANYBLOB="e5a75ee7"], 0x20) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events.local\x00', 0x275a, 0x0) write$cgroup_devices(r13, 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x18, 0x7, &(0x7f0000002300)=ANY=[@ANYBLOB="180000006eca00000000000031000000180000000700000000000000fcffffff18410000faffffff00000000000000009500000000000000e1a34d45c5817ea566ec4461b6e2d7495d893a4ee1e8bd9ed5ff7b462206b26168ae1ffe45ef18d48cd3718d52596f3ad56790053bcd8ed3283d535181e40749e3f4c124f33c23a09fc2f2112a9279d75dbafef89b326fc68483b3403c75e2af9d3c4a75690fde44fae11144c3596768dc61cfcb69bd074c33820278fbecbd827f22ef0c047812cf382aebf084ec4ec00908a5c9e0ac5447ed2b9e779727da441ce1d78cb4d518136da58b1094d52033ee92a470e243748e6d352933c031b1ef67a7917aef180ac3d6"], &(0x7f0000000200)='GPL\x00', 0x80000001, 0x58, &(0x7f00000006c0)=""/88, 0x40f00, 0x28, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000580)=[r2, r4, r6, r9, r12, 0xffffffffffffffff, r13], &(0x7f00000009c0)=[{0x4, 0x2, 0x9, 0x4}, {0x1, 0x1, 0xc, 0x6}, {0x2, 0x3, 0xf, 0x6}, {0x4, 0x4, 0x5, 0x1}, {0x0, 0x2, 0x2, 0x5}, {0x2, 0x5, 0xf, 0xb}], 0x10, 0x499a}, 0x94) syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="90000000", @ANYRES16=r0, @ANYRES16=r1], 0x90}, 0x1, 0x0, 0x0, 0x20040804}, 0x40800) 2.734171863s ago: executing program 0 (id=2148): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async, rerun: 32) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (rerun: 32) close(r1) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) (async) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x6, 0x0, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x2}, 0x50) (async) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="05000000040000001e1a0000fcffffff00000000", @ANYRES32=r5, @ANYBLOB='\f\x00'/20, @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB="00002c14000000000000"], 0x50) close(r4) (async) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = socket(0x10, 0x3, 0x0) (async) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000b00)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0xce}, @TCA_TBF_PRATE64={0xc, 0x5, 0x2018b0106dc6f663}, @TCA_TBF_PARMS={0x28, 0x1, {{0xac, 0x2, 0x7, 0xe, 0xe88, 0x1aad}, {0x8, 0x1, 0x6, 0xf96e, 0xff, 0x7f}, 0x3, 0x7, 0xe68}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) r13 = socket(0x11, 0x0, 0x2) (async) r14 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r14, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x1d) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r14, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={r15, 0xfffffffc}, &(0x7f0000000180)=0x8) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r13, 0x84, 0x1f, &(0x7f0000000440)={r15, @in6={{0xa, 0x4e23, 0x5, @remote, 0x101}}, 0x4, 0x7}, 0x90) (async, rerun: 64) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b922, 0x80000, {0x0, 0x0, 0x0, r9, {}, {0x2, 0xb}, {0xb, 0xb}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) (async, rerun: 64) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2.580672089s ago: executing program 1 (id=2149): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000240)={'sit0\x00', 0x0, 0x7820, 0x8000, 0x400, 0x5, {{0x26, 0x4, 0x1, 0x6, 0x98, 0x66, 0x0, 0x8, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0xe}, @empty, {[@ra={0x94, 0x4}, @timestamp_addr={0x44, 0x24, 0xc7, 0x1, 0x1, [{@empty, 0xf}, {@broadcast, 0x4}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}, {@remote, 0x4}]}, @generic={0x83, 0x8, "b7223cc7afc5"}, @timestamp_prespec={0x44, 0x24, 0x5, 0x3, 0x8, [{@local}, {@multicast1, 0x2}, {@multicast1, 0xfff}, {@broadcast, 0x1ff}]}, @generic={0x83, 0xb, "8447d025a6a0fc62fc"}, @noop, @rr={0x7, 0xb, 0xf9, [@broadcast, @rand_addr=0x64010101]}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x14, 0x1, [{0x3, 0xe, "151253683888632bb513fc8b"}]}]}}}}}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0x20, 0x10, 0x609, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}}, 0x20}}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000129bd7000ffdbdf25300000000808030047b84fa2a03b704cd0f3d49ab5ccd596ef295c7a9852b6a805744afb96913d7b404c7a0ac5590c569b87793c65e99e7c1dc08194a824a4a7ceaa2726053ab0dcb8fa54c15e8f8e6914b219be99d02ebe52f8dace7aa93e46de74f4e683643a5f3ef822415ca21f0b81b172fd19c60f3f1e0040dfe7f41b5c5afd02191d0eb252236fd57fdc7e3d23f6f5e57b352700085450087bc297d22d60a6771b96f634a21322ab4ab5d62e5315ef3a6fb9af9ba86f749836293429bfbdfba47c0b066100ab057258389286e67c2a05fe62d895cd76b3b24d4389b13ec98bebced1e5b162", @ANYRES32=r2, @ANYBLOB="0c0099000900000042000000060036003100000006003600270000000600360035000000"], 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x2008000) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000240)={'sit0\x00', 0x0, 0x7820, 0x8000, 0x400, 0x5, {{0x26, 0x4, 0x1, 0x6, 0x98, 0x66, 0x0, 0x8, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0xe}, @empty, {[@ra={0x94, 0x4}, @timestamp_addr={0x44, 0x24, 0xc7, 0x1, 0x1, [{@empty, 0xf}, {@broadcast, 0x4}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}, {@remote, 0x4}]}, @generic={0x83, 0x8, "b7223cc7afc5"}, @timestamp_prespec={0x44, 0x24, 0x5, 0x3, 0x8, [{@local}, {@multicast1, 0x2}, {@multicast1, 0xfff}, {@broadcast, 0x1ff}]}, @generic={0x83, 0xb, "8447d025a6a0fc62fc"}, @noop, @rr={0x7, 0xb, 0xf9, [@broadcast, @rand_addr=0x64010101]}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x14, 0x1, [{0x3, 0xe, "151253683888632bb513fc8b"}]}]}}}}}) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0x20, 0x10, 0x609, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}}, 0x20}}, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000129bd7000ffdbdf25300000000808030047b84fa2a03b704cd0f3d49ab5ccd596ef295c7a9852b6a805744afb96913d7b404c7a0ac5590c569b87793c65e99e7c1dc08194a824a4a7ceaa2726053ab0dcb8fa54c15e8f8e6914b219be99d02ebe52f8dace7aa93e46de74f4e683643a5f3ef822415ca21f0b81b172fd19c60f3f1e0040dfe7f41b5c5afd02191d0eb252236fd57fdc7e3d23f6f5e57b352700085450087bc297d22d60a6771b96f634a21322ab4ab5d62e5315ef3a6fb9af9ba86f749836293429bfbdfba47c0b066100ab057258389286e67c2a05fe62d895cd76b3b24d4389b13ec98bebced1e5b162", @ANYRES32=r2, @ANYBLOB="0c0099000900000042000000060036003100000006003600270000000600360035000000"], 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x2008000) (async) 2.436752094s ago: executing program 3 (id=2150): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'syzkaller0\x00', 0x400}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000300000008000400ac1414000800020000000000080001"], 0x2c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x60, 0x30, 0x10, 0x0, 0x25dfdbfc, {}, [{0x4c, 0x1, [@m_skbedit={0x48, 0x1, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x4, {0x2}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x10, 0x10}}, @TCA_SKBEDIT_PTYPE={0x6, 0xa}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0x60}}}}]}]}, 0x60}}, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="800000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000580012800c0001006d6163766c616e00480002800800010010000000280005800a000400aaaaaaaaaabb00000a000400aaaaaaaaaa0000009010994423fd8232aa00000008000300000000000a000400aaaaaaaaaabb000008000500", @ANYRES32=r6], 0x80}}, 0x0) r8 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet(r8, &(0x7f0000000940)=[{{&(0x7f0000000000)={0x2, 0x22, @loopback}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000640)="3b05588a5773bf0c96c7e944aa1dee1df868a75dcaebadedf7e88265cb4110495ecdd27d822031d969360bb5553304382e6d2cb419d79150ff7e32ad01549ae963f1e0eba1089ddfafc8c4846203f7cac33ae23632a5edaff437c9da0907f29a425dc37b8054c5f6939f7be69599fac4c5c77c5050baf30fdc674a4de67dac5534f3df7cc42b61ba1f7ba3881b9358a03b3b7ce709c78d3662312aa5936a980801d0a03d04d208bf2e4b790e4f83b12e84814c31fddb89dd008cbf0cc3eb69ce949a46407ec9c2246432139bdd53afe2c719ac5db0ab90", 0xd7}], 0x1}}], 0x1, 0x46054) setsockopt$sock_linger(r8, 0x1, 0xd, &(0x7f0000000100)={0x1}, 0x8) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={{0x14}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x10) close(r8) close(r1) r10 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r10, 0x10e, 0xc, &(0x7f0000000180)={0x800}, 0x8) write(r10, &(0x7f0000000000)="240000001a00110414f9f4070009040080fffffffe110001000000000800040001000000", 0x24) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r11, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x34, r12, 0x1, 0x70bd29, 0x4, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xca}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xba}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4804}, 0x80) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) 2.431242693s ago: executing program 1 (id=2151): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xc, 0x8031, 0xffffffffffffffff, 0x0) pselect6(0x517, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x700}, &(0x7f0000000240)={0x0, 0x989680}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet(0x2, 0x80001, 0x84) listen(r1, 0x2f) listen(r1, 0xaca) writev(r0, &(0x7f00000004c0)=[{&(0x7f00000001c0)="b76fef0b2d4da0e337273037a5c3b183b12c213cd59defd79054c0eb1b0f1bae9ff3f6fa92a4fd2b93836c3af9462e386a6235396f64cde5c1", 0x39}, {&(0x7f0000000200)="ab1f6ec6c33b49c81bdd59bc0614d4ddcf5c9007b002012a30f7045e5048f4041626ee7200fbeaf7b07963694194025ab1f14c99e7aa3f9c0aa03a6865ef0ba6b307a235bbb01dea09a2d2c0d21e4f093bdc807f6cc4a77adfc99f47154bc96a8abc38ee0353a7d53dce9323ffb8832937760b98d0df3e2808f9ea0a8a96205c46d2b5f5fa6e240b172c6fa26b86aec44017f84d2b18", 0x96}, {&(0x7f00000002c0)="c0b86b486ddaa5f9a12d3d78f5fe9cb9f20f678e481f919fe41c43d16b7922e05afe3dd7533708cd6b9f39a9e956e9652c82566f14c966467dd22923a1bb655100cae32a1d3aa52b505387bada7cbb5b62ef53d60dedbc1ce872745042b07cd49bd2467112c7865bd6b23131e8e33b40fc29a662fb42588b9d", 0x79}, {&(0x7f0000000900)="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", 0x1000}, {&(0x7f0000000340)="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", 0xfc}, {&(0x7f0000000440)="670bf3bc31ca4778d3dc1cb4e26edaaa219b7fccb5180630b276eab6a67ad01320a02cc9535e40a4a7c6c6725398f6", 0x2f}, {&(0x7f0000000480)}], 0x7) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r3, 0x89e3, 0x0) r4 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r4, 0x800442d2, &(0x7f0000000000)={0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x20, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702200000000000b7030000fdffffff85000000a700000095"], &(0x7f00000008c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.427931846s ago: executing program 0 (id=2152): syz_emit_ethernet(0x3b6, &(0x7f00000020c0)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "430093", 0x380, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce5400659808000ffffc0fe4023493b87aafaffffffffffffff2373247202fa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af0502"}, {0x0, 0x1, "00000000000000000800ee00"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5acaa556b9f30dcab2b90aa235a670670ffc5dc49dfb58d89310000000000"}, {0x0, 0xb, "d47ae6e8805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f019"}, {0x21, 0x7, "fcf98a102ec1876d4e6fa3b20519bbaa8a029cee00b8d3485e4163ed09bdb581c9fe68a356f542b0430509da61bfb02b3235e1d16212fb"}, {0x0, 0x14, "5e14f0e74d2d52cfb3f27fafb60845f90b6dfc87c6905bbc94d33e4575c853105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb1fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c258a6f"}, {0x0, 0x5, "d517fb2cf1a4ffdc1b7e018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x1, 0xfffffffffffffffd, &(0x7f0000000040)=0x60) socket$netlink(0x10, 0x3, 0x0) 2.276759451s ago: executing program 0 (id=2153): socket$kcm(0x2, 0xa, 0x2) r0 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000000)={@local, @empty, @val={@val, {0x88a8}}, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "5f1060", 0x44, 0x2f, 0x0, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x22eb}, {0x0, 0x0, 0x0, 0x0, 0x100}, {}, {0x8, 0x88be, 0x1, {{0x0, 0x1, 0x7}}}, {0x8, 0x22eb, 0x0, {{}, 0x2, {0xe803, 0x4}}}}}}}}}, 0x0) 2.161067759s ago: executing program 0 (id=2154): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_MGMT(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000cc0)={0x2c, r3, 0x22d, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x7}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x51}]}, 0x2c}, 0x1, 0x0, 0x0, 0x480c1}, 0x4) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000400)={0x230, r3, 0x400, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x12, 0x2a, [@ssid={0x0, 0x6, @default_ibss_ssid}, @chsw_timing={0x68, 0x4, {0xffff, 0x8001}}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x8}, @NL80211_ATTR_FILS_ERP_REALM={0xe3, 0xfa, "ee729fd4d87d263b5e16599a51330924a8bf2bca1b4af57686cc87957082b75f3ec4a8fa2ebcf561e880cb6bf60a5bc23e3a0277fae8c73f53425772c5bb66270024e8b14d997bac8ea500aa0d2ef796c4da9a4a196e5d621d1f692878f562a93da5e2c1f117dfb1d6bb4de3858845a737446cce1eb2c71668ae9cfbb2d314b7552301de45ea613bff3f95d8c5d3614ef7e55b1f541e6e03e409c4e27ba4590ce06d057d4c3876b1459f5498982247d84f7bd543c0cd9113c7aa7892ba24b7c29c511886056548e3d424c72aec7b4f4a04f439edc9efb535c8a9933c85423a"}, @NL80211_ATTR_FILS_ERP_USERNAME={0xc, 0xf9, "c0e3faddf367c29f"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x6}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x4}], @NL80211_ATTR_IE={0xfe, 0x2a, [@tim={0x5, 0x9b, {0x5, 0x73, 0x9, "2490872c6c5d6df7e8c83eeb7e5f2a71750726575491ddc2b578c000096a507b2738aaea43f6ebb32be5977e988b6e7a379e783d2ca01f6a815ae511bc48e6464c8e587d377f0e28d4cb8f49f0364f60abbc5c7d9bb12d27f523d828af0f7ccf779556513d1a2e6aac2d7ebb24403f11ad34271c7ab7a3fae8a675d336b4bb018edddc5a492c809a019e69eb142b7865860799cfe24d6ab2"}}, @channel_switch={0x25, 0x3, {0x1, 0x2}}, @erp={0x2a, 0x1, {0x1, 0x1, 0x1}}, @peer_mgmt={0x75, 0x18, {0x1, 0x4d, @val=0xffff, @val=0x37, @val="719aa728c36d05164bc6d26bd4012588"}}, @ssid={0x0, 0x1b, @random="31cad5ecb8b22b3e9ff5aeaf4c02d587f130bd0f5d2622c7c34eab"}, @measure_req={0x26, 0x1c, {0x1, 0x4, 0x7, "aebe5e8d870e564274693644765cbd98136817ac645389fbe8"}}]}]}, 0x230}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400080015000103000000c557e88c96df26a500bb5581d27068f8eb131dbe9f6bac64e8d5e9e384467a075a3ee1b9e417f101a70ca2317cde453b11cee5ceab03339d58615534f95b14e30f30d05d8bf9822e541c5b5b82165ded36dbffd40d9694b345231f6837556917391bfc6d3a835e"], 0x14}}, 0x0) close(0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1e, 0x4, &(0x7f00000000c0)=@framed={{}, [@ldst={0x1, 0x0, 0x4, 0x0, 0x1, 0x50}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) 2.13916219s ago: executing program 4 (id=2155): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c00000068b78b487fa534f0ee2f18b4c917a7392a00603fe47ceb7800000000040000000a0061a441b67c29"], 0x1c}}, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x13}}, 0x2, 0x0, 0x3}}, 0x2e) (async) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x13}}, 0x2, 0x0, 0x3}}, 0x2e) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002cbd701004000000040000000800090002"], 0x34}}, 0x20000034) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001800dd8d00000002001001fe0400010000002008001e00020000000000000000"], 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) getsockopt$inet6_tcp_int(r7, 0x6, 0x6, 0x0, &(0x7f0000000040)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0xb, [@type_tag={0x9, 0x0, 0x0, 0x12, 0x4}, @const={0xc, 0x0, 0x0, 0xa, 0x5}, @decl_tag={0xa, 0x0, 0x0, 0x11, 0x3}]}, {0x0, [0x5f, 0x0, 0x61, 0x0, 0x30, 0x30, 0x2e, 0x5f, 0x30]}}, &(0x7f00000015c0)=""/4096, 0x4b, 0x1000, 0x1, 0x8}, 0x28) (async) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0xb, [@type_tag={0x9, 0x0, 0x0, 0x12, 0x4}, @const={0xc, 0x0, 0x0, 0xa, 0x5}, @decl_tag={0xa, 0x0, 0x0, 0x11, 0x3}]}, {0x0, [0x5f, 0x0, 0x61, 0x0, 0x30, 0x30, 0x2e, 0x5f, 0x30]}}, &(0x7f00000015c0)=""/4096, 0x4b, 0x1000, 0x1, 0x8}, 0x28) r9 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r9, 0x0) (async) listen(r9, 0x0) ioctl$SIOCX25SDTEFACILITIES(r9, 0x89eb, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, "bb67a153cd0e3e4a1aac449e5ad88b56923d9dfe", "b1610538917aa875e9b6000000007aa56a33d100"}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r10, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r10, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x4, 0xe, &(0x7f00000007c0)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRES16=r10, @ANYRES32=r5, @ANYRESDEC=r2, @ANYRESOCT=r5, @ANYRESDEC=r10, @ANYBLOB="ca09eedf563d9406100c44b140b7c572218f46fb0069f87d00d01c033cae747e42a0a870a52e07f77afd764c3f700ba854468e3c775c0a10508ceee2cc7c6eefae842f1496b92a03ac20be813a3f8ff4ece0601c8a0daf4c14101640b4cce808d985caab5a3a18b63a1a19a1edfcd2d28cd666e28f77857a16627e1ff6e048d3cc0700f13ef4c289868ee09bf11970dc8a4c2641cbf4298a295986c0e029a69c4c5e81e8bcf2d3942c13d5d52b4ca93ae04ee958c9aa7eae07d9846091c92605d93290bc6b6997054896c0d43aa3ace424e3a7ddf9898807609b722874dbf6c878992bf1a8bd2d608ebd15aaf589fac5e35387bf6ffc4033", @ANYRES32=r9], &(0x7f0000000140)='syzkaller\x00', 0x10000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r8, 0x8, &(0x7f00000001c0), 0x8, 0x10, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x79}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r11, 0xe72, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3fad77b7b3f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r11, 0xe72, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3fad77b7b3f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r6, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f0000000340)={0x1c8, r12, 0x8, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x9, 0x4b}}}}, [@NL80211_ATTR_CQM={0x4c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x6}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x5a}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x6}, @NL80211_ATTR_CQM_RSSI_THOLD={0x18, 0x1, [0x289, 0x3, 0x9, 0x6, 0x3]}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x2, 0x8000, 0x0]}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x5e}]}, @NL80211_ATTR_CQM={0x4c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x4dd5b3a1}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0xd}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xc0}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x80000001}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x2}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0xd}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x3}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x5cd}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x3}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x2f}]}, @NL80211_ATTR_CQM={0x48, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8}, @NL80211_ATTR_CQM_RSSI_THOLD={0x24, 0x1, [0x3, 0xc2b, 0x49cb9c9a, 0x29, 0x1, 0x6, 0x1, 0x7ff]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x8}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x200}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xff}]}, @NL80211_ATTR_CQM={0x34, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x1}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x5}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x176}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x8fff}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x812}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x1}]}, @NL80211_ATTR_CQM={0x4c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x20, 0x1, [0x9, 0x8, 0x10001, 0x6, 0xa000000, 0xfffffffb, 0x1]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x8c}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x2fbc}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x2}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x656}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x1}]}, @NL80211_ATTR_CQM={0x3c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x7fff}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x550}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x4b}, @NL80211_ATTR_CQM_TXE_PKTS={0x8}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x98}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x33}]}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.716879649s ago: executing program 1 (id=2156): ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(0xffffffffffffffff, 0xf502, 