last executing test programs: 4.064078917s ago: executing program 2 (id=2228): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$kcm(0xa, 0x3, 0x3a) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r2) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000140), 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000100)) getsockopt$packet_int(r4, 0x107, 0x12, 0x0, &(0x7f0000000240)) sendmsg$NL802154_CMD_NEW_INTERFACE(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01012dbd7000f90f002507000000080001000120000008000300", @ANYRES32=r2], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0xa8c4) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000500)="0000d0098b0000000000000008fe8a", 0xf}], 0x1, 0x0, 0x0, 0x900}, 0x60) 3.885945419s ago: executing program 2 (id=2232): r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x700, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x67, 0x0, 0x0, 0x2f, 0x0, @loopback, @loopback}}}}) (async) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000040)=@srh={0x29, 0x6, 0x4, 0x3, 0x2, 0x30, 0x6, [@empty, @private1, @mcast2]}, 0x38) 3.697654117s ago: executing program 2 (id=2234): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) bind$ax25(r0, &(0x7f0000000080)={{0x3, @bcast, 0x1}, [@null, @bcast, @default, @null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast]}, 0x48) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000010000000000010000000000000001410000001c001700000000000000006574683a7379a4bee846fe4814f3348345"], 0x38}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 3.364146431s ago: executing program 2 (id=2238): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8, 0x10001, 0x9, 0x1}, 0x48) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r0}, &(0x7f00000003c0), &(0x7f0000000400)}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r0}, &(0x7f00000003c0), &(0x7f0000000400)}, 0x20) r1 = socket(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f00000002c0)=@newqdisc={0x118, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x9}}, [@qdisc_kind_options=@q_netem={{0xa}, {0xf3, 0x2, {{}, [@TCA_NETEM_RATE64={0xc}, @TCA_NETEM_DELAY_DIST={0xa, 0x2, "58d5c080bbdd"}, @TCA_NETEM_LOSS={0x48, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x8}, @NETEM_LOSS_GE={0x14, 0x2, {0x0, 0x0, 0xe}}, @NETEM_LOSS_GI={0x18}]}, @TCA_NETEM_LOSS={0x60, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18}, @NETEM_LOSS_GE={0x14}, @NETEM_LOSS_GI={0x4}, @NETEM_LOSS_GI={0x18}]}, @TCA_NETEM_REORDER={0xc}]}}}]}, 0x118}}, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f0000000200)={'filter\x00', 0x4}, 0x68) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000000280)='bond0\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r4}, 0x10) 3.211521253s ago: executing program 2 (id=2242): accept4$tipc(0xffffffffffffffff, &(0x7f0000000080)=@id, &(0x7f00000000c0)=0x10, 0x80000) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000020603000000000000000000000000001400078008001240000000000500150002000000050001000600000005000500020000000500040000000000090002"], 0x4c}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa230180c200000008"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200e19}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100}, 0x95) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x1, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1ff}, 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x13) getsockopt$IP_VS_SO_GET_VERSION(r2, 0x0, 0x480, &(0x7f0000000200), &(0x7f0000000240)=0x40) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000040)={0x40, 0x1, 0x3}, 0x10) r4 = accept4(r3, &(0x7f0000000180)=@l2tp6, &(0x7f0000000100)=0x80, 0x80000) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0x1, 0x4}, 0x3) r5 = socket(0x840000000002, 0x3, 0xff) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="0600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="020007ffffffffff020000000000000094"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0xe, &(0x7f0000000780)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x20001, 0x0, 0x0, 0x0, 0x20fb}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) sendmsg$rds(r5, &(0x7f0000003a80)={&(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10, &(0x7f0000000dc0)=[{&(0x7f0000000200)=""/41, 0x29}], 0x1, 0x0, 0x0, 0x8000}, 0x48004) bpf$TOKEN_CREATE(0x24, &(0x7f0000000280)={0x0, r1}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000079109e000000000007000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x6, 0xc3, &(0x7f000000cf3d)=""/195, 0x41100, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x0, 0x800000}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) 3.019645172s ago: executing program 2 (id=2248): syz_emit_ethernet(0x3e, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x8, 0x0, 0x0, @dev, @mcast2, {[@routing={0x0, 0x0, 0xf5}]}}}}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x310, 0x0, 0x111, 0x4b4, 0x130, 0xd4feffff, 0x240, 0x20a, 0x278, 0x240, 0x278, 0x3, 0x0, {[{{@ipv6={@remote, @empty, [0x0, 0xffffff00], [], 'nicvf0\x00', 'team_slave_0\x00', {}, {}, 0x6, 0xfe}, 0x0, 0x108, 0x130, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[0x0, 0x1], [0x0, 0x1], 0x8, 0x0, 0x80, 0xe}}, @common=@ah={{0x30}, {[0x4d3, 0x4d5], 0xc, 0x6, 0x1}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xf7ff}}}, {{@ipv6={@loopback, @mcast2, [0x0, 0x0, 0x0, 0xffffffff], [], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x370) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x28b1b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e1f}]}}}]}, 0x3c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x8000) 2.372288214s ago: executing program 3 (id=2261): sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000300)={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x1, @remote}, 0x0, {0x2, 0x0, @private}, 'syz_tun\x00'}) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x1000, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x4}, @TCA_TBF_PBURST={0x8, 0x7, 0x22b}, @TCA_TBF_PARMS={0x28, 0x1, {{0xfb, 0x2, 0x0, 0x2, 0x0, 0x4}, {0x2, 0x2, 0xffff, 0x8, 0x2, 0x10}, 0x100000, 0x3, 0x229d}}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000bc0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r9, {0x0, 0xffe0}, {0x2, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r1) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r11, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r10, @ANYBLOB="200100e3418085c3f305f421000000d14c41f0abd1ce8a4aab79a5302e175bb52ab3e73f7c276ae522d4c36a2c615a5d53079637064de86cb0adf4d78a37433929912ee5509ae94fb5abad19b339d720b3c7de50b5534ac8d26d37253a0b1ed1c0e5263bcfb2038dd6e4e15eae7f57f9fc08cd9c7e864d1577b6"], 0x14}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000001b80)=0x0) sendmmsg(r0, &(0x7f00000055c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)="8bf6b782f7eacd5ab7eb5f5d58f9847dd41f403f7a7238c8aa42bfd713cf22f324b4a70f881170628f61e0cf1ff67fb2a35e4ca4b8da689ca6fa488d3dfcdcc736ece97e833154e379aef4a3dd3610fc695297a1f4daea555dfa050e7b60f5b41bf07d9a8f19d7e662e1ae751686ece838c3ba4292d9d4836ecbfe79ffd6bcf64517947f603b5b4c7d028aad8251d8307818b2c1e7664b813544ae12552a1f1c6dc384c391c6ea3513419e4c50b535ddb5dcdbc758757e69b2b460bf6890a83efef8d43459e0185d169708e32b69ff613704e1e42f69efdea6", 0xd9}, {&(0x7f0000000180)="4a818cc64573681c673cc1a1f54d2e3ec5396676a76cd71526e0884845fbb290a2b530980f98febeed468b2b123efc0d98cb156c1e45498c00a2b695fb59d6a0ca80e4039d20751112e7628cacb872ae7bc484d7e1ae6f6d8ea4b891586219efec401523219495450b9e8a05264326b53376386678c0276536169c8e8ed18a5f77a0cc63b0ad0cba98260dec0c687063", 0x90}, {&(0x7f00000003c0)="c01fb88e3c474ff3f91217b880f72bb89896d6dfa3bbee6e1bce8d7b67f67bcef82e636431aac3de00238c226a686f25ba706bd6e8d8b8e2c6239b4c0cf5aaad3b5f2caa42c565a00969c9b061d63061ce86fd98606ec201b80198cf96c3d4a6359495ca2175498c", 0x68}, {&(0x7f0000000440)="e1b45cd0992e7993b90b9816a86c0611d832650eebb927a0d1bc24fd74c8efdeb9deebb910f1adeaa601a655c5d9fe99467b6310ec5dd31ab6cf7ed36dc7fbc4418ae37cad731b9e9c43880870531481a7eb1780f2047466405574410fb9505286a0c8cc5e6d2696591d8642de8fb10b2af7c832bb71c7910dabd067044c43b0f40bbd3750c35d2f421f4f04705479ee2ee258fb1ea083f0ec872cd1efb72fcb", 0xa0}], 0x4, &(0x7f0000000580)=[{0x108, 0x29, 0xe92, "e6d87777dd5cf6e37a987e248a1516161ab964d34205e418e1e863fea658af182f00a0796c8e0c070dcac3c30e3fc129a9c76deb5fc92cddc7395c9d4c03ea173fc7e8c3199a92413f2a3a42466f840012cf6c7fcaec4d29152a5dd1950aecb64e6305350012462b54a072e398deb0b4242d5d852a597dac6362820f33880a8e2a0a942096c6cd89b1fe7625bf788d5e58ae0b0b4fea55a74f0fb09730835e04a76df4e3dee477fc82ccad78e716462412f16da3463878dc83a89235e304077e904bda2f4205dafeab80fd0f8a238b649cccacf8cbca09c64ffbf15b93168a40be8cd6d2a46e08a6bc42c105996cae508ef863"}, {0x80, 0x2ff6a2ff43ba6e84, 0xfd0, "a179bb48b8e2c33be53456bb074909e574e3d2198d9afff18c2885370929b1593ccc4d2f9c3abac50c7d18fe008d352a3a77a6a06ddc1d3b18c1a5f1d0b01aa7318d91b6d5ab7f81ba1a0f894f975e1aa29836f2a15caf7071e5fb18a95e15fd0068094a3b77f94fb15abfed3cd2b9"}, {0x40, 0x104, 0x2, "5954aabc79fdc119d80bc08a8628ee29c823189c51baf0013bf5ef1dc365ea20c177dec0115df41b83b141e380"}, {0xd0, 0x10b, 0x3, "043d8e11577830081ae356e4ed281e577700595d6dd84998a8a606fdd3e3c05c7c04eb20eff0800052d5c3e888bcd1df00dd98569ee4c096cece5f228edacccba1098445bf0ca5ea444b3158adee563ca67855417322024e76407d49aeedf5424288a625095a9502bb989997fb150f6bab05d4fe6290fe37f8ed3b556d624e4789857f6097ea072bcd1c6f540724581dd0a2be0d600e28a0ee77e088e0e5e7b5c09c9962214649d168c73bd1f352017b0fadd0fd5293eb0a63"}, {0x28, 0x6, 0x1e5, "319abebe949582d2c60fc13040b9fb778be8"}, {0x10, 0x111, 0x1}, {0x38, 0xa6, 0x7, "2c619b4d9e8e0c95492696ee486e1273a4be393ea15882ccd17afe7b3495a24c4cb4fc"}, {0x20, 0x115, 0xcc3, "cbf19c9ab1ed79a27f7677943b76"}], 0x328}}, {{&(0x7f00000008c0)=@in6={0xa, 0x4e22, 0x88, @mcast1, 0x9}, 0x80, &(0x7f0000001b00)=[{&(0x7f0000000940)="d20048a949bf8dba4fa5aae1ac2482502c7e401c71caac0007061500cb23bd225fb2dc18a4d09e0828dff929548052e0ae20da1e5b2aee683ea64aedd3b6db0357b351800da17acf5910270f7dd57bf7825fa3fd787e5c9e077b9f8c701144b76735d4949c48cfefdfbb71416d495318b1f865e969174705698f4a98be4ccabfbc4a6db02e0d5ef5143931d9a8a2813b9c73b57b05b1b856a7815deb9a5f", 0x9e}, {&(0x7f0000000a00)="4cc77479210400f344fea8cec11de463282c769c1247ee406755376269a8df7d322b78ea28af1f7596fa2bcfa938ae92646625bfbdb538020866743fcf76dfc2510f06e78cb8755363c241ee55554dd3dc31039c4d1003cb0ef92984e75a08c14c86774d953ee0edc4a954eea12171bd29784802a72d6603e84e50e7aaf7651189fb450791ba9c810858ebc4b3ac7af33fb2bab1fa6e83c8bfaec888770f2cac79c1e3a2a1eafa0e29eb961f2b63c9599359cad64e159cd1a887678dc68369edc4a12ca49e87b73309373826070d5ac6d3e1d9689bab60ee16b45e7dc3b6b566f982eb69caae310d945d66081253ee18d91a0f6e3c6d6c1db428a8b9308266235234521468d2ff9f79ea25266c52c544205c7544777497ecfda81d4b8d3649fc1df50903dc6f591fdb2514cbf7eb7aa58df45bb9a32327aa5e6eeb9263141ed256946b5d94aa1c8664542d8867d22a70442ad55a770e1678e3872549d5b81570003dcc513bdc1c9815349017cc566c7b660bbfb5eeeec1adbf3fa8d02336c3be0add7472b58247a2af04052a75b25974dc7a98e0b97f333f017fcf80002a938f732abee634a6b4b8980614c76cf8a2aee53846ca0b5ea6897fc1a7c968ca35caa13da389640965427b89338b0f17afe82ee112f6509f8fbd480a025ce3296c0ca2eb85aa07a3d33fe84009dfcfa365d64118de155733edd75782301ce316aba2695a28b1e90bc67d44c3a57d352804c6c74facd07106d97b3f065a376b23bafb18b4f8be136753525d3f15679fa6e84261065f204ae2d8e96973e36095b6a8c4123e226817993860dc37178e139fb19288d2991c16ea519ee450ee8dfba9777737b8a4f65f77015b778c56e767ba1c3e9c77dade98291d84ed4c96f9c0acd49fa6def5e7640e6457a7ea0e5108d2c828242f9d3227ee8550082443d5a15574ab83e36124982ed39701426d25d54dfe6fc076c70cf63871c3b1c18bfc2274baef345d86dc09ec4c6b33d4af49ead9885e42e9404ab6ca0c4d90cc70de83752839e373e8a4b1ed20981534ceb6085d1dacbf5d9d80198b6b92eeb0c980effc4fde9725bb7f00524116c3eda15c80ad6f3ffb343177c786dd6e04ac506c009f15c967f3f44b582839e3b2782c6144c5ea8ddcf21d946973556a07bbbcd81e550ce1c44c7029cf7cef6d46d07bf6b484cf81df22ad5fd583b7ed8884f147107ac203c6dae601ee158aca880a765bdfc1ed97d3adfc1b6af663ff0395d7e31eb0b63933a57ab64ef249f8a902178ee53a5161930297990b8cb9c2c6937d726627a41fbc8f8d32dc4475eaa436acaaa7cbc5b8d5583ed832afa7b71e278c43ddebbdfead8cc802e913d086f742d958528fef20fbf41275caca990caadca4d37fae97923cb75cf5cdfd6cbc5196f7e690dde905b37b54a224e52c2217e5b4cfe09ced91d77e43d226cd4304990278357992aa3517deefc6dea7dcc1d76bb70a26b677107d9fbd95802cc858f738386083b08744aa7aea45ebe8e581edb5d4108bb1d28d79619c24373db33dab109b8b7c832b4efaa262c85cbc5346ef76ed5f0c5f2639dc07d4966b9c01fcb02e02277015408a5373ab5707c890cad0e241e17f99bc064ccc6b1082be49c13e18fc768a06f3184093c6c59926dbb36c8d62ad458dff64a0b66aae3244ec95fade21901118b92cf156aca31c2de2593a92c3a8541f43fd71794f9d50340a1e43750ef3fef92a5a76886b602c0797bed28e3c9904262e96fef0dc77832e2241f6b92dada547d6bcc2dae984e4524d75e1956c983b05886de914a0ecd1f77c2e64840a8a1cde0cad089e8b3a0a9790f4c624fe9aa93381df929dbaf9b22a12109587b4a1e3af15bafabde973608c7959256817bcd6ace96bb8931f9b320b80fab6bc6bdd6da85d92ea16e2b6afa3cfa1ee74908a88cb61c373b521621b9ed2173490d26e0c7b9f216d0e7e9b1c490a06a8019a03c685dfa87e47be048040ab4342fd4485a7692798f86960d584d828507dfbf11acb97e8b764b0bc954188932184e8831631140fde864d164032ea31751aeb25320ad41c7f07d8579bb9a7f86b63b0eea36a42b716ab6d95ba94b4330db41a582ca4b5325d00f03fba52750041c0ea1d21d45588c2989689e8033df0e9d5732b94d44a67934c500cc5c8593cf1ab8e40136401be5dc627edd39b78ae9b55f0c7e875d9ddb93ad0a1744edb1d88379f7c502999547cd3a51384c34c36bdec3a5a33507b42517156b3b671cd49cbf01c4ea799c0b29de70c3543815f2d98df6a8b4c795a3934102de80883f3a868a466aa0a1c320178a1637c0009f75faa82ec9af925848c1cc02aa3fec8e5a2023fe0621eb44eca8922688ca9ec65c299f8170dcf367af6a0fa958e98123815d36118876d9df6e5e259c779195195cf829871478f76574dece65be482dc33e6e2a41d1296484a5e70f2b2305e634971c84da5926d3c264803e3177e1878dd757126b090e33397cd73f1c6b6d8e02e286dce239762aed3b928780345bc2cf0d3eac7f7043dac8d7658e9f8f429f3abb376846e369433a7ff2fd716c53e07a697f11064e4c6e19f345342a630cd7ce69af017733980765730536daf1d97b2e68e2d761ae7007b2737052b5bda9709bf422a615cb58aac212d9bb287f8063bfd8e921ceaf4a72b850841d39b68f2a014e86e8da200543d9e1293165b5c2f2a1c08f432368d7ea83a3f86daaa9e048b413ec76b569d38cb9db9821d4204bfb56d60785664f57b77940ce0b7dd4b3e3ce2d90448f2a20f39ffba58987b2994b724ac03136ae0540b1579bbfa65f700cbe73a8ee43f20d91b27f2dcb7b1b6b09f0f8cb4c5922a3ad664bf416d43ec02f0a02ef26c18ca5c7a1b4e3223ad5bf7607450ad555239c977beb240758e4377a65e66edd6ed2a0e11c90c7d304193add0eb1617277311a1d7eabeaa9d6cd059f33ab44b0c6991887b14fd3444816083437c275bdb34940ed5ff1ac8e9f79720d4a3cf64a1a2afbb4ae2ba83553721a3f145b1eeb9a170198c6b7ff4c39f5a947fe998e483e4d26a81083f43117410b6cebe9d1f0e09f22aee911be53929df207b60d9f52e8c69defaeb8cb0dd8d610fd2d50d2ee4b9fd36f87d3aa08e5386851fe30640e3e2b06ed6b1c91d0e9fe5cf32e44b7e6af3fcbf413a775bbb147b338c16cf2ef0ae6405d997323ae59e64bfe56dea796f465ed427e6b01545445ba31661a985ccd36161b5cc04bad6fcdcfe3a06748f0bf48668535ffea8f99cc6ad8d2ff7e81e9de2b021c5aa999c591020ab8d400a0be98372597039ff30609ff7f742b464bcbae04ec81feea1c11b85483768acdbfc9d4cc5204887eefafa5941b26be9f67e739743e28f2792cc2eb3c411a78d965ba5df5b48c03ba47b4961154fa4bc365cef36a3c08b9a570a89de623a17dba94868aab40ab55c81ea42418d9c68aeb592488969821ee4889556c092060a8e500f168ce50531f0b70cb8256acf15006e8a9944aa572618ec28865ac182ae76222ad88adcf4def29cb9769286e41a53d8206b473a5d54ce8db61843a650940b01647d2d0c3f181e0ce584a2ef01243455cf0c7f2972e068ce584904111176da00e9c14ed9f5c2adbc97223b18e0140abd82ae03bf670db8962423317ed239330b53fff2eec59a80a4fe935adb08e51c24492bc29f994c4df1b0e6113f0784f77af7e7f5b7b288615ce4ae1e75e9655b19f3c6f9c6e06f7bab9c56f2b9b602183f49b83c0e0195d09d2110a65a227795648385b4f125553e6ce50ff7310066bce4a96e910d8e7e3638c4dae3d19cef62e812daf126c808eaa0024bc58409c4c38ae927565f689ce7ce7f2d779435d56e2ff2bed1d7c8c0b545ef2d5b17b08003b910fbb2d015d71adc8c831bd9ab1b92fa07fd420ce533220410c92d6144823961e1139535cb783a08b79639bf062989398dce5c27f7cbc9fb9a469474c50e53180fcd4378a6ad81f621decf24f517b7bde29930248abedfbb5b7df26dfc2b9275b07e6e45fadf6874aa9f56bd94a16823b9b704cb86f8d5664262534049f35f8c6ba700e985496192350c8a27a0b009c44d5848ab84b7423759c0ac597c5ef5670d792f4c25df17744863047fe8adeb37dc2b685dd3ac2e6df7323052e76282a04d06f70d615e546fcd8506ee74b5ca789e89bd592c7d20f85449231a3a49ca5e855e9f116e50f7e49b5b8c78f0f3ba42fd806a39ef902fb3fc33f2883cc36cc9d5d21a1a980364318f5142abbb6cb660a9469e735bb02e25656ae556f087c4da62b2b14dc141b50c465256c9c9f337cca96b7d1854b001cf5e77283fc9957a99501ab46158e783d5b3bfb16389c67ddeb254779b9fbf99a97d7b9f52d26b3ae1956c7624037d5b9932ee03d6874f03b3e1f7b8cc99c96d1f8cee45a651a0a2cda1e6c444e4a404baeae55254657d482e99ead172caed17b9dc3a1d9b9e7ab1f2859c323e6d3173da5a94d98d6e871b78151039965add763c9779e1d6b91cb93f37ce192ef854512c00520e39380487cccb0fa69059af4f0555dec40e736c30c160944170e18dd904a673be0d809662be257e258080eafc933b8e15437a093203fa398f6ccec02d50c3a38d1400d128f04f8ac34070d6704a4086824311775160cf3a532cf292e9f2ff483b8245536fd7b453d87a55ace2b7570cd7608e8d7d21f300cae6b43b7e80fdd50c5e1537c56d5722f27c210e2d73030fd661e38d7f8dd965248d72b99b262c98554a6d646542dfd8795b5726816b62604f4859c1b1e5c6772d8445d3d124b5c5ad4cd0dbd9309cfd0dbc10ada09e017e5a1763b89658fbdc6377204be43997ab5e12b35538938cb5c0bdfd4dedcf584c02d5b801fccbf683553376c25121dbee377677223f72f63c9aa026ceba948f5492572c9790f374ccf92bdabb418511e00565be7c307d1aa93fc52724c532c553cc3b6b76fd6f3854cb4b5f985e45f63f0efef166410f2f63976319fc2d2583f4f57577827175f74798259ec5463dd04775f7f8dbf0efea8c9480a9128a3d3c236276cb10b2f436546447cb4c917e13e484c75448cf7aa25e39ba76e3ef7bb3ef5e482281019b3f723c8a80863fbcc445ba92ce9aed29d477d8803ea1df009111ef46d2323fc7f490253b9c0c32c8bdb929193b908d5b50438f813446a32f9cde0576e24b742a4a505e66a49482535eb2e1e4dde09748ac73770236baf462b437fd317eed36cd0002d9c43b58e620be5b238925bcb4dec3af4feffce3e1de0f2195891619efe059bb807e442b88a479e1a8f7d575c629dd453fc419f2751ec02f7ba3df6f6fb51a4de7acf79bfe20c79ee03bc287ee138071eb2529d5d5f6bed815c71aaaa579dd499290b76a292e77912e2d79ff4e3d859dd8f2d4eeca9b1b9455e863299d50842bfc750d831730b0fb30e30c2dced7735bd4e531c7e0cc0c2827ffd1864ccab431cb087aa434b31e41045e194a72502503b2ad61f0d080434789cc0a1ffabc6327a4cb122793df48cd943499410af41acd0a7be77fc48ad4941ab7a6b9b1815b1a2943bdb3c6a005a83d1aaea7b8cc4c3ccd8074d10886633414c5715d6e70add101e9bcd1e021fb0a826b95e33016a5795d31eabdc449800ea37c4bd6a17b55f03494c2cd0797a4bc6e6564f0498bdd6777912be5c98922d4f90bb06bcec20541bd5f0ffd2c0dc91f412ff91803fc6bda0be5fae46a576dc974983cbe52e596d6a561e87bf7b0e4f64f8dea591d9cb578e9b95f71feb8", 0x1000}, {&(0x7f0000001a00)="5ac40af2c3097fc8b3ad1674dc7b21f9146593a6b8f9c3f0249ad3b6dd847d369c59099d072c3fa7347e900cd70c1a26186613957c2d4c94e404a8c9b7a813b77ce08bbf6998bd285172a72da1c8b83f82a8fa0fe448f8a74ede9d64d002ab435f454b3640487f15d5c878fdd86f595c6e00763353e095d5a027ac2e7a9063f15f9caf42f83f88c74d06b48ecdcb1ec7e3605f8642e886513f8a9bd27133ea50549ed5ab24a6cbb4fa3e1d858203aa27df0dd932f1bfe47268db65fda476a93350b1d91a94dc3cce1b26ae38273c03b8d7ec47b47a357c43f3190460e145c750bf1d30e504ff459f46", 0xe9}], 0x3, &(0x7f0000001b40)}}, {{&(0x7f0000001bc0)=@nfc_llcp={0x27, r12, 0x0, 0x3, 0x2, 0xd, "e1a52334340bf7c5d984d549c005e170e7bf99f37d7c64b8f823481c1e791865d00a5386cbb022e240c30b8c73c5c0dd4c4f2dd74148d640317b2fc8450670", 0x38}, 0x80, &(0x7f0000003f80)=[{&(0x7f0000001c40)="930f456eb5d2f5ce15cb338f4f8d1323a99c1d65469da844090096582ef54d40e885ab9d50445b604cbc94c20ba90f0067fbf136283dd734d11555ead1025a1bea6a8d5264671e7a1b3ec7", 0x4b}, {&(0x7f0000001cc0)="a9c9c5f2b1469b7902a75a171d62ce98bf5a8e0ce9282f1ca106034db3c4e1f769a666d1a9bd43ed2e349c5c50c92a345bb7624b376600c5fa265bebc733e6a34d468a7d5d76890302298537560d9f71f66cf206c87b88704d62fdc340dfe456f06517decfc72213ae71374d9336b1299e4c3811c5a852dfd130fe534d27bef187d2b59b10c66acc2af06147f0fdf4b7762db3f41e", 0x95}, {&(0x7f0000001d80)="01046ac1ffafcd9ae0a841ecaf793cbd4ee6594b3231053b6df3d2c4cf235d13b319be6b2f32063652fd44570069088988d2529201cfe9592a1b4fe94451e3d6a980502427afbe418ac96e", 0x4b}, {&(0x7f0000001e00)="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", 0x1000}, {&(0x7f0000002e00)="8bab5a03613a318816a24638e4d4ccccc10359ba9a02ecc05774165a0db0650132425fa52a18525271d4385c996f7a7e07a842ff9973097c433b83ebaf3cf8f243d3db2c4d0a9c188b529a89d6e01a2a50f18ab11900f6c9f698c633a8428a535c6c1521c6cf1b", 0x67}, {&(0x7f0000002e80)="dc852054f9ea71897082c6ca1f291bee3ca4a414e454df50ba44b9711729c730975fc81793a158ada84081580bbf977deca8b3c08c5251febcdb53f25dbd5f8ada111c2f464d8617bc0ad07cc14ae07ccbe1f7fca5da919bfd67c8ca2c166f6dc90a4d9a724e0ce1614f7d096e65254f3db449a2cfc8c3930c5be130eecdda36ef9d3cf18d4e45fb09a4f0148f860bde41cbf8522a055383adbc57ce6a66d10361906e2a5faf381c1e24f3cb0827987b61dff3a4730532", 0xb7}, {&(0x7f0000002f40)="485173dd81f9bb8817a3f71c41a490e09e5a84f1e551397505d7d1b7", 0x1c}, {&(0x7f0000002f80)="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", 0x1000}], 0x8, &(0x7f0000004000)=[{0x48, 0x111, 0x3, "1dcd16aeecf94d0d6ec313b2d7956727147370c40d0e288fa3fc996423428e4f0bd0e23901d3941512609cc27cb6f894ef8a4f7771"}, {0x1010, 0x104, 0x0, "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"}, {0xa8, 0x10a, 0x5, "81d129b253e72cf0ee352717a2d27dcfefcd446f67063226f2e9e58e7af919bb9dea2f3168a006daaf8a75080868adef875b013d1d915e6714089e23b1d4de022f034b2e91d2e852e8b42a56e0ea9ec8a800490c641dc1b1445ff212450adc53996c3a0332f6f5a5d44dce61eccce0c1a3255c84ab5cc4faa4a0dacb02ef440cb35c17f47d096f07e8345ead409d3acbf3"}], 0x1100}}, {{&(0x7f0000005100)=@ax25={{0x3, @bcast, 0x6}, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @bcast, @bcast]}, 0x80, &(0x7f0000005340)=[{&(0x7f0000005180)="0810c4bb229976666309cba93683f3d825bd70767f3da8d51c16dbc0019634c8b1cf16df38d694345dc57d67edb65370465a4fe865731976c474d9d6df6e53fe380e8c68ec2dfa852dcfa343bf41b9854ab31a2735ad664f2d1f1f76b71daef5380b070e4f364826153b2eebbba64416b3541bc4a60a962725843e0fc8df5ed2c535fe5fd7bebfb29546533ffe2dced85b5cd21d90dc5402bc095c32a0062b7b863f7f0c7bd879ced757e2b3ef2081d0581b65fdd005f1e92c43ba21b1b2ecc02f15fd2cee5478252cc283caeb8c", 0xce}, {&(0x7f0000005280)="032059", 0x3}, {&(0x7f00000052c0)="73530c77ab32df5c3b62292008a133730dc5de4665b3933ddb7a74fc1dbc1f9bf88cfccdd1ffe03d1e87c1645a157e9d8c582f934c8c199b31ccfa71062dc637bc40ed1379745a894b2a50eaca385dd5f5c1657450be290e91ddf3d05d9ab5cc768e371bcf60b0", 0x67}], 0x3, &(0x7f0000005380)=[{0x20, 0x11, 0x0, "5e17089a6ed1308a5ef12b"}, {0xc8, 0x119, 0x6, "042c19823c30588fd2cbc2c2a8f3999d53358949bc84398ac6ba8e56e911e001172b9c66ccdab93852ac9ba2ec0e4c48678857f6e898c6cfd5a89b880ca2fd55f8ee270ea89e2eb97cdfcf4352ab18c151362d2c60fbc74618db06c3544d270a3341406df71c5335a406402de6daebb2e85b20bd192b06710d3ff3948e6cf28b7b5b058df8d1ba2080495591301a65582454cfc446f617c7fb900a732879431cfd66c883b9ba3d402dc4112547fada5bd09419b1"}, {0x28, 0x1, 0x5, "8d9d9762b27193813a91b3533f5d788f36"}, {0xc0, 0x3a, 0x8, "af6c69abcba9e6d839f65805c52d1a9e4b4ddfd6c260c90ab763eb334b978a7f3fd1d7a37f96ebadf868916048eca46a0d0900557918543442d4ee9f530c199068ff8a73780979d529c9bea78201a0787d0efe9d4460c9668a45132a40b48f18c10099dafa9ab4349583dc23b73c098f166121d3c0bd248ba554763cc8bea571998dc47b5db22610877e54419c29b301bf1f1d77a969ecb03dd767927c5b63fe846512f21cd84a89a6"}, {0x50, 0x102, 0x4, "101c58af074a022eecc18675d118709971d3fdcd9e9b9dd8cbb61c11dacb43df40ed0257b2affc745ef2dfb1d2555cf70749250d3edd5604c8ef6c40ac0a"}], 0x220}}], 0x4, 0x0) 2.002975042s ago: executing program 1 (id=2266): r0 = socket$inet(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r2}, &(0x7f00000007c0), &(0x7f0000000640)=r1}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000240), &(0x7f0000000280)='%pS \x00'}, 0x20) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}, {0xfff1, 0xe}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x1, 0xc, 0x9], 0x0, [0x8, 0x4, 0x2, 0x0, 0x8, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff]}}]}}]}, 0x8c}}, 0x0) 1.822527292s ago: executing program 1 (id=2268): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x80, 0x3, 0x0, 0xfffffffd}, 0x10) sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_MARK={0x8, 0x10, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x20048084}, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={0x0, 0xf4}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x34080}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r3}, @IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x28}}]}}}]}, 0x44}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r4) sendmsg$IEEE802154_LLSEC_LIST_KEY(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x14, r5, 0x325, 0x709d27, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x10014}, 0x4008008) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@ipv4_newrule={0x24, 0x20, 0x1, 0x0, 0x0, {0x2, 0x0, 0x80}, [@FRA_SRC={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x24}}, 0x0) 1.723878378s ago: executing program 3 (id=2270): r0 = socket$netlink(0x10, 0x3, 0x4) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={0x50, 0x2, 0x9, 0x5, 0x0, 0x0, {}, [@NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x50}}, 