last executing test programs: 5.341649666s ago: executing program 0 (id=2339): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000200)=0xf, 0x12) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) (async) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) epoll_pwait(r1, &(0x7f0000000140)=[{}], 0x1, 0x2d516fb6, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000014}) epoll_wait(r1, &(0x7f0000000040)=[{}], 0x1, 0x400) unshare(0x2c020400) (async) unshare(0x2c020400) clock_gettime(0x0, 0x0) (async) clock_gettime(0x0, 0x0) r4 = socket$inet6(0xa, 0x1, 0x8010800000000084) sendmmsg$inet6(r4, &(0x7f0000000040)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, 0x1c, &(0x7f0000000600)=[{&(0x7f00000000c0)='/', 0x1}], 0x1}}, {{&(0x7f0000000400)={0xa, 0x201, 0x0, @private0}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000d00)='[', 0x4d0}], 0x21}}], 0x2, 0x4008040) pselect6(0x40, &(0x7f0000000000)={0xa, 0x80000001, 0x2, 0x10000000000006, 0x12, 0x8, 0x80000000, 0x8}, 0x0, 0x0, 0x0, 0x0) (async) pselect6(0x40, &(0x7f0000000000)={0xa, 0x80000001, 0x2, 0x10000000000006, 0x12, 0x8, 0x80000000, 0x8}, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000180)='cubic', 0x9) r6 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f00000001c0)=ANY=[@ANYRESDEC=r1], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) socket$inet(0x2, 0x3, 0x6) socket$netlink(0x10, 0x3, 0x4) socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) (async) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r8, @ANYRESOCT=0x0], 0x3c}, 0x1, 0x0, 0x0, 0xa804}, 0x80) (async) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r8, @ANYRESOCT=0x0], 0x3c}, 0x1, 0x0, 0x0, 0xa804}, 0x80) socket(0x10, 0x803, 0x0) socket(0x1, 0x803, 0x0) (async) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) 5.291721657s ago: executing program 1 (id=2340): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000002000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa10000000000000701fe00f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) 5.212232539s ago: executing program 1 (id=2341): socket(0x10, 0x803, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001201", 0x2e}], 0x1}, 0x48000) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)=ANY=[], 0x48) unshare(0x22020600) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) listen(r3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f00000001c0)=[{&(0x7f00000003c0)="a10100001500add427323b470c45b4560a067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7101400000000000000ffffffffffe7ee00000000000000000200000000", 0x147}], 0x1) r5 = socket(0x40000000015, 0x5, 0x0) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r5, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$can_bcm(0x1d, 0x2, 0x2) close(0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x4010, 0xffffffffffffffff, 0x215eb000) r7 = socket(0x14, 0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x61d0, 0x0) sendmsg$can_bcm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0100"], 0x48}}, 0x410) bind$inet(r5, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="0000000000aa303e97380e90231bdb", 0xf}], 0x1}, 0x0) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) close(0x3) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000640)={r2, &(0x7f00000002c0), 0x0}, 0x20) recvmsg$can_j1939(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x2000) 5.130153686s ago: executing program 0 (id=2342): r0 = epoll_create1(0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f00000001c0)={0x0, 0x8, [0x2, 0x9, 0x100000000, 0x4, 0x2, 0xc]}) unshare(0x20000400) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$packet(r1, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d65b"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x68}, 0x1, 0x0, 0x0, 0x24000840}, 0x40) accept4(r2, &(0x7f0000000000)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, &(0x7f0000000180)=0x80, 0x800) close(0x3) 4.957734659s ago: executing program 0 (id=2345): r0 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000000380)={&(0x7f00000000c0)=@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000240)="af", 0x1}], 0x1, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000008400000000000000ffff"], 0x18, 0x20000001}, 0x20008000) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r4 = openat$cgroup_devices(r3, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r4, &(0x7f0000000080)=ANY=[@ANYBLOB='b 7:', @ANYRESOCT], 0xc) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000fcffffff0000"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x81}, 0x94) setsockopt$sock_int(r2, 0x1, 0x14, &(0x7f0000000040), 0x50) listen(r2, 0x0) accept$inet6(r2, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000000014000180090001006cdbf80789f3f947dd000280080003"], 0xe4}}, 0x20050840) r5 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$sock_buf(r5, 0x1, 0x3d, &(0x7f0000000280)=""/45, &(0x7f0000000340)=0x2d) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="0002000000000000000002000000000000110000c068f34b321881904ede6a50590238f3da95", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x1f, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8b}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x86}}, {}, [@printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3ff}}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x401}}], {{}, {}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x1001, &(0x7f0000001380)=""/4097, 0x41100, 0x24, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfff}, 0x94) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x4080, 0x0) ioctl$TUNGETFILTER(r7, 0x801054db, &(0x7f0000000400)=""/82) 4.758898339s ago: executing program 3 (id=2347): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @sit={{0x8}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @remote}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @broadcast}, @IFLA_IPTUN_ENCAP_TYPE={0x6}]}}}]}, 0x58}}, 0x20008040) 4.758187462s ago: executing program 1 (id=2348): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$nci(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x1, "c3c4dc72e048b9e28715992f2fb3781c"}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfffa}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x3c, 0x2, [@TCA_FLOWER_ACT={0x38, 0x3, [@m_connmark={0x34, 0x1, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x6c}}, 