last executing test programs: 4.501154064s ago: executing program 2 (id=4576): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x22, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000000)={0x3, 'veth0_macvtap\x00', {0xd4e6}, 0x4}) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000000a01010000000000000000010040000900010073797a300000000014000000020a030000000000000000000000000020000000020a01020000000000000000010000070900010073797a30"], 0x7c}}, 0x0) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) bind$tipc(r2, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) bind$tipc(r2, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x1, 0x3}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) close(0x3) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=@newlink={0x4c, 0x10, 0x403, 0x300, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x1000, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x80c4) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x22, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x1, 0x803, 0x0) (async) socket$tipc(0x1e, 0x5, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000000)={0x3, 'veth0_macvtap\x00', {0xd4e6}, 0x4}) (async) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000000a01010000000000000000010040000900010073797a300000000014000000020a030000000000000000000000000020000000020a01020000000000000000010000070900010073797a30"], 0x7c}}, 0x0) (async) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) (async) bind$tipc(r2, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) (async) bind$tipc(r2, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x1, 0x3}}, 0x10) (async) socket$tipc(0x1e, 0x5, 0x0) (async) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) (async) close(0x3) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=@newlink={0x4c, 0x10, 0x403, 0x300, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x1000, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x80c4) (async) 4.290608682s ago: executing program 2 (id=4579): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000200)={r2, &(0x7f0000000100)="9cfc", &(0x7f0000000000)=""/82}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x5, 0xc, 0x42, 0x40, 0xc0, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100), &(0x7f00000001c0), 0x10f0, r3}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r3, &(0x7f0000000000), &(0x7f00000000c0)=""/37}, 0x20) write(r1, &(0x7f0000000000)="240000001a005f0214f9f407000901000000000000000005000000000800040001000000", 0x24) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r4, &(0x7f00000005c0)={0x1f, 0x0, @none, 0x5}, 0xe) connect$bt_l2cap(r4, &(0x7f00000002c0)={0x1f, 0x0, @any, 0x4, 0x3}, 0xe) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x23c, 0x19, 0x1, 0x0, 0x10, {{@in=@multicast1, @in6=@dev={0xfe, 0x80, '\x00', 0x24}, 0x4e22, 0xb, 0xffff, 0x0, 0xa, 0x80, 0x80, 0x0, 0x0, 0xffffffffffffffff}, {}, {0x2, 0x9, 0x80}}, [@tmpl={0x184, 0x5, [{{@in6=@private0, 0x0, 0x3c}, 0x0, @in=@remote, 0x34ff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6e}, {{@in=@local, 0x0, 0x3c}, 0x0, @in6=@loopback, 0xfffffffd, 0x2, 0x3, 0x0, 0x7, 0x800, 0x2}, {{@in6=@loopback, 0x0, 0x32}, 0x0, @in6=@empty, 0x3503, 0x1, 0x5, 0x0, 0x8}, {{@in=@dev={0xac, 0x14, 0x14, 0x21}, 0x0, 0x33}, 0x0, @in6=@mcast2, 0x3504, 0x0, 0x0, 0x4, 0x0, 0xabb}, {{@in=@multicast1, 0x4d4, 0x32}, 0x0, @in=@local, 0x4, 0x4, 0x1, 0x7, 0x0, 0x0, 0x400}, {{@in6=@mcast2, 0x0, 0x3c}, 0x0, @in=@multicast2, 0xffffffff, 0x1, 0x2, 0x0, 0x10000, 0x0, 0x1}]}]}, 0x23c}}, 0x80c4) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'tunl0\x00', 0x0, 0x20, 0x8, 0x9, 0x7, {{0x16, 0x4, 0x2, 0x11, 0x58, 0x64, 0x0, 0x5, 0x2f, 0x0, @private=0xa010100, @multicast2, {[@ssrr={0x89, 0x7, 0xa5, [@local]}, @timestamp_addr={0x44, 0x24, 0x24, 0x1, 0x7, [{@rand_addr=0x64010102, 0xffff}, {@multicast1, 0x9}, {@multicast1, 0x10}, {@empty, 0x6}]}, @rr={0x7, 0x17, 0x8b, [@rand_addr=0x64010100, @broadcast, @multicast1, @rand_addr=0x64010101, @remote]}]}}}}}) bind$xdp(r1, &(0x7f00000001c0)={0x2c, 0x2, r6, 0x13}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000440)={0x1, [0x97]}, 0x6) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000080850000008200000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f00000021c0)={r9, 0x0, 0x0}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x54, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xe403, 0x0, 0x0, 0x10000}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @sit={{0x8}, {0x28, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_RELAY_PREFIX={0x8, 0xc, 0x80000000}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @dev}, @IFLA_IPTUN_6RD_PREFIX={0x14, 0xb, @mcast2}]}}}]}, 0x54}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000480), r1) 3.893370752s ago: executing program 2 (id=4586): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newtfilter={0x24, 0x11, 0x1, 0x70bd27, 0x80, {0x0, 0x0, 0x74, 0x0, {0xb, 0xfff2}, {0xfff2, 0x9}, {0x4, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) (async, rerun: 64) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r0, 0x8040942d, &(0x7f0000000040)) (rerun: 64) 3.598826784s ago: executing program 2 (id=4589): socket$igmp(0x2, 0x3, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) nanosleep(0x0, 0x0) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/uts\x00') unshare(0x6a040000) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0) r1 = socket(0x8, 0x3, 0x3) ioctl$sock_netrom_SIOCADDRT(r1, 0x6180, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, 0x0) sendmmsg$alg(r1, &(0x7f0000005ec0), 0x0, 0x800) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x840}, 0x100) r2 = socket$inet6(0xa, 0x5ea8cac2c10c6e72, 0x3) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f00000000c0)={0x1a4, 0x6, '\x00', [@jumbo, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x13}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1, @enc_lim={0x4, 0x1, 0x9}, @jumbo={0xc2, 0x4, 0xd6}, @pad1, @jumbo={0xc2, 0x4, 0x200}]}, 0x38) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r3, &(0x7f0000000080)='\x00\x00\x00\x00', 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x4, @mcast2, 0x4}, 0x1c) ioctl$sock_TIOCINQ(r3, 0x541b, &(0x7f0000000040)) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0) r4 = socket(0x11, 0x3, 0x0) unshare(0x400) unshare(0x42020100) syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00', 0x0}) bind$packet(r4, &(0x7f0000000180)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @remote}, 0x14) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) r6 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/user\x00') ioctl$NS_GET_USERNS(r6, 0xb701, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2b, 0x8, &(0x7f00000002c0)=@framed={{0x18, 0x8}, [@alu={0x7, 0x0, 0x7, 0xa, 0x0, 0x100, 0x4}, @initr0, @exit, @alu={0x5, 0x1, 0x6, 0xa, 0x7}]}, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) 2.963340497s ago: executing program 3 (id=4598): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=@base={0x11, 0x202, 0x804, 0x2, 0x800, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x14, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xf81}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}, @printk={@i}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63ec7290f21bd072950ded39556e", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001200), 0x8a400, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x614603, 0x0) ioctl$TUNSETOFFLOAD(r3, 0x4004743d, 0x110e22fff6) close(r2) r4 = epoll_create1(0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r6, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYRES32=r7, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e"], 0x3c}}, 0x40000) r8 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r8) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_inet6_SIOCSIFADDR(r10, 0x8916, &(0x7f0000000180)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2d, r9}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f00000001c0)={0x40000008}) poll(&(0x7f0000000000)=[{r4, 0x9000}], 0x1, 0x9) socket(0xf, 0xa, 0x1) 2.672930101s ago: executing program 4 (id=4600): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x134, 0x24, 0x4ee4e6a52ff56541, 0x8000000, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffe0}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x104, 0x2, {{0xfffffffe, 0x2, 0x40, 0xa, 0xe7, 0xcc36}, [@TCA_NETEM_LOSS={0xb8}, @TCA_NETEM_JITTER64={0xc, 0xb, 0x6}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x40009, 0xae}}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x100020}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x1}]}}}]}, 0x134}, 0x1, 0x0, 0x0, 0x4546cfee17049510}, 0x24000000) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_mq={0x7}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2, 0x1}}, {0x4}}]}]}, 0x50}}, 0x4000010) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r5, 0x0, 0x0, 0x24044044, &(0x7f0000000540)={0xa, 0x4e22, 0x0, @mcast2, 0x4}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610408000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x3, 0xc3, &(0x7f0000000080)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r7, @ANYBLOB="060015000700fdff0c00168008000100", @ANYRES32=r6], 0x38}}, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000240)={'syztnl1\x00', r1, 0x4, 0x10, 0x80, 0x1e37, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x10, 0x7800, 0x7}}) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000640), r6) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r6, 0x89f8, &(0x7f0000000740)={'tunl0\x00', &(0x7f00000006c0)={'syztnl2\x00', r4, 0x8000, 0x40, 0x7, 0x5, {{0xd, 0x4, 0x0, 0x5, 0x34, 0x66, 0x0, 0x7, 0x4, 0x0, @loopback, @loopback, {[@end, @rr={0x7, 0xb, 0x22, [@local, @loopback]}, @lsrr={0x83, 0x13, 0xaf, [@loopback, @multicast2, @remote, @multicast2]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r6, 0x89f8, &(0x7f0000000800)={'syztnl0\x00', &(0x7f0000000780)={'syztnl1\x00', r4, 0x8, 0x8, 0x2, 0x8, {{0xe, 0x4, 0x0, 0x25, 0x38, 0x65, 0x0, 0x0, 0x4, 0x0, @loopback, @broadcast, {[@timestamp={0x44, 0x8, 0x32, 0x0, 0x5, [0x4]}, @rr={0x7, 0x1b, 0x85, [@private=0xa010100, @empty, @broadcast, @private=0xa010100, @remote, @multicast2]}]}}}}}) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r13, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$nl_route(r13, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c0000001000018025bd7000fedbdf2500000000", @ANYRES32=r14, @ANYBLOB="34040000004800001400030076657468315f746f5f626f6e64000000300016802c0001802800010009000000aaaaaaaaaaaa000000000000000000000000000000000000000000000000000008001b"], 0x6c}, 0x1, 0x0, 0x0, 0x40804}, 0x60040010) sendmsg$ETHTOOL_MSG_TSINFO_GET(r6, &(0x7f0000000a00)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000840)={0x16c, r10, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r6, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x160, r8, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x40}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xc}, @MPTCP_PM_ATTR_ADDR={0x58, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x60, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r9}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}]}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}]}]}, 0x160}}, 0x800) 2.566892941s ago: executing program 3 (id=4601): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$inet6(r1, &(0x7f0000002d40)={0xa, 0x4e23, 0x1, @private0, 0x6}, 0x1c) bind$llc(r0, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0xff, 0x2, 0x9}, 0x10) r2 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.read_bps_device\x00', 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000840)={0x28, r4, 0x1, 0x70bd2c, 0x9, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x40020) write$cgroup_int(r2, &(0x7f0000000080)=0x100, 0x12) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)={0x28, 0x35, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x10}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) sendfile(r0, 0xffffffffffffffff, 0x0, 0xffffffff000) (async) sendfile(r0, 0xffffffffffffffff, 0x0, 0xffffffff000) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001300)=ANY=[@ANYBLOB="2c11000040000701fefffffffedbdf25017c0000040042801400018010000400cab1893a20b8d2a93521800a00110280fc10"], 0x112c}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) (async) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001300)=ANY=[@ANYBLOB="2c11000040000701fefffffffedbdf25017c0000040042801400018010000400cab1893a20b8d2a93521800a00110280fc10"], 0x112c}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) recvmmsg(r0, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)=""/238, 0xee}], 0x1}, 0xffffffff}], 0x1, 0x10002, 0x0) (async) recvmmsg(r0, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)=""/238, 0xee}], 0x1}, 0xffffffff}], 0x1, 0x10002, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f00000001c0)=0x3) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 2.335422714s ago: executing program 3 (id=4602): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', @ANYRES32=r1], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x802) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e0"], 0x64}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$netlink(0x10, 0x3, 0x0) (async) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) (async) sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', @ANYRES32=r1], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x802) (async) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e0"], 0x64}}, 0x0) (async) 2.209522487s ago: executing program 4 (id=4603): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYRES16=r0], 0x64}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001300)=ANY=[@ANYBLOB="38010000000101040000000000000000020000002c0001801400018008000100ac14143208000200ac1414000c00028005000100000000000600034000020000240002801400018008000100e000000108000200e00000010c00028005000100000000000800074000000000cc0006"], 0x138}}, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[], 0x7c}}, 0x99679cb6f8472480) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003100)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002cbd7000ffdbdf253900000008000300", @ANYRES16=r0, @ANYBLOB="10005a800c0000800500020045000800402d3e66577d9baae803fcdee20c7ea41e882c3acc38a68c37392963dba7d52c97d2af8b4a82f812040a146529d3107106dd6048f29ac98a4f43fc58a05efeca5c767b5232cf0ff329accb7cea78bdb10718f006d35dee9539f9f0d51b1f0041931f70b86839d65293f042ef4b5643c53c16c577bdfb1ea23637306204708dffa161753d9ddacd1c5cfdd19ed9962567400769ae7d7c420e6361b2e6c12db3719fc17677"], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x80) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000900)=ANY=[@ANYBLOB="1c0000000c00010700000000fcffffd95015910006000100310000002a6df37bc2e4f68c86faab2f7a5b7fd4a31c5078a1a0cb178a2546214e268787dc1733915298ddf4e6207391efa3c5cac7ae7150f28e1cda2668e27aa4e1e02bdb79911557ef8b13975063471153794324b36c29b34f7c5966650ed04eb9b2bf52da614fa53f1212c714d4446cceb0794531c5c345448752460559ec39024b287238623e23537688b16fa793cd3b7b1be79f54c42278934552e0a78eb7ab8598b3c940e99c5bdc5131e97142187380ca782a8675c006bfeb625a3be66c82c0e5c961afb89e5c001737e65d78"], 0x1c}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x2f9, 0xffffca88, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe100004000632f77fb7f0200017f020001be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="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"}, 0x28) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000740)={&(0x7f0000000380)="ca6e975e550ca9eef8367db8ce8d03dc1e268182335c90ac32dcac8c31275b9c96bf5bd8448f7a5f4430f66e596be32aa0e05b56f4c87691d5b8f517c290cacd1d72cfe2437e1229997f2dec51e585c433c6e250ade41c4f9051af5cd4dea6b5ed71d47c1b8c2c8e", &(0x7f0000000540)=""/253, &(0x7f0000000640)="84e9c42ee1607c0cf19b3e23460d2273cea0fcf7b90c0dfc64664197e782cf0617e4b76c55ef3acc6dbe2b0b83fb89001f5413f6e30da4b55ec23429ede1", &(0x7f0000000680)="0297e87297e2882e2113ab4394ad2b5c61", 0x5, 0xffffffffffffffff, 0x4}, 0x38) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8924, &(0x7f00000000c0)={'wlan0\x00', 0x1}) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f0000000e00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x14, 0x3, 0x2, 0x101, 0x0, 0x0, {0x7, 0x0, 0x1}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x12}, 0x1) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e40), r3) sendmsg$NL80211_CMD_STOP_NAN(r4, &(0x7f0000000f00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000ec0)={&(0x7f00000007c0)={0x28, r8, 0x200, 0x70bd28, 0x2ddf9bfc, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x4, 0x66}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x3f, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x48) r9 = socket(0x1e, 0x4, 0x0) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @private=0xa010101}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r10, 0x84, 0x9, &(0x7f0000000080)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x4, 0x2, 0x80000001, 0x4, 0xe2d8f2eb1d010935, 0x5, 0x9}, 0x9c) setsockopt$packet_tx_ring(r9, 0x10f, 0x87, &(0x7f0000000140)=@req={0x98, 0x6, 0x4}, 0x10) ppoll(&(0x7f0000000040)=[{r9, 0x1380}, {r9}], 0x2, 0x0, 0x0, 0x0) sendmmsg(r9, &(0x7f00000030c0), 0x400000000000181, 0x20004050) sendmsg$IPSET_CMD_HEADER(r0, &(0x7f00000008c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)=ANY=[@ANYBLOB="0ffeffff0c0601080000000000000000020000010500010007000000050001000700000005000100070000003f8c93ba1cbeff040000000000050100070000000900020073797a300000000000"], 0x48}, 0x1, 0x0, 0x0, 0x8040}, 0x0) 2.120882375s ago: executing program 1 (id=4604): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r0, &(0x7f0000000140)={&(0x7f0000000040), 0x14, &(0x7f0000000080)={0x0}, 0x7}, 0x80) bpf$ENABLE_STATS(0x20, &(0x7f0000000280), 0x4) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x4a, 0x0, 0x10, 0x7}]}) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r1, &(0x7f0000000000)=ANY=[], 0x6) recvmmsg(r0, &(0x7f0000000d00)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x40012042, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0xb7, &(0x7f0000000180)={@broadcast, @remote, @void, {@llc_tr={0x11, {@snap={0x0, 0x1, "9e", "9d216d", 0x10, "3218755f969e2c8c49e348e39880b07dc4a021553808e891e0dc02d4099ae88e42b76cd710efb3159a466d1f20a700f014d9a391dfbd865085af2a95a199ed96c176009aec9e645471754e29cf1964d9df6ad293f8972e74a2a997d0956e259b9bc23b882b443154fc7cf42120894b95271c070d6b25178965e7b185699287956934956d6202faec96391d1305f18694ebeb7735e2fa4433a2290b5825c57ffadb"}}}}}, &(0x7f0000000240)={0x1, 0x3, [0x405, 0xa0c, 0xd6c, 0xe0d]}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip_vti0\x00'}) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x6c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x4000}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5}, @IFLA_GENEVE_DF={0x5, 0xd, 0x3}, @IFLA_GENEVE_COLLECT_METADATA={0x4}, @IFLA_GENEVE_REMOTE6={0x14, 0x7, @private0}, @IFLA_GENEVE_LABEL={0x8, 0xb, 0x1, 0x0, 0x5}, @IFLA_GENEVE_REMOTE={0x8, 0x2, @broadcast}]}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x4) (async) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x6c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x4000}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5}, @IFLA_GENEVE_DF={0x5, 0xd, 0x3}, @IFLA_GENEVE_COLLECT_METADATA={0x4}, @IFLA_GENEVE_REMOTE6={0x14, 0x7, @private0}, @IFLA_GENEVE_LABEL={0x8, 0xb, 0x1, 0x0, 0x5}, @IFLA_GENEVE_REMOTE={0x8, 0x2, @broadcast}]}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x4) 1.951079097s ago: executing program 1 (id=4605): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000800)="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", 0x180}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r5 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCGARP(r6, 0x8954, &(0x7f0000000480)={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x30}}, {0x74c9e7b8c49a9e21}, 0x2, {0x2, 0x4e26, @private=0xa010101}}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), r7) socket$packet(0x11, 0x3, 0x300) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r9, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x3f01) sendmsg$tipc(r10, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) sendmmsg$sock(r10, &(0x7f0000002c80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000008c0)="9a1646e333841dd817f884072bcfc4e86d09eae42c771150d2a0f7409c1370d3638a8b435039d8f5f5a58fd9696b618dee51e4869aced576ce4348d9b259fb3273c6a36fc309164021180c785a3c299cbf15a38790db0474eb0b41d11d4893959adec407e9ba742652a28fc5165a05b7593682298736a7ccd86db5f3758d2939e9992035d6de58a4b803a94a72a31139fd6e1f77b7e96492191da02c8bfd789de8bc6acd5484430d64a233fd9512f3d646d33db37e305f92dc1db89bd85b2689c942b596c0a45c4efff576", 0xcb}, {&(0x7f00000009c0)="efaf7a93d21cbcbd56d058e53b498eb5aec446ded5a0a15afc4a85e66ba967dd32bdaa041334d821c83f07626dff625725d9d7f2454a3c0354409cd461092701a394007cca7bf7ed39cb6d0860fc9fffc3867688808a8a9fa32d9c9f797ac6d2f35665413642d174ba233adaa36bf0d40144a05abc9458f98e5738d6952053397589681183bf74246782eaa788d1afbf227f54319c505f1678a3165181261067da7d2cc5ce2f9a8ca0b99fa09f8e95675cd7666c5e2edb4b8029c371ccfe0497285e0e223106e4b43dbbdae8faa67a625fff23346e701f1c8cf9b6cd0d485c422d1c07b63988d3377dfe6634b1e184", 0xef}, {&(0x7f0000000ac0)="8f30e4f3a357d24b35a884da0ffdc5c42f7ce57129b691f99daded3f1e2aa5f6738c747cd9fa7b3e59a5a24970b0a2a5bcc8cd72fc0a6e472442b441e273146cb840d20afb23fa12cfaaf4d54ffea9bdaf5d445e4773e815b6462cdc4b449d55a1d007a07e49cef17635abf4c4986abcc36fc5529e63aa97265af26fd3286548b2a7932c81883c382b1598d0761891370633573d40cd4b425576ff4998bf040fa0aef4b64392fc7f7b6fafb4a073a88f883f16c9c771664b430d91", 0xbb}, {&(0x7f0000000b80)="3b3d07b7091f697381965e2e7909f9f6f54a284af3f8fdb1c24e6d0c4a7f58ffca9b24b191f510fbf55fd3e76154e2a4fe1e14c7bbff4c24907805f79e2a90f0d8c8faccbd2243475ecfa1f5fac83b8910baf212596b2a4a23aab8eb9cfa683836af5e50b1bc4f815b49fc47f85fe32f63a26492042b663d8c955bfad12d47e8", 0x80}], 0x4}}, {{0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000d80)="d51927d7b27f39aa725cb19a990f66ac9aae2f7d92045a4c05e60f4dc5dc6c4e4ac8449b9915fb289bf1692a4c7d9440950ee716b680274b3c53048b6a2aeca47c5e6987db6b4fb364fa1e1709caa0696b9e02eabc8757ef2dd6a17f3efa", 0x5e}, {&(0x7f0000000e00)="96bc7002996addfa3b96a5e4de4cf18b08fa24022c9eb8cd8932ada8710619787de006", 0x23}, {&(0x7f0000000e40)="1304235350b0171b15c5c7a6c9861daf", 0x10}, {&(0x7f0000000e80)="048dc9fb57afe301fd6f4184903098607627504035b7aa74e71b85eaa192909644d18f5695718d3c3532f6ed73c2422e87d6d3032447f236426269422e70740455409baf685a743e7e079b3ac4a1b592da8a23ea97a80da6ec7fb46355caf53ab8efe6d61dbb939c5f96f86c3d", 0x6d}, {&(0x7f0000000f00)="68a55df1c6bed91373cc79fcf0ea4c17187a680c0c711ae1d37231d4e7cd61719f501fd0d890485c98ee906e64fad259a1", 0x31}], 0x5}}, {{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000010c0)="1f193ccd5e71244bc55dbcdc29e1a25fb59915f7f84fb5105984bc94ac926679df8c", 0x22}, {&(0x7f0000001100)="b35ba3572fcda875bc97e8", 0xb}, {&(0x7f0000001140)="795f2ce94a7d8725e389c01b493ee679f9e1f4660442a05c2cbbf66384679166ec101d934bd017c061424e92d24f48d86b", 0x31}, {&(0x7f0000001180)="93", 0x1}, {&(0x7f00000011c0)="3dff21fdbef2b0b843e0740163754db27084ece48f14e2ccb75ed71caecb8d01a49808a0a2269f17dc98a78e584f6cc71495faa98957034a6e6f6e9ea743d838d77a3f108a034c89", 0x48}, {&(0x7f0000001240)="b17b27be17bcb19544700a33471f8c21345d9ed983455906bb74ac68c911b5f14c7d60075f017c69c25768", 0x2b}, {&(0x7f0000001280)="45871f6c7aa143cfbb579d430702b24380586237795f6665c24e267fb8c62c14f85be705fbab74d85c8d479162b42724e414f24b9602b0c068930b8f0431f77f7ed4bb04c4bd7edbacb55c07e24b2b7ffbc83bb39385066e27b3b6727c8861edea62c5532877c2bc886e9f673bc9ef731ee32104bc102a8fda64676a9edf0e47f36cd6a35fd53b13b1f365ade8150f7e35c258b0253d8c4dcbc8", 0x9a}], 0x7}}, {{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f00000014c0)="d480dc1917d9339f4084892894143b343fddd9303f0429a7ae5d89e2d238c7a6d95b89164290c367be830f56c6b95c492363a9b522", 0x35}], 0x1}}], 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000280)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_INTERFACE(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="0786aeedd0393723626172c1b325fd47b74ef208917cc218bdfb5fd23652565dd65e8d408f56cbba0631083a62eb88e6cb0622289770c469d3", @ANYRES16=r8, @ANYBLOB="010027bd7000fbdbdf25070000000a0004007770616e330000000c0017000202aaaaaaaaaaaa08000300", @ANYRES32=r11, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x40014}, 0x8010) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$BTRFS_IOC_GET_FEATURES(r0, 0x80189439, &(0x7f00000000c0)) r12 = socket(0x1, 0x803, 0x0) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r13, 0x29, 0x19, 0x0, 0x0) 1.837809982s ago: executing program 3 (id=4606): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000180)={0xfffffc}, 0x10) (async, rerun: 32) write(r2, &(0x7f0000000000)="1c0000001a005f1114f9f4070009010000000000fe00000100000000", 0x1c) (async, rerun: 32) r3 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r3) (async) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0xd}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r7}]}}}]}, 0x3c}}, 0x0) (async, rerun: 32) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (rerun: 32) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@delchain={0x3c, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {0xfff3, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x4}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40044}, 0x4804) 