0x0) unshare(0xa020480) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x41}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000003540)=ANY=[@ANYBLOB="b70000001a000000bca30000000000002403000040feffff7b1af0ff0000000079a4f0ff000000001f030000000000002e030200000000002604fdffffff000e61141800000000001d430000000000007a0a00fe0000001f6114140000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f30002af51efd601b6bf01c8e8b1fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f0177184b6a89adaf17b0a6041bdef728f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566de74e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48b936e6f9e0fcda88fe4413537528fd79153baae244e7bf573eac34b781337ad5901a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0b4a26b602396df7e0c1e02b88c114f2440000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb1188883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcc536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d648532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2654026c6ea08b83b123145ab5703dad844ceb201efeb6dc5f6a9037d2283c42efc54dd84323afc4c10eff462c8843187f1dd48ef0900000000000000ff0f4000000000f00700003c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fcdb4c1011e32f808890205f0e6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c9494963442aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2869291b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e637d4219ef7ec61261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ecab5d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addbc4b3093c91b8068c5adfcb0d7fd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf699b3746979f99f6a1527f004f37e84fb478199dc1020f4beb98b8074bf7df8b5e783637daf121f175a81cffff4ac55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a4a274000000000000000000000000000000000000000000000009dd14b38f2f5426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4120260ffcd030000006d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb3928143be1c1023a375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10b0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d3b332240d450fdb0a9a69f432e277f3a0386eb2bd1305c88629a6c921c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07e18b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e8c0a0d213c3ffad44d2a376def42e41e9fc3167a257e040fa7cf32c221aaac6cfdeb33c27500001a0000000000000000000017350000c11ae694b0c69c2c03f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d10522a7a945b93fbf05b95b6aae27a8fab1e6984c8bdc12360627137ab6737b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481ffe46a4ce86be0b1f8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0b74903580ac98708007c80d6c7d0de4614195e40d797c0348dd70f36a220e8b3710fb5358c27e90793bcb9ee6319342c4b239ca8cbc6fc83d32e6eb62ad92e43991f2447be9c2a1ae1119eafb901a43d57e885116d19aa152bfb89f8d0b2516f80120a1cddff771657f3d0288ec3899f1e3ba0151c4037148fb479de703fc52b6573349c28d1b107d859b4961324c17756dde99de1924a1d2b7095d34a55060f47f4407d89acf9f285b20c2e6b3d0491d0d3591b0d94713332b6b79c8297117b0d14eff64e0aca8a4b4aa773d8fba1217e9519952419bb9dd998d0ec870ff00b6d556018602738fbc6cec89d6dd13cf55b96f6fe9a137d2d6a56ad78e52c23ed080000000000002bc261a781fd14126c146a0aac4221839a4b9bbf61e4bba695a41e2109eba8e40c370267cc51ffadbd15cafc97a4d3edfdcb9b5729307c6bdaf7b69325fb05fa8a9869de0600ee477d71ca3e36d1d9019edfa27aae24b632f251df210c86a18fae731ecb8b0d48357378caf2b6789509b1bacfd4fa812dc341875cfa5e798bbf59770000000000000000c8a594ea3c3347962d9113b1fecdfad5a8da641053f02e49456f5d21674521e67a5b18ea451eccf69dd6af928d2d68da9304a296c22fdcea26498d26229110b1aade386b113045033a6188d56e675564d8cb8d5b40114b0f5bf15dd64c9ece60b8588ee8777d0ea8f4713b258427c7d90f9e93348e17723ba9ab8ae790f74cc41ae5795835f3cec40dff485d2802c08611454d9ea784a205bcc07ec26f906f3cf45bb37014ab6f22af6213618e242b283ea9d3f0677ee598072ec06f7170009d92bb7ed9d12c378dfd3e74ec056ee83eef666423d934fc5908c9ff98715218a5964f1e00000000426ac9588e27aefe307f49662990ee823568bbc2f89596ced7c6c52d76b8096f1848410843b93fd404f535be474f456778b5ef85abb8fc2336abd5ea64a6efea8a5aca0015499b88ae780a7bae4df603bd3c72808cf300440b1b638a6640f7de8d0d82f359ca2f779cd48cd8d3603f4f69e47f386988c9b7b5d6dd3d48a1fdca780049d7c87bea42161a4c0d7cf0125b43dc9d8845f3c05a08acda647e7143d0e0aee2949a45e2848890522c2288072467d2afe269f589fb7e034b92d3ca245b16b71998711bfe206c9690b6d0eebb06a29349229eb45ff15c63aa2c82c56d7420738cd1b04eb16e87cb524315d7361ea3635d3799bb7fcc56aa5e1dbe031a7a12554dee6754b72f43a6fddf427f32ec3df274a88097725679769beebf1aa6eb09d5154e4900000000000d0f7160a05911d969879953d3d4702b2676c07bb0fd14020a66718378825d5ed789711b77d40dc31e0b8fc651b45559da463f0000000000000000000000000052d42124e9c26aba885015e69d42ecd710342ac597ebea576ae15fdf611356f622e831741ab15549e0d7a2bd0324e2b3b48a10551607492c19eaf58485feb4cab19c303b30ba2ddea0d792d77724c9fa4ed58b93668fc20484f141ee2b6a0029e88fdc853189b4dafd36ff23b11967090e508f45e3f10857038a52ef275cf9e3e4b5d30b12d138dfa70930c603b5e3f4b7be67be3dba3cbd8d4d143195af0697d779445d67dcfbd922d12a8b49f93eac7a72faacf80346b3b60f132a2bf8a858392f34072d99aee0ec70aa6d75096e608d97ac4b7bfa2e0ae3e59718e7a7691a98b1334e34553300000000000000000000000000000000062c7cf52e9624806a4833e1c0059e5a703ab9c2e9b38779270dc5e80af75d509b1a31fe6ed3f8c0172659256dc88de4e377c8a07e95ec5549ae47dc43b93a159a201be254048b9e0857ea3c736c761e686f9b3d0690f035617a12055b2cb3a03794d67b95e7f4fc6af323120c09d0503c8ce92e869e22bb2590299ad76d541f844d32f96184f74d433793bbd75ec15fb1497ce835445212421cb4e3ce08395c9055a2"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) unshare(0x6020400) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000070000000a20000000000a010300000000000000000000fffe0900000073797a30000000002c000000030a01020000000000000000010000080900030073797a31000000000900010073797a30000000003c000000060a01040000000000000000010000000c00064000000000000000020900010073797a3000000000100004800c0001800800010000000000000000001100010000000000000000000000000a"], 0xb0}}, 0x0) 1.656940654s ago: executing program 1 (id=2157): r0 = socket$netlink(0x10, 0x3, 0xc) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r2, 0x84, 0x7c, &(0x7f0000000040)="badd8e37a0feecff", 0x8) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x13, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0xcb9, 0x0, 0x0, 0x0, 0x1}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7}, @ldst={0x1, 0x2, 0x3, 0xf, 0x8, 0x40, 0xfffffffffffffff0}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @map_fd={0x18, 0x8}, @alu={0x7, 0x0, 0xd, 0x5, 0xa, 0xfffffffffffffff0, 0xfffffffffffffffc}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0xbf}, @jmp={0x5, 0x0, 0x9, 0xb, 0xb, 0x40, 0x1}, @generic={0x4, 0x2, 0x7, 0x0, 0x7}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x1c, &(0x7f0000000140)=""/28, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000340)={0x1, 0x10, 0xc, 0xb99}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x3, 0x2, 0x7, 0x6}, {0x0, 0x5, 0xa}], 0x10, 0x200}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000004c0)=r3, 0x4) (async) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f00000029c0)=ANY=[@ANYBLOB="140000000d0603"], 0x14}}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000100)='vm_unmapped_area\x00', r4}, 0x18) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x17}, 0x94) (async) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r6, 0x84, 0x20, &(0x7f0000000080), 0x4) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000100)='vm_unmapped_area\x00', r5}, 0x18) (async, rerun: 64) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) (rerun: 64) 769.535905ms ago: executing program 1 (id=2158): r0 = socket$inet6(0xa, 0x805, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) unshare(0x22020600) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r3 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r2}, 0x8) close(r3) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_buf(r4, 0x29, 0xcf, 0x0, 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="08000000040000000400000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r5, &(0x7f0000000140), &(0x7f0000000200)=""/221}, 0x20) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r6, 0x11c, 0x3, 0x0, &(0x7f00000004c0)=0x29) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='tlb_flush\x00', r7}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r8}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r9}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="0380c2000000bbbbbbbbbbbb080045000038ffff000000019078ac1e0001ac1414aa030490781200183f252400000002d33cffd98794e48a00"/70], 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1}]}, &(0x7f00000002c0)=0x10) getsockopt$bt_hci(r0, 0x84, 0x72, &(0x7f0000000080)=""/4076, &(0x7f00000010c0)=0xfec) 85.039549ms ago: executing program 3 (id=2159): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xaa800, 0x0) splice(r1, 0x0, r1, 0x0, 0xd, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x38, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x5, 0x5, 0x4d}, @NL80211_ATTR_CQM_TXE_PKTS={0x23, 0x6, 0x2}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x337}]}]}, 0x38}}, 0x0) 84.416908ms ago: executing program 0 (id=2160): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000100)={@val={0x0, 0x88b5}, @void, @eth={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}, @multicast, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x6, 0xfe6d, 0x65, 0x0, 0x1, 0x6, 0x0, @dev={0xac, 0x14, 0x14, 0x21}, @empty}}}}}}, 0x26) sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000600)={0x2a4, r1, 0x2, 0x70bd29, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0xfffffffffffffd90}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}]}, 0x2a4}, 0x1, 0x0, 0x0, 0x890}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_OCB(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x24, r4, 0x1, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x2404c044}, 0x20008054) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x5c, r4, 0x4, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MAC_ADDRS={0x40, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @broadcast}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x200088c5}, 0x40040) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000002a0000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x34}, 0x1, 0x0, 0x0, 0x4001}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) socket$kcm(0x2, 0xa, 0x2) (async) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r2, &(0x7f0000000100)={@val={0x0, 0x88b5}, @void, @eth={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}, @multicast, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x6, 0xfe6d, 0x65, 0x0, 0x1, 0x6, 0x0, @dev={0xac, 0x14, 0x14, 0x21}, @empty}}}}}}, 0x26) (async) sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000600)={0x2a4, r1, 0x2, 0x70bd29, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0xfffffffffffffd90}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}]}, 0x2a4}, 0x1, 0x0, 0x0, 0x890}, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_JOIN_OCB(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x24, r4, 0x1, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x2404c044}, 0x20008054) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x5c, r4, 0x4, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MAC_ADDRS={0x40, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @broadcast}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x200088c5}, 0x40040) (async) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000002a0000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x34}, 0x1, 0x0, 0x0, 0x4001}, 0x0) (async) 0s ago: executing program 1 (id=2161): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_DELOBJ={0x14, 0x14, 0xa, 0x307, 0x0, 0x0, {0x2, 0x0, 0x9}}], {0x14}}, 0x3c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b1a, &(0x7f0000000000)={'wlan1\x00'}) kernel console output (not intermixed with test programs): LY no longer supported. [ 110.535262][ T6252] netlink: 8 bytes leftover after parsing attributes in process `syz.1.84'. [ 110.650408][ T6252] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 110.711505][ T6256] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 110.795138][ T6262] tipc: Started in network mode [ 110.801110][ T6262] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 110.831952][ T6262] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 110.870696][ T6262] tipc: Enabled bearer , priority 10 [ 111.080520][ T6271] nbd0: detected capacity change from 0 to 127 [ 111.142500][ T5835] block nbd0: Receive control failed (result -104) [ 111.382401][ T6295] gre0: entered promiscuous mode [ 111.552210][ T6307] netlink: 'syz.0.103': attribute type 13 has an invalid length. [ 111.607024][ T6307] veth0_macvtap: left promiscuous mode [ 111.643667][ T6312] Cannot find add_set index 0 as target [ 111.655430][ T6307] macvtap0: entered allmulticast mode [ 111.700054][ T6307] macvtap0: refused to change device tx_queue_len [ 111.991547][ T5889] tipc: Node number set to 1 [ 112.301935][ T6349] bridge_slave_0: left allmulticast mode [ 112.324560][ T6349] bridge_slave_0: left promiscuous mode [ 112.344696][ T6349] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.408069][ T6349] bridge_slave_1: left allmulticast mode [ 112.419896][ T6349] bridge_slave_1: left promiscuous mode [ 112.441198][ T6349] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.475408][ T6357] netlink: 'syz.4.115': attribute type 8 has an invalid length. [ 112.500908][ T6349] bond0: (slave bond_slave_0): Releasing backup interface [ 112.526123][ T12] tipc: Subscription rejected, illegal request [ 112.542372][ T6349] bond0: (slave bond_slave_1): Releasing backup interface [ 112.557078][ T6363] netlink: 'syz.2.113': attribute type 2 has an invalid length. [ 112.614725][ T6349] team0: Port device team_slave_0 removed [ 112.644014][ T6349] team0: Port device team_slave_1 removed [ 112.654160][ T6349] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 112.672253][ T6349] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 112.685540][ T6349] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 112.701416][ T6349] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 112.714583][ T6349] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 112.766714][ T6374] __nla_validate_parse: 7 callbacks suppressed [ 112.766736][ T6374] netlink: 164 bytes leftover after parsing attributes in process `syz.3.121'. [ 112.846734][ T6361] gtp0: entered promiscuous mode [ 112.853058][ T6361] gtp0: entered allmulticast mode [ 113.098187][ T6377] tipc: Enabling of bearer rejected, failed to enable media [ 113.112469][ T5889] hid (null): unknown global tag 0xe [ 113.133845][ T5889] hid (null): nested delimiters [ 113.171660][ T5889] hid (null): unknown global tag 0xd [ 113.229823][ T6384] netlink: 8 bytes leftover after parsing attributes in process `syz.3.125'. [ 113.299670][ T6384] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 113.644690][ T6402] netlink: 4 bytes leftover after parsing attributes in process `syz.0.128'. [ 113.723024][ T6402] netlink: 4 bytes leftover after parsing attributes in process `syz.0.128'. [ 113.771202][ T6402] netlink: 'syz.0.128': attribute type 3 has an invalid length. [ 113.778864][ T24] IPVS: starting estimator thread 0... [ 113.899227][ T6413] IPVS: using max 31 ests per chain, 74400 per kthread [ 114.471709][ T6448] netlink: 'syz.3.140': attribute type 5 has an invalid length. [ 114.900715][ T6465] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 114.920715][ T6472] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 115.172547][ T6486] vlan2: entered allmulticast mode [ 115.397442][ T5889] hid-generic 0005:0D45:1012.0001: unknown global tag 0xe [ 115.409789][ T6492] netlink: 8 bytes leftover after parsing attributes in process `syz.0.155'. [ 115.433438][ T5889] hid-generic 0005:0D45:1012.0001: item 0 2 1 14 parsing failed [ 115.450637][ T6492] netlink: 4 bytes leftover after parsing attributes in process `syz.0.155'. [ 115.464965][ T5889] hid-generic 0005:0D45:1012.0001: probe with driver hid-generic failed with error -22 [ 115.501261][ T6496] netlink: 28 bytes leftover after parsing attributes in process `syz.2.156'. [ 115.745180][ T6504] pimreg3: entered allmulticast mode [ 115.936789][ T6511] netlink: 14436 bytes leftover after parsing attributes in process `syz.0.158'. [ 115.976695][ T6511] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 116.004028][ T6513] veth0: entered promiscuous mode [ 116.022863][ T6512] veth0: left promiscuous mode [ 116.031440][ T6515] veth0: entered promiscuous mode [ 116.078598][ T6514] veth0: left promiscuous mode [ 116.133722][ T6521] Bluetooth: MGMT ver 1.23 [ 116.147020][ T6522] netlink: 12 bytes leftover after parsing attributes in process `syz.2.165'. [ 116.200911][ T6524] netlink: 104 bytes leftover after parsing attributes in process `syz.4.167'. [ 116.672498][ T6542] ieee802154 phy0 wpan0: encryption failed: -90 [ 116.741303][ T6547] netlink: 'syz.0.175': attribute type 7 has an invalid length. [ 116.748254][ T6544] geneve2: entered promiscuous mode [ 116.766850][ T6544] geneve2: entered allmulticast mode [ 116.793137][ T36] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 116.817478][ T36] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 116.882501][ T36] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 116.912336][ T36] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 116.988163][ T6553] IPv6: sit1: Disabled Multicast RS [ 117.004226][ T6553] sit1: entered allmulticast mode [ 117.055205][ T6558] netlink: 'syz.0.178': attribute type 5 has an invalid length. [ 117.777183][ T6580] veth3: entered promiscuous mode [ 117.782695][ T6580] veth3: entered allmulticast mode [ 117.820085][ T6583] syzkaller1: entered promiscuous mode [ 117.837199][ T6583] syzkaller1: entered allmulticast mode [ 117.928361][ T6593] sctp: [Deprecated]: syz.2.191 (pid 6593) Use of int in max_burst socket option deprecated. [ 117.928361][ T6593] Use struct sctp_assoc_value instead [ 118.181968][ T6602] Bluetooth: hci0: unsupported parameter 512 [ 118.202690][ T6602] Bluetooth: hci0: invalid length 11, exp 2 for type 20 [ 118.299005][ T6607] __nla_validate_parse: 5 callbacks suppressed [ 118.299025][ T6607] netlink: 36 bytes leftover after parsing attributes in process `syz.2.197'. [ 118.421283][ T6611] netlink: 4 bytes leftover after parsing attributes in process `syz.4.199'. [ 118.434355][ T6613] netlink: 68 bytes leftover after parsing attributes in process `syz.1.201'. [ 118.586688][ T6615] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 118.663538][ T6615] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 118.943891][ T6637] netlink: 20 bytes leftover after parsing attributes in process `syz.4.206'. [ 118.953468][ T6637] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 119.533130][ T6667] xt_HMARK: spi-set and port-set can't be combined [ 119.602434][ T6670] netlink: 'syz.1.217': attribute type 1 has an invalid length. [ 119.682781][ T6666] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.764908][ T6687] netlink: 72 bytes leftover after parsing attributes in process `syz.4.219'. [ 119.912527][ T6670] 8021q: adding VLAN 0 to HW filter on device bond1 [ 119.938222][ T6681] bond1: entered allmulticast mode [ 119.997211][ T6687] bond1 (unregistering): Released all slaves [ 120.052445][ T6666] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.385749][ T6666] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.712071][ T6666] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.912610][ T6728] netlink: 16 bytes leftover after parsing attributes in process `syz.1.233'. [ 120.924970][ T6727] netlink: 12 bytes leftover after parsing attributes in process `syz.3.231'. [ 120.970938][ T37] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.030377][ T37] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.124150][ T37] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.143006][ T37] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.207236][ T6736] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 121.226515][ T6738] netlink: 5636 bytes leftover after parsing attributes in process `syz.1.236'. [ 121.393828][ T6749] netlink: 28 bytes leftover after parsing attributes in process `syz.2.240'. [ 121.424502][ T6749] netlink: 'syz.2.240': attribute type 7 has an invalid length. [ 121.453418][ T6749] netlink: 'syz.2.240': attribute type 8 has an invalid length. [ 121.529303][ T6749] netlink: 4 bytes leftover after parsing attributes in process `syz.2.240'. [ 121.661969][ T6758] netlink: 'syz.1.244': attribute type 26 has an invalid length. [ 122.081603][ T6782] Bluetooth: MGMT ver 1.23 [ 122.807670][ T6808] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 