0x24000000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) write$nci(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x2a, 0x2, 0x0) (async) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x1, "c3c4dc72e048b9e28715992f2fb3781c"}}}]}, 0x48}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfffa}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x3c, 0x2, [@TCA_FLOWER_ACT={0x38, 0x3, [@m_connmark={0x34, 0x1, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x6c}}, 0x24000000) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) 4.576473596s ago: executing program 3 (id=2349): r0 = socket$inet6(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r2}, 0xc) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r3, &(0x7f0000002fc0)="5e000d001b71ecab36", 0x9, 0x8054, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000340)=[@window={0x3, 0x1, 0x8}, @window={0x3, 0x6, 0x7}, @sack_perm, @window={0x3, 0x0, 0x8}, @mss={0x2, 0x4}, @timestamp, @window={0x3, 0x1, 0x10}, @window={0x3, 0x1, 0x99}], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r3, &(0x7f0000000240)="35569dc24431fad4348d7251545aef09c4def3321ca3efa94c4b46e769f7033e9433d14d5d06f3c45d2b152f4f8503093f42f445e8d72bcf361572806a62865de0a85eadcc2e232d50e9176c1c66e8d0ebd499728a7406a8", 0x58, 0x805, 0x0, 0x0) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000b00)={&(0x7f0000000140)={0xa, 0x4e21, 0x7, @mcast2, 0x7}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000640)="06cf1e62853f42df5c272bc2ca133aa05f90110ce03bc35fe1add9225a91dff2d1e9fa9c10cb8740d208d451a156d146a5c83851d76fb80ae5248e2e88f967eb3ad5a2c32429c50ff0416cc2435baedd5680928aeffbce0bb79e8d7b2f3f0078e452c0c8e9ef04f872ed24fe71104b371bd1aa9b06552f61e2f2eae63e6bfe957dee856ed386bf615294b8d80c027ebf0aa0352e8034f50140a2226094fd070050af35d95bcadd6d7b31c9db6357cd6849f11ca2a677ac7cb7a9ef1af9cbdb6608c302c9e00855fd776497c53ec639b676caba88abd34adfcd2be9140b56c76e3fd0fc77988eb5c8d7c2", 0xea}, {&(0x7f0000000340)="2e1890ac5eeb19415450d3aa8d18f2a0f15fcdddac5286638b7c4a9128724f317f6e8eb191609157c755b41384731fe02bd6495573a872e200bf2260a271576af124be94577eea0727ec4e73579cd0148fac12a79a8525f2f087ebf54ea55dfda46d72ec7b65d4cc71", 0x69}, {&(0x7f00000002c0)="18a626f531b58d371dac5fa30f6fe0ca9f552b107079a357f6c3cc09a53d184b13c47279a9f02413c0f33b404f59677232733b4e35e4", 0x36}, {&(0x7f0000000740)="71d727cef2096cb6cd19c167d2127a6fdb1ca8df5617e86fc93a2d484904280dd78c56f21aa4fcf4a1b848f3649935780e8b6bd116ab499dc33753f1061a480dd7632162cfd2ed01eda27a10320a5652d0ef63db94b6743cb4780e59ff75011659976e2766f4d77893c62c2a119e41f1d94c315df7b16ceac5d0f34983ecfd0fb3b3029a4654e716429627763039bd3760c0", 0x92}, {&(0x7f00000003c0)="11bccfd64d1c6786ead4e693301a2df5f504264b8ae3e16f43aa51a89e", 0x1d}], 0x5, &(0x7f0000000b40)=ANY=[@ANYBLOB="580000000000000029000000390000007308000300000000fe880000000000000000000000000001fe8000000000000000000000000000190000000000000000000000000000000120010000000000000000000000000001580000000000000029000000390000008908010000000000fe8000000000000000000000000000aafc010000000000000000000000000000fe8000000000000000000000000000aa00000000000000000000ffffac1e00011400000000000000290000004300000002e7ff00000000001400000000000000290000003e0000000500000000000000380100000000000029000000370000005c230000000000000502040000010001070000000000000001010001ebf8792dc12e57e9d5c07c5bea8c9221f213c8932b806adf1314e19a33f89e348402a251878409cd7baae9e1c42166a6d9f9a4f9cf3dab8c81512458dcd458969d4975155a502437efb5614b94e125a153f61ef9925a8f5d9480c4ddd9ae5a5b05bf9bceb08bafffd994bc5897bdb97fdc805c602ca60377bf0c93dfcfeb3da5e4e2a3e3d6c5bbd05d2bbfcff6cdb8fad5b5b8fb721ca2956ae9f2f9d1a8b36a68e91022a52f70c1da8fdbf64eeb9399d72728bcfd4005a29d35b169c264bef981bc9b10792788c6bb0c8d5a89cff400fa2ca0e0aef7a20c3b9afb85e05a66bdf079f6755d9830727104ba32c2047fffffff0100c91000000000003ee1177aa5a379db0000000000ffffe0000001040103000000280000000000000029000000370000005c01000000000000040108c2040000000600000000000000"], 0x240}, 0x80) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd7, &(0x7f0000000580)=[{}], 0x8, 0x10, &(0x7f0000001f00), &(0x7f0000000540), 0x8, 0x15, 0x8, 0x0, 0x0}}, 0x10) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000001158000000000000800000850000006d00000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000008c0)={r9, 0x4d, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xb3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r8, 0x0, 0x24040808) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r7], 0x1c}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.549101577s ago: executing program 1 (id=2350): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={r2, 0x400}, 0x8) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r4) sendmsg$ETHTOOL_MSG_RINGS_GET(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002dbd7000fcdbdf250f000000340001801400020076657468305f746f5f62617461647600140002006e657464657673696d300000000000000800030002000000e7ee2d5799a67f1889efedfdf915e6b7141b0ccede6ee39fd55084135387f828832690098f791e36c7272d4426b33f9532b926b162bf62f9608dce999aad3288bc913ff8dcb0f96ee55a84bb85d7bcdf1159a59c6c2009c700236f0302b38ea61bd0b5462304fd516277ccd64181b1e1818cce15"], 0x48}, 0x1, 0x0, 0x0, 0x88c4}, 0x40850) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80102205}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x20, r5, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x44001) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="940000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000640012800b00010067656e657665000054000280050004000100000005000900000000000500090000000000050008000000000008000200e00000010800020064010102050009000100000005000a00000000000500040009000000050008000000000008000500", @ANYRES32=0x0, @ANYBLOB="080003"], 0x94}}, 0x0) socket$unix(0x1, 0x5, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2802, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r10, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000014}, 0x0) socket$unix(0x1, 0x1, 0x0) r11 = socket$unix(0x1, 0x2, 0x0) r12 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r12, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000840)=""/4085, 0xff5}], 0x1}, 0x100) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001f00)=@newtfilter={0x368, 0x2c, 0x8, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0xd, 0xc}, {0x0, 0xf}, {0xfff2, 0x8}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffff}]}}, @filter_kind_options=@f_flow={{0x9}, {0x31c, 