0x0) (async) writev(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)="480000001500257f09004b01fcfc8c860a881300f217e0060000e3323909b8f8896e33719fe3bb036e0bc90900000000000000000000ffff5bf1090000d0bd5e000000006203005b", 0x48}], 0x1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) (async) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r3, 0x29, 0xcf, 0x0, 0x0) (async) bind$inet6(r3, &(0x7f00000003c0)={0xa, 0x4e22, 0xffffffff, @mcast1, 0x6}, 0x1c) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r2, 0x0) mmap(&(0x7f00009c5000/0x1000)=nil, 0x1000, 0x3, 0x28012, r2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYRESOCT, @ANYBLOB="5ed39b1aafa6d2bfd302415b748121d9fa6de21e9f794737f66cb33a14a64079d5d0679ae701ab0d265bf7d06e60f21b8f8b10a007877f44ed467326f2e1edcf11f5aab7b8aa74dacdc93fa53e3553316361167e53690e1f0029eec0ee2bf7995e809637c0104b153377165bfadbe200f6b29225ae04fd9a3d1b0cf4ef0126351817e4c1765a0ec931f379842a5d0e87f2ea", @ANYRES16=r2], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f000000cf3d)=""/195, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa}, 0x94) (async) socket$nl_rdma(0x10, 0x3, 0x14) (async, rerun: 32) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000100)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) read$alg(r6, &(0x7f0000000040)=""/136, 0x88) (async, rerun: 32) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), r2) (rerun: 32) sendmsg$TIPC_NL_LINK_GET(r6, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f0000001980)=ANY=[@ANYBLOB="4813000081813fdf6824c6e528107c5a57c56c76be41bb472840a16be0d1d156ce0daa0d12456478d218f38b0c", @ANYRES16=r7, @ANYBLOB="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"], 0x1348}, 0x1, 0x0, 0x0, 0x4044040}, 0x44004) (async, rerun: 32) r8 = socket$inet_tcp(0x2, 0x1, 0x0) (rerun: 32) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000001640)=@mangle={'mangle\x00', 0x44, 0x6, 0x510, 0x138, 0x210, 0x210, 0x3a8, 0x3a8, 0x478, 0x478, 0x478, 0x478, 0x478, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x11000000, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@private=0xa010100, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x9, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@multicast}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x570) (async) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}]}, 0x58}}, 0x0) 1.607517569s ago: executing program 1 (id=2272): socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4040011}, 0x4000) recvmsg(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/60, 0x3c}], 0x1}, 0x40fd) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) r3 = socket(0x840000000002, 0x3, 0xff) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001000050400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b00010065727370616e0000180002800400120005001600010000000800150000c422"], 0x48}}, 0x0) setsockopt$inet_int(r3, 0x0, 0xc, &(0x7f0000000000)=0x1, 0x4) sendmmsg$inet(r3, &(0x7f0000000040)=[{{&(0x7f00000001c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a9050000000074640006000000003552bde5c064c6", 0x15}, {&(0x7f0000000600)="174640b6d80fb2eedc81ba60cc0800", 0xf}], 0x2}}], 0x1, 0x0) close(r2) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r2, 0x0, 0x0, 0x800) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {}, [{0x54, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x1}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="120000000a000000040000000200000000000000", @ANYBLOB="4e6cfa1ad7a9c63a6f2c36ac4e553ad725674188c9beddb63418b7faa74dcb003e999d51c298cff6f7ef20a6f95c5eab5d32ecb897e57e7dea6d4ae416182e051208f663f9360ab1d4b193a298c3e58a4eb9f1c8853eb1c288f9a24079847db0ef9823c691fe5ec6cfc5b49faca2afca1651d8ba208189929b08e79b19e24f97775ce52a39ef1751ec33ff25732d", @ANYBLOB="0000000000000000000000000000000000000000965e0ee01eee8aa1326019a9e8a4464fbebfd035214f71676867d64d128b92", @ANYRES32=0x0, @ANYRES64=r5, @ANYRES16=r2], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={r7, &(0x7f00000001c0), 0x0}, 0x20) sendmmsg$alg(r5, &(0x7f0000003700)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x20000000}], 0x1, 0x20044881) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/65, 0x41}], 0x1}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000680), 0x10) sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_MSG_GETCHAIN(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="20000000040a010400000000000000000247b4cfd60e177b0000020900010073f7707933c2aee8eee52d2e89feb77696baaf91b1571c5b0070b64e90ee1b6d2ff08d3e909e3993a77b40a1b284126e5e1ab5d826d7aa997fbf793bd9f572ec382dadea0c4e"], 0x20}, 0x1, 0x0, 0x0, 0x8080}, 0x4004000) listen(r8, 0x80000000) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0100000004000000040000000800000000000000", @ANYRES32, @ANYBLOB="00000000005fac6579a79ada08a45d6462f70000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x6, &(0x7f0000000540)=ANY=[@ANYBLOB="1802000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000850000009d00000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="600000000206010200000000000000000000000444000780050003000200000008000b400000000508000a4000000000060005404e22000006000418805eac00070000000500140003000000080017408000009c0500010007000000"], 0x60}, 0x1, 0x0, 0x0, 0x648c0}, 0x0) 1.594988459s ago: executing program 3 (id=2273): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SDTEFACILITIES(r0, 0x89eb, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'veth0_to_batadv\x00', 0x0}) (async) r3 = socket(0x2b, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r3, 0x894b, &(0x7f00000000c0)) (async) r4 = gettid() (async) r5 = socket(0x10, 0x803, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x5, [@var={0x4, 0x16, 0x0, 0xe, 0x3}]}, {0x0, [0x0, 0x0, 0x0]}}, 0x0, 0x2d}, 0x20) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x403, 0xfffffff9, 0x25dfdbfe, {0x0, 0x0, 0x74, r2, 0x19c04, 0x55007}, [@IFLA_NET_NS_PID={0x8, 0x13, r4}, @IFLA_GROUP={0x8, 0x1b, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x4802}, 0x0) 1.480146685s ago: executing program 0 (id=2274): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) (async) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x1000002}, 0x8, 0x10, &(0x7f0000000000)={0x3, 0x0, 0x0, 0x1}, 0x10, 0x0, r2}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x1000002}, 0x8, 0x10, &(0x7f0000000000)={0x3, 0x0, 0x0, 0x1}, 0x10, 0x0, r2}, 0x94) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000b40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="30008ad2a9b5f354cd2468a40000", @ANYRES16=r4, @ANYBLOB="010025bd7000fcdbdf251200000008000300", @ANYRES32=r5, @ANYBLOB="0a00060008021100000100000800118004000500"], 0x30}, 0x1, 0x0, 0x0, 0x8010}, 0x488d4) ioctl$sock_inet_tcp_SIOCINQ(r2, 0xff02, 0x0) 1.44668281s ago: executing program 1 (id=2275): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x1, 0x0, 0x103, 0x0, 0x1}, 0x48) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000240)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000f00030001332564aaee7b1d58b9a64411f6bbf44d", 0x39}], 0x1) 1.304148008s ago: executing program 0 (id=2277): r0 = socket$inet6(0xa, 0x802, 0x88) setsockopt$inet6_udp_int(r0, 0x11, 0x100000000a, &(0x7f0000000040)=0x800000001, 0x4) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r1) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r1) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000780)={0x1c, r2, 0x1, 0x70bd2a, 0xfffffffd, {0x1e}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044025}, 0x4024800) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x4e23, 0xcc08, @mcast1}, 0x1c) 1.232641065s ago: executing program 0 (id=2279): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=@newtaction={0x60, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ctinfo={0x42, 0x1, 0x0, 0x0, {{0xb}, {0x38, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSET={0x58, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_EXPR={0x1c, 0x11, 0x0, 0x1, @exthdr={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x2040000}, 0x40) 1.164018497s ago: executing program 3 (id=2280): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r0, 0x89e1, &(0x7f0000000180)={'team_slave_0\x00', 0xfffffffffffffff9, 0x280b}) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000000)={0x0, 0x8}, &(0x7f0000000040)=0x8) r3 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000080)={0x10000000}) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r3, &(0x7f0000000000)={0xa0000001}) r7 = socket$alg(0x26, 0x5, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x50, 0x10, 0x1, 0x70bd2d, 0x25dfdc01, {0x0, 0x0, 0x0, 0x0, 0x14318}, [@IFLA_IFNAME={0x14, 0x3, 'erspan0\x00'}, @IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @empty}]}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x84}, 0x4000) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) bind$alg(r7, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha256\x00'}, 0x58) accept4(r7, &(0x7f0000000600)=@vsock={0x28, 0x0, 0x0, @local}, 0x0, 0x800) r10 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x12011, r10, 0x34afc000) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f0000000080)={r2, 0x3}, 0x8) ioctl$SIOCX25SDTEFACILITIES(r0, 0x89eb, &(0x7f0000000140)={0x0, 0xdec, 0x833c, 0x7, 0x0, 0x8d, 0x2b, "839bf939b57362abfaad537bda3067fc22f51ecb", "b6f6c857a33c218fa92e44589f8115fc47110400"}) 1.162601173s ago: executing program 4 (id=2281): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000780)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000440)={0x270, r1, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x80, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x12c}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x40}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7f}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5c}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}]}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffface}]}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xaf}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfff}]}, @TIPC_NLA_MEDIA={0xc8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6d}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x694}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}]}, @TIPC_NLA_BEARER={0xdc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x1, @empty, 0x8}}, {0x14, 0x2, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0x200}}, {0x14, 0x2, @in={0x2, 0x4e23, @private=0xa010101}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x3, @remote}}, {0x14, 0x2, @in={0x2, 0x4e23, @rand_addr=0x64010100}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x10000}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x401}]}]}, 0x270}, 0x1, 0x0, 0x0, 0x44001}, 0x8010) (async) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={0x5c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x24, "dcc33d7b4cd8c6ef01630e0000eab964d192501e000000bf70a465c2"}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) (async, rerun: 64) r2 = socket$inet6(0xa, 0x1, 0x0) (rerun: 64) setsockopt$inet_int(r2, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) (async) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000080)={0x0, @private=0xa010101, 0x4e21, 0x1, 'fo\x00', 0x20, 0x8, 0x80}, 0x2c) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10) (async) bpf$MAP_CREATE(0x0, 0x0, 0x48) (async) r4 = socket$alg(0x26, 0x5, 0x0) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) (async) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) (async, rerun: 64) r7 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="2000000076000d0b00000000fddbdf2503020000000000000800010000000000d103375ecfcca1b2243f83927db486039cb1dfcccbbd71a1772db0cfd2f3751a46c95f2fcfadc81bf38953588daf8d6e8f1d029e8ab2010e8acd8947871f508915194281bad838d016b427504e7e19f2d1e489cacf584aeb7655fc6791d80aef5ccbbc3c2aee3fa5cc026c9b9a0595825a43da075aa4c7d07f71d033a50821556ea55dfa2ed231aa2254c620159da20254c6c01be2c54e2c1dc5281cbc"], 0x20}}, 0x0) (async, rerun: 32) sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001600010a"], 0x14}}, 0x0) (async, rerun: 32) setsockopt$llc_int(r6, 0x10c, 0x3, &(0x7f0000000280)=0x2, 0x4) (async) write$tun(r5, &(0x7f0000000300)={@val={0x0, 0x22eb}, @val={0x0, 0x4, 0x3, 0xff85, 0x88c7, 0x5}, @ipv4=@igmp={{0x19, 0x4, 0x2, 0x3e, 0xa7, 0x65, 0x0, 0x7, 0x2, 0x0, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@lsrr={0x83, 0x23, 0xf1, [@local, @private=0xa010100, @remote, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x13}, @remote, @dev={0xac, 0x14, 0x14, 0x16}, @loopback]}, @generic={0x7, 0xf, "def3d964075d9a7a70747d8f0f"}, @noop, @timestamp={0x44, 0x1c, 0x78, 0x0, 0x1, [0xa, 0xfd, 0xf942c9a6, 0xe, 0xe2, 0xc]}]}}, {0x17, 0x4, 0x0, @private=0xa010101, "03bea7508587bff2760c4b11251437a12ad34d35bea1fb81f16a94eca15fc811151400b5bd1e0e317f3e7e847a47c661311de43100d642cd023341"}}}, 0xb5) (async, rerun: 64) bind$alg(r4, 0x0, 0x0) (async, rerun: 64) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000200)={0x88, @multicast2, 0x4e21, 0x2, 'dh\x00', 0x20, 0x2, 0x3c}, 0x2c) bind$alg(r4, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'lo\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="680000001000030500000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000008000004800128008000100687372003c000280060005000180000008000100", @ANYRES32=r9, @ANYBLOB="0500060001000000050007000000000005000300df00000008000200", @ANYRES64=r8], 0x68}}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0xc, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) 1.113340446s ago: executing program 1 (id=2282): mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000280)={0x0, 0xe373b684d2526e78}, 0x20) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="b4050000200080006110600000000000c60000000000000095000000000000009f33ef60916e6e893f1eeb0be20000d072f5b89c3043c47c896ce0bc8731fa595b6b4d45ef26dcca5582054d54d53cd2b685b431c70ea948259c4c869b4fc8db714e4b94bdae214fa68a051d4dca7d2647bec1fc89398d2b9000f224891060017c4700de60beac671e8e8f00cb03588aa6007e71f871ab5c2ff88afc6002084e5b52710aeee835cf0d78e45f70983826fb8579c1fb47d2c59005cff414ed55b0d18a9d446935fb332bb593ee341ab59016f81860324b800c00000000000092d9c5fe34ccb80a61ffcb3363073fd8962823ee45f5d7394e9510f4ac6c702cfabe8a9c55c8dafcdb110036e14c1035cafdfef6a358cbfadb3579a285580a3c080d4e0a48d7bdc38a0437c8c1b3aa408a0000000000002248950b000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000440)) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r5) sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x14, r6, 0x1, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x891}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r4, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r2}, 0x20) recvmmsg(r2, &(0x7f0000000b80)=[{{0x0, 0xffffffffffffff6c, 0x0, 0x0, 0x0, 0x52}, 0xa}], 0x360, 0x120, 0x0) recvfrom$inet6(r2, &(0x7f00000000c0)=""/53, 0x35, 0x40010102, 0x0, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4f23, @rand_addr=0x64010101}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000001e40)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000ac0)="89e4192d92359cb3ee294530ae76ad6dc4ff20cc3ccc9d41018dd482ad1f395d4e38bd22b6fcae05c49fbdfdf66ae2994f191e9222effcb97205d0aaed4b29919f9e3bab7fdb276ca29501903c98de0b0cc8afca563f94fe69b6927ae594d1b53ad9f4a9f9f5c84a518d37939c84a5bd15048115ac421e9c56866ab6f91b0e8181d8999dd86c0177a971a39bf35b38eb0504bf70c02cc3", 0x97}], 0x1}}], 0x1, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000001e40)=ANY=[@ANYBLOB='\v\x00'], 0x48) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x608, 0x3, 0x200, 0x8a8, 0x7, 0x18000000, 0x8a8, 0x1c0, 0x978, 0x290, 0x290, 0x978, 0x290, 0x3, 0x0, {[{{@ip={@private, @multicast2, 0x0, 0x0, 'batadv_slave_0\x00', 'bridge_slave_1\x00'}, 0x0, 0x70, 0x98, 0x0, {0x36020000}}, @common=@inet=@SET1={0x28}}, {{@ip={@loopback, @remote, 0x0, 0x0, 'erspan0\x00', 'veth1_vlan\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x260) r7 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x3c, &(0x7f0000000000)={0x0, 0x0}, 0x10) sendto$inet(r1, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r8, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r8, 0x84, 0x79, &(0x7f00000001c0)={r9, 0x2, 0x7}, 0x8) socket(0x40000000015, 0x5, 0x0) 1.041639088s ago: executing program 0 (id=2283): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="3800000055002f03000000000000000007000000", @ANYRES32, @ANYBLOB="20000100", @ANYRES32=0x0, @ANYBLOB="000000ce0f"], 0x38}, 0x1, 0x0, 0x0, 0x4008004}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r5) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xa0000, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0x10, 0xb}, {0x5, 0xa858712265c6c23}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240000a0}, 0x4028040) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 752.011075ms ago: executing program 3 (id=2284): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000200), 0x8) syz_emit_ethernet(0x2e, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0xb, 0x0, @void}}}}}}}, 0x0) sendto$inet(r0, &(0x7f0000000700)="ab12bb69", 0x4, 0x840, &(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x10) socket$kcm(0xa, 0x922000000003, 0x11) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x3, 0x14, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001}, [@ringbuf_output={{0x18, 0x5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x45}}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x29, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x0, 0xe, 0x0, &(0x7f00000002c0)="e02742e86c0d85ff9782762f0800", 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x80, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x6c, 0x1, [@m_tunnel_key={0x68, 0x1, 0x0, 0x0, {{0xf}, {0x38, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0xd, @empty=0x1000000}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @loopback}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @broadcast}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x80}}, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000500)={0x0, @in={{0x2, 0x4e24, @remote}}, [0x7fffffffffffffff, 0x5, 0x7, 0xffff, 0x5, 0x7fffffff, 0xffffffffffffffff, 0x1, 0xddc, 0xffffffffffffff7f, 0x8, 0x3, 0xffffffffffffffff, 0x80, 0x6]}, &(0x7f0000000340)=0x100) syz_emit_ethernet(0x92, &(0x7f0000000740)={@local, @remote, @void, {@llc_tr={0x11, {@snap={0x0, 0x1, '<', "7f19d3", 0x19, "fa708ca2875061c69614a5ac3e47fb199c6c213221238069691ec54cd022c316c23edae3a00b28046e59e60bf33daaadc61e23096dd67214ebd76c4c8cd6613a069dcdb25c59a51a3b80591d3e0c5df0f82bca53b97ba762de73f7ecb0b3938142b0c02a627fe612ff037e04bfd512d1632823e5e2120f3cccc836f9"}}}}}, 0x0) write$tun(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="0000020141aa008c00650000070290787f000001ac1414bb44240bf3ffffffff00000002e000000100000000ffffffff000000010a0101020000000b892bcfac14142ae0000001ac1414aa0a010100e0000002e000000164010102ac1e0101ffffff5789e3310194040000441ca04164010100000000ab000000000000000effffffff00000000001f039078fffffffff99d814c0dc7eb661be55583d200"], 0x90) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0xf, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000bd00000000000000e500030000000000060000000000000025000400100072ca1e46d5e7d765e17bdfebb3ffff95"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) 741.161426ms ago: executing program 4 (id=2285): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80004}, 0xc, &(0x7f0000000200)={&(0x7f0000000040)={0x198, 0x1, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_USERDATA={0xcc, 0x6, "73777b294384d1e97c2ad47c02b643ab215bc589477155d7ace88e4177fe639060fa65e80e871f58be2d23026707919791fc0509bc023d15a3e753224b49ba99d457e089778c6ba89d080388ee23c44e1bf84950bea4cc9f84ac3285a92b4a886b1f860b5be44a481a20098f855bb25473777ec8d25bed89305f3fee69e35bf1b4b78e5cda81ed0b3068683e9b0a9134ea5dd1f90334f67f4b4f84f14232cf35495370718f6c36a197795d6a1d80e2784498d95fb56d743777ba34c26a799c48e0fe696e81384ac7"}, @NFTA_TABLE_USERDATA={0x77, 0x6, "991c543a1257a64f4fa8e5c0032d1232126a20cd5be8ba24c3680a6db4f07b788f461350ca8c4ff6a4e4f7fd5356546dbee50b53a2ee01fd1312b6201eb56787ec67b781db42e035a8a532aa038e993542eec98d55a199dd1830dba002cc5d578395e1debac8890d45b0d4a62c87eb4fa6578c"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0xd, 0x6, "50ba7f774103bc4811"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}]}, 0x198}, 0x1, 0x0, 0x0, 0x881}, 0x40) (async) recvmmsg(r0, &(0x7f0000001800)=[{{&(0x7f0000000280)=@qipcrtr, 0x80, &(0x7f0000001740)=[{&(0x7f0000000300)=""/222, 0xde}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/19, 0x13}, {&(0x7f0000001440)=""/212, 0xd4}, {&(0x7f0000001540)=""/233, 0xe9}, {&(0x7f0000001640)=""/75, 0x4b}, {&(0x7f00000016c0)=""/22, 0x16}, {&(0x7f0000001700)=""/26, 0x1a}], 0x8, &(0x7f00000017c0)=""/49, 0x31}, 0x7ff}], 0x1, 0x2020, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000001880), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f0000001940)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x4408000}, 0xc, &(0x7f0000001900)={&(0x7f00000018c0)={0x1c, r2, 0x2, 0x70bd28, 0x25dfdbfb, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8014}, 0x814) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000019c0), r1) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000001b00)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x50000902}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001a00)={0x94, r3, 0x20, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x71}}}}, [@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_KEYS={0x3c, 0x51, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x18, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_DEFAULT_TYPES={0x14, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_HIDDEN_SSID={0x22, 0x7e, @random="01f6a6d15d2aeafa39743921c5bce49680380db2715f8450c356d0baa89e"}]}, 0x94}, 0x1, 0x0, 0x0, 0x48000}, 0x40000091) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000001b80), r1) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r1, &(0x7f0000001cc0)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001c80)={&(0x7f0000001bc0)={0xbc, r4, 0x20, 0x70bd27, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xee9e}, {0x6, 0x11, 0xbe}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x40}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0xff1e}}]}, 0xbc}, 0x1, 0x0, 0x0, 0x20004801}, 0x40090) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f0000001dc0)={&(0x7f0000001d00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001d80)={&(0x7f0000001d40)={0x28, r2, 0x1, 0x70bd26, 0x25dfdbff, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x81}, 0xc1) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001e40), r1) sendmsg$NL80211_CMD_ADD_TX_TS(r1, &(0x7f0000001f00)={&(0x7f0000001e00)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001e80)={0x2c, r5, 0x800, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040014}, 0x4010) (async) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001f80), r1) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000002080)={'gre0\x00', &(0x7f0000001fc0)={'tunl0\x00', 0x0, 0x8000, 0x40, 0x2, 0x0, {{0x1d, 0x4, 0x0, 0x7, 0x74, 0x66, 0x0, 0x2, 0x4, 0x0, @local, @loopback, {[@ssrr={0x89, 0xf, 0xe8, [@loopback, @loopback, @dev={0xac, 0x14, 0x14, 0x44}]}, @cipso={0x86, 0xb, 0x3, [{0x5, 0x2}, {0x5, 0x3, "02"}]}, @ssrr={0x89, 0x27, 0xcc, [@private=0xa010101, @empty, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x3b}, @multicast1, @loopback, @rand_addr=0x64010100, @multicast1]}, @lsrr={0x83, 0x17, 0x5f, [@remote, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, @remote]}, @generic={0x94, 0x5, "44d36a"}, @end]}}}}}) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r1, &(0x7f00000021c0)={&(0x7f0000001f40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002180)={&(0x7f00000020c0)={0x84, r6, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x48, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x7}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x37}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xd}]}, @MPTCP_PM_ATTR_LOC_ID={0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}]}, 0x84}, 0x1, 0x0, 0x0, 0x800}, 0x80) (async) sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f00000026c0)={&(0x7f0000002200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002680)={&(0x7f0000002240)={0x41c, r3, 0x200, 0x93c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x3ff}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x1}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x800}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x6}, @NL80211_ATTR_FRAME_MATCH={0xff, 0x5b, "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"}, @NL80211_ATTR_FRAME_MATCH={0x6b, 0x5b, "72fb9f61e6d5cfe73ae45648751db874988fbbc89260d2b4d0c71a43a88d7c49647a9fe6931124c50b565c2480c112127a20d8b53855b2f53131580c08db3c2466a45d9444ab9db8f80f6fd92a5deb631169f6e47216f64b3ac6d869db639b1cf73e2a655e631d"}, @NL80211_ATTR_FRAME_MATCH={0xb9, 