1.579420124s ago: executing program 0 (id=4607): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000008c0)=@newqdisc={0x6c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x9, 0x9, 0x0, 0x2, 0x3, 0x4, 0xffff, 0x3, 0xfee5, 0x7, 0x1a, 0x14, 0x1d, 0x0, 0x2, 0xa9b2}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x200400dc}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) 1.572811638s ago: executing program 1 (id=4608): ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000001880)={{0xffffffffffffffff, &(0x7f0000000000)='*\x00', 0xa040, &(0x7f0000000040)={@align=0x4, {0x4, 0xa078, 0xc00000}}, 0xffff, &(0x7f0000000080), &(0x7f00000000c0)=0x8}, 0x9, &(0x7f0000001740)=[{0x2, 0x7, &(0x7f0000000100)='\xbe$(:{\xc4,\x00', &(0x7f0000000140)="30dfdff0077433ec7ea3233a6e4607a6bfe0e4011e64021d2f25ea32c0db4d1c1e29bf9b29a70d1f6f5a92eb1211e964449d31e6a798cdea01f82fac902a5989fa2067f76fd2ed4111530cbd938f704c1b9a91a7f11b42791ee059e10d5e42086a57e8ef904d536f2c92980016f3211811a5a45ac13861f50ce8fc6cf9364572e78b4680663e8fed85c056e87147579940aa8c5be93a7b584134a8c84608e0d12c0ba62f4746dee2ea0d09001fc801ea31532f29219674e50aa7dbc82699aa915efed76b8ac595e259", 0xc9, 0x29}, {0x2, 0x8, &(0x7f0000000240)='\x00', &(0x7f0000000280)="f89996772382f99dfb1f7ea53e12861bd54a757e0fe55b1430f073aed0276e733ff863b96f788df967d248532b8bc827b8e423b12596f57e1409c1e7604cb2961a", 0x41, 0x10}, {0x2, 0x8, &(0x7f0000000300)='\x00', &(0x7f0000000340)="71d4461af3732d8ea1bd20832e0d263d2d6e1bfb08dfd73e668f498a2e8d7d2bc834ca279feacc3ff2a32458", 0x2c, 0x10}, {0x2, 0x129, &(0x7f0000000380)='}\xae-\x00', &(0x7f00000003c0)="bb4e3fef5c86565272e711d3d0511c41c749331d32feefa36b7001e76be210128a3f521f6658addbc4be3e9ed86bc0", 0x2f}, {0x0, 0x2, &(0x7f0000000400)='\'/\x00', &(0x7f0000000440)="ace2a58f44d8dd157020c87c32ffcabb50cd8701e1878e541387adb7961cf444e7bbf11be4661c227744cf322ab78951377d21f679467c02b779741ba4e14c7c172b10bec700a210e402f7", 0x4b, 0x10}, {0x1, 0x5, &(0x7f00000004c0)='/#&\x00', &(0x7f0000000500)="ddcd3b5165882f824de8b6766d7a1cfa79f627e7", 0x14, 0x8}, {0x2, 0x0, &(0x7f0000000540)=']}/\x00', &(0x7f0000000580)="1e75902ff55e7a61a0fd8f91d44d5d10c9532f29bd19f1292464ffa69d374a0ada6ff6f0d053d9063c708492a7f99794bc7c47e4dd53c3e05bc0e6a7c8ea7cee4dc244d552e4245ed9d557b98039cd90979486b37b054c3cf21fe9815a89bd409c6b1112adcb6b03c1080e1a4b3fbad6d2fd350d4c4a5f644ca1ee911eca30d5c43e1ca55ea688d21b711213e90d318e3d71c9cf6cc9e15f5f63fd25b9e8fcc113ad6301592edc3b2bd7515222ae7425a26813779d831cf66c08e527a9890f95338a67a6c65b5d517541acfb400246dc56ab1d7a369fe4fda6f9c8221c19205f38b76c0f34ebfb0052044685b196ec1f5b0dff11fc31c7213902b605533f7b989d358b3ab8559bf1f29dda5758ca865a48a93db7e7d9812b8737f20ea6de0e44701605c544b9ce41e3968fd19f1016c39e615c53d6acc23562eadce0ddd36b6cdad770ba126bf48101dfeff4ce0617eb0949cb24ad914bb3a76403e436ac02025bbe34707fbbf8f0604aa103a2a5c9048f7f1df492211bc9776a4bc313ae158f84e8f087d9fdf98f1f9ae1deeea5208348ac50f076afc2c99a64a52f46e8fdd4f9ae73b03b4fdaf4e99eb51c8b1196d786d2eb01d9c4efce57240a7f685425b0224ebf51ef0562c4aeb8b4c8cd38cde77348fb876e438e5c1b3091798241e4cd6baabfa528ed3501f2eae1841338fd877c5b2eb1df6716b38aa33cc3a7a70f339c5ec5798617d5a96eb619e11612067c3bae1a8d3113a82160cd2697ce4aa4681e6117c0e53b7e4fec4b24f29ab6fb23213e52572acce8518ecb4c053f192d113d948843a57ad6df90530d2be9c7a07989a150ccf14bee19cf60cfe632d52335609a78c08327f2ecb037f5d73294bccc558be8f28a70e41c5460f13f3bedafa4738670ed486b28583afcfcf2bdab43d20bcbcdcddb9dde55500542aac86b936d458c82a2d59b0e9b9ef11d2569137994698061eeb6878bcc14d31f10a64952334398e599cd44c8b1d6663e56bf222af7ae575c0c9c4f6aae669d4ad392fd0e92258fee592df616a9cd2e437a87b3cf223f347a2c6e094c9564ef0f9a6c10fa1134df5c87e0bca2418adbf65e721bcdb29bafd562fca20e42b154dec26b25a83906a254e1e98e641d630cc8669a1526fa133cdb4e5fca392448b46e410bbb1634da8e4d864226cd3b56d551fe9b2b39891f3ca584746d9c10e24658606a65603eae14db08218d3ce0b6a9b728b1b92f6bdf9e52609a05527a23a3469cb640d92ce25b502cab59b1c7b2e331914f51b04d05d0d9479a0aa08a4216dddac628171da97b86e038d01fe0343ff911b0e0569db711b12f33204eb600a1d654d26b15d4529ef1e0a9ae78eb16b5d6c1b5704de2b3608d77bbe80d401b222a5205d5b2afe09ede350995de8949477b3878b381563e767f6509f0bfb00e725d89628587c9d1b2e5b57b48fe36331a0c9aac03e880e420e1364cd08afa66955b5eb397ccef015b00c4685f67bdfb661cabfb390c1b82012ac32478eb804df4864aa87fe391a5d2e2033b95cc2b0f2a3881790942928f093f2ced58d957df9299f8a6ab5ed5e7e4b52c9c4a160ac7fb286f7271e19becc9a20c1ccaaf9daddd41867355214ecdf75e379b19543ec64795e053b164fa6b34b27bf993ab4093ffe971aa7c63ede28d137fc170ea31de4f41c7a167a1a1bef948782b26e9ee4004262ce6d316b6372fd13456260cffeef67908e88e376b603a907c518ecbcd4b08f411af6514c168234ed5e3e341483c1814e7fd48a7bd7bae6bbad3e8eb2f8f8bf144a30c21c7e2c0185500178c5ea12b98c69ddc19f14933a09b3d0714120a522ab3e3fe362b18c9b9ae7a14816160a4ec1b81dd8f7b475d679c13d20dce5a4539afa909cb32ab715a58b93a22b8ae916f0efd78a222c61ffe500d882a301b1fc5a591731b7672ec901fe8909a6433d5f10b14735dfa84bc47b2cfab8cc85ea5be93941babe83d41aa8c9b80e712a97544dc9c9950348ba945be02d53e9cf23488a19b69e53e89b8baf5a1c6ce0115e4fd859de406822a881288ec5d81cc7737b0ac2c02a550b599026a056807a098f82dd7e5163ff654898f6c39a9a130a234922f49c1bb19c6b0673bd502567db07d9944635fb31991416be8df836e835f1af2da0f15655039018ea48af2c8206e899da224f9a9d8d894f04c754ecd8cff78806a32b2b16c8f3a134a4ab6f32bc7e014e02331e0e98ca641749788549d838bf7f1f0338d701926937132f25b5716d67eb2622b6009a82bd7634879eb302b0c1ad293854173d4abd57a990bbe5e4a27b971a87af4ff965322dcef738a00f98f34a4a2e0635e558580af113768872e7b51bacca1362ee96804cf05860134062fbfed5c802bf5076dad8154ce004dc72bb502abdefb7548c9e5a84e7b1eae93aedca430fbb9ed66e0b4afd2036748c7a0a6231e0e9d911958a61e34b405b47dda7fa02d06640cedb3c12b858de767773814e5e1adbc264e792c60cf8043e97d9aef44c1c64d95a6a5c12c59cab44dd3a0e19441b1b724498179b9cb73e0082594b583753bb0e107aac84673814ebb82798069f9691e11a61fb665d815833e33bcf2c34537f2480ddb7b2458d8d091b69772f43997f1081e85e066591e21ebe3081b22be83f242cac180d77bd4d78d5cc4d3b8aeac768aa675471381ad1dc9b175da9d70dea60dc950019cf171d4eba5e5aab682325baabcbd2193811f05c3cd682afbc398d4e29f44c0bd09273fafc5763dbd65fea2f21406bdba097eff1c6c8cd04776c6546d61d8e9ce38e8df518384b9f0188ef63ea9ae92835a5fcbc6ee86343a3ec9f6dbd3c3e5419f1bc6ae2ac2b61b3a7d3befb53371c400c32ada9b00d9b04fc7ec46df086ece279d8158ce7b1f8c28c748771db92dae8adb962c84834d0e96e7016dbd4cec7e22d2147900526c9b99b531056b971702ef14b1f0f015a8c92bb483e4c10e5a8c682f9334bccd015523f850848a78c45ba8c75b2faca972820a9fe82b09ad2a6a59213e8f7480aa401c685bcad7bb0ef5264961d705dc2f056b5f1806c5bac091c974d9e5a9c655fecf51c832b30ac59825460e57779cd79aea0fa275d0502f5486dd771b9a4b1b8c2623a27d0d76a80837f5586abce048d142a671779eea8056c6c8dd4a4326fe78c16ac5ebc184b5d941c3e9d9e1b8295cd17bed4cc32a5da4bac3e7fa41404000dc75f7e043d792eac7a04fcddeeaaf129b6673435c63b5c5930111f1055103858e4b3c340fc4b1bc49454b1506ab1f5088e2b4af58d26900b1f2245ecd2aa76b1c34791bc5646a2033278792537ff299a2fdc11fb82dc39c90d77b292805fa8977e7dad15eee6e290dab1810ceac11c21c718ef7294ca51e255d142ed08d3db434c1c331ac8267f5dd392a63242a03207bcc4a6375a00181777405e3508546286f8970bf257c1f98a74cb30da29c899a35c199d60e2f2f1d71f5d7c4efe9911032dc17c1fbb0b68872a7c85a23b56ed90f18666d3e8e4e23dd0e82b42f8f98f77db93118ede5fd0204e4918ebf1ec46e5767788f3bc220a74a15af8fbf8b6fab8e2d25a909e5bddfc4c086b4626b3b0499b057972404959c12065015441ca715113e5887491a1dbf44931d7e7ed699794be3b99e0df992eaa52897cf9ac09b37de7e215e5deb56c3607db813e40165e63512104cdeaaa5093bf9d6b154099b2c17dded77532af1c460bbb2172a01b54a51632eb9dacdbc95c78f03e78bed383a8a65e9acb056fa2ff9bb8998b21e9bd49b352e817d990189c7f1b22bb690c59dd5add2b5fb8ca2f1952964f5f9f94f71dcf26e32cd800988c73b8070daa3f1ad938545244fd28ad7e5cc25836d626c9cb01a07216e251a0faab0373ddacef58a426be33d284c84756c3ee687915e95035696bff7d3ad77c677deca3b54151c93bf209a2b9a005b45ed596d262c962659ba31a3f6f9393943bc3bdb21007df762273b2d650ecd0dcc916a710cf58dedeabc83b6f671ca70e48821dd61a47d4e5be411cf7a22c3d2d4ad8f017888c31c6db2cbcbe488bb8f10874777f9532501415b2cf2542371956daa8bc7b49c041c37938a2149da08f084c572adb8692d8744958d983e7e8b8a05db13a40a92ab3ec11c3e14417e1957ac211d1956c25a89b8081450f4e5e8b934b04f8406aba92a679b96cc8be3bf2933c911538cfaf483c759b7c3cc203caa1633e04b4f1cec660e1e227c6f71f4f0af35f9fbf511ab16a05d734cb4a4d51bf849d5145b67deee70568dce59de2acefbe97122360dd886048dc755e574f2461f132aeb6cd7deb0515559f6a95bc91ecd3bc51e5d10bda75835d2f29ea7b0c1aceb8595ffd66e57077b8ea86cf35cf1ebdb141fa09c8e846ba3ed9ba4db6ecd75c91ab09d8069eca6c35ca10b3d436a1dea5d1fc004f76fab9ad875d5ca469a54d10efcda658f299af1b3c41758b90ea774faa10bd143192e75eb126a64f8c83418e3f02b8e02a7d3284e2ca5371175302e73e33fca2ee31c403d9c722cd4ddb72ada30fe572840bfca19612f9f8af2f52e8700d81046d64144880e1fb5d4838aee7c287d8eb03ed42b87709e99ddd272a636c7d73d5526f07307ce2dc56c24e96bbe92ae13ad80b2d68cf4c94da55ee3eafc00cbeb2c7cc31d2942cae5811b63254e671b305d4963f6fbfa23657d7b0e5a939bc610c98c43d79b7e457be5a1049a60488cbf7d5a57723df360c4c2c06c5c22c370cdcbf89a725fccd0b978d25e2ac19cb1ff3192db0163e56e5253354454945504b29cfdacc65e883b0c9989587658844b572a512add3ecf6e0e0489578fad2ffd575df251d61f19d2e56585a011e5079698bf2ed5b12ce18435d4dd5056f54495a9dd5e8be5f7c84e6909e523bf2fec6c02e79b96e70b22252dbce565ffa1d4842359699cebbd6d85a134f89c81f63c9ddc2c7d69cc66d2e828a65949fc9b3591ab16f5d362c3c5ee2923e2ad854a4159837b16432f88494c471d194607851555089d6588c62780dab206da0f326e02ab741593175aeab426890fb4e57578db610fb324a21abac81b5f0f94aeefa6e3b7b376d8aa65540aef3a6c95d6fe95565a37d61db8cabff19736e0bb0a41717d2a4fbb3c4f2741b8aafa8774bbd04cf8aa8985351fa3574859619872486f3f002de363ee5206bd07e3052a66c41d94b59509fe8386fccfdd761fd0b075dc25ac056caf646de07e8b0d2fd65061b43186a4251d2ad1c34dd0bdf3034aa66a0793c4ff958321e886020591d326cf81def0f0637293366e5ce0ed6bc710b673fc7b39134df45b4fafd5c53eafdb6c9722010de0f65bf354ded136e0f0db712cedc7c39453e91d218e69fdff9f54112069890c8766975681ccfa752125d4432038846d7d485c2fa228571f65a4fc0996334712f14a57d89f680a6afa0c99a3629df66a114e884f2a8a5862f831813ae5b67d200dda674bb23482d05c5e56019590436a07b788f444bf883e3d95c3a606423c6957cb7f5a796a0b9e2b16eb990a37682807d3e82c1a9d7aadd6dca7ccdc0a0611f76fa6c6ee840282c8a62e0025662075126355f6c3f030a138df3c0d989f957ad16549d7ccac4e448501347a2250e285d5b7f82c35a8bc221128479e3ac00c4661fc414a7f70c10f9f1b2b9d27062a471bb59c70743ecbeef1f51e9f63a3f9d397059eca7a6882ba2bc44fec529fb99acc0ecb0c1f3663060bbe413267718371a1f2dece15eadcd206e5c313410cd58cf323fc7f61a4f128", 0x1000, 0x2a}, {0x1, 0xb7f, &(0x7f0000001580)=',', &(0x7f00000015c0)="953f972fa1800621ea13f0798286dbdf07852610019b241d96d3fb80c9ed75a55d86abe64c076c404f1bc59a3b4518a4f51409edb17febe2d9442e9094ade0fc6011e69878dc2b7502e7e3b8dabd6b8b9672bfc2ba", 0x55, 0x20}, {0x1, 0xffff, &(0x7f0000001640)='::%--.&\xc7(\x00', &(0x7f0000001680)="837d021dbb8371b7de3bedefa9504e47078753c63905e04931dd9b33459e3c994051b4ebbea26afbc510a96682fc737e480576b1907c25031dd843deb7f7e08e59f0f456095664ab39fa3682062514c65418ef6ea62db444f231fd39fe87596bdc41915cef43bdfed0602fd0f5bc4134f8c2d5eba72fc9d89f00e0b11a9a62070210a83123ecc68283075ac4f46a2442787ced7922daecff710f32", 0x9b, 0x10}]}) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000001900)={0x0, 0x636}, &(0x7f0000001940)=0x8) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000001980)={r1, 0x7ff, 0xa, [0x200, 0x5, 0x7, 0x8934, 0x4, 0x0, 0x0, 0x0, 0x1, 0x74]}, &(0x7f00000019c0)=0x1c) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001a40), r0) sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000001bc0)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001b80)={&(0x7f0000001a80)={0xfc, r3, 0x400, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x7}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x1}, @NL80211_ATTR_STA_EXT_CAPABILITY={0xd0, 0xac, "d33f2b974afbb2c5f74754005e1995b02315371512057f51f49f6b4540977e486f943716278f8ad2cadc4b1d7918ee9bf8cda9a83083510ee321a2ca33c6d69386bc9d7a7d01aff61c1b78589bacbfe6a7823e6516b4ef641e2df30678fcb6d338392c554ef45ee6ee2d0c469b26bb64b3dc4353f5a4a87a969cbb52b2e04a7aac89f2246a395d21be200df8805b4eaefa02f49281a9dff6dcc2f52da9d1b1e84f8e9006c2cb8ceb472a965ef27bf4b286eec8c166b74540a2e6bda426ed34502340257a7938dea03aaefaad"}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2}]}, 0xfc}, 0x1, 0x0, 0x0, 0x40}, 0x8040) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001c00)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000001c80), r0) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000001dc0)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001d80)={&(0x7f0000001cc0)={0x9c, r5, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @handle=@pci={{0x8}, {0x11}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4001}, 0x40000) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001f00)={&(0x7f0000001e00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001e40)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x3}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0xffffffff}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x8}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x2e}]}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x20040000}, 0x4000) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f0000002000)={&(0x7f0000001f40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x30, r3, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x5, 0x46}}}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x55) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002080), r6) sendmsg$NL80211_CMD_UPDATE_FT_IES(0xffffffffffffffff, &(0x7f00000023c0)={&(0x7f0000002040)={0x10, 0x0, 0x0, 0x404}, 0xc, &(0x7f0000002380)={&(0x7f00000020c0)={0x288, r7, 0x100, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1, 0x6}}}}, [@NL80211_ATTR_IE={0x18, 0x2a, [@link_id={0x65, 0x12, {@initial, @broadcast, @broadcast}}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0xab7}, @NL80211_ATTR_IE={0x216, 0x2a, [@supported_rates={0x1, 0x2, [{0x5, 0x1}, {0x36, 0x1}]}, @preq={0x82, 0x88, {{0x0, 0x1}, 0x0, 0xd, 0x4, @device_b, 0x1, @void, 0x352, 0x6, 0xa, [{{0x1}, @device_b, 0x3}, {{0x1}, @device_b, 0x795d}, {{0x1}, @broadcast, 0x1}, {{0x1}, @device_a, 0xffffffff}, {{0x1, 0x0, 0x1}, @device_b, 0x3}, {{}, @device_a, 0x1}, {{0x1, 0x0, 0x1}, @device_a, 0x5}, {{0x1, 0x0, 0x1}, @broadcast, 0x4}, {{}, @device_a, 0x200}, {{0x1}, @device_b, 0x4}]}}, @chsw_timing={0x68, 0x4, {0x1ff, 0x9}}, @random_vendor={0xdd, 0xe0, "7405017f6f9cc88df26a69ed98c572497797acac4b54dfe4a4a7ecd02fadfd749640d70627698dcecbe6a92723347dc95274ff36f30c06849c43640b088aa8ba284d549cff17b736357b48c28b30552a19b291ff58a73b3d31f5418e5c5bb5505735b575bf6b659bd497017c21ce5155fcd7e55b0a4a2ab5d8dc4b1a61d140a9715136a48cc3c55333ff3fafab5cfd31b3ae5a70b21c76aab12089a95541a7b79dec6f9335f13d2bd99235c688f08b86a52424f151195797d51309f978849c68468bf714658caaddb38ba004cca3dc28ac37b3f135f325c4288715232926517c"}, @perr={0x84, 0x94, {0x5, 0x8, [{{0x0, 0x1}, @device_b, 0x5, @value, 0x2c}, {{0x0, 0x1}, @broadcast, 0x1, @value=@broadcast, 0x39}, {{0x0, 0x1}, @device_b, 0x4, @value=@device_b, 0x9}, {{0x0, 0x1}, @device_a, 0x3, @value, 0x42}, {{}, @broadcast, 0x5, @void, 0xd}, {{0x0, 0x1}, @device_a, 0x8, @value, 0x2e}, {{0x0, 0x1}, @broadcast, 0xfffffeff, @value=@broadcast, 0x3d}, {{0x0, 0x1}, @device_b, 0x3, @value=@broadcast, 0x36}]}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0xf3, 0xb4, 0x6}}]}, @NL80211_ATTR_IE={0x4}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x4}, @NL80211_ATTR_IE={0x1a, 0x2a, [@supported_rates={0x1, 0x6, [{0x48, 0x1}, {0x1b, 0x1}, {0x1b, 0x1}, {0x1, 0x1}, {0x48}, {0x48, 0x1}]}, @channel_switch={0x25, 0x3, {0x1, 0x5, 0xfa}}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x0, 0x1, 0xffffffffffffffff, 0x1, 0x95, 0x20}}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x4}]}, 0x288}, 0x1, 0x0, 0x0, 0x40000000}, 0x4000004) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000002400)={r2, 0x40, 0xfbff}, &(0x7f0000002440)=0x8) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000024c0), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_LIST(r8, &(0x7f0000002600)={&(0x7f0000002480), 0xc, &(0x7f00000025c0)={&(0x7f0000002500)={0xa4, r9, 0x54c2abfa52c0eacc, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_SECCTX={0x22, 0x7, 'system_u:object_r:device_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_SECCTX={0x30, 0x7, 'system_u:object_r:iptables_initrc_exec_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20000000}, 0x15) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$EBT_SO_GET_INFO(r10, 0x0, 0x80, &(0x7f0000002640)={'filter\x00', 0x0, 0x0, 0x0, [0x5, 0x9a7d, 0x6, 0x0, 0x60d, 0x9]}, &(0x7f00000026c0)=0x78) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r11, &(0x7f0000002700)={0xa, 0x4e21, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) r12 = socket(0x10, 0x5, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000002740)={0x1, 'bridge_slave_0\x00', 0x4}, 0x18) sendmsg$NL80211_CMD_SET_QOS_MAP(r12, &(0x7f0000002900)={&(0x7f0000002780)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000028c0)={&(0x7f00000027c0)={0xc8, r7, 0x300, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0xe, 0xc7, {[{0x3, 0x1}], "e1c95228e8105408"}}, @NL80211_ATTR_QOS_MAP={0x36, 0xc7, {[{0x1, 0x3}, {0x8, 0x4}, {0x1, 0x2}, {0x1}, {0xfe, 0x2}, {0x1, 0x3}, {0x4}, {0xe, 0x2}, {0xb, 0x3}, {0x4, 0x3}, {0x13, 0x6}, {0x17}, {0xc, 0x3}, {0xc, 0x5}, {0x7, 0x2}, {0x0, 0x2}, {0x2, 0x2}, {0x1, 0x7}, {0xd, 0x6}, {0x7, 0x7}, {0x5, 0x6}], "3cd17b64c7b0549c"}}, @NL80211_ATTR_QOS_MAP={0x1a, 0xc7, {[{0x3}, {0xf, 0x6}, {0x9, 0x1}, {0x5, 0x2}, {0x81, 0x1}, {0x2, 0x7}, {0x7, 0x6}], "74bcb65955d31432"}}, @NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0xa6, 0x7}, {0x7, 0x1}, {0x3, 0x6}, {0x5}, {0x0, 0x1}, {0x1, 0x5}, {0x81, 0x5}, {0xe, 0x1}], "42937a884c5899b1"}}, @NL80211_ATTR_QOS_MAP={0x22, 0xc7, {[{0xb, 0x1}, {0x5, 0x4}, {0x3}, {0x5, 0x7}, {0x3c, 0x7}, {0x2, 0x7}, {0xff, 0x3}, {0x8, 0x4}, {0x4, 0x5}, {0x1, 0x2}, {0x9, 0x3}], "8ecbd0bd82a1fe53"}}, @NL80211_ATTR_QOS_MAP={0xe, 0xc7, {[{0x1, 0x2}], "c72db7e8362b5c48"}}]}, 0xc8}, 0x1, 0x0, 0x0, 0x8001}, 0x10) socket$inet(0x2, 0x5, 0x1) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002980), r12) sendmsg$NL80211_CMD_GET_MPP(r12, &(0x7f0000002a40)={&(0x7f0000002940)={0x10, 0x0, 0x0, 0x8800}, 0xc, &(0x7f0000002a00)={&(0x7f00000029c0)={0x38, r13, 0x100, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xfffffffc, 0x13}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NL80211_CMD_ASSOCIATE(r12, &(0x7f0000002bc0)={&(0x7f0000002a80)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002b80)={&(0x7f0000002ac0)={0xa8, r13, 0x300, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4a23}], @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x4, {0x0, 0x2, 0x0, 0x8}}}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x20, 0x1, 0x4, 0x0, {0x26551869, 0x21, 0x0, 0x9, 0x0, 0x0, 0x1, 0x2}, 0x682f87cf4a02eb3f, 0x8, 0x8}}, @NL80211_ATTR_PREV_BSSID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16f3}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x15}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x12}], @NL80211_ATTR_USE_MFP={0x8}, @NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0x20000717, {0x9a2, 0x3, 0x5, 0x7f}}}]}, 0xa8}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) sendmsg$NL80211_CMD_JOIN_OCB(r6, &(0x7f0000002cc0)={&(0x7f0000002c00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000002c80)={&(0x7f0000002c40)={0x2c, r7, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3a5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1004}, 0xc0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) 1.5699977s ago: executing program 3 (id=4609): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x21, @any, 0x0, 0x2}, 0xe) ioctl$BTRFS_IOC_SUBVOL_CREATE(r0, 0x5000940e, &(0x7f0000000080)={{r0}, "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"}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) unshare(0x2a020480) bpf$TOKEN_CREATE(0x24, &(0x7f0000000380)={0x0, r1}, 0x8) socket$can_bcm(0x1d, 0x2, 0x2) 1.355510685s ago: executing program 0 (id=4610): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x48, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x1840}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x3}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc, 0x1f, 0x3}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x24000040}, 0x0) 1.352188602s ago: executing program 3 (id=4611): unshare(0x42040400) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x18, &(0x7f0000000140)=0x7, 0x4) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) (async) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @local}, 0xc) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) (async) r3 = socket(0xa, 0x5, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x29, 0xfe, 0x10, 0x9, 0x40, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @remote}, 0x7800, 0x20, 0x8000001, 0x2}}) (async) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000480)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) (async) r6 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r6, &(0x7f00000003c0)=[{{&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000180)="e1", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000100)="a7", 0x1}], 0x1}}], 0x2, 0x0) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r6, 0x84, 0x19, &(0x7f0000000600)={r5, 0x9}, 0x8) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000001d00)={0x0, 0x2, 0xd5, 0x8, 0x3, 0x8000, 0x7d, 0x6, {0x0, @in={{0x2, 0x4e20, @multicast2}}, 0x9, 0x2, 0x8, 0x7, 0x994}}, &(0x7f0000001dc0)=0xb0) sendmmsg$inet_sctp(r3, &(0x7f0000001e40)=[{&(0x7f0000000300)=@in6={0xa, 0x4e20, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x337396cd}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000380)="64a9e077955e7c789e47a383cd5e7851abc44e3f71eced7bd584fe5c544e464654a1a00b3bff4c26aa94b5cc3065c39afc68f2f7d335d0c3844b404e05bf7e537fafb805ac341f46c65b4231bb7df1eba0f0df2680120e3a4651a14775dd6099d1623a70f7b5c036dbc7879e616dcdce87b0e41a3ebbc29a938e897bf627d0fb880556b61ffb62fcb6de181aac6989034e1c93f7e6175ec591e06897ea3ba6bc651e37180e49c0fe2da9acb2", 0xac}], 0x1, &(0x7f00000005c0)=[@sndinfo={0x20, 0x84, 0x2, {0x9, 0x8, 0xf, 0xffffffff, r5}}, @sndrcv={0x30, 0x84, 0x1, {0x81, 0x1, 0x8208, 0x0, 0x3, 0x9, 0x8, 0x7}}], 0x50, 0x24}, {&(0x7f0000000640)=@in6={0xa, 0x4e24, 0x2, @local, 0x5}, 0x1c, &(0x7f00000008c0)=[{&(0x7f0000000680)="97ba589fcb9584144bf49a0a6ceb0f00ad49fae92d00c38b089b283b3a2aa71e650c6aaba2fc2a8793cdb58e0c9f29a6c1aa27e73b9bd5bcf84aa3327f4bd5a2f4c574cfb11c19382207368eba91523f31062abc4f7ad8aa2a9c5dd4b7b5", 0x5e}, {&(0x7f0000000780)="04548a5c15bd9d6d3cefe99feec32eeec26170812c0cbc38b3c93d817415c25d1f98fd099acf330c692d84b85c7d1672ae58387f6b9f09d47365c804c62c2e9a1f3a3cde0327b6", 0x47}, {&(0x7f0000000800)="4efad3fb5db7f01bc5bf11abb5f1967fd761941405fc2416cca93039092668a547745998e3aa89e85c88339c874275634cec9cdf78ec63b4bf055f501408812a884c6d6cc3490ec564ff8867e05e5098c10389d84112ad4ae15d3eeb3fc28207dc09a0819644cad414124638a507d097d2f17fe722366c9d2426bdd1ef0340afa20a4a8d284fadb01027dd5baf1ff722ddfab5e260377fa40269a5058d1ac4ae2516ab92feef2b09a7212eb631e4ab44734381", 0xb3}], 0x3, &(0x7f0000000900)=[@sndinfo={0x20, 0x84, 0x2, {0xf000, 0x200, 0xfffffff9}}], 0x20, 0x4000041}, {&(0x7f0000000940)=@in6={0xa, 0x4e23, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, &(0x7f0000000980), 0x0, &(0x7f00000009c0)=[@dstaddrv4={0x18, 0x84, 0x7, @rand_addr=0x64010101}], 0x18, 0x200c8894}, {&(0x7f0000000a00)=@in={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000001c80)=[{&(0x7f0000000a40)="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", 0x1000}, {&(0x7f0000001a40)="5dcdc01e0b4ce0db6b9fc6aae1f2b4894b361f314435ef77", 0x18}, {&(0x7f0000001a80)="d07f1f4a5e5f4b2820b97687464a0077f35bf1a391545732d51944aee08f65fba13d49bf041f2d5f5095f83c1e6043fa752dec8728f8090b1f4275ca9a027178092540dad5d8e1cb5f33c99bce1ffc3be7ef77795bf25e3a36c58522f9aa1c9e3d472aa541538811", 0x68}, {&(0x7f0000001b00)="07936a1a289d00b0b1e1c791e067f87a82688d25616fe0abf2775d5da416846338e3cef406398824b996131633af9335d701176045dd43ce8fb33e1ac1b9b2b652e077ba2ad8d8a4132109544c35cf10047502394c5a72e6263d7057bf1be1dcabdb2f4027f47dda7337d7bf98ad487a1a8ba9fe21d45789c1a3e7e746d1534521ed8948dc6ffec38cc2823d95f1346f969381a1c2837ce72585c4230c2df1ca1d2695b389a574b09db9b8ebd61e9336db6e50b428332a291043d5d6f3242765a10421fed263cc787a88e167f33efcf161e12650658a72500cad25398132b7598165f8f7f774", 0xe6}, {&(0x7f0000001c00)="1dc53fffe4b75071a903975164a89500464a50fb9646c42fe9613f676790cf6b4cee31d1a96a539f50783f2609661213b4650012c1adde566f4c17f7b2366452b0ded08ce6736dfd8e08", 0x4a}], 0x5, &(0x7f0000001e00)=[@sndinfo={0x20, 0x84, 0x2, {0xfffd, 0x8000, 0x5, 0x3, r7}}], 0x20, 0x8081}], 0x4, 0x40004) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_ro(r8, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r9, &(0x7f0000000200)=0x1, 0x12) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r10, 0x0) (async) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$PPPIOCSMRU1(r10, 0x40047452, &(0x7f00000002c0)=0xa) (async) sendmsg$nl_xfrm(r11, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x32}, @in=@broadcast, {0xffffffffffffffff, 0xfffffffffffffffc, 0x0, 0x0, 0x8}, {}, {0x8}, 0x0, 0x0, 0xa, 0x0, 0x22}}}, 0xf8}}, 0x0) r12 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r13 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r12, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x1c, r12, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x8, r13, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@bloom_filter={0x1e, 0x5, 0x27, 0x3, 0x8804, 0x1, 0x3, '\x00', r4, r9, 0x2, 0x5, 0x2, 0x7, @value=r10}, 0x50) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000740)={'ip6tnl0\x00', 