122.850145][ T6808] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 123.572157][ T6846] __nla_validate_parse: 1 callbacks suppressed [ 123.572179][ T6846] netlink: 8 bytes leftover after parsing attributes in process `syz.1.271'. [ 123.575267][ T6844] Bluetooth: hci0: unsupported parameter 44250 [ 123.595468][ T6844] Bluetooth: hci0: unsupported parameter 44250 [ 123.607841][ T6844] netlink: 'syz.3.272': attribute type 11 has an invalid length. [ 123.696246][ T6849] netlink: 12 bytes leftover after parsing attributes in process `syz.3.274'. [ 123.713596][ T6849] netlink: 4 bytes leftover after parsing attributes in process `syz.3.274'. [ 124.107958][ T6865] syzkaller0: entered promiscuous mode [ 124.114814][ T6865] syzkaller0: entered allmulticast mode [ 124.149513][ T6867] tipc: Enabled bearer , priority 0 [ 124.219033][ T6871] Cannot find add_set index 0 as target [ 124.434782][ T6880] netlink: 'syz.4.282': attribute type 4 has an invalid length. [ 125.197656][ T6867] syzkaller0: entered promiscuous mode [ 125.203527][ T6867] syzkaller0: entered allmulticast mode [ 125.249752][ T6879] tipc: Resetting bearer [ 125.267663][ T6866] tipc: Resetting bearer [ 125.361700][ T6866] tipc: Disabling bearer [ 125.398989][ T6888] netlink: 68 bytes leftover after parsing attributes in process `syz.2.284'. [ 125.414136][ T6888] netlink: 12 bytes leftover after parsing attributes in process `syz.2.284'. [ 125.731417][ T6905] netlink: 'syz.4.288': attribute type 1 has an invalid length. [ 125.767847][ T6909] netlink: 8 bytes leftover after parsing attributes in process `syz.2.289'. [ 126.183891][ T6927] netlink: 36 bytes leftover after parsing attributes in process `syz.1.297'. [ 126.364863][ T6939] netlink: 60 bytes leftover after parsing attributes in process `syz.1.300'. [ 126.627290][ T36] nci: nci_rsp_packet: unknown rsp opcode 0x936 [ 126.642199][ T6951] netlink: 'syz.1.303': attribute type 1 has an invalid length. [ 126.746574][ T6957] 8021q: adding VLAN 0 to HW filter on device bond3 [ 126.772213][ T6957] bond2: (slave bond3): making interface the new active one [ 126.792484][ T6957] bond2: (slave bond3): Enslaving as an active interface with an up link [ 126.811960][ T6962] netlink: 'syz.0.307': attribute type 2 has an invalid length. [ 126.842816][ T6962] netlink: 1244 bytes leftover after parsing attributes in process `syz.0.307'. [ 126.852526][ T6951] bond2: (slave gretap1): Enslaving as a backup interface with an up link [ 126.863243][ T6957] netlink: 28 bytes leftover after parsing attributes in process `syz.1.303'. [ 126.889966][ T6957] 8021q: adding VLAN 0 to HW filter on device bond2 [ 127.345972][ T6964] lec:lec_atm_close: lec0: Shut down! [ 127.382096][ T6979] netlink: 'syz.3.310': attribute type 1 has an invalid length. [ 128.021286][ T7012] syzkaller1: entered promiscuous mode [ 128.027116][ T7012] syzkaller1: entered allmulticast mode [ 128.152781][ T7020] tipc: Enabling of bearer rejected, failed to enable media [ 128.854921][ T7054] __nla_validate_parse: 4 callbacks suppressed [ 128.854945][ T7054] netlink: 1196 bytes leftover after parsing attributes in process `syz.4.329'. [ 128.937428][ T7060] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 128.959382][ T7057] netlink: 'syz.0.328': attribute type 3 has an invalid length. [ 128.982433][ T7054] mac80211_hwsim hwsim11 : renamed from wlan1 [ 129.186364][ T7069] netlink: 'syz.3.334': attribute type 2 has an invalid length. [ 129.445919][ T7066] lo: entered promiscuous mode [ 129.465985][ T7066] netlink: 'syz.2.332': attribute type 2 has an invalid length. [ 129.484286][ T7066] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 129.507085][ T7082] netlink: 256 bytes leftover after parsing attributes in process `syz.3.337'. [ 129.560851][ T7081] netlink: 'syz.0.338': attribute type 10 has an invalid length. [ 129.579909][ T7078] netlink: 4 bytes leftover after parsing attributes in process `syz.4.336'. [ 129.585463][ T7081] netlink: 40 bytes leftover after parsing attributes in process `syz.0.338'. [ 129.678012][ T7081] team0: Port device geneve0 added [ 129.799775][ T5917] lec:lec_start_xmit: lec0:No lecd attached [ 130.161109][ T7106] netlink: 12 bytes leftover after parsing attributes in process `syz.4.343'. [ 130.282662][ T7112] netlink: 24 bytes leftover after parsing attributes in process `syz.2.345'. [ 130.315003][ T7112] netlink: 24 bytes leftover after parsing attributes in process `syz.2.345'. [ 130.338824][ T7112] netlink: 24 bytes leftover after parsing attributes in process `syz.2.345'. [ 130.376301][ T7112] netlink: 24 bytes leftover after parsing attributes in process `syz.2.345'. [ 130.794242][ T7126] Cannot find set identified by id 1 to match [ 130.873860][ T7134] netlink: 4 bytes leftover after parsing attributes in process `syz.1.349'. [ 130.883633][ T7134] netlink: 'syz.1.349': attribute type 3 has an invalid length. [ 131.033804][ T5952] IPVS: starting estimator thread 0... [ 131.059823][ T7147] netlink: 'syz.4.353': attribute type 1 has an invalid length. [ 131.079941][ T7135] bond1: entered promiscuous mode [ 131.169234][ T7149] IPVS: using max 26 ests per chain, 62400 per kthread [ 131.220037][ T7138] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 131.293675][ T7159] sctp: [Deprecated]: syz.2.355 (pid 7159) Use of int in max_burst socket option deprecated. [ 131.293675][ T7159] Use struct sctp_assoc_value instead [ 131.887914][ T7174] syzkaller0: entered promiscuous mode [ 131.923827][ T7183] openvswitch: netlink: Message has 512 unknown bytes. [ 131.939366][ T7174] syzkaller0: entered allmulticast mode [ 133.560391][ T7219] netlink: 'syz.2.371': attribute type 29 has an invalid length. [ 133.769868][ T7228] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 133.772987][ T7226] netlink: 'syz.0.376': attribute type 3 has an invalid length. [ 134.006708][ T7244] __nla_validate_parse: 5 callbacks suppressed [ 134.006728][ T7244] netlink: 20 bytes leftover after parsing attributes in process `syz.0.379'. [ 134.024220][ T7244] netlink: 8 bytes leftover after parsing attributes in process `syz.0.379'. [ 134.140271][ T7244] bond2: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 134.183022][ T7252] netlink: 12 bytes leftover after parsing attributes in process `syz.3.381'. [ 134.192447][ T7244] bond2 (unregistering): Released all slaves [ 134.227588][ T7255] xt_hashlimit: overflow, try lower: 3/0 [ 134.323156][ T7258] netlink: 8 bytes leftover after parsing attributes in process `syz.1.380'. [ 134.355501][ T7258] netlink: 2 bytes leftover after parsing attributes in process `syz.1.380'. [ 134.387192][ T7249] Cannot find add_set index 1 as target [ 134.500405][ T7260] netlink: 104 bytes leftover after parsing attributes in process `syz.2.383'. [ 134.539720][ T7266] netlink: 9 bytes leftover after parsing attributes in process `syz.0.385'. [ 134.682868][ T7269] tipc: Started in network mode [ 134.687936][ T7269] tipc: Node identity 26a325e694c7, cluster identity 4711 [ 134.695412][ T7269] tipc: Enabled bearer , priority 0 [ 134.712448][ T7256] syzkaller0: entered promiscuous mode [ 134.730318][ T7268] netlink: 9 bytes leftover after parsing attributes in process `syz.0.385'. [ 134.749330][ T7256] syzkaller0: entered allmulticast mode [ 134.770037][ T7271] netlink: 64 bytes leftover after parsing attributes in process `syz.1.386'. [ 134.825818][ T7275] netlink: 'syz.2.388': attribute type 83 has an invalid length. [ 134.884237][ T7281] netlink: 28 bytes leftover after parsing attributes in process `syz.0.389'. [ 135.013173][ T7251] tipc: Resetting bearer [ 135.109621][ T7251] tipc: Disabling bearer [ 135.182725][ T7292] netlink: 'syz.2.391': attribute type 1 has an invalid length. [ 135.266214][ T7297] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 135.288517][ T7297] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 135.359559][ T7299] netlink: 'syz.0.392': attribute type 1 has an invalid length. [ 135.367564][ T7299] netlink: 'syz.0.392': attribute type 1 has an invalid length. [ 135.380014][ T7299] netlink: 'syz.0.392': attribute type 1 has an invalid length. [ 135.387709][ T7299] netlink: 'syz.0.392': attribute type 1 has an invalid length. [ 135.415905][ T7299] netlink: 'syz.0.392': attribute type 1 has an invalid length. [ 135.437215][ T7299] netlink: 'syz.0.392': attribute type 1 has an invalid length. [ 135.709134][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5910 ms [ 135.718100][ C1] lec:lec_tx_timeout: lec0 [ 135.725050][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 136.308972][ T30] audit: type=1800 audit(1760533232.899:2): pid=7343 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.402" name="memory.events" dev="tmpfs" ino=437 res=0 errno=0 [ 136.698791][ T7364] sctp: [Deprecated]: syz.0.410 (pid 7364) Use of int in maxseg socket option. [ 136.698791][ T7364] Use struct sctp_assoc_value instead [ 136.902901][ T7373] IPv6: sit1: Disabled Multicast RS [ 136.918583][ T7373] sit1: entered allmulticast mode [ 137.368205][ T7396] netlink: 'syz.0.421': attribute type 3 has an invalid length. [ 138.276427][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.284864][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.822845][ T7491] Cannot find set identified by id 1 to match [ 138.832559][ T7497] tipc: Enabled bearer , priority 0 [ 138.846126][ T7497] syzkaller0: entered promiscuous mode [ 138.857061][ T7497] syzkaller0: entered allmulticast mode [ 138.876614][ T7497] tipc: Resetting bearer [ 138.922118][ T7494] tipc: Resetting bearer [ 139.000948][ T7494] tipc: Disabling bearer [ 139.070612][ T7501] __nla_validate_parse: 12 callbacks suppressed [ 139.070631][ T7501] netlink: 16 bytes leftover after parsing attributes in process `syz.1.447'. [ 139.094900][ T7506] netlink: 8 bytes leftover after parsing attributes in process `syz.2.449'. [ 139.105276][ T7506] netlink: 12 bytes leftover after parsing attributes in process `syz.2.449'. [ 139.150853][ T7506] netlink: 8 bytes leftover after parsing attributes in process `syz.2.449'. [ 139.153542][ T5964] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 139.178862][ T5964] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 139.210380][ T5964] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 139.215836][ T7512] netlink: 4 bytes leftover after parsing attributes in process `syz.2.449'. [ 139.238405][ T5964] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 139.305169][ T7506] netlink: 12 bytes leftover after parsing attributes in process `syz.2.449'. [ 139.622774][ T7527] macsec0: entered promiscuous mode [ 139.628090][ T7527] macsec0: entered allmulticast mode [ 139.685478][ T7527] veth1_macvtap: entered allmulticast mode [ 139.702609][ T7527] macsec0: left promiscuous mode [ 139.707835][ T7527] macsec0: left allmulticast mode [ 139.744088][ T7527] veth1_macvtap: left allmulticast mode [ 140.342792][ T7577] netlink: 44 bytes leftover after parsing attributes in process `syz.2.469'. [ 140.422964][ T7577] netlink: 244 bytes leftover after parsing attributes in process `syz.2.469'. [ 140.883920][ T7602] netlink: 8 bytes leftover after parsing attributes in process `syz.4.476'. [ 140.988577][ T30] audit: type=1800 audit(1760533237.579:3): pid=7575 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.466" name="memory.events" dev="tmpfs" ino=442 res=0 errno=0 [ 141.014086][ T7604] veth1_to_bridge: entered allmulticast mode [ 141.166661][ T7617] netlink: 24 bytes leftover after parsing attributes in process `syz.1.481'. [ 141.469154][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5740 ms [ 141.477374][ C1] lec:lec_tx_timeout: lec0 [ 141.481426][ T56] block nbd0: Possible stuck request ffff888024f77000: control (read@0,1024B). Runtime 30 seconds [ 141.482183][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 141.494028][ T56] block nbd0: Possible stuck request ffff888024f771c0: control (read@1024,1024B). Runtime 30 seconds [ 141.510394][ T56] block nbd0: Possible stuck request ffff888024f77380: control (read@2048,1024B). Runtime 30 seconds [ 141.521640][ T56] block nbd0: Possible stuck request ffff888024f77540: control (read@3072,1024B). Runtime 30 seconds [ 142.052660][ T7655] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 142.067351][ T7655] netlink: 'syz.0.491': attribute type 83 has an invalid length. [ 142.629975][ T7677] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 142.636815][ T7677] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 143.908911][ T7729] svc: failed to register nfsdv3 RPC service (errno 111). [ 143.929408][ T7729] svc: failed to register nfsaclv3 RPC service (errno 111). [ 143.994944][ T7744] IPVS: length: 8 != 1152 [ 144.623846][ T7776] __nla_validate_parse: 5 callbacks suppressed [ 144.623866][ T7776] netlink: 24 bytes leftover after parsing attributes in process `syz.4.520'. [ 144.647213][ T7775] xt_HMARK: proto mask must be zero with L3 mode [ 144.718545][ T7776] netlink: 24 bytes leftover after parsing attributes in process `syz.4.520'. [ 144.763637][ T7776] netlink: 24 bytes leftover after parsing attributes in process `syz.4.520'. [ 144.774681][ T7785] netlink: 12 bytes leftover after parsing attributes in process `syz.2.522'. [ 144.867273][ T7776] netlink: 24 bytes leftover after parsing attributes in process `syz.4.520'. [ 144.925447][ T7776] netlink: 24 bytes leftover after parsing attributes in process `syz.4.520'. [ 144.958417][ T7776] netlink: 24 bytes leftover after parsing attributes in process `syz.4.520'. [ 144.983918][ T7776] netlink: 24 bytes leftover after parsing attributes in process `syz.4.520'. [ 145.011582][ T7795] netlink: 52 bytes leftover after parsing attributes in process `syz.2.525'. [ 145.027330][ T7776] netlink: 24 bytes leftover after parsing attributes in process `syz.4.520'. [ 145.353683][ T7811] Driver unsupported XDP return value 0 on prog (id 122) dev N/A, expect packet loss! [ 145.541993][ T7820] bond0: entered promiscuous mode [ 145.547218][ T7820] bond_slave_0: entered promiscuous mode [ 145.563287][ T7820] bond_slave_1: entered promiscuous mode [ 145.715860][ T7828] netlink: 'syz.0.535': attribute type 11 has an invalid length. [ 145.876454][ T7837] netlink: 'syz.1.539': attribute type 12 has an invalid length. [ 146.243453][ T7869] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 147.051086][ T7905] syzkaller0: entered promiscuous mode [ 147.059613][ T7905] syzkaller0: entered allmulticast mode [ 147.229129][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5740 ms [ 147.237329][ C1] lec:lec_tx_timeout: lec0 [ 147.242729][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 147.307698][ T7921] veth1: entered promiscuous mode [ 147.323564][ T7921] veth1: entered allmulticast mode [ 147.404100][ T7926] : renamed from bridge_slave_0 (while UP) [ 147.605396][ T7937] syzkaller1: entered promiscuous mode [ 147.615174][ T7937] syzkaller1: entered allmulticast mode [ 148.116586][ T7967] syzkaller0: entered promiscuous mode [ 148.138515][ T7967] syzkaller0: entered allmulticast mode [ 148.266680][ T7979] netlink: 'syz.3.578': attribute type 3 has an invalid length. [ 148.574660][ T7994] netlink: 'syz.2.582': attribute type 1 has an invalid length. [ 148.589853][ T7994] netlink: 'syz.2.582': attribute type 3 has an invalid length. [ 148.597561][ T7994] netlink: 'syz.2.582': attribute type 235 has an invalid length. [ 148.768730][ T8007] netlink: 'syz.1.584': attribute type 29 has an invalid length. [ 148.832810][ T8014] netlink: 'syz.1.584': attribute type 29 has an invalid length. [ 149.235880][ T8028] bridge0: port 1() entered disabled state [ 149.245703][ T8028] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.441910][ T8043] netlink: 'syz.0.591': attribute type 10 has an invalid length. [ 149.481743][ T8042] pim6reg1: entered promiscuous mode [ 149.487573][ T8042] pim6reg1: entered allmulticast mode [ 149.532607][ T8043] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 149.729965][ T8056] __nla_validate_parse: 74 callbacks suppressed [ 149.729988][ T8056] netlink: 8 bytes leftover after parsing attributes in process `syz.0.595'. [ 149.956114][ T8064] netlink: 96 bytes leftover after parsing attributes in process `syz.1.596'. [ 150.022301][ T8070] syzkaller0: entered promiscuous mode [ 150.041353][ T8064] Cannot find add_set index 1 as target [ 150.047694][ T8064] netlink: 'syz.1.596': attribute type 1 has an invalid length. [ 150.079565][ T8070] syzkaller0: entered allmulticast mode [ 150.188314][ T8074] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 150.451610][ T8086] netlink: 16 bytes leftover after parsing attributes in process `syz.1.604'. [ 150.465562][ T8087] netlink: 'syz.3.605': attribute type 1 has an invalid length. [ 150.483628][ T8087] netlink: 52 bytes leftover after parsing attributes in process `syz.3.605'. [ 150.616960][ T8092] tipc: Started in network mode [ 150.631481][ T8092] tipc: Node identity c29a534b38b3, cluster identity 4711 [ 150.652697][ T8092] tipc: Enabled bearer , priority 0 [ 150.671307][ T8095] netlink: 4 bytes leftover after parsing attributes in process `syz.3.607'. [ 150.683140][ T8092] syzkaller0: entered promiscuous mode [ 150.697674][ T8092] syzkaller0: entered allmulticast mode [ 150.704315][ T8099] netlink: 72 bytes leftover after parsing attributes in process `syz.1.609'. [ 150.742000][ T8092] tipc: Resetting bearer [ 150.758634][ T8091] tipc: Resetting bearer [ 150.777924][ T8091] tipc: Disabling bearer [ 151.410331][ T8131] netlink: 8 bytes leftover after parsing attributes in process `syz.0.616'. [ 151.603979][ T8135] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 151.615250][ T8134] netlink: 8 bytes leftover after parsing attributes in process `syz.1.618'. [ 151.684411][ T8134] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 151.704825][ T8134] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 151.715475][ T8134] gretap2: entered promiscuous mode [ 151.721621][ T8134] gretap2: entered allmulticast mode [ 151.756474][ T8139] 8021q: VLANs not supported on ip6_vti0 [ 151.806297][ T8139] tipc: Enabled bearer , priority 0 [ 151.880284][ T8145] syzkaller0: entered promiscuous mode [ 151.885933][ T8145] syzkaller0: entered allmulticast mode [ 152.099925][ T8145] tipc: Resetting bearer [ 152.195214][ T8145] tipc: Disabling bearer [ 152.249509][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 152.257682][ C1] lec:lec_tx_timeout: lec0 [ 152.262705][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 152.414261][ T8182] netlink: 24 bytes leftover after parsing attributes in process `syz.4.632'. [ 152.510131][ T5835] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 152.517413][ T5835] Bluetooth: hci0: command 0x0c1a tx timeout [ 152.637687][ T8197] netlink: 16 bytes leftover after parsing attributes in process `syz.0.637'. [ 153.053754][ T8222] x_tables: duplicate underflow at hook 1 [ 153.085975][ T8222] x_tables: duplicate underflow at hook 2 [ 153.115600][ T8222] x_tables: duplicate underflow at hook 2 [ 153.124882][ T8221] tipc: Enabled bearer , priority 0 [ 153.149875][ T8221] tipc: Enabling of bearer rejected, already enabled [ 153.173096][ T8221] tipc: Enabling of bearer rejected, already enabled [ 153.325677][ T8225] syzkaller0: entered promiscuous mode [ 153.332082][ T8225] syzkaller0: entered allmulticast mode [ 153.338538][ T8225] tipc: Resetting bearer [ 153.347629][ T8221] tipc: Enabling of bearer rejected, already enabled [ 153.377665][ T8221] tipc: Enabling of bearer rejected, already enabled [ 153.390024][ T8221] tipc: Enabling of bearer rejected, already enabled [ 153.418519][ T8221] tipc: Enabling of bearer rejected, already enabled [ 153.462540][ T8221] tipc: Enabling of bearer rejected, already enabled [ 153.480094][ T8221] tipc: Enabling of bearer rejected, already enabled [ 153.506175][ T8221] tipc: Enabling of bearer rejected, already enabled [ 153.528554][ T8221] tipc: Enabling of bearer rejected, already enabled [ 153.557915][ T8221] tipc: Enabling of bearer rejected, already enabled [ 153.583271][ T8221] tipc: Enabling of bearer rejected, already enabled [ 153.707513][ T8260] netlink: 'syz.4.649': attribute type 1 has an invalid length. [ 153.721461][ T8260] netlink: 'syz.4.649': attribute type 2 has an invalid length. [ 153.820311][ T5964] tipc: Resetting bearer [ 153.836842][ T8221] tipc: Enabling of bearer rejected, already enabled [ 154.062458][ T8220] tipc: Resetting bearer [ 155.167873][ T8220] tipc: Disabling bearer [ 155.209392][ T8221] tipc: Enabling of bearer rejected, failed to