0x5b, "f6ac1442b24c6480388fce7b6b8177cb98ed4920d9edf82d5b9e50701931d15953ba9a7279c0cfa79ed03d10d169c9a6e8eb4fca8f04ee09b597dfe7e55836ffd44c3c6a290a69e9486db7bd6385abe4099c2d6636123f0f7aebc868e3bf7517617b97f731061d1a381f3c025cdbe6cbab5954f086d2719273c68e1a8cb34b3a3b53b6129f3f3b4be2020e2dd2449391ba9806a7eec28509e21d2b2acf985364d18b90ee2a49d3c7049e365329a385b326def425f9"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x3}, @NL80211_ATTR_FRAME_MATCH={0xf, 0x5b, "9e7b982ca74cc5218322f3"}, @NL80211_ATTR_FRAME_MATCH={0x102, 0x5b, "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"}, @NL80211_ATTR_FRAME_MATCH={0x9f, 0x5b, "83c24da2e90f6f34d77d76edfbd02044630f59ee64a8ec8cc5be639c7ec40b55ee28760066af5ae6d19a84228b2b97cc2cb6ed9721d89fc18b4a2d92c11c0134c78b4999d493b21dbc9f06c464d35c99420410cc86f445897c6d6ef1ac0816e9de27efcab5c56b2edb542b8c76d22e5a0128f806e3c948e797333f487f363777858e028d9d2e5ad9c768ceba0d1233faf7c288929a1762470c6af4"}]}, 0x41c}, 0x1, 0x0, 0x0, 0x4004}, 0x4c010) sendmsg$NL80211_CMD_SET_WDS_PEER(r1, &(0x7f0000002800)={&(0x7f0000002700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000027c0)={&(0x7f0000002740)={0x50, r5, 0x20, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x8880}, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000002880)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r1, &(0x7f0000002a00)={&(0x7f0000002840), 0xc, &(0x7f00000029c0)={&(0x7f00000028c0)={0xec, r5, 0x10, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x800, 0x5b}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x6}, @NL80211_ATTR_SSID={0xa, 0x34, @random="fd17d849b0b0"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @key_params=[@NL80211_ATTR_KEY={0x5c, 0x50, 0x0, 0x1, [@NL80211_KEY_MODE={0x5}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT_TYPES={0x8, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "b8fb5cccf2"}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "5ef15e5895612b66590374b199"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "12cbc835d5db4dbe63c5518560"}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_SEQ={0x10, 0xa, "3ba363ec175d34d06793d38a"}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}], @NL80211_ATTR_AUTH_TYPE={0x8}]}, 0xec}, 0x1, 0x0, 0x0, 0x8005}, 0x40000) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000002a80)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, &(0x7f0000002b40)={&(0x7f0000002a40)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002b00)={&(0x7f0000002ac0)={0x28, 0x0, 0x4, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x1) (async) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002bc0), r1) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f0000002d00)={&(0x7f0000002b80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000002cc0)={&(0x7f0000002c00)={0x84, r10, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}, @ETHTOOL_A_PAUSE_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x8000}, 0x20000801) (async) socketpair(0x25, 0x6, 0x400, &(0x7f0000002d40)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r11, 0x6, 0x14, &(0x7f0000002d80)=0x1, 0x4) (async) r13 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002e00), r11) sendmsg$IPVS_CMD_FLUSH(r12, &(0x7f0000002f00)={&(0x7f0000002dc0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000002ec0)={&(0x7f0000002e40)={0x7c, r13, 0x800, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1ff}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x80000000}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@broadcast}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1a, 0x12}}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x84}, 0x40) (async) r14 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_UPDATE_FT_IES(r14, &(0x7f0000003000)={&(0x7f0000002f40), 0xc, &(0x7f0000002fc0)={&(0x7f0000002f80)={0x28, r3, 0x20, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0xe0, 0x4c}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x4040004}, 0x4000014) 644.046496ms ago: executing program 4 (id=2286): r0 = socket(0x2, 0x3, 0xff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = openat$cgroup_devices(r1, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f0000000200)=ANY=[@ANYBLOB='b ', @ANYRESDEC], 0xb) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="03e71dcb5c7a00", @ANYRES32, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0400"/28], 0x48) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001580), r0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000900)='T', 0x1}], 0x1}, 0x4048841) (async, rerun: 32) recvmsg(r4, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) (async, rerun: 32) sendmsg$inet(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="04", 0x1}], 0x1}, 0x1) (async) recvmsg(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x1) (async) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000001640)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x14, r3, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20004000}, 0x4088404) syz_emit_ethernet(0x22, &(0x7f00000001c0)={@broadcast, @empty, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x3, 0x9, 0x14, 0x64, 0x0, 0x3, 0xff, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0xc}}}}}}, 0x0) (async, rerun: 64) r6 = socket$netlink(0x10, 0x3, 0xa) (rerun: 64) syz_emit_ethernet(0x46, &(0x7f0000000380)={@local, @broadcast, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x1, 0x0, 0x0, 0x9, 0x0, {0x6, 0x4, 0x0, 0x6, 0x2, 0x65, 0x7, 0x2, 0x6, 0xb, @dev={0xac, 0x14, 0x14, 0x2e}, @private=0xa010100, {[@rr={0x7, 0x3, 0xce}]}}}}}}}, 0x0) (async, rerun: 32) writev(r6, &(0x7f0000000000)=[{&(0x7f00000000c0)="480000001500257f09004b01fcfc8c860a881300f217e0060000e3323909b8f8896e3371", 0x24}, {&(0x7f0000000200)="f9fe596dc6c95cca90003948eb9efa7277b049e4c3400d1fc8a0f8668e571be77d66f6d89502390b51dafc0e2f073b6cebeba0db824a941d3c06f75122b57364435473a65bdf0f9d2b02f1418531d5aa1a54a5e81a70cbdb225bbc567c7d0bcffb5cd5dcde1a5dab08a4778af37d150ffa9324e1838ce16af81f3c58cbb2d6474ab4856b9212c889b082d9a6cbba1a29b97f68e3790dfe874930a5975b2a22b7bb2e9cbd9a8a45b192bf28226406bd5ece74c0bb83f1d7f0abea939ab34d08e82609f397dc159fb4db1d6be913d1242684bd376b4a15bac8945a69dd1957fbc0086ddd5a92cc4f1a07d43b2db6149518a7e416744589c2", 0xf7}, {&(0x7f0000000100)="39d9c54d863c98aa9b2b2829ab825d0b4e09c3f4178441803b74d5b557d240a2cce9c4c451eb59c18ca61bb46f8c8cc19d29f2f670e6e83a45ba3cd52da5307073e161dd038b8b2b6d4e4cea24624b39b0c2390828c73ed4f7e6b776af1ec07d2de5039df57a87ad8a6d09f7e3500ae0e857f5719323fa9cbd2aa0cb5707a2258f68c446b77281e80573b9041ca69c02ab0e028c5343a98b0a3819a874ed81f270f103b85f25e14052b7045de3d3d993e33b29ea97c308fb", 0xb8}, {&(0x7f0000000300)="4910370764fa44d024b59d9f55e3f047ec74b6be2801252f02cd38bd2ae44b924d499c03123170a5b7bd412a09c9ce0c9661ded9b687dac19347f63bf522a9cdd78f8e5a1aff16d9eee8d1dc4b26fad13ab8d1382662976d6fecb78a8f524e8678b9064c15c8a769f43785f211d0d912c00217d21b9268556bdb6b2afd90a841924d8eaeb23af5b2daec", 0x8a}, {&(0x7f00000003c0)="2e0623d31603175d7fe2a6e2dfdeb7ed3fd2876d9e0f99e7322194dd0022c59841bdb013403f1efac61983fd106c2bd1924dae1717acf1024677af1158108af074532ddad6a8e29e33be6fffb2a35e21c388bd4e2159ac9354cec376f196981c3266172946a0ef7333f622d8637a7a87296d28cf38052e96e95fb935ba9320ded70159e8f419dc", 0x87}, {&(0x7f0000000480)="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", 0x1000}, {&(0x7f0000001480)="a4298f476d6c93414e8b8d5b23bfaa0f83f17088a9fe5dd68e5b22f4296754b3072f0be4d8c2a46c203cca45594f2b30926c79d4e0086302ce906c66641978942d09e2526cd22a9a26a0c7a302605095d139274ad8e28b2fee3afd2bd8394aa9b241635275b70524c76cea7e4e6c92b08f6ac2ee983ab3ae40c43b2a6e3a7d856a590268a54d4f57cf197d57a4e3b8cd2f85e644239f16c3bc732544e09f0712224dd10799", 0xa5}], 0x7) (rerun: 32) 528.01444ms ago: executing program 4 (id=2287): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x6c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x30, 0x11, 0x0, 0x1, @target={{0xb}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x8, 0x3, "c4250260"}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xa, 0x1, 'AUDIT\x00'}]}}}]}], {0x14, 0x10}}, 0xb4}}, 0x0) socket$igmp(0x2, 0x3, 0x2) (async) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, 0x0, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x6c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x30, 0x11, 0x0, 0x1, @target={{0xb}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x8, 0x3, "c4250260"}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xa, 0x1, 'AUDIT\x00'}]}}}]}], {0x14, 0x10}}, 0xb4}}, 0x0) (async) 520.876228ms ago: executing program 3 (id=2288): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x9, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}, @TCA_RATE={0x6, 0x5, {0x81, 0xa}}]}, 0x40}}, 0x0) r4 = socket$kcm(0x21, 0x2, 0x2) r5 = socket$inet6(0xa, 0x3, 0x2) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) ppoll(&(0x7f00000001c0)=[{r6, 0x6190}, {r5, 0x20}, {r7, 0x94}, {r6, 0x4000}, {r1}, {r4, 0x4000}, {r2, 0x7002}, {r1, 0x1}, {r1}, {r1, 0x80b7}], 0xa, &(0x7f0000000400)={r8, r9+10000000}, &(0x7f0000000500)={[0x4]}, 0x8) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f0000000040)={'veth1_to_batadv\x00', &(0x7f0000000000)=@ethtool_modinfo={0x42, 0x5, 0xf}}) ioctl$FS_IOC_GETFLAGS(r10, 0x80086601, &(0x7f0000000140)) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x58, 0x10, 0x1, 0x0, 0x25dfdbfb, {}, [@IFLA_VFINFO_LIST={0x30, 0x16, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0xfffffffc, @remote}}]}]}, @IFLA_GROUP={0x8}]}, 0x58}}, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r5, 0x29, 0x3b, &(0x7f00000000c0), 0x8) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, 0x0, 0x0) sendmsg$kcm(r4, &(0x7f0000000180)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0x1}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) readv(r4, &(0x7f0000004680)=[{&(0x7f0000003380)=""/85, 0x55}], 0x1) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0xec, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0xbc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x98, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x3c, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x2c, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0xb}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x80}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x2c, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0xff}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5}]}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x20, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x1c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x7}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x30}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x7}]}]}]}}]}, 0xec}, 0x1, 0x0, 0x0, 0x22044028}, 0x40040) syz_emit_ethernet(0x0, 0x0, 0x0) 301.947908ms ago: executing program 4 (id=2289): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="0700000010001fff00000000000f7e0e435ded000000000000", @ANYRES64=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005000100040000000600180000100000060019"], 0x4c}}, 0x0) 212.152298ms ago: executing program 0 (id=2290): bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x2000000000000067, &(0x7f0000000140)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8}, 0x94) 144.596788ms ago: executing program 4 (id=2291): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002cbd7000040000000500b600080009000200000008000c00a60a0000060001000500004008000b"], 0x40}, 0x1, 0x0, 0x0, 0x94ced4add106a01f}, 0x4040) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="2503000000000000000008"], 0x14}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005f40)={0x0, 0x0, &(0x7f0000005f00)={&(0x7f0000000140)=@newtaction={0x14, 0x30, 0x800}, 0x14}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000034c0)={0x24, 0x3e, 0x107, 0x3, 0x0, {0x2, 0x7c}, [@nested={0x10, 0x3, 0x0, 0x1, [@typed={0xc, 0x8, 0x0, 0x0, @u64=0x1000}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002cbd7000040000000500b600080009000200000008000c00a60a0000060001000500004008000b"], 0x40}, 0x1, 0x0, 0x0, 0x94ced4add106a01f}, 0x4040) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$L2TP_CMD_TUNNEL_GET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="2503000000000000000008"], 0x14}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000005f40)={0x0, 0x0, &(0x7f0000005f00)={&(0x7f0000000140)=@newtaction={0x14, 0x30, 0x800}, 0x14}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000034c0)={0x24, 0x3e, 0x107, 0x3, 0x0, {0x2, 0x7c}, [@nested={0x10, 0x3, 0x0, 0x1, [@typed={0xc, 0x8, 0x0, 0x0, @u64=0x1000}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async) 111.275802ms ago: executing program 1 (id=2292): unshare(0x20000400) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) pwritev(r2, &(0x7f0000000100)=[{&(0x7f0000000000)="8e", 0x1}], 0x1, 0x8001, 0x80) sendfile(r2, r1, 0x0, 0xf03a0005) getsockopt$inet6_mreq(r0, 0x29, 0x1b, 0x0, &(0x7f0000000240)) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ec4ff00000000711028000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x94) syz_emit_ethernet(0xfc5, &(0x7f0000001000)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@can={0xc, {{0x4, 0x1}, 0x6, 0x3, 0x0, 0x0, "9a82f82983fbf07d"}}}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x41240, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r7 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r7, 0x11b, 0x7, 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNGETFILTER(r6, 0x801054db, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)={0x2, 0xd, 0x0, 0x0, 0x6, 0x0, 0x0, 0xfffffffe, [@sadb_x_nat_t_port={0x1, 0x15, 0x4e22}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}]}, 0x30}}, 0x0) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_BT_POWER(r10, 0x112, 0x9, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000004c0)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) sendmsg$FOU_CMD_DEL(r4, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="000226bd7010fbdbdf2502000000060003004e210000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000040)={r3, 0x7, 0x8, 0x8}) sendto$inet6(r11, &(0x7f0000001040)="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", 0x1000, 0x80, &(0x7f0000000080)={0xa, 0x4e22, 0x3, @mcast2, 0x8}, 0x1c) 0s ago: executing program 0 (id=2293): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r1 = socket(0x15, 0x5, 0x0) connect$l2tp6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x40007, 0x200004}, 0x20) (async, rerun: 32) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'syzkaller0\x00', 0x1001}) (async, rerun: 32) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) (async, rerun: 64) r3 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES64, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) r5 = socket(0x10, 0x803, 0x0) (async) r6 = socket(0x1, 0x803, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0xc, &(0x7f00000000c0)=@framed={{}, [@ringbuf_output]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (async) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r7}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0xa}}]}, 0x40}}, 0x0) (async) r8 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x400000, {0xa, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_RT_PRIORITY={0x8, 0x9, 0x7ff}]}, 0x34}}, 0x0) (async) setsockopt$llc_int(r4, 0x10c, 0x1, &(0x7f0000000280)=0xd1, 0x4) connect(r3, &(0x7f00000001c0)=@generic={0x2b, "aba218c4ca8af29058c18046e5dae2c675a0636149ec74cca635f819068644ccba512280b292849a7b677a1a54f7f7c450b6a8042f717115660b93ef9eb68e0453e96cde4378298e1a910b0460865de4e90130f4211f30377c94effb97f7672263e68f13cf61ea95cd5c155d5f8ebfa93cb1c54c806bfe8498c4f508fc54"}, 0x80) (async) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r9) r10 = socket$unix(0x1, 0x1, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async, rerun: 64) r13 = socket$nl_generic(0x10, 0x3, 0x10) (async) r14 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r13, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES16=r14, @ANYBLOB="000000000e2155a831ec31d00000"], 0x14}}, 0x0) (async) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newqdisc={0xf0, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r12, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0x6}}, [@TCA_STAB={0xcc, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2, 0x81, 0x6, 0x8, 0x2, 0x8, 0x45a0, 0x8}}, {0x14, 0x2, [0x0, 0x5, 0x10, 0x3, 0x5, 0x0, 0x8001, 0x5]}}, {{0x1c, 0x1, {0xb, 0x7, 0x7, 0x37ca, 0x1, 0x2de, 0x0, 0x1}}, {0x6, 0x2, [0x4]}}, {{0x1c, 0x1, {0x9, 0x1c, 0x3, 0x2, 0x10083e47fd80f207, 0x200, 0xfffffffc, 0x1}}, {0xfffffed7, 0x2, [0x622a]}}, {{0x5b, 0x1, {0xc3, 0x3, 0x2, 0x3, 0x1, 0x3000, 0x7}}, {0x4}}, {{0x1c, 0x1, {0x4, 0xc, 0x200, 0x507, 0x1, 0x2, 0x7111, 0x7}}, {0x12, 0x2, [0x3, 0x3, 0x2, 0x2, 0x200, 0x5, 0x36]}}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) kernel console output (not intermixed with test programs): when powering off device on rfkill (-4) [ 85.304549][ T6171] bond0: (slave macvlan2): Error -22 calling dev_set_mtu [ 85.602904][ T6188] wg1: entered promiscuous mode [ 85.611018][ T6188] wg1: entered allmulticast mode [ 85.664199][ T6186] netlink: 'syz.2.64': attribute type 11 has an invalid length. [ 85.829507][ T6197] batadv0: entered promiscuous mode [ 85.836607][ T6197] bond0: entered promiscuous mode [ 85.841840][ T6197] bond_slave_0: entered promiscuous mode [ 85.850156][ T6197] bond_slave_1: entered promiscuous mode [ 85.865901][ T6197] hsr1: entered allmulticast mode [ 85.882040][ T6197] batadv0: entered allmulticast mode [ 85.888706][ T6203] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 85.898898][ T6197] bond0: entered allmulticast mode [ 85.905819][ T6197] bond_slave_0: entered allmulticast mode [ 85.911641][ T6197] bond_slave_1: entered allmulticast mode [ 85.918106][ T6197] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 85.927632][ T6199] sit0: entered promiscuous mode [ 85.960349][ T6199] netlink: 'syz.4.69': attribute type 1 has an invalid length. [ 85.983139][ T6199] __nla_validate_parse: 8 callbacks suppressed [ 85.983156][ T6199] netlink: 1 bytes leftover after parsing attributes in process `syz.4.69'. [ 86.162712][ T6215] netlink: 12 bytes leftover after parsing attributes in process `syz.4.73'. [ 86.349694][ T6228] netlink: 'syz.0.76': attribute type 13 has an invalid length. [ 86.571584][ T6228] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 86.711602][ T6239] macvtap1: entered promiscuous mode [ 86.730882][ T6239] macvtap1: entered allmulticast mode [ 86.751804][ T6239] bond_slave_0: entered promiscuous mode [ 86.757748][ T6239] bond_slave_1: entered promiscuous mode [ 86.758354][ T10] cfg80211: failed to load regulatory.db [ 86.785152][ T6239] bond0: entered allmulticast mode [ 86.790398][ T6239] bond_slave_0: entered allmulticast mode [ 86.801576][ T6239] bond_slave_1: entered allmulticast mode [ 86.808441][ T6239] bond0: entered promiscuous mode [ 86.817290][ T6239] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 86.826731][ T6239] team0: Device macvtap1 failed to register rx_handler [ 86.839196][ T6239] bond0: left allmulticast mode [ 86.863122][ T6239] bond_slave_0: left allmulticast mode [ 86.881334][ T6239] bond_slave_1: left allmulticast mode [ 86.903755][ T6239] bond0: left promiscuous mode [ 86.909319][ T6239] bond_slave_0: left promiscuous mode [ 86.914873][ T6239] bond_slave_1: left promiscuous mode [ 87.065258][ T6251] .: renamed from ip6_vti0 (while UP) [ 87.818698][ T6297] netlink: 'syz.2.92': attribute type 12 has an invalid length. [ 87.844642][ T6297] netlink: 'syz.2.92': attribute type 29 has an invalid length. [ 87.872025][ T6297] netlink: 148 bytes leftover after parsing attributes in process `syz.2.92'. [ 87.897213][ T6297] netlink: 59 bytes leftover after parsing attributes in process `syz.2.92'. [ 87.954043][ T5831] Bluetooth: hci0: command tx timeout [ 88.172276][ T6320] netlink: 'syz.1.95': attribute type 10 has an invalid length. [ 88.875360][ T6363] netlink: 'syz.4.105': attribute type 11 has an invalid length. [ 88.883303][ T6363] netlink: 224 bytes leftover after parsing attributes in process `syz.4.105'. [ 89.069104][ T6371] netlink: 'syz.2.108': attribute type 1 has an invalid length. [ 89.239006][ T6371] 8021q: adding VLAN 0 to HW filter on device bond2 [ 89.325495][ T6391] netlink: 4 bytes leftover after parsing attributes in process `syz.4.109'. [ 89.346662][ T6386] netlink: 4 bytes leftover after parsing attributes in process `syz.4.109'. [ 89.375016][ T6381] 8021q: adding VLAN 0 to HW filter on device bond2 [ 89.402599][ T6381] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 89.441006][ T6381] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 89.538431][ T6383] veth3: entered promiscuous mode [ 89.565211][ T6383] bond2: (slave veth3): Enslaving as an active interface with a down link [ 89.584734][ T6385] netlink: 'syz.4.109': attribute type 13 has an invalid length. [ 89.628624][ T6371] vlan2: entered allmulticast mode [ 89.648752][ T6371] bond2: entered allmulticast mode [ 90.012389][ T6421] netlink: 4 bytes leftover after parsing attributes in process `syz.1.117'. [ 90.139800][ T6426] netlink: 8 bytes leftover after parsing attributes in process `syz.4.119'. [ 90.446158][ T6448] tipc: Enabling of bearer rejected, failed to enable media [ 90.488285][ T6436] netlink: 'syz.0.121': attribute type 12 has an invalid length. [ 90.736114][ T6462] netlink: 104 bytes leftover after parsing attributes in process `syz.4.126'. [ 90.870167][ T6448] syzkaller0: entered promiscuous mode [ 90.878776][ T6448] syzkaller0: entered allmulticast mode [ 91.139246][ T6481] netlink: 172 bytes leftover after parsing attributes in process `syz.3.128'. [ 91.425561][ T6494] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 91.448351][ T6494] syzkaller0: Linktype set failed because interface is up [ 91.550556][ T6500] netlink: 120 bytes leftover after parsing attributes in process `syz.4.136'. [ 91.561198][ T6497] netlink: 'syz.1.137': attribute type 11 has an invalid length. [ 91.738895][ T6508] netlink: 104 bytes leftover after parsing attributes in process `syz.4.139'. [ 91.754404][ T6513] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 91.761971][ T6513] IPv6: NLM_F_CREATE should be set when creating new route [ 91.769267][ T6513] IPv6: NLM_F_CREATE should be set when creating new route [ 92.196679][ T6535] netlink: 12 bytes leftover after parsing attributes in process `syz.4.147'. [ 92.832081][ T6522] gtp0: entered promiscuous mode [ 92.838612][ T6522] gtp0: entered allmulticast mode [ 93.019934][ T6544] netlink: 12 bytes leftover after parsing attributes in process `syz.0.151'. [ 93.025341][ T6541] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 93.036368][ T6543] netlink: 4 bytes leftover after parsing attributes in process `syz.4.150'. [ 93.390886][ T6566] netlink: 'syz.3.155': attribute type 2 has an invalid length. [ 93.487013][ T6558] syzkaller0: entered promiscuous mode [ 93.492508][ T6558] syzkaller0: entered allmulticast mode [ 93.531313][ T6574] netlink: 36 bytes leftover after parsing attributes in process `syz.0.158'. [ 93.728798][ T6573] netlink: 36 bytes leftover after parsing attributes in process `syz.0.158'. [ 94.674772][ T6593] IPv6: sit1: Disabled Multicast RS [ 94.681880][ T6593] sit1: entered allmulticast mode [ 94.817055][ T6598] xt_l2tp: missing protocol rule (udp|l2tpip) [ 94.837157][ T6598] xt_l2tp: missing protocol rule (udp|l2tpip) [ 94.850712][ T6598] xt_l2tp: missing protocol rule (udp|l2tpip) [ 94.948034][ T6598] xt_l2tp: missing protocol rule (udp|l2tpip) [ 94.978891][ T6598] xt_l2tp: missing protocol rule (udp|l2tpip) [ 95.005091][ T6598] xt_l2tp: missing protocol rule (udp|l2tpip) [ 95.024157][ T6598] xt_l2tp: missing protocol rule (udp|l2tpip) [ 95.053194][ T6598] xt_l2tp: missing protocol rule (udp|l2tpip) [ 95.117539][ T6598] xt_l2tp: missing protocol rule (udp|l2tpip) [ 95.141525][ T6617] netlink: 12 bytes leftover after parsing attributes in process `syz.1.169'. [ 95.144018][ T6598] xt_l2tp: missing protocol rule (udp|l2tpip) [ 95.169875][ T6619] netlink: 12 bytes leftover after parsing attributes in process `syz.0.170'. [ 95.459671][ T6635] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 95.537906][ T6639] netlink: 'syz.1.174': attribute type 4 has an invalid length. [ 95.592486][ T6643] netlink: 'syz.1.174': attribute type 4 has an invalid length. [ 95.618583][ T6641] veth0_macvtap: left promiscuous mode [ 95.812008][ T6653] tipc: Can't bind to reserved service type 2 [ 95.860466][ T6648] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 95.876315][ T6648] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 95.896697][ T6648] bond0 (unregistering): Released all slaves [ 95.993768][ T6654] tap0: tun_chr_ioctl cmd 1074025677 [ 95.999451][ T6654] tap0: linktype set to 65534 [ 96.064594][ T6658] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 96.206415][ T6663] __nla_validate_parse: 2 callbacks suppressed [ 96.206434][ T6663] netlink: 360 bytes leftover after parsing attributes in process `syz.3.182'. [ 96.262367][ T6667] netlink: 244 bytes leftover after parsing attributes in process `syz.1.184'. [ 96.445316][ T6676] netlink: 'syz.3.188': attribute type 1 has an invalid length. [ 96.472540][ T6680] netlink: 'syz.3.188': attribute type 1 has an invalid length. [ 96.502636][ T6679] netlink: 'syz.2.187': attribute type 8 has an invalid length. [ 96.520893][ T6676] 8021q: adding VLAN 0 to HW filter on device bond2 [ 96.571997][ T6680] bond2: (slave gretap1): making interface the new active one [ 96.582232][ T6680] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 96.746003][ T6697] bond1: option min_links: invalid value (18446744073709551614) [ 96.754526][ T6697] bond1: option min_links: allowed values 0 - 2147483647 [ 96.774973][ T6697] bond1 (unregistering): Released all slaves [ 96.831728][ T5842] IPVS: starting estimator thread 0... [ 96.917887][ T6707] tipc: Started in network mode [ 96.922811][ T6707] tipc: Node identity 3adedb8d8953, cluster identity 4711 [ 96.931100][ T6707] tipc: Enabled bearer , priority 0 [ 96.945622][ T6704] IPVS: using max 26 ests per chain, 62400 per kthread [ 96.966926][ T6708] tipc: Enabling of bearer rejected, already enabled [ 97.019642][ T6707] syzkaller0: entered promiscuous mode [ 97.027743][ T6707] syzkaller0: entered allmulticast mode [ 97.035945][ T6716] IPVS: Unknown mcast interface: vcan0 [ 97.047675][ T6716] netlink: 60 bytes leftover after parsing attributes in process `syz.4.198'. [ 97.059857][ T6709] tipc: Resetting bearer [ 97.078139][ T5910] IPVS: starting estimator thread 0... [ 97.078408][ T6709] tipc: Disabling bearer [ 97.107885][ T6716] netlink: 60 bytes leftover after parsing attributes in process `syz.4.198'. [ 97.173634][ T6719] IPVS: using max 31 ests per chain, 74400 per kthread [ 97.208399][ T6722] netlink: 100 bytes leftover after parsing attributes in process `syz.3.199'. [ 97.241630][ T6722] netlink: 24 bytes leftover after parsing attributes in process `syz.3.199'. [ 97.288144][ T6726] netlink: 304 bytes leftover after parsing attributes in process `syz.4.201'. [ 97.506520][ T6741] Illegal XDP return value 1701577396 on prog (id 49) dev N/A, expect packet loss! [ 97.596098][ T6742] Cannot find add_set index 0 as target [ 114.275470][ T56] block nbd0: Possible stuck request ffff888024c60000: control (read@0,1024B). Runtime 30 seconds [ 114.286858][ T56] block nbd0: Possible stuck request ffff888024c601c0: control (read@1024,1024B). Runtime 30 seconds [ 114.297806][ T56] block nbd0: Possible stuck request ffff888024c60380: control (read@2048,1024B). Runtime 30 seconds [ 114.308750][ T56] block nbd0: Possible stuck request ffff888024c60540: control (read@3072,1024B). Runtime 30 seconds [ 132.836369][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.842690][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 144.354825][ T56] block nbd0: Possible stuck request ffff888024c60000: control (read@0,1024B). Runtime 60 seconds [ 144.366209][ T56] block nbd0: Possible stuck request ffff888024c601c0: control (read@1024,1024B). Runtime 60 seconds [ 144.377382][ T56] block nbd0: Possible stuck request ffff888024c60380: control (read@2048,1024B). Runtime 60 seconds [ 144.388363][ T56] block nbd0: Possible stuck request ffff888024c60540: control (read@3072,1024B). Runtime 60 seconds [ 146.198279][ T5197] udevd[5197]: worker [5829] /devices/virtual/block/nbd0 is taking a long time [ 160.019519][ T6776] netlink: 'syz.2.213': attribute type 29 has an invalid length. [ 160.033192][ T6776] netlink: 8 bytes leftover after parsing attributes in process `syz.2.213'. [ 160.037749][ T6772] netlink: 12 bytes leftover after parsing attributes in process `syz.1.212'. [ 160.053635][ T6776] netlink: 'syz.2.213': attribute type 29 has an invalid length. [ 160.061380][ T6776] netlink: 8 bytes leftover after parsing attributes in process `syz.2.213'. [ 160.065146][ T6777] netlink: 96 bytes leftover after parsing attributes in process `syz.4.215'. [ 160.172072][ T6779] x_tables: ip_tables: osf match: only valid for protocol 6 [ 160.270303][ T6786] netlink: 4 bytes leftover after parsing attributes in process `syz.4.219'. [ 160.323385][ T6786] bond0: (slave bond_slave_1): Releasing backup interface [ 160.868671][ T6816] syzkaller0: entered promiscuous mode [ 160.876360][ T6816] syzkaller0: entered allmulticast mode [ 160.883432][ T6813] tipc: Started in network mode [ 160.889275][ T6813] tipc: Node identity ea4b4b809355, cluster identity 4711 [ 160.897652][ T6813] tipc: Enabled bearer , priority 0 [ 160.973645][ T6813] tipc: Resetting bearer [ 161.017945][ T6813] tipc: Disabling bearer [ 161.058164][ T6822] netlink: 'syz.1.230': attribute type 1 has an invalid length. [ 161.141098][ T6822] 8021q: adding VLAN 0 to HW filter on device bond1 [ 161.316849][ T6837] netlink: 8 bytes leftover after parsing attributes in process `syz.1.234'. [ 161.895968][ T6854] netlink: 152 bytes leftover after parsing attributes in process `syz.0.238'. [ 162.048571][ T6854] netlink: 24 bytes leftover after parsing attributes in process `syz.0.238'. [ 162.840396][ T6877] netlink: 312 bytes leftover after parsing attributes in process `syz.1.241'. [ 162.870680][ T6876] raw_sendmsg: syz.2.243 forgot to set AF_INET. Fix it! [ 162.884795][ T6876] tipc: Started in network mode [ 162.889696][ T6876] tipc: Node identity c695bb1f31c7, cluster identity 4711 [ 162.948944][ T6876] tipc: Enabled bearer , priority 0 [ 162.997211][ T6891] syzkaller0: entered promiscuous mode [ 163.024116][ T6891] syzkaller0: entered allmulticast mode [ 163.066511][ T6876] tipc: Resetting bearer [ 163.068421][ T6900] netlink: 5 bytes leftover after parsing attributes in process `syz.4.245'. [ 163.101821][ T6875] tipc: Resetting bearer [ 163.172982][ T6875] tipc: Disabling bearer [ 163.525358][ T6929] netlink: 'syz.2.252': attribute type 39 has an invalid length. [ 163.552968][ T6929] veth0_macvtap: left promiscuous mode [ 163.578830][ T6935] xt_cluster: node mask cannot exceed total number of nodes [ 163.618064][ T6936] IPv6: Can't replace route, no match found [ 164.276702][ T6954] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.354008][ T6948] netlink: 'syz.0.258': attribute type 13 has an invalid length. [ 164.361951][ T6948] netlink: 'syz.0.258': attribute type 58 has an invalid length. [ 164.460542][ T6962] Bluetooth: MGMT ver 1.23 [ 164.893816][ T6986] : renamed from veth1_macvtap (while UP) [ 165.121430][ T7000] __nla_validate_parse: 6 callbacks suppressed [ 165.121448][ T7000] netlink: 24 bytes leftover after parsing attributes in process `syz.2.270'. [ 165.312048][ T7014] netlink: 'syz.4.273': attribute type 1 has an invalid length. [ 165.363414][ T7014] netlink: 'syz.4.273': attribute type 2 has an invalid length. [ 165.800104][ T7041] netlink: 4 bytes leftover after parsing attributes in process `syz.0.282'. [ 165.810138][ T7049] netlink: 36 bytes leftover after parsing attributes in process `syz.1.280'. [ 165.838026][ T7041] netlink: 4 bytes leftover after parsing attributes in process `syz.0.282'. [ 166.264693][ T7066] netlink: 8 bytes leftover after parsing attributes in process `syz.4.289'. [ 166.338978][ T7066] netlink: 12 bytes leftover after parsing attributes in process `syz.4.289'. [ 166.423364][ T7077] syzkaller1: entered promiscuous mode [ 166.429081][ T7077] syzkaller1: entered allmulticast mode [ 166.486486][ T7082] tap0: tun_chr_ioctl cmd 1074025677 [ 166.498918][ T7082] tap0: linktype set to 65534 [ 166.728875][ T7092] netlink: 'syz.2.295': attribute type 21 has an invalid length. [ 166.900448][ T7105] netlink: 4 bytes leftover after parsing attributes in process `syz.3.300'. [ 167.025442][ T7111] netlink: 144 bytes leftover after parsing attributes in process `syz.0.302'. [ 167.426438][ T7130] netlink: 'syz.3.308': attribute type 11 has an invalid length. [ 167.437687][ T7130] netlink: 224 bytes leftover after parsing attributes in process `syz.3.308'. [ 167.565283][ T7138] netlink: 'syz.2.311': attribute type 10 has an invalid length. [ 167.593880][ T7138] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.601937][ T7138] bridge_slave_1: left allmulticast mode [ 167.618090][ T7138] bridge_slave_1: left promiscuous mode [ 167.625859][ T7138] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.939793][ T7159] ip6gre1: entered allmulticast mode [ 168.053979][ T7172] tipc: Cannot configure node identity twice [ 168.168948][ T5842] IPVS: starting estimator thread 0... [ 168.183335][ T7185] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 168.211379][ T7182] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 168.264171][ T7183] IPVS: using max 39 ests per chain, 93600 per kthread [ 168.268800][ T7185] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 168.346270][ T7185] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 168.363881][ T7193] netlink: 'syz.4.328': attribute type 1 has an invalid length. [ 168.370642][ T7185] gretap1: entered promiscuous mode [ 168.393822][ T7185] gretap1: entered allmulticast mode [ 168.402592][ T7187] sch_tbf: burst 3936 is lower than device lo mtu (65550) ! [ 168.443798][ T7195] tipc: Enabled bearer , priority 0 [ 168.574877][ T7208] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 168.704160][ T7211] trusted_key: syz.0.333 sent an empty control message without MSG_MORE. [ 168.752383][ T7186] tipc: Disabling bearer [ 168.873136][ T7214] veth5: entered promiscuous mode [ 168.897718][ T7214] veth5: entered allmulticast mode [ 169.028673][ T7230] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 170.443604][ T7303] netlink: 4 bytes leftover after parsing attributes in process `syz.3.361'. [ 170.478847][ T7303] netlink: 4 bytes leftover after parsing attributes in process `syz.3.361'. [ 170.519934][ T7307] netlink: 36 bytes leftover after parsing attributes in process `syz.3.361'. [ 170.675604][ T7321] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 170.776707][ T7275] lec:lec_atm_close: lec0: Shut down! [ 170.824853][ T7327] netlink: 'syz.1.365': attribute type 1 has an invalid length. [ 170.897876][ T7327] netlink: 'syz.1.365': attribute type 2 has an invalid length. [ 171.096405][ T7338] team_slave_0: entered promiscuous mode [ 171.102293][ T7338] team_slave_1: entered promiscuous mode [ 171.145745][ T7346] netlink: 'syz.4.370': attribute type 7 has an invalid length. [ 171.155206][ T7338] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 171.203093][ T7346] netlink: 140 bytes leftover after parsing attributes in process `syz.4.370'. [ 171.257534][ T7341] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 171.542004][ T7366] netlink: 9 bytes leftover after parsing attributes in process `syz.0.374'. [ 171.583911][ T7366] gretap0: entered promiscuous mode [ 171.611235][ T7366] netlink: 5 bytes leftover after parsing attributes in process `syz.0.374'. [ 171.668839][ T7366] 0ªî{X¹¦: renamed from gretap0 [ 171.745590][ T7366] 0ªî{X¹¦: left promiscuous mode [ 171.758562][ T7366] 0ªî{X¹¦: entered allmulticast mode [ 171.782773][ T7366] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 172.175061][ T5883] lec:lec_start_xmit: lec0:No lecd attached [ 172.177471][ T7399] netlink: 140 bytes leftover after parsing attributes in process `syz.4.380'. [ 172.303623][ T7404] netlink: 48 bytes leftover after parsing attributes in process `syz.0.382'. [ 172.328732][ T7404] netlink: 48 bytes leftover after parsing attributes in process `syz.0.382'. [ 172.591007][ T7421] netlink: 'syz.2.387': attribute type 2 has an invalid length. [ 172.723331][ T7429] netlink: 76 bytes leftover after parsing attributes in process `syz.0.388'. [ 172.950621][ T7441] x_tables: duplicate underflow at hook 1 [ 172.991832][ T7447] netlink: 'syz.2.392': attribute type 4 has an invalid length. [ 173.370331][ T7456] macvtap1: entered promiscuous mode [ 173.376900][ T7456] vlan0: entered promiscuous mode [ 173.396923][ T7456] macvtap1: entered allmulticast mode [ 173.418051][ T7456] vlan0: entered allmulticast mode [ 173.428299][ T7456] veth0_vlan: entered allmulticast mode [ 173.479133][ T7458] skbuff: bad partial csum: csum=65506/2 headroom=178 headlen=65526 [ 173.749520][ T7479] tipc: Started in network mode [ 173.778009][ T7479] tipc: Node identity 9afe6a0a8126, cluster identity 4711 [ 173.810997][ T7479] tipc: Enabled bearer , priority 0 [ 173.836768][ T7482] syzkaller0: entered promiscuous mode [ 173.857991][ T7482] syzkaller0: entered allmulticast mode [ 173.876664][ T7484] ip6t_REJECT: ECHOREPLY is not supported [ 173.892036][ T7479] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 173.994918][ T7479] tipc: Resetting bearer [ 174.037253][ T7477] tipc: Resetting bearer [ 174.175642][ T7477] tipc: Disabling bearer [ 174.322553][ T7509] netlink: 'syz.0.409': attribute type 1 has an invalid length. [ 174.331186][ T7509] netlink: 'syz.0.409': attribute type 4 has an invalid length. [ 174.395029][ T7505] bond3: Unable to set peer notification delay as MII monitoring is disabled [ 174.444326][ T56] block nbd0: Possible stuck request ffff888024c60000: control (read@0,1024B). Runtime 90 seconds [ 174.455322][ T56] block nbd0: Possible stuck request ffff888024c601c0: control (read@1024,1024B). Runtime 90 seconds [ 174.466272][ T56] block nbd0: Possible stuck request ffff888024c60380: control (read@2048,1024B). Runtime 90 seconds [ 174.477311][ T56] block nbd0: Possible stuck request ffff888024c60540: control (read@3072,1024B). Runtime 90 seconds [ 174.487197][ T7505] bond3 (unregistering): Released all slaves [ 175.557427][ T7571] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 175.640169][ T7574] __nla_validate_parse: 9 callbacks suppressed [ 175.640188][ T7574] netlink: 6 bytes leftover after parsing attributes in process `syz.3.427'. [ 175.922741][ T7595] netlink: 'syz.4.433': attribute type 1 has an invalid length. [ 175.938672][ T7596] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 175.964710][ T7595] netlink: 184 bytes leftover after parsing attributes in process `syz.4.433'. [ 175.990699][ T7597] netlink: 'syz.0.434': attribute type 1 has an invalid length. [ 176.003784][ T7595] netlink: 'syz.4.433': attribute type 1 has an invalid length. [ 176.016123][ T7596] SET target dimension over the limit! [ 176.085003][ T7597] 8021q: adding VLAN 0 to HW filter on device bond2 [ 176.229656][ T7607] bond2: (slave veth3): Enslaving as an active interface with a down link [ 176.258051][ T7611] netlink: 164 bytes leftover after parsing attributes in process `syz.3.440'. [ 176.270028][ T7611] netlink: 164 bytes leftover after parsing attributes in process `syz.3.440'. [ 176.282348][ T7611] netlink: 60 bytes leftover after parsing attributes in process `syz.3.440'. [ 176.293388][ T7613] netlink: 8 bytes leftover after parsing attributes in process `syz.1.438'. [ 176.312017][ T7613] netlink: 4 bytes leftover after parsing attributes in process `syz.1.438'. [ 176.387084][ T50] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 176.415829][ T50] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 176.444677][ T50] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 176.474614][ T50] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 176.485596][ T7624] IPVS: set_ctl: invalid protocol: 136 224.0.0.2:20001 [ 176.571940][ T7636] netlink: 8 bytes leftover after parsing attributes in process `syz.3.444'. [ 176.667275][ T7645] netlink: 4 bytes leftover after parsing attributes in process `syz.1.447'. [ 176.871228][ T7650] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 176.910522][ T7650] bond0 (unregistering): Released all slaves [ 177.263187][ T7668] netlink: 52 bytes leftover after parsing attributes in process `syz.1.452'. [ 177.873491][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5700 ms [ 177.881851][ C0] lec:lec_tx_timeout: lec0 [ 177.886697][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 178.432264][ T7680] openvswitch: netlink: Missing key (keys=40, expected=100) [ 179.171006][ T7721] netlink: 'syz.1.467': attribute type 6 has an invalid length. [ 179.429918][ T7735] netlink: 'syz.0.469': attribute type 2 has an invalid length. [ 179.438006][ T7735] netlink: 'syz.0.469': attribute type 1 has an invalid length. [ 179.562617][ T7740] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 179.724373][ T7746] netlink: 'syz.3.475': attribute type 3 has an invalid length. [ 180.099297][ T7754] bond2: entered promiscuous mode [ 180.117755][ T7754] bond2: entered allmulticast mode [ 180.135019][ T7754] 8021q: adding VLAN 0 to HW filter on device bond2 [ 180.182407][ T7775] netlink: 'syz.2.483': attribute type 1 has an invalid length. [ 180.229322][ T7775] netlink: 'syz.2.483': attribute type 2 has an invalid length. [ 180.427015][ T7783] x_tables: duplicate underflow at hook 3 [ 180.795498][ T7798] netlink: 'syz.0.490': attribute type 1 has an invalid length. [ 180.880928][ T7804] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 181.125392][ T7815] __nla_validate_parse: 7 callbacks suppressed [ 181.125410][ T7815] netlink: 20 bytes leftover after parsing attributes in process `syz.0.494'. [ 181.258120][ T7818] Cannot find map_set index 0 as target [ 181.274294][ T7818] netlink: 8 bytes leftover after parsing attributes in process `syz.2.496'. [ 181.283230][ T7818] netlink: 'syz.2.496': attribute type 5 has an invalid length. [ 181.316724][ T7818] netlink: 20 bytes leftover after parsing attributes in process `syz.2.496'. [ 181.363743][ T7818] geneve2: entered promiscuous mode [ 181.368994][ T7818] geneve2: entered allmulticast mode [ 181.409774][ T2984] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 181.426476][ T2984] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 181.478209][ T2984] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 181.509746][ T2984] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 181.593979][ T7829] xt_ecn: cannot match TCP bits for non-tcp packets [ 181.774548][ T7838] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 181.825617][ T7841] netlink: 28 bytes leftover after parsing attributes in process `syz.3.504'. [ 181.838555][ T7840] netlink: 'syz.2.505': attribute type 15 has an invalid length. [ 181.948446][ T7848] netlink: 32 bytes leftover after parsing attributes in process `syz.2.509'. [ 181.968204][ T7845] netlink: 8 bytes leftover after parsing attributes in process `syz.0.508'. [ 182.049637][ T7851] netlink: 8 bytes leftover after parsing attributes in process `syz.4.510'. [ 182.074811][ T7851] netlink: 8 bytes leftover after parsing attributes in process `syz.4.510'. [ 182.111437][ T7852] dvmrp0: entered allmulticast mode [ 182.124783][ T7851] netlink: 8 bytes leftover after parsing attributes in process `syz.4.510'. [ 182.360496][ T7869] netlink: 11 bytes leftover after parsing attributes in process `syz.3.515'. [ 182.402015][ T7870] Cannot find add_set index 0 as target [ 182.446137][ T7869] Cannot find add_set index 1 as target [ 182.518401][ T7877] x_tables: ip6_tables: cgroup match: used from hooks PREROUTING, but only valid from INPUT/OUTPUT/POSTROUTING [ 182.819472][ T7892] tap0: tun_chr_ioctl cmd 2148553947 [ 182.914940][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5030 ms [ 182.923048][ C0] lec:lec_tx_timeout: lec0 [ 182.928023][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 183.530582][ T7921] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 183.614106][ T7921] syzkaller0: entered promiscuous mode [ 183.654264][ T7921] syzkaller0: entered allmulticast mode [ 183.678666][ T7930] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 183.688883][ T7932] netlink: 'syz.1.535': attribute type 11 has an invalid length. [ 183.721285][ T7932] netlink: 'syz.1.535': attribute type 11 has an invalid length. [ 183.818100][ T7936] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 183.889310][ T7936] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.897570][ T7936] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.974235][ T7943] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 184.059115][ T7952] ieee802154 phy0 wpan0: encryption failed: -22 [ 184.085459][ T7955] sock: sock_timestamping_bind_phc: sock not bind to device [ 184.268047][ T7963] netlink: 'syz.3.542': attribute type 7 has an invalid length. [ 184.328921][ T50] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 184.339931][ T7963] netlink: 'syz.3.542': attribute type 7 has an invalid length. [ 184.384058][ T50] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 184.392814][ T50] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 184.417079][ T50] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 185.131775][ T7994] pim6reg: entered allmulticast mode [ 185.161028][ T7994] pim6reg: left allmulticast mode [ 185.566614][ T8013] pim6reg: entered allmulticast mode [ 185.586465][ T8013] pim6reg: left allmulticast mode [ 186.122481][ T8043] netlink: 'syz.0.562': attribute type 39 has an invalid length. [ 186.172947][ T8046] xt_TPROXY: Can be used only with -p tcp or -p udp [ 186.232659][ T8051] xt_connbytes: Forcing CT accounting to be enabled [ 187.927617][ T8089] infiniband syz1: set active [ 187.943547][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 187.951622][ C0] lec:lec_tx_timeout: lec0 [ 187.956997][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 187.972581][ T8089] infiniband syz1: added bond0 [ 187.998339][ T8154] netlink: 'syz.2.590': attribute type 1 has an invalid length. [ 188.018203][ T8089] syz1: rxe_create_cq: returned err = -12 [ 188.046139][ T8089] infiniband syz1: Couldn't create ib_mad CQ [ 188.066665][ T8089] infiniband syz1: Couldn't open port 1 [ 188.167551][ T8089] RDS/IB: syz1: added [ 188.181793][ T8089] smc: adding ib device syz1 with port count 1 [ 188.202333][ T8089] smc: ib device syz1 port 1 has no pnetid [ 188.518645][ T8172] __nla_validate_parse: 15 callbacks suppressed [ 188.518666][ T8172] netlink: 7 bytes leftover after parsing attributes in process `syz.4.594'. [ 188.594552][ T2984] af_packet: tpacket_rcv: packet too big, clamped from 52 to 4294967272. macoff=96 [ 188.720407][ T8178] tipc: Started in network mode [ 188.725580][ T8178] tipc: Node identity 562399a48196, cluster identity 4711 [ 188.733355][ T8178] tipc: Enabled bearer , priority 0 [ 188.752175][ T8178] syzkaller0: entered promiscuous mode [ 188.771387][ T8178] syzkaller0: entered allmulticast mode [ 188.816388][ T8178] tipc: Resetting bearer [ 188.826806][ T8175] tipc: Resetting bearer [ 188.852140][ T8175] tipc: Disabling bearer [ 188.871048][ T8185] netlink: 300 bytes leftover after parsing attributes in process `syz.0.600'. [ 189.085313][ T8195] delete_channel: no stack [ 189.159937][ T8199] netlink: 'syz.1.604': attribute type 2 has an invalid length. [ 189.295662][ T5870] IPVS: starting estimator thread 0... [ 189.303397][ T8209] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 189.395345][ T8213] IPVS: using max 28 ests per chain, 67200 per kthread [ 189.587964][ T8220] erspan0: entered promiscuous mode [ 189.593343][ T8220] erspan0: entered allmulticast mode [ 189.779831][ T8230] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 189.881842][ T8238] netlink: 28 bytes leftover after parsing attributes in process `syz.4.613'. [ 190.286241][ T8255] netlink: 12 bytes leftover after parsing attributes in process `syz.0.618'. [ 190.352848][ T8255] netlink: 'syz.0.618': attribute type 12 has an invalid length. [ 190.373977][ T8255] netlink: 132 bytes leftover after parsing attributes in process `syz.0.618'. [ 190.671094][ T8267] x_tables: duplicate underflow at hook 1 [ 190.971190][ T8275] tipc: New replicast peer: 255.255.255.255 [ 190.982450][ T8275] tipc: Enabled bearer , priority 10 [ 191.272799][ T8282] netlink: 'syz.4.628': attribute type 4 has an invalid length. [ 191.446318][ T8289] SET target dimension over the limit! [ 191.671439][ T8304] netlink: 24 bytes leftover after parsing attributes in process `syz.1.631'. [ 191.771695][ T8309] C: renamed from lo (while UP) [ 191.827616][ T8309] netlink: 8 bytes leftover after parsing attributes in process `syz.4.635'. [ 191.842681][ T8313] netlink: 12 bytes leftover after parsing attributes in process `syz.2.636'. [ 191.955375][ T8313] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 192.107422][ T5870] tipc: Node number set to 3619002788 [ 192.224213][ T8331] nbd3: detected capacity change from 0 to 63 [ 192.237302][ T8336] block nbd3: NBD_DISCONNECT [ 192.253855][ T8336] block nbd3: Disconnected due to user request. [ 192.260859][ T8336] block nbd3: shutting down sockets [ 192.284201][ C0] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 192.293591][ C0] Buffer I/O error on dev nbd3, logical block 0, async page read [ 192.302515][ C0] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 192.306238][ C1] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 192.311716][ C0] Buffer I/O error on dev nbd3, logical block 1, async page read [ 192.320734][ C1] Buffer I/O error on dev nbd3, logical block 2, async page read [ 192.320837][ C1] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 192.345388][ C1] Buffer I/O error on dev nbd3, logical block 3, async page read [ 192.355383][ T5834] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 192.374446][ T5834] Buffer I/O error on dev nbd3, logical block 0, async page read [ 192.382567][ T5834] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 192.405242][ T5834] Buffer I/O error on dev nbd3, logical block 1, async page read [ 192.413197][ T5834] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 192.443119][ T5834] Buffer I/O error on dev nbd3, logical block 2, async page read [ 192.451861][ T5834] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 192.462196][ T5834] Buffer I/O error on dev nbd3, logical block 3, async page read [ 192.470772][ T5834] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 192.480959][ T5834] Buffer I/O error on dev nbd3, logical block 0, async page read [ 192.489862][ T5834] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 192.499587][ T5834] Buffer I/O error on dev nbd3, logical block 1, async page read [ 192.513028][ T5834] ldm_validate_partition_table(): Disk read failed. [ 192.524853][ T5834] Dev nbd3: unable to read RDB block 0 [ 192.535049][ T5834] nbd3: unable to read partition table [ 192.551007][ T5834] ldm_validate_partition_table(): Disk read failed. [ 192.561302][ T5834] Dev nbd3: unable to read RDB block 0 [ 192.570858][ T5834] nbd3: unable to read partition table [ 192.751539][ T8352] netlink: 24 bytes leftover after parsing attributes in process `syz.4.646'. [ 192.781232][ T8356] netlink: 24 bytes leftover after parsing attributes in process `syz.1.649'. [ 192.963535][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 192.971678][ C0] lec:lec_tx_timeout: lec0 [ 192.976565][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 193.028819][ T8371] netlink: 'syz.3.652': attribute type 1 has an invalid length. [ 193.050294][ T8371] netlink: 'syz.3.652': attribute type 4 has an invalid length. [ 193.112504][ T8377] xt_socket: unknown flags 0x50 [ 193.433075][ T8394] netlink: 'syz.1.658': attribute type 1 has an invalid length. [ 193.555485][ T8400] __nla_validate_parse: 5 callbacks suppressed [ 193.555505][ T8400] netlink: 8 bytes leftover after parsing attributes in process `syz.3.661'. [ 193.572924][ T8400] netlink: 12 bytes leftover after parsing attributes in process `syz.3.661'. [ 193.662321][ T8400] netlink: 8 bytes leftover after parsing attributes in process `syz.3.661'. [ 193.672307][ T8400] netlink: 12 bytes leftover after parsing attributes in process `syz.3.661'. [ 193.730914][ T8400] netlink: 8 bytes leftover after parsing attributes in process `syz.3.661'. [ 193.751174][ T8400] netlink: 12 bytes leftover after parsing attributes in process `syz.3.661'. [ 193.764602][ T8414] netlink: 'syz.2.664': attribute type 1 has an invalid length. [ 193.858474][ T8418] netlink: 12 bytes leftover after parsing attributes in process `syz.2.664'. [ 193.891300][ T8400] netlink: 8 bytes leftover after parsing attributes in process `syz.3.661'. [ 193.914465][ T8400] netlink: 12 bytes leftover after parsing attributes in process `syz.3.661'. [ 194.007408][ T8400] netlink: 8 bytes leftover after parsing attributes in process `syz.3.661'. [ 194.283975][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.292592][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.302750][ T8438] batadv0: entered promiscuous mode [ 194.315567][ T8436] batadv0: left promiscuous mode [ 195.070188][ T8489] tipc: Enabled bearer , priority 0 [ 195.077999][ T8494] netlink: 'syz.4.689': attribute type 64 has an invalid length. [ 195.102005][ T8489] syzkaller0: entered promiscuous mode [ 195.133668][ T8489] syzkaller0: entered allmulticast mode [ 195.142298][ T8494] netlink: 'syz.4.689': attribute type 64 has an invalid length. [ 195.152996][ T8489] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 195.191329][ T8494] netlink: 'syz.4.689': attribute type 64 has an invalid length. [ 195.204141][ T8489] tipc: Resetting bearer [ 195.219808][ T8494] netlink: 'syz.4.689': attribute type 64 has an invalid length. [ 195.236184][ T8494] netlink: 'syz.4.689': attribute type 64 has an invalid length. [ 195.244827][ T8494] netlink: 'syz.4.689': attribute type 64 has an invalid length. [ 195.430270][ T8512] ip6gre1: entered allmulticast mode [ 195.541032][ T8520] sctp: [Deprecated]: syz.1.697 (pid 8520) Use of struct sctp_assoc_value in delayed_ack socket option. [ 195.541032][ T8520] Use struct sctp_sack_info instead [ 195.920810][ T8538] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 195.947662][ T8484] tipc: Resetting bearer [ 195.982290][ T8484] tipc: Disabling bearer [ 196.424570][ T8569] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 196.456589][ T8569] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 196.511517][ T8581] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 196.528411][ T8575] vlan2: entered allmulticast mode [ 196.547785][ T8575] bridge0: entered allmulticast mode [ 196.556849][ T8575] bridge0: entered promiscuous mode [ 196.579196][ T8575] bridge0: left promiscuous mode [ 196.591455][ T8575] bond3: (slave vlan2): making interface the new active one [ 196.601054][ T8575] bridge0: entered promiscuous mode [ 196.608769][ T8575] bond3: (slave vlan2): Enslaving as an active interface with an up link [ 196.861495][ T8591] 8021q: adding VLAN 0 to HW filter on device bond3 [ 197.350207][ T8634] x_tables: duplicate underflow at hook 2 [ 197.783134][ T8658] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 197.983471][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 197.991654][ C0] lec:lec_tx_timeout: lec0 [ 197.994631][ T12] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 197.996608][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 198.020883][ T12] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 198.061403][ T12] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 198.090345][ T12] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 198.589786][ T8692] __nla_validate_parse: 90 callbacks suppressed [ 198.589808][ T8692] netlink: 28 bytes leftover after parsing attributes in process `syz.4.753'. [ 198.705189][ T8694] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 198.760904][ T8694] netlink: 12 bytes leftover after parsing attributes in process `syz.0.754'. [ 198.876856][ T8699] TCP: TCP_TX_DELAY enabled [ 199.034706][ T8701] validate_nla: 68 callbacks suppressed [ 199.034725][ T8701] netlink: 'syz.4.757': attribute type 1 has an invalid length. [ 199.098740][ T8701] netlink: 224 bytes leftover after parsing attributes in process `syz.4.757'. [ 199.127873][ T8703] netlink: 28 bytes leftover after parsing attributes in process `syz.1.758'. [ 199.259116][ T8706] netlink: 'syz.4.759': attribute type 1 has an invalid length. [ 199.296802][ T8707] policy can only be matched on NF_INET_PRE_ROUTING [ 199.296827][ T8707] unable to load match [ 199.423527][ T8712] netlink: 4 bytes leftover after parsing attributes in process `syz.4.761'. [ 199.520223][ T8712] x_tables: duplicate underflow at hook 4 [ 199.539931][ T8712] netlink: 96 bytes leftover after parsing attributes in process `syz.4.761'. [ 200.126261][ T8738] netlink: 'syz.4.772': attribute type 1 has an invalid length. [ 200.174049][ T8738] netlink: 172 bytes leftover after parsing attributes in process `syz.4.772'. [ 200.229279][ T8751] netlink: 16 bytes leftover after parsing attributes in process `syz.0.773'. [ 200.321680][ T8754] netlink: 'syz.2.775': attribute type 1 has an invalid length. [ 200.798247][ T8785] Cannot find set identified by id 0 to match [ 200.845781][ T8785] netlink: 'syz.0.788': attribute type 1 has an invalid length. [ 200.862852][ T8790] netem: change failed [ 201.126624][ T8812] netlink: 'syz.3.795': attribute type 1 has an invalid length. [ 201.136698][ T8811] sctp: [Deprecated]: syz.1.792 (pid 8811) Use of int in max_burst socket option deprecated. [ 201.136698][ T8811] Use struct sctp_assoc_value instead [ 201.244051][ T8812] netlink: 16 bytes leftover after parsing attributes in process `syz.3.795'. [ 201.306890][ T8812] netlink: 12 bytes leftover after parsing attributes in process `syz.3.795'. [ 201.831613][ T8851] sctp: [Deprecated]: syz.3.803 (pid 8851) Use of int in max_burst socket option deprecated. [ 201.831613][ T8851] Use struct sctp_assoc_value instead [ 202.068691][ T8860] ieee802154 phy0 wpan0: encryption failed: -22 [ 202.355822][ T8870] bond0: option ad_select: unable to set because the bond device is up [ 202.556561][ T5197] udevd[5197]: worker [6151] terminated by signal 33 (Unknown signal 33) [ 202.571918][ T5197] udevd[5197]: worker [6151] failed while handling '/devices/virtual/block/loop3' [ 203.024012][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 203.032078][ C0] lec:lec_tx_timeout: lec0 [ 203.036716][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 203.261881][ T8929] bond3: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 203.276718][ T8929] bond3 (unregistering): Released all slaves [ 203.344247][ T8938] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 203.674484][ T8956] __nla_validate_parse: 37 callbacks suppressed [ 203.674503][ T8956] netlink: 40 bytes leftover after parsing attributes in process `syz.0.836'. [ 203.697541][ T8965] netlink: 28 bytes leftover after parsing attributes in process `syz.2.837'. [ 203.763672][ T8965] netlink: 28 bytes leftover after parsing attributes in process `syz.2.837'. [ 203.805460][ T8966] bond4: entered promiscuous mode [ 203.834492][ T8966] bridge0: port 3(syz_tun) entered blocking state [ 203.841849][ T8966] bridge0: port 3(syz_tun) entered disabled state [ 203.877024][ T8966] syz_tun: entered allmulticast mode [ 203.905577][ T8972] netlink: 'syz.1.838': attribute type 10 has an invalid length. [ 203.917334][ T8981] netlink: 8 bytes leftover after parsing attributes in process `syz.4.840'. [ 203.936460][ T8966] syz_tun: entered promiscuous mode [ 203.942379][ T8966] bridge0: port 3(syz_tun) entered blocking state [ 203.949266][ T8966] bridge0: port 3(syz_tun) entered forwarding state [ 204.003056][ T8972] bridge0: port 3(syz_tun) entered disabled state [ 204.009768][ T8972] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.017639][ T8972] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.052348][ T8972] bridge0: port 3(syz_tun) entered blocking state [ 204.059027][ T8972] bridge0: port 3(syz_tun) entered forwarding state [ 204.066010][ T8972] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.073197][ T8972] bridge0: port 2(bridge_slave_1) entered forwarding state [ 204.080753][ T8972] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.088006][ T8972] bridge0: port 1(bridge_slave_0) entered forwarding state [ 204.119183][ T8972] bridge0: left promiscuous mode [ 204.135743][ T8972] bridge0: entered promiscuous mode [ 204.144015][ T8972] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 204.166314][ T8982] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:a8aa:aaff:feaa:aa17 error=-28 [ 204.185866][ T8982] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:201b:61ff:fe4f:0b07 error=-28 [ 204.565584][ T56] block nbd0: Possible stuck request ffff888024c60000: control (read@0,1024B). Runtime 120 seconds [ 204.576799][ T56] block nbd0: Possible stuck request ffff888024c601c0: control (read@1024,1024B). Runtime 120 seconds [ 204.588013][ T56] block nbd0: Possible stuck request ffff888024c60380: control (read@2048,1024B). Runtime 120 seconds [ 204.599260][ T56] block nbd0: Possible stuck request ffff888024c60540: control (read@3072,1024B). Runtime 120 seconds [ 204.631515][ T8982] infiniband syz1: set active [ 204.671298][ T8982] infiniband syz1: added syz_tun [ 204.698370][ T8982] syz1: rxe_create_cq: returned err = -12 [ 204.726031][ T8982] infiniband syz1: Couldn't create ib_mad CQ [ 204.748503][ T8982] infiniband syz1: Couldn't open port 1 [ 204.878175][ T8982] RDS/IB: syz1: added [ 204.891870][ T8982] smc: adding ib device syz1 with port count 1 [ 204.906629][ T8982] smc: ib device syz1 port 1 has no pnetid [ 204.933026][ T9026] netlink: 'syz.0.853': attribute type 64 has an invalid length. [ 204.942370][ T9030] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.855'. [ 204.963749][ T9026] netlink: 20 bytes leftover after parsing attributes in process `syz.0.853'. [ 204.974870][ T9026] netlink: 'syz.0.853': attribute type 64 has an invalid length. [ 204.982632][ T9026] netlink: 20 bytes leftover after parsing attributes in process `syz.0.853'. [ 205.155546][ T9038] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 205.162300][ T9038] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 205.497292][ T9057] sctp: [Deprecated]: syz.2.863 (pid 9057) Use of struct sctp_assoc_value in delayed_ack socket option. [ 205.497292][ T9057] Use struct sctp_sack_info instead [ 205.520719][ T9057] netlink: 'syz.2.863': attribute type 1 has an invalid length. [ 205.530791][ T9057] netlink: 228 bytes leftover after parsing attributes in process `syz.2.863'. [ 205.584347][ T9060] vcan0: tx drop: invalid da for name 0xfffffffffffffffc [ 205.705863][ T9067] netlink: 24 bytes leftover after parsing attributes in process `syz.2.866'. [ 205.936849][ T9076] netlink: 40 bytes leftover after parsing attributes in process `syz.0.870'. [ 206.268462][ T9096] netlink: 'syz.3.875': attribute type 8 has an invalid length. [ 206.665695][ T9115] tipc: Enabled bearer , priority 0 [ 206.684140][ T9115] syzkaller0: entered promiscuous mode [ 206.690179][ T9115] syzkaller0: entered allmulticast mode [ 206.701503][ T9115] syzkaller0: left promiscuous mode [ 206.709394][ T9115] syzkaller0: left allmulticast mode [ 206.745202][ T9114] tipc: Resetting bearer [ 206.769203][ T9114] tipc: Disabling bearer [ 206.930840][ T9122] netlink: 'syz.0.886': attribute type 1 has an invalid length. [ 207.081455][ T9125] netlink: 'syz.4.887': attribute type 1 has an invalid length. [ 207.152268][ T9131] syzkaller0: entered promiscuous mode [ 207.164615][ T9131] syzkaller0: entered allmulticast mode [ 207.198153][ T9125] 8021q: adding VLAN 0 to HW filter on device bond1 [ 207.360339][ T9139] netlink: 'syz.0.889': attribute type 1 has an invalid length. [ 207.467711][ T9139] bond4: entered promiscuous mode [ 207.509772][ T9139] 8021q: adding VLAN 0 to HW filter on device bond4 [ 207.518363][ T9140] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 207.931001][ T9172] !: renamed from dummy0 (while UP) [ 208.043574][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 208.051661][ C0] lec:lec_tx_timeout: lec0 [ 208.056849][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 208.495312][ T9182] Set syz1 is full, maxelem 6117 reached [ 208.718999][ T9207] __nla_validate_parse: 7 callbacks suppressed [ 208.719017][ T9207] netlink: 8 bytes leftover after parsing attributes in process `syz.0.911'. [ 208.741390][ T9207] netlink: 24 bytes leftover after parsing attributes in process `syz.0.911'. [ 208.774357][ T9199] macvtap2: entered allmulticast mode [ 208.779774][ T9199] veth0_macvtap: entered allmulticast mode [ 208.810146][ T9209] team_slave_0: entered promiscuous mode [ 208.815944][ T9209] team_slave_1: entered promiscuous mode [ 208.829228][ T9209] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 208.872949][ T9210] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 208.890557][ T9218] netlink: 'syz.0.913': attribute type 10 has an invalid length. [ 208.919699][ T9218] bridge_slave_1: left allmulticast mode [ 208.932999][ T9218] bridge_slave_1: left promiscuous mode [ 208.943334][ T9218] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.965950][ T9218] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 209.310651][ T9242] netlink: 16 bytes leftover after parsing attributes in process `syz.4.921'. [ 209.446964][ T9251] tipc: Enabled bearer , priority 0 [ 209.459420][ T9251] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode [ 209.469168][ T9251] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode [ 209.501990][ T9251] sch_tbf: burst 206 is lower than device syzkaller0 mtu (1514) ! [ 209.521980][ T9251] tipc: Resetting bearer [ 209.634968][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.808522][ T9275] netlink: 'syz.3.928': attribute type 1 has an invalid length. [ 209.816448][ T9275] netlink: 'syz.3.928': attribute type 2 has an invalid length. [ 209.867844][ T9277] netlink: 16 bytes leftover after parsing attributes in process `syz.4.929'. [ 210.081456][ T9287] netlink: 116 bytes leftover after parsing attributes in process `syz.2.931'. [ 210.345348][ T9304] netlink: 'syz.4.939': attribute type 3 has an invalid length. [ 210.364546][ T9306] netlink: 'syz.0.941': attribute type 1 has an invalid length. [ 210.452015][ T9306] bond5: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 210.464937][ T9315] netlink: 'syz.4.943': attribute type 1 has an invalid length. [ 210.483030][ T9315] netlink: 'syz.4.943': attribute type 6 has an invalid length. [ 210.500770][ T991] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 210.513872][ T5910] tipc: Node number set to 467167754 [ 210.521417][ T9306] 8021q: adding VLAN 0 to HW filter on device bond5 [ 210.578236][ T9306] veth5: entered promiscuous mode [ 210.606206][ T9306] bond5: (slave veth5): Enslaving as a backup interface with a down link [ 210.639130][ T991] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 210.961453][ T9351] nbd: socks must be embedded in a SOCK_ITEM attr [ 210.996217][ T9355] nbd: socks must be embedded in a SOCK_ITEM attr [ 211.073262][ T9361] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 211.169821][ T9369] netlink: 'syz.3.954': attribute type 21 has an invalid length. [ 211.178940][ T9369] netlink: 128 bytes leftover after parsing attributes in process `syz.3.954'. [ 211.189031][ T9369] netlink: 'syz.3.954': attribute type 4 has an invalid length. [ 211.197324][ T9369] netlink: 'syz.3.954': attribute type 5 has an invalid length. [ 211.205479][ T9369] netlink: 3 bytes leftover after parsing attributes in process `syz.3.954'. [ 211.231691][ T9371] tipc: Enabled bearer , priority 0 [ 211.239542][ T9371] syzkaller0: entered promiscuous mode [ 211.245323][ T9371] syzkaller0: entered allmulticast mode [ 211.255174][ T9371] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 211.265564][ T9371] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 211.280616][ T9371] netlink: 'syz.4.955': attribute type 1 has an invalid length. [ 211.294897][ T9371] tipc: Resetting bearer [ 211.303312][ T9370] tipc: Resetting bearer [ 211.320055][ T9370] tipc: Disabling bearer [ 211.335975][ T9375] netlink: 32 bytes leftover after parsing attributes in process `syz.3.957'. [ 211.349364][ T9375] netlink: 28 bytes leftover after parsing attributes in process `syz.3.957'. [ 211.619826][ T9382] sit0: left promiscuous mode [ 211.702908][ T9382] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.710416][ T9382] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.728436][ T9382] team_slave_0: left promiscuous mode [ 211.734223][ T9382] team_slave_1: left promiscuous mode [ 211.801922][ T9382] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 211.817921][ T9382] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 211.988500][ T9382] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 212.095106][ T12] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.123703][ T12] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.286356][ T36] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.313715][ T36] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.456445][ T9422] netlink: 8 bytes leftover after parsing attributes in process `syz.0.971'. [ 212.740091][ T9422] veth7: entered promiscuous mode [ 212.755401][ T9422] veth7: entered allmulticast mode [ 212.842005][ T9438] netlink: 'syz.3.975': attribute type 4 has an invalid length. [ 212.912651][ T9438] `: renamed from bond0 (while UP) [ 212.956910][ T9443] netlink: 'syz.1.976': attribute type 3 has an invalid length. [ 213.064068][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 213.072125][ C0] lec:lec_tx_timeout: lec0 [ 213.077189][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 213.092984][ T9448] xt_hashlimit: max too large, truncated to 1048576 [ 213.382705][ T9467] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 214.368262][ T9514] __nla_validate_parse: 4 callbacks suppressed [ 214.368280][ T9514] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1000'. [ 214.405924][ T9514] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap0 [ 214.429538][ T9517] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1002'. [ 214.438804][ T9514] gretap0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 214.447526][ T9514] gretap0: entered promiscuous mode [ 214.453170][ T9514] gretap0: entered allmulticast mode [ 214.508522][ T9517] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1002'. [ 214.567518][ T9524] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1005'. [ 214.593167][ T9528] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 214.779066][ T9533] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1008'. [ 214.845821][ T9540] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1010'. [ 214.889839][ T9542] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1010'. [ 215.076803][ T9550] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 215.151151][ T9557] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1015'. [ 215.602974][ T9585] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 215.699586][ T9592] validate_nla: 2 callbacks suppressed [ 215.699604][ T9592] netlink: 'syz.3.1027': attribute type 7 has an invalid length. [ 215.765318][ T9592] netlink: 'syz.3.1027': attribute type 8 has an invalid length. [ 215.781345][ T9596] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1028'. [ 215.790970][ T9596] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 215.931901][ T9611] bond0: (slave macvlan4): Error -22 calling dev_set_mtu [ 218.083843][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 218.091849][ C0] lec:lec_tx_timeout: lec0 [ 218.096387][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 224.353508][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 6260 ms [ 224.361555][ C0] lec:lec_tx_timeout: lec0 [ 224.366766][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 230.114978][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5750 ms [ 230.122980][ C0] lec:lec_tx_timeout: lec0 [ 230.127728][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 234.593777][ T56] block nbd0: Possible stuck request ffff888024c60000: control (read@0,1024B). Runtime 150 seconds [ 234.604591][ T56] block nbd0: Possible stuck request ffff888024c601c0: control (read@1024,1024B). Runtime 150 seconds [ 234.615663][ T56] block nbd0: Possible stuck request ffff888024c60380: control (read@2048,1024B). Runtime 150 seconds [ 234.634010][ T56] block nbd0: Possible stuck request ffff888024c60540: control (read@3072,1024B). Runtime 150 seconds [ 235.873553][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5740 ms [ 235.881592][ C0] lec:lec_tx_timeout: lec0 [ 235.886909][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 240.923953][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5040 ms [ 240.932146][ C0] lec:lec_tx_timeout: lec0 [ 240.937247][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 245.943520][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 245.951623][ C0] lec:lec_tx_timeout: lec0 [ 245.957468][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 250.973495][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 250.981510][ C0] lec:lec_tx_timeout: lec0 [ 250.986075][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 255.716361][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.722696][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.993489][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 256.001506][ C0] lec:lec_tx_timeout: lec0 [ 256.006066][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 261.013508][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 261.021507][ C0] lec:lec_tx_timeout: lec0 [ 261.026613][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 264.130912][ T5197] udevd[5197]: worker [5829] /devices/virtual/block/nbd0 timeout; kill it [ 264.140586][ T5197] udevd[5197]: seq 11230 '/devices/virtual/block/nbd0' killed [ 264.675126][ T56] block nbd0: Possible stuck request ffff888024c60000: control (read@0,1024B). Runtime 180 seconds [ 264.685958][ T56] block nbd0: Possible stuck request ffff888024c601c0: control (read@1024,1024B). Runtime 180 seconds [ 264.697221][ T56] block nbd0: Possible stuck request