0x0}) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) 1.220313211s ago: executing program 4 (id=4612): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x60, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x9, 0xffffffff}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x1}, @IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x60}}, 0x8000) bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfe, 0x100000}, 0xc) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)={0x20, 0x40, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x8, 0xcb, 0x0, 0x1, [@nested={0x4, 0x8}]}, @nested={0x4, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) 1.206225986s ago: executing program 1 (id=4613): r0 = socket(0x400000000010, 0x3, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1acb74fef", 0x87}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d05805063967de38327e", 0x9e}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36", 0xb7}, {0x0}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec489820505cea6045a9939974c6f2ee3815378dc0a620982383e84178b017ba52b", 0xc3}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d5313fb91fbdc5acd212f7d8c800a837a0236309d25e82d5767d8df7512b2beb324c2a2fd6f4ed3a3eb7396f02d515396a3be574d721df257d", 0x85}, {&(0x7f00000000c0)}], 0x7}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, 0x0}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0c17aa464613c", 0xf}], 0x1}}], 0x4, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1.047584301s ago: executing program 4 (id=4614): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000001ac0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}], 0x1, 0x48894) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x4004000) 1.047111274s ago: executing program 0 (id=4615): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendmmsg$inet(r0, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000240)="a4a0a421dea3ca5a1b4cc42ca95d9af81e4676994ae187e4c8102cb9191c7c5603b8863c1c6cfec609ec2d551678efe8d11115f19b37033f741aa66e29e16fbbe347bb93b66ec6fab8dd375b9fc111b7df5f9d0d2c025682e1b64cf14c01b2eedc2f88c5d42512914b00769804695ee65ce8097cda8eee288b6bcea193c8388876c35e07d22035639f0b375defbd80ea74400c904c8304812c4fd1a61631cb397c0097911442fc9d1a2d4517eb6e9fc0eb639af1f2be4dcdc8bcf2816d2c8a3dd4e435c89b3e33f2e5aa4219869aed2d045b5b48c756838511ec7f9d44918324d41e59283269d4", 0xe7}, {&(0x7f0000001340)="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", 0x132}], 0x2}}], 0x1, 0x880) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x2000000000000061) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)=ANY=[@ANYRESDEC=r1, @ANYRES32, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000fe2ac6836c0a2c275f8828ca2000"/26], 0x50) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000080)=0xfd4badcd6aaa7a73) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002880)={0x9, 0x1d, &(0x7f0000002500)=ANY=[@ANYBLOB="18000000070000000000000005000000950000000000000018010000646c6c2500000010002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000050000008500000006000000183000000200000000000000000000000c440300ff7f0000183900000400000000000000000000004d00feffffffffff18010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000180000085000000060000008520000002000000185900000200000000000000000040009500000000000000"], &(0x7f0000002600)='GPL\x00', 0xc95, 0xff, &(0x7f0000002640)=""/255, 0x41000, 0x4, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f0000000400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000002780)={0x0, 0xd, 0xd, 0x2}, 0x10, 0x0, 0x0, 0x8, &(0x7f00000027c0)=[0x1, 0xffffffffffffffff, r3, 0x1], &(0x7f0000002800)=[{0x2, 0x5, 0x5, 0x2}, {0x1, 0x3, 0x2, 0x1}, {0x4, 0x1, 0x6, 0x9}, {0x4, 0x3, 0xb, 0x9}, {0x4, 0x404, 0x2, 0x2}, {0x5, 0x3, 0x6, 0x6}, {0x3, 0x4, 0x4, 0x3}, {0x1, 0x4, 0x4, 0x3}], 0x10, 0x80}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002940)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="05000083b6649d08fa8d2f55e500000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="04000000030000000200"/28], 0x50) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f00000000c0)=[{0x0}], 0x1, 0x1) bpf$OBJ_GET_MAP(0x7, &(0x7f0000002a00)=@o_path={&(0x7f00000029c0)='./file0\x00', 0x0, 0x4018, r0}, 0x18) r6 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r6) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r8, &(0x7f0000002680)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @local}, 0x1c, &(0x7f0000000300)}}], 0x1, 0x8000015) shutdown(r8, 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r8, 0x84, 0x22, &(0x7f0000000240)={0x5, 0x2, 0x5, 0x1b}, 0x10) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=r9, @ANYBLOB="010000060000cbf54a8e0f574e14d62d00a020610400000010020000"], 0x14}}, 0x0) 1.033743056s ago: executing program 1 (id=4616): r0 = socket$inet6(0xa, 0x5, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r3, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r4, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000e70c00000008000500", @ANYRES32=r1], 0x50}, 0x1, 0x0, 0x0, 0x84}, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r5, 0x0, 0x0, 0x4004892, &(0x7f00000001c0)={0x11, 0x1, r4, 0x1, 0x8, 0x6, @broadcast}, 0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5c0000001200010029bd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="20000000387d0500140003006e657464657673696d3000"], 0x5c}, 0x1, 0x0, 0x0, 0xc1}, 0x8804) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x5a0, 0x0, 0xffffff80, 0x178, 0xd0040000, 0x178, 0x4d0, 0x22b, 0x258, 0x4d0, 0x258, 0x2034, 0x0, {[{{@uncond, 0x1d, 0x300, 0x368, 0x340, {0x1e0002a8, 0x7203000000000000}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x1a, 0x64, [{}, {0x0, 0x0, 0x1}, {0x0, 0x40}, {}, {0x0, 0x7, 0x8}, {}, {0x0, 0x0, 0xfd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x4}, {}, {0x6}, {}, {0x9}, {}, {}, {}, {0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x80000000}, {0x870}, {}, {}, {}, {0x2, 0xfe}, {0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x3, 0x10}, {}, {}, {0xfffe, 0x7, 0x4}, {0x0, 0x0, 0x1}, {0x0, 0x1}, {0x8, 0x8, 0x0, 0xfffffffc}, {}, {0x0, 0xfc, 0xe4}, {0x0, 0x0, 0xff}, {}, {0x3}, {}, {0x0, 0x0, 0x0, 0x10}, {}, {}, {0x0, 0x0, 0x0, 0xffffffff}, {}, {0x4, 0x8a}, {}, {}, {}, {0x0, 0x4}]}}, @common=@inet=@socket1={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x1c, 0x7, 0x279, 0x2, 'netbios-ns\x00', 'syz1\x00', {0x170}}}}, {{@ipv6={@private2, @empty, [0xff, 0x0, 0xffffff00, 0xff000000], [0xff000000, 0xff000000, 0xffffff00], 'vlan1\x00', 'pim6reg1\x00', {}, {0xff}, 0x0, 0x9, 0x1, 0x12}, 0x0, 0x100, 0x168, 0x0, {}, [@common=@ah={{0x30}}, @inet=@rpfilter={{0x28}, {0x4}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x11, 0x0, 0x0, 0x0, 'syz1\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x600) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000bc0)={{r2, &(0x7f0000000700)='syz1\x00', 0x200000, &(0x7f0000000940)={@_ha_fsid={[0x0, 0x5]}, {0x5, 0x2, 0x6e8c, 0x3}}, 0x8, &(0x7f0000000980)={@_ha_fsid}, &(0x7f00000009c0)=0xf}, {[0x5, 0xf8c9, 0x6, 0x3]}, 0x2, 0xe4, &(0x7f0000000ac0)=""/228}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000c40)={0x1b, 0x0, 0x0, 0x80, 0x0, r1, 0x4b, '\x00', 0x0, r7, 0x2, 0x2, 0x3}, 0x50) r8 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r8, &(0x7f0000002c40)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9}, 0x1c, &(0x7f0000000340)=[{&(0x7f0000000040)="b3c07ead5a20fea34a328ec0624e8306067fa3f99bf6ca16012d9b8dff422a4048f80565a2bfe45d13b4d6ea262c0e205b5144c6084f35aa9992bf142c481498cf9ae02c5834091443a2c1a6c54571d53cf83957a3d3f08e66017844851f099ae5eb15f6c16ceb1c717ffcd8fbc0fc564a619c41e1e5b413fe96a33374bca735", 0x80}, {&(0x7f00000000c0)="61d9bed5ccd78b53e8f117331acec11e56ab82ea5f254567a4a345d8c108400fa2879f11e08f59d1cafeab57e17c5171748cf263ca5c0ad4e6b9ecbffa556c26b5e088a6a7", 0x45}, {&(0x7f0000000140)="d646f4f297bbe7", 0x7}, {&(0x7f0000000180)="59411dd996e7c603ab9413e79627237fac79502d3c4a3930d07ab7748b088d41e93d06a51fa2f04053064f6f5c42dd8765be2db5cbf452aa109bd023b51c8c43dc04f5d1322d8bb67a8fe61bdd10b961862dbeb62e17d26dced5aba251439f99809ad0f68eb476f56cd12636d683aaaf1f9732682bb28ac136e3a19d19ca5808d66bd987e47ee3b4221bd707fcc3fab555e3ea321a2136620ff7f0", 0x9b}, {&(0x7f0000000240)="3d071968f78ecbb53a6f6c6fd69e107a594b35017bcd61f13decfc511afa75ed69fb8a1c6cdcfecb3f6da3a415258a64e93f8628f249fd0f7aab61081ca953720ac4b711db2bd2c1af9776c3bd9478ccc17a5e35c2d33557e8040696175451deb5e9ef3999e72fc279783f60d4bce7e2a1cd299382f8cb809fc24d20b04bc03cdfebca762d38ede50197e9a3ce2240a9746fb3a0bc7c42f830028e16ec8a04fd50d7285b6011d8af45f107b5f2d2a51eb8a36f43e0badcf52c2c51b20bd1d0ba8f1b8838abe7c6d03905e013ac767e94f4b2ea", 0xd3}], 0x5, &(0x7f00000003c0)=[@rthdr={{0x28, 0x29, 0x39, {0x3c, 0x2, 0x1, 0x7, 0x0, [@private2={0xfc, 0x2, '\x00', 0x1}]}}}], 0x28}}, {{&(0x7f0000000400)={0xa, 0x4e24, 0xa, @local, 0x2}, 0x1c, &(0x7f00000008c0)=[{&(0x7f0000000440)="a820788d4f40e88c9c75fcec767cab65b5dc677e8dca27e3d782a980e09b0e8d751d85009520b4dba1459d049f5f0e9ea49084de78e00e5ee108bd30158ef3c242959ab5fbee08be4a3377afd3835b27aabc7093cd0d1e30baada62e7233597668cba5ac3c20849ab2b774bfbc11243b17b491ab5a2f96da3e8d23b789b8c75f7024e49b0e28f15b63c37ffdab06870ab8e4adeecb202094b43566d37dfdc75028b21cc1886b59b1baded97ed0c83118aff53ae39f70d96449ba12e58d1c77a2a3f9d8c0649aa1f9f4393c95d865", 0xce}, {&(0x7f0000000540)="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", 0xff}, {&(0x7f0000000640)="f871b05addd8e004b3c21153cd3297eaae4ebac7e1f37c887dab6c67cdf501e4462a2c5bf6f09be8f11b3296508671ce4653857f6a364b7a455db727dd66cfac0ecbf014baf7", 0x46}, {&(0x7f00000006c0)="ca25e8e468a5f602f9af702620de1f754bde7c203d12fc2fd603aad9dc897a", 0x1f}, {&(0x7f0000000700)}, {&(0x7f0000000740)="de190b00044e02a4abb095bfea3de96db491dcc20d2bd3314b16c985321652357032f4d28e0ec251f83ec35b53c704edc998b7a9914ef51a3286c343b8cd0a683a55", 0x42}, {&(0x7f00000007c0)="1236b7a1b3e1f03938b47fff63d016cede9b0380ae29da9d95f86c75d082dbc076c598ddd74e1434fe83052ae3277dca8f539afc5d06cef0c89beaded9f5d45c7770efda628b243bf30ea823d28eca4e36964929cd6d5e2fe5581c27015521620cbda157ddafba491b0cb1df86b5ce6e4f7c16594f067a73bd9080", 0x7b}, {&(0x7f0000000840)="b283dd15d5ca19b9ba4c4a4546c1546db72deac82448310861d559cbd73e9011a86de908f33315b984b156e8e572258e8a322e7dfbfdcd109b20a37b776e4f9e85cfa36e9972449c67b741f6a9d340cce64c82f60da628ade0a723e044c974b120c274902b176954eb9861b667", 0x6d}], 0x8, &(0x7f0000001440)=[@dontfrag={{0x14, 0x29, 0x3e, 0x5}}, @tclass={{0x14, 0x29, 0x43, 0x7fffffff}}, @dstopts_2292={{0x20, 0x29, 0x4, {0x4, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0x8}]}}}, @rthdrdstopts={{0x1118, 0x29, 0x37, {0x5c, 0x21f, '\x00', [@generic={0x5, 0xd2, "ab910835c6bb0e339f1950f3a037316021c87284b28d9e11077605009c7217e5bd7eb06245609e2f094d939c6218597da40846633b7cf0b3d59f2c69ce7b1e326b8d25342a6e93ff58930e8349f9135d75773f1406c074a314b90d9cc672e41ce8b6869392d55c0c503214675aa4abaaf4e657ad91f6bd39c69b4a70bb43b8a4dc3071b140dc6c7b5c0cc90fe9f0df08ee998d49cd9c321e3701c1024bc1e9f7e6d7cbd87f897fd0207348511321f9847a797d03ee997d5cb479cae0c6940982645fcefd07c868771a945165b7b84288ec86"}, @jumbo={0xc2, 0x4, 0x2}, @generic={0x8, 0xc, "363379d37cc95c5e26b71a57"}, @padn={0x1, 0x1, [0x0]}, @generic={0xb7, 0x1000, "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"}, @padn={0x1, 0x2, [0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x4}, @ra={0x5, 0x2, 0x8}]}}}, @dontfrag={{0xfffffffffffffef8}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x47}}], 0x1198}}, {{&(0x7f0000002600)={0xa, 0x4e22, 0x7, @remote, 0x10}, 0x1c, &(0x7f00000029c0)=[{&(0x7f0000002640)="7bf8a208be65dcfe19037ff11d6dac350c6c1a592d9ba83261155ff68fbd6bb87a07aff3b0c125be3e00ab397ee9a40f24deae10605c7f1e2f55853d7536a28c714e24a88ce4e817ab5eb1d241830f2cadfb3d342ce03c45882de710cfd90f8a741573d64f3848997d5e645b004a820fa8c82d7b2d89ed0d4e4130b72581e7ea1f", 0x81}, {&(0x7f0000002700)}, {&(0x7f0000002740)="44758be38d83d370be05be409556ecd646e2e700a2c10757c124e3ccb98ac7865fb2cda50f0aa4557a4fbf101ef4b498c3c5d017e5f3600cd744ae97eac94e0f45150ffc1db788f225c72795f24bc14ddc1e6e7a414e9dbdcbb4c9e38c3027fcbd59f2d66837824f05ba5a6bd5116eaed7b4c4165fffa80175ff052518ff4f92f4edcd21c0a0fd53af7a39869427571e34e58ee423458eb488fe3497aa84232a8f79967290224cf0ca496029e1bdebc9091703adebab64c5f8551e89343e1643c1a63fc24e", 0xc5}, {&(0x7f0000002840)="541369e8530e913d9a5948812cdfe74ba5080830e7a65e5365e1ab9ec3296a5bfa5039dd163519ce0c9eb603beb42d97e451c53f8c71d60e8b05cc46616b43820a9d19f165393346cb6a7ae2e33b6a0a862615ac802dd5c97c98487b10775bc50b7ea12bccbee6d0b01e046e75d79d9310e02392a942df3e1d51d56d1e405eb674b9c9124a6bd91fe32c1f7055de20251a5aa3ddff3523f5", 0x98}, {&(0x7f0000002900)="43dabc2f95d66bd9b77f2e129c6de73efd92156e9cd12f4e228acb286459bab8a1400ecc875d261c134c07035a76b2a8bce4819daac411b2a72dea50d800fc55a03792e6a05c8c19f6d8f1e864ef0220aa3129eefd20825e94dd237e26fcabff30b05a5aabd889d145b7fae7b9cad8855288932e16144db571a6b8ea8f569ed83a9f9a8c1c581123615d834e90b57b41a12d809523d501ff2c8ed75bd80d0d49f082a7593dbbc300d69fe8f0f4", 0xad}], 0x5, &(0x7f0000002a40)=[@rthdr_2292={{0x48, 0x29, 0x39, {0x1d, 0x6, 0x0, 0x80, 0x0, [@loopback, @private2, @ipv4={'\x00', '\xff\xff', @multicast2}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x7}}, @rthdrdstopts={{0x48, 0x29, 0x37, {0x5e, 0x5, '\x00', [@hao={0xc9, 0x10, @empty}, @enc_lim={0x4, 0x1, 0x37}, @hao={0xc9, 0x10, @mcast2}, @ra={0x5, 0x2, 0x1000}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x3}}, @dstopts_2292={{0x98, 0x29, 0x4, {0x84, 0x10, '\x00', [@calipso={0x7, 0x30, {0x1, 0xa, 0x6, 0x401, [0x7fffffff, 0xfffffffffffffffa, 0x7, 0x10, 0x200]}}, @ra={0x5, 0x2, 0x8}, @calipso={0x7, 0x48, {0x0, 0x10, 0x2, 0xf, [0x9, 0x0, 0x5, 0x9, 0x4, 0xef95, 0xffffffff, 0x2]}}]}}}, @tclass={{0x14, 0x29, 0x43, 0x5b}}, @flowinfo={{0x14, 0x29, 0xb, 0xfff}}, @hopopts_2292={{0x28, 0x29, 0x36, {0x5c, 0x1, '\x00', [@padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x1, [0x0]}]}}}, @rthdrdstopts={{0x50, 0x29, 0x37, {0x88, 0x7, '\x00', [@calipso={0x7, 0x18, {0x0, 0x4, 0x5b, 0x8, [0xfffffffffffffff9, 0x2]}}, @enc_lim={0x4, 0x1, 0xa}, @enc_lim, @hao={0xc9, 0x10, @mcast1}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}]}}}], 0x200}}], 0x3, 0x800) 1.000245178s ago: executing program 2 (id=4617): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYRES64=r1, @ANYRES8=0x0, @ANYRES8=r0], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x3b, &(0x7f0000000300)=ANY=[@ANYRES64=r4, @ANYRES32=r2, @ANYRES32=r0, @ANYRES16=r4], 0x128}, 0x24048090) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000280)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x4048840}, 0x800) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x6b, 0x78, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, &(0x7f0000000880)={0x0, @in={{0x2, 0x4e23, @loopback}}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="0815000000051104000000000000000001000005540201"], 0x1508}}, 0x10) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x2}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x80000000, 0x0, 0x20, 0x80, 0xffffffff}, 0x0, 0x0, 0x4, 0x6, 0x2e, 0x14, 0x0, 0x0, 0x4, 0x0, {0x0, 0x3, 0x4000008, 0x0, 0x3}}}}]}, 0x78}}, 0x0) writev(r8, &(0x7f0000000040), 0x2) socketpair$unix(0x1, 0x2, 0x0, 0x0) unshare(0x4000400) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x13, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$NL80211_CMD_RELOAD_REGDB(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r7, 0x400, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=']A\x00\x00', @ANYRES16=r7, @ANYBLOB="000227bd7000ffdbdf254300000008000300", @ANYRES32=r10, @ANYBLOB="0c009900050000001e0000000c0058005f000000000000000c00580014000000000000000c0058007000000000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4040010}, 0x8050) r11 = socket$inet6(0xa, 0x2, 0x0) r12 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r12, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYRES8, @ANYRES32, @ANYRES64=r11, @ANYRESOCT=r1], 0xffffffffffffff9f}}, 0x0) 814.903636ms ago: executing program 0 (id=4618): r0 = socket(0x10, 0x803, 0x0) socket(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) close(0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) close(0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x8) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000000)="480000001400190d09004beafd0d36020a8429000b4e230f00000000a2bc5603ca00000f7f89004e002050da742dac0000000101ff05020003000200000000000100000000005839", 0x48}], 0x1) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000008c0)={'sit0\x00', &(0x7f00000000c0)={'tunl0\x00', 0x0, 0x7800, 0x8000, 0xa00, 0x401, {{0xa, 0x4, 0x0, 0x8, 0x28, 0x66, 0x0, 0x4, 0x0, 0x0, @multicast1, @remote, {[@timestamp_addr={0x44, 0x14, 0xd3, 0x1, 0xe, [{@rand_addr=0x64010100, 0x4}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9}]}]}}}}}) 814.106813ms ago: executing program 1 (id=4619): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x40000) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000100)='illinois', 0x8) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000840)="89000000120081ae08060cdc030000fe7f03214e000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947e", 0x75}, {&(0x7f0000000140)="11d6cb557c8496a2fe7a81f38210bfa9b70ee09c", 0x14}], 0x2}, 0x4000000) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r7 = socket(0x10, 0x3, 0x0) close(r6) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x7, 0x9, 0x8, 0xffffffff, 0x10000}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x6dec, 0x7, 0x421, 0x40, 0x0, 0x83ce}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240080c1}, 0x4008810) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r9, {0x0, 0xe}, {0x2, 0xb}, {0xffe0, 0x484c10e0d22b6613}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xfffffffffffffdc3, 0x2, [@TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x10006}, @TCA_FQ_PIE_ALPHA={0x8, 0x5, 0x12}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x6}, @TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8, 0xc, 0x1}, @TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x6}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20004061}, 0x4008000) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 261.495883ms ago: executing program 0 (id=4620): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0xb8}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r1 = socket$l2tp(0x2, 0x2, 0x73) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x3000) r4 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x4000) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB='\n\x00\x00\x00\v\x00\x00\x00B\x00\x00\x00>'], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r5, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r6, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20) close(0x3) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x7, &(0x7f00000014c0)=""/4101, 0x0, 0xc}, 0x94) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="4801000042000100fffffffffddbdf250200000004003880100001800c00c8000200000000000000200104801c01"], 0x148}, 0x1, 0x0, 0x0, 0x8800}, 0x4040) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r3) sendmsg$ETHTOOL_MSG_EEE_SET(r4, &(0x7f0000000c80)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000c00)={&(0x7f0000000cc0)={0x4f0, r8, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_EEE_MODES_OURS={0x4cc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x9c, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '.(\xdf[]\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x40}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffff8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_MASK={0x73, 0x5, "66e86269f30e72c71917691660c0a8b4dbcd2b15700e5ad56899ceabd469778dc179b68a42e864e94132765f6cff5c1baf3e281718ddfd40a42bd96d857cfe29cf083122ce3d1d1cc122323bd4b5c7b70bd5bc4e3a53794057e5823b82ad754da01a56b97bc9b6f011f0ad0b305a51"}, @ETHTOOL_A_BITSET_VALUE={0x37, 0x4, "823833dece36492c3ed59bd49dbd2b44740f9856c258e433730ebc54bb1b092d92350d082d504e30aa6b82356d1beda4d4cea9"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0xde, 0x5, "562d309d5d9e251d02716d4813931b5aceb01eacda85bf40bf4843d7e40a8ea90c39b34e53379ddcba0e51dd3f81e2c3953f57a7826fe711a7e0449e5f8cc7b245e9b0315518126a849947551d3964a538ae040579377619910bad0eef31efbe2359aebb3ef06fd0d8658f63519c7e806e2eecf762f4ca4bca2168b5d85fee3857bdacbf1c0e7373859fe7da6f7ac29193ad9b5b9a147a40b1657101161ab40cdc2216778ed2de249e39f5b1bce394081ef183ff3735deb41fda0c5bc06f26eb781313e3a89369eb24abd897dfb9fd2264f777c53d681a46bdbc"}, @ETHTOOL_A_BITSET_VALUE={0xd8, 0x4, "23721ea6ec7e974d90a28a391b3e9971155abd7b86e0a03a2ba21e1466f030e2074c75936c885bcac57d6a8a904b5724e14a939e0571537541a80143d281aca4711ba9cbb76f340b914dda40a9c3b10b4da11baab1a2789abcfcfa32f95a1b0456a68fa93d8987e5929e11279ee2ce8a53bdb64828b5cbbe58d87855db026e14b3c6af8dac8be8df5706771ca2e01ad4b5ffd50038f06293c33ce6fc7b3ee57a18ce55886928a10bc7bdb9fbdf70b9ca4e01d03a271cb5779166da75b6fbbbb7f5690f4100469e022a21cb59637f0dc37ea33c2d"}, @ETHTOOL_A_BITSET_BITS={0xa4, 0x3, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3ff}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '(\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, 'memory.events\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, 'memory.events\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xe98}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x11a, 0x5, "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"}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x7}]}, 0x4f0}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$tipc(r2, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="f7", 0x101d0}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000000)=r0, 0x4) 132.216698ms ago: executing program 4 (id=4621): r0 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x31}}, 0x8, &(0x7f0000000240)=[{&(0x7f0000000100)="9d", 0x1}], 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="30000000000000c54d8c008400080001000000f260020002000000d0535d05070000000400002000000000ff", @ANYRES32=0x0, @ANYBLOB="18000000000000008400000000000000ff7f060014000400"], 0x48, 0x8d5}, 0x24000052) getsockopt$X25_QBITINCL(r0, 0x106, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) socketpair(0x28, 0x5, 0x28, &(0x7f00000000c0)) 23.990202ms ago: executing program 4 (id=4622): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r0, &(0x7f0000000580)={@val={0x0, 0x86dd}, @val={0x0, 0x1, 0x11, 0x4, 0x0, 0xca6}, @mpls={[], @ipv6=@gre_packet={0xe, 0x6, '\x00', 0x44, 0x2f, 0xff, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0xa888, 0x88be, 0x2, {{0x6, 0x1, 0x9, 0x2, 0x1, 0x0, 0x3, 0x5}, 0x1, {0x88a8}}}, {0x8, 0x22eb, 0x20000, {{0x0, 0x2, 0x9, 0x0, 0x0, 0x2, 0x7, 0x8}, 0x2, {0x2, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0x7a) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x2c, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}, @NL80211_ATTR_4ADDR={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000801}, 0xc0c4) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNGETIFF(r2, 0x800454d2, &(0x7f0000000040)={'pimreg0\x00'}) 15.41578ms ago: executing program 0 (id=4623): ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000)) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="18020000fffdffff00000000000200008500000041000000850000002a0000b782"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r1, &(0x7f0000000180)={0x24, @short={0x2, 0x1, 0xffff}}, 0x14) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x1) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000100)={0x6, [0x6b, 0x5, 0x8, 0x1ff, 0x5, 0x5]}, &(0x7f00000001c0)=0x10) splice(r3, 0x0, r2, 0x0, 0xfffd, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x11, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x1000000}, 0x50) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000)) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="18020000fffdffff00000000000200008500000041000000850000002a0000b782"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) bind$802154_dgram(r1, &(0x7f0000000180)={0x24, @short={0x2, 0x1, 0xffff}}, 0x14) (async) pipe(&(0x7f00000007c0)) (async) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x1) (async) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000100)={0x6, [0x6b, 0x5, 0x8, 0x1ff, 0x5, 0x5]}, &(0x7f00000001c0)=0x10) (async) splice(r3, 0x0, r2, 0x0, 0xfffd, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x11, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x1000000}, 0x50) (async) 0s ago: executing program 2 (id=4624): r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB="28000000350001002bbd7004fedbdb2504000000080004"], 0x28}, 0x1, 0x0, 0x0, 0x20040050}, 0x24000080) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x39039af1c607ecec}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r3, 0x1, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8814}, 0x30) sendmsg$inet6(r0, &(0x7f0000000100)={&(0x7f0000000000)={0xa, 0x4e21, 0x80000, @mcast2, 0xfffffffe}, 0x1c, 0x0}, 0x440e0) kernel console output (not intermixed with test programs): 52725][T19277] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3255'. [ 516.941823][T19288] geneve2: entered allmulticast mode [ 517.670488][T19319] netlink: 844 bytes leftover after parsing attributes in process `syz.3.3264'. [ 517.801477][T19235] chnl_net:caif_netlink_parms(): no params data found [ 517.870731][T19327] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3265'. [ 517.948240][ T5837] Bluetooth: hci2: command tx timeout [ 518.021263][T19284] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3256'. [ 