enable media [ 155.456086][ T8291] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 155.472803][ T8290] openvswitch: netlink: Tunnel attr 10 has unexpected len 0 expected 2 [ 155.541015][ T8290] __nla_validate_parse: 4 callbacks suppressed [ 155.541034][ T8290] netlink: 8 bytes leftover after parsing attributes in process `syz.4.660'. [ 155.583205][ T8297] netlink: 8 bytes leftover after parsing attributes in process `syz.0.662'. [ 155.810709][ T8312] netlink: 28 bytes leftover after parsing attributes in process `syz.0.666'. [ 155.865436][ T8312] macvlan0: entered promiscuous mode [ 155.917382][ T8312] batadv0: entered promiscuous mode [ 155.954494][ T8312] hsr1: Slave A (macvlan0) is not up; please bring it up to get a fully working HSR network [ 155.990722][ T8312] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 156.049959][ T8312] hsr1: entered allmulticast mode [ 156.060048][ T8312] macvlan0: entered allmulticast mode [ 156.096075][ T8312] veth1_vlan: entered allmulticast mode [ 156.106344][ T8312] batadv0: entered allmulticast mode [ 156.161543][ T8312] macvlan0: left promiscuous mode [ 156.184714][ T8312] batadv0: left promiscuous mode [ 156.350315][ T8345] veth0_to_team: entered promiscuous mode [ 156.362697][ T8345] veth0_to_team: entered allmulticast mode [ 156.521158][ T8351] netlink: 8 bytes leftover after parsing attributes in process `syz.3.680'. [ 156.596614][ T8354] netlink: 88 bytes leftover after parsing attributes in process `syz.4.681'. [ 156.703242][ T8362] sctp: [Deprecated]: syz.2.683 (pid 8362) Use of struct sctp_assoc_value in delayed_ack socket option. [ 156.703242][ T8362] Use struct sctp_sack_info instead [ 156.819842][ T8377] netlink: 28 bytes leftover after parsing attributes in process `syz.2.683'. [ 156.880654][ T8377] netlink: 28 bytes leftover after parsing attributes in process `syz.2.683'. [ 156.937673][ T8386] netlink: 'syz.3.689': attribute type 15 has an invalid length. [ 157.175154][ T8397] netlink: 248 bytes leftover after parsing attributes in process `syz.2.694'. [ 157.279487][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 157.287597][ C1] lec:lec_tx_timeout: lec0 [ 157.292819][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 157.557216][ T8415] netlink: 4 bytes leftover after parsing attributes in process `syz.3.702'. [ 157.572276][ T8416] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 157.583760][ T8416] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 157.913515][ T8429] 8021q: VLANs not supported on lo [ 157.965372][ T8429] vlan3: entered promiscuous mode [ 157.971436][ T8429] bond0: entered promiscuous mode [ 157.976736][ T8429] bond_slave_0: entered promiscuous mode [ 157.984607][ T8429] bond_slave_1: entered promiscuous mode [ 157.993351][ T8429] bond0: (slave vlan3): Opening slave failed [ 158.141184][ T8444] netlink: 72 bytes leftover after parsing attributes in process `syz.3.712'. [ 158.149168][ T8445] nbd: nbd0 already in use [ 158.847700][ T8486] tipc: Trying to set illegal importance in message [ 159.325222][ T8519] netlink: 'syz.1.731': attribute type 1 has an invalid length. [ 159.450604][ T8519] bond4: entered promiscuous mode [ 159.456545][ T8530] netlink: 'syz.1.731': attribute type 83 has an invalid length. [ 159.468975][ T8519] 8021q: adding VLAN 0 to HW filter on device bond4 [ 159.532883][ T8520] bond4: (slave bridge2): making interface the new active one [ 159.542264][ T8520] bridge2: entered promiscuous mode [ 159.548841][ T8520] bond4: (slave bridge2): Enslaving as an active interface with an up link [ 159.584274][ T8534] netlink: 'syz.2.735': attribute type 23 has an invalid length. [ 159.933909][ T8548] syzkaller1: entered promiscuous mode [ 159.949313][ T8548] syzkaller1: entered allmulticast mode [ 160.030522][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.412109][ T8582] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 160.686069][ T8594] netlink: 'syz.1.753': attribute type 4 has an invalid length. [ 160.737129][ T8599] IPVS: length: 182 != 24 [ 161.041096][ T8611] syzkaller1: entered promiscuous mode [ 161.059274][ T8611] syzkaller1: entered allmulticast mode [ 161.173296][ T8618] __nla_validate_parse: 6 callbacks suppressed [ 161.173319][ T8618] netlink: 36 bytes leftover after parsing attributes in process `syz.2.762'. [ 161.190775][ T8617] sctp: [Deprecated]: syz.4.761 (pid 8617) Use of int in max_burst socket option. [ 161.190775][ T8617] Use struct sctp_assoc_value instead [ 161.360549][ T8625] netlink: 8 bytes leftover after parsing attributes in process `syz.2.764'. [ 161.394161][ T8627] netlink: 12 bytes leftover after parsing attributes in process `syz.1.763'. [ 161.402849][ T8625] netlink: 4 bytes leftover after parsing attributes in process `syz.2.764'. [ 161.413723][ T8627] netlink: 'syz.1.763': attribute type 11 has an invalid length. [ 161.462149][ T8627] netlink: 12 bytes leftover after parsing attributes in process `syz.1.763'. [ 161.471761][ T8596] netlink: 'syz.3.754': attribute type 1 has an invalid length. [ 161.481067][ T8596] netlink: 132 bytes leftover after parsing attributes in process `syz.3.754'. [ 161.506126][ T8627] netlink: 'syz.1.763': attribute type 11 has an invalid length. [ 161.518431][ T8631] netlink: 8 bytes leftover after parsing attributes in process `syz.4.765'. [ 161.822443][ T8635] tipc: Enabled bearer , priority 0 [ 161.852373][ T8650] syzkaller0: entered promiscuous mode [ 161.882668][ T8650] syzkaller0: entered allmulticast mode [ 161.903731][ T8635] tipc: Resetting bearer [ 162.013453][ T8672] netlink: 'syz.1.772': attribute type 14 has an invalid length. [ 162.037571][ T8672] netlink: 4 bytes leftover after parsing attributes in process `syz.1.772'. [ 162.075446][ T8672] netlink: 'syz.1.772': attribute type 14 has an invalid length. [ 162.084020][ T8672] netlink: 4 bytes leftover after parsing attributes in process `syz.1.772'. [ 162.102107][ T8632] tipc: Resetting bearer [ 162.127782][ T8632] tipc: Disabling bearer [ 162.299122][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 162.307258][ C1] lec:lec_tx_timeout: lec0 [ 162.312709][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 162.405175][ T8682] netlink: 'syz.3.775': attribute type 16 has an invalid length. [ 162.491718][ T8692] netlink: 8 bytes leftover after parsing attributes in process `syz.1.778'. [ 162.550764][ T8682] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 163.427790][ T8727] xt_addrtype: ipv6 does not support BROADCAST matching [ 164.356258][ T8796] IPVS: ip_vs_add_dest(): server weight less than zero [ 164.436671][ T8802] nbd: socks must be embedded in a SOCK_ITEM attr [ 164.636469][ T8810] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 165.026801][ T8837] validate_nla: 3 callbacks suppressed [ 165.026822][ T8837] netlink: 'syz.0.806': attribute type 3 has an invalid length. [ 165.241376][ T8849] netlink: 'syz.1.810': attribute type 2 has an invalid length. [ 165.316376][ T8855] netlink: 'syz.1.810': attribute type 2 has an invalid length. [ 166.411618][ T8904] __nla_validate_parse: 8 callbacks suppressed [ 166.411640][ T8904] netlink: 36 bytes leftover after parsing attributes in process `syz.2.822'. [ 166.453203][ T8910] netlink: 2 bytes leftover after parsing attributes in process `syz.0.820'. [ 166.474549][ T8911] netlink: 4 bytes leftover after parsing attributes in process `syz.4.823'. [ 166.508604][ T8911] team0: Device gtp1 is of different type [ 166.589979][ T8913] team0: Device gtp1 is of different type [ 167.019578][ T8934] netlink: 12 bytes leftover after parsing attributes in process `syz.4.830'. [ 167.104457][ T8939] netlink: 24 bytes leftover after parsing attributes in process `syz.1.831'. [ 167.200902][ T8944] netlink: 'syz.3.833': attribute type 11 has an invalid length. [ 167.218978][ T8944] netlink: 'syz.3.833': attribute type 5 has an invalid length. [ 167.240566][ T8944] netlink: 4112 bytes leftover after parsing attributes in process `syz.3.833'. [ 167.285885][ T8944] netlink: 24 bytes leftover after parsing attributes in process `syz.3.833'. [ 167.319124][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 167.327245][ C1] lec:lec_tx_timeout: lec0 [ 167.332576][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 167.361661][ T8962] netlink: 'syz.2.835': attribute type 1 has an invalid length. [ 167.390470][ T8962] netlink: 12 bytes leftover after parsing attributes in process `syz.2.835'. [ 167.399776][ T8944] netlink: 32 bytes leftover after parsing attributes in process `syz.3.833'. [ 167.923872][ T8991] netlink: 24 bytes leftover after parsing attributes in process `syz.4.848'. [ 168.075174][ T8997] netlink: 'syz.4.850': attribute type 11 has an invalid length. [ 168.079905][ T9001] netlink: 'syz.0.852': attribute type 2 has an invalid length. [ 168.094615][ T9002] netlink: 'syz.4.850': attribute type 11 has an invalid length. [ 168.620172][ T9026] nbd: must specify at least one socket [ 168.913376][ T9044] syzkaller0: entered promiscuous mode [ 168.918926][ T9044] syzkaller0: entered allmulticast mode [ 169.244543][ T9056] can: request_module (can-proto-3) failed. [ 169.390187][ T9064] netem: change failed [ 169.411785][ T9070] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 169.604782][ T6302] udevd[6302]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 169.711890][ T5835] Bluetooth: hci1: command tx timeout [ 170.154986][ T9104] sctp: [Deprecated]: syz.2.884 (pid 9104) Use of int in max_burst socket option deprecated. [ 170.154986][ T9104] Use struct sctp_assoc_value instead [ 170.661429][ T9131] netem: change failed [ 170.746139][ T9139] IPv6: sit2: Disabled Multicast RS [ 171.157024][ T9156] syz.2.900: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 171.206871][ T9165] ip6t_REJECT: ECHOREPLY is not supported [ 171.229986][ T9156] CPU: 0 UID: 0 PID: 9156 Comm: syz.2.900 Not tainted syzkaller #0 PREEMPT(full) [ 171.230018][ T9156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 171.230039][ T9156] Call Trace: [ 171.230049][ T9156] [ 171.230058][ T9156] dump_stack_lvl+0x189/0x250 [ 171.230094][ T9156] ? __pfx_dump_stack_lvl+0x10/0x10 [ 171.230119][ T9156] ? __pfx__printk+0x10/0x10 [ 171.230142][ T9156] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 171.230174][ T9156] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 171.230208][ T9156] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 171.230241][ T9156] warn_alloc+0x214/0x310 [ 171.230275][ T9156] ? stack_depot_save_flags+0x40/0x860 [ 171.230309][ T9156] ? __pfx_warn_alloc+0x10/0x10 [ 171.230345][ T9156] ? kasan_save_track+0x3e/0x80 [ 171.230375][ T9156] ? __kasan_kmalloc+0x93/0xb0 [ 171.230475][ T9156] ? xsk_setsockopt+0x4dc/0x8d0 [ 171.230496][ T9156] ? do_sock_setsockopt+0x17c/0x1b0 [ 171.230519][ T9156] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 171.230541][ T9156] ? do_syscall_64+0xfa/0xfa0 [ 171.230565][ T9156] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.230596][ T9156] __vmalloc_node_range_noprof+0x125/0x12d0 [ 171.230660][ T9156] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 171.230699][ T9156] ? __kasan_kmalloc+0x93/0xb0 [ 171.230740][ T9156] vmalloc_user_noprof+0xad/0xf0 [ 171.230772][ T9156] ? xskq_create+0xbf/0x170 [ 171.230797][ T9156] xskq_create+0xbf/0x170 [ 171.230824][ T9156] xsk_init_queue+0xb0/0x110 [ 171.230851][ T9156] xsk_setsockopt+0x4dc/0x8d0 [ 171.230877][ T9156] ? __pfx_xsk_setsockopt+0x10/0x10 [ 171.230902][ T9156] ? __pfx_aa_sk_perm+0x10/0x10 [ 171.230933][ T9156] ? aa_sock_opt_perm+0xff/0x1b0 [ 171.230967][ T9156] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 171.230993][ T9156] ? __pfx_xsk_setsockopt+0x10/0x10 [ 171.231019][ T9156] do_sock_setsockopt+0x17c/0x1b0 [ 171.231049][ T9156] __x64_sys_setsockopt+0x13f/0x1b0 [ 171.231079][ T9156] do_syscall_64+0xfa/0xfa0 [ 171.231106][ T9156] ? lockdep_hardirqs_on+0x9c/0x150 [ 171.231132][ T9156] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.231154][ T9156] ? clear_bhb_loop+0x60/0xb0 [ 171.231182][ T9156] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.231204][ T9156] RIP: 0033:0x7fdf8a18eec9 [ 171.231234][ T9156] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 171.231254][ T9156] RSP: 002b:00007fdf8b0cd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 171.231278][ T9156] RAX: ffffffffffffffda RBX: 00007fdf8a3e5fa0 RCX: 00007fdf8a18eec9 [ 171.231294][ T9156] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 171.231308][ T9156] RBP: 00007fdf8a211f91 R08: 0000000000000004 R09: 0000000000000000 [ 171.231321][ T9156] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 171.231335][ T9156] R13: 00007fdf8a3e6038 R14: 00007fdf8a3e5fa0 R15: 00007ffd42c09fa8 [ 171.231373][ T9156] [ 171.233577][ T9156] Mem-Info: [ 171.547517][ T9156] active_anon:5845 inactive_anon:0 isolated_anon:0 [ 171.547517][ T9156] active_file:2950 inactive_file:39904 isolated_file:0 [ 171.547517][ T9156] unevictable:768 dirty:88 writeback:0 [ 171.547517][ T9156] slab_reclaimable:10961 slab_unreclaimable:99037 [ 171.547517][ T9156] mapped:29233 shmem:1362 pagetables:1261 [ 171.547517][ T9156] sec_pagetables:0 bounce:0 [ 171.547517][ T9156] kernel_misc_reclaimable:0 [ 171.547517][ T9156] free:1328174 free_pcp:14665 free_cma:0 [ 171.595248][ T56] block nbd0: Possible stuck request ffff888024f77000: control (read@0,1024B). Runtime 60 seconds [ 171.609426][ T56] block nbd0: Possible stuck request ffff888024f771c0: control (read@1024,1024B). Runtime 60 seconds [ 171.619038][ T9156] Node 0 active_anon:23480kB inactive_anon:0kB active_file:11800kB inactive_file:159408kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116932kB dirty:352kB writeback:0kB shmem:3912kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13604kB pagetables:4788kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 171.620704][ T56] block nbd0: Possible stuck request ffff888024f77380: control (read@2048,1024B). Runtime 60 seconds [ 171.666901][ T56] block nbd0: Possible stuck request ffff888024f77540: control (read@3072,1024B). Runtime 60 seconds [ 171.712373][ T9177] __nla_validate_parse: 18 callbacks suppressed [ 171.712393][ T9177] netlink: 40 bytes leftover after parsing attributes in process `syz.0.904'. [ 171.730686][ T9156] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 171.768180][ T9156] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 171.800843][ T9156] lowmem_reserve[]: 0 2501 2503 2503 2503 [ 171.813905][ T9156] Node 0 DMA32 free:1405192kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23280kB inactive_anon:0kB active_file:11800kB inactive_file:159408kB unevictable:1536kB writepending:352kB zspages:0kB present:3129332kB managed:2561672kB mlocked:0kB bounce:0kB free_pcp:40144kB local_pcp:19360kB free_cma:0kB [ 171.859726][ T9156] lowmem_reserve[]: 0 0 1 1 1 [ 171.864886][ T9156] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 171.919496][ T9186] netlink: 20 bytes leftover after parsing attributes in process `syz.1.905'. [ 171.932463][ T9156] lowmem_reserve[]: 0 0 0 0 0 [ 171.937295][ T9156] Node 1 Normal free:3892016kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:18752kB local_pcp:8992kB free_cma:0kB [ 171.966148][ T9186] netlink: 32 bytes leftover after parsing attributes in process `syz.1.905'. [ 172.025391][ T9156] lowmem_reserve[]: 0 0 0 0 0 [ 172.046191][ T9156] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 172.057987][ T9192] netlink: 'syz.3.906': attribute type 10 has an invalid length. [ 172.074108][ T9192] team0: Device ipvlan1 failed to register rx_handler [ 172.099612][ T9156] Node 0 DMA32: 556*4kB (UM) 195*8kB (UM) 69*16kB (UME) 277*32kB (UM) 38*64kB (UM) 7*128kB (UME) 5*256kB (UME) 1*512kB (U) 2*1024kB (UM) 8*2048kB (M) 334*4096kB (UM) = 1405368kB [ 172.122000][ T9156] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 172.187500][ T9156] Node 1 Normal: 170*4kB (UE) 35*8kB (UME) 37*16kB (UME) 61*32kB (UME) 26*64kB (UME) 8*128kB (UME) 7*256kB (UME) 6*512kB (UME) 2*1024kB (UM) 2*2048kB (UE) 946*4096kB (M) = 3892016kB [ 172.247334][ T9156] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 172.281432][ T9197] netlink: 24 bytes leftover after parsing attributes in process `syz.4.908'. [ 172.284723][ T9156] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 172.334809][ T9156] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 172.344530][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 172.344603][ C1] lec:lec_tx_timeout: lec0 [ 172.353094][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 172.387801][ T9156] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 172.401909][ T9156] 44214 total pagecache pages [ 172.406676][ T9156] 0 pages in swap cache [ 172.413194][ T9156] Free swap = 124996kB [ 172.417404][ T9156] Total swap = 124996kB [ 172.422650][ T9156] 2097051 pages RAM [ 172.426758][ T9156] 0 pages HighMem/MovableOnly [ 172.445905][ T9156] 424543 pages reserved [ 172.469227][ T9156] 0 pages cma reserved [ 172.533748][ T9209] x_tables: duplicate underflow at hook 2 [ 172.586490][ T9211] netlink: 'syz.3.913': attribute type 2 has an invalid length. [ 172.621534][ T9211] netlink: 8 bytes leftover after parsing attributes in process `syz.3.913'. [ 172.645014][ T9213] netlink: 28 bytes leftover after parsing attributes in process `syz.4.915'. [ 172.656830][ T9221] syzkaller0: entered promiscuous mode [ 172.663169][ T9221] syzkaller0: entered allmulticast mode [ 172.671107][ T9214] netlink: 4 bytes leftover after parsing attributes in process `syz.4.915'. [ 172.688404][ T9211] netlink: 'syz.3.913': attribute type 2 has an invalid length. [ 172.719836][ T9211] netlink: 8 bytes leftover after parsing attributes in process `syz.3.913'. [ 172.764691][ T9214] hsr_slave_1 (unregistering): left promiscuous mode [ 172.787338][ T9221] netlink: 28 bytes leftover after parsing attributes in process `syz.2.916'. [ 172.803723][ T9221] netlink: 16 bytes leftover after parsing attributes in process `syz.2.916'. [ 172.980813][ T9236] netlink: 'syz.1.922': attribute type 64 has an invalid length. [ 173.244547][ T9257] netlink: 'syz.0.928': attribute type 1 has an invalid length. [ 173.594684][ T9276] netlink: 'syz.3.931': attribute type 3 has an invalid length. [ 174.621723][ T9320] netlink: 'syz.2.941': attribute type 1 has an invalid length. [ 174.701676][ T9314] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 174.714895][ T9314] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 174.800634][ T9325] bridge_slave_1: left allmulticast mode [ 174.809474][ T9325] bridge_slave_1: left promiscuous mode [ 174.815991][ T9325] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.843838][ T9325] bridge_slave_0: left promiscuous mode [ 174.858677][ T9325] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.359345][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 177.367399][ C1] lec:lec_tx_timeout: lec0 [ 177.372078][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 178.229370][ T5196] udevd[5196]: worker [5890] /devices/virtual/block/nbd0 is taking a long time [ 183.149163][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5780 ms [ 183.157224][ C1] lec:lec_tx_timeout: lec0 [ 183.162191][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 188.189265][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5030 ms [ 188.197311][ C1] lec:lec_tx_timeout: lec0 [ 188.202004][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 193.209189][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 193.217240][ C1] lec:lec_tx_timeout: lec0 [ 193.222382][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 198.229428][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 198.237561][ C1] lec:lec_tx_timeout: lec0 [ 198.242277][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 199.712895][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.719437][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 201.591337][ T9360] syzkaller0: entered promiscuous mode [ 201.625309][ T9360] syzkaller0: entered allmulticast mode [ 201.640031][ T56] block nbd0: Possible stuck request ffff888024f77000: control (read@0,1024B). Runtime 90 seconds [ 201.657424][ T56] block nbd0: Possible stuck request ffff888024f771c0: control (read@1024,1024B). Runtime 90 seconds [ 201.689367][ T56] block nbd0: Possible stuck request ffff888024f77380: control (read@2048,1024B). Runtime 90 seconds [ 201.702079][ T56] block nbd0: Possible stuck request ffff888024f77540: control (read@3072,1024B). Runtime 90 seconds [ 201.917621][ T9384] IPVS: Scheduler module ip_vs_sip not found [ 201.958632][ T9391] x_tables: duplicate