0x2, [@TCA_FLOW_ACT={0x2e4, 0x9, 0x0, 0x1, [@m_tunnel_key={0x114, 0x11, 0x0, 0x0, {{0xf}, {0x44, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x7342, 0x3, 0x3, 0x8, 0xafa0}, 0x1}}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x3ff}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @local}]}, {0xa1, 0x6, "5c549790e9f470675b20c56dbf2959ee81b27fc7b0211d91f0005f4ecc2bf0c99fe0fbbc7383758bf10024894f7db20415c61454d8756ad28ba69ce7497264fecf22817c8b645be46a8b29e58ea0a0ea1e4f44f8ce5e80dd0ecf2467a3a7a86f5456598b5225089757f0f848a62d42db95aecdf6a8bd331c27d7081cd7cc33305a579445a8e90ef54c4f6c2c9861315fae90037bdba961ebc3bb1950af"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_xt={0x1cc, 0xf, 0x0, 0x0, {{0x7}, {0x120, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x4000008}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_TARG={0xbc, 0x6, {0x0, 'raw\x00', 0x1, 0x0, "55d171b69f1e1d827311750b259bb6b9966d199a5c8d4330132aacb5fc17d3b3751d0892ab99d8dee1007ec0e62a7c8c28ee3765886f0222ca35ef0a10560d27702bbc33b877ec72a418713daa0a9ebc462dddc86368cca08d54fc657f33dd3d062051dce86e37f2845169b431a979986e7bbff58cc503c20eba995cce59d113b952ecdff3a13204238004376c3bb746a73c"}}, @TCA_IPT_TABLE={0x43, 0x1, 'security\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_HOOK={0x8}]}, {0x86, 0x6, "b38d54de5275382d446dfad23bf81bf68d07aa033fb76f41be0d9b224e6ccbeb9bf42b9a9d3a630e7c8cb1683b18bf8d4fcc9c27a13bedac4a4d7b321717713f27de7b9b4662ca85d223bc7d7b0db270f9eb95866f3330769cd7d1a863bd935937a81a5feef1d4ab3de953333f862520aceae5098b76504a9aede423238236bae519"}, {0xc}, {0xc}}}]}, @TCA_FLOW_KEYS={0x8, 0x1, 0x18aab}, @TCA_FLOW_RSHIFT={0x8, 0x4, 0x4}, @TCA_FLOW_KEYS={0x8, 0x1, 0xc0e3}, @TCA_FLOW_EMATCHES={0xc, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xf}}]}, @TCA_FLOW_KEYS={0x8, 0x1, 0x3cf0}, @TCA_FLOW_BASECLASS={0x8, 0x3, {0x7, 0x3}}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0x7}}]}, 0x368}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r13 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r13, &(0x7f0000000000)={0x0, 0xd18c9b35, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030036000b05d25a806c8c6f94f90224fc60100005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 3.83900742s ago: executing program 0 (id=2351): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000000)={'syztnl1\x00', &(0x7f0000000100)={'erspan0\x00', 0x0, 0x8, 0x7, 0xa, 0x5, {{0x16, 0x4, 0x2, 0x2c, 0x58, 0x67, 0x0, 0x2, 0x4, 0x0, @local, @local, {[@timestamp_addr={0x44, 0x34, 0x59, 0x1, 0xe, [{@rand_addr=0x64010101, 0x1f4}, {@multicast2, 0x1000}, {@empty, 0x9}, {@empty, 0x7fff}, {@private=0xa010100, 0x3}, {@broadcast, 0x5}]}, @ssrr={0x89, 0xf, 0x57, [@private=0xa010101, @multicast2, @rand_addr=0x64010100]}]}}}}}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000200)={0x11c0, r1, 0x1, 0x0, 0x300, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x11a8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "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"}, @ETHTOOL_A_BITSET_BITS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xdd2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x6}, @ETHTOOL_A_BITSET_BITS={0x16c, 0x3, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '/\xbd:g@}.:@+\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa6}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '-[\\$\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffa}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, ']&,*[[#]^!-^-\x00'}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ':&\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xd}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, ',^-\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\'\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1a}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ipvlan1\x00'}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '!.\x1b^,+&\\\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8001}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'erspan0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '%)+\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '@\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x4}]}, 0x11c0}}, 0x40) 2.668760816s ago: executing program 4 (id=2353): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x9, [@decl_tag={0x5, 0x0, 0x0, 0x11, 0x2, 0xffffffff}, @typedef={0x7}]}, {0x0, [0x0, 0x30, 0x2e, 0x5f, 0x61, 0x30, 0x61]}}, 0x0, 0x3d, 0x0, 0x1}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x2, '\x00', 0x0, r0, 0x0, 0x1}, 0x50) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x11, 0xfffffeff, 0x5, 0xfffffff8, 0x10200, r1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x800004, 0x0, @void, @value, @value=r2}, 0x50) r3 = epoll_create1(0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002300)={0x1c, 0x34, 0x107, 0xffffffff, 0xfffffffe, {0x4, 0x7c}, [@nested={0x8, 0x4, 0x0, 0x1, [@nested={0x4, 0x149}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) r5 = socket(0x1, 0x80802, 0x0) r6 = epoll_create1(0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x800, 0x70bd29, 0x25dfdbfd, {0x60, 0x0, 0x0, 0x0, {0xffff, 0x3}, {0xfff3, 0x5}, {0x2, 0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_AUTORATE={0x8, 0x9, 0x31b5}, @TCA_CAKE_MPU={0x8, 0xe, 0x34}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44045}, 0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r6, &(0x7f0000000100)={0xa701ffd63a9c20ce}) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f00000000c0)={0x10000001}) epoll_pwait(r6, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0) close(r6) shutdown(r5, 0x0) close(r3) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r9, &(0x7f0000000180), 0x0, 0x0) getsockname$packet(r8, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r12 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$AUTOFS_IOC_ASKUMOUNT(r5, 0x80049370, &(0x7f0000000200)) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r13) write$tun(r11, &(0x7f0000000300)={@val={0x2000}, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x3d, 0x0, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x300, 0x0, 0x29, 0x0, @gue={{0x2}, "ebc7a1e0ff5befe1fdbc66e400d7e83306de422b4a81099bda"}}}}}}}, 0x4f) setsockopt$MRT_ADD_VIF(r8, 0x0, 0xca, &(0x7f0000000080)={0xffffffffffffffff, 0x8, 0x8, 0x1, @vifc_lcl_ifindex=r10, @loopback}, 0x10) 1.471219529s ago: executing program 3 (id=2355): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip_vti0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip_vti0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x5}, @IFLA_BOND_PRIMARY={0x8, 0xb, r1}]}}}]}, 0x44}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000200)={0x2, 0x3, 0x0, 0x2, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0xffffff7f}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_key={0x2, 0x8, 0x8, 0x0, '4'}]}, 0x60}, 0x1, 0x7}, 0x0) 1.467876894s ago: executing program 4 (id=2356): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f0000000900)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x5, [@enum64={0x3, 0x24, 0x0, 0x13, 0x0, 0x2}, @enum={0xe, 0x1, 0x0, 0x6, 0x4, [{0xb, 0x3921aa88}]}, @typedef={0x6, 0x0, 0x0, 0x8, 0x3}, @ptr={0xc}]}, {0x0, [0x0, 0x30, 0x5f]}}, &(0x7f00000005c0)=""/226, 0x55, 0xe2, 0x1, 0x5}, 0x28) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000002f00)={0x0, 0x0, &(0x7f0000002ec0)={&(0x7f0000000180)={0x20, 0x1402, 0x1, 0x70bd30, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r1}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000810}, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, 0x0) 1.41154169s ago: executing program 0 (id=2357): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x4}, {}, {0x6, 0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}, @TCA_CHAIN={0x8, 0xb, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0xc858}, 0x80) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r3, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) r4 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8848}, 0x80) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) r5 = socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400ff0100000000000000000000000000010c0002"], 0xe4}}, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r9 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r8, @ANYBLOB="00000000100000001c001a80"], 0x44}, 0x1, 0x0, 0x0, 0x4040001}, 0x2000000) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001340)=@newtaction={0x488, 0x30, 0x12f, 0x0, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0xfffffe00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x80, 0x6, 0x0, 0x3, 0x1, 0x0, 0xffff, 0x0, 0x1, 0x10000, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc74, 0x0, 0xffffffff, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffb5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x10, {0x7, 0x0, 0xba6d, 0x0, 0x0, 0x7}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x1}}}}]}]}, 0x488}}, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x38, 0x40, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x18, 0x1, 0x0, 0x1, [@nested={0x14, 0x10, 0x0, 0x1, [@nested={0x10, 0xb, 0x0, 0x1, [@typed={0x8, 0x1, 0x0, 0x0, @ipv4=@remote}, @generic="f9c4129c"]}]}]}, @typed={0x8, 0x2, 0x0, 0x0, @fd=r5}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) 1.394990794s ago: executing program 2 (id=2358): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r2, &(0x7f0000000180)={0x11, 0x17, r3, 0x1, 0x40, 0x6, @broadcast}, 0x14) getsockname$packet(r2, &(0x7f00000018c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001880)={&(0x7f0000000100)=ANY=[@ANYBLOB="38000000540001000000000000c40000070082", @ANYRES32=r4], 0x38}, 0x1, 0x0, 0x0, 0x881}, 0x0) r5 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) (async) setsockopt$inet6_int(r5, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) (async) sendmmsg(r5, &(0x7f0000000140)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @local, 0x4, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="10000000000000002900000043"], 0x10}}], 0x1, 0x24008000) (async) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000180)="a2", 0x1}], 0x1) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2, 0x10, r0, 0x0) (async) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000b40)=@newlink={0x38, 0x10, 0xffffff1f, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, 0x782e}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_ROLE={0x8, 0x4, 0x2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x800) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x98402000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, 0x0, 0x400, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_CQM={0x4}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4c080}, 0x20008000) (async) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000280), 0x4) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000034e0000000"], 0x20}}, 0x0) (async) r9 = socket$pppoe(0x18, 0x1, 0x0) (async) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x3, 0x13, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000ffffffff000000000400000018010000696c6c2700000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000088310000850000000600000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000006000000850000007b00000095"], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r10, 0x0, 0xe, 0x0, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) ioctl$F2FS_IOC_GARBAGE_COLLECT(r9, 0x4004f506, &(0x7f0000000200)=0x1) (async) unshare(0x600) r11 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r11, 0x11c, 0x2, 0x0, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r8, 0x8002f515, &(0x7f0000000000)) 1.388569116s ago: executing program 1 (id=2359): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@ipv4_deladdr={0x34, 0x15, 0x1, 0xfffffffb, 0x2000000, {0x2, 0x18, 0x0, 0x0, r7}, [@IFA_LABEL={0x14, 0x3, 'veth0\x00'}, @IFA_ADDRESS={0x8, 0x1, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x14000000) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x8, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x5, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x1, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r11, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) unshare(0xa020480) preadv(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x8) r12 = socket$inet6(0xa, 0x2, 0x0) socketpair(0x1a, 0x2, 0x7fffffff, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$NFT_BATCH(r13, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELRULE={0x44, 0x8, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWSET={0x114, 0x9, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_EXPR={0x3c, 0x11, 0x0, 0x1, @payload={{0xc}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_SREG={0x8, 0x5, 0x1, 0x0, 