518.092814][T19235] bridge0: port 1(bridge_slave_0) entered blocking state [ 518.107030][T19235] bridge0: port 1(bridge_slave_0) entered disabled state [ 518.114470][T19235] bridge_slave_0: entered allmulticast mode [ 518.123142][T19235] bridge_slave_0: entered promiscuous mode [ 518.132803][T19235] bridge0: port 2(bridge_slave_1) entered blocking state [ 518.141242][T19235] bridge0: port 2(bridge_slave_1) entered disabled state [ 518.148981][T19235] bridge_slave_1: entered allmulticast mode [ 518.157480][T19235] bridge_slave_1: entered promiscuous mode [ 518.309525][T19235] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 518.343072][T19235] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 518.513039][T19235] team0: Port device team_slave_0 added [ 518.534031][T19235] team0: Port device team_slave_1 added [ 518.695802][T19235] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 518.726870][T19235] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 518.774547][T19352] netlink: 'syz.1.3273': attribute type 5 has an invalid length. [ 518.797602][T19352] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.3273'. [ 518.814543][T19235] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 518.847811][T19235] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 518.865277][T19235] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 518.902437][T19357] xt_recent: hitcount (33554435) is larger than allowed maximum (65535) [ 518.940258][ T5157] block nbd0: Possible stuck request ffff888027147000: control (read@0,1024B). Runtime 30 seconds [ 518.955018][ T5157] block nbd0: Possible stuck request ffff8880271471c0: control (read@1024,1024B). Runtime 30 seconds [ 518.966167][ T5157] block nbd0: Possible stuck request ffff888027147380: control (read@2048,1024B). Runtime 30 seconds [ 518.978050][ T5157] block nbd0: Possible stuck request ffff888027147540: control (read@3072,1024B). Runtime 30 seconds [ 518.991886][T19235] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 519.022472][T19360] tipc: Started in network mode [ 519.028315][T19360] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 519.035647][T19360] tipc: Enabled bearer , priority 10 [ 519.212365][T19370] netlink: 'syz.1.3280': attribute type 8 has an invalid length. [ 519.239481][T19235] hsr_slave_0: entered promiscuous mode [ 519.258062][T19235] hsr_slave_1: entered promiscuous mode [ 519.265628][T19235] debugfs: 'hsr0' already exists in 'hsr' [ 519.271984][T19235] Cannot create hsr debugfs directory [ 519.441459][T19382] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3283'. [ 519.608040][T19391] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3284'. [ 519.765254][T19392] team2: entered promiscuous mode [ 519.777421][T19392] team2: entered allmulticast mode [ 519.786554][T19392] 8021q: adding VLAN 0 to HW filter on device team2 [ 519.933441][T19405] syzkaller1: entered promiscuous mode [ 519.946254][T19405] syzkaller1: entered allmulticast mode [ 519.965207][T19405] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 519.988141][T19235] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 520.026926][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 520.031353][ T5837] Bluetooth: hci2: command tx timeout [ 520.035042][ C1] lec:lec_tx_timeout: lec0 [ 520.035266][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 520.135425][T19235] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 520.177926][ T7865] tipc: Node number set to 10136234 [ 520.242161][T19235] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 520.396091][T19235] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 520.731300][T19422] syzkaller1: entered promiscuous mode [ 520.741668][T19422] syzkaller1: entered allmulticast mode [ 521.112405][T19235] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 521.162611][T19235] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 521.209875][T19235] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 521.258571][T19235] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 521.283248][T19439] sctp: [Deprecated]: syz.3.3295 (pid 19439) Use of int in maxseg socket option. [ 521.283248][T19439] Use struct sctp_assoc_value instead [ 521.344896][T19235] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 521.413808][T19235] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 521.454538][T19235] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 521.496619][T19235] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 521.660558][T19235] 8021q: adding VLAN 0 to HW filter on device bond0 [ 521.687037][T19235] 8021q: adding VLAN 0 to HW filter on device team0 [ 521.708340][T10580] bridge0: port 1(bridge_slave_0) entered blocking state [ 521.715546][T10580] bridge0: port 1(bridge_slave_0) entered forwarding state [ 521.769977][T12677] bridge0: port 2(bridge_slave_1) entered blocking state [ 521.777227][T12677] bridge0: port 2(bridge_slave_1) entered forwarding state [ 521.976635][T19465] __nla_validate_parse: 9 callbacks suppressed [ 521.976659][T19465] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3300'. [ 522.107605][T12677] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 522.116064][ T5837] Bluetooth: hci2: command tx timeout [ 524.193115][ T5837] Bluetooth: hci2: command tx timeout [ 524.532264][T19449] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 524.763896][T19488] bridge0: port 3(syz_tun) entered blocking state [ 524.787331][T19488] bridge0: port 3(syz_tun) entered disabled state [ 524.810143][T19488] syz_tun: entered allmulticast mode [ 524.861717][T19488] syz_tun: entered promiscuous mode [ 524.879860][T19488] bridge0: port 3(syz_tun) entered blocking state [ 524.886492][T19488] bridge0: port 3(syz_tun) entered forwarding state [ 524.904508][T19492] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3306'. [ 525.010412][T19493] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 525.056804][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 525.073909][T19235] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 525.084393][ C1] lec:lec_tx_timeout: lec0 [ 525.089258][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 525.333303][T19516] sctp: [Deprecated]: syz.3.3309 (pid 19516) Use of int in max_burst socket option. [ 525.333303][T19516] Use struct sctp_assoc_value instead [ 525.727873][T19235] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 525.876440][T19542] netlink: 'syz.1.3316': attribute type 5 has an invalid length. [ 525.980655][T19235] veth0_vlan: entered promiscuous mode [ 526.024815][T19235] veth1_vlan: entered promiscuous mode [ 526.152774][T19235] veth0_macvtap: entered promiscuous mode [ 526.171521][T19235] veth1_macvtap: entered promiscuous mode [ 526.259750][T19235] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 526.304338][T19235] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 526.374495][T10578] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.417805][T10578] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.460136][T10578] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.493688][T10578] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.753570][T10575] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 526.785541][T10575] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 526.882114][T10578] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 526.893970][T10578] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 527.231925][T10569] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 527.274202][T19590] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3326'. [ 527.445092][T19602] netlink: 88 bytes leftover after parsing attributes in process `syz.0.3328'. [ 527.488500][T19587] lo speed is unknown, defaulting to 1000 [ 527.500740][T19594] lo speed is unknown, defaulting to 1000 [ 527.515115][T19587] lo speed is unknown, defaulting to 1000 [ 527.619048][T19607] 8021q: VLANs not supported on lo [ 528.001114][T19631] netlink: 'syz.0.3333': attribute type 10 has an invalid length. [ 528.254431][T19631] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 528.309881][T10567] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 528.336698][T10567] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 528.347037][T19594] lo speed is unknown, defaulting to 1000 [ 528.603247][T19651] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3337'. [ 528.636601][T19651] netlink: 43 bytes leftover after parsing attributes in process `syz.3.3337'. [ 528.663693][T19653] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3336'. [ 528.688097][T19651] netlink: 'syz.3.3337': attribute type 6 has an invalid length. [ 528.711692][T19651] netlink: 'syz.3.3337': attribute type 5 has an invalid length. [ 528.723536][T19651] netlink: 43 bytes leftover after parsing attributes in process `syz.3.3337'. [ 528.991981][T19669] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3339'. [ 529.263201][T19683] netlink: 148 bytes leftover after parsing attributes in process `syz.0.3341'. [ 529.780291][T19699] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3348'. [ 529.796186][T19692] syzkaller0: entered promiscuous mode [ 529.802724][T19697] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3348'. [ 529.814587][T19692] syzkaller0: entered allmulticast mode [ 530.070166][T19706] xt_HMARK: proto mask must be zero with L3 mode [ 530.079265][T19705] hsr0: entered promiscuous mode [ 530.096780][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 530.104876][ C1] lec:lec_tx_timeout: lec0 [ 530.110437][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 530.351668][T19712] syzkaller0: entered promiscuous mode [ 530.361754][T19712] syzkaller0: entered allmulticast mode [ 530.431111][T19712] netlink: 'syz.3.3351': attribute type 1 has an invalid length. [ 530.792401][T19735] netlink: 'syz.3.3358': attribute type 3 has an invalid length. [ 530.815411][T19735] netlink: 'syz.3.3358': attribute type 3 has an invalid length. [ 531.145169][T19751] netlink: 'syz.0.3363': attribute type 1 has an invalid length. [ 531.169042][T19751] netlink: 'syz.0.3363': attribute type 2 has an invalid length. [ 531.517064][T19763] tipc: New replicast peer: 255.255.255.255 [ 531.527551][T19763] tipc: Enabled bearer , priority 10 [ 531.903950][ T7890] IPVS: starting estimator thread 0... [ 531.916569][T19789] IPVS: set_ctl: invalid protocol: 136 100.0.1.1:20001 [ 532.022916][T19787] lo speed is unknown, defaulting to 1000 [ 532.038550][T19792] IPVS: using max 24 ests per chain, 57600 per kthread [ 532.144839][T19787] lo speed is unknown, defaulting to 1000 [ 532.570993][ T7890] IPVS: starting estimator thread 0... [ 532.577731][T19819] __nla_validate_parse: 19 callbacks suppressed [ 532.577753][T19819] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3385'. [ 532.707847][T19824] IPVS: using max 26 ests per chain, 62400 per kthread [ 532.791259][T19830] tipc: Started in network mode [ 532.821395][T19830] tipc: Node identity d61edc0e086e, cluster identity 4711 [ 532.845407][T19830] tipc: Enabled bearer , priority 0 [ 532.883544][T19837] syzkaller0: entered promiscuous mode [ 532.922144][T19837] syzkaller0: entered allmulticast mode [ 532.995023][T10575] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 533.016327][T19830] tipc: Resetting bearer [ 533.054822][T19845] netlink: 'syz.1.3391': attribute type 1 has an invalid length. [ 533.077755][T19829] tipc: Resetting bearer [ 533.108415][T19829] tipc: Disabling bearer [ 533.421093][T19852] lo speed is unknown, defaulting to 1000 [ 533.431604][T19859] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3395'. [ 533.472668][T19852] lo speed is unknown, defaulting to 1000 [ 533.881536][T19869] netlink: 'syz.0.3399': attribute type 2 has an invalid length. [ 533.915902][T19869] netlink: 16126 bytes leftover after parsing attributes in process `syz.0.3399'. [ 534.252226][T19882] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3402'. [ 534.281670][T19882] netlink: 'syz.2.3402': attribute type 1 has an invalid length. [ 534.293889][T19882] netlink: 'syz.2.3402': attribute type 2 has an invalid length. [ 534.457291][T19893] syzkaller0: entered promiscuous mode [ 534.479276][T19893] 0: reclassify loop, rule prio 0, protocol 800 [ 534.813561][T19901] netdevsim netdevsim2: Direct firmware load for . failed with error -2 [ 534.825681][T19901] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 534.904529][T19904] netlink: 'syz.1.3408': attribute type 4 has an invalid length. [ 534.923987][T19877] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 534.939711][T19877] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 535.127496][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 535.135649][ C1] lec:lec_tx_timeout: lec0 [ 535.140767][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 535.895237][T19919] gre0: entered promiscuous mode [ 535.909656][T19919] gre0: entered allmulticast mode [ 536.089128][T19877] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 536.116828][T19877] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 536.395634][T19877] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 536.423600][T19877] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 536.494232][T19939] bond4: option arp_interval: invalid value (18446744073709551615) [ 536.502467][T19939] bond4: option arp_interval: allowed values 0 - 2147483647 [ 536.519654][T19939] bond4 (unregistering): Released all slaves [ 536.995361][T19877] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 537.012757][T19877] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 537.216021][T19974] xt_CT: You must specify a L4 protocol and not use inversions on it [ 537.316688][T19983] netlink: 'syz.0.3424': attribute type 1 has an invalid length. [ 537.333322][T19974] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3421'. [ 537.335225][T19983] netlink: 'syz.0.3424': attribute type 1 has an invalid length. [ 537.352280][T19983] netlink: 9172 bytes leftover after parsing attributes in process `syz.0.3424'. [ 537.387726][T19983] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 537.412509][T19986] netlink: 10 bytes leftover after parsing attributes in process `syz.1.3425'. [ 537.442454][T19986] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3425'. [ 537.462425][T19986] netlink: 304 bytes leftover after parsing attributes in process `syz.1.3425'. [ 537.714876][T19999] netlink: 'syz.1.3429': attribute type 11 has an invalid length. [ 537.748623][T19999] netlink: 199828 bytes leftover after parsing attributes in process `syz.1.3429'. [ 537.822019][T19998] lo speed is unknown, defaulting to 1000 [ 537.841420][T19998] lo speed is unknown, defaulting to 1000 [ 537.852341][T20004] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3430'. [ 538.244657][T20017] netlink: 'syz.1.3432': attribute type 1 has an invalid length. [ 538.385531][T20017] bond4: entered promiscuous mode [ 538.433380][T20017] 8021q: adding VLAN 0 to HW filter on device bond4 [ 538.514029][T20019] bridge_slave_1: left allmulticast mode [ 538.540267][T20019] bridge_slave_1: left promiscuous mode [ 538.564764][T20019] bridge0: port 2(bridge_slave_1) entered disabled state [ 538.753405][T10578] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 538.968227][T20019] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 539.034805][T20024] bond1: option packets_per_slave: invalid value (1048582) [ 539.043376][T20024] bond1: option packets_per_slave: allowed values 0 - 65535 [ 539.053733][T20024] bond1 (unregistering): Released all slaves [ 539.098185][T20026] bond4: (slave bridge2): making interface the new active one [ 539.106169][T20026] bridge2: entered promiscuous mode [ 539.115389][T20026] bridge2: left promiscuous mode [ 539.366475][T20042] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3436'. [ 539.464274][T20051] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3436'. [ 539.529223][T20050] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3439'. [ 539.558764][T20050] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3439'. [ 539.714224][T20055] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.3440'. [ 539.802268][T20058] Bluetooth: MGMT ver 1.23 [ 539.883024][T20055] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 540.107440][T20045] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 540.156838][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 540.165039][ C1] lec:lec_tx_timeout: lec0 [ 540.170851][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 540.341107][T20065] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3444'. [ 540.354209][T20065] netem: incorrect ge model size [ 540.362598][T20065] netem: change failed [ 540.396634][T20065] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3444'. [ 540.547427][T20065] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.622893][T20074] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3447'. [ 540.814628][T20065] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.887003][T20082] lo speed is unknown, defaulting to 1000 [ 540.894918][T20082] lo speed is unknown, defaulting to 1000 [ 541.044409][T20065] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 541.279399][T20065] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 541.621821][T10581] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.705660][T20113] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 541.725359][T20113] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 541.741262][T20113] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 541.749077][T20113] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 541.843603][T10581] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.121346][T10578] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.235322][T10578] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.308696][T20123] netlink: 'syz.2.3460': attribute type 2 has an invalid length. [ 542.316534][T20123] netlink: 'syz.2.3460': attribute type 1 has an invalid length. [ 542.429662][T20127] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 542.611659][T20135] netlink: 'syz.3.3465': attribute type 3 has an invalid length. [ 542.658473][T20140] netlink: 'syz.1.3467': attribute type 12 has an invalid length. [ 542.791074][T20141] lo speed is unknown, defaulting to 1000 [ 542.818624][T20141] lo speed is unknown, defaulting to 1000 [ 543.033146][T20163] __nla_validate_parse: 3 callbacks suppressed [ 543.033167][T20163] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3472'. [ 543.127343][T20169] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3474'. [ 543.143382][T20159] lo speed is unknown, defaulting to 1000 [ 543.192886][T20169] bond0: entered promiscuous mode [ 543.217682][T20169] bond_slave_0: entered promiscuous mode [ 543.223737][T20169] bond_slave_1: entered promiscuous mode [ 543.250463][T20169] dummy0: entered promiscuous mode [ 543.259467][T20169] bond0: left promiscuous mode [ 543.268900][T20169] bond_slave_0: left promiscuous mode [ 543.280649][T20169] bond_slave_1: left promiscuous mode [ 543.297597][T20169] dummy0: left promiscuous mode [ 543.340342][T20172] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3475'. [ 543.359870][T20172] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3475'. [ 543.382532][T20172] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3475'. [ 543.399646][T20173] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3475'. [ 543.412472][T20172] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3475'. [ 543.438838][T20173] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3475'. [ 543.469282][T20173] netlink: 'syz.4.3475': attribute type 19 has an invalid length. [ 543.482672][T20172] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3475'. [ 543.487207][T20173] netlink: 'syz.4.3475': attribute type 20 has an invalid length. [ 543.513300][T20172] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3475'. [ 543.612316][T20159] lo speed is unknown, defaulting to 1000 [ 543.770103][T20181] IPVS: set_ctl: invalid protocol: 46 127.0.0.1:20001 [ 544.057729][T20188] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 544.130225][T20188] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 544.163934][T20188] bond0 (unregistering): Released all slaves [ 544.427718][T20204] netlink: 'syz.1.3483': attribute type 1 has an invalid length. [ 544.456095][T20204] netlink: 'syz.1.3483': attribute type 2 has an invalid length. [ 544.464224][T20204] netlink: 'syz.1.3483': attribute type 1 has an invalid length. [ 544.473024][T20204] netlink: 'syz.1.3483': attribute type 3 has an invalid length. [ 544.510334][T10576] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 545.186782][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 545.194903][ C1] lec:lec_tx_timeout: lec0 [ 545.200954][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 545.562179][T20246] syzkaller0: entered promiscuous mode [ 545.568490][T20246] syzkaller0: entered allmulticast mode [ 546.088916][T20264] syzkaller0: entered promiscuous mode [ 546.094710][T20264] syzkaller0: entered allmulticast mode [ 546.126142][T20264] tipc: Enabled bearer , priority 0 [ 546.139381][T20264] netlink: 'syz.0.3502': attribute type 1 has an invalid length. [ 546.152261][T20264] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 546.163886][T20266] delete_channel: no stack [ 546.172891][T20262] tipc: Resetting bearer [ 546.213430][T20262] tipc: Disabling bearer [ 547.019903][T20299] "syz.3.3514" (20299) uses obsolete ecb(arc4) skcipher [ 547.073406][T20307] sctp: [Deprecated]: syz.1.3516 (pid 20307) Use of int in max_burst socket option. [ 547.073406][T20307] Use struct sctp_assoc_value instead [ 547.304748][T20310] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.410524][T20324] bond1: option arp_interval: invalid value (18446744073709551615) [ 547.419191][T20324] bond1: option arp_interval: allowed values 0 - 2147483647 [ 547.433645][T20324] bond1 (unregistering): Released all slaves [ 547.513813][T20328] team0: Port device team_slave_0 removed [ 547.542906][T20310] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.624334][T20310] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.701663][T20310] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.765973][T20332] netlink: ct family unspecified [ 547.839540][T10569] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.900334][T10578] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.978560][T10581] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.069836][T10581] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.339174][T20351] netlink: 'syz.0.3527': attribute type 29 has an invalid length. [ 548.382134][T20351] __nla_validate_parse: 105 callbacks suppressed [ 548.382157][T20351] netlink: 548 bytes leftover after parsing attributes in process `syz.0.3527'. [ 548.470233][T20351] netlink: 'syz.0.3527': attribute type 3 has an invalid length. [ 548.488463][T20351] netlink: 'syz.0.3527': attribute type 3 has an invalid length. [ 548.872464][T20373] pimreg: left allmulticast mode [ 548.960230][T20372] lo speed is unknown, defaulting to 1000 [ 548.990226][T20372] lo speed is unknown, defaulting to 1000 [ 548.994399][ T5157] block nbd0: Possible stuck request ffff888027147000: control (read@0,1024B). Runtime 60 seconds [ 549.009378][ T5157] block nbd0: Possible stuck request ffff8880271471c0: control (read@1024,1024B). Runtime 60 seconds [ 549.020596][ T5157] block nbd0: Possible stuck request ffff888027147380: control (read@2048,1024B). Runtime 60 seconds [ 549.031772][ T5157] block nbd0: Possible stuck request ffff888027147540: control (read@3072,1024B). Runtime 60 seconds [ 549.199072][T20392] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.3538'. [ 549.220180][T20392] netlink: 'syz.4.3538': attribute type 5 has an invalid length. [ 549.329351][T20398] team_slave_0: entered promiscuous mode [ 549.337059][T20398] team_slave_1: entered promiscuous mode [ 549.368511][T20398] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 549.396134][T20401] netlink: 'syz.3.3542': attribute type 16 has an invalid length. [ 549.421639][T20401] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.3542'. [ 549.436543][T20404] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3540'. [ 549.448233][T20401] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3542'. [ 549.483376][T20401] syzkaller1: entered promiscuous mode [ 549.496004][T20401] syzkaller1: entered allmulticast mode [ 549.526502][T20407] netlink: 'syz.3.3542': attribute type 16 has an invalid length. [ 549.537365][T20405] netlink: 244 bytes leftover after parsing attributes in process `syz.4.3540'. [ 549.560287][T20407] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.3542'. [ 549.840383][T20416] netlink: 'syz.3.3545': attribute type 1 has an invalid length. [ 549.875982][T20417] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3544'. [ 550.221912][T20434] netlink: 'syz.1.3548': attribute type 1 has an invalid length. [ 550.272354][T10576] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 550.385445][T20446] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3548'. [ 550.625280][T20446] macvlan2: entered promiscuous mode [ 550.639654][T20446] macvlan2: entered allmulticast mode [ 550.683775][T20452] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3551'. [ 550.703654][T20445] lo speed is unknown, defaulting to 1000 [ 550.711707][T20444] netlink: 'syz.3.3550': attribute type 4 has an invalid length. [ 550.725994][T20445] lo speed is unknown, defaulting to 1000 [ 550.762594][T20447] netlink: 'syz.3.3550': attribute type 