underflow at hook 1 [ 202.931112][ T9386] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 202.933647][ T9384] __nla_validate_parse: 9 callbacks suppressed [ 202.933668][ T9384] netlink: 32 bytes leftover after parsing attributes in process `syz.4.958'. [ 203.177261][ T9406] netlink: 'syz.0.963': attribute type 23 has an invalid length. [ 203.249190][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 203.249938][ T9408] tipc: Enabling of bearer rejected, failed to enable media [ 203.257308][ C1] lec:lec_tx_timeout: lec0 [ 203.271184][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 203.473097][ T9419] netlink: 8 bytes leftover after parsing attributes in process `syz.0.967'. [ 203.556369][ T9419] netlink: 132 bytes leftover after parsing attributes in process `syz.0.967'. [ 203.574736][ T9429] syzkaller0: entered promiscuous mode [ 203.580388][ T9429] syzkaller0: entered allmulticast mode [ 203.653678][ T9433] netlink: 8 bytes leftover after parsing attributes in process `syz.3.971'. [ 203.702936][ T9433] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 203.730987][ T9433] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 203.749962][ T9433] gretap1: entered promiscuous mode [ 203.755332][ T9433] gretap1: entered allmulticast mode [ 203.792402][ T9442] C: renamed from lo (while UP) [ 203.887532][ T9440] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 204.170827][ T9459] block nbd1: not configured, cannot reconfigure [ 204.345567][ T9467] vlan2: entered promiscuous mode [ 204.353068][ T9467] bridge0: entered promiscuous mode [ 204.360765][ T9469] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 204.378152][ T9471] tipc: Enabling of bearer rejected, failed to enable media [ 204.391490][ T9467] netlink: 40 bytes leftover after parsing attributes in process `syz.1.980'. [ 204.584716][ T9482] netlink: 40 bytes leftover after parsing attributes in process `syz.0.984'. [ 204.585076][ T9476] tipc: Enabled bearer , priority 0 [ 204.623720][ T9476] syzkaller0: entered promiscuous mode [ 204.629445][ T9476] syzkaller0: entered allmulticast mode [ 204.669839][ T9475] tipc: Resetting bearer [ 204.705472][ T9489] netlink: 12 bytes leftover after parsing attributes in process `syz.2.985'. [ 204.741652][ T9488] netlink: 8 bytes leftover after parsing attributes in process `syz.4.986'. [ 204.768148][ T9495] netlink: 48 bytes leftover after parsing attributes in process `syz.2.985'. [ 204.784795][ T9475] tipc: Disabling bearer [ 205.015660][ T9508] netlink: 132 bytes leftover after parsing attributes in process `syz.0.991'. [ 205.028010][ T9509] ip6t_srh: unknown srh match flags 4000 [ 205.380194][ T9525] tipc: Enabled bearer , priority 0 [ 205.388309][ T9525] syzkaller0: entered promiscuous mode [ 205.397475][ T9525] syzkaller0: entered allmulticast mode [ 205.429430][ T9527] vlan2: entered allmulticast mode [ 205.445729][ T9527] gretap0: entered allmulticast mode [ 205.491221][ T9524] tipc: Resetting bearer [ 205.571663][ T9524] tipc: Disabling bearer [ 206.068779][ T9567] netlink: 'syz.2.1011': attribute type 1 has an invalid length. [ 206.692563][ T9596] netlink: 'syz.1.1021': attribute type 29 has an invalid length. [ 206.827697][ T9608] netlink: 'syz.1.1021': attribute type 29 has an invalid length. [ 206.876835][ T9611] netlink: 'syz.1.1021': attribute type 29 has an invalid length. [ 206.908976][ T9611] netlink: 'syz.1.1021': attribute type 29 has an invalid length. [ 206.932329][ T9615] netlink: 'syz.2.1024': attribute type 2 has an invalid length. [ 207.125889][ T9623] bond_slave_0: entered promiscuous mode [ 207.131993][ T9623] bond_slave_1: entered promiscuous mode [ 207.162836][ T9623] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 207.185093][ T9623] team0: Device macvtap1 failed to register rx_handler [ 207.194134][ T9623] bond_slave_0: left promiscuous mode [ 207.199661][ T9623] bond_slave_1: left promiscuous mode [ 207.583579][ T9660] tipc: Enabled bearer , priority 0 [ 207.636155][ T9660] netlink: 'syz.0.1037': attribute type 11 has an invalid length. [ 207.666949][ T9660] tipc: Resetting bearer [ 207.684606][ T9662] netlink: 'syz.2.1038': attribute type 5 has an invalid length. [ 207.703273][ T9662] netlink: 'syz.2.1038': attribute type 11 has an invalid length. [ 207.787868][ T9654] tipc: Disabling bearer [ 208.043947][ T9677] __nla_validate_parse: 7 callbacks suppressed [ 208.043967][ T9677] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1043'. [ 208.065779][ T9686] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 208.114523][ T9687] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1046'. [ 208.234310][ T9689] tipc: Enabled bearer , priority 0 [ 208.260067][ T9689] syzkaller0: entered promiscuous mode [ 208.278354][ T9689] syzkaller0: entered allmulticast mode [ 208.284633][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 208.284670][ C1] lec:lec_tx_timeout: lec0 [ 208.293231][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 208.503334][ T9705] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1050'. [ 208.622409][ T9688] tipc: Resetting bearer [ 208.708190][ T9688] tipc: Disabling bearer [ 208.725774][ T9710] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1052'. [ 208.767105][ T7469] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 208.775961][ T9710] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1052'. [ 208.785241][ T7469] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 208.794294][ T7469] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 208.819163][ T7469] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 208.924109][ T9718] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.1055'. [ 209.201139][ T9736] netlink: 176 bytes leftover after parsing attributes in process `syz.1.1062'. [ 209.230232][ T9736] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1062'. [ 209.350685][ T9748] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1064'. [ 209.514519][ T9753] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1068'. [ 209.657043][ T9759] netlink: 'syz.1.1070': attribute type 10 has an invalid length. [ 209.739525][ T9759] team0: Port device dummy0 added [ 209.808069][ T9767] netlink: 'syz.4.1072': attribute type 1 has an invalid length. [ 209.839594][ T9767] netlink: 'syz.4.1072': attribute type 10 has an invalid length. [ 209.872241][ T9767] netlink: 'syz.4.1072': attribute type 4 has an invalid length. [ 211.260935][ T9859] IPVS: Unknown mcast interface: netpci0 [ 211.524607][ T9866] xt_CT: No such helper "syz1" [ 211.790982][ T9883] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 212.228904][ T9906] netlink: 'syz.3.1112': attribute type 1 has an invalid length. [ 212.658575][ T9927] netlink: 'syz.4.1121': attribute type 2 has an invalid length. [ 212.687164][ T9929] netlink: 'syz.4.1121': attribute type 2 has an invalid length. [ 212.729383][ T9931] netlink: 'syz.0.1122': attribute type 1 has an invalid length. [ 212.920231][ T9931] bond2: entered promiscuous mode [ 212.925769][ T9931] 8021q: adding VLAN 0 to HW filter on device bond2 [ 213.037208][ T9940] bond2: (slave bridge1): making interface the new active one [ 213.060410][ T9940] bridge1: entered promiscuous mode [ 213.087627][ T9940] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 213.126673][ T9949] bridge0: port 3(vlan4) entered blocking state [ 213.152100][ T9949] bridge0: port 3(vlan4) entered disabled state [ 213.198360][ T9949] vlan4: entered allmulticast mode [ 213.210417][ T9949] bridge0: entered allmulticast mode [ 213.245803][ T9949] vlan4: left allmulticast mode [ 213.266011][ T9949] bridge0: left allmulticast mode [ 213.299238][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 213.307391][ C1] lec:lec_tx_timeout: lec0 [ 213.313311][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 213.356053][ T9952] bond2: option miimon: invalid value (18446744073709551585) [ 213.379907][ T9952] bond2: option miimon: allowed values 0 - 2147483647 [ 213.404108][ T9952] bond2 (unregistering): Released all slaves [ 213.725740][ T9986] netlink: 'syz.4.1136': attribute type 1 has an invalid length. [ 213.737317][ T9986] __nla_validate_parse: 9 callbacks suppressed [ 213.737336][ T9986] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1136'. [ 213.926111][ T9999] tipc: Trying to set illegal importance in message [ 214.539956][T10022] syzkaller1: entered promiscuous mode [ 214.549383][T10022] syzkaller1: entered allmulticast mode [ 214.559952][T10021] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1148'. [ 214.621235][T10024] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 214.848079][T10034] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1153'. [ 214.858564][T10034] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1153'. [ 214.872278][T10036] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1154'. [ 215.151812][ T30] audit: type=1800 audit(1760533311.739:4): pid=10048 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1156" name="memory.events" dev="tmpfs" ino=1289 res=0 errno=0 [ 215.232141][ T30] audit: type=1800 audit(1760533311.739:5): pid=10048 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1156" name="memory.events" dev="tmpfs" ino=1289 res=0 errno=0 [ 215.260458][ T30] audit: type=1804 audit(1760533311.749:6): pid=10049 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1156" name="/newroot/251/memory.events" dev="tmpfs" ino=1289 res=1 errno=0 [ 215.607533][T10063] netlink: 'syz.0.1161': attribute type 1 has an invalid length. [ 215.670903][T10063] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1161'. [ 216.576482][T10097] syzkaller0: entered promiscuous mode [ 216.595906][T10097] syzkaller0: entered allmulticast mode [ 216.899357][T10114] netlink: 'syz.2.1177': attribute type 10 has an invalid length. [ 216.925853][T10117] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1178'. [ 216.930847][T10114] veth1_macvtap: left promiscuous mode [ 216.960747][T10117] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1178'. [ 217.149420][ T5146] Bluetooth: hci4: command 0x0406 tx timeout [ 217.229563][ T5146] Bluetooth: hci0: command 0x0c1a tx timeout [ 217.235729][ T5841] Bluetooth: hci1: command 0x0406 tx timeout [ 217.235748][ T5844] Bluetooth: hci2: command 0x0406 tx timeout [ 217.410141][T10136] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1185'. [ 217.435428][T10136] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1185'. [ 217.533463][T10145] vlan3: entered allmulticast mode [ 217.633555][T10148] bond2: option all_slaves_active: invalid value (16) [ 217.658256][T10148] bond2 (unregistering): Released all slaves [ 217.787463][T10155] tipc: Enabled bearer , priority 0 [ 217.815716][T10155] syzkaller0: entered promiscuous mode [ 217.839975][T10155] syzkaller0: entered allmulticast mode [ 217.882530][T10155] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 217.933549][T10155] tipc: Resetting bearer [ 217.955074][T10162] netlink: 'syz.0.1190': attribute type 3 has an invalid length. [ 218.034244][T10157] tipc: Resetting bearer [ 218.153462][T10157] tipc: Disabling bearer [ 218.329114][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 218.337231][ C1] lec:lec_tx_timeout: lec0 [ 218.342481][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 218.356229][T10187] netlink: 'syz.1.1197': attribute type 1 has an invalid length. [ 218.410601][T10198] netlink: 'syz.4.1199': attribute type 1 has an invalid length. [ 218.436384][ T5828] Bluetooth: hci3: link tx timeout [ 218.442886][ T5828] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 218.452692][ T5828] Bluetooth: hci3: link tx timeout [ 218.461944][ T5828] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 219.052884][T10227] __nla_validate_parse: 6 callbacks suppressed [ 219.052908][T10227] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1213'. [ 219.093370][T10227] netlink: 50 bytes leftover after parsing attributes in process `syz.1.1213'. [ 219.124206][T10227] netlink: 50 bytes leftover after parsing attributes in process `syz.1.1213'. [ 219.158003][T10227] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1213'. [ 219.541095][T10255] netlink: 'syz.3.1221': attribute type 142 has an invalid length. [ 219.751098][T10266] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1225'. [ 219.758336][T10267] sctp: [Deprecated]: syz.3.1227 (pid 10267) Use of int in max_burst socket option deprecated. [ 219.758336][T10267] Use struct sctp_assoc_value instead [ 219.905472][T10276] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1228'. [ 220.016223][T10280] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1230'. [ 220.036594][T10282] x_tables: duplicate underflow at hook 2 [ 220.239813][T10294] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1233'. [ 220.383540][T10301] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1234'. [ 220.438861][T10305] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1234'. [ 220.512994][ T5828] Bluetooth: hci3: command 0x0406 tx timeout [ 220.617934][T10310] netlink: 'syz.0.1237': attribute type 1 has an invalid length. [ 220.891095][T10326] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 221.047772][T10336] syzkaller1: entered promiscuous mode [ 221.056031][T10336] syzkaller1: entered allmulticast mode [ 221.074067][T10333] netlink: 'syz.1.1240': attribute type 21 has an invalid length. [ 221.103535][T10337] tipc: Enabled bearer , priority 0 [ 221.121942][T10337] syzkaller0: entered promiscuous mode [ 221.127491][T10337] syzkaller0: entered allmulticast mode [ 221.216392][T10337] tipc: Resetting bearer [ 221.319490][T10334] tipc: Resetting bearer [ 221.446436][T10334] tipc: Disabling bearer [ 221.681056][T10368] nbd: must specify a device to reconfigure [ 221.838409][T10377] Cannot find add_set index 65532 as target [ 222.009899][T10385] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 222.475817][T10417] Bluetooth: hci0: invalid length 0, exp 2 for type 3 [ 222.504183][T10417] Bluetooth: hci0: invalid length 0, exp 2 for type 6 [ 222.527741][T10417] netlink: 'syz.2.1263': attribute type 1 has an invalid length. [ 222.589233][ T5828] Bluetooth: hci3: command 0x0406 tx timeout [ 222.657257][T10430] Bluetooth: hci0: invalid length 39, exp 2 for type 17 [ 222.732706][T10428] macvlan2: entered promiscuous mode [ 222.770251][T10428] macvlan2: entered allmulticast mode [ 222.791242][T10428] bond4: entered promiscuous mode [ 222.797247][T10428] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 222.846287][T10428] bond4: left promiscuous mode [ 223.139755][T10453] netlink: 'syz.0.1271': attribute type 11 has an invalid length. [ 223.147638][T10453] netlink: 'syz.0.1271': attribute type 5 has an invalid length. [ 223.296105][T10467] netlink: 'syz.4.1273': attribute type 29 has an invalid length. [ 223.340101][T10467] netlink: 'syz.4.1273': attribute type 29 has an invalid length. [ 223.349497][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 223.357566][ C1] lec:lec_tx_timeout: lec0 [ 223.362486][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 223.690862][T10481] netlink: 'syz.1.1280': attribute type 7 has an invalid length. [ 223.733745][T10481] netlink: 'syz.1.1280': attribute type 8 has an invalid length. [ 223.843336][T10494] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 224.004912][T10498] netlink: 'syz.1.1285': attribute type 1 has an invalid length. [ 224.173018][T10498] bond5: entered promiscuous mode [ 224.183363][T10498] 8021q: adding VLAN 0 to HW filter on device bond5 [ 224.261171][T10510] 8021q: adding VLAN 0 to HW filter on device bond5 [ 224.278841][T10510] bond5: (slave wireguard0): The slave device specified does not support setting the MAC address [ 224.293769][T10510] bond5: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 224.337831][T10510] bond5: (slave wireguard0): making interface the new active one [ 224.417221][T10510] wireguard0: entered promiscuous mode [ 224.431278][T10510] bond5: (slave wireguard0): Enslaving as an active interface with an up link [ 224.666986][T10544] netlink: 'syz.3.1298': attribute type 23 has an invalid length. [ 224.777917][T10551] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 225.313760][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.344113][T10581] __nla_validate_parse: 20 callbacks suppressed [ 225.344134][T10581] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1308'. [ 226.554882][T10561] syzkaller1: entered promiscuous mode [ 226.561787][T10561] syzkaller1: entered allmulticast mode [ 226.611053][T10584] tipc: Enabling of bearer rejected, failed to enable media [ 226.723460][T10598] syzkaller0: entered promiscuous mode [ 226.732186][T10598] syzkaller0: entered allmulticast mode [ 226.772394][T10610] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1313'. [ 226.992989][T10629] Unsupported ieee802154 address type: 0 [ 227.000059][T10632] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1319'. [ 227.043191][T10628] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1319'. [ 227.109450][T10632] netlink: 'syz.0.1319': attribute type 7 has an invalid length. [ 227.117262][T10632] netlink: 'syz.0.1319': attribute type 8 has an invalid length. [ 227.120492][T10628] netlink: 'syz.0.1319': attribute type 7 has an invalid length. [ 227.197905][T10632] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1319'. [ 227.207057][T10628] netlink: 'syz.0.1319': attribute type 8 has an invalid length. [ 227.214987][T10643] bridge2: entered promiscuous mode [ 227.215013][T10643] bridge2: entered allmulticast mode [ 227.259263][T10628] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1319'. [ 227.625611][T10665] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1329'. [ 227.658817][T10665] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1329'. [ 227.712596][T10670] netlink: 'syz.0.1331': attribute type 11 has an invalid length. [ 227.862116][T10680] netlink: zone id is out of range [ 227.883607][T10680] netlink: zone id is out of range [ 227.910504][T10680] netlink: zone id is out of range [ 227.919455][T10680] netlink: zone id is out of range [ 227.937156][T10680] netlink: zone id is out of range [ 227.962800][T10680] netlink: zone id is out of range [ 227.981323][T10680] netlink: zone id is out of range [ 228.004150][T10680] netlink: zone id is out of range [ 228.032989][T10680] netlink: zone id is out of range [ 228.069260][T10680] netlink: zone id is out of range [ 228.271591][T10695] xt_socket: unknown flags 0x50 [ 228.369271][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 228.377383][ C1] lec:lec_tx_timeout: lec0 [ 228.382469][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 228.409433][T10695] xt_socket: unknown flags 0x50 [ 228.553074][T10717] x_tables: duplicate underflow at hook 1 [ 228.563557][T10717] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1343'. [ 228.658643][T10723] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1344'. [ 228.737574][T10728] netlink: 'syz.4.1345': attribute type 58 has an invalid length. [ 228.773077][T10728] netlink: 'syz.4.1345': attribute type 58 has an invalid length. [ 229.058726][T10747] netlink: 'syz.3.1350': attribute type 1 has an invalid length. [ 229.206614][T10762] netlink: 'syz.1.1354': attribute type 83 has an invalid length. [ 229.410016][T10766] netlink: 'syz.4.1356': attribute type 29 has an invalid length. [ 229.443238][T10780] netlink: 'syz.3.1360': attribute type 1 has an invalid length. [ 229.508029][T10785] Bluetooth: hci0: unsupported parameter 512 [ 229.574772][T10785] Bluetooth: hci0: invalid length 11, exp 2 for type 21 [ 229.881768][T10801] tipc: Enabled bearer , priority 0 [ 229.919808][T10809] syzkaller0: entered promiscuous mode [ 229.925376][T10809] syzkaller0: entered allmulticast mode [ 229.971521][T10801] tipc: Resetting bearer [ 230.073121][T10801] tipc: Disabling bearer [ 230.400142][T10841] __nla_validate_parse: 7 callbacks suppressed [ 230.400162][T10841] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1373'. [ 230.666488][T10853] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 230.754981][T10858] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1378'. [ 231.025810][T10870] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1382'. [ 231.038780][T10870] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1382'. [ 231.094882][T10867] bond3 (unregistering): Released all slaves [ 231.482035][T10903] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 231.488567][T10903] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 