0xf}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_PAYLOAD_CSUM_TYPE={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0xfffffc00}]}}}, @NFTA_SET_DESC={0xbc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0xb0, 0x2, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x400}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x4}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0x54, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}]}, @NFTA_SET_DESC_SIZE={0x8}]}]}, @NFT_MSG_DELSETELEM={0x38, 0xe, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0xc0, 0x6, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_USERDATA={0x3c, 0x7, 0x1, 0x0, "dcf7881b234526e969cd853b34e92260f863a30d537c17efabc47701ca5b9b9392b27c28e208b0a89f89661e10a6158507a5090596620cf1"}, @NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_NG_MODULUS={0x8}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0x4}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0xff2}, @NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0xfffffffa}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x50, 0x18, 0xa, 0x3, 0x0, 0x0, {0x5}, [@NFTA_FLOWTABLE_HOOK={0x24, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x9}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_DELSET={0x1c, 0xb, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0xfff}]}, @NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0xa}, @NFT_OBJECT_TUNNEL=@NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}}, @NFT_MSG_NEWTABLE={0x5c, 0x0, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x380}, 0x1, 0x0, 0x0, 0x4000}, 0x20000080) bind$inet6(r12, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r12, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x6, @mcast1}, 0x1c) sendto$inet6(r12, &(0x7f0000000e80)="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", 0x163, 0x6d91fb6102d8910c, 0x0, 0x0) sendto$inet6(r12, 0x0, 0x0, 0x40000, 0x0, 0x0) recvfrom(r12, 0x0, 0xfffffffffffffd41, 0x10021, 0x0, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r12, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x14) 1.255703703s ago: executing program 4 (id=2360): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000007c0), r0) r2 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r2, &(0x7f0000000580)={0xa, 0x0, 0x7, @local, 0x5, 0x3}, 0x20) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0xfffe}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_XFRM_DIR={0x5, 0x3, 0x2}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x14, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000800)={0x68, r1, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0x800, @media='ib\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x20}, 0x4000) 1.254174045s ago: executing program 3 (id=2361): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e22, 0x1, @empty, 0x5}}, 0x4, 0x3}, &(0x7f00000000c0)=0x90) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r1, 0x2fc, 0x4, 0x6}, 0x10) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={r1, 0x7}, &(0x7f0000000180)=0x8) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f00000001c0)=0x800, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r3, 0x4, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x44) r5 = accept$inet6(r0, 0x0, &(0x7f0000000380)) sendto$inet6(r5, &(0x7f00000003c0)="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", 0xff, 0x4040000, &(0x7f00000004c0)={0xa, 0x4e24, 0x3, @mcast1, 0x1}, 0x1c) r6 = accept$inet(0xffffffffffffffff, &(0x7f0000000500)={0x2, 0x0, @broadcast}, &(0x7f0000000540)=0x10) setsockopt$IP_VS_SO_SET_STOPDAEMON(r6, 0x0, 0x48c, &(0x7f0000000580)={0x0, 'macvlan0\x00', 0x4}, 0x18) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x22, 0x80000, 0x4) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f00000005c0)={@ipv4={'\x00', '\xff\xff', @empty}}, 0x14) sendmmsg$inet6(r8, &(0x7f0000000e00)=[{{&(0x7f0000000600)={0xa, 0x4e24, 0x7ff, @dev={0xfe, 0x80, '\x00', 0xc}, 0x5}, 0x1c, &(0x7f00000009c0)=[{&(0x7f0000000640)="5ef6aac04de64c9acbe370360f7238fa838169228fdbc9fb50892efa5e9a99d96a6516652102b00e11a3d18daba3e10658edbd4ff148afea58cc61bd9b8dc328536ce20ef2db28934189b9562fd7bcf287f4400e00543333daef0c9f49fa179853d2be4a24b79a95b5fe7523a8601e6fb2bf84bfc988bce61108090869009c659d89adc794e1da4a8312c40594e8ddea1204160b51f5b1b79e8f3098e12fc4b71a4e605f7fbad8fca124b51204e88b5a733b95ec20ec6d558e4ded92512fb0dddda706929c3e1d0e5ace38a7449721fa2ef75a31e4", 0xd5}, {&(0x7f0000000740)="7d83d209a25f5be3d44b9b6aa36ad96aec327573ba9958ebc8286cd36d3aaa94f0bae88ef04499caf3be501e4126b6b6ef9f7a08ff9e41ffbc51da08faa0aa2e431cad2a402a9fbbc9368f8ff49135227f8d31d1ec8c56c93e31d3cf07a5bd413b7b02bbfd7bd33d8810d2693043b4fa05f14c6209ccacf984a9e4f0bfbe15524bada542b4be85a4e6", 0x89}, {&(0x7f0000000800)="7f68a6163ed2e20ee9a8502f5621890159cef14178f60ed57f6a4bb2dbb24ce401e693a331448e433e14263ee93345450d1d272c6fbe60d6ced32bd3cd53e8ce13a6fdb6f4c7d80641283355a29059154bff47fa22d2bd827c1d41bfcc44cc48fbfce8301d0d576df66512279349176737563aa46fd2d4e7e37df9ea0d7742aff3231aa262415f66971d9e9b2d176b46bdb0ed510e7c42aca63e88ffb9030dd75011c97911e874d50b5904f08440b054906e981cd146472d17ba929b4bcfd97fcf150c91b9d0a13320da9301992af627158161633eb47b55888cdce9b2824d44f40c2b", 0xe3}, {&(0x7f0000000900)="b9ceaf5bd2b2bf4846321e463cb84f85984d6b17a20bf02e6a31d70c58e036bbe4b5b4edb809254f1e24bf4864f6a06dcd41a88281bb956d87aa040adc03e54a83ba796070a3a098023e2cb0d0ec7093022ad0013d7aaacc42372036b069b529158fad8bc5b2c70e61e92246dad8a50167210159c0872761db7dcde595fcf898f566", 0x82}], 0x4, &(0x7f0000000a00)=[@dstopts={{0x30, 0x29, 0x37, {0x58, 0x2, '\x00', [@calipso={0x7, 0x10, {0x0, 0x2, 0xe, 0x0, [0xb1e]}}]}}}], 0x30}}, {{&(0x7f0000000a40)={0xa, 0x4e20, 0x5, @remote, 0xa98}, 0x1c, &(0x7f0000000c40)=[{&(0x7f0000000a80)="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", 0xfc}, {&(0x7f0000000b80)="784943a3c2eb4890d06134460b65d6f266410796eb2aacee84651e6b712c16e2ca2aaef20aa3cc52ecc5bef1d209be23c138d555f4e1429a01ca75f271613117ea7fb87b514a7f40fac9d861cf7577e031a71ff5a6cd4817b305c6ae1b021738aa062064f7f6f2f1cd72a0f7a5527d48622e364a067ade13f46d9e1706ff735543ac36ddf5941658a998ff26c746a9e8fe413aae329b7b583c9a38b6b4db08ff5e41faa52079bd99fa5b760a60239988", 0xb0}], 0x2, &(0x7f0000000c80)}}, {{&(0x7f0000000cc0)={0xa, 0x4e20, 0x7, @rand_addr=' \x01\x00', 0x5}, 