4 has an invalid length. [ 550.803549][T20444] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 550.986757][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5780 ms [ 550.994865][ C1] lec:lec_tx_timeout: lec0 [ 551.001251][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 551.315140][T20472] bond2: Setting coupled_control to off (0) [ 551.972882][T20496] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 552.008865][T20496] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 552.134434][T20488] bond1: (slave gretap1): making interface the new active one [ 552.148874][T20488] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 552.229537][T20500] macvlan16: entered promiscuous mode [ 552.247607][T20500] macvlan16: entered allmulticast mode [ 552.264212][T20500] bond1: entered promiscuous mode [ 552.276704][T20500] gretap1: entered promiscuous mode [ 552.288447][T20500] 8021q: adding VLAN 0 to HW filter on device macvlan16 [ 552.305866][T20500] bond1: (slave macvlan16): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 552.343866][T20500] bond1: left promiscuous mode [ 552.366618][T20500] gretap1: left promiscuous mode [ 552.479110][T20480] lo speed is unknown, defaulting to 1000 [ 552.511852][T20480] lo speed is unknown, defaulting to 1000 [ 552.578791][T20510] lo speed is unknown, defaulting to 1000 [ 553.078807][T20533] 8021q: adding VLAN 0 to HW filter on device bond6 [ 553.149730][T20536] bridge0: port 1(bridge_slave_0) entered disabled state [ 553.269761][T20510] lo speed is unknown, defaulting to 1000 [ 553.405051][T20546] __nla_validate_parse: 6 callbacks suppressed [ 553.405070][T20546] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3572'. [ 553.898300][T20560] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 554.131818][T20577] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3579'. [ 554.218275][T20579] rdma_op ffff8880842169f0 conn xmit_rdma 0000000000000000 [ 554.510196][T20588] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 554.533707][T20588] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 554.624602][T20589] sit0: entered promiscuous mode [ 554.642740][T20589] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3582'. [ 554.784122][T20592] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3583'. [ 554.813766][T20592] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3583'. [ 554.827968][T20594] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3584'. [ 554.944524][T20598] macvlan0: entered allmulticast mode [ 554.963322][T20598] veth1_vlan: entered allmulticast mode [ 554.986555][T20598] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check. [ 555.033993][T20602] validate_nla: 2 callbacks suppressed [ 555.034014][T20602] netlink: 'syz.0.3586': attribute type 1 has an invalid length. [ 555.124624][T20607] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3588'. [ 555.149794][T20602] 8021q: adding VLAN 0 to HW filter on device bond3 [ 555.238776][T20606] bond3: (slave syz_tun): Enslaving as a backup interface with an up link [ 555.792688][T20623] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 555.807989][T20641] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3597'. [ 555.826596][T20641] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3597'. [ 555.866538][T20637] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3597'. [ 556.029293][T10567] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 556.039610][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 556.047911][ C1] lec:lec_tx_timeout: lec0 [ 556.053204][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 556.156133][T20637] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 556.172255][T20637] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 556.283970][T20623] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.310173][T10569] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.328041][T10569] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.470910][T20635] lo speed is unknown, defaulting to 1000 [ 556.478061][T10569] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.486590][T10569] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.540325][T20623] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.564358][T20635] lo speed is unknown, defaulting to 1000 [ 556.748156][T20623] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.965116][T20654] lo speed is unknown, defaulting to 1000 [ 557.110539][T10569] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 557.200205][T10578] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 557.252826][T10578] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 557.270319][T20654] lo speed is unknown, defaulting to 1000 [ 557.346568][T10567] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 557.564473][T20662] ip6gretap0: entered promiscuous mode [ 557.592804][T20662] syz_tun: entered promiscuous mode [ 557.620667][T20662] debugfs: 'hsr1' already exists in 'hsr' [ 557.641588][T20662] Cannot create hsr debugfs directory [ 557.670614][T20662] hsr1: Slave A (ip6gretap0) is not up; please bring it up to get a fully working HSR network [ 557.694060][T20662] hsr1: Slave B (syz_tun) is not up; please bring it up to get a fully working HSR network [ 557.947186][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 561.066838][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 561.074940][ C1] lec:lec_tx_timeout: lec0 [ 561.079768][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 561.147743][T10569] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 561.697103][ T5192] udevd[5192]: worker [16714] /devices/virtual/block/nbd0 is taking a long time [ 563.071743][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 566.086860][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 566.094931][ C1] lec:lec_tx_timeout: lec0 [ 566.099620][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 566.908557][T10569] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 571.107519][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 571.115557][ C1] lec:lec_tx_timeout: lec0 [ 571.120211][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 572.668425][T10576] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 572.933337][T20701] __nla_validate_parse: 6 callbacks suppressed [ 572.933359][T20701] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3609'. [ 573.732211][T20736] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3618'. [ 573.962927][T20744] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3622'. [ 574.011398][T20744] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3622'. [ 574.151127][T20755] xt_hashlimit: size too large, truncated to 1048576 [ 574.258464][T20765] netlink: 'syz.2.3627': attribute type 4 has an invalid length. [ 574.314365][T20767] netlink: 'syz.2.3627': attribute type 4 has an invalid length. [ 574.390255][T20765] netlink: 'syz.2.3627': attribute type 4 has an invalid length. [ 574.463156][T20769] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3628'. [ 574.690374][T20780] xt_ecn: cannot match TCP bits for non-tcp packets [ 574.852703][T20781] delete_channel: no stack [ 575.056693][T20800] netlink: 'syz.4.3639': attribute type 1 has an invalid length. [ 575.107778][T20800] 8021q: adding VLAN 0 to HW filter on device bond2 [ 575.119730][T20800] netlink: 'syz.4.3639': attribute type 8 has an invalid length. [ 575.140845][T20800] bond2: (slave geneve2): making interface the new active one [ 575.151373][T20800] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 575.161453][T10569] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 575.211980][T10569] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 575.279072][T10569] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 575.323919][T10569] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 575.469375][T20819] lo speed is unknown, defaulting to 1000 [ 575.494533][T20821] lo speed is unknown, defaulting to 1000 [ 575.503552][T20819] lo speed is unknown, defaulting to 1000 [ 575.689837][T20828] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3646'. [ 576.020367][T20839] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3647'. [ 576.043437][T20841] netlink: 'syz.3.3648': attribute type 1 has an invalid length. [ 576.065792][T20839] netlink: 'syz.1.3647': attribute type 7 has an invalid length. [ 576.072799][T20841] netlink: 'syz.3.3648': attribute type 1 has an invalid length. [ 576.084165][T20839] netlink: 'syz.1.3647': attribute type 8 has an invalid length. [ 576.105171][T20839] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3647'. [ 576.119771][T20841] netlink: 'syz.3.3648': attribute type 1 has an invalid length. [ 576.127023][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 576.135659][ C1] lec:lec_tx_timeout: lec0 [ 576.140580][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 576.216076][T20839] bridge0: entered promiscuous mode [ 576.232759][T20839] bridge0: left promiscuous mode [ 576.263886][T20846] bridge_slave_1: left allmulticast mode [ 576.278867][T20846] bridge_slave_1: left promiscuous mode [ 576.293303][T20846] bridge0: port 2(bridge_slave_1) entered disabled state [ 576.327785][T20846] bridge_slave_0: left allmulticast mode [ 576.341298][T20846] bridge_slave_0: left promiscuous mode [ 576.356221][T20846] bridge0: port 1(bridge_slave_0) entered disabled state [ 576.543275][T20821] lo speed is unknown, defaulting to 1000 [ 577.108475][T20877] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3654'. [ 577.653722][T20892] bond2: option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 577.775881][T20892] bond2 (unregistering): Released all slaves [ 578.438477][T10569] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 578.574618][T20925] netlink: 108 bytes leftover after parsing attributes in process `syz.1.3666'. [ 578.611327][T20925] team0: Device vxcan1 is of different type [ 578.645033][T20930] team0: entered promiscuous mode [ 578.660437][T20930] team_slave_0: entered promiscuous mode [ 578.677116][T20930] team_slave_1: entered promiscuous mode [ 578.688749][T20930] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 578.948381][T20948] macvtap1: entered promiscuous mode [ 578.967259][T20948] veth1_to_hsr: entered promiscuous mode [ 578.979626][T20948] macvtap1: entered allmulticast mode [ 578.994713][T20948] veth1_to_hsr: entered allmulticast mode [ 579.059030][T20947] macsec1: entered promiscuous mode [ 579.074779][ T5157] block nbd0: Possible stuck request ffff888027147000: control (read@0,1024B). Runtime 90 seconds [ 579.085663][ T5157] block nbd0: Possible stuck request ffff8880271471c0: control (read@1024,1024B). Runtime 90 seconds [ 579.097688][ T5157] block nbd0: Possible stuck request ffff888027147380: control (read@2048,1024B). Runtime 90 seconds [ 579.109107][ T5157] block nbd0: Possible stuck request ffff888027147540: control (read@3072,1024B). Runtime 90 seconds [ 579.132635][T20947] erspan0: entered promiscuous mode [ 579.220142][T20947] erspan0: left promiscuous mode [ 579.452062][T20949] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3675'. [ 580.021049][T20996] validate_nla: 63 callbacks suppressed [ 580.021070][T20996] netlink: 'syz.1.3686': attribute type 1 has an invalid length. [ 580.048517][T20996] netlink: 'syz.1.3686': attribute type 2 has an invalid length. [ 580.068740][T20998] openvswitch: netlink: Key type 128 is out of range max 32 [ 580.086338][T20996] netlink: 'syz.1.3686': attribute type 3 has an invalid length. [ 580.107866][T20996] netlink: 236 bytes leftover after parsing attributes in process `syz.1.3686'. [ 580.148030][T20997] netlink: 'syz.1.3686': attribute type 1 has an invalid length. [ 580.162895][T20997] netlink: 'syz.1.3686': attribute type 2 has an invalid length. [ 580.192267][T20997] netlink: 'syz.1.3686': attribute type 3 has an invalid length. [ 580.207468][T20997] netlink: 236 bytes leftover after parsing attributes in process `syz.1.3686'. [ 580.310039][T20998] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3687'. [ 580.387141][T21004] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 580.464904][T21015] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3690'. [ 580.506060][T21015] nbd: illegal input index -1113835520 [ 580.644738][T21020] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 580.718036][T21020] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3693'. [ 580.781594][T21020] SET target dimension over the limit! [ 580.990073][T21033] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3697'. [ 581.041427][T21033] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3697'. [ 581.074867][T21033] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3697'. [ 581.147087][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 581.155205][ C1] lec:lec_tx_timeout: lec0 [ 581.160531][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 581.254808][T21044] team0: entered promiscuous mode [ 581.271916][T21044] team_slave_0: entered promiscuous mode [ 581.288574][T21044] team_slave_1: entered promiscuous mode [ 581.328868][T21044] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 581.391950][T21054] netlink: 'syz.1.3702': attribute type 1 has an invalid length. [ 581.432201][T21053] bond4: entered promiscuous mode [ 581.438917][T21053] bond4: entered allmulticast mode [ 581.492721][T21054] 8021q: adding VLAN 0 to HW filter on device bond7 [ 581.778887][T21071] netlink: 'syz.0.3707': attribute type 1 has an invalid length. [ 581.826163][T21071] 8021q: adding VLAN 0 to HW filter on device bond5 [ 581.848559][T21072] netlink: 'syz.0.3707': attribute type 20 has an invalid length. [ 581.877855][ T5821] block nbd1: Receive control failed (result -32) [ 581.880603][T19244] block nbd1: Receive control failed (result -32) [ 581.889483][ T5837] block nbd1: Receive control failed (result -32) [ 582.028292][T21079] netlink: 'syz.0.3710': attribute type 6 has an invalid length. [ 582.645282][T21106] lo speed is unknown, defaulting to 1000 [ 582.677892][T21106] lo speed is unknown, defaulting to 1000 [ 583.551913][T21142] syzkaller0: entered promiscuous mode [ 583.564071][T21142] syzkaller0: entered allmulticast mode [ 583.975414][T21155] __nla_validate_parse: 13 callbacks suppressed [ 583.975435][T21155] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3730'. [ 584.012076][T21154] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3730'. [ 584.106498][T21163] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3733'. [ 584.190115][T10581] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 584.316176][T21154] 8021q: adding VLAN 0 to HW filter on device bond1 [ 584.677661][T21179] lo speed is unknown, defaulting to 1000 [ 584.730370][T21179] lo speed is unknown, defaulting to 1000 [ 584.848343][T21186] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3741'. [ 584.879882][T21188] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3742'. [ 584.881358][T21186] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3741'. [ 584.971405][T21188] 8021q: adding VLAN 0 to HW filter on device bond3 [ 585.255057][T21196] validate_nla: 24 callbacks suppressed [ 585.255077][T21196] netlink: 'syz.4.3744': attribute type 14 has an invalid length. [ 585.294103][T21196] netlink: 'syz.4.3744': attribute type 6 has an invalid length. [ 585.655260][T21208] lo speed is unknown, defaulting to 1000 [ 585.719036][T21182] netlink: 280 bytes leftover after parsing attributes in process `syz.1.3739'. [ 585.761848][T21182] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3739'. [ 585.780894][T21216] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3749'. [ 585.791578][T21208] lo speed is unknown, defaulting to 1000 [ 585.825774][T21215] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3749'. [ 585.847992][T21215] netem: incorrect ge model size [ 585.856827][T21215] netem: change failed [ 585.884106][T21212] syzkaller0: entered promiscuous mode [ 585.903439][T21212] syzkaller0: entered allmulticast mode [ 586.090688][T21230] lo speed is unknown, defaulting to 1000 [ 586.144926][T21230] lo speed is unknown, defaulting to 1000 [ 586.166837][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 586.174996][ C1] lec:lec_tx_timeout: lec0 [ 586.180347][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 586.547323][T21236] x_tables: unsorted entry at hook 2 [ 587.423376][T21266] team0: No ports can be present during mode change [ 587.767479][T21274] gre0: left allmulticast mode [ 588.366691][T21293] x_tables: duplicate underflow at hook 1 [ 588.556646][T21301] lo speed is unknown, defaulting to 1000 [ 588.579875][T21301] lo speed is unknown, defaulting to 1000 [ 588.690100][T21308] lo speed is unknown, defaulting to 1000 [ 588.970925][T21318] bridge3: entered promiscuous mode [ 589.241444][T21308] lo speed is unknown, defaulting to 1000 [ 589.289094][T21333] tipc: Bearer : already 2 bearers with priority 10 [ 589.297987][T21333] tipc: Bearer : trying with adjusted priority [ 589.311864][T10580] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 589.314125][T21333] tipc: Enabling of bearer rejected, failed to enable media [ 589.393779][T21333] __nla_validate_parse: 4 callbacks suppressed [ 589.393812][T21333] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3780'. [ 589.507227][T21340] netlink: 'syz.2.3782': attribute type 1 has an invalid length. [ 589.711453][T21340] bond2: entered promiscuous mode [ 589.728664][T21340] 8021q: adding VLAN 0 to HW filter on device bond2 [ 589.758362][T21342] ipvlan2: entered allmulticast mode [ 589.771819][T21340] netlink: 'syz.2.3782': attribute type 2 has an invalid length. [ 589.781381][T21342] bond2: entered allmulticast mode [ 589.889665][T21347] bond2: (slave bridge4): making interface the new active one [ 589.908695][T21347] bridge4: entered promiscuous mode [ 589.920313][T21347] bridge4: entered allmulticast mode [ 589.939115][T21347] bond2: (slave bridge4): Enslaving as an active interface with an up link [ 589.992310][T21340] hmac(sha224: entered promiscuous mode [ 590.568517][T21370] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3789'. [ 590.578603][T21370] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3789'. [ 590.688848][T21372] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3790'. [ 591.159269][T21389] netlink: 200 bytes leftover after parsing attributes in process `syz.0.3794'. [ 591.186814][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 591.194934][ C1] lec:lec_tx_timeout: lec0 [ 591.199667][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 591.292445][T21400] lo speed is unknown, defaulting to 1000 [ 591.304558][T21402] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3797'. [ 591.323774][T21393] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 591.366079][T21393] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 591.389015][T21402] 8021q: adding VLAN 0 to HW filter on device bond8 [ 591.398124][T21400] lo speed is unknown, defaulting to 1000 [ 591.403973][T21408] bond8: option mode: unable to set because the bond device is up [ 591.457025][T21396] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3797'. [ 592.264082][T21436] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3809'. [ 592.342920][T21443] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3811'. [ 592.554628][T21444] bridge3: port 1(veth5) entered blocking state [ 592.562250][T21444] bridge3: port 1(veth5) entered disabled state [ 592.569585][T21444] veth5: entered allmulticast mode [ 592.585875][T21444] veth5: entered promiscuous mode [ 592.713807][T21443] vlan2: entered allmulticast mode [ 592.714725][T21453] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3814'. [ 592.727284][T21443] vlan0: entered allmulticast mode [ 592.733817][T21443] veth0_vlan: entered allmulticast mode [ 592.742365][T21443] bridge3: port 2(vlan2) entered blocking state [ 592.754507][T21443] bridge3: port 2(vlan2) entered disabled state [ 592.776928][T21443] vlan2: entered promiscuous mode [ 592.786805][T21443] vlan0: entered promiscuous mode [ 592.974731][T21462] ieee802154 phy1 wpan1: encryption failed: -22 [ 593.552703][T21487] bond0: (slave veth0_macvtap): Error: Device is in use and cannot be enslaved [ 593.765433][T21495] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 593.774575][T21495] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 594.058351][T21506] xt_limit: Overflow, try lower: 268435456/134217728 [ 594.268894][T21521] hsr0: entered promiscuous mode [ 594.504069][T21536] x_tables: duplicate underflow at hook 3 [ 594.550604][T21540] netlink: 'syz.2.3840': attribute type 1 has an invalid length. [ 594.608321][T21538] __nla_validate_parse: 3 callbacks suppressed [ 594.608342][T21538] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3840'. [ 594.645049][T21538] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 594.784086][T21546] gtp0: entered promiscuous mode [ 594.799720][T21546] gtp0: entered allmulticast mode [ 594.861098][T21551] bond6: option active_slave: mode dependency failed, not supported in mode balance-xor(2) [ 594.878565][T21551] bond6 (unregistering): Released all slaves [ 595.070562][T10580] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 595.119015][T21564] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3848'. [ 595.222075][T21573] tipc: Started in network mode [ 595.228110][T21573] tipc: Node identity e2615deaa2c6, cluster identity 4711 [ 595.235610][T21573] tipc: Enabled bearer , priority 0 [ 595.301888][T21573] netlink: 124 bytes leftover after parsing attributes in process `syz.4.3852'. [ 595.314083][T21573] netlink: 'syz.4.3852': attribute type 1 has an invalid length. [ 595.373901][T21573] 8021q: adding VLAN 0 to HW filter on device bond4 [ 595.390861][ T981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 595.430125][T21577] bond4: (slave syz_tun): Enslaving as a backup interface with an up link [ 595.538542][T21573] tipc: Disabling bearer [ 595.709290][T10569] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 595.731119][T21599] netlink: 'syz.4.3859': attribute type 1 has an invalid length. [ 595.813494][ T5895] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 595.884393][T21599] 8021q: adding VLAN 0 to HW filter on device bond5 [ 595.920250][T21611] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3859'. [ 595.952541][T21602] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3860'. [ 596.024274][T21603] bond6: Unable to set down delay as MII monitoring is disabled [ 596.051086][T21603] bond6 (unregistering): Released all slaves [ 596.206934][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 596.215159][ C1] lec:lec_tx_timeout: lec0 [ 596.220505][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 596.345382][T21616] bridge0: port 2(bridge_slave_1) entered disabled state [ 596.353071][T21616] bridge0: port 1(bridge_slave_0) entered disabled state [ 596.362427][T10578] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 596.498026][ T5824] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 596.947708][T21616] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 597.003914][T21616] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 597.531392][T21620] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 597.543012][T21620] bond5: (slave batadv1): making interface the new active one [ 597.553629][T21620] bond5: (slave batadv1): Enslaving as an active interface with an up link [ 597.575629][ T5895] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 597.681290][T10580] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 597.715207][T10580] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 597.745835][T10580] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 597.780326][T10580] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 597.822804][T21605] lo speed is unknown, defaulting to 1000 [ 597.855976][T10580] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 597.880679][T10580] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 597.903782][T10580] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 597.926624][T10580] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 597.953125][T21605] lo speed is unknown, defaulting to 1000 [ 597.991419][T21658] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3870'. [ 598.588022][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 598.830065][T21683] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3877'. [ 598.931663][T10569] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 599.217545][T21701] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3882'. [ 599.388854][T21642] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 599.496269][T21715] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 599.804307][T21723] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3888'. [ 599.966298][T21730] lo speed is unknown, defaulting to 1000 [ 599.993244][T21730] lo speed is unknown, defaulting to 1000 [ 600.404279][T21741] bond0: entered promiscuous mode [ 600.425587][T21741] bond_slave_0: entered promiscuous mode [ 600.448866][T21741] bond_slave_1: entered promiscuous mode [ 600.472033][T21741] mac80211_hwsim hwsim49 wlan1: entered promiscuous mode [ 600.506006][T21741] batadv0: entered promiscuous mode [ 600.532074][T21741] debugfs: 'hsr0' already exists in 'hsr' [ 600.551858][T21741] Cannot create hsr debugfs directory [ 600.667911][ T7868] net_ratelimit: 1 callbacks suppressed [ 600.667944][ T7868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 600.831198][T10578] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 601.092218][T21753] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3896'. [ 