231.539372][T10901] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 231.560158][T10901] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 231.566770][T10903] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 231.592860][T10903] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 231.600501][T10903] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 231.607154][T10903] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 231.614483][T10903] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 231.622256][T10903] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 231.633238][T10901] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 231.653594][T10903] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 231.668871][T10908] 8021q: adding VLAN 0 to HW filter on device bond5 [ 231.670766][T10903] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 231.682710][T10901] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 231.689319][T10901] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 231.695932][T10903] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 231.706626][T10901] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 231.706754][T10914] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1392'. [ 231.713248][T10903] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 231.713286][T10903] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 231.713314][T10903] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 231.713340][T10903] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 231.713367][T10903] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 231.713393][T10903] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 231.713419][T10903] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 231.713446][T10903] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 231.713472][T10903] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 231.713499][T10903] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 231.713524][T10903] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 231.713548][T10903] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 231.713574][T10903] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 231.713600][T10903] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 231.713627][T10903] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 231.713654][T10903] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 231.713680][T10903] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 231.713706][T10903] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 231.713739][T10903] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 231.713766][T10903] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 231.713793][T10903] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 231.713852][T10901] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 231.713879][T10901] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 231.713906][T10901] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 231.713933][T10901] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 231.713959][T10901] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 231.713986][T10901] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 231.714012][T10901] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 231.714039][T10901] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 231.714065][T10901] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 231.714092][T10901] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 231.714119][T10901] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 231.714146][T10901] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 231.714172][T10901] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 231.714199][T10901] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 231.714226][T10901] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 231.714251][T10901] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 231.714278][T10901] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 231.714304][T10901] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 231.714331][T10901] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 231.714357][T10901] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 231.714383][T10901] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 231.714410][T10901] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 231.714437][T10901] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 231.714464][T10901] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 231.714492][T10901] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 231.714518][T10901] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 231.714545][T10901] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 231.714571][T10901] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 231.714598][T10901] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 231.714625][T10901] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 231.714651][T10901] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 231.714677][T10901] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 231.714704][T10901] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 231.714739][T10901] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 231.714766][T10901] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 231.714793][T10901] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 231.714819][T10901] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 231.820179][T10909] ipt_REJECT: ECHOREPLY no longer supported. [ 231.822666][ T56] block nbd0: Possible stuck request ffff888024f77000: control (read@0,1024B). Runtime 120 seconds [ 231.840608][T10901] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 231.841790][ T56] block nbd0: Possible stuck request ffff888024f771c0: control (read@1024,1024B). Runtime 120 seconds [ 231.850798][T10901] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 231.854457][ T56] block nbd0: Possible stuck request ffff888024f77380: control (read@2048,1024B). Runtime 120 seconds [ 231.876328][T10901] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 231.880649][ T56] block nbd0: Possible stuck request ffff888024f77540: control (read@3072,1024B). Runtime 120 seconds [ 231.919184][T10921] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1392'. [ 231.926497][T10901] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 232.206065][T10901] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 232.212748][T10901] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 232.219805][T10901] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 232.233109][T10908] bond5: (slave ip6gretap1): Enslaving as an active interface with an up link [ 232.394701][T10930] sctp: [Deprecated]: syz.0.1396 (pid 10930) Use of int in maxseg socket option. [ 232.394701][T10930] Use struct sctp_assoc_value instead [ 232.561506][T10935] tipc: Enabled bearer , priority 0 [ 232.583660][T10935] syzkaller0: entered promiscuous mode [ 232.599299][T10935] syzkaller0: entered allmulticast mode [ 232.653198][T10935] tipc: Resetting bearer [ 232.801904][T10935] bond6: entered promiscuous mode [ 232.807904][T10935] bond6: entered allmulticast mode [ 232.818715][T10935] 8021q: adding VLAN 0 to HW filter on device bond6 [ 232.836322][T10934] tipc: Resetting bearer [ 232.850473][T10934] tipc: Disabling bearer [ 233.266828][T10962] validate_nla: 2 callbacks suppressed [ 233.266848][T10962] netlink: 'syz.0.1404': attribute type 21 has an invalid length. [ 233.311697][T10962] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1404'. [ 234.100724][T10986] netlink: 'syz.0.1411': attribute type 1 has an invalid length. [ 234.108535][T10986] netlink: 204 bytes leftover after parsing attributes in process `syz.0.1411'. [ 234.238295][T11008] netlink: 'syz.3.1413': attribute type 1 has an invalid length. [ 234.269098][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5890 ms [ 234.277165][ C1] lec:lec_tx_timeout: lec0 [ 234.283158][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 234.321084][T11008] netlink: 'syz.3.1413': attribute type 1 has an invalid length. [ 234.490996][T11023] pim6reg1: entered promiscuous mode [ 234.496526][T11023] pim6reg1: entered allmulticast mode [ 234.627927][T11030] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1420'. [ 234.821826][T11037] pim6reg1: entered promiscuous mode [ 234.827638][T11037] pim6reg1: entered allmulticast mode [ 234.835072][T11045] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1423'. [ 235.005851][T11052] netlink: 'syz.4.1426': attribute type 1 has an invalid length. [ 235.014273][T11052] netlink: 'syz.4.1426': attribute type 2 has an invalid length. [ 235.025660][T11049] gtp0: entered promiscuous mode [ 235.036295][T11049] gtp0: entered allmulticast mode [ 235.112944][T11055] netlink: 'syz.3.1427': attribute type 27 has an invalid length. [ 235.267282][T11063] syzkaller0: entered promiscuous mode [ 235.273277][T11063] syzkaller0: entered allmulticast mode [ 235.517449][T11076] delete_channel: no stack [ 235.682959][T11074] delete_channel: no stack [ 235.740251][T11079] syzkaller0: entered promiscuous mode [ 235.748885][T11079] syzkaller0: entered allmulticast mode [ 235.797847][T11087] __nla_validate_parse: 4 callbacks suppressed [ 235.797868][T11087] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1439'. [ 235.815920][T11087] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1439'. [ 235.820486][T11079] netlink: 'syz.3.1437': attribute type 10 has an invalid length. [ 235.862641][T11079] bond0: (slave wlan1): Opening slave failed [ 237.041393][T11117] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1449'. [ 237.496263][T11121] netlink: 'syz.1.1450': attribute type 1 has an invalid length. [ 237.516043][T11126] netlink: 'syz.1.1450': attribute type 29 has an invalid length. [ 237.595889][T11132] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1452'. [ 237.622760][T11133] net_ratelimit: 337 callbacks suppressed [ 237.622781][T11133] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 238.258837][T11163] vlan1: entered allmulticast mode [ 238.264706][T11163] veth0_vlan: entered allmulticast mode [ 238.304865][T11163] IPVS: set_ctl: invalid protocol: 1 255.255.255.255:20063 [ 238.333637][T11165] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1461'. [ 238.355209][T11165] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1461'. [ 238.385797][T11165] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1461'. [ 238.426503][T11165] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1461'. [ 238.533095][T11180] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1462'. [ 238.773315][T11200] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1469'. [ 239.114675][T11220] tipc: Invalid UDP bearer configuration [ 239.114734][T11220] tipc: Enabling of bearer rejected, failed to enable media [ 239.161548][T11219] syzkaller1: entered promiscuous mode [ 239.170331][T11219] syzkaller1: entered allmulticast mode [ 239.299436][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 239.307502][ C1] lec:lec_tx_timeout: lec0 [ 239.312270][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 239.544551][T11242] validate_nla: 1 callbacks suppressed [ 239.544571][T11242] netlink: 'syz.2.1484': attribute type 1 has an invalid length. [ 239.794609][T11253] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 240.036176][T11262] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 240.355337][T11283] bond3: option arp_all_targets: invalid value (18446744073709551613) [ 240.386425][T11283] bond3 (unregistering): Released all slaves [ 240.656105][T11297] 8021q: adding VLAN 0 to HW filter on device bond0 [ 240.671111][T11297] bond0: (slave rose0): Enslaving as an active interface with an up link [ 240.706418][ T10] IPVS: starting estimator thread 0... [ 240.819412][T11310] IPVS: using max 29 ests per chain, 69600 per kthread [ 241.154791][T11331] __nla_validate_parse: 3 callbacks suppressed [ 241.154813][T11331] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1509'. [ 241.364961][T11346] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1513'. [ 241.512477][T11360] IPVS: set_ctl: invalid protocol: 44 224.0.0.2:20004 [ 241.570617][T11346] sch_tbf: burst 512 is lower than device syzkaller0 mtu (1500) ! [ 242.108803][T11392] netlink: 'syz.2.1524': attribute type 9 has an invalid length. [ 242.123502][T11392] netlink: 'syz.2.1524': attribute type 7 has an invalid length. [ 242.136942][T11388] netlink: 'syz.1.1526': attribute type 11 has an invalid length. [ 242.140507][T11392] netlink: 'syz.2.1524': attribute type 8 has an invalid length. [ 242.460225][T11410] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20000 [ 242.604976][T11413] xt_nfacct: accounting object `\$9ZM#mU|^c\F9YⳈ' does not exist [ 242.649689][T11418] delete_channel: no stack [ 242.814060][T11423] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1539'. [ 242.839737][T11426] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1538'. [ 243.146367][T11451] tipc: New replicast peer: 255.255.255.255 [ 243.165385][T11451] tipc: Enabled bearer , priority 10 [ 243.193978][T11457] IPVS: set_ctl: invalid protocol: 44 0.0.0.0:20003 [ 243.499726][T11481] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1554'. [ 244.009989][T11502] netlink: 'syz.3.1562': attribute type 10 has an invalid length. [ 244.018488][T11501] netlink: 'syz.3.1562': attribute type 10 has an invalid length. [ 244.026818][T11502] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1562'. [ 244.030628][T11501] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1562'. [ 244.057950][T11502] team0: Port device geneve0 added [ 244.301875][ T8665] tipc: Node number set to 4197012299 [ 244.319160][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 244.327253][ C1] lec:lec_tx_timeout: lec0 [ 244.331931][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 244.346666][T11517] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1565'. [ 244.427103][T11527] syzkaller0: entered allmulticast mode [ 244.602981][T11532] 8021q: VLANs not supported on caif0 [ 244.620458][T11537] tipc: Enabling of bearer rejected, media not registered [ 244.639808][T11537] tipc: Enabling of bearer rejected, media not registered [ 244.663298][T11537] tipc: Enabling of bearer rejected, media not registered [ 244.691816][T11537] tipc: Enabling of bearer rejected, media not registered [ 244.725170][T11537] tipc: Enabling of bearer rejected, media not registered [ 244.769411][T11537] tipc: Enabling of bearer rejected, media not registered [ 244.802073][T11542] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 244.837655][T11537] tipc: Enabling of bearer rejected, media not registered [ 244.906062][T11537] tipc: Enabling of bearer rejected, media not registered [ 244.971103][T11537] tipc: Enabling of bearer rejected, media not registered [ 245.019546][T11537] tipc: Enabling of bearer rejected, media not registered [ 245.074709][T11537] tipc: Enabling of bearer rejected, media not registered [ 245.125049][T11537] tipc: Enabling of bearer rejected, media not registered [ 245.148585][T11562] netlink: 'syz.1.1579': attribute type 1 has an invalid length. [ 245.160193][T11537] tipc: Enabling of bearer rejected, media not registered [ 245.168309][T11537] tipc: Enabling of bearer rejected, media not registered [ 245.197837][T11537] tipc: Enabling of bearer rejected, media not registered [ 245.231282][T11537] tipc: Enabling of bearer rejected, media not registered [ 245.254246][T11537] tipc: Enabling of bearer rejected, media not registered [ 245.272481][T11537] tipc: Enabling of bearer rejected, media not registered [ 245.291124][T11537] tipc: Enabling of bearer rejected, media not registered [ 245.321317][T11537] tipc: Enabling of bearer rejected, media not registered [ 245.342877][T11537] tipc: Enabling of bearer rejected, media not registered [ 245.355304][T11537] tipc: Enabling of bearer rejected, media not registered [ 245.366141][T11537] tipc: Enabling of bearer rejected, media not registered [ 245.375811][T11537] tipc: Enabling of bearer rejected, media not registered [ 245.385652][T11570] netlink: 'syz.1.1581': attribute type 1 has an invalid length. [ 245.454266][T11570] 8021q: adding VLAN 0 to HW filter on device bond6 [ 245.462883][T11537] tipc: Enabling of bearer rejected, media not registered [ 245.503042][T11576] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 245.575849][T11581] netlink: 14448 bytes leftover after parsing attributes in process `syz.3.1585'. [ 245.602524][T11574] veth5: entered promiscuous mode [ 245.616398][T11574] bond6: (slave veth5): Enslaving as an active interface with an up link [ 245.698461][T11585] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1586'. [ 246.313788][T11614] netlink: 'syz.2.1593': attribute type 10 has an invalid length. [ 246.322514][T11619] __nla_validate_parse: 1 callbacks suppressed [ 246.322534][T11619] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1596'. [ 246.344486][T11608] syz.0.1592 (11608) used greatest stack depth: 17832 bytes left [ 246.488734][T11627] tipc: Enabling of bearer rejected, failed to enable media [ 246.498036][T11627] netlink: 'syz.0.1598': attribute type 23 has an invalid length. [ 246.672047][T11634] x_tables: duplicate underflow at hook 2 [ 246.725523][T11644] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1604'. [ 246.757523][T11641] netlink: 'syz.1.1601': attribute type 10 has an invalid length. [ 246.780876][T11641] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1601'. [ 246.809006][T11648] netlink: 'syz.4.1605': attribute type 1 has an invalid length. [ 246.820638][T11648] netlink: 228 bytes leftover after parsing attributes in process `syz.4.1605'. [ 246.940672][T11654] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1604'. [ 246.950287][T11654] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1604'. [ 246.994961][T11644] hsr_slave_1 (unregistering): left promiscuous mode [ 247.014505][T11641] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 247.023307][T11641] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 247.035298][T11641] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 247.075499][T11653] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1604'. [ 247.500275][T11680] netlink: 'syz.0.1614': attribute type 10 has an invalid length. [ 247.515730][T11680] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1614'. [ 247.541490][T11680] batadv0: entered promiscuous mode [ 247.554531][T11680] bridge0: port 3(batadv0) entered blocking state [ 247.569356][T11680] bridge0: port 3(batadv0) entered disabled state [ 248.030200][ T7472] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 248.040352][ T7472] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 248.236162][T11723] Bluetooth: hci0: invalid length 39, exp 2 for type 1 [ 248.390998][T11728] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1626'. [ 248.399634][T11735] netlink: 'syz.2.1627': attribute type 1 has an invalid length. [ 248.409280][T11735] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1627'. [ 248.473015][T11739] openvswitch: netlink: Key type 30 is not supported [ 248.824024][T11754] bond0: Error: Cannot enslave bond to itself. [ 249.099118][ T30] audit: type=1800 audit(1760533345.689:7): pid=11778 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1639" name="memory.events" dev="tmpfs" ino=1519 res=0 errno=0 [ 249.145069][T11774] veth7: entered promiscuous mode [ 249.202227][T11775] veth7: entered promiscuous mode [ 249.302030][T11788] syzkaller0: entered promiscuous mode [ 249.307759][T11788] syzkaller0: entered allmulticast mode [ 249.323815][T11788] syzkaller0: tun_net_xmit 1514 [ 249.339110][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 249.347177][ C1] lec:lec_tx_timeout: lec0 [ 249.352013][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 249.406379][T11792] netlink: 'syz.0.1646': attribute type 17 has an invalid length. [ 249.481669][T11799] netlink: 'syz.0.1646': attribute type 2 has an invalid length. [ 250.125821][T11846] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 250.280565][T11854] tipc: Enabled bearer , priority 0 [ 250.300835][T11854] syzkaller0: entered promiscuous mode [ 250.306379][T11854] syzkaller0: entered allmulticast mode [ 250.397885][T11865] tc_dump_action: action bad kind [ 250.408471][T11854] tipc: Resetting bearer [ 250.438297][T11852] tipc: Resetting bearer [ 250.483970][T11852] tipc: Disabling bearer [ 250.510657][T11876] validate_nla: 2 callbacks suppressed [ 250.510678][T11876] netlink: 'syz.2.1669': attribute type 2 has an invalid length. [ 250.527493][T11876] netlink: 'syz.2.1669': attribute type 1 has an invalid length. [ 250.725584][T11881] tipc: Enabled bearer , priority 0 [ 250.729682][T11883] IPv6: NLM_F_REPLACE set, but no existing node found! [ 250.734622][T11881] syzkaller0: entered promiscuous mode [ 250.750098][T11881] syzkaller0: entered allmulticast mode [ 250.773735][T11880] tipc: Resetting bearer [ 250.805025][T11880] tipc: Disabling bearer [ 251.002955][T11896] batadv_slave_0: entered promiscuous mode [ 251.018124][T11896] batadv_slave_0: entered allmulticast mode [ 251.374735][T11910] veth7: entered allmulticast mode [ 251.564196][T11924] netlink: 'syz.4.1685': attribute type 10 has an invalid length. [ 251.579403][T11927] openvswitch: netlink: Tunnel attr 20 out of range max 16 [ 251.591010][T11924] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 251.606448][T11924] __nla_validate_parse: 15 callbacks suppressed [ 251.606469][T11924] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1685'. [ 251.622815][T11927] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1686'. [ 251.733587][T11927] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1686'. [ 251.791145][T11936] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1690'. [ 251.835355][T11938] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 251.907174][T11940] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 251.960842][T11944] netlink: 252 bytes leftover after parsing attributes in process `syz.3.1692'. [ 252.108511][T11953] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1696'. [ 252.221848][T11949] delete_channel: no stack [ 252.267157][T11958] tipc: Enabled bearer , priority 0 [ 252.275634][T11958] syzkaller0: entered promiscuous mode [ 252.281726][T11958] syzkaller0: entered allmulticast mode [ 252.434395][T11963] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1700'. [ 252.444034][T11963] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1700'. [ 252.458131][T11958] tipc: Resetting bearer [ 252.493057][T11957] tipc: Resetting bearer [ 252.518694][T11957] tipc: Disabling bearer [ 252.556108][T11976] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 252.576938][T11976] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1703'. [ 252.586246][T11977] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1703'. [ 253.117276][T12005] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 253.601725][T12030] netlink: 'syz.2.1719': attribute type 12 has an invalid length. [ 253.735423][T12040] Bluetooth: MGMT ver 1.23 [ 254.271367][T12078] openvswitch: netlink: Message has 512 unknown bytes. [ 254.359087][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 254.367157][ C1] lec:lec_tx_timeout: lec0 [ 254.375696][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 254.805700][T12102] bridge_slave_1: left allmulticast mode [ 254.812159][T12102] bridge_slave_1: left promiscuous mode [ 254.818242][T12102] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.842571][T12102] bridge_slave_0: left allmulticast mode [ 254.850300][T12102] bridge_slave_0: left promiscuous mode [ 254.857457][T12102] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.911465][T12110] openvswitch: netlink: IP tunnel dst address not specified [ 255.157345][T12120] C: entered promiscuous mode [ 255.183812][T12120] tunl0: entered promiscuous mode [ 255.222175][T12120] gre0: entered promiscuous mode [ 255.250496][T12120] gretap0: entered promiscuous mode [ 255.267916][T12120] erspan0: entered promiscuous mode [ 255.280856][T12120] ip_vti0: entered promiscuous mode [ 255.496226][T12132] netlink: 'syz.3.1751': attribute type 10 has an invalid length. [ 255.551297][T12127] tipc: Enabling of bearer rejected, failed to enable media [ 255.792323][T12147] bridge0: port 4(vlan2) entered blocking state [ 255.819649][T12147] bridge0: port 4(vlan2) entered disabled state [ 255.829255][T12147] vlan2: entered allmulticast mode [ 255.842131][T12147] bridge0: entered allmulticast mode [ 255.856412][T12147] vlan2: left allmulticast mode [ 255.862560][T12147] bridge0: left allmulticast mode [ 255.876370][T12149] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 255.897308][T12157] wg1: entered promiscuous mode [ 255.960960][T12157] wg1: entered allmulticast mode [ 256.430237][T12193] netlink: 'syz.0.1768': attribute type 1 has an invalid length. [ 256.441547][T12195] netlink: 'syz.4.1769': attribute type 10 has an invalid length. [ 256.479961][T12193] 8021q: adding VLAN 0 to HW filter on device bond3 [ 256.487705][T12195] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 256.553481][T12193] veth7: entered promiscuous mode [ 256.724729][T12212] netlink: 'syz.3.1774': attribute type 1 has an invalid length. [ 256.733593][T12212] __nla_validate_parse: 16 callbacks suppressed [ 256.733616][T12212] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1774'. [ 256.747394][T12214] netlink: 'syz.4.1775': attribute type 2 has an invalid length. [ 257.132800][T12237] netlink: zone id is out of range [ 257.138014][T12237] netlink: zone id is out of range [ 257.143399][T12238] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1782'. [ 257.178155][T12237] netlink: del zone limit has 8 unknown bytes [ 257.292659][T12247] netlink: 248 bytes leftover after parsing attributes in process `syz.1.1786'. [ 257.342394][T12254] netlink: 232 bytes leftover after parsing attributes in process `syz.0.1789'. [ 257.365453][T12249] bond1: option all_slaves_active: invalid value (222) [ 257.379787][T12249] bond1 (unregistering): Released all slaves [ 257.588028][T12271] netlink: 248 bytes leftover after parsing attributes in process `syz.4.1793'. [ 257.642638][T12267] batadv2: entered allmulticast mode [ 257.712719][T12282] netlink: 232 bytes leftover after parsing attributes in process `syz.0.1794'. [ 258.036160][T12304] sctp: [Deprecated]: syz.0.1800 (pid 12304) Use of int in maxseg socket option. [ 258.036160][T12304] Use struct sctp_assoc_value instead [ 258.147318][T12303] syzkaller0: entered promiscuous mode [ 258.153814][T12303] syzkaller0: entered allmulticast mode [ 258.229750][T12318] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 258.506731][T12336] SET target dimension over the limit! [ 258.620639][T12347] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1811'. [ 258.631659][T12347] netlink: 'syz.3.1811': attribute type 3 has an invalid length. [ 258.732167][T12350] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1813'. [ 258.810517][T12351] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1813'. [ 259.800861][T12350] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 259.998863][T12355] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1816'. [ 260.189170][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5810 ms [ 260.197285][ C1] lec:lec_tx_timeout: lec0 [ 260.202459][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 260.627083][T12396] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 260.640055][T12396] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 260.648046][T12396] gretap1: entered promiscuous mode [ 260.654502][T12396] gretap1: entered allmulticast mode [ 260.866718][T12401] syzkaller0: entered promiscuous mode [ 260.920026][T12401] syzkaller0: entered allmulticast mode [ 261.156324][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 262.429722][ T56] block nbd0: Possible stuck request ffff888024f77000: control (read@0,1024B). Runtime 150 seconds [ 262.440721][ T56] block nbd0: Possible stuck request ffff888024f771c0: control (read@1024,1024B). Runtime 150 seconds [ 262.452581][ T56] block nbd0: Possible stuck request ffff888024f77380: control (read@2048,1024B). Runtime 150 seconds [ 262.465149][ T56] block nbd0: Possible stuck request ffff888024f77540: control (read@3072,1024B). Runtime 150 seconds [ 262.637150][T12457] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 262.767161][T12473] netlink: 'syz.4.1849': attribute type 2 has an invalid length. [ 262.787942][T12473] __nla_validate_parse: 7 callbacks suppressed [ 262.788384][T12473] netlink: 119 bytes leftover after parsing attributes in process `syz.4.1849'. [ 262.837549][T12480] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 262.903679][T12479] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1851'. [ 263.098272][T12495] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1857'. [ 263.148704][ T30] audit: type=1804 audit(1760533359.739:8): pid=12496 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1855" name="/newroot/340/cgroup.controllers" dev="tmpfs" ino=1747 res=1 errno=0 [ 263.199964][ T30] audit: type=1800 audit(1760533359.739:9): pid=12496 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1855" name="cgroup.controllers" dev="tmpfs" ino=1747 res=0 errno=0 [ 263.259656][ T30] audit: type=1800 audit(1760533359.749:10): pid=12497 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1855" name="cgroup.controllers" dev="tmpfs" ino=1747 res=0 errno=0 [ 263.367347][T12512] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.1862'. [ 263.494576][T12519] netlink: 14436 bytes leftover after parsing attributes in process `syz.2.1864'. [ 263.507449][T12519] openvswitch: netlink: Key type 30 is not supported [ 263.658948][T12533] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.667775][T12533] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.865179][T12543] netlink: 596 bytes leftover after parsing attributes in process `syz.0.1872'. [ 264.165953][T12557] netlink: 'syz.3.1875': attribute type 9 has an invalid length. [ 264.392530][T12563] nftables ruleset with unbound chain [ 264.627546][T12576] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1879'. [ 264.794590][T12582] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1882'. [ 264.809991][T12582] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1882'. [ 264.904111][T12574] vlan1 (unregistering): left allmulticast mode [ 264.927957][T12574] veth0_vlan (unregistering): left allmulticast mode [ 265.131773][T12591] netlink: 'syz.1.1885': attribute type 3 has an invalid length. [ 265.201713][T12596] tipc: Enabled bearer , priority 0 [ 265.209112][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 265.217187][ C1] lec:lec_tx_timeout: lec0 [ 265.222637][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 265.230184][T12596] syzkaller0: entered promiscuous mode [ 265.235784][T12596] syzkaller0: entered allmulticast mode [ 265.276604][T12596] tipc: Resetting bearer [ 265.296854][T12593] tipc: Resetting bearer [ 265.313577][T12593] tipc: Disabling bearer [ 265.394273][T12610] Bluetooth: MGMT ver 1.23 [ 265.721237][T12628] xt_l2tp: wrong L2TP version: 0 [ 265.887988][T12634] macsec0: entered promiscuous mode [ 265.899403][T12634] macsec0: entered allmulticast mode [ 265.923330][T12636] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1895'. [ 265.946290][T12634] veth1_macvtap: entered allmulticast mode [ 265.964712][T12634] macsec0: left promiscuous mode [ 265.984661][T12634] macsec0: left allmulticast mode [ 266.004110][T12634] veth1_macvtap: left allmulticast mode [ 266.328964][T12651] netlink: 'syz.0.1899': attribute type 9 has an invalid length. [ 266.362734][T12651] netlink: 'syz.0.1899': attribute type 9 has an invalid length. [ 266.627934][T12661] ipt_REJECT: ECHOREPLY no longer supported. [ 266.737799][T12666] netlink: 'syz.2.1904': attribute type 2 has an invalid length. [ 267.558335][T12687] netlink: 'syz.3.1909': attribute type 1 has an invalid length. [ 267.723620][T12693] bridge4: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 268.030459][T12712] vxcan1: tx drop: invalid da for name 0x0000000000000018 [ 268.152881][T12714] netlink: 'syz.2.1917': attribute type 10 has an invalid length. [ 268.171432][T12714] __nla_validate_parse: 3 callbacks suppressed [ 268.171457][T12714] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1917'. [ 268.230204][T12714] dummy0: entered promiscuous mode [ 268.271989][T12714] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 268.307416][T12718] tipc: Enabled bearer , priority 0 [ 268.459326][T12718] syzkaller0: entered promiscuous mode [ 268.465988][T12718] syzkaller0: entered allmulticast mode [ 268.475593][T12718] tipc: Resetting bearer [ 268.583909][T12733] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1921'. [ 268.746037][T12717] tipc: Resetting bearer [ 268.842840][T12743] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1924'. [ 269.319753][ T5918] tipc: Node number set to 2992907750 [ 270.229374][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 270.237445][ C1] lec:lec_tx_timeout: lec0 [ 270.242280][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 270.631881][T12717] tipc: Disabling bearer [ 271.031500][T12788] netlink: 196 bytes leftover after parsing attributes in process `syz.4.1939'. [ 271.042963][T12788] netlink: 'syz.4.1939': attribute type 10 has an invalid length. [ 271.051045][T12788] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1939'. [ 271.113557][T12791] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1939'. [ 271.625184][T12811] netlink: 'syz.2.1943': attribute type 16 has an invalid length. [ 271.649586][T12811] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1943'. [ 271.672657][T12813] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1945'. [ 272.476879][T12851] bond2: option resend_igmp: invalid value (32767) [ 272.480129][T12854] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1959'. [ 272.484003][T12851] bond2: option resend_igmp: allowed values 0 - 255 [ 272.504292][T12851] bond2 (unregistering): Released all slaves [ 272.551761][T12858] wg1: entered promiscuous mode [ 272.556727][T12858] wg1: entered allmulticast mode [ 272.758411][T12868] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1964'. [ 272.758973][T12863] tipc: Enabled bearer , priority 0 [ 272.785295][T12867] : renamed from vlan0 [ 272.852805][T12863] syzkaller0: entered promiscuous mode [ 272.875489][T12863] syzkaller0: entered allmulticast mode [ 272.966948][T12869] tipc: Resetting bearer [ 273.010450][T12869] tipc: Disabling bearer [ 273.099170][T12882] bridge_slave_0: entered promiscuous mode [ 273.253181][T12892] netlink: 'syz.3.1970': attribute type 1 has an invalid length. [ 273.256178][T12890] __nla_validate_parse: 2 callbacks suppressed [ 273.256201][T12890] netlink: 14436 bytes leftover after parsing attributes in process `syz.1.1968'. [ 273.313748][T12890] openvswitch: netlink: Missing key (keys=40, expected=100) [ 273.352437][T12898] wg1 speed is unknown, defaulting to 1000 [ 273.388216][T12900] bond2: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 273.441137][T12900] bond2: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 273.483727][T12892] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1970'. [ 273.498654][T12900] bond2: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 273.593879][T12898] wg1 speed is unknown, defaulting to 1000 [ 273.600019][T12908] tipc: Enabling of bearer rejected, already enabled [ 273.616836][T12892] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1970'. [ 273.627051][T12898] wg1 speed is unknown, defaulting to 1000 [ 273.673035][T12898] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 273.726435][T12898] wg1 speed is unknown, defaulting to 1000 [ 273.751267][T12898] wg1 speed is unknown, defaulting to 1000 [ 273.779484][T12898] wg1 speed is unknown, defaulting to 1000 [ 273.787444][T12898] wg1 speed is unknown, defaulting to 1000 [ 273.828930][T12898] wg1 speed is unknown, defaulting to 1000 [ 274.026987][T12927] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 274.046391][T12932] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 274.064571][T12939] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1981'. [ 274.114050][T12939] unsupported nlmsg_type 40 [ 274.476364][T12956] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1987'. [ 274.487984][T12946] xt_CT: No such helper "pptp" [ 274.497262][T12956] tipc: Enabled bearer , priority 0 [ 274.571648][T12956] syzkaller0: entered promiscuous mode [ 274.589913][T12956] syzkaller0: entered allmulticast mode [ 274.651004][T12961] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1985'. [ 274.732019][T12956] tipc: Resetting bearer [ 274.763237][T12963] netlink: 277 bytes leftover after parsing attributes in process `syz.1.1989'. [ 274.789482][T12955] tipc: Resetting bearer [ 274.872690][T12955] tipc: Disabling bearer [ 274.948056][T12973] netlink: 'syz.4.1992': attribute type 1 has an invalid length. [ 275.081652][T12973] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1992'. [ 275.249117][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 275.257279][ C1] lec:lec_tx_timeout: lec0 [ 275.262317][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 275.337284][T12993] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1997'. [ 275.347122][T12993] openvswitch: netlink: Message has 512 unknown bytes. [ 275.361284][T12993] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1997'. [ 275.374436][T12975] bond2: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 275.400668][T12975] bond2: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 275.422822][T12975] bond2: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 276.907151][T12986] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 277.075743][T13005] netlink: 'syz.0.2002': attribute type 1 has an invalid length. [ 277.368061][T13023] netlink: 'syz.3.2008': attribute type 1 has an invalid length. [ 277.397275][T13023] xt_socket: unknown flags 0xe4 [ 277.417724][T13028] tipc: Enabled bearer , priority 0 [ 277.431698][T13028] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 277.464946][T13028] tipc: Resetting bearer [ 277.525587][T13026] tipc: Disabling bearer [ 277.631075][T13037] syzkaller1: entered promiscuous mode [ 277.646901][T13037] syzkaller1: entered allmulticast mode [ 277.900565][T13050] wg1 speed is unknown, defaulting to 1000 [ 278.324379][T13072] netlink: 'syz.4.2024': attribute type 1 has an invalid length. [ 278.337339][T13069] batadv_slave_1: entered promiscuous mode [ 278.344473][T13068] batadv_slave_1: left promiscuous mode [ 278.355629][T13072] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 278.406354][T13081] netlink: 'syz.3.2023': attribute type 3 has an invalid length. [ 278.531537][T13094] __nla_validate_parse: 4 callbacks suppressed [ 278.531557][T13094] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2026'. [ 279.066027][T13122] netlink: 'syz.0.2037': attribute type 83 has an invalid length. [ 279.104234][T13122] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2037'. [ 279.137805][T13122] netlink: 'syz.0.2037': attribute type 1 has an invalid length. [ 279.146297][T13122] netlink: 'syz.0.2037': attribute type 2 has an invalid length. [ 279.455609][T13144] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2039'. [ 279.471361][T13145] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2041'. [ 279.613741][T13158] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2042'. [ 279.924271][T13178] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2049'. [ 280.078519][T13191] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2053'. [ 280.096216][T13189] team0: Port device geneve3 added [ 280.103654][ T7466] netdevsim netdevsim2 netdevsim0: set [1, 2] type 2 family 0 port 20003 - 0 [ 280.115404][T11189] netdevsim netdevsim2 netdevsim1: set [1, 2] type 2 family 0 port 20003 - 0 [ 280.148855][T11189] netdevsim netdevsim2 netdevsim2: set [1, 2] type 2 family 0 port 20003 - 0 [ 280.181571][T11189] netdevsim netdevsim2 netdevsim3: set [1, 2] type 2 family 0 port 20003 - 0 [ 280.205597][T13196] tipc: Enabled bearer , priority 0 [ 280.269482][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 280.277640][ C1] lec:lec_tx_timeout: lec0 [ 280.283101][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 280.370873][T13209] tipc: Enabled bearer , priority 0 [ 280.378702][T13209] syzkaller0: entered promiscuous mode [ 280.384597][T13209] syzkaller0: entered allmulticast mode [ 280.410883][T13209] tipc: Resetting bearer [ 280.477145][T13208] tipc: Resetting bearer [ 280.513239][T13208] tipc: Disabling bearer [ 280.707341][T13224] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$ULvyڇv[Dwz [ 280.945557][T13235] svc: failed to register nfsdv3 RPC service (errno 111). [ 280.974220][T13192] tipc: Disabling bearer [ 280.975697][T13243] netlink: 'syz.2.2066': attribute type 1 has an invalid length. [ 