ffff888024c60380: control (read@2048,1024B). Runtime 180 seconds [ 264.708819][ T56] block nbd0: Possible stuck request ffff888024c60540: control (read@3072,1024B). Runtime 180 seconds [ 266.033572][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 266.041596][ C0] lec:lec_tx_timeout: lec0 [ 266.046385][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 271.053526][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 271.061549][ C0] lec:lec_tx_timeout: lec0 [ 271.066102][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 274.736735][ T9636] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1039'. [ 274.756527][ T9636] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1039'. [ 274.834923][ T9639] wg2: entered promiscuous mode [ 274.841217][ T9639] wg2: entered allmulticast mode [ 274.854285][ T9636] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 274.886615][ T9631] : entered promiscuous mode [ 275.048694][ T9648] tipc: Enabled bearer , priority 0 [ 275.103008][ T9648] tipc: Disabling bearer [ 275.155574][ T9653] nbd: must specify a device to reconfigure [ 275.318861][ T9667] netlink: 'syz.4.1045': attribute type 1 has an invalid length. [ 275.365105][ T9667] netlink: 'syz.4.1045': attribute type 11 has an invalid length. [ 275.394511][ T9667] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1045'. [ 275.691200][ T9685] º: renamed from veth1_vlan (while UP) [ 275.841654][ T9700] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1051'. [ 275.875358][ T9703] netlink: 'syz.3.1054': attribute type 10 has an invalid length. [ 275.929154][ T9704] Bluetooth: hci0: invalid length 39, exp 2 for type 18 [ 275.930584][ T9703] team0: Device 0! failed to register rx_handler [ 276.073523][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 276.081603][ C0] lec:lec_tx_timeout: lec0 [ 276.087074][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 276.253038][ T9731] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1064'. [ 276.255435][ T9729] netlink: 'syz.3.1063': attribute type 21 has an invalid length. [ 276.277438][ T9729] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1063'. [ 276.288088][ T9738] netlink: 'syz.4.1062': attribute type 4 has an invalid length. [ 276.496504][ T9750] netlink: 'syz.3.1068': attribute type 7 has an invalid length. [ 276.510288][ T9750] netlink: 'syz.3.1068': attribute type 7 has an invalid length. [ 276.720055][ T9761] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 276.904044][ T9779] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1076'. [ 277.088484][ T9785] veth0_to_bond: entered allmulticast mode [ 277.094654][ T9792] netlink: 'syz.4.1080': attribute type 1 has an invalid length. [ 277.094678][ T9792] netlink: 'syz.4.1080': attribute type 2 has an invalid length. [ 277.101052][ T9792] netlink: 'syz.4.1080': attribute type 1 has an invalid length. [ 277.180220][ T9786] netlink: 240 bytes leftover after parsing attributes in process `syz.2.1079'. [ 277.202556][ T9805] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1082'. [ 277.514764][ T9823] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1088'. [ 277.569284][ T9829] tc_dump_action: action bad kind [ 277.689328][ T9843] vlan0: entered promiscuous mode [ 277.713741][ T9843] bridge0: entered promiscuous mode [ 278.090244][ T9868] ipt_REJECT: TCP_RESET invalid for non-tcp [ 278.170838][ T9874] Bluetooth: MGMT ver 1.23 [ 278.667107][ T9905] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 278.769066][ T9909] xt_hashlimit: overflow, try lower: 3/0 [ 278.966644][ T9917] sctp: [Deprecated]: syz.0.1117 (pid 9917) Use of int in maxseg socket option. [ 278.966644][ T9917] Use struct sctp_assoc_value instead [ 279.672041][ T9960] bridge6: entered promiscuous mode [ 279.688695][ T9960] bridge6: entered allmulticast mode [ 279.908720][ T9972] __nla_validate_parse: 12 callbacks suppressed [ 279.908739][ T9972] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1134'. [ 280.030728][ T9972] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1134'. [ 280.461776][ T9999] sctp: [Deprecated]: syz.2.1142 (pid 9999) Use of struct sctp_assoc_value in delayed_ack socket option. [ 280.461776][ T9999] Use struct sctp_sack_info instead [ 280.504956][T10003] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1144'. [ 280.532383][ T9999] sctp: [Deprecated]: syz.2.1142 (pid 9999) Use of struct sctp_assoc_value in delayed_ack socket option. [ 280.532383][ T9999] Use struct sctp_sack_info instead [ 281.546877][T10050] sctp: [Deprecated]: syz.1.1157 (pid 10050) Use of int in maxseg socket option. [ 281.546877][T10050] Use struct sctp_assoc_value instead [ 281.711078][T10055] nftables ruleset with unbound chain [ 281.735345][T10057] validate_nla: 1 callbacks suppressed [ 281.735363][T10057] netlink: 'syz.2.1160': attribute type 10 has an invalid length. [ 281.784022][T10057] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1160'. [ 281.846787][T10057] team0: Port device geneve0 added [ 281.873434][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5790 ms [ 281.881618][ C0] lec:lec_tx_timeout: lec0 [ 281.887387][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 282.069760][T10068] netlink: 'syz.2.1163': attribute type 3 has an invalid length. [ 282.086195][T10068] xt_TCPMSS: Only works on TCP SYN packets [ 282.870473][T10093] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1170'. [ 283.009639][T10095] 8021q: adding VLAN 0 to HW filter on device bond0 [ 283.027750][T10095] bond0: (slave rose0): Enslaving as an active interface with an up link [ 283.240766][T10109] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1173'. [ 283.461401][T10115] netlink: 'syz.1.1176': attribute type 1 has an invalid length. [ 283.498770][T10115] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1176'. [ 283.542393][T10120] tipc: Enabled bearer , priority 0 [ 283.769149][T10119] syzkaller0: entered promiscuous mode [ 283.780363][T10119] syzkaller0: entered allmulticast mode [ 283.794028][T10119] tipc: Resetting bearer [ 283.905779][T10117] tipc: Resetting bearer [ 284.113744][T10152] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 285.365190][T10117] tipc: Disabling bearer [ 285.421886][T10161] wg2: left promiscuous mode [ 285.438407][T10161] wg2: left allmulticast mode [ 285.516965][T10159] wg2: entered promiscuous mode [ 285.527636][T10159] wg2: entered allmulticast mode [ 285.560896][T10170] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1187'. [ 285.605405][T10170] vetP™_virt_wifi: renamed from dummy0 (while UP) [ 285.706282][T10176] team0: Device wireguard0 is of different type [ 285.879789][T10185] netlink: 'syz.3.1190': attribute type 5 has an invalid length. [ 286.258706][T10212] pim6reg: entered allmulticast mode [ 286.283787][T10214] pim6reg: left allmulticast mode [ 286.525698][T10233] netlink: 'syz.2.1200': attribute type 2 has an invalid length. [ 286.611284][T10228] bridge: RTM_NEWNEIGH with unconfigured vlan 3 on bridge_slave_0 [ 286.801873][T10247] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1205'. [ 286.913512][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5030 ms [ 286.921655][ C0] lec:lec_tx_timeout: lec0 [ 286.926994][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 286.991903][T10261] x_tables: duplicate underflow at hook 3 [ 287.174163][T10272] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1209'. [ 287.526062][T10284] xt_l2tp: wrong L2TP version: 0 [ 287.683582][T10301] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1215'. [ 287.736670][T10305] IPVS: set_ctl: invalid protocol: 47 172.20.20.31:20000 [ 287.840150][T10310] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1219'. [ 287.956934][T10319] netlink: 696 bytes leftover after parsing attributes in process `syz.0.1223'. [ 288.116013][T10323] bond5: entered promiscuous mode [ 288.141070][T10334] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1229'. [ 288.169146][T10328] : entered promiscuous mode [ 288.186068][T10331] bond_slave_0: entered promiscuous mode [ 288.192033][T10331] bond_slave_1: entered promiscuous mode [ 288.226687][T10331] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 288.240954][T10338] netlink: 'syz.1.1225': attribute type 10 has an invalid length. [ 288.255313][ T13] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:3cd8:c2ff:fe25:3d81 error=-28 [ 288.268577][T10331] bond5: (slave macvlan2): making interface the new active one [ 288.280937][T10331] macvlan2: entered promiscuous mode [ 288.287057][T10331] bond0: entered promiscuous mode [ 288.300960][T10349] syz1: rxe_newlink: already configured on syz_tun [ 288.312799][T10331] bond5: (slave macvlan2): Enslaving as an active interface with an up link [ 288.381311][T10334] macvtap1: entered promiscuous mode [ 288.386915][T10334] vlan0: entered promiscuous mode [ 288.392558][T10334] macvtap1: entered allmulticast mode [ 288.398470][T10334] vlan0: entered allmulticast mode [ 288.403706][T10334] veth0_vlan: entered allmulticast mode [ 288.422796][T10341] tipc: Enabling of bearer rejected, failed to enable media [ 288.435075][T10353] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1234'. [ 288.449852][T10338] bridge0: port 3(syz_tun) entered disabled state [ 288.456508][T10338] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.463875][T10338] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.594388][T10357] openvswitch: netlink: Missing key (keys=40, expected=80) [ 288.685290][T10363] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1238'. [ 288.897793][T10376] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1244'. [ 288.953066][T10383] batadv_slave_1: entered promiscuous mode [ 289.038075][T10383] batadv_slave_1: left promiscuous mode [ 289.065519][T10387] netlink: 'syz.3.1250': attribute type 4 has an invalid length. [ 289.159785][T10394] netlink: 'syz.0.1253': attribute type 1 has an invalid length. [ 289.192178][T10393] netlink: 'syz.2.1252': attribute type 1 has an invalid length. [ 289.206857][T10393] netlink: 'syz.2.1252': attribute type 4 has an invalid length. [ 289.366823][T10398] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 289.610909][T10422] tipc: Enabled bearer , priority 0 [ 289.631496][T10422] syzkaller0: entered promiscuous mode [ 289.651466][T10422] syzkaller0: entered allmulticast mode [ 289.675279][T10422] tipc: Resetting bearer [ 289.732649][T10421] tipc: Resetting bearer [ 289.761999][T10421] tipc: Disabling bearer [ 289.896173][T10437] x_tables: duplicate underflow at hook 2 [ 289.915790][T10437] IPVS: set_ctl: invalid protocol: 44 255.255.255.255:20003 [ 289.924254][T10439] IPVS: set_ctl: invalid protocol: 44 255.255.255.255:20003 [ 290.126312][T10453] dvmrp0: entered allmulticast mode [ 290.361219][T10467] netlink: 'syz.4.1277': attribute type 83 has an invalid length. [ 290.379059][T10467] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 290.385399][T10469] openvswitch: netlink: Missing valid actions attribute. [ 290.413939][T10469] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 290.536442][T10472] syzkaller0: entered promiscuous mode [ 290.542034][T10472] syzkaller0: entered allmulticast mode [ 290.564003][T10472] __nla_validate_parse: 9 callbacks suppressed [ 290.564021][T10472] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1280'. [ 290.619531][T10475] delete_channel: no stack [ 290.906177][T10491] netlink: zone id is out of range [ 291.032811][T10498] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1288'. [ 291.159495][T10507] netlink: 'syz.1.1292': attribute type 83 has an invalid length. [ 291.187263][T10507] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1292'. [ 291.191895][T10513] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1293'. [ 291.201828][T10511] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1291'. [ 291.230492][T10508] dvmrp0: entered allmulticast mode [ 291.245466][T10511] netlink: 'syz.0.1291': attribute type 25 has an invalid length. [ 291.464672][T10528] IPVS: set_ctl: invalid protocol: 46 10.1.1.0:20002 [ 291.501531][T10534] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1301'. [ 291.608358][T10544] veth1_to_bond: entered promiscuous mode [ 291.933816][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 291.941816][ C0] lec:lec_tx_timeout: lec0 [ 291.946474][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 292.289788][T10556] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 292.307057][T10555] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1306'. [ 292.407211][T10553] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.422945][T10562] netlink: 'syz.4.1310': attribute type 1 has an invalid length. [ 292.441378][T10562] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1310'. [ 292.458436][T10562] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1310'. [ 292.498837][T10572] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1311'. [ 292.539942][T10562] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 292.610360][T10553] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.680377][T10577] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 292.787670][T10553] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.902734][T10585] Can't find ip_set type hash:ip,p\rt [ 293.000024][T10594] tipc: Enabled bearer , priority 10 [ 293.029315][T10595] IPVS: set_ctl: invalid protocol: 18772 118.50.0.39:20003 [ 293.184783][ T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.250757][ T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.329365][ T2984] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.361400][T10608] tipc: Enabled bearer , priority 0 [ 293.379885][ T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.398447][T10608] syzkaller0: entered promiscuous mode [ 293.424931][T10608] syzkaller0: entered allmulticast mode [ 293.457809][T10608] veth1: mtu less than device minimum [ 293.475768][T10607] tipc: Resetting bearer [ 293.571448][T10607] tipc: Disabling bearer [ 294.149436][T10656] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 294.189517][T10656] bond0 (unregistering): Released all slaves [ 294.325602][T10680] netlink: 'syz.4.1330': attribute type 24 has an invalid length. [ 294.420516][T10664] gre0: entered promiscuous mode [ 294.757415][ T56] block nbd0: Possible stuck request ffff888024c60000: control (read@0,1024B). Runtime 210 seconds [ 294.768437][ T56] block nbd0: Possible stuck request ffff888024c601c0: control (read@1024,1024B). Runtime 210 seconds [ 294.779671][ T56] block nbd0: Possible stuck request ffff888024c60380: control (read@2048,1024B). Runtime 210 seconds [ 294.790735][ T56] block nbd0: Possible stuck request ffff888024c60540: control (read@3072,1024B). Runtime 210 seconds [ 294.878297][T10711] netlink: 'syz.4.1343': attribute type 1 has an invalid length. [ 294.912493][T10711] netlink: 'syz.4.1343': attribute type 1 has an invalid length. [ 295.146074][T10728] netlink: 'syz.2.1349': attribute type 9 has an invalid length. [ 295.255100][T10735] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 295.272890][T10736] netlink: 'syz.2.1352': attribute type 29 has an invalid length. [ 295.293058][T10736] netlink: 'syz.2.1352': attribute type 29 has an invalid length. [ 295.337387][T10740] netlink: 'syz.0.1353': attribute type 6 has an invalid length. [ 295.430069][T10736] syzkaller0: entered promiscuous mode [ 295.440372][T10736] syzkaller0: entered allmulticast mode [ 295.535592][T10752] netlink: 'syz.4.1357': attribute type 83 has an invalid length. [ 296.782123][T10752] __nla_validate_parse: 18 callbacks suppressed [ 296.782144][T10752] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1357'. [ 296.798396][T10752] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1357'. [ 296.953447][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 296.961533][ C0] lec:lec_tx_timeout: lec0 [ 296.966470][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 297.136784][T10764] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1362'. [ 297.450980][T10791] team0: Device vti0 is of different type [ 297.837055][T10815] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1377'. [ 297.888365][T10815] IPVS: persistence engine module ip_vs_pe_À not found [ 297.899701][T10815] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1377'. [ 298.006590][T10824] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1378'. [ 298.244782][T10839] netlink: 'syz.3.1385': attribute type 1 has an invalid length. [ 298.275058][T10839] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1385'. [ 298.362077][T10839] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1385'. [ 298.391518][T10839] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1385'. [ 298.403722][T10849] netlink: 'syz.2.1390': attribute type 1 has an invalid length. [ 298.412503][T10839] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1385'. [ 298.449012][T10849] 8021q: adding VLAN 0 to HW filter on device bond3 [ 298.579645][T10849] veth9: entered promiscuous mode [ 298.787686][T10863] 8021q: adding VLAN 0 to HW filter on device bond3 [ 298.798350][T10863] bond2: (slave bond3): making interface the new active one [ 298.808702][T10863] bond2: (slave bond3): Enslaving as an active interface with an up link [ 298.857922][T10875] bond2: (slave gretap1): Enslaving as a backup interface with an up link [ 298.920628][T10880] 8021q: adding VLAN 0 to HW filter on device bond2 [ 299.089222][T10890] bond6: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 299.105160][T10890] bond6 (unregistering): Released all slaves [ 299.759742][T10925] mac80211_hwsim hwsim8 ÿ: renamed from wlan1 [ 300.237821][T10955] netlink: zone id is out of range [ 300.259319][T10954] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 300.517788][T10976] validate_nla: 2 callbacks suppressed [ 300.517808][T10976] netlink: 'syz.1.1425': attribute type 28 has an invalid length. [ 300.567851][T10976] netlink: 'syz.1.1425': attribute type 3 has an invalid length. [ 300.805105][T10997] netlink: 'syz.4.1429': attribute type 1 has an invalid length. [ 300.836842][T11000] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 301.050245][T11010] syzkaller0: entered promiscuous mode [ 301.058415][T11010] syzkaller0: entered allmulticast mode [ 301.174973][T11020] tipc: Enabling of bearer rejected, failed to enable media [ 301.192940][T11022] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 301.245840][T11023] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 301.311351][T11025] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 301.517217][T11044] netlink: 'syz.1.1441': attribute type 6 has an invalid length. [ 301.536478][T11044] netlink: 'syz.1.1441': attribute type 1 has an invalid length. [ 301.587825][T11044] netlink: 'syz.1.1441': attribute type 10 has an invalid length. [ 301.655317][T11054] netlink: 'syz.3.1446': attribute type 21 has an invalid length. [ 301.665189][T11050] netlink: 'syz.3.1446': attribute type 21 has an invalid length. [ 301.674549][T11054] SET target dimension over the limit! [ 301.680968][T11056] SET target dimension over the limit! [ 301.973455][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 301.981500][ C0] lec:lec_tx_timeout: lec0 [ 301.986820][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 302.566815][T11099] __nla_validate_parse: 16 callbacks suppressed [ 302.566832][T11099] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1461'. [ 302.585474][T11098] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1461'. [ 302.966426][T11120] netlink: 'syz.0.1466': attribute type 1 has an invalid length. [ 302.971545][T11122] netlink: 'syz.4.1467': attribute type 3 has an invalid length. [ 302.974798][T11120] netlink: 184 bytes leftover after parsing attributes in process `syz.0.1466'. [ 303.000029][T11120] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1466'. [ 303.009458][T11120] block nbd1: Unsupported socket: should be TCP or UNIX. [ 303.404449][T11134] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1471'. [ 303.442857][T11137] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1471'. [ 303.711613][T11144] netlink: 116 bytes leftover after parsing attributes in process `syz.0.1472'. [ 304.369767][T11171] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 304.388664][T11171] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1481'. [ 304.508485][T11180] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1485'. [ 304.637633][T11188] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1487'. [ 305.675715][T11196] macvtap3: entered promiscuous mode [ 305.681358][T11196] macvtap3: entered allmulticast mode [ 305.911303][T11210] vlan3: entered promiscuous mode [ 305.962792][T11218] validate_nla: 4 callbacks suppressed [ 305.962808][T11218] netlink: 'syz.4.1499': attribute type 1 has an invalid length. [ 306.065578][T11223] tipc: Enabled bearer , priority 0 [ 306.116753][T11223] syzkaller0: entered promiscuous mode [ 306.122274][T11223] syzkaller0: entered allmulticast mode [ 306.178853][T11228] ip6erspan0: entered promiscuous mode [ 306.184876][T11228] ip6erspan0: entered allmulticast mode [ 306.272239][T11236] tipc: Resetting bearer [ 306.335904][T11222] tipc: Resetting bearer [ 306.385441][T11247] x_tables: duplicate underflow at hook 1 [ 306.426171][T11222] tipc: Disabling bearer [ 306.668972][T11260] SET target dimension over the limit! [ 306.780156][T11266] x_tables: duplicate underflow at hook 2 [ 306.994060][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 307.002298][ C0] lec:lec_tx_timeout: lec0 [ 307.007163][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 307.489915][T11307] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 307.518018][T11311] tipc: Enabling of bearer rejected, already enabled [ 307.829105][T11328] __nla_validate_parse: 6 callbacks suppressed [ 307.829124][T11328] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1539'. [ 307.862603][T11326] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 307.978105][T11334] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1542'. [ 307.997821][T11334] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1542'. [ 308.008544][T11334] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1542'. [ 308.379527][T11365] netlink: 'syz.2.1551': attribute type 1 has an invalid length. [ 308.422509][T11366] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1552'. [ 308.427025][T11365] 8021q: adding VLAN 0 to HW filter on device bond4 [ 308.615098][T11375] netlink: 'syz.2.1555': attribute type 1 has an invalid length. [ 308.638550][T11382] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1556'. [ 308.904991][T11397] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1561'. [ 308.987047][T11402] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1564'. [ 308.997180][T11402] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1564'. [ 309.081303][T11410] syzkaller1: entered promiscuous mode [ 309.087238][T11410] syzkaller1: entered allmulticast mode [ 309.289476][T11422] bridge0: port 3(syz_tun) entered blocking state [ 309.303263][T11422] bridge0: port 3(syz_tun) entered disabled state [ 309.310734][T11422] syz_tun: entered allmulticast mode [ 309.320974][T11424] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1569'. [ 309.322453][T11422] syz_tun: entered promiscuous mode [ 309.801843][T11452] netlink: 'syz.4.1583': attribute type 1 has an invalid length. [ 309.891789][T11452] bond4 (unregistering): Released all slaves [ 309.966476][T11453] ip6tnl2: entered promiscuous mode [ 309.971724][T11453] ip6tnl2: entered allmulticast mode [ 310.000050][T11461] tipc: Enabling of bearer rejected, already enabled [ 310.014018][T11461] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) ! [ 310.457012][T11483] openvswitch: netlink: Missing key (keys=40, expected=80) [ 310.621016][T11490] syzkaller0: entered allmulticast mode [ 310.797254][T11503] netlink: 'syz.4.1599': attribute type 29 has an invalid length. [ 310.833082][T11503] netlink: 'syz.4.1599': attribute type 29 has an invalid length. [ 310.918912][T11510] 8021q: adding VLAN 0 to HW filter on device bond6 [ 311.290901][T11540] netlink: 'syz.1.1608': attribute type 1 has an invalid length. [ 311.932055][T11584] netlink: 'syz.2.1622': attribute type 11 has an invalid length. [ 312.013601][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 312.021768][ C0] lec:lec_tx_timeout: lec0 [ 312.027533][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 312.496053][T11606] hsr_slave_0 (unregistering): left promiscuous mode [ 312.829887][T11640] netlink: 'syz.2.1639': attribute type 10 has an invalid length. [ 312.838599][T11641] __nla_validate_parse: 8 callbacks suppressed [ 312.838617][T11641] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1640'. [ 312.884698][T11640] team0: Port device dummy0 added [ 312.914778][T11643] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1639'. [ 312.926053][T11643] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1639'. [ 