601.187222][T21759] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3896'. [ 601.468457][T10569] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 601.707975][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 601.803240][T21780] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3902'. [ 601.834199][T21780] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3902'. [ 601.866462][T21780] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3902'. [ 601.925837][T10578] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 601.935402][T21780] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3902'. [ 601.950626][T10578] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 601.960506][T21780] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3902'. [ 601.983255][T10578] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 602.001602][T21780] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3902'. [ 602.013667][T10578] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 602.036188][T21772] syzkaller0: entered promiscuous mode [ 602.060484][T21772] syzkaller0: entered allmulticast mode [ 602.083825][T21786] netlink: 88 bytes leftover after parsing attributes in process `syz.3.3903'. [ 602.106741][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5890 ms [ 602.114832][ C1] lec:lec_tx_timeout: lec0 [ 602.121192][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 602.137715][T10575] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 602.748045][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 603.391683][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 603.605410][T21840] syzkaller1: entered promiscuous mode [ 603.631811][T21840] syzkaller1: entered allmulticast mode [ 603.820277][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 603.905383][T21854] netlink: 'syz.1.3918': attribute type 22 has an invalid length. [ 603.934118][T21854] netlink: 'syz.1.3918': attribute type 22 has an invalid length. [ 603.982328][T21856] netlink: 'syz.4.3921': attribute type 1 has an invalid length. [ 604.045212][T21856] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 604.160402][T21854] hsr_slave_1 (unregistering): left promiscuous mode [ 604.310410][T21874] lo speed is unknown, defaulting to 1000 [ 604.319106][T21874] lo speed is unknown, defaulting to 1000 [ 604.669331][T10567] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 604.784341][T21893] netlink: 'syz.3.3929': attribute type 1 has an invalid length. [ 604.834719][ T7868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 605.148904][ T7850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 605.251506][T21911] sctp: [Deprecated]: syz.2.3934 (pid 21911) Use of int in maxseg socket option. [ 605.251506][T21911] Use struct sctp_assoc_value instead [ 605.319098][T21907] syzkaller1: entered promiscuous mode [ 605.333472][T21907] syzkaller1: entered allmulticast mode [ 605.482701][T21911] lo speed is unknown, defaulting to 1000 [ 605.528253][T21911] lo speed is unknown, defaulting to 1000 [ 605.633118][T21922] sctp: [Deprecated]: syz.4.3938 (pid 21922) Use of int in max_burst socket option. [ 605.633118][T21922] Use struct sctp_assoc_value instead [ 605.868011][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 606.083677][T21930] __nla_validate_parse: 8 callbacks suppressed [ 606.084906][T21930] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3940'. [ 606.144549][T21928] lo speed is unknown, defaulting to 1000 [ 606.181789][T21931] lo speed is unknown, defaulting to 1000 [ 606.181817][T21928] lo speed is unknown, defaulting to 1000 [ 606.594166][T10567] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 606.618228][T21951] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3944'. [ 606.719023][T21931] lo speed is unknown, defaulting to 1000 [ 606.792724][T21957] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3946'. [ 606.810553][T21958] netlink: 168 bytes leftover after parsing attributes in process `syz.0.3946'. [ 606.908917][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 607.137199][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 607.145333][ C1] lec:lec_tx_timeout: lec0 [ 607.150863][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 607.201108][T21971] netlink: 276 bytes leftover after parsing attributes in process `syz.0.3949'. [ 607.229041][T10578] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 607.241715][T10569] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 607.551852][T21979] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3952'. [ 607.601896][T21980] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3952'. [ 607.630809][T21980] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3952'. [ 607.959951][ T7868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 608.451737][T22004] netlink: 'syz.0.3956': attribute type 14 has an invalid length. [ 608.477862][T22002] can: request_module (can-proto-5) failed. [ 608.601304][T22008] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3957'. [ 608.799724][T22019] block nbd3: not configured, cannot reconfigure [ 608.987863][ T7868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 609.155507][ T5157] block nbd0: Possible stuck request ffff888027147000: control (read@0,1024B). Runtime 120 seconds [ 609.155625][ T7868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 609.166665][ T5157] block nbd0: Possible stuck request ffff8880271471c0: control (read@1024,1024B). Runtime 120 seconds [ 609.167212][ T5157] block nbd0: Possible stuck request ffff888027147380: control (read@2048,1024B). Runtime 120 seconds [ 609.167241][ T5157] block nbd0: Possible stuck request ffff888027147540: control (read@3072,1024B). Runtime 120 seconds [ 609.441747][T22042] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3970'. [ 609.707122][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 609.788636][T10567] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 609.809819][T22058] bridge: RTM_NEWNEIGH with invalid state 0x0 [ 610.031346][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 611.078727][ T9] net_ratelimit: 2 callbacks suppressed [ 611.078747][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 611.148143][T22130] can: request_module (can-proto-5) failed. [ 611.460641][T22149] syzkaller1: tun_chr_ioctl cmd 2147767506 [ 611.607694][T22157] __nla_validate_parse: 5 callbacks suppressed [ 611.607714][T22157] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3998'. [ 611.776277][T22171] GUP no longer grows the stack in syz.2.3998 (22171): 200000003000-20000000a000 (200000001000) [ 611.796246][T22170] nbd: must specify a device to reconfigure [ 611.823530][T22171] CPU: 0 UID: 0 PID: 22171 Comm: syz.2.3998 Not tainted syzkaller #0 PREEMPT(full) [ 611.823562][T22171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 611.823577][T22171] Call Trace: [ 611.823586][T22171] [ 611.823597][T22171] dump_stack_lvl+0xe8/0x150 [ 611.823643][T22171] __get_user_pages+0x2453/0x29d0 [ 611.823698][T22171] ? __gup_longterm_locked+0xc4e/0x1630 [ 611.823730][T22171] ? down_read_killable+0x1bb/0x340 [ 611.823762][T22171] ? try_get_folio+0xec/0x650 [ 611.823807][T22171] __gup_longterm_locked+0xdcf/0x1630 [ 611.823866][T22171] gup_fast_fallback+0x1d82/0x22e0 [ 611.823932][T22171] ? __pfx_gup_fast_fallback+0x10/0x10 [ 611.823978][T22171] ? is_valid_gup_args+0x11f/0x200 [ 611.824009][T22171] ? get_user_pages_fast+0x4d/0xb0 [ 611.824041][T22171] __iov_iter_get_pages_alloc+0x3b6/0xb10 [ 611.824074][T22171] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 611.824115][T22171] iov_iter_get_pages2+0x5e/0xa0 [ 611.824142][T22171] __se_sys_vmsplice+0x7b3/0x1490 [ 611.824198][T22171] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 611.824235][T22171] ? __pfx_futex_wake+0x10/0x10 [ 611.824267][T22171] ? lockdep_hardirqs_on+0x7a/0x110 [ 611.824357][T22171] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 611.824384][T22171] do_syscall_64+0x15f/0xf80 [ 611.824411][T22171] ? trace_irq_disable+0x3b/0x140 [ 611.824435][T22171] ? clear_bhb_loop+0x40/0x90 [ 611.824464][T22171] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 611.824487][T22171] RIP: 0033:0x7f142b79c819 [ 611.824509][T22171] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 611.824529][T22171] RSP: 002b:00007f142c6e0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 611.824556][T22171] RAX: ffffffffffffffda RBX: 00007f142ba16180 RCX: 00007f142b79c819 [ 611.824573][T22171] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 000000000000000a [ 611.824587][T22171] RBP: 00007f142b832c91 R08: 0000000000000000 R09: 0000000000000000 [ 611.824602][T22171] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 611.824614][T22171] R13: 00007f142ba16218 R14: 00007f142ba16180 R15: 00007ffeb149bf18 [ 611.824660][T22171] [ 612.154394][T22157] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 612.167036][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 612.175144][ C1] lec:lec_tx_timeout: lec0 [ 612.180512][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 612.213815][T22157] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 612.223534][T22177] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4000'. [ 612.239625][T22188] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4003'. [ 612.269171][T22157] bond0 (unregistering): Released all slaves [ 612.281177][T22177] nbd: socks must be embedded in a SOCK_ITEM attr [ 612.290444][T22187] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4000'. [ 612.302753][T22187] nbd: device at index 64 is going down [ 612.356286][T10576] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 612.498797][T22182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 612.512908][T22182] 8021q: adding VLAN 0 to HW filter on device team0 [ 612.525861][T22182] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 612.542570][T19884] udevd[19884]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 612.556200][T17928] udevd[17928]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 612.731793][T22168] lo speed is unknown, defaulting to 1000 [ 612.781298][T22168] lo speed is unknown, defaulting to 1000 [ 612.787581][T22196] netlink: 'syz.2.4004': attribute type 11 has an invalid length. [ 612.787611][T22196] netlink: 199788 bytes leftover after parsing attributes in process `syz.2.4004'. [ 613.008722][T22203] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4008'. [ 613.033405][T22203] nbd: illegal input index -1113835520 [ 613.059309][T22203] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4008'. [ 613.142086][T22203] 8021q: adding VLAN 0 to HW filter on device bond2 [ 613.181536][T22203] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4008'. [ 613.199157][T22209] bridge0: port 3(syz_tun) entered disabled state [ 613.220861][T22209] bridge0: port 1(bridge_slave_0) entered disabled state [ 613.231080][T22209] bridge0: port 2(bridge_slave_1) entered disabled state [ 613.298403][T22203] macsec1: entered promiscuous mode [ 613.303786][T22203] bond2: entered promiscuous mode [ 613.311449][T22203] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 613.328775][T22208] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4009'. [ 613.346908][T22208] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4009'. [ 613.367253][T22203] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 613.396351][T22213] xt_hashlimit: size too large, truncated to 1048576 [ 614.345640][T22256] netlink: 'syz.4.4022': attribute type 1 has an invalid length. [ 614.412408][T22256] bond6: (slave bridge4): making interface the new active one [ 614.421862][T22256] bond6: (slave bridge4): Enslaving as an active interface with an up link [ 614.504251][T22263] delete_channel: no stack [ 614.675269][T22270] IPVS: set_ctl: invalid protocol: 44 10.1.1.1:20005 [ 614.704580][T22270] IPVS: rr: FWM 3 0x00000003 - no destination available [ 614.919987][T22278] ip6erspan1: entered allmulticast mode [ 615.052249][T22290] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 615.083275][T22288] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 615.196425][T22294] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 615.232237][T22294] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 615.290792][T22294] batadv0 (unregistering): left promiscuous mode [ 615.354359][T22304] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 615.378960][T22303] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 615.431250][T22308] hsr0: entered promiscuous mode [ 616.021866][ T29] audit: type=1800 audit(1776464991.193:9): pid=22331 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4045" name="blkio.bfq.time_recursive" dev="tmpfs" ino=970 res=0 errno=0 [ 616.355002][T22342] lo speed is unknown, defaulting to 1000 [ 616.379735][T22342] lo speed is unknown, defaulting to 1000 [ 616.436500][T22334] lo speed is unknown, defaulting to 1000 [ 616.503921][T22348] bond2: entered promiscuous mode [ 616.528924][T22348] 8021q: adding VLAN 0 to HW filter on device bond2 [ 616.761482][T22356] bond2: (slave vti0): refused to change device type [ 616.832303][T22345] lo speed is unknown, defaulting to 1000 [ 616.982767][T22352] lo speed is unknown, defaulting to 1000 [ 617.059131][T22334] lo speed is unknown, defaulting to 1000 [ 617.186820][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 617.194909][ C1] lec:lec_tx_timeout: lec0 [ 617.200351][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 617.547737][T22376] lo speed is unknown, defaulting to 1000 [ 617.568688][T22375] __nla_validate_parse: 17 callbacks suppressed [ 617.568711][T22375] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4056'. [ 617.789549][T22345] lo speed is unknown, defaulting to 1000 [ 618.107775][T10575] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 618.209266][T22352] lo speed is unknown, defaulting to 1000 [ 618.449032][T22376] lo speed is unknown, defaulting to 1000 [ 618.883732][T22421] netlink: 'syz.1.4060': attribute type 2 has an invalid length. [ 618.892441][T22422] netlink: 'syz.1.4060': attribute type 2 has an invalid length. [ 619.024894][T22421] !: entered promiscuous mode [ 619.111697][T22425] netlink: 9 bytes leftover after parsing attributes in process `syz.1.4061'. [ 620.086434][T22448] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4067'. [ 620.101119][T22450] netlink: 'syz.3.4068': attribute type 61 has an invalid length. [ 620.115241][T22450] netlink: 'syz.3.4068': attribute type 62 has an invalid length. [ 620.123755][T22448] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4067'. [ 620.135980][T22450] netlink: 'syz.3.4068': attribute type 58 has an invalid length. [ 620.147096][T22448] netlink: 'syz.1.4067': attribute type 1 has an invalid length. [ 620.150593][T22450] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4068'. [ 620.671202][T22459] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4072'. [ 621.003952][T22471] netlink: 'syz.1.4074': attribute type 16 has an invalid length. [ 621.026390][T22466] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 621.081413][T22471] netlink: 'syz.1.4074': attribute type 17 has an invalid length. [ 621.093138][T22467] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 621.192812][ T9] IPVS: starting estimator thread 0... [ 621.263782][T22486] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4074'. [ 621.296916][T22485] IPVS: using max 27 ests per chain, 64800 per kthread [ 621.400010][T22489] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 621.445542][T22471] bridge0: port 1(bridge_slave_0) entered blocking state [ 621.452873][T22471] bridge0: port 1(bridge_slave_0) entered forwarding state [ 621.800988][T22481] lo speed is unknown, defaulting to 1000 [ 621.835306][T22490] lo speed is unknown, defaulting to 1000 [ 621.851411][T22481] lo speed is unknown, defaulting to 1000 [ 622.201618][T22513] netlink: 'syz.4.4083': attribute type 1 has an invalid length. [ 622.209582][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 622.209621][ C1] lec:lec_tx_timeout: lec0 [ 622.217829][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 622.374922][T22490] lo speed is unknown, defaulting to 1000 [ 622.395041][T22518] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4085'. [ 622.450107][T22518] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4085'. [ 622.576235][T22528] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4088'. [ 622.601846][T22529] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4088'. [ 622.853613][T22545] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4091'. [ 622.925127][T22545] netlink: 'syz.1.4091': attribute type 32 has an invalid length. [ 622.955866][T22545] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4091'. [ 622.985959][T22545] netlink: 'syz.1.4091': attribute type 32 has an invalid length. [ 623.232894][T10575] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 623.280873][T22555] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 623.336666][T22555] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4093'. [ 623.925085][T22573] tipc: Failed to obtain node identity [ 623.954802][T22573] tipc: Enabling of bearer rejected, failed to enable media [ 624.233986][T22590] batadv0: entered promiscuous mode [ 624.249144][T22590] batadv0: entered allmulticast mode [ 624.513502][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.560646][T22603] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4105'. [ 624.721580][T22600] lo speed is unknown, defaulting to 1000 [ 624.741785][T22600] lo speed is unknown, defaulting to 1000 [ 624.848477][T22617] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4109'. [ 624.982085][T22624] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4111'. [ 625.095464][T22630] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4113'. [ 625.146125][T22630] macsec2: entered promiscuous mode [ 625.167457][T22630] macsec2: entered allmulticast mode [ 625.180558][T22630] team0: entered allmulticast mode [ 625.193917][T22630] team_slave_0: entered allmulticast mode [ 625.213777][T22630] team_slave_1: entered allmulticast mode [ 625.231222][T22630] 8021q: adding VLAN 0 to HW filter on device macsec2 [ 625.252970][T22630] team0: Device macsec2 is already an upper device of the team interface [ 625.263434][T22630] team0: left allmulticast mode [ 625.269094][T22630] team_slave_0: left allmulticast mode [ 625.274850][T22630] team_slave_1: left allmulticast mode [ 625.378070][T22635] netlink: 'syz.0.4114': attribute type 2 has an invalid length. [ 625.451891][T22635] !: entered promiscuous mode [ 625.529348][T22646] netlink: 'syz.3.4115': attribute type 1 has an invalid length. [ 625.560398][T22646] netlink: 96 bytes leftover after parsing attributes in process `syz.3.4115'. [ 625.577217][T22646] netlink: 1 bytes leftover after parsing attributes in process `syz.3.4115'. [ 625.722194][T22652] netlink: 'syz.4.4118': attribute type 5 has an invalid length. [ 625.789949][T22659] xt_hashlimit: max too large, truncated to 1048576 [ 626.103360][T22661] lo speed is unknown, defaulting to 1000 [ 626.131815][T22661] lo speed is unknown, defaulting to 1000 [ 626.234242][T22669] ip6gre1: entered promiscuous mode [ 626.244508][T22669] ip6gre1: entered allmulticast mode [ 627.098273][T22698] lo speed is unknown, defaulting to 1000 [ 627.106318][T22698] lo speed is unknown, defaulting to 1000 [ 628.346729][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 6130 ms [ 628.354918][ C1] lec:lec_tx_timeout: lec0 [ 628.362115][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 628.406032][T22732] netlink: 'syz.2.4140': attribute type 11 has an invalid length. [ 628.455607][T22731] netlink: 'syz.3.4139': attribute type 11 has an invalid length. [ 628.476537][T22731] netlink: 'syz.3.4139': attribute type 23 has an invalid length. [ 628.513094][T22731] __nla_validate_parse: 2 callbacks suppressed [ 628.513120][T22731] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4139'. [ 628.679435][T22739] lo speed is unknown, defaulting to 1000 [ 628.730104][T22739] lo speed is unknown, defaulting to 1000 [ 628.987768][T10576] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 629.089175][T22755] netlink: 84 bytes leftover after parsing attributes in process `syz.4.4145'. [ 629.180522][T22755] syzkaller0: entered promiscuous mode [ 629.193969][T22755] syzkaller0: entered allmulticast mode [ 629.613168][T22781] netlink: 'syz.4.4151': attribute type 1 has an invalid length. [ 629.645369][T22781] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4151'. [ 629.830666][T22778] lo speed is unknown, defaulting to 1000 [ 629.841590][T22793] netlink: zone id is out of range [ 629.849098][T22778] lo speed is unknown, defaulting to 1000 [ 629.855038][T22793] netlink: zone id is out of range [ 629.861419][T22793] netlink: zone id is out of range [ 629.866670][T22793] netlink: zone id is out of range [ 629.872257][T22793] netlink: zone id is out of range [ 629.877659][T22793] netlink: zone id is out of range [ 629.883060][T22793] netlink: zone id is out of range [ 629.888699][T22793] netlink: zone id is out of range [ 629.916650][T22793] netlink: zone id is out of range [ 629.941872][T22793] netlink: zone id is out of range [ 630.229538][ T7882] IPVS: starting estimator thread 0... [ 630.327270][T22808] IPVS: using max 24 ests per chain, 57600 per kthread [ 630.966574][T22828] netlink: 'syz.2.4162': attribute type 2 has an invalid length. [ 631.005313][T22828] netlink: 'syz.2.4162': attribute type 11 has an invalid length. [ 631.020451][T22828] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4162'. [ 631.138939][T22828] netlink: 'syz.2.4162': attribute type 1 has an invalid length. [ 631.483504][T22846] netlink: 128 bytes leftover after parsing attributes in process `syz.4.4165'. [ 631.505023][T22846] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4165'. [ 631.530454][T22846] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4165'. [ 631.946072][T22869] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4172'. [ 631.965376][T22869] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4172'. [ 632.271254][T22894] netlink: 'syz.3.4178': attribute type 1 has an invalid length. [ 632.305332][T22894] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4178'. [ 632.335250][T22894] netlink: 'syz.3.4178': attribute type 1 has an invalid length. [ 632.793261][T22920] bond6: entered promiscuous mode [ 632.814376][T22920] 8021q: adding VLAN 0 to HW filter on device bond6 [ 632.858111][T22920] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 633.103280][T22933] netlink: 'syz.3.4186': attribute type 2 has an invalid length. [ 633.216332][T22941] FAULT_INJECTION: forcing a failure. [ 633.216332][T22941] name failslab, interval 1, probability 0, space 0, times 0 [ 633.248649][T22941] CPU: 1 UID: 0 PID: 22941 Comm: syz.1.4188 Not tainted syzkaller #0 PREEMPT(full) [ 633.248681][T22941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 633.248695][T22941] Call Trace: [ 633.248704][T22941] [ 633.248714][T22941] dump_stack_lvl+0xe8/0x150 [ 633.248757][T22941] should_fail_ex+0x412/0x560 [ 633.248796][T22941] should_failslab+0xa8/0x100 [ 633.248822][T22941] __kmalloc_noprof+0xe8/0x760 [ 633.248856][T22941] ? nf_tables_newrule+0x152c/0x28b0 [ 633.248881][T22941] ? nla_strcmp+0x106/0x140 [ 633.248908][T22941] nf_tables_newrule+0x152c/0x28b0 [ 633.248958][T22941] ? __pfx_nf_tables_newrule+0x10/0x10 [ 633.248980][T22941] ? nfnl_pernet+0x23/0x240 [ 633.249009][T22941] ? nfnl_pernet+0x23/0x240 [ 633.249049][T22941] ? __nla_parse+0x40/0x60 [ 633.249076][T22941] nfnetlink_rcv+0x123e/0x27b0 [ 633.249148][T22941] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 633.249197][T22941] ? ref_tracker_free+0x693/0x840 [ 633.249266][T22941] ? __netlink_deliver_tap+0x807/0x850 [ 633.249309][T22941] ? netlink_deliver_tap+0x2e/0x1b0 [ 633.249340][T22941] ? netlink_deliver_tap+0x2e/0x1b0 [ 633.249379][T22941] netlink_unicast+0x75c/0x8e0 [ 633.249421][T22941] netlink_sendmsg+0x813/0xb40 [ 633.249465][T22941] ? __pfx_netlink_sendmsg+0x10/0x10 [ 633.249521][T22941] ? aa_sock_msg_perm+0xf1/0x1b0 [ 633.249554][T22941] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 633.249592][T22941] ____sys_sendmsg+0x972/0x9f0 [ 633.249626][T22941] ? __might_fault+0xaf/0x130 [ 633.249663][T22941] ? __pfx_____sys_sendmsg+0x10/0x10 [ 633.249706][T22941] ? import_iovec+0x73/0xa0 [ 633.249734][T22941] ___sys_sendmsg+0x2a5/0x360 [ 633.249766][T22941] ? __lock_acquire+0x6b5/0x2cf0 [ 633.249801][T22941] ? __pfx____sys_sendmsg+0x10/0x10 [ 633.249877][T22941] ? __fget_files+0x2a/0x420 [ 633.249905][T22941] ? __fget_files+0x3a0/0x420 [ 633.249951][T22941] __x64_sys_sendmsg+0x1bd/0x2a0 [ 633.249990][T22941] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 633.250036][T22941] ? __pfx_ksys_write+0x10/0x10 [ 633.250080][T22941] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 633.250104][T22941] do_syscall_64+0x15f/0xf80 [ 633.250130][T22941] ? trace_irq_disable+0x3b/0x140 [ 633.250154][T22941] ? clear_bhb_loop+0x40/0x90 [ 633.250182][T22941] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 633.250203][T22941] RIP: 0033:0x7f438779c819 [ 633.250224][T22941] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 633.250243][T22941] RSP: 002b:00007f43885dc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 633.250268][T22941] RAX: ffffffffffffffda RBX: 00007f4387a15fa0 RCX: 00007f438779c819 [ 633.250284][T22941] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 633.250297][T22941] RBP: 00007f43885dc090 R08: 0000000000000000 R09: 0000000000000000 [ 633.250311][T22941] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 