280.982347][T13235] svc: failed to register nfsaclv3 RPC service (errno 111). [ 281.011393][T13243] netlink: 'syz.2.2066': attribute type 10 has an invalid length. [ 281.030087][T13245] xt_TCPMSS: Only works on TCP SYN packets [ 281.038613][T13243] netlink: 'syz.2.2066': attribute type 4 has an invalid length. [ 281.070148][T13243] netlink: 136 bytes leftover after parsing attributes in process `syz.2.2066'. [ 281.441474][T13263] Bluetooth: hci0: invalid length 39, exp 2 for type 23 [ 281.620698][T13279] raw_sendmsg: syz.0.2076 forgot to set AF_INET. Fix it! [ 281.825095][T13301] dvmrp0: entered allmulticast mode [ 282.004060][T13308] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2082'. [ 282.217861][T13325] tipc: Can't bind to reserved service type 1 [ 282.221339][T13322] netlink: 'syz.1.2083': attribute type 1 has an invalid length. [ 282.265813][T13322] nbd: error processing sock list [ 282.271871][T13322] block nbd1: shutting down sockets [ 282.353168][T13330] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2087'. [ 282.366108][T13332] netlink: 'syz.3.2088': attribute type 5 has an invalid length. [ 283.373864][T13397] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 283.387674][T13388] bond3: Unable to set up delay as MII monitoring is disabled [ 283.400404][T13388] bond3 (unregistering): Released all slaves [ 283.824544][T13420] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 283.847069][T13415] __nla_validate_parse: 5 callbacks suppressed [ 283.847090][T13415] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2108'. [ 283.883854][T13417] netlink: 'syz.2.2107': attribute type 1 has an invalid length. [ 284.280930][T13450] tipc: Enabling of bearer rejected, failed to enable media [ 284.439401][T13460] netlink: 364 bytes leftover after parsing attributes in process `syz.0.2122'. [ 284.509986][T13468] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2121'. [ 284.753321][T13481] netlink: 'syz.2.2131': attribute type 2 has an invalid length. [ 284.802420][T13482] netlink: 'syz.1.2130': attribute type 10 has an invalid length. [ 284.876031][T13486] wg1 speed is unknown, defaulting to 1000 [ 285.104685][T13500] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2136'. [ 285.153441][T13500] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2136'. [ 285.278378][T13507] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 285.299143][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 285.301966][T13507] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.307279][ C1] lec:lec_tx_timeout: lec0 [ 285.307357][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 285.336916][T13507] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 285.379560][T13507] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 20003 - 0 [ 285.507117][T13507] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 285.541474][T13507] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.569249][T13507] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 285.579989][T13507] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 20003 - 0 [ 285.831668][T13507] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 285.846155][T13507] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.875935][T13507] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 285.906273][T13507] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 20003 - 0 [ 285.935896][T13545] tipc: Enabled bearer , priority 0 [ 285.937654][T13543] xt_NFQUEUE: number of queues (16) out of range (got 65549) [ 285.992245][T13507] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 286.002989][T13507] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.019642][T13507] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 286.030692][T13507] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 20003 - 0 [ 286.068983][T13545] tipc: Disabling bearer [ 286.318103][T13554] syzkaller0: entered promiscuous mode [ 286.324017][T13554] syzkaller0: entered allmulticast mode [ 286.331713][ T7473] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 286.340791][ T7473] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20003 - 0 [ 286.354412][ T7473] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 19999 - 0 [ 286.385016][ T7473] netdevsim netdevsim2 eth0: set [1, 2] type 2 family 0 port 6081 - 0 [ 286.542946][T13564] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2155'. [ 288.370421][ T7474] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 288.378928][ T7474] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20003 - 0 [ 288.387767][ T7474] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 19999 - 0 [ 288.396175][ T7474] netdevsim netdevsim2 eth1: set [1, 2] type 2 family 0 port 6081 - 0 [ 288.424706][ T37] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 288.449888][ T37] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20003 - 0 [ 288.458272][ T37] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 19999 - 0 [ 288.467057][ T37] netdevsim netdevsim2 eth2: set [1, 2] type 2 family 0 port 6081 - 0 [ 288.514666][ T7474] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 288.530221][ T7474] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20003 - 0 [ 288.539740][ T7474] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 19999 - 0 [ 288.548087][ T7474] netdevsim netdevsim2 eth3: set [1, 2] type 2 family 0 port 6081 - 0 [ 288.574301][T13505] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 288.603301][T13505] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20003 - 0 [ 288.615243][T13505] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 288.626859][T13505] netdevsim netdevsim2 eth3 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0 [ 288.645623][T13598] netlink: 'syz.3.2159': attribute type 5 has an invalid length. [ 288.654175][ T7474] ================================================================== [ 288.662298][ T7474] BUG: KASAN: slab-use-after-free in __mutex_lock+0x147/0x1350 [ 288.669895][ T7474] Read of size 8 at addr ffff88807c0752b0 by task kworker/u8:24/7474 [ 288.677994][ T7474] [ 288.680372][ T7474] CPU: 1 UID: 0 PID: 7474 Comm: kworker/u8:24 Not tainted syzkaller #0 PREEMPT(full) [ 288.680402][ T7474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 288.680418][ T7474] Workqueue: udp_tunnel_nic udp_tunnel_nic_device_sync_work [ 288.680463][ T7474] Call Trace: [ 288.680472][ T7474] [ 288.680481][ T7474] dump_stack_lvl+0x189/0x250 [ 288.680507][ T7474] ? __kasan_check_byte+0x12/0x40 [ 288.680543][ T7474] ? __pfx_dump_stack_lvl+0x10/0x10 [ 288.680565][ T7474] ? lock_release+0x4b/0x3e0 [ 288.680590][ T7474] ? __virt_addr_valid+0x4a5/0x5c0 [ 288.680621][ T7474] print_report+0xca/0x240 [ 288.680647][ T7474] ? __mutex_lock+0x147/0x1350 [ 288.680674][ T7474] kasan_report+0x118/0x150 [ 288.680692][ T7474] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 288.680716][ T7474] ? __mutex_lock+0x147/0x1350 [ 288.680748][ T7474] __mutex_lock+0x147/0x1350 [ 288.680778][ T7474] ? __mutex_lock+0x5bb/0x1350 [ 288.680808][ T7474] ? udp_tunnel_nic_device_sync_work+0x39/0xa50 [ 288.680836][ T7474] ? __pfx___mutex_lock+0x10/0x10 [ 288.680866][ T7474] ? __lock_acquire+0xab9/0xd20 [ 288.680893][ T7474] udp_tunnel_nic_device_sync_work+0x39/0xa50 [ 288.680922][ T7474] ? process_scheduled_works+0x9ef/0x17b0 [ 288.680944][ T7474] ? process_scheduled_works+0x9ef/0x17b0 [ 288.680968][ T7474] process_scheduled_works+0xae1/0x17b0 [ 288.681007][ T7474] ? __pfx_process_scheduled_works+0x10/0x10 [ 288.681040][ T7474] worker_thread+0x8a0/0xda0 [ 288.681078][ T7474] kthread+0x711/0x8a0 [ 288.681109][ T7474] ? __pfx_worker_thread+0x10/0x10 [ 288.681131][ T7474] ? __pfx_kthread+0x10/0x10 [ 288.681160][ T7474] ? _raw_spin_unlock_irq+0x23/0x50 [ 288.681183][ T7474] ? lockdep_hardirqs_on+0x9c/0x150 [ 288.681207][ T7474] ? __pfx_kthread+0x10/0x10 [ 288.681242][ T7474] ret_from_fork+0x4bc/0x870 [ 288.681266][ T7474] ? __pfx_ret_from_fork+0x10/0x10 [ 288.681292][ T7474] ? __switch_to_asm+0x39/0x70 [ 288.681317][ T7474] ? __switch_to_asm+0x33/0x70 [ 288.681340][ T7474] ? __pfx_kthread+0x10/0x10 [ 288.681368][ T7474] ret_from_fork_asm+0x1a/0x30 [ 288.681402][ T7474] [ 288.681410][ T7474] [ 288.885272][ T7474] Allocated by task 13507: [ 288.889779][ T7474] kasan_save_track+0x3e/0x80 [ 288.894560][ T7474] __kasan_kmalloc+0x93/0xb0 [ 288.899164][ T7474] __kmalloc_noprof+0x411/0x7f0 [ 288.904040][ T7474] udp_tunnel_nic_netdevice_event+0x4c3/0x1810 [ 288.910206][ T7474] notifier_call_chain+0x1b6/0x3e0 [ 288.915547][ T7474] register_netdevice+0x1608/0x1ae0 [ 288.920770][ T7474] nsim_create+0xae8/0xf10 [ 288.925197][ T7474] __nsim_dev_port_add+0x6b6/0xb10 [ 288.930320][ T7474] nsim_dev_port_add_all+0x37/0xf0 [ 288.935537][ T7474] nsim_dev_reload_up+0x451/0x780 [ 288.940580][ T7474] devlink_reload+0x4e9/0x8d0 [ 288.945267][ T7474] devlink_nl_reload_doit+0xb35/0xd50 [ 288.950652][ T7474] genl_family_rcv_msg_doit+0x215/0x300 [ 288.956223][ T7474] genl_rcv_msg+0x60e/0x790 [ 288.960740][ T7474] netlink_rcv_skb+0x208/0x470 [ 288.965515][ T7474] genl_rcv+0x28/0x40 [ 288.969511][ T7474] netlink_unicast+0x82c/0x9e0 [ 288.974294][ T7474] netlink_sendmsg+0x805/0xb30 [ 288.979071][ T7474] __sock_sendmsg+0x219/0x270 [ 288.983774][ T7474] ____sys_sendmsg+0x505/0x830 [ 288.988549][ T7474] ___sys_sendmsg+0x21f/0x2a0 [ 288.993233][ T7474] __x64_sys_sendmsg+0x19b/0x260 [ 288.998194][ T7474] do_syscall_64+0xfa/0xfa0 [ 289.002712][ T7474] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.008615][ T7474] [ 289.010948][ T7474] Freed by task 13505: [ 289.015027][ T7474] kasan_save_track+0x3e/0x80 [ 289.019727][ T7474] __kasan_save_free_info+0x46/0x50 [ 289.024937][ T7474] __kasan_slab_free+0x5c/0x80 [ 289.029716][ T7474] kfree+0x19a/0x6d0 [ 289.033636][ T7474] udp_tunnel_nic_netdevice_event+0x11ab/0x1810 [ 289.039887][ T7474] notifier_call_chain+0x1b6/0x3e0 [ 289.045032][ T7474] unregister_netdevice_many_notify+0x1860/0x2390 [ 289.051463][ T7474] unregister_netdevice_queue+0x33c/0x380 [ 289.057211][ T7474] nsim_destroy+0x1dd/0x670 [ 289.061744][ T7474] __nsim_dev_port_del+0x14d/0x1b0 [ 289.066865][ T7474] nsim_dev_reload_destroy+0x288/0x490 [ 289.072335][ T7474] nsim_dev_reload_down+0x8a/0xc0 [ 289.077370][ T7474] devlink_reload+0x1b3/0x8d0 [ 289.082056][ T7474] devlink_nl_reload_doit+0xb35/0xd50 [ 289.087464][ T7474] genl_family_rcv_msg_doit+0x215/0x300 [ 289.093114][ T7474] genl_rcv_msg+0x60e/0x790 [ 289.097636][ T7474] netlink_rcv_skb+0x208/0x470 [ 289.102408][ T7474] genl_rcv+0x28/0x40 [ 289.106403][ T7474] netlink_unicast+0x82c/0x9e0 [ 289.111199][ T7474] netlink_sendmsg+0x805/0xb30 [ 289.115976][ T7474] __sock_sendmsg+0x219/0x270 [ 289.120664][ T7474] ____sys_sendmsg+0x505/0x830 [ 289.125438][ T7474] ___sys_sendmsg+0x21f/0x2a0 [ 289.130129][ T7474] __x64_sys_sendmsg+0x19b/0x260 [ 289.135093][ T7474] do_syscall_64+0xfa/0xfa0 [ 289.139616][ T7474] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.145545][ T7474] [ 289.147879][ T7474] Last potentially related work creation: [ 289.153606][ T7474] kasan_save_stack+0x3e/0x60 [ 289.158296][ T7474] kasan_record_aux_stack+0xbd/0xd0 [ 289.163505][ T7474] insert_work+0x3d/0x330 [ 289.167847][ T7474] __queue_work+0xbaf/0xfb0 [ 289.172361][ T7474] queue_work_on+0x181/0x270 [ 289.176959][ T7474] __udp_tunnel_nic_add_port+0xb71/0xd60 [ 289.182610][ T7474] udp_tunnel_push_rx_port+0x17d/0x200 [ 289.188078][ T7474] geneve_offload_rx_ports+0xd7/0x160 [ 289.193474][ T7474] geneve_netdevice_event+0x6a/0x80 [ 289.198686][ T7474] notifier_call_chain+0x1b6/0x3e0 [ 289.203811][ T7474] call_netdevice_notifiers+0x88/0xc0 [ 289.209200][ T7474] udp_tunnel_nic_netdevice_event+0xdff/0x1810 [ 289.215375][ T7474] notifier_call_chain+0x1b6/0x3e0 [ 289.220500][ T7474] register_netdevice+0x1608/0x1ae0 [ 289.225714][ T7474] nsim_create+0xae8/0xf10 [ 289.230140][ T7474] __nsim_dev_port_add+0x6b6/0xb10 [ 289.235298][ T7474] nsim_dev_port_add_all+0x37/0xf0 [ 289.240421][ T7474] nsim_dev_reload_up+0x451/0x780 [ 289.245455][ T7474] devlink_reload+0x4e9/0x8d0 [ 289.250139][ T7474] devlink_nl_reload_doit+0xb35/0xd50 [ 289.255604][ T7474] genl_family_rcv_msg_doit+0x215/0x300 [ 289.261202][ T7474] genl_rcv_msg+0x60e/0x790 [ 289.265718][ T7474] netlink_rcv_skb+0x208/0x470 [ 289.270492][ T7474] genl_rcv+0x28/0x40 [ 289.274579][ T7474] netlink_unicast+0x82c/0x9e0 [ 289.279354][ T7474] netlink_sendmsg+0x805/0xb30 [ 289.284131][ T7474] __sock_sendmsg+0x219/0x270 [ 289.288843][ T7474] ____sys_sendmsg+0x505/0x830 [ 289.293619][ T7474] ___sys_sendmsg+0x21f/0x2a0 [ 289.298391][ T7474] __x64_sys_sendmsg+0x19b/0x260 [ 289.303339][ T7474] do_syscall_64+0xfa/0xfa0 [ 289.307851][ T7474] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.313849][ T7474] [ 289.316182][ T7474] Second to last potentially related work creation: [ 289.322767][ T7474] kasan_save_stack+0x3e/0x60 [ 289.327465][ T7474] kasan_record_aux_stack+0xbd/0xd0 [ 289.332678][ T7474] insert_work+0x3d/0x330 [ 289.337019][ T7474] __queue_work+0xcd2/0xfb0 [ 289.341530][ T7474] queue_work_on+0x181/0x270 [ 289.346141][ T7474] __udp_tunnel_nic_add_port+0xb71/0xd60 [ 289.351788][ T7474] udp_tunnel_push_rx_port+0x17d/0x200 [ 289.357258][ T7474] vxlan_offload_rx_ports+0x139/0x200 [ 289.362649][ T7474] vxlan_netdevice_event+0x111/0x470 [ 289.367947][ T7474] notifier_call_chain+0x1b6/0x3e0 [ 289.373078][ T7474] call_netdevice_notifiers+0x88/0xc0 [ 289.378495][ T7474] udp_tunnel_nic_netdevice_event+0xdff/0x1810 [ 289.384663][ T7474] notifier_call_chain+0x1b6/0x3e0 [ 289.389896][ T7474] register_netdevice+0x1608/0x1ae0 [ 289.395131][ T7474] nsim_create+0xae8/0xf10 [ 289.399555][ T7474] __nsim_dev_port_add+0x6b6/0xb10 [ 289.404677][ T7474] nsim_dev_port_add_all+0x37/0xf0 [ 289.409804][ T7474] nsim_dev_reload_up+0x451/0x780 [ 289.414872][ T7474] devlink_reload+0x4e9/0x8d0 [ 289.419563][ T7474] devlink_nl_reload_doit+0xb35/0xd50 [ 289.425057][ T7474] genl_family_rcv_msg_doit+0x215/0x300 [ 289.430621][ T7474] genl_rcv_msg+0x60e/0x790 [ 289.435139][ T7474] netlink_rcv_skb+0x208/0x470 [ 289.439920][ T7474] genl_rcv+0x28/0x40 [ 289.443915][ T7474] netlink_unicast+0x82c/0x9e0 [ 289.448695][ T7474] netlink_sendmsg+0x805/0xb30 [ 289.453468][ T7474] __sock_sendmsg+0x219/0x270 [ 289.458163][ T7474] ____sys_sendmsg+0x505/0x830 [ 289.462937][ T7474] ___sys_sendmsg+0x21f/0x2a0 [ 289.467631][ T7474] __x64_sys_sendmsg+0x19b/0x260 [ 289.472581][ T7474] do_syscall_64+0xfa/0xfa0 [ 289.477100][ T7474] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.483008][ T7474] [ 289.485337][ T7474] The buggy address belongs to the object at ffff88807c075200 [ 289.485337][ T7474] which belongs to the cache kmalloc-256 of size 256 [ 289.499392][ T7474] The buggy address is located 176 bytes inside of [ 289.499392][ T7474] freed 256-byte region [ffff88807c075200, ffff88807c075300) [ 289.513196][ T7474] [ 289.515526][ T7474] The buggy address belongs to the physical page: [ 289.521948][ T7474] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7c074 [ 289.530720][ T7474] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 289.539240][ T7474] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 289.547262][ T7474] page_type: f5(slab) [ 289.551257][ T7474] raw: 00fff00000000040 ffff88813ffa6b40 0000000000000000 dead000000000001 [ 289.559860][ T7474] raw: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000 [ 289.568471][ T7474] head: 00fff00000000040 ffff88813ffa6b40 0000000000000000 dead000000000001 [ 289.577165][ T7474] head: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000 [ 289.585847][ T7474] head: 00fff00000000001 ffffea0001f01d01 00000000ffffffff 00000000ffffffff [ 289.594527][ T7474] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 289.603214][ T7474] page dumped because: kasan: bad access detected [ 289.609642][ T7474] page_owner tracks the page as allocated [ 289.615367][ T7474] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5824, tgid 5824 (syz-executor), ts 98724290678, free_ts 98689744007 [ 289.636836][ T7474] post_alloc_hook+0x240/0x2a0 [ 289.641633][ T7474] get_page_from_freelist+0x2365/0x2440 [ 289.647194][ T7474] __alloc_frozen_pages_noprof+0x181/0x370 [ 289.653011][ T7474] alloc_pages_mpol+0x232/0x4a0 [ 289.657885][ T7474] allocate_slab+0x96/0x3a0 [ 289.662412][ T7474] ___slab_alloc+0xe94/0x18a0 [ 289.667105][ T7474] __slab_alloc+0x65/0x100 [ 289.671525][ T7474] __kmalloc_noprof+0x471/0x7f0 [ 289.676393][ T7474] fib_create_info+0x172d/0x3210 [ 289.681355][ T7474] fib_table_insert+0xc6/0x1b50 [ 289.686218][ T7474] fib_magic+0x2c4/0x390 [ 289.690466][ T7474] fib_add_ifaddr+0x144/0x5f0 [ 289.695151][ T7474] fib_inetaddr_event+0x12e/0x190 [ 289.700184][ T7474] notifier_call_chain+0x1b6/0x3e0 [ 289.705314][ T7474] blocking_notifier_call_chain+0x6a/0x90 [ 289.711065][ T7474] __inet_insert_ifa+0xa13/0xbf0 [ 289.716026][ T7474] page last free pid 23 tgid 23 stack trace: [ 289.722015][ T7474] __free_frozen_pages+0xbc4/0xd30 [ 289.727148][ T7474] rcu_core+0xca8/0x1770 [ 289.731398][ T7474] handle_softirqs+0x283/0x870 [ 289.736173][ T7474] run_ksoftirqd+0x9b/0x100 [ 289.740722][ T7474] smpboot_thread_fn+0x53f/0xa60 [ 289.745673][ T7474] kthread+0x711/0x8a0 [ 289.749768][ T7474] ret_from_fork+0x4bc/0x870 [ 289.754372][ T7474] ret_from_fork_asm+0x1a/0x30 [ 289.759151][ T7474] [ 289.761485][ T7474] Memory state around the buggy address: [ 289.767120][ T7474] ffff88807c075180: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 289.775191][ T7474] ffff88807c075200: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 289.783259][ T7474] >ffff88807c075280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 289.791433][ T7474] ^ [ 289.797078][ T7474] ffff88807c075300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 289.805147][ T7474] ffff88807c075380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 289.813231][ T7474] ================================================================== [ 289.864135][ T7474] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 289.871414][ T7474] CPU: 0 UID: 0 PID: 7474 Comm: kworker/u8:24 Not tainted syzkaller #0 PREEMPT(full) [ 289.880970][ T7474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 289.891042][ T7474] Workqueue: udp_tunnel_nic udp_tunnel_nic_device_sync_work [ 289.898346][ T7474] Call Trace: [ 289.901639][ T7474] [ 289.904583][ T7474] dump_stack_lvl+0x99/0x250 [ 289.909190][ T7474] ? __asan_memcpy+0x40/0x70 [ 289.913797][ T7474] ? __pfx_dump_stack_lvl+0x10/0x10 [ 289.919007][ T7474] ? __pfx__printk+0x10/0x10 [ 289.923634][ T7474] vpanic+0x237/0x6d0 [ 289.927640][ T7474] ? __pfx_vpanic+0x10/0x10 [ 289.932163][ T7474] ? preempt_schedule+0xae/0xc0 [ 289.937030][ T7474] ? __pfx_preempt_schedule+0x10/0x10 [ 289.942419][ T7474] panic+0xb9/0xc0 [ 289.946158][ T7474] ? __pfx_panic+0x10/0x10 [ 289.950599][ T7474] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 289.956558][ T7474] ? __mutex_lock+0x147/0x1350 [ 289.961345][ T7474] check_panic_on_warn+0x89/0xb0 [ 289.966332][ T7474] ? __mutex_lock+0x147/0x1350 [ 289.971111][ T7474] end_report+0x78/0x160 [ 289.975378][ T7474] kasan_report+0x129/0x150 [ 289.979891][ T7474] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 289.985799][ T7474] ? __mutex_lock+0x147/0x1350 [ 289.990584][ T7474] __mutex_lock+0x147/0x1350 [ 289.995192][ T7474] ? __mutex_lock+0x5bb/0x1350 [ 289.999987][ T7474] ? udp_tunnel_nic_device_sync_work+0x39/0xa50 [ 290.006248][ T7474] ? __pfx___mutex_lock+0x10/0x10 [ 290.011292][ T7474] ? __lock_acquire+0xab9/0xd20 [ 290.016157][ T7474] udp_tunnel_nic_device_sync_work+0x39/0xa50 [ 290.022244][ T7474] ? process_scheduled_works+0x9ef/0x17b0 [ 290.027975][ T7474] ? process_scheduled_works+0x9ef/0x17b0 [ 290.033713][ T7474] process_scheduled_works+0xae1/0x17b0 [ 290.039291][ T7474] ? __pfx_process_scheduled_works+0x10/0x10 [ 290.045295][ T7474] worker_thread+0x8a0/0xda0 [ 290.049915][ T7474] kthread+0x711/0x8a0 [ 290.054011][ T7474] ? __pfx_worker_thread+0x10/0x10 [ 290.059142][ T7474] ? __pfx_kthread+0x10/0x10 [ 290.063756][ T7474] ? _raw_spin_unlock_irq+0x23/0x50 [ 290.069061][ T7474] ? lockdep_hardirqs_on+0x9c/0x150 [ 290.074283][ T7474] ? __pfx_kthread+0x10/0x10 [ 290.078894][ T7474] ret_from_fork+0x4bc/0x870 [ 290.083496][ T7474] ? __pfx_ret_from_fork+0x10/0x10 [ 290.088626][ T7474] ? __switch_to_asm+0x39/0x70 [ 290.093405][ T7474] ? __switch_to_asm+0x33/0x70 [ 290.098182][ T7474] ? __pfx_kthread+0x10/0x10 [ 290.102786][ T7474] ret_from_fork_asm+0x1a/0x30 [ 290.107571][ T7474] [ 290.110937][ T7474] Kernel Offset: disabled [ 290.115272][ T7474] Rebooting in 86400 seconds..