312.970770][T11636] ip6erspan0: entered promiscuous mode [ 312.978157][T11636] ip6erspan0: entered allmulticast mode [ 313.265175][T11667] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.1648'. [ 313.335601][T11672] Bluetooth: hci0: invalid len left 70, exp >= 173 [ 313.356495][T11672] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1649'. [ 313.380789][T11672] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1649'. [ 313.404628][T11672] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1649'. [ 313.415776][T11679] syzkaller1: entered promiscuous mode [ 313.421284][T11679] syzkaller1: entered allmulticast mode [ 313.430972][T11679] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324 [ 313.645365][T11689] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1653'. [ 313.664241][T11689] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1653'. [ 313.999870][T11716] bond7: option packets_per_slave: invalid value (18446744073709551615) [ 314.009148][T11716] bond7: option packets_per_slave: allowed values 0 - 65535 [ 314.018884][T11716] bond7 (unregistering): Released all slaves [ 314.326435][T11734] ªªªªªª: renamed from vlan0 (while UP) [ 314.490524][T11750] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1670'. [ 314.494821][T11752] Bluetooth: hci0: invalid length 0, exp 2 for type 3 [ 314.520754][T11754] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 314.896278][T11774] tap0: tun_chr_ioctl cmd 1074025677 [ 314.902044][T11774] tap0: linktype set to 65534 [ 314.925451][T11778] netlink: 'syz.1.1680': attribute type 1 has an invalid length. [ 315.112172][T11789] netlink: 'syz.0.1685': attribute type 1 has an invalid length. [ 315.354813][T11802] netlink: 'syz.4.1688': attribute type 33 has an invalid length. [ 316.075105][T11830] syzkaller0: entered promiscuous mode [ 316.080622][T11830] syzkaller0: entered allmulticast mode [ 316.138052][T11833] ip6gre1: entered allmulticast mode [ 316.244381][T11840] kthread_run failed with err -4 [ 316.875809][T11871] syzkaller0: entered promiscuous mode [ 316.892698][T11871] syzkaller0: entered allmulticast mode [ 317.043966][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 317.052052][ C0] lec:lec_tx_timeout: lec0 [ 317.057448][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 317.128402][T11886] netlink: 'syz.0.1702': attribute type 10 has an invalid length. [ 317.158578][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.165478][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.305858][T11895] netlink: 'syz.2.1705': attribute type 6 has an invalid length. [ 317.863116][T11922] __nla_validate_parse: 3 callbacks suppressed [ 317.863135][T11922] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1712'. [ 317.922790][T11929] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1712'. [ 318.222706][T11938] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1715'. [ 318.232389][T11939] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1715'. [ 318.241860][T11938] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1715'. [ 318.265720][T11939] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1715'. [ 318.266266][T11941] syzkaller1: entered promiscuous mode [ 318.288226][T11941] syzkaller1: entered allmulticast mode [ 318.475708][T11948] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1719'. [ 319.053344][T11976] SET target dimension over the limit! [ 319.095647][T11972] tipc: Enabling of bearer rejected, already enabled [ 319.127285][T11978] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1726'. [ 319.222347][T11985] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1728'. [ 319.247495][T11978] erspan0: entered promiscuous mode [ 319.259897][T11978] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1726'. [ 319.636865][T11994] netlink: 'syz.0.1730': attribute type 29 has an invalid length. [ 320.641916][T12050] netlink: 'syz.2.1747': attribute type 5 has an invalid length. [ 321.679759][T12112] : renamed from hsr0 (while UP) [ 322.044142][T12136] netlink: 'syz.1.1776': attribute type 4 has an invalid length. [ 322.069495][T12136] netlink: 'syz.1.1776': attribute type 1 has an invalid length. [ 322.077705][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 322.077754][ C0] lec:lec_tx_timeout: lec0 [ 322.086611][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 322.220469][T12150] IPVS: set_ctl: invalid protocol: 137 224.0.0.2:20004 [ 322.538426][T12166] netlink: 'syz.1.1786': attribute type 1 has an invalid length. [ 322.560100][T12164] tipc: Enabled bearer , priority 0 [ 322.595035][T12164] syzkaller0: entered promiscuous mode [ 322.600527][T12164] syzkaller0: entered allmulticast mode [ 322.688681][T12168] bond8: (slave vxcan1): The slave device specified does not support setting the MAC address [ 322.719470][T12168] bond8: (slave vxcan1): Error -95 calling set_mac_address [ 322.745243][T12179] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 322.774052][T12164] tipc: Resetting bearer [ 322.786097][T12161] tipc: Resetting bearer [ 322.846151][T12161] tipc: Disabling bearer [ 322.867011][T12186] __nla_validate_parse: 44 callbacks suppressed [ 322.867029][T12186] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1791'. [ 322.905009][T12186] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1791'. [ 322.938197][T12186] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1791'. [ 322.960617][T12186] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1791'. [ 322.990044][T12186] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1791'. [ 323.018199][T12186] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1791'. [ 323.388371][T12216] veth7: entered allmulticast mode [ 323.423979][T12221] tipc: Enabled bearer , priority 0 [ 323.436770][T12221] syzkaller0: entered promiscuous mode [ 323.442586][T12221] syzkaller0: entered allmulticast mode [ 323.621649][T12235] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1807'. [ 323.646545][T12235] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1807'. [ 324.119755][T12272] netlink: 180 bytes leftover after parsing attributes in process `syz.2.1819'. [ 324.212443][T12277] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1820'. [ 324.239273][T12220] tipc: Resetting bearer [ 324.356150][T12220] tipc: Disabling bearer [ 324.594084][T12301] tipc: Enabled bearer , priority 0 [ 324.710547][T12301] tipc: Disabling bearer [ 324.802471][T12309] batadv_slave_1: entered promiscuous mode [ 324.844408][ T56] block nbd0: Possible stuck request ffff888024c60000: control (read@0,1024B). Runtime 240 seconds [ 324.855267][ T56] block nbd0: Possible stuck request ffff888024c601c0: control (read@1024,1024B). Runtime 240 seconds [ 324.866791][ T56] block nbd0: Possible stuck request ffff888024c60380: control (read@2048,1024B). Runtime 240 seconds [ 324.878415][ T56] block nbd0: Possible stuck request ffff888024c60540: control (read@3072,1024B). Runtime 240 seconds [ 324.908981][T12308] batadv_slave_1: left promiscuous mode [ 324.960521][T12313] tipc: Enabled bearer , priority 0 [ 324.992933][T12313] syzkaller0: entered promiscuous mode [ 325.039005][T12313] syzkaller0: entered allmulticast mode [ 325.090675][T12313] tipc: Resetting bearer [ 325.164261][T12320] dvmrp0: left allmulticast mode [ 325.297822][T12311] tipc: Resetting bearer [ 325.378085][T12311] tipc: Disabling bearer [ 325.444020][T12344] hsr_slave_0: left promiscuous mode [ 325.462552][T12344] hsr_slave_1: left promiscuous mode [ 325.714670][T12366] netlink: 'syz.1.1843': attribute type 21 has an invalid length. [ 325.779602][T12364] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 325.868745][T12374] netlink: 'syz.1.1845': attribute type 10 has an invalid length. [ 326.513046][T12408] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 326.609251][T12408] team0: Device wireguard0 is of different type [ 326.718393][T12413] syzkaller1: entered promiscuous mode [ 326.747743][T12413] syzkaller1: entered allmulticast mode [ 326.799015][T12423] rdma_op ffff88802b4651f0 conn xmit_rdma 0000000000000000 [ 326.831915][T12421] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 327.514533][T12465] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 327.873426][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5790 ms [ 327.881463][ C0] lec:lec_tx_timeout: lec0 [ 327.887051][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 328.297845][T12497] netlink: 'syz.1.1879': attribute type 1 has an invalid length. [ 328.334246][T12497] __nla_validate_parse: 75 callbacks suppressed [ 328.334265][T12497] netlink: 232 bytes leftover after parsing attributes in process `syz.1.1879'. [ 328.383763][T12497] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1879'. [ 328.506395][T12505] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1881'. [ 328.861767][T12525] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 329.028876][T12528] netlink: 'syz.1.1889': attribute type 1 has an invalid length. [ 329.045128][T12528] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1889'. [ 329.191185][T12542] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1894'. [ 329.243129][T12543] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1894'. [ 329.355162][T12554] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1896'. [ 329.397386][T12554] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1896'. [ 329.506901][T12560] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1900'. [ 329.616698][T12573] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1901'. [ 329.807459][T12583] tipc: Enabling of bearer rejected, already enabled [ 329.868383][T12589] Bluetooth: hci0: invalid length 0, exp 2 for type 5 [ 330.813826][T12632] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 331.242895][T12653] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 331.294705][T12653] netlink: 'syz.3.1929': attribute type 10 has an invalid length. [ 331.798216][T12681] netlink: 'syz.2.1937': attribute type 1 has an invalid length. [ 331.940447][T12692] netlink: 'syz.1.1942': attribute type 5 has an invalid length. [ 332.252953][T12709] SET target dimension over the limit! [ 332.843682][T12765] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 332.856256][T12765] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 332.889998][T12765] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 332.907324][T12767] xt_cgroup: path and classid specified [ 332.913449][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5030 ms [ 332.921617][ C0] lec:lec_tx_timeout: lec0 [ 332.927043][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 332.943946][T12765] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 333.005643][T12765] batadv0 (unregistering): left promiscuous mode [ 333.523286][T12796] __nla_validate_parse: 17 callbacks suppressed [ 333.523304][T12796] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1968'. [ 333.560997][T12801] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1969'. [ 333.682766][T12803] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.697084][T12803] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.885326][T12803] netlink: 'syz.3.1970': attribute type 16 has an invalid length. [ 333.895059][T12803] netlink: 'syz.3.1970': attribute type 17 has an invalid length. [ 333.924267][T12806] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1971'. [ 333.934529][T12806] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1971'. [ 334.008979][T12803] netlink: 'syz.3.1970': attribute type 27 has an invalid length. [ 334.038337][T12803] gre0: left promiscuous mode [ 334.097418][T12803] 8021q: adding VLAN 0 to HW filter on device ` [ 334.130923][T12803] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 334.406148][T12841] netlink: 'syz.0.1979': attribute type 1 has an invalid length. [ 334.482042][T12850] netlink: 388 bytes leftover after parsing attributes in process `syz.3.1980'. [ 334.528799][T12853] netlink: 'syz.1.1982': attribute type 1 has an invalid length. [ 334.549819][T12853] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1982'. [ 334.595707][T12849] bond8: (slave bridge9): making interface the new active one [ 334.626471][T12849] bond8: (slave bridge9): Enslaving as an active interface with an up link [ 334.646551][T12856] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1982'. [ 334.653743][T12853] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1982'. [ 334.796675][T12864] smc: net device gre0 applied user defined pnetid SYZ1 [ 335.020428][T12878] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1987'. [ 335.250512][T12894] sit2: entered promiscuous mode [ 335.276317][T12894] sit2: entered allmulticast mode [ 335.822825][T12924] tipc: Enabling of bearer rejected, failed to enable media [ 336.188708][T12941] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2004'. [ 336.310052][T12946] netlink: 'syz.4.2003': attribute type 1 has an invalid length. [ 336.325207][T12941] netlink: 'syz.2.2004': attribute type 1 has an invalid length. [ 336.635257][T12964] IPVS: set_ctl: invalid protocol: 136 224.0.0.2:20001 [ 337.158237][T12996] veth1_to_hsr: default FDB implementation only supports local addresses [ 337.304825][T13006] veth0_to_bridge: entered promiscuous mode [ 337.343225][T13010] tipc: Enabling of bearer rejected, already enabled [ 337.366980][T13010] gretap2: entered promiscuous mode [ 337.372332][T13010] gretap2: entered allmulticast mode [ 337.497778][T13018] syzkaller1: entered promiscuous mode [ 337.511232][T13018] syzkaller1: entered allmulticast mode [ 337.630106][T13025] tap0: tun_chr_ioctl cmd 1074025677 [ 337.658882][T13025] tap0: linktype set to 65534 [ 337.668385][T13025] tap0: tun_chr_ioctl cmd 1074025698 [ 337.799865][T13033] xt_SECMARK: invalid mode: 9 [ 337.934097][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 337.942357][ C0] lec:lec_tx_timeout: lec0 [ 337.947959][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 338.135826][T13005] veth0_to_bridge: left promiscuous mode [ 338.538261][T13082] __nla_validate_parse: 9 callbacks suppressed [ 338.538280][T13082] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2053'. [ 338.604615][T13082] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2053'. [ 338.655724][T13087] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2055'. [ 338.685182][T13087] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2055'. [ 338.959741][T13107] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2060'. [ 339.280778][T13122] can: request_module (can-proto-0) failed. [ 339.387260][T13124] netlink: 228 bytes leftover after parsing attributes in process `syz.0.2063'. [ 339.706390][T13132] netlink: 'syz.4.2065': attribute type 16 has an invalid length. [ 339.716532][T13132] netlink: 'syz.4.2065': attribute type 17 has an invalid length. [ 339.847778][T13132] ip6gretap0: entered promiscuous mode [ 339.878033][T13132] bridge0: port 3(syz_tun) entered blocking state [ 339.884660][T13132] bridge0: port 3(syz_tun) entered forwarding state [ 339.936709][T13132] 8021q: adding VLAN 0 to HW filter on device bond0 [ 340.029523][T13132] 8021q: adding VLAN 0 to HW filter on device team0 [ 340.089695][T13132] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 340.111163][T13158] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2072'. [ 340.227819][T13156] netlink: 14552 bytes leftover after parsing attributes in process `syz.1.2072'. [ 340.267765][T13156] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2072'. [ 340.345128][T13158] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2072'. [ 340.418647][T13170] IPVS: dh: SCTP 172.20.20.187:0 - no destination available [ 340.456712][T13155] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 341.014648][T13206] netlink: 'syz.1.2085': attribute type 2 has an invalid length. [ 341.327209][T13217] vlan2: entered promiscuous mode [ 341.341137][T13217] vlan2: entered allmulticast mode [ 341.349149][T13217] hsr_slave_1: entered allmulticast mode [ 341.712803][T13246] netlink: 'syz.0.2094': attribute type 11 has an invalid length. [ 341.896029][T13248] syzkaller0: entered promiscuous mode [ 341.901529][T13248] syzkaller0: entered allmulticast mode [ 342.027825][T13256] netlink: 'syz.2.2098': attribute type 8 has an invalid length. [ 342.049794][T13254] team0: Device gtp1 is of different type [ 342.315050][T13255] bond9: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 342.334540][T13255] bond9 (unregistering): Released all slaves [ 342.963433][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 342.971586][ C0] lec:lec_tx_timeout: lec0 [ 342.977909][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 343.574417][T13334] netlink: 'syz.1.2114': attribute type 4 has an invalid length. [ 344.078831][T13361] __nla_validate_parse: 10 callbacks suppressed [ 344.078851][T13361] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2121'. [ 344.100770][T13361] gtp0: entered promiscuous mode [ 344.105965][T13361] gtp0: entered allmulticast mode [ 344.121975][T13361] netlink: 'syz.1.2121': attribute type 11 has an invalid length. [ 344.131370][T13361] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2121'. [ 344.150923][T13367] netlink: 'syz.4.2123': attribute type 21 has an invalid length. [ 344.159689][T13367] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2123'. [ 344.192903][T13370] xfrm2: entered allmulticast mode [ 344.344731][T13377] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2126'. [ 344.354587][T13377] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2126'. [ 344.518279][T13388] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2130'. [ 344.593535][T13395] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2131'. [ 344.639867][T13400] FAULT_INJECTION: forcing a failure. [ 344.639867][T13400] name failslab, interval 1, probability 0, space 0, times 0 [ 344.675236][T13393] nbd1: detected capacity change from 0 to 127 [ 344.682805][T13400] CPU: 0 UID: 0 PID: 13400 Comm: syz.3.2134 Not tainted syzkaller #0 PREEMPT(full) [ 344.682852][T13400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 344.682879][T13400] Call Trace: [ 344.682888][T13400] [ 344.682897][T13400] dump_stack_lvl+0x189/0x250 [ 344.682924][T13400] ? __pfx____ratelimit+0x10/0x10 [ 344.682947][T13400] ? __pfx_dump_stack_lvl+0x10/0x10 [ 344.682968][T13400] ? __pfx__printk+0x10/0x10 [ 344.682995][T13400] ? __pfx___might_resched+0x10/0x10 [ 344.683016][T13400] ? fs_reclaim_acquire+0x7d/0x100 [ 344.683049][T13400] should_fail_ex+0x414/0x560 [ 344.683077][T13400] should_failslab+0xa8/0x100 [ 344.683098][T13400] kmem_cache_alloc_node_noprof+0x77/0x710 [ 344.683125][T13400] ? __alloc_skb+0x112/0x2d0 [ 344.683143][T13400] ? netlink_autobind+0xdb/0x300 [ 344.683171][T13400] __alloc_skb+0x112/0x2d0 [ 344.683195][T13400] netlink_sendmsg+0x5c6/0xb30 [ 344.683226][T13400] ? __pfx_netlink_sendmsg+0x10/0x10 [ 344.683250][T13400] ? aa_sock_msg_perm+0xf1/0x1d0 [ 344.683278][T13400] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 344.683297][T13400] ? __pfx_netlink_sendmsg+0x10/0x10 [ 344.683319][T13400] __sock_sendmsg+0x219/0x270 [ 344.683346][T13400] ____sys_sendmsg+0x505/0x830 [ 344.683375][T13400] ? __pfx_____sys_sendmsg+0x10/0x10 [ 344.683405][T13400] ? import_iovec+0x74/0xa0 [ 344.683427][T13400] ___sys_sendmsg+0x21f/0x2a0 [ 344.683474][T13400] ? __pfx____sys_sendmsg+0x10/0x10 [ 344.683535][T13400] ? __fget_files+0x2a/0x420 [ 344.683552][T13400] ? __fget_files+0x3a0/0x420 [ 344.683580][T13400] __x64_sys_sendmsg+0x19b/0x260 [ 344.683606][T13400] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 344.683640][T13400] ? __pfx_ksys_write+0x10/0x10 [ 344.683671][T13400] ? do_syscall_64+0xbe/0xfa0 [ 344.683697][T13400] do_syscall_64+0xfa/0xfa0 [ 344.683719][T13400] ? lockdep_hardirqs_on+0x9c/0x150 [ 344.683743][T13400] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.683762][T13400] ? clear_bhb_loop+0x60/0xb0 [ 344.683786][T13400] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.683805][T13400] RIP: 0033:0x7f200298eec9 [ 344.683824][T13400] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 344.683840][T13400] RSP: 002b:00007f200390c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 344.683861][T13400] RAX: ffffffffffffffda RBX: 00007f2002be5fa0 RCX: 00007f200298eec9 [ 344.683874][T13400] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 344.683886][T13400] RBP: 00007f200390c090 R08: 0000000000000000 R09: 0000000000000000 [ 344.683897][T13400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 344.683908][T13400] R13: 00007f2002be6038 R14: 00007f2002be5fa0 R15: 00007fffc9840b08 [ 344.683943][T13400] [ 344.702284][T13403] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2136'. [ 344.974749][T13416] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2138'. [ 344.997257][ T5831] block nbd1: Receive control failed (result -104) [ 345.135658][T13427] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2140'. [ 345.238513][T13429] bond9: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 345.281771][T13429] bond9 (unregistering): Released all slaves [ 345.711775][T13464] nbd: socks must be embedded in a SOCK_ITEM attr [ 345.831048][T13467] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode [ 345.846217][T13467] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode [ 346.193747][T13488] nbd4: detected capacity change from 0 to 63 [ 346.218340][ T5831] block nbd4: Receive control failed (result -104) [ 346.297108][T13497] x_tables: duplicate underflow at hook 2 [ 346.611322][T13516] tipc: Enabled bearer , priority 0 [ 346.641865][T13516] syzkaller0: entered promiscuous mode [ 346.649366][T13516] syzkaller0: entered allmulticast mode [ 346.710306][T13516] tipc: Resetting bearer [ 346.726189][T13514] tipc: Resetting bearer [ 346.765291][T13514] tipc: Disabling bearer [ 346.790795][T13534] syzkaller0: entered promiscuous mode [ 346.796781][T13534] syzkaller0: entered allmulticast mode [ 346.809958][T13534] tipc: Enabled bearer , priority 0 [ 346.856334][T13533] tipc: Resetting bearer [ 346.863118][T13548] netlink: 'syz.1.2173': attribute type 6 has an invalid length. [ 346.872277][T13548] netlink: 'syz.1.2173': attribute type 1 has an invalid length. [ 346.908493][T13533] tipc: Disabling bearer [ 346.934524][T13550] tipc: Enabled bearer , priority 0 [ 346.943210][T13550] syzkaller0: entered promiscuous mode [ 346.949226][T13550] syzkaller0: entered allmulticast mode [ 346.976500][T13550] tipc: Resetting bearer [ 346.986631][T13549] tipc: Resetting bearer [ 347.012559][T13549] tipc: Disabling bearer [ 347.031362][T13555] netlink: 'syz.0.2177': attribute type 6 has an invalid length. [ 347.167780][T13562] openvswitch: netlink: Message has 512 unknown bytes. [ 347.875322][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.993613][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 348.001713][ C0] lec:lec_tx_timeout: lec0 [ 348.013489][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 348.146897][T13617] bridge0: entered allmulticast mode [ 348.152993][T13617] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 348.500382][T13646] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 348.811646][T13664] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.966236][T13669] Bluetooth: MGMT ver 1.23 [ 349.211398][T13648] netlink: 'syz.4.2199': attribute type 1 has an invalid length. [ 349.336570][T13687] FAULT_INJECTION: forcing a failure. [ 349.336570][T13687] name failslab, interval 1, probability 0, space 0, times 0 [ 349.379222][T13687] CPU: 1 UID: 0 PID: 13687 Comm: syz.1.2212 Not tainted syzkaller #0 PREEMPT(full) [ 349.379249][T13687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 349.379267][T13687] Call Trace: [ 349.379274][T13687] [ 349.379283][T13687] dump_stack_lvl+0x189/0x250 [ 349.379309][T13687] ? __pfx____ratelimit+0x10/0x10 [ 349.379331][T13687] ? __pfx_dump_stack_lvl+0x10/0x10 [ 349.379352][T13687] ? __pfx__printk+0x10/0x10 [ 349.379374][T13687] ? __pfx___might_resched+0x10/0x10 [ 349.379396][T13687] ? fs_reclaim_acquire+0x7d/0x100 [ 349.379429][T13687] should_fail_ex+0x414/0x560 [ 349.379457][T13687] should_failslab+0xa8/0x100 [ 349.379478][T13687] __kmalloc_cache_noprof+0x6f/0x6f0 [ 349.379505][T13687] ? nfnetlink_rcv+0xf97/0x2590 [ 349.379532][T13687] ? __nla_parse+0x40/0x60 [ 349.379563][T13687] nfnetlink_rcv+0xf97/0x2590 [ 349.379630][T13687] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 349.379676][T13687] ? ref_tracker_free+0x63a/0x7d0 [ 349.379731][T13687] ? __netlink_deliver_tap+0x807/0x850 [ 349.379751][T13687] ? netlink_deliver_tap+0x2e/0x1b0 [ 349.379789][T13687] netlink_unicast+0x82f/0x9e0 [ 349.379829][T13687] ? __pfx_netlink_unicast+0x10/0x10 [ 349.379860][T13687] ? netlink_sendmsg+0x642/0xb30 [ 349.379878][T13687] ? skb_put+0x11b/0x210 [ 349.379904][T13687] netlink_sendmsg+0x805/0xb30 [ 349.379936][T13687] ? __pfx_netlink_sendmsg+0x10/0x10 [ 349.379961][T13687] ? aa_sock_msg_perm+0xf1/0x1d0 [ 