633.250323][T22941] R13: 00007f4387a16038 R14: 00007f4387a15fa0 R15: 00007ffdf26948b8 [ 633.250361][T22941] [ 634.102667][T22964] __nla_validate_parse: 2 callbacks suppressed [ 634.102689][T22964] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4194'. [ 634.109080][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5740 ms [ 634.109108][ C1] lec:lec_tx_timeout: lec0 [ 634.119136][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 634.139199][T10576] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 634.333206][T22967] macsec1: entered allmulticast mode [ 634.376597][T22967] macsec0: entered allmulticast mode [ 634.382594][T22977] netlink: 'syz.0.4197': attribute type 13 has an invalid length. [ 634.408186][T22967] veth1_macvtap: entered allmulticast mode [ 634.469952][T22973] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4197'. [ 634.499783][T22980] netlink: 220 bytes leftover after parsing attributes in process `syz.4.4198'. [ 634.516169][T22980] tc_dump_action: action bad kind [ 634.673595][T22977] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 634.860033][T22977] bond7: (slave vcan1): refused to change device type [ 635.203104][T23010] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4208'. [ 635.783360][T23029] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4213'. [ 635.793648][T23029] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4213'. [ 636.016330][T23041] net_ratelimit: 336 callbacks suppressed [ 636.016352][T23041] openvswitch: netlink: Missing key (keys=40, expected=80) [ 636.053965][T23041] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4217'. [ 636.419508][T23049] bridge0: entered promiscuous mode [ 636.439570][T23049] bridge0: port 3(vlan0) entered blocking state [ 636.457352][T23049] bridge0: port 3(vlan0) entered disabled state [ 636.467830][T23049] vlan0: entered allmulticast mode [ 636.477603][T23049] bridge0: entered allmulticast mode [ 636.494023][T23049] vlan0: left allmulticast mode [ 636.502371][T23049] bridge0: left allmulticast mode [ 636.508793][T23049] bridge0: left promiscuous mode [ 636.523568][T23056] netlink: 144 bytes leftover after parsing attributes in process `syz.0.4223'. [ 636.538018][T23057] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4224'. [ 636.560112][T23053] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4223'. [ 636.869728][T23054] syzkaller0: entered promiscuous mode [ 636.885113][T23054] syzkaller0: entered allmulticast mode [ 637.552293][T23094] lo speed is unknown, defaulting to 1000 [ 637.591558][T23094] lo speed is unknown, defaulting to 1000 [ 637.971588][T23111] netlink: 'syz.2.4240': attribute type 20 has an invalid length. [ 637.987941][T23111] netlink: 'syz.2.4240': attribute type 21 has an invalid length. [ 638.372201][T23127] pimreg: entered allmulticast mode [ 638.420083][T23132] netlink: 'syz.2.4246': attribute type 1 has an invalid length. [ 638.496993][T23134] netlink: 'syz.1.4247': attribute type 10 has an invalid length. [ 638.590922][T23139] FAULT_INJECTION: forcing a failure. [ 638.590922][T23139] name failslab, interval 1, probability 0, space 0, times 0 [ 638.611867][T23139] CPU: 1 UID: 0 PID: 23139 Comm: syz.4.4249 Not tainted syzkaller #0 PREEMPT(full) [ 638.611899][T23139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 638.611913][T23139] Call Trace: [ 638.611922][T23139] [ 638.611931][T23139] dump_stack_lvl+0xe8/0x150 [ 638.611971][T23139] should_fail_ex+0x412/0x560 [ 638.612005][T23139] ? alloc_inode+0x6a/0x1b0 [ 638.612039][T23139] should_failslab+0xa8/0x100 [ 638.612065][T23139] kmem_cache_alloc_lru_noprof+0x87/0x640 [ 638.612097][T23139] ? simple_start_creating+0xcc/0x110 [ 638.612135][T23139] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 638.612160][T23139] alloc_inode+0x6a/0x1b0 [ 638.612188][T23139] new_inode+0x22/0x170 [ 638.612221][T23139] __debugfs_create_file+0xb8/0x400 [ 638.612249][T23139] debugfs_create_file_full+0x3f/0x60 [ 638.612279][T23139] ref_tracker_dir_debugfs+0x197/0x360 [ 638.612313][T23139] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 638.612378][T23139] ? __kvmalloc_node_noprof+0x545/0x8a0 [ 638.612400][T23139] ? alloc_netdev_mqs+0xa6/0x11b0 [ 638.612436][T23139] ? __raw_spin_lock_init+0x45/0x100 [ 638.612464][T23139] alloc_netdev_mqs+0x272/0x11b0 [ 638.612487][T23139] ? __pfx_ipgre_tunnel_setup+0x10/0x10 [ 638.612527][T23139] rtnl_create_link+0x31f/0xd70 [ 638.612560][T23139] rtnl_newlink_create+0x277/0xb70 [ 638.612591][T23139] ? __pfx___nla_validate_parse+0x10/0x10 [ 638.612620][T23139] ? __mutex_lock+0x606/0x1550 [ 638.612650][T23139] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 638.612687][T23139] ? __pfx___mutex_lock+0x10/0x10 [ 638.612728][T23139] ? ns_capable+0x89/0xe0 [ 638.612761][T23139] rtnl_newlink+0x166a/0x1bb0 [ 638.612792][T23139] ? __lock_acquire+0x6b5/0x2cf0 [ 638.612834][T23139] ? __pfx_rtnl_newlink+0x10/0x10 [ 638.612870][T23139] ? __lock_acquire+0x6b5/0x2cf0 [ 638.612902][T23139] ? __lock_acquire+0x6b5/0x2cf0 [ 638.612942][T23139] ? unwind_next_frame+0xa6/0x2550 [ 638.612971][T23139] ? unwind_next_frame+0xa6/0x2550 [ 638.612996][T23139] ? is_bpf_text_address+0x26/0x2b0 [ 638.613036][T23139] ? is_bpf_text_address+0x26/0x2b0 [ 638.613069][T23139] ? __lock_acquire+0x6b5/0x2cf0 [ 638.613102][T23139] ? kernel_text_address+0xa5/0xe0 [ 638.613128][T23139] ? __kernel_text_address+0xd/0x30 [ 638.613151][T23139] ? unwind_get_return_address+0x4d/0x90 [ 638.613171][T23139] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 638.613197][T23139] ? arch_stack_walk+0xfb/0x150 [ 638.613232][T23139] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 638.613278][T23139] ? __pfx_rtnl_newlink+0x10/0x10 [ 638.613307][T23139] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 638.613334][T23139] ? kmem_cache_alloc_node_noprof+0x384/0x690 [ 638.613364][T23139] ? netlink_sendmsg+0x5d4/0xb40 [ 638.613398][T23139] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 638.613432][T23139] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 638.613462][T23139] ? __lock_acquire+0x6b5/0x2cf0 [ 638.613505][T23139] netlink_rcv_skb+0x232/0x4b0 [ 638.613538][T23139] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 638.613575][T23139] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 638.613621][T23139] ? netlink_deliver_tap+0x2e/0x1b0 [ 638.613652][T23139] ? netlink_deliver_tap+0x2e/0x1b0 [ 638.613690][T23139] netlink_unicast+0x75c/0x8e0 [ 638.613732][T23139] netlink_sendmsg+0x813/0xb40 [ 638.613775][T23139] ? __pfx_netlink_sendmsg+0x10/0x10 [ 638.613812][T23139] ? aa_sock_msg_perm+0xf1/0x1b0 [ 638.613843][T23139] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 638.613881][T23139] ____sys_sendmsg+0x972/0x9f0 [ 638.613914][T23139] ? __might_fault+0xaf/0x130 [ 638.613951][T23139] ? __pfx_____sys_sendmsg+0x10/0x10 [ 638.613995][T23139] ? import_iovec+0x73/0xa0 [ 638.614020][T23139] ___sys_sendmsg+0x2a5/0x360 [ 638.614052][T23139] ? __lock_acquire+0x6b5/0x2cf0 [ 638.614086][T23139] ? __pfx____sys_sendmsg+0x10/0x10 [ 638.614127][T23139] ? kstrtouint+0x6e/0xe0 [ 638.614188][T23139] ? __fget_files+0x2a/0x420 [ 638.614215][T23139] ? __fget_files+0x3a0/0x420 [ 638.614255][T23139] __sys_sendmmsg+0x27c/0x4e0 [ 638.614297][T23139] ? __pfx___sys_sendmmsg+0x10/0x10 [ 638.614328][T23139] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 638.614388][T23139] ? ksys_write+0x242/0x270 [ 638.614429][T23139] ? __pfx_ksys_write+0x10/0x10 [ 638.614470][T23139] __x64_sys_sendmmsg+0xa0/0xc0 [ 638.614504][T23139] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 638.614528][T23139] do_syscall_64+0x15f/0xf80 [ 638.614553][T23139] ? trace_irq_disable+0x3b/0x140 [ 638.614577][T23139] ? clear_bhb_loop+0x40/0x90 [ 638.614604][T23139] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 638.614625][T23139] RIP: 0033:0x7f84de99c819 [ 638.614646][T23139] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 638.614665][T23139] RSP: 002b:00007f84df90e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 638.614690][T23139] RAX: ffffffffffffffda RBX: 00007f84dec15fa0 RCX: 00007f84de99c819 [ 638.614706][T23139] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000007 [ 638.614721][T23139] RBP: 00007f84df90e090 R08: 0000000000000000 R09: 0000000000000000 [ 638.614735][T23139] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 638.614747][T23139] R13: 00007f84dec16038 R14: 00007f84dec15fa0 R15: 00007ffce74557e8 [ 638.614785][T23139] [ 638.614904][T23139] debugfs: out of free dentries, can not create file 'netdev@ffff888057e1c620' [ 639.133019][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 639.133056][ C1] lec:lec_tx_timeout: lec0 [ 639.145428][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 639.167323][T23140] __nla_validate_parse: 8 callbacks suppressed [ 639.167348][T23140] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4246'. [ 639.205401][T23140] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4246'. [ 639.227342][ T5157] block nbd0: Possible stuck request ffff888027147000: control (read@0,1024B). Runtime 150 seconds [ 639.238629][ T5157] block nbd0: Possible stuck request ffff8880271471c0: control (read@1024,1024B). Runtime 150 seconds [ 639.249788][ T5157] block nbd0: Possible stuck request ffff888027147380: control (read@2048,1024B). Runtime 150 seconds [ 639.264156][ T5157] block nbd0: Possible stuck request ffff888027147540: control (read@3072,1024B). Runtime 150 seconds [ 639.316543][T23132] sit0: left promiscuous mode [ 639.355797][T23132] bridge0: port 2(bridge_slave_1) entered disabled state [ 639.363585][T23132] bridge0: port 1(bridge_slave_0) entered disabled state [ 639.378808][T23132] team_slave_0: left promiscuous mode [ 639.386638][T23132] team_slave_1: left promiscuous mode [ 639.554384][T23132] hsr0: left promiscuous mode [ 639.602852][T23132] veth1_macvtap: left allmulticast mode [ 639.672032][T23132] bridge3: left promiscuous mode [ 639.682711][T23132] bond2: left promiscuous mode [ 639.690738][T23132] bridge4: left promiscuous mode [ 639.699284][T23132] ipvlan2: left allmulticast mode [ 639.704815][T23132] bond2: left allmulticast mode [ 639.710607][T23132] bridge4: left allmulticast mode [ 639.725354][T23132] macsec0: left allmulticast mode [ 639.731033][T23132] macsec1: left allmulticast mode [ 639.819491][T10576] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 639.846820][T10576] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 639.871045][T10572] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 639.889459][T10576] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 639.912191][T10576] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 639.943872][T22619] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 639.978268][T22619] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 640.005181][T22619] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 640.048655][T22619] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 640.069904][T23177] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4254'. [ 640.475164][T23191] netlink: 'syz.1.4261': attribute type 2 has an invalid length. [ 640.521375][T23193] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4262'. [ 640.532169][T23193] FAULT_INJECTION: forcing a failure. [ 640.532169][T23193] name failslab, interval 1, probability 0, space 0, times 0 [ 640.547951][T23193] CPU: 1 UID: 0 PID: 23193 Comm: syz.2.4262 Not tainted syzkaller #0 PREEMPT(full) [ 640.547980][T23193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 640.547994][T23193] Call Trace: [ 640.548004][T23193] [ 640.548013][T23193] dump_stack_lvl+0xe8/0x150 [ 640.548079][T23193] should_fail_ex+0x412/0x560 [ 640.548119][T23193] should_failslab+0xa8/0x100 [ 640.548143][T23193] ? security_inode_alloc+0x39/0x310 [ 640.548176][T23193] kmem_cache_alloc_noprof+0x87/0x650 [ 640.548217][T23193] security_inode_alloc+0x39/0x310 [ 640.548251][T23193] inode_init_always_gfp+0x9c8/0xda0 [ 640.548285][T23193] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 640.548310][T23193] alloc_inode+0x82/0x1b0 [ 640.548338][T23193] new_inode+0x22/0x170 [ 640.548371][T23193] __debugfs_create_file+0xb8/0x400 [ 640.548400][T23193] debugfs_create_file_full+0x3f/0x60 [ 640.548429][T23193] ref_tracker_dir_debugfs+0x197/0x360 [ 640.548463][T23193] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 640.548533][T23193] ? __kvmalloc_node_noprof+0x545/0x8a0 [ 640.548554][T23193] ? alloc_netdev_mqs+0xa6/0x11b0 [ 640.548582][T23193] ? __raw_spin_lock_init+0x45/0x100 [ 640.548610][T23193] alloc_netdev_mqs+0x272/0x11b0 [ 640.548632][T23193] ? __pfx_ipgre_tunnel_setup+0x10/0x10 [ 640.548671][T23193] rtnl_create_link+0x31f/0xd70 [ 640.548704][T23193] rtnl_newlink_create+0x277/0xb70 [ 640.548736][T23193] ? __pfx___nla_validate_parse+0x10/0x10 [ 640.548770][T23193] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 640.548807][T23193] ? __pfx___mutex_lock+0x10/0x10 [ 640.548848][T23193] ? ns_capable+0x89/0xe0 [ 640.548904][T23193] rtnl_newlink+0x166a/0x1bb0 [ 640.548935][T23193] ? __lock_acquire+0x6b5/0x2cf0 [ 640.548977][T23193] ? __pfx_rtnl_newlink+0x10/0x10 [ 640.549013][T23193] ? __lock_acquire+0x6b5/0x2cf0 [ 640.549045][T23193] ? __lock_acquire+0x6b5/0x2cf0 [ 640.549092][T23193] ? unwind_next_frame+0xa6/0x2550 [ 640.549122][T23193] ? unwind_next_frame+0xa6/0x2550 [ 640.549146][T23193] ? is_bpf_text_address+0x26/0x2b0 [ 640.549186][T23193] ? is_bpf_text_address+0x26/0x2b0 [ 640.549219][T23193] ? __lock_acquire+0x6b5/0x2cf0 [ 640.549252][T23193] ? kernel_text_address+0xa5/0xe0 [ 640.549279][T23193] ? __kernel_text_address+0xd/0x30 [ 640.549302][T23193] ? unwind_get_return_address+0x4d/0x90 [ 640.549322][T23193] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 640.549347][T23193] ? arch_stack_walk+0xfb/0x150 [ 640.549380][T23193] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 640.549427][T23193] ? __pfx_rtnl_newlink+0x10/0x10 [ 640.549456][T23193] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 640.549483][T23193] ? kmem_cache_alloc_node_noprof+0x384/0x690 [ 640.549514][T23193] ? netlink_sendmsg+0x5d4/0xb40 [ 640.549548][T23193] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 640.549576][T23193] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 640.549607][T23193] ? __lock_acquire+0x6b5/0x2cf0 [ 640.549650][T23193] netlink_rcv_skb+0x232/0x4b0 [ 640.549682][T23193] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 640.549714][T23193] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 640.549760][T23193] ? netlink_deliver_tap+0x2e/0x1b0 [ 640.549791][T23193] ? netlink_deliver_tap+0x2e/0x1b0 [ 640.549829][T23193] netlink_unicast+0x75c/0x8e0 [ 640.549870][T23193] netlink_sendmsg+0x813/0xb40 [ 640.549913][T23193] ? __pfx_netlink_sendmsg+0x10/0x10 [ 640.549949][T23193] ? aa_sock_msg_perm+0xf1/0x1b0 [ 640.549980][T23193] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 640.550017][T23193] ____sys_sendmsg+0x972/0x9f0 [ 640.550056][T23193] ? __might_fault+0xaf/0x130 [ 640.550093][T23193] ? __pfx_____sys_sendmsg+0x10/0x10 [ 640.550138][T23193] ? import_iovec+0x73/0xa0 [ 640.550165][T23193] ___sys_sendmsg+0x2a5/0x360 [ 640.550197][T23193] ? __lock_acquire+0x6b5/0x2cf0 [ 640.550231][T23193] ? __pfx____sys_sendmsg+0x10/0x10 [ 640.550271][T23193] ? kstrtouint+0x6e/0xe0 [ 640.550331][T23193] ? __fget_files+0x2a/0x420 [ 640.550359][T23193] ? __fget_files+0x3a0/0x420 [ 640.550399][T23193] __sys_sendmmsg+0x27c/0x4e0 [ 640.550439][T23193] ? __pfx___sys_sendmmsg+0x10/0x10 [ 640.550469][T23193] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 640.550524][T23193] ? ksys_write+0x242/0x270 [ 640.550546][T23194] netlink: 'syz.1.4261': attribute type 2 has an invalid length. [ 640.550559][T23193] ? __pfx_ksys_write+0x10/0x10 [ 640.550644][T23193] __x64_sys_sendmmsg+0xa0/0xc0 [ 640.550744][T23193] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 640.550825][T23193] do_syscall_64+0x15f/0xf80 [ 640.550912][T23193] ? clear_bhb_loop+0x40/0x90 [ 640.550993][T23193] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 640.551063][T23193] RIP: 0033:0x7f142b79c819 [ 640.551122][T23193] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 640.551177][T23193] RSP: 002b:00007f142c722028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 640.551244][T23193] RAX: ffffffffffffffda RBX: 00007f142ba15fa0 RCX: 00007f142b79c819 [ 640.551289][T23193] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000007 [ 640.551325][T23193] RBP: 00007f142c722090 R08: 0000000000000000 R09: 0000000000000000 [ 640.551360][T23193] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 640.551401][T23193] R13: 00007f142ba16038 R14: 00007f142ba15fa0 R15: 00007ffeb149bf18 [ 640.551501][T23193] [ 640.552511][T23193] debugfs: out of free dentries, can not create file 'netdev@ffff88805b3a0620' [ 640.777634][T23196] netlink: 88 bytes leftover after parsing attributes in process `syz.4.4263'. [ 641.122517][T23200] netlink: 'syz.3.4264': attribute type 13 has an invalid length. [ 641.323694][T23200] bridge0: port 3(syz_tun) entered disabled state [ 641.341230][T23209] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4264'. [ 641.597199][T23200] veth1_vlan: left allmulticast mode [ 641.927029][T23200] bond2: left promiscuous mode [ 641.985073][T23210] syzkaller1: entered promiscuous mode [ 642.001037][T23210] syzkaller1: entered allmulticast mode [ 642.051882][ T5821] block nbd2: Receive control failed (result -32) [ 642.051882][T19244] block nbd2: Receive control failed (result -32) [ 642.071932][ T5837] block nbd2: Receive control failed (result -32) [ 642.135499][T10578] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 642.154358][T10572] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 642.199754][T10572] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 642.260225][T10572] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 642.555277][T23253] netlink: 'syz.3.4277': attribute type 39 has an invalid length. [ 642.818131][T23266] netlink: 'syz.0.4280': attribute type 9 has an invalid length. [ 643.042806][T23278] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4283'. [ 643.245590][T23287] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4284'. [ 643.881214][T23304] "syz.3.4290" (23304) uses obsolete ecb(arc4) skcipher [ 643.897967][T23304] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4290'. [ 643.925995][T23304] netlink: 'syz.3.4290': attribute type 1 has an invalid length. [ 644.063094][T23312] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4293'. [ 644.146753][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 644.154918][ C1] lec:lec_tx_timeout: lec0 [ 644.159606][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 644.528449][T23328] syzkaller0: entered promiscuous mode [ 644.541938][T23328] syzkaller0: entered allmulticast mode [ 644.586981][T23328] pim6reg99999991: entered allmulticast mode [ 644.768440][T23339] lo speed is unknown, defaulting to 1000 [ 644.790403][T23339] lo speed is unknown, defaulting to 1000 [ 644.876069][T23348] __nla_validate_parse: 1 callbacks suppressed [ 644.876092][T23348] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4302'. [ 644.992066][T10576] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 645.064856][T23356] netlink: 'syz.2.4303': attribute type 1 has an invalid length. [ 645.130229][T23363] x_tables: unsorted underflow at hook 3 [ 645.261183][T23368] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4304'. [ 645.273629][T23356] 8021q: adding VLAN 0 to HW filter on device bond0 [ 645.361749][T23370] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4306'. [ 645.499737][T23376] mac80211_hwsim hwsim53 wlan0: invalid flags given to default FDB implementation [ 645.529357][T23375] sctp: [Deprecated]: syz.2.4307 (pid 23375) Use of int in maxseg socket option. [ 645.529357][T23375] Use struct sctp_assoc_value instead [ 645.849850][T23386] syzkaller0: entered promiscuous mode [ 646.013414][T23400] netlink: 'syz.1.4316': attribute type 1 has an invalid length. [ 646.054012][T23400] 8021q: adding VLAN 0 to HW filter on device bond11 [ 646.117255][T23407] 8021q: VLANs not supported on ip6gre0 [ 646.415789][T23421] dummy0: entered promiscuous mode [ 646.434178][T23421] vlan2: entered promiscuous mode [ 646.489399][ T29] audit: type=1804 audit(1776465021.653:10): pid=23426 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.4321" name="/newroot/328/cgroup.controllers" dev="tmpfs" ino=1713 res=1 errno=0 [ 646.541466][ T29] audit: type=1800 audit(1776465021.693:11): pid=23426 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4321" name="cgroup.controllers" dev="tmpfs" ino=1713 res=0 errno=0 [ 646.812879][T23444] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4325'. [ 646.954175][T23441] bond3 (unregistering): Released all slaves [ 646.980210][T23452] sctp: [Deprecated]: syz.1.4328 (pid 23452) Use of struct sctp_assoc_value in delayed_ack socket option. [ 646.980210][T23452] Use struct sctp_sack_info instead [ 647.063219][T23453] 8021q: adding VLAN 0 to HW filter on device team0 [ 647.111781][T23453] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 647.427510][T23473] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4331'. [ 647.589162][T23485] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4336'. [ 647.600879][T23474] lo speed is unknown, defaulting to 1000 [ 647.656425][T23479] lo speed is unknown, defaulting to 1000 [ 647.680394][T23474] lo speed is unknown, defaulting to 1000 [ 647.691211][T23484] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4336'. [ 647.735729][T23490] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4337'. [ 648.133779][T23479] lo speed is unknown, defaulting to 1000 [ 648.259522][T23496] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4338'. [ 648.786036][T23511] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4342'. [ 649.166838][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 649.174974][ C1] lec:lec_tx_timeout: lec0 [ 649.179947][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 649.422291][T23549] netlink: 'syz.1.4354': attribute type 4 has an invalid length. [ 649.494478][T23551] netlink: 'syz.1.4354': attribute type 4 has an invalid length. [ 649.840516][ T29] audit: type=1804 audit(1776465025.003:12): pid=23556 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.4356" name="/newroot/224/memory.events" dev="tmpfs" ino=1171 res=1 errno=0 [ 649.911546][ T29] audit: type=1800 audit(1776465025.013:13): pid=23556 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4356" name="memory.events" dev="tmpfs" ino=1171 res=0 errno=0 [ 649.953905][ T29] audit: type=1804 audit(1776465025.013:14): pid=23556 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.4356" name="/newroot/224/memory.events" dev="tmpfs" ino=1171 res=1 errno=0 [ 650.506350][T23588] netlink: 'syz.1.4365': attribute type 14 has an invalid length. [ 650.572692][T23594] netlink: 'syz.2.4367': attribute type 15 has an invalid length. [ 650.577712][T23588] __nla_validate_parse: 5 callbacks suppressed [ 650.577767][T23588] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4365'. [ 650.697569][T22619] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 650.726933][T22619] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 650.751248][T10576] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 650.762017][T10578] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 650.823602][T10578] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 650.863280][T23592] lo speed is unknown, defaulting to 1000 [ 650.905501][T23592] lo speed is unknown, defaulting to 1000 [ 650.920909][T23614] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4372'. [ 651.051571][T23617] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4373'. [ 651.106308][T23617] 8021q: VLANs not supported on lo [ 651.281376][T23629] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4377'. [ 651.386915][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 651.474167][T23640] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4378'. [ 651.804656][T23649] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 651.806377][T23651] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 652.004067][T23661] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4384'. [ 652.409747][T23675] netlink: 108 bytes leftover after parsing attributes in process `syz.3.4387'. [ 653.179023][T23708] block nbd2: NBD_DISCONNECT [ 653.193997][T23708] block nbd2: Send disconnect failed -32 [ 653.209444][T23708] block nbd2: Send disconnect failed -32 [ 653.217652][T23708] block nbd2: Send disconnect failed -32 [ 653.225588][T23706] xt_hashlimit: size too large, truncated to 1048576 [ 653.235093][T23708] block nbd2: shutting down sockets [ 653.300985][T23705] lo speed is unknown, defaulting to 1000 [ 653.479018][T23705] lo speed is unknown, defaulting to 1000 [ 653.512458][T23720] netlink: 84 bytes leftover after parsing attributes in process `syz.0.4397'. [ 653.573319][T23720] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4397'. [ 653.918900][T23736] xt_hl: Unknown TTL match mode: 237 [ 654.105835][T23744] xt_hl: Unknown TTL match mode: 237 [ 654.186863][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 654.194996][ C1] lec:lec_tx_timeout: lec0 [ 654.200282][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 655.052342][T23771] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4407'. [ 655.075838][T23772] netlink: 'syz.2.4406': attribute type 12 has an invalid length. [ 655.091891][T23772] netlink: 'syz.2.4406': attribute type 11 has an invalid length. [ 655.616025][T23789] netlink: 