0x1c, &(0x7f0000000dc0)=[{&(0x7f0000000d00)="78c9b8d34a0d1f852f5b674028c10c5876c1e7d540d2ee00a90963b74d50cca741f13b55120e7c80262da75479d8f43991a6b73101ad5b44c0c014dd147a01d0e72b9a752a51d8da25c170a880448968569a29a6f2ca71b8459e67a30ca626ac7bdfd904f7c6930b3b5a3b1c438a09209d27c09372ca11e5bb69fa99bbfccc93a4b689cc37e9", 0x86}], 0x1}}], 0x3, 0x84) sendmmsg(r7, &(0x7f0000004c40)=[{{&(0x7f0000000ec0)=@pptp={0x18, 0x2, {0x2, @empty}}, 0x80, &(0x7f0000001140)=[{&(0x7f0000000f40)="e5dcd7602cbcdd063edb072ff471fe1967298047e1a981bcdba27841d06fe48163ed5ec03615a7bf4efa1c97f62dd13c97aa15aae1c9fd01ce6f6ea883fff675e9f2c4e90ef50d3af7e5b527f3911649ea13a39d1fef7462897c0bdbe136a5939a43cec53297b71f0afa88c3bdab298c4040f4", 0x73}, {&(0x7f0000000fc0)="347339866002db8b4462232e899c4de8b850d3320b3d2823dedd74ef4fa45cf5eb62ad5db835a113dd3a2d2489df38f5ecfe41f9893d5a0d2fcf8f3791d7cb6a58f45a703cef4c1bcbfe20e5ee17cfb46dd6abaa89925923aa5b5306202a4463bb27a829e9d651a39cf48a7cd62cbf1f537daf33441bb98fc478c86fea046286ccf375b5231682786652b906fc1df1b9c9ba03247f28e410c3f85faa9bc832357b01c876b05d23d6b4991b329e73b843da98a65b5bf4921aef257b2dc5bf8fab8c88f0f51a123dc375e8ef9c71c3c6e3e136abd590d2a079f1e8425b92bc8e6073559c251bff2e6e6f293d58b1baa41e63c9a535b2e9", 0xf6}, {&(0x7f00000010c0)="fe3d3343f58c78419f1d4b3536f5592682c8da78aa13d2ff34d17a8106235448de5d7ea593fd7181413cc3c0cbd13672f59c2bea5fc514fc27b8a92b38e6c9c99c37b49d53970b40f91dc729", 0x4c}], 0x3, &(0x7f0000001180)=[{0xe0, 0x11, 0x9, "c827df5325c67b522cd1b73aad9c834f8d97c7e276656983edeaaaeb2fb816f65b6402c63449a4558959058b6110090231c6852e097896642dfac17e25850d796581dbf6f6b0904e0f60da6300544d028048c289c5a84513ad321a57bc92b065afd755fc847ac49a1e52ff707a13fddc3984e6b591ba00a3708d68cca1f716c7a11cfe769d1ddb06e1affec846edd6c519bcbe796c67b130a45510712d88d753bd9f936425db3e6c1e768358b6f7b0eb9bf3790a34388f9a3ae22b63c696be2cdd855a7410d3cda34023"}], 0xe0}}, {{&(0x7f0000001280)=@ieee802154={0x24, @long={0x3, 0x3}}, 0x80, &(0x7f00000018c0)=[{&(0x7f0000001300)="5de8805d083fc90a4f397685a4c3850c6e8c5d64e0067acfea4f2a4af4a68ae690cf277531d046a449f415e4b2435ef5d197658b4b546574c70c769aad5d69fadb188a11729f32f3bdcdd812c63b238bbdc86ae63b803a9cf8b2338b9edfc7b413ba319f41930991ef87fdd307a11c46dc4924a5f3677d519063cc5b3bd8a1b9fd0e5ca85323aa8c2545ed516ffc8484bdf3b11c2d3cdc9674500229f8de3a0b8e35f3db6cc73de76c81852fb5c7870fe132f3b1", 0xb4}, {&(0x7f00000013c0)="0eb73f582000860a930f8b3f4c8160e1eef4f46e2f28e10178e625c6a30af13058d63ebe819ac712099d47db72ddb15a832597bc2885b54d20efd9af865a9da14b3d56467fa33412c47ef7020c8d64def714fb60479e42f11922cd12bdb5bafa6d29b2031cbb57ac5682bb8a9b9723fb06482bee489629dd7f40b751ef4faa7b5a764828e75f334a814a1a76c30af0e762e6494db25e6d283b314d0d273c5dfef708b9f590bcf2740a558765a29ad8d3d2a838ac5152c7c46d4f48ab0d87", 0xbe}, {&(0x7f0000001480)="339ab2e02f21e76f4a4565ef6d1a46d17756de1e870c8fdb679a91ac35ebeb8d028aae703e59a66fb3750aa777913ea2cbbef457b351e4c56d9e3ef60d324c6cf1e418e95cb0880535663f6c169fa0b50467d0a63060606e9463d941ccc9226ab49c3a81dd5afb583578d62c52e2462ddd500358a0ecc68384b044b7ab62971015df976099121e19c1e6f07627779c17e85b324d615233db0a6bcdc726492258647bad90ecf4526247aaa4657b554e5e9304f16f3a32da050d796b76378b9d063a80bb8983795541", 0xc8}, {&(0x7f0000001580)="7ecdd404f06b4a16cc2783374f9b144b48e573a46f6d91c274a449218523b1aa166706674e317e3e995442fee397b3eb45a814a7be21d283a1f7dcae553c76beddddce9330bc487f64248d17b907b0d0b043d28f0eddedf18b7cf1076bf4f2ab044b68dfa85ada9d75ac62e563381d5c4527b22e3655", 0x76}, {&(0x7f0000001600)="367b06f7809e3d7f8916c43bf3efb8208b79f7654f590c32d494f13018d1c30b7ed11a5e7df00b2c64775648afa2eea97d61deb94be69503692e78bb7ddf7afb37daf854b8788cb17ee94903929a0e4d272122ff4cb5980e3be6855357417c32d46ce5426749b74f280738174cd2abd572ed6c39880d4daf57acad259d51858b364d3c784de8ec4927920fc29df7a8403ed099", 0x93}, {&(0x7f00000016c0)="5cd01c6e204246b2c9b9013947b5479e21d9acc36ab86bcdd960b796634452356f5fd061739000349af9f00199819e224f8369a41befea101b1acbd45bee0d8e660e8758290979e52fdf986e0f62d37e73dba02a3575582ba04ff9a42c38b80119e8614a5fe7614f6b5a67206c3aeb9dbff61efb85d66f02509c5afbe855402cabc56e70dff7d6a5d0e74173e841abb449794d1b656887f7f04a180ead81f90f9c41174f0458d35e132c0323d1922f558d0d95a7d1447a72362e4d1ba065f3f66e9ae3ca553be8aa846bfdb02758658b21afaddb9b8abb27e7ac9234db79a6408b84184b72edb4875388306e45a1b25f3aa0919d", 0xf4}, {&(0x7f00000017c0)="a0aa2678fdd0c02992a097abbea224a1355842535dea5b2b0b6b8348b886099d78002b0c3415512114664722cf1bcf34185ec55409f8aaeef79aebb41fc00695f2a4d52bcb06a6fa0a98860e06ab566fa69a9e942016a1c4830c33e38c4994538fb15762d0beab771ec6584e459aa2071aa044981b2a", 0x76}, {&(0x7f0000001840)="1781efc99891669fe9bf9c660303edd6e2680bc6baa7a9f3a44879085025ccfe0a899401a09b40550af475592ceff27b658c4cdc2a425578826c3c1f79a174a513e7a9f6f85f3371d4bf8fe88709af8b9bb5c0c4de2743c5056da9531321033076f8", 0x62}], 0x8, &(0x7f0000001940)=[{0xc8, 0x10f, 0x2, "72bef6439e0bb35c7e32667eac935869b26cf0fc6e93228fa231d1ea0f2891884763a3cf0a595769f09be20170518839b6431f80f5c235beb0828064765c3610c319a669ce0cdd4a19aad497f1767c9bd9648e4f5ae668a1dfeed0b3c14381b83ca7f19761445d581b7edb226743538fe753bf191dc9484d18e6d96f2e643096205328a203ce8f471d49b291a986054998f7721cb8fd066fe07b57dafb607d8658c2e8e2625a99c50099d9c035e7a2253d59"}], 0xc8}}, {{&(0x7f0000001a40)=@generic={0x15, "d5f75db3320c91e2bd0b19817035a36384bbff6e655706b78152826ef6c77c11685732a28d8e753209de59ae9fcb3ce0fb2372a66f82b9b1469b4e2a93615f6992a9534daff6e468909fddeefa880c82cc35c12bfbeb0c11a90692aa4cc94a742c2e8d6706f3844000c76781a2cf34f4bca157e71555f94ba04fd4caa01f"}, 0x80, &(0x7f0000003080)=[{&(0x7f0000001ac0)="7fa75027ead630aadf421b7f308bcec2c23272c7810558c70431c63d09726b1dbc265d7cdac2479beff5681f3ff963f5e1f2dd398f72ebbafd0341f7d8f2286ce52f7efe7e", 0x45}, {&(0x7f0000001b40)="7ea65b3a365a898f3c02a49ce1280c6c08474855e7a6fba71ab0e01a423887321fcda6d060d3a54e7520437707a369ef8b6ad6c4a5c6dbe2adbec36852b77d254b5264a1903376bbe0c065ef1e2b525fa932c79773222f331e34bea54b5124599c0e3a5f983cb94094ba0f", 0x6b}, {&(0x7f0000001bc0)="9a44f9985e68a2e4ff114989d88d7f6cee4541cedbdb68b9b8755157388ae6082be033f9effd65afbc273d908738e83bec5c0a2db9056aedcda2327bee9d7b3860fbd955625e1d7cc551e383cb16be2ac89299cf0dc93c11c2d975f69f01cff01e5a4baa520073470280348128b6658db8b546379744e99dcbd5cf28175aeb6de4d73d21c6522e678aeb3d4496ac44e9c955ab99e642672a7b6122294efff341f1001b0026bfb09390995355a80d6aed055686b31bdf475e2297807e3f307429a029120e9e5991a4555d", 0xca}, {&(0x7f0000001cc0)="dbd94b00c20a0a46f82ce81a6ac9007edd85", 