349.379988][T13687] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 349.380005][T13687] ? __pfx_netlink_sendmsg+0x10/0x10 [ 349.380027][T13687] __sock_sendmsg+0x219/0x270 [ 349.380059][T13687] ____sys_sendmsg+0x505/0x830 [ 349.380087][T13687] ? __pfx_____sys_sendmsg+0x10/0x10 [ 349.380121][T13687] ? import_iovec+0x74/0xa0 [ 349.380144][T13687] ___sys_sendmsg+0x21f/0x2a0 [ 349.380169][T13687] ? __pfx____sys_sendmsg+0x10/0x10 [ 349.380237][T13687] ? __fget_files+0x2a/0x420 [ 349.380259][T13687] ? __fget_files+0x3a0/0x420 [ 349.380289][T13687] __x64_sys_sendmsg+0x19b/0x260 [ 349.380313][T13687] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 349.380345][T13687] ? __pfx_ksys_write+0x10/0x10 [ 349.380373][T13687] ? do_syscall_64+0xbe/0xfa0 [ 349.380397][T13687] do_syscall_64+0xfa/0xfa0 [ 349.380417][T13687] ? lockdep_hardirqs_on+0x9c/0x150 [ 349.380437][T13687] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.380454][T13687] ? clear_bhb_loop+0x60/0xb0 [ 349.380475][T13687] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.380493][T13687] RIP: 0033:0x7f1fdf58eec9 [ 349.380509][T13687] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 349.380526][T13687] RSP: 002b:00007f1fe049d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 349.380546][T13687] RAX: ffffffffffffffda RBX: 00007f1fdf7e5fa0 RCX: 00007f1fdf58eec9 [ 349.380560][T13687] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 349.380573][T13687] RBP: 00007f1fe049d090 R08: 0000000000000000 R09: 0000000000000000 [ 349.380584][T13687] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 349.380595][T13687] R13: 00007f1fdf7e6038 R14: 00007f1fdf7e5fa0 R15: 00007ffd7667ebf8 [ 349.380628][T13687] [ 349.746351][T13696] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 349.865406][T13704] __nla_validate_parse: 16 callbacks suppressed [ 349.865424][T13704] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2219'. [ 350.057785][T13720] pimreg: entered allmulticast mode [ 350.372983][T13733] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2227'. [ 350.395678][T13742] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2230'. [ 350.418554][T13746] tipc: Enabled bearer , priority 0 [ 350.426411][T13746] netlink: 'syz.4.2231': attribute type 6 has an invalid length. [ 350.436089][T13742] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2230'. [ 350.441748][T13746] sch_tbf: burst 206 is lower than device syzkaller0 mtu (1514) ! [ 350.461696][T13746] tipc: Resetting bearer [ 350.499894][T13742] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2230'. [ 350.642150][T13755] FAULT_INJECTION: forcing a failure. [ 350.642150][T13755] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 350.662675][T13755] CPU: 1 UID: 0 PID: 13755 Comm: syz.0.2233 Not tainted syzkaller #0 PREEMPT(full) [ 350.662702][T13755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 350.662713][T13755] Call Trace: [ 350.662719][T13755] [ 350.662728][T13755] dump_stack_lvl+0x189/0x250 [ 350.662753][T13755] ? __pfx____ratelimit+0x10/0x10 [ 350.662775][T13755] ? __pfx_dump_stack_lvl+0x10/0x10 [ 350.662794][T13755] ? __pfx__printk+0x10/0x10 [ 350.662824][T13755] should_fail_ex+0x414/0x560 [ 350.662852][T13755] _copy_to_user+0x31/0xb0 [ 350.662873][T13755] simple_read_from_buffer+0xe1/0x170 [ 350.662912][T13755] proc_fail_nth_read+0x1b3/0x220 [ 350.662938][T13755] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 350.662963][T13755] ? rw_verify_area+0x2a6/0x4d0 [ 350.662983][T13755] ? __lock_acquire+0xab9/0xd20 [ 350.662999][T13755] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 350.663023][T13755] vfs_read+0x200/0xa30 [ 350.663050][T13755] ? fdget_pos+0x247/0x320 [ 350.663070][T13755] ? __pfx___mutex_lock+0x10/0x10 [ 350.663094][T13755] ? __pfx_vfs_read+0x10/0x10 [ 350.663120][T13755] ? __fget_files+0x2a/0x420 [ 350.663142][T13755] ? __fget_files+0x3a0/0x420 [ 350.663158][T13755] ? __fget_files+0x2a/0x420 [ 350.663193][T13755] ksys_read+0x145/0x250 [ 350.663225][T13755] ? __pfx_ksys_read+0x10/0x10 [ 350.663254][T13755] ? do_syscall_64+0xbe/0xfa0 [ 350.663281][T13755] do_syscall_64+0xfa/0xfa0 [ 350.663303][T13755] ? lockdep_hardirqs_on+0x9c/0x150 [ 350.663325][T13755] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.663341][T13755] ? clear_bhb_loop+0x60/0xb0 [ 350.663367][T13755] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.663383][T13755] RIP: 0033:0x7f25c1f8d8dc [ 350.663398][T13755] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 350.663413][T13755] RSP: 002b:00007f25c2df7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 350.663432][T13755] RAX: ffffffffffffffda RBX: 00007f25c21e5fa0 RCX: 00007f25c1f8d8dc [ 350.663446][T13755] RDX: 000000000000000f RSI: 00007f25c2df70a0 RDI: 0000000000000004 [ 350.663456][T13755] RBP: 00007f25c2df7090 R08: 0000000000000000 R09: 0000000000000000 [ 350.663467][T13755] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 350.663477][T13755] R13: 00007f25c21e6038 R14: 00007f25c21e5fa0 R15: 00007ffe201da358 [ 350.663509][T13755] [ 350.701475][T13759] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2236'. [ 350.785366][T13762] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2237'. [ 350.975179][T13764] netlink: 232 bytes leftover after parsing attributes in process `syz.2.2238'. [ 351.037989][T13769] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2240'. [ 351.338103][T13790] xt_TCPMSS: Only works on TCP SYN packets [ 351.381985][T13790] geneve3: entered promiscuous mode [ 351.420572][T13790] geneve3: entered allmulticast mode [ 351.462420][T13523] netdevsim netdevsim2 netdevsim0: set [1, 2] type 2 family 0 port 19999 - 0 [ 351.472680][T13523] netdevsim netdevsim2 netdevsim1: set [1, 2] type 2 family 0 port 19999 - 0 [ 351.494679][T13523] netdevsim netdevsim2 netdevsim2: set [1, 2] type 2 family 0 port 19999 - 0 [ 351.592072][T13794] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 351.606844][T13794] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.617897][T13794] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 351.671097][T13812] netlink: 784 bytes leftover after parsing attributes in process `syz.4.2253'. [ 351.721311][T13817] netlink: 'syz.3.2254': attribute type 11 has an invalid length. [ 352.083950][T13832] tipc: Enabled bearer , priority 0 [ 352.137139][T13838] syzkaller0: entered promiscuous mode [ 352.158681][T13838] syzkaller0: entered allmulticast mode [ 352.194844][T13832] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) ! [ 352.273017][T13832] tipc: Resetting bearer [ 352.359023][T13830] tipc: Resetting bearer [ 352.408959][T13830] tipc: Disabling bearer [ 352.602770][T13861] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 352.608101][T13862] netlink: 'syz.0.2269': attribute type 1 has an invalid length. [ 352.626748][T13865] netlink: 'syz.3.2270': attribute type 1 has an invalid length. [ 352.640956][T13865] netlink: 'syz.3.2270': attribute type 2 has an invalid length. [ 352.664005][T13862] netlink: 'syz.0.2269': attribute type 1 has an invalid length. [ 353.024071][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 353.032268][ C0] lec:lec_tx_timeout: lec0 [ 353.037318][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 353.058637][T13886] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 353.085574][T13886] 0ªî{X¹¦: entered allmulticast mode [ 353.091636][T13886] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 353.355544][T13794] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 353.380001][T13794] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.393967][T13794] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 353.404890][T13794] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 19999 - 0 [ 353.472793][T13910] tipc: Enabled bearer , priority 0 [ 353.505575][T13910] syzkaller0: entered promiscuous mode [ 353.529149][T13910] syzkaller0: entered allmulticast mode [ 353.608758][T13794] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 353.633983][T13794] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.658737][T13794] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 353.673746][T13794] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 19999 - 0 [ 353.729492][T13921] netlink: 'syz.3.2284': attribute type 13 has an invalid length. [ 353.747992][T13926] tipc: Resetting bearer [ 353.827440][T13794] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 353.844989][T13794] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.855567][T13794] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 353.867206][T13794] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 19999 - 0 [ 353.890987][T13909] tipc: Resetting bearer [ 353.940190][T13909] tipc: Disabling bearer [ 353.987350][T13939] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 354.126319][T13523] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 354.159702][T13523] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 354.169258][T13523] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 354.177711][T13523] netdevsim netdevsim2 eth0: set [1, 2] type 2 family 0 port 256 - 0 [ 354.199434][T13523] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 354.207954][T13523] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 354.216422][T13523] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 354.225319][T13523] netdevsim netdevsim2 eth1: set [1, 2] type 2 family 0 port 256 - 0 [ 354.257312][T13794] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 354.285376][T13794] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 354.314578][T13794] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 354.335152][T13794] netdevsim netdevsim2 eth1 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0 [ 354.362498][T13523] ================================================================== [ 354.370608][T13523] BUG: KASAN: slab-use-after-free in __mutex_lock+0x147/0x1350 [ 354.378151][T13523] Read of size 8 at addr ffff88806ef6b6b0 by task kworker/u8:13/13523 [ 354.386296][T13523] [ 354.388618][T13523] CPU: 0 UID: 0 PID: 13523 Comm: kworker/u8:13 Not tainted syzkaller #0 PREEMPT(full) [ 354.388638][T13523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 354.388649][T13523] Workqueue: udp_tunnel_nic udp_tunnel_nic_device_sync_work [ 354.388674][T13523] Call Trace: [ 354.388681][T13523] [ 354.388688][T13523] dump_stack_lvl+0x189/0x250 [ 354.388706][T13523] ? __kasan_check_byte+0x12/0x40 [ 354.388731][T13523] ? __pfx_dump_stack_lvl+0x10/0x10 [ 354.388747][T13523] ? lock_release+0x4b/0x3e0 [ 354.388765][T13523] ? __virt_addr_valid+0x4a5/0x5c0 [ 354.388794][T13523] print_report+0xca/0x240 [ 354.388813][T13523] ? __mutex_lock+0x147/0x1350 [ 354.388832][T13523] kasan_report+0x118/0x150 [ 354.388845][T13523] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 354.388864][T13523] ? __mutex_lock+0x147/0x1350 [ 354.388887][T13523] __mutex_lock+0x147/0x1350 [ 354.388908][T13523] ? __mutex_lock+0x5bb/0x1350 [ 354.388929][T13523] ? udp_tunnel_nic_device_sync_work+0x39/0xa50 [ 354.388948][T13523] ? __pfx___mutex_lock+0x10/0x10 [ 354.388970][T13523] ? __lock_acquire+0xab9/0xd20 [ 354.388990][T13523] udp_tunnel_nic_device_sync_work+0x39/0xa50 [ 354.389011][T13523] ? process_scheduled_works+0x9ef/0x17b0 [ 354.389028][T13523] ? process_scheduled_works+0x9ef/0x17b0 [ 354.389045][T13523] process_scheduled_works+0xae1/0x17b0 [ 354.389073][T13523] ? __pfx_process_scheduled_works+0x10/0x10 [ 354.389096][T13523] worker_thread+0x8a0/0xda0 [ 354.389123][T13523] kthread+0x711/0x8a0 [ 354.389145][T13523] ? __pfx_worker_thread+0x10/0x10 [ 354.389161][T13523] ? __pfx_kthread+0x10/0x10 [ 354.389182][T13523] ? _raw_spin_unlock_irq+0x23/0x50 [ 354.389199][T13523] ? lockdep_hardirqs_on+0x9c/0x150 [ 354.389216][T13523] ? __pfx_kthread+0x10/0x10 [ 354.389236][T13523] ret_from_fork+0x4bc/0x870 [ 354.389253][T13523] ? __pfx_ret_from_fork+0x10/0x10 [ 354.389272][T13523] ? __switch_to_asm+0x39/0x70 [ 354.389290][T13523] ? __switch_to_asm+0x33/0x70 [ 354.389307][T13523] ? __pfx_kthread+0x10/0x10 [ 354.389327][T13523] ret_from_fork_asm+0x1a/0x30 [ 354.389352][T13523] [ 354.389358][T13523] [ 354.593211][T13523] Allocated by task 13794: [ 354.597620][T13523] kasan_save_track+0x3e/0x80 [ 354.602292][T13523] __kasan_kmalloc+0x93/0xb0 [ 354.606877][T13523] __kmalloc_noprof+0x411/0x7f0 [ 354.611727][T13523] udp_tunnel_nic_netdevice_event+0x4c3/0x1810 [ 354.617953][T13523] notifier_call_chain+0x1b6/0x3e0 [ 354.623054][T13523] register_netdevice+0x1608/0x1ae0 [ 354.628240][T13523] nsim_create+0xae8/0xf10 [ 354.632975][T13523] __nsim_dev_port_add+0x6b6/0xb10 [ 354.638133][T13523] nsim_dev_port_add_all+0x37/0xf0 [ 354.643256][T13523] nsim_dev_reload_up+0x451/0x780 [ 354.648294][T13523] devlink_reload+0x4ec/0x8d0 [ 354.652975][T13523] devlink_nl_reload_doit+0xb35/0xd50 [ 354.658441][T13523] genl_family_rcv_msg_doit+0x212/0x300 [ 354.664107][T13523] genl_rcv_msg+0x60e/0x790 [ 354.668804][T13523] netlink_rcv_skb+0x205/0x470 [ 354.673648][T13523] genl_rcv+0x28/0x40 [ 354.677619][T13523] netlink_unicast+0x82f/0x9e0 [ 354.682376][T13523] netlink_sendmsg+0x805/0xb30 [ 354.687127][T13523] __sock_sendmsg+0x219/0x270 [ 354.691883][T13523] ____sys_sendmsg+0x505/0x830 [ 354.696636][T13523] ___sys_sendmsg+0x21f/0x2a0 [ 354.701317][T13523] __x64_sys_sendmsg+0x19b/0x260 [ 354.706245][T13523] do_syscall_64+0xfa/0xfa0 [ 354.710740][T13523] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.716621][T13523] [ 354.718932][T13523] Freed by task 13794: [ 354.722978][T13523] kasan_save_track+0x3e/0x80 [ 354.727646][T13523] __kasan_save_free_info+0x46/0x50 [ 354.732865][T13523] __kasan_slab_free+0x5c/0x80 [ 354.737619][T13523] kfree+0x19a/0x6d0 [ 354.741506][T13523] udp_tunnel_nic_netdevice_event+0x11ab/0x1810 [ 354.747728][T13523] notifier_call_chain+0x1b6/0x3e0 [ 354.752824][T13523] unregister_netdevice_many_notify+0x14d7/0x1ff0 [ 354.759228][T13523] unregister_netdevice_queue+0x33c/0x380 [ 354.764948][T13523] nsim_destroy+0x1dd/0x670 [ 354.769625][T13523] __nsim_dev_port_del+0x14d/0x1b0 [ 354.774742][T13523] nsim_dev_port_add_all+0xae/0xf0 [ 354.779937][T13523] nsim_dev_reload_up+0x451/0x780 [ 354.784972][T13523] devlink_reload+0x4ec/0x8d0 [ 354.789643][T13523] devlink_nl_reload_doit+0xb35/0xd50 [ 354.794999][T13523] genl_family_rcv_msg_doit+0x212/0x300 [ 354.800623][T13523] genl_rcv_msg+0x60e/0x790 [ 354.805198][T13523] netlink_rcv_skb+0x205/0x470 [ 354.809943][T13523] genl_rcv+0x28/0x40 [ 354.813911][T13523] netlink_unicast+0x82f/0x9e0 [ 354.818665][T13523] netlink_sendmsg+0x805/0xb30 [ 354.823413][T13523] __sock_sendmsg+0x219/0x270 [ 354.828095][T13523] ____sys_sendmsg+0x505/0x830 [ 354.832852][T13523] ___sys_sendmsg+0x21f/0x2a0 [ 354.837513][T13523] __x64_sys_sendmsg+0x19b/0x260 [ 354.842436][T13523] do_syscall_64+0xfa/0xfa0 [ 354.846940][T13523] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.852814][T13523] [ 354.855121][T13523] Last potentially related work creation: [ 354.860817][T13523] kasan_save_stack+0x3e/0x60 [ 354.865485][T13523] kasan_record_aux_stack+0xbd/0xd0 [ 354.870670][T13523] insert_work+0x3d/0x330 [ 354.874981][T13523] __queue_work+0xbaf/0xfb0 [ 354.879474][T13523] queue_work_on+0x181/0x270 [ 354.884047][T13523] __udp_tunnel_nic_add_port+0xb71/0xd60 [ 354.889664][T13523] udp_tunnel_push_rx_port+0x180/0x200 [ 354.895103][T13523] geneve_offload_rx_ports+0xd7/0x160 [ 354.900492][T13523] geneve_netdevice_event+0x6a/0x80 [ 354.905677][T13523] notifier_call_chain+0x1b6/0x3e0 [ 354.910779][T13523] call_netdevice_notifiers+0x88/0xc0 [ 354.916140][T13523] udp_tunnel_nic_netdevice_event+0xdff/0x1810 [ 354.922280][T13523] notifier_call_chain+0x1b6/0x3e0 [ 354.927493][T13523] register_netdevice+0x1608/0x1ae0 [ 354.932689][T13523] nsim_create+0xae8/0xf10 [ 354.937092][T13523] __nsim_dev_port_add+0x6b6/0xb10 [ 354.942275][T13523] nsim_dev_port_add_all+0x37/0xf0 [ 354.947369][T13523] nsim_dev_reload_up+0x451/0x780 [ 354.952379][T13523] devlink_reload+0x4ec/0x8d0 [ 354.957049][T13523] devlink_nl_reload_doit+0xb35/0xd50 [ 354.962422][T13523] genl_family_rcv_msg_doit+0x212/0x300 [ 354.968061][T13523] genl_rcv_msg+0x60e/0x790 [ 354.972559][T13523] netlink_rcv_skb+0x205/0x470 [ 354.977318][T13523] genl_rcv+0x28/0x40 [ 354.981285][T13523] netlink_unicast+0x82f/0x9e0 [ 354.986038][T13523] netlink_sendmsg+0x805/0xb30 [ 354.990785][T13523] __sock_sendmsg+0x219/0x270 [ 354.995450][T13523] ____sys_sendmsg+0x505/0x830 [ 355.000206][T13523] ___sys_sendmsg+0x21f/0x2a0 [ 355.004874][T13523] __x64_sys_sendmsg+0x19b/0x260 [ 355.009796][T13523] do_syscall_64+0xfa/0xfa0 [ 355.014288][T13523] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.020164][T13523] [ 355.022481][T13523] Second to last potentially related work creation: [ 355.029147][T13523] kasan_save_stack+0x3e/0x60 [ 355.033835][T13523] kasan_record_aux_stack+0xbd/0xd0 [ 355.039028][T13523] insert_work+0x3d/0x330 [ 355.043343][T13523] __queue_work+0xcd2/0xfb0 [ 355.047833][T13523] queue_work_on+0x181/0x270 [ 355.052406][T13523] __udp_tunnel_nic_add_port+0xb71/0xd60 [ 355.058026][T13523] udp_tunnel_push_rx_port+0x180/0x200 [ 355.063471][T13523] vxlan_offload_rx_ports+0x139/0x200 [ 355.068831][T13523] vxlan_netdevice_event+0x111/0x470 [ 355.074104][T13523] notifier_call_chain+0x1b6/0x3e0 [ 355.079204][T13523] call_netdevice_notifiers+0x88/0xc0 [ 355.084567][T13523] udp_tunnel_nic_netdevice_event+0xdff/0x1810 [ 355.090709][T13523] notifier_call_chain+0x1b6/0x3e0 [ 355.095807][T13523] register_netdevice+0x1608/0x1ae0 [ 355.100992][T13523] nsim_create+0xae8/0xf10 [ 355.105397][T13523] __nsim_dev_port_add+0x6b6/0xb10 [ 355.110499][T13523] nsim_dev_port_add_all+0x37/0xf0 [ 355.115597][T13523] nsim_dev_reload_up+0x451/0x780 [ 355.120613][T13523] devlink_reload+0x4ec/0x8d0 [ 355.125272][T13523] devlink_nl_reload_doit+0xb35/0xd50 [ 355.130629][T13523] genl_family_rcv_msg_doit+0x212/0x300 [ 355.136165][T13523] genl_rcv_msg+0x60e/0x790 [ 355.140655][T13523] netlink_rcv_skb+0x205/0x470 [ 355.145401][T13523] genl_rcv+0x28/0x40 [ 355.149372][T13523] netlink_unicast+0x82f/0x9e0 [ 355.154124][T13523] netlink_sendmsg+0x805/0xb30 [ 355.158869][T13523] __sock_sendmsg+0x219/0x270 [ 355.163534][T13523] ____sys_sendmsg+0x505/0x830 [ 355.168281][T13523] ___sys_sendmsg+0x21f/0x2a0 [ 355.172939][T13523] __x64_sys_sendmsg+0x19b/0x260 [ 355.177859][T13523] do_syscall_64+0xfa/0xfa0 [ 355.182366][T13523] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.188263][T13523] [ 355.190849][T13523] The buggy address belongs to the object at ffff88806ef6b600 [ 355.190849][T13523] which belongs to the cache kmalloc-256 of size 256 [ 355.205691][T13523] The buggy address is located 176 bytes inside of [ 355.205691][T13523] freed 256-byte region [ffff88806ef6b600, ffff88806ef6b700) [ 355.219578][T13523] [ 355.221989][T13523] The buggy address belongs to the physical page: [ 355.228392][T13523] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x6ef6a [ 355.237144][T13523] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 355.245631][T13523] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 355.253158][T13523] page_type: f5(slab) [ 355.257125][T13523] raw: 00fff00000000040 ffff88813ffa6b40 ffffea0001f78600 0000000000000004 [ 355.265878][T13523] raw: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000 [ 355.274457][T13523] head: 00fff00000000040 ffff88813ffa6b40 ffffea0001f78600 0000000000000004 [ 355.283203][T13523] head: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000 [ 355.291865][T13523] head: 00fff00000000001 ffffea0001bbda81 00000000ffffffff 00000000ffffffff [ 355.300608][T13523] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 355.309257][T13523] page dumped because: kasan: bad access detected [ 355.315665][T13523] page_owner tracks the page as allocated [ 355.321370][T13523] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 12601, tgid 12592 (syz.4.1910), ts 330271461050, free_ts 79527166724 [ 355.342907][T13523] post_alloc_hook+0x240/0x2a0 [ 355.347671][T13523] get_page_from_freelist+0x2365/0x2440 [ 355.353201][T13523] __alloc_frozen_pages_noprof+0x181/0x370 [ 355.358995][T13523] alloc_pages_mpol+0x232/0x4a0 [ 355.363841][T13523] allocate_slab+0x96/0x3a0 [ 355.368334][T13523] ___slab_alloc+0xe94/0x18a0 [ 355.372994][T13523] __slab_alloc+0x65/0x100 [ 355.377404][T13523] __kmalloc_noprof+0x471/0x7f0 [ 355.382249][T13523] iter_file_splice_write+0x1c6/0x10e0 [ 355.387705][T13523] direct_splice_actor+0x101/0x160 [ 355.392811][T13523] splice_direct_to_actor+0x5a5/0xcc0 [ 355.398176][T13523] do_splice_direct+0x181/0x270 [ 355.403017][T13523] do_sendfile+0x4da/0x7e0 [ 355.407421][T13523] __se_sys_sendfile64+0x13e/0x190 [ 355.412521][T13523] do_syscall_64+0xfa/0xfa0 [ 355.417109][T13523] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.423007][T13523] page last free pid 5197 tgid 5197 stack trace: [ 355.429333][T13523] __free_frozen_pages+0xbc4/0xd30 [ 355.434543][T13523] __put_partials+0x146/0x170 [ 355.439217][T13523] put_cpu_partial+0x1f2/0x2e0 [ 355.443968][T13523] __slab_free+0x2b9/0x390 [ 355.448370][T13523] qlist_free_all+0x97/0x140 [ 355.452948][T13523] kasan_quarantine_reduce+0x148/0x160 [ 355.458401][T13523] __kasan_slab_alloc+0x22/0x80 [ 355.463242][T13523] __kmalloc_noprof+0x3c3/0x7f0 [ 355.468083][T13523] tomoyo_realpath_from_path+0xe3/0x5d0 [ 355.473618][T13523] tomoyo_path_perm+0x213/0x4b0 [ 355.478452][T13523] security_inode_getattr+0x12f/0x330 [ 355.483823][T13523] vfs_statx+0x18e/0x550 [ 355.488047][T13523] vfs_fstatat+0x118/0x170 [ 355.492531][T13523] __x64_sys_newfstatat+0x116/0x190 [ 355.497716][T13523] do_syscall_64+0xfa/0xfa0 [ 355.502206][T13523] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.508170][T13523] [ 355.510482][T13523] Memory state around the buggy address: [ 355.516096][T13523] ffff88806ef6b580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 355.524149][T13523] ffff88806ef6b600: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 355.532199][T13523] >ffff88806ef6b680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 355.540247][T13523] ^ [ 355.545867][T13523] ffff88806ef6b700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 355.553910][T13523] ffff88806ef6b780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 355.561949][T13523] ================================================================== [ 355.580768][ T56] block nbd0: Possible stuck request ffff888024c60000: control (read@0,1024B). Runtime 270 seconds [ 355.590781][T13523] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 355.590802][T13523] CPU: 0 UID: 0 PID: 13523 Comm: kworker/u8:13 Not tainted syzkaller #0 PREEMPT(full) [ 355.590826][T13523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 355.590840][T13523] Workqueue: udp_tunnel_nic udp_tunnel_nic_device_sync_work [ 355.590870][T13523] Call Trace: [ 355.590878][T13523] [ 355.590886][T13523] dump_stack_lvl+0x99/0x250 [ 355.590908][T13523] ? __asan_memcpy+0x40/0x70 [ 355.590932][T13523] ? __pfx_dump_stack_lvl+0x10/0x10 [ 355.590951][T13523] ? __pfx__printk+0x10/0x10 [ 355.590976][T13523] vpanic+0x237/0x6d0 [ 355.591000][T13523] ? __pfx_vpanic+0x10/0x10 [ 355.591024][T13523] ? preempt_schedule+0xae/0xc0 [ 355.591046][T13523] ? __pfx_preempt_schedule+0x10/0x10 [ 355.591071][T13523] panic+0xb9/0xc0 [ 355.591094][T13523] ? __pfx_panic+0x10/0x10 [ 355.591120][T13523] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 355.591145][T13523] ? __mutex_lock+0x147/0x1350 [ 355.591168][T13523] check_panic_on_warn+0x89/0xb0 [ 355.591194][T13523] ? __mutex_lock+0x147/0x1350 [ 355.591216][T13523] end_report+0x78/0x160 [ 355.591244][T13523] kasan_report+0x129/0x150 [ 355.591259][T13523] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 355.591281][T13523] ? __mutex_lock+0x147/0x1350 [ 355.591307][T13523] __mutex_lock+0x147/0x1350 [ 355.591333][T13523] ? __mutex_lock+0x5bb/0x1350 [ 355.591358][T13523] ? udp_tunnel_nic_device_sync_work+0x39/0xa50 [ 355.591381][T13523] ? __pfx___mutex_lock+0x10/0x10 [ 355.591407][T13523] ? __lock_acquire+0xab9/0xd20 [ 355.591430][T13523] udp_tunnel_nic_device_sync_work+0x39/0xa50 [ 355.591456][T13523] ? process_scheduled_works+0x9ef/0x17b0 [ 355.591481][T13523] ? process_scheduled_works+0x9ef/0x17b0 [ 355.591500][T13523] process_scheduled_works+0xae1/0x17b0 [ 355.591528][T13523] ? __pfx_process_scheduled_works+0x10/0x10 [ 355.591557][T13523] worker_thread+0x8a0/0xda0 [ 355.591587][T13523] kthread+0x711/0x8a0 [ 355.591612][T13523] ? __pfx_worker_thread+0x10/0x10 [ 355.591630][T13523] ? __pfx_kthread+0x10/0x10 [ 355.591652][T13523] ? _raw_spin_unlock_irq+0x23/0x50 [ 355.591672][T13523] ? lockdep_hardirqs_on+0x9c/0x150 [ 355.591694][T13523] ? __pfx_kthread+0x10/0x10 [ 355.591718][T13523] ret_from_fork+0x4bc/0x870 [ 355.591739][T13523] ? __pfx_ret_from_fork+0x10/0x10 [ 355.591762][T13523] ? __switch_to_asm+0x39/0x70 [ 355.591784][T13523] ? __switch_to_asm+0x33/0x70 [ 355.591806][T13523] ? __pfx_kthread+0x10/0x10 [ 355.591830][T13523] ret_from_fork_asm+0x1a/0x30 [ 355.591861][T13523] [ 355.592163][T13523] Kernel Offset: disabled