'syz.0.4412': attribute type 1 has an invalid length. [ 655.753168][T23788] syzkaller0: entered promiscuous mode [ 655.761583][T23788] syzkaller0: entered allmulticast mode [ 655.789277][T10578] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 655.838550][T23789] bond8: entered promiscuous mode [ 655.844196][T23789] 8021q: adding VLAN 0 to HW filter on device bond8 [ 655.931416][T23797] bond8: (slave bridge4): making interface the new active one [ 655.960421][T23797] bridge4: entered promiscuous mode [ 655.986544][T23797] bridge4: left promiscuous mode [ 656.503186][T23822] netlink: 'syz.4.4416': attribute type 89 has an invalid length. [ 659.206864][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 659.214983][ C1] lec:lec_tx_timeout: lec0 [ 659.219802][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 659.521045][T23795] syzkaller0: entered promiscuous mode [ 659.526610][T23795] syzkaller0: entered allmulticast mode [ 661.004123][T22619] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 664.080625][T23909] x_tables: duplicate underflow at hook 3 [ 664.270955][T23917] __nla_validate_parse: 4 callbacks suppressed [ 664.270975][T23917] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4437'. [ 664.324313][T23917] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4437'. [ 664.350071][T23917] netlink: 22 bytes leftover after parsing attributes in process `syz.4.4437'. [ 664.367295][T23928] netlink: 11562 bytes leftover after parsing attributes in process `syz.3.4440'. [ 664.381314][T23929] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4439'. [ 664.420365][T23929] bond0 (unregistering): left promiscuous mode [ 664.433403][T23929] bond_slave_0: left promiscuous mode [ 664.450598][T23929] bond_slave_1: left promiscuous mode [ 664.467121][T23929] mac80211_hwsim hwsim49 wlan1: left promiscuous mode [ 664.539681][T23929] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 664.562240][T23929] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 664.583095][T23929] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 664.593966][T23929] bond0 (unregistering): Released all slaves [ 664.841489][T23944] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4447'. [ 664.885017][T23947] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4448'. [ 664.912481][T23950] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4450'. [ 664.964041][T23950] openvswitch: netlink: Missing key (keys=40, expected=80) [ 665.407298][T23976] netlink: 165 bytes leftover after parsing attributes in process `syz.3.4456'. [ 665.432610][T23976] netlink: 'syz.3.4456': attribute type 21 has an invalid length. [ 665.466820][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 6250 ms [ 665.474985][ C1] lec:lec_tx_timeout: lec0 [ 665.480250][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 665.769444][T23968] vlan3: entered allmulticast mode [ 665.784155][T23976] netlink: 'syz.3.4456': attribute type 6 has an invalid length. [ 665.803785][T23976] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4456'. [ 666.188693][T24005] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 666.246143][T24005] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 666.333063][T24012] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048) [ 666.747280][T10578] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 667.073911][T24039] lo speed is unknown, defaulting to 1000 [ 667.093248][T24039] lo speed is unknown, defaulting to 1000 [ 667.716108][T24056] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 668.310288][T24080] sctp: [Deprecated]: syz.0.4479 (pid 24080) Use of struct sctp_assoc_value in delayed_ack socket option. [ 668.310288][T24080] Use struct sctp_sack_info instead [ 669.294447][T24127] netlink: 'syz.3.4494': attribute type 11 has an invalid length. [ 669.305300][T24128] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4493'. [ 669.321210][ T5157] block nbd0: Possible stuck request ffff888027147000: control (read@0,1024B). Runtime 180 seconds [ 669.332910][ T5157] block nbd0: Possible stuck request ffff8880271471c0: control (read@1024,1024B). Runtime 180 seconds [ 669.344098][ T5157] block nbd0: Possible stuck request ffff888027147380: control (read@2048,1024B). Runtime 180 seconds [ 669.345306][T24127] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4494'. [ 669.355617][ T5157] block nbd0: Possible stuck request ffff888027147540: control (read@3072,1024B). Runtime 180 seconds [ 669.361673][T24128] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4493'. [ 669.421365][T24128] bond0: entered promiscuous mode [ 669.436420][T24128] bond_slave_0: entered promiscuous mode [ 669.444682][T24128] bond_slave_1: entered promiscuous mode [ 669.452981][T24128] gretap0: entered promiscuous mode [ 669.461562][T24128] hsr2: entered promiscuous mode [ 669.569411][T24138] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4495'. [ 669.605243][T24145] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4498'. [ 669.620734][T24138] bond0: entered promiscuous mode [ 669.626576][T24138] 8021q: adding VLAN 0 to HW filter on device bond0 [ 669.649704][T24138] bond0 (unregistering): Released all slaves [ 670.301831][T24174] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4505'. [ 670.374116][T24174] bond12: entered promiscuous mode [ 670.388457][T24174] 8021q: adding VLAN 0 to HW filter on device bond12 [ 670.489482][T24182] 8021q: adding VLAN 0 to HW filter on device bond12 [ 670.515724][T24182] bond12: (slave vcan1): The slave device specified does not support setting the MAC address [ 670.528453][T24182] bond12: (slave vcan1): Error -95 calling set_mac_address [ 670.590352][T24174] ip6erspan0: entered allmulticast mode [ 670.778754][T24193] netlink: 268 bytes leftover after parsing attributes in process `syz.2.4511'. [ 670.798914][T24193] netlink: 136 bytes leftover after parsing attributes in process `syz.2.4511'. [ 670.812787][T24193] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4511'. [ 670.855842][T24196] openvswitch: netlink: EtherType 50a is less than min 600 [ 670.926300][T24202] netlink: 128 bytes leftover after parsing attributes in process `syz.3.4513'. [ 671.135840][T24209] lo speed is unknown, defaulting to 1000 [ 671.151400][T24209] lo speed is unknown, defaulting to 1000 [ 671.226712][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5750 ms [ 671.234926][ C1] lec:lec_tx_timeout: lec0 [ 671.239743][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 671.594240][T24224] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 671.867688][T10574] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 672.091524][T24238] lo speed is unknown, defaulting to 1000 [ 672.130897][T24238] lo speed is unknown, defaulting to 1000 [ 672.161543][T24221] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 672.856133][T24276] netlink: 'syz.4.4535': attribute type 61 has an invalid length. [ 672.856326][T24275] netlink: 'syz.4.4535': attribute type 61 has an invalid length. [ 672.903890][T24276] netlink: 'syz.4.4535': attribute type 62 has an invalid length. [ 672.926451][T24275] netlink: 'syz.4.4535': attribute type 62 has an invalid length. [ 673.372166][T24303] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 673.418611][T24294] netlink: 'syz.0.4541': attribute type 10 has an invalid length. [ 673.440429][T24305] lo speed is unknown, defaulting to 1000 [ 673.460321][T24305] lo speed is unknown, defaulting to 1000 [ 673.561009][T24294] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 674.084644][T24328] netlink: 'syz.4.4551': attribute type 1 has an invalid length. [ 674.138679][T24329] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 674.149018][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 674.269889][T24328] bond7: entered promiscuous mode [ 674.275664][T24328] 8021q: adding VLAN 0 to HW filter on device bond7 [ 674.369025][T24328] 8021q: adding VLAN 0 to HW filter on device bond7 [ 674.401217][T24328] bond7: (slave wireguard0): The slave device specified does not support setting the MAC address [ 674.445962][T24328] bond7: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 674.513313][T24328] bond7: (slave wireguard0): making interface the new active one [ 674.537160][T24328] wireguard0: entered promiscuous mode [ 674.562509][T24328] bond7: (slave wireguard0): Enslaving as an active interface with an up link [ 674.709924][T24341] lo speed is unknown, defaulting to 1000 [ 674.728866][T24341] lo speed is unknown, defaulting to 1000 [ 674.967605][T24356] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 675.208608][T24371] __nla_validate_parse: 12 callbacks suppressed [ 675.208628][T24371] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4563'. [ 675.241796][T24371] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4563'. [ 675.251634][T24371] netlink: 'syz.1.4563': attribute type 20 has an invalid length. [ 675.982733][T24391] netlink: 124 bytes leftover after parsing attributes in process `syz.1.4565'. [ 676.051908][T24393] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4566'. [ 676.062122][T24393] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4566'. [ 676.987862][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5750 ms [ 676.995895][ C1] lec:lec_tx_timeout: lec0 [ 677.001122][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 677.022281][T10578] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 678.968803][ T5192] udevd[5192]: worker [16714] /devices/virtual/block/nbd0 timeout; kill it [ 678.977801][ T5192] udevd[5192]: seq 28062 '/devices/virtual/block/nbd0' killed [ 679.000779][T24393] vlan2: entered allmulticast mode [ 679.006010][T24393] macvtap0: entered allmulticast mode [ 679.012183][T24393] veth0_macvtap: entered allmulticast mode [ 679.158757][T24401] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4568'. [ 679.359259][T24408] syzkaller0: entered promiscuous mode [ 679.364977][T24408] syzkaller0: entered allmulticast mode [ 679.541156][T21643] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 679.556841][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 679.729338][T24419] netlink: 'syz.1.4574': attribute type 13 has an invalid length. [ 679.750396][T24421] xt_hashlimit: size too large, truncated to 1048576 [ 679.825111][T24414] syzkaller0: entered promiscuous mode [ 679.832321][T24414] syzkaller0: entered allmulticast mode [ 679.888779][T24417] xt_hashlimit: size too large, truncated to 1048576 [ 679.906134][T24417] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 680.037123][T21641] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 680.301007][T24442] RDS: rds_bind could not find a transport for fc02::1, load rds_tcp or rds_rdma? [ 680.324047][T24442] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4578'. [ 680.424917][T24450] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 680.489648][T24450] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4581'. [ 680.503684][T24454] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4583'. [ 680.521152][T24454] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4583'. [ 680.611154][T24459] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4583'. [ 680.713394][T24467] netlink: 'syz.2.4586': attribute type 13 has an invalid length. [ 680.734408][T24467] netlink: 'syz.2.4586': attribute type 13 has an invalid length. [ 680.747069][T24467] netlink: 'syz.2.4586': attribute type 13 has an invalid length. [ 680.755339][T24467] netlink: 'syz.2.4586': attribute type 13 has an invalid length. [ 680.764641][T24467] netlink: 'syz.2.4586': attribute type 13 has an invalid length. [ 680.774628][T24467] netlink: 'syz.2.4586': attribute type 13 has an invalid length. [ 680.783197][T24467] netlink: 'syz.2.4586': attribute type 13 has an invalid length. [ 680.803828][T24467] netlink: 'syz.2.4586': attribute type 13 has an invalid length. [ 680.818497][T24467] netlink: 'syz.2.4586': attribute type 13 has an invalid length. [ 680.951874][T24470] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.4587'. [ 680.975818][T24470] rdma_rxe: rxe_newlink: failed to add bond0 [ 681.061943][T24480] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 681.183030][T24480] bond0: (slave wlan1): Opening slave failed [ 681.216372][T24491] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 681.240469][T24481] lo speed is unknown, defaulting to 1000 [ 681.255322][T24481] lo speed is unknown, defaulting to 1000 [ 681.775925][T24505] syzkaller1: entered promiscuous mode [ 681.809801][T24505] syzkaller1: entered allmulticast mode [ 681.994020][T24528] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 682.024493][T24530] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 682.033646][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 682.033692][ C1] lec:lec_tx_timeout: lec0 [ 682.042483][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 682.266198][T24538] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4602'. [ 682.286167][T24538] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4602'. [ 682.297397][T24538] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4602'. [ 682.345777][T24542] netlink: 200 bytes leftover after parsing attributes in process `syz.4.4603'. [ 682.748075][T22619] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 682.798771][T24549] 8021q: adding VLAN 0 to HW filter on device bond13 [ 683.322899][T24571] lo speed is unknown, defaulting to 1000 [ 683.332418][T24571] lo speed is unknown, defaulting to 1000 [ 683.768602][T24598] tipc: Started in network mode [ 683.779166][T24598] tipc: Node identity 224739c9ca2e, cluster identity 4711 [ 683.799234][T24598] tipc: Enabled bearer , priority 0 [ 683.980675][T24599] syzkaller0: entered promiscuous mode [ 683.997707][T24599] syzkaller0: entered allmulticast mode [ 684.056419][T24599] tipc: Resetting bearer [ 684.535590][ C0] ------------[ cut here ]------------ [ 684.541199][ C0] len > ((int)(~0U >> 1)) [ 684.541235][ C0] WARNING: ./include/linux/skbuff.h:2863 at qdisc_pkt_len_segs_init+0x4c1/0xa30, CPU#0: syz.4.4622/24609 [ 684.556934][ C0] Modules linked in: [ 684.560893][ C0] CPU: 0 UID: 0 PID: 24609 Comm: syz.4.4622 Not tainted syzkaller #0 PREEMPT(full) [ 684.570365][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 684.580517][ C0] RIP: 0010:qdisc_pkt_len_segs_init+0x4c1/0xa30 [ 684.586982][ C0] Code: 81 e6 00 00 02 00 31 ff e8 bc 3b 46 f8 41 81 e6 00 00 02 00 0f 85 fb 00 00 00 e8 6a 37 46 f8 e9 5b 01 00 00 e8 60 37 46 f8 90 <0f> 0b 90 e9 e8 fd ff ff 44 89 e7 44 89 f6 e8 0c 39 46 f8 45 39 f4 [ 684.606708][ C0] RSP: 0018:ffffc900000075d0 EFLAGS: 00010246 [ 684.612836][ C0] RAX: ffffffff897f2690 RBX: 1ffff1100d74746b RCX: ffff888022fe5c40 [ 684.620915][ C0] RDX: 0000000000000100 RSI: 00000000fffffffe RDI: 0000000000000000 [ 684.628978][ C0] RBP: ffff88806ba3a280 R08: ffffc9000000785f R09: 0000000000000000 [ 684.637047][ C0] R10: ffffc900000077f0 R11: fffff52000000f0c R12: 00000000fffffffe [ 684.645065][ C0] R13: dffffc0000000000 R14: 0000000000000003 R15: ffff8880981a3598 [ 684.653110][ C0] FS: 00007f84df90e6c0(0000) GS:ffff888125245000(0000) knlGS:0000000000000000 [ 684.662159][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 684.668829][ C0] CR2: 000000110c3d9593 CR3: 00000000695b0000 CR4: 00000000003526f0 [ 684.676906][ C0] Call Trace: [ 684.680233][ C0] [ 684.683145][ C0] __netif_receive_skb_core+0x13bd/0x3170 [ 684.688985][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 684.693984][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 684.699047][ C0] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 684.705177][ C0] ? unwind_next_frame+0xa6/0x2550 [ 684.710418][ C0] ? lock_acquire+0x106/0x350 [ 684.715177][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 684.720247][ C0] __netif_receive_skb_list_core+0x24d/0x810 [ 684.726372][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 684.731477][ C0] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 684.738134][ C0] netif_receive_skb_list_internal+0x995/0xcf0 [ 684.744353][ C0] ? lock_acquire+0x106/0x350 [ 684.749172][ C0] ? netif_receive_skb_list_internal+0x501/0xcf0 [ 684.755587][ C0] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 684.762386][ C0] ? dev_gro_receive+0x1108/0x23c0 [ 684.767616][ C0] ? dev_gro_receive+0x1773/0x23c0 [ 684.772805][ C0] ? dev_gro_receive+0x1108/0x23c0 [ 684.778042][ C0] napi_complete_done+0x299/0x730 [ 684.783145][ C0] ? __pfx_napi_complete_done+0x10/0x10 [ 684.788828][ C0] ? gro_cell_poll+0x16c/0x5d0 [ 684.793658][ C0] gro_cell_poll+0x5a9/0x5d0 [ 684.798350][ C0] ? gro_cell_poll+0x16c/0x5d0 [ 684.803193][ C0] __napi_poll+0xae/0x340 [ 684.807673][ C0] ? skb_defer_free_flush+0x233/0x260 [ 684.813116][ C0] net_rx_action+0x627/0xf70 [ 684.817838][ C0] ? lock_acquire+0x106/0x350 [ 684.822593][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 684.827835][ C0] ? sched_clock+0x3f/0x60 [ 684.832326][ C0] handle_softirqs+0x22a/0x840 [ 684.837216][ C0] ? do_softirq+0x76/0xd0 [ 684.841620][ C0] ? tun_rx_batched+0x185/0x790 [ 684.846626][ C0] do_softirq+0x76/0xd0 [ 684.850993][ C0] [ 684.853961][ C0] [ 684.856976][ C0] __local_bh_enable_ip+0xf8/0x130 [ 684.862150][ C0] ? tun_rx_batched+0x185/0x790 [ 684.867096][ C0] tun_rx_batched+0x617/0x790 [ 684.871847][ C0] ? __pfx_tun_rx_batched+0x10/0x10 [ 684.877146][ C0] ? tun_get_user+0x26dc/0x3ed0 [ 684.882059][ C0] ? tun_get_user+0x26dc/0x3ed0 [ 684.887012][ C0] ? tun_get_user+0x23c7/0x3ed0 [ 684.891919][ C0] ? tun_get_user+0x23c7/0x3ed0 [ 684.896868][ C0] ? __local_bh_enable_ip+0xd0/0x130 [ 684.902244][ C0] ? tun_get_user+0x26dc/0x3ed0 [ 684.907229][ C0] tun_get_user+0x2aeb/0x3ed0 [ 684.911995][ C0] ? aa_file_perm+0x50e/0x15e0 [ 684.916877][ C0] ? __pfx_tun_get_user+0x10/0x10 [ 684.921967][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 684.927013][ C0] ? __pfx___futex_wait+0x10/0x10 [ 684.932109][ C0] ? ref_tracker_alloc+0x35c/0x4c0 [ 684.937348][ C0] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 684.943142][ C0] ? tun_get+0x1c/0x2f0 [ 684.947408][ C0] ? tun_get+0x1c/0x2f0 [ 684.951633][ C0] ? tun_get+0x1c/0x2f0 [ 684.955838][ C0] ? tun_get+0x1c/0x2f0 [ 684.960094][ C0] tun_chr_write_iter+0x113/0x200 [ 684.965182][ C0] vfs_write+0x61d/0xb90 [ 684.969544][ C0] ? __pfx_vfs_write+0x10/0x10 [ 684.974364][ C0] ? __fget_files+0x2a/0x420 [ 684.979065][ C0] ksys_write+0x150/0x270 [ 684.983463][ C0] ? __pfx_ksys_write+0x10/0x10 [ 684.988403][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 684.994530][ C0] do_syscall_64+0x15f/0xf80 [ 684.999219][ C0] ? trace_irq_disable+0x3b/0x140 [ 685.004300][ C0] ? clear_bhb_loop+0x40/0x90 [ 685.009064][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 685.015016][ C0] RIP: 0033:0x7f84de99c819 [ 685.019541][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 685.039245][ C0] RSP: 002b:00007f84df90e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 685.047770][ C0] RAX: ffffffffffffffda RBX: 00007f84dec15fa0 RCX: 00007f84de99c819 [ 685.055808][ C0] RDX: 000000000000007a RSI: 0000200000000580 RDI: 0000000000000003 [ 685.063877][ C0] RBP: 00007f84dea32c91 R08: 0000000000000000 R09: 0000000000000000 [ 685.071943][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 685.080009][ C0] R13: 00007f84dec16038 R14: 00007f84dec15fa0 R15: 00007ffce74557e8 [ 685.088092][ C0] [ 685.091179][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 685.098516][ C0] CPU: 0 UID: 0 PID: 24609 Comm: syz.4.4622 Not tainted syzkaller #0 PREEMPT(full) [ 685.107919][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 685.118006][ C0] Call Trace: [ 685.121316][ C0] [ 685.124188][ C0] vpanic+0x56c/0xa60 [ 685.128222][ C0] ? __pfx__printk+0x10/0x10 [ 685.132844][ C0] ? __pfx_vpanic+0x10/0x10 [ 685.137384][ C0] ? is_bpf_text_address+0x292/0x2b0 [ 685.142709][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 685.147946][ C0] panic+0xc5/0xd0 [ 685.151713][ C0] ? __pfx_panic+0x10/0x10 [ 685.156213][ C0] __warn+0x315/0x4c0 [ 685.160237][ C0] ? qdisc_pkt_len_segs_init+0x4c1/0xa30 [ 685.165921][ C0] ? qdisc_pkt_len_segs_init+0x4c1/0xa30 [ 685.171607][ C0] __report_bug+0x29a/0x540 [ 685.176151][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 685.181134][ C0] ? qdisc_pkt_len_segs_init+0x4c1/0xa30 [ 685.186801][ C0] ? __pfx___report_bug+0x10/0x10 [ 685.191857][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 685.196837][ C0] ? do_xdp_generic+0x168/0x12e0 [ 685.201810][ C0] ? qdisc_pkt_len_segs_init+0x4c1/0xa30 [ 685.207475][ C0] report_bug+0x16a/0x220 [ 685.211854][ C0] ? qdisc_pkt_len_segs_init+0x4c1/0xa30 [ 685.217535][ C0] ? qdisc_pkt_len_segs_init+0x4c3/0xa30 [ 685.223216][ C0] handle_bug+0x9c/0x200 [ 685.227496][ C0] exc_invalid_op+0x1a/0x50 [ 685.232033][ C0] asm_exc_invalid_op+0x1a/0x20 [ 685.236914][ C0] RIP: 0010:qdisc_pkt_len_segs_init+0x4c1/0xa30 [ 685.243205][ C0] Code: 81 e6 00 00 02 00 31 ff e8 bc 3b 46 f8 41 81 e6 00 00 02 00 0f 85 fb 00 00 00 e8 6a 37 46 f8 e9 5b 01 00 00 e8 60 37 46 f8 90 <0f> 0b 90 e9 e8 fd ff ff 44 89 e7 44 89 f6 e8 0c 39 46 f8 45 39 f4 [ 685.262865][ C0] RSP: 0018:ffffc900000075d0 EFLAGS: 00010246 [ 685.268966][ C0] RAX: ffffffff897f2690 RBX: 1ffff1100d74746b RCX: ffff888022fe5c40 [ 685.276972][ C0] RDX: 0000000000000100 RSI: 00000000fffffffe RDI: 0000000000000000 [ 685.284987][ C0] RBP: ffff88806ba3a280 R08: ffffc9000000785f R09: 0000000000000000 [ 685.293044][ C0] R10: ffffc900000077f0 R11: fffff52000000f0c R12: 00000000fffffffe [ 685.301051][ C0] R13: dffffc0000000000 R14: 0000000000000003 R15: ffff8880981a3598 [ 685.309063][ C0] ? qdisc_pkt_len_segs_init+0x4c0/0xa30 [ 685.314747][ C0] __netif_receive_skb_core+0x13bd/0x3170 [ 685.320507][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 685.325485][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 685.330459][ C0] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 685.336560][ C0] ? unwind_next_frame+0xa6/0x2550 [ 685.342300][ C0] ? lock_acquire+0x106/0x350 [ 685.347037][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 685.352010][ C0] __netif_receive_skb_list_core+0x24d/0x810 [ 685.358024][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 685.363011][ C0] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 685.369905][ C0] netif_receive_skb_list_internal+0x995/0xcf0 [ 685.376093][ C0] ? lock_acquire+0x106/0x350 [ 685.380814][ C0] ? netif_receive_skb_list_internal+0x501/0xcf0 [ 685.387208][ C0] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 685.394024][ C0] ? dev_gro_receive+0x1108/0x23c0 [ 685.399174][ C0] ? dev_gro_receive+0x1773/0x23c0 [ 685.404323][ C0] ? dev_gro_receive+0x1108/0x23c0 [ 685.409480][ C0] napi_complete_done+0x299/0x730 [ 685.414540][ C0] ? __pfx_napi_complete_done+0x10/0x10 [ 685.420118][ C0] ? gro_cell_poll+0x16c/0x5d0 [ 685.424916][ C0] gro_cell_poll+0x5a9/0x5d0 [ 685.429577][ C0] ? gro_cell_poll+0x16c/0x5d0 [ 685.434372][ C0] __napi_poll+0xae/0x340 [ 685.438726][ C0] ? skb_defer_free_flush+0x233/0x260 [ 685.444214][ C0] net_rx_action+0x627/0xf70 [ 685.448834][ C0] ? lock_acquire+0x106/0x350 [ 685.453561][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 685.458712][ C0] ? sched_clock+0x3f/0x60 [ 685.463169][ C0] handle_softirqs+0x22a/0x840 [ 685.468012][ C0] ? do_softirq+0x76/0xd0 [ 685.472378][ C0] ? tun_rx_batched+0x185/0x790 [ 685.477259][ C0] do_softirq+0x76/0xd0 [ 685.481460][ C0] [ 685.484416][ C0] [ 685.487379][ C0] __local_bh_enable_ip+0xf8/0x130 [ 685.492529][ C0] ? tun_rx_batched+0x185/0x790 [ 685.497412][ C0] tun_rx_batched+0x617/0x790 [ 685.502167][ C0] ? __pfx_tun_rx_batched+0x10/0x10 [ 685.507396][ C0] ? tun_get_user+0x26dc/0x3ed0 [ 685.512312][ C0] ? tun_get_user+0x26dc/0x3ed0 [ 685.517215][ C0] ? tun_get_user+0x23c7/0x3ed0 [ 685.522098][ C0] ? tun_get_user+0x23c7/0x3ed0 [ 685.526993][ C0] ? __local_bh_enable_ip+0xd0/0x130 [ 685.532339][ C0] ? tun_get_user+0x26dc/0x3ed0 [ 685.537235][ C0] tun_get_user+0x2aeb/0x3ed0 [ 685.541993][ C0] ? aa_file_perm+0x50e/0x15e0 [ 685.546830][ C0] ? __pfx_tun_get_user+0x10/0x10 [ 685.551904][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 685.556909][ C0] ? __pfx___futex_wait+0x10/0x10 [ 685.561976][ C0] ? ref_tracker_alloc+0x35c/0x4c0 [ 685.567143][ C0] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 685.572676][ C0] ? tun_get+0x1c/0x2f0 [ 685.576895][ C0] ? tun_get+0x1c/0x2f0 [ 685.581082][ C0] ? tun_get+0x1c/0x2f0 [ 685.585265][ C0] ? tun_get+0x1c/0x2f0 [ 685.589452][ C0] tun_chr_write_iter+0x113/0x200 [ 685.594511][ C0] vfs_write+0x61d/0xb90 [ 685.598868][ C0] ? __pfx_vfs_write+0x10/0x10 [ 685.603673][ C0] ? __fget_files+0x2a/0x420 [ 685.608318][ C0] ksys_write+0x150/0x270 [ 685.612713][ C0] ? __pfx_ksys_write+0x10/0x10 [ 685.617626][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 685.623733][ C0] do_syscall_64+0x15f/0xf80 [ 685.628383][ C0] ? trace_irq_disable+0x3b/0x140 [ 685.633580][ C0] ? clear_bhb_loop+0x40/0x90 [ 685.638307][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 685.644235][ C0] RIP: 0033:0x7f84de99c819 [ 685.648686][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 685.668327][ C0] RSP: 002b:00007f84df90e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 685.676776][ C0] RAX: ffffffffffffffda RBX: 00007f84dec15fa0 RCX: 00007f84de99c819 [ 685.684780][ C0] RDX: 000000000000007a RSI: 0000200000000580 RDI: 0000000000000003 [ 685.692790][ C0] RBP: 00007f84dea32c91 R08: 0000000000000000 R09: 0000000000000000 [ 685.700807][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 685.708822][ C0] R13: 00007f84dec16038 R14: 00007f84dec15fa0 R15: 00007ffce74557e8 [ 685.716850][ C0] [ 685.720503][ C0] Kernel Offset: disabled [ 685.724854][ C0] Rebooting in 86400 seconds..