0x12}, {&(0x7f0000001d00)="3e322cd4d0f4630ddc34e907f2edbb997cf2e55841f92879cc16a7db5e495894391765155af8b93f9957a2f1e09963604592711e9d8a87254ea3d5e5b43511a60b4f3ef8b060176ca75de91a47f121ac50689c528221ae2a8d94963eba3bbd5a52d1aaca6ec11f7030c1f120a759910f9aa492425a40ef6cc1653c7d5c5979f326fb2f775be66510886cda07916fcd0d54d3b7d5cda9082d7b208d3a5f6c1f63010f820c70172a33dbc3ad575bb3d5657a0d56bb0fcfbf7201933de24d93be94f5ca82e4e43d6ffb0973", 0xca}, {&(0x7f0000001e00)="23ebd143377f574b7e5553ccc51c2a13c3b50a884cf02552b27bdfbedefb19f2bcc4901e7a2dde52f49937506856a24dc506fec64c011eeb5455009a48fffc99c7867e709a6c622e5984a00f80d0ca30fe59c3e0c448cdff3ca1432aac30e913e57b7761e0e7c6e900472f60dccfa9954989efcb1b5616e5796d34e3110b279d315b5df96ff1ce2b271bf72c0d4d08469950cadf17ff1075b254cc5f4c39e190de945a698d3143062702b42b3f3e30eb419d8aa7f80c3427595139f599f3bcea4a9fbbc101d69830145bb668c1f7c110bd4f000644", 0xd5}, {&(0x7f0000001f00)="8ad146bd035976754bc92a91ba14ecfa3eba5daec960288fbbaeaebbdc6b7337d421a2f5cda9fb0d152558640393bff6a616e5f1a8742029f47e367c9638f39e4dff8ad5f47b82b8cb78fb412090dac21d874a08d538e787d69402b1e4cd5b45dce0d77be7159b8c171ab197ac8f694966b67729e848f33e8bc8a27f97591df5bff3d8f6", 0x84}, {&(0x7f0000001fc0)="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", 0x1000}, {&(0x7f0000002fc0)="e003b76d635c4f5db9634ad1dee6ca79c067bdd19fcd39c5a814ae739e11666cc78a449581db25c103eac654977aa4c21d1e74191a5159f9e1396cda05f27a4dc59c40252bf33652779659497001d4b0b5be89948dff6eac6134947d143e2744659cad5aebbc8f32450ad15a5167dedff95247a366ee24005d1a0b644ef7708fa30b957f7910089ac65aca92e3f817b603cccd2a27a04be031e2f21eff310058016d524041d33df18a385c1aaaff601fc8d5db", 0xb3}], 0x9, &(0x7f0000003140)=[{0xd0, 0x10b, 0x2, "288db9f78a3273f8d71c0a8e0638927609088ffe06fc335dc22f4fc280c43ffcfee09e196ad4f1864caab26a832944d07d9c5293b8083c4c134e4e99dd1f574575f7732748b7391eee313c4a59a534fa3d0aec8c90357bf216497527a33948f7a8ab079efd4612e5296f7c3e2123aa3a78a5c2095fde7f440d40949f766cd56bf3ea1c213304d03b12957195d5716177c5ddbe28a3c7c37e241abdd88ad1dd15eafa64d6bae94a3df99aaee5172b23baf07b9cfcb79fc793189e56e13917"}], 0xd0}}, {{0x0, 0x0, &(0x7f0000003500)=[{&(0x7f0000003240)="e6519bd12fc97930efa47d360f9ca2e425b6dff7865d0b8ad1b90e0172ba7f129f260d95ad442f7a4ad6fc18c4825345b5188dac9f2c8695b2c5575b303123d82235a50d742924934ce6d2e35293275a57eed41d1e54f466a5cb61a60378fe91d3ba08503014221f837d2fbff636ceac2b3f22dfa101b67d45ed6eea0678796c4d29d91a136848f7a3b50112c8f1547503079c10011f00a020c85fbf814a0bd125060eb8e3c51b5f285aa3f6abd7849e7cb009aa09336931ab", 0xb9}, {&(0x7f0000003300)="a86575e657a53b3ddb4d2556ff0e68be144f315a15bed0073f6dd0a6675024417a7d4a2284f3257de16eeb9cbf544a9e7ca7cb03a3f3aef252a70e4df67d98ea4535111dd8dd61ca7ddef3ed5bddd94016613ea20a3f4a7d0a9ba47e236af142d24fc2cdd85b08568edfa67c8ca66ac4c0fb4e0d110ed36fc941c143b9711a61b471dc3e02454ad2b77187d7fd90a451ad77d48ac7463602287f8d728abc7576eee713a16a60899a78e9e7d75fbd816572d0a326311f9a39322233225183d6302c497610806930ad17fd1c617da50d36bfe2958cba34f9adc5c46dc19e0674299f81e8dfa777ff732d", 0xe9}, {&(0x7f0000003400)="d9b23f68c71149", 0x7}, {&(0x7f0000003440)="63d0e832879b246857a1d649f0ee726d375555bb9eed5aef528d85fbf92def94f14e8c2ae602755653deb687777a124edcbe397cb72a4b9c4a614c6709db5800e63bc756958ed5084cf34a8346c849b5d9d861cee62f70a0b8", 0x59}, {&(0x7f00000034c0)="3f70fc57216e0b", 0x7}], 0x5, &(0x7f0000003580)=[{0x70, 0x10f, 0x40000000, "127c3179f084e1b71f907765959bda2d704bb8304d6abb54be25d208f75c4ccc097826d96fdc2c0add516e94ddcad862700e52c0ef208891773630bbdb631866cca1b07d1707f2851290cc395849580ff88373b8916dbff41ff2e2434d"}, {0xc8, 0x117, 0xfff, "808e2c290d16d0d99e92ce26d5003d68e3bbb8c15f416ed7e957baa870e9c6bdc7db40cd7c941ec8217253d33a5942e1c6a31ccbd6aa94e50b520a1953274ed8a5f61b2d954cd8570b39e4dbc8da5905fe684657c9ae04b7d5228ab877691bcf0afd7a81af5fdede3a1cd7f2ab5bccac58392fe266b9c900e2b6bee879fff7cace22c2785360e20ccbff92b1808a617605ee96153794fdbb30687c78c3f05e1c5d8d973078e2bbcae32399ca15c65c346ab3"}, {0x50, 0x112, 0x9, "ef6e46713f95564164fcae9dc9619ff2b5d93bfa26e022027020d3e8094ac4d5d45ea49460a0e6ef9e00005efb3180ef6efff45120ae7e8940a557ee13af500c"}, {0x88, 0x115, 0x3, "8f5fcb26aeb43d6d82fff7626aee655ce2771ee6d8aed06945a157170d07aff8d11154a0cb1285ecd43b660fddb7192da38def8454974fb677845e4264d6736db689e8ff9a3b9b8b227b507673c82597c0902ca1099cb8eaa5f281238cea8c42f68a321322def56907884537a2fc887dda26401bd6"}, {0x1010, 0x115, 0x6, "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"}], 0x1220}}, {{0x0, 0x0, &(0x7f0000004b00)=[{&(0x7f00000047c0)="f91166db8029d213a1c524e00ae2e75a02965f40f84890dab0380a9d6bc77a16cfc56adbdf429b84c0a4fc95ba241894b931f77ed861b4c9dd826fdc652d08be8f90f0472da1eee5dc3fdb8fe81946dd444c4f0321b6ce4183fb8f8d7855b6441dbf74c1b1481f23eb93dcac6843f35ea8db4dee2265c614536fba987f392d06ecf6088892c66c4408b3452c041d9feafda5f728992d0ace87365510f570c725cbcba8fc2011319eaf4fb11b9241939b8205893a642d133df2b40763b4c2", 0xbe}, {&(0x7f0000004880)="22d5dda852cece9fc3ad93def49366bd8351ba492f3f93e47c457d1db6d294d05621892750fa62636e5ff11d4a57539eaabb018395d5ef1f2bc536e135ac8de57048b558b624c8f5f598328c7135fd840f795c1821d76b97162419b78ddb5c184d9a506a40563b4f9913eb068d71c7de0f1299f023cc45887c16136c3d83c636a5be3dd5febdf872b2ee1ff244f95da478c254103e6a79fafe202a365a51c3132f", 0xa1}, {&(0x7f0000004940)="45a593d9833c23a59a230b39dcd3fc2c8fbab842dfcdd96fe86f0e8f6b0e3b97b3e59ec1a42e6fbe9eb52768d04368b7d8b4913de85d6c3a865e697d6b0a11540c2c5948e534f4411a323e115a4a6ddc167d5d26d33969d90f9faf805730edc83a896eaea02fe565232e648273a42b162b93875adce2c04715e4c39a1d2c2cb7be", 0x81}, {&(0x7f0000004a00)="516c6dfe7f6b395a58f350c5355ec7fbd6980f1fc1d70a75cce5de2529749fe85fb5f3a6dce0f4fa0d82a050dc05516da12c27645f95ad2f36d7e755f5c6937d0da8aa1936a108d8900a41c31fe81cca669335fa46884f27abc239117d877c95967b33e23bdd1dfb5b93c7e247315f76aada80b6b402f26f0b54427de3510b3f1ede2b0c1db55459736ff5b4112056cbe321a7ea1fb0f3d0a3b8b23ec7147a5d3e7588fd887c294086e9e69c4c7dc2203181949dc75c45", 0xb7}, {&(0x7f0000004ac0)="7009a5be91d1187746868163a3b6cc6f2cc8224daf54d872", 0x18}], 0x5, &(0x7f0000004b80)=[{0xb8, 0x101, 0x97cc, "adcd6e478acd4652538e4fdcde6939af1f922a1b5b8bfb37f283709c3aa008e6dde600e2689145c659c18c0fe60d6261dec6a4370502541462f6d30e16adf22b51b25c5a10ff07490c39676654efc369b631ce8117cfeb2bf31faaa4151a350b1cf8c5523080f121179588ab0fc38ac661ecca715ef9193191be814b8b2a58b180519a27fae2ad46cee66ca6a75acd5c688ec8c38d4310ec7e070f27540fdc67f1"}], 0xb8}}], 0x5, 0x800) r9 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000004dc0)=@generic={&(0x7f0000004d80)='./file0\x00', 0x0, 0x8}, 0x18) ioctl$FS_IOC_GETFSLABEL(r9, 0x81009431, &(0x7f0000004e00)) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r8, 0x89f0, &(0x7f0000004fc0)={'erspan0\x00', &(0x7f0000004f40)={'gretap0\x00', 0x0, 0xf847, 0x7, 0x80000000, 0x4, {{0x10, 0x4, 0x1, 0xa, 0x40, 0x65, 0x0, 0x1, 0x4, 0x0, @private=0xa010102, @local, {[@timestamp_addr={0x44, 0xc, 0xb2, 0x1, 0x0, [{@dev={0xac, 0x14, 0x14, 0x34}, 0xec2}]}, @ra={0x94, 0x4, 0x6}, @lsrr={0x83, 0x1b, 0xfa, [@empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @broadcast, @remote, @empty]}, @noop]}}}}}) sendmsg$nl_route(r7, &(0x7f00000050c0)={&(0x7f0000004f00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000005080)={&(0x7f0000005000)=@ipv6_newaddr={0x78, 0x14, 0x400, 0x70bd28, 0x25dfdbfd, {0xa, 0x10, 0x0, 0xff, r10}, [@IFA_ADDRESS={0x14, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}}, @IFA_FLAGS={0x8}, @IFA_LOCAL={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x1}, @IFA_LOCAL={0x14, 0x2, @private1}, @IFA_CACHEINFO={0x14, 0x6, {0x9, 0x5b813d63, 0x1, 0xd}}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000040}, 0x2000c014) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x89e2, &(0x7f0000005100)={r0}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r11, 0x0, 0x48c, &(0x7f0000005140)={0x1, 'ipvlan0\x00', 0x1}, 0x18) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nbd(&(0x7f00000051c0), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r12, &(0x7f00000052c0)={&(0x7f0000005180)={0x10, 0x0, 0x0, 0x840c0080}, 0xc, &(0x7f0000005280)={&(0x7f0000005200)={0x78, r13, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, '*'}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xffffffffffffffff}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, 'nl80211\x00'}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x4211916a}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x81}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x9}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x4088041) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r14, 0x8933, &(0x7f0000005300)={'wpan4\x00'}) sendmsg$NFC_CMD_SE_IO(r14, &(0x7f0000005500)={&(0x7f0000005340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000054c0)={&(0x7f0000005380)={0x128, 0x0, 0x8, 0x70bd27, 0x25dfdbfc, {}, [@NFC_ATTR_SE_APDU={0xdc, 0x19, "ec992dbf707786c7d709aa806a0947b2b981ad12d873466800a97e11b79d738ed5bcf7d695e1e29203d8517ae075a6eb86b4d598798ae4f494583981c9744bec90d1a303939974a87ab1cb4bf5b49e30979450f68d8541a2454e025b20559f957b974f928c2935e0eb42e1897b8cac63adfdcaad63b4ecb16019f153e93b59be568dbe915e2778a866727cad53f6ec4a280f57da86962ad274c10ad73b65bb95a1965644b7cbf88cd67ba7a7ec761ad884b3bb7c2ebbe9098c4b75085745a9383c737f18c90793088f02b97d088cbb20674e30df4c6827df"}, @NFC_ATTR_SE_APDU={0x2d, 0x19, "998278c93615fb1f66da3874a1ea2aee2dc32ad4c7b7b853be70542c41bdaffa11c677e2ef637db92c"}, @NFC_ATTR_SE_INDEX={0x8}]}, 0x128}, 0x1, 0x0, 0x0, 0x8000}, 0x80) 1.230197636s ago: executing program 2 (id=2362): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, 0x0, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="7a0a00ff00000000501079"], 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x10, 0x4, 0x8, 0x8}, 0x50) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r3, @ANYBLOB="00001700000000001c0037800b0001006970768a616e08000c0002800600010000000000050027"], 0x44}, 0x1, 0x0, 0x0, 0x4008010}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40000) r4 = socket(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5) r5 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=ANY=[@ANYRES8, @ANYBLOB="010026bd7000fddbdf25060000001400020020010000000000000000002e0000040114000300fe88000000000000000000000000010000000400ac1414bb2b00070073797374656d5f753a6f626a6563745f723a73685f00"], 0x70}, 0x1, 0x0, 0x0, 0x480d0}, 0xc8a0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r6, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0x16, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, r6}, 0x94) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'lo\x00'}) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000540)) unshare(0x6020480) r10 = socket$packet(0x11, 0x3, 0x300) sendmmsg(r10, 0x0, 0x0, 0x0) 1.118639129s ago: executing program 4 (id=2363): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x4}]}}}, {0x24, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_OBJREF_SET_ID={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0x13}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa0}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@private2, 0x4, 0x0, 0x3, 0x6, 0x2}, 0x20) 1.052059842s ago: executing program 0 (id=2364): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) (async) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r0 = socket(0x8, 0x0, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) ioctl$sock_netrom_SIOCADDRT(r0, 0x61d1, 0x0) (async) ioctl$sock_netrom_SIOCADDRT(r0, 0x61d1, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, 0x0, 0x0) socket(0x22, 0xa, 0x2) (async) r2 = socket(0x22, 0xa, 0x2) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, 0x0, 0x0) (async) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, 0x0, 0x0) close(0x4) 991.16802ms ago: executing program 1 (id=2365): r0 = socket$inet6(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r2}, 0xc) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r3, &(0x7f0000002fc0)="5e000d001b71ecab36", 0x9, 0x8054, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000340)=[@window={0x3, 0x1, 0x8}, @window={0x3, 0x6, 0x7}, @sack_perm, @window={0x3, 0x0, 0x8}, @mss={0x2, 0x4}, @timestamp, @window={0x3, 0x1, 0x10}, @window={0x3, 0x1, 0x99}], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r3, &(0x7f0000000240)="35569dc24431fad4348d7251545aef09c4def3321ca3efa94c4b46e769f7033e9433d14d5d06f3c45d2b152f4f8503093f42f445e8d72bcf361572806a62865de0a85eadcc2e232d50e9176c1c66e8d0ebd499728a7406a8", 0x58, 0x805, 0x0, 0x0) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000b00)={&(0x7f0000000140)={0xa, 0x4e21, 0x7, @mcast2, 0x7}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000640)="06cf1e62853f42df5c272bc2ca133aa05f90110ce03bc35fe1add9225a91dff2d1e9fa9c10cb8740d208d451a156d146a5c83851d76fb80ae5248e2e88f967eb3ad5a2c32429c50ff0416cc2435baedd5680928aeffbce0bb79e8d7b2f3f0078e452c0c8e9ef04f872ed24fe71104b371bd1aa9b06552f61e2f2eae63e6bfe957dee856ed386bf615294b8d80c027ebf0aa0352e8034f50140a2226094fd070050af35d95bcadd6d7b31c9db6357cd6849f11ca2a677ac7cb7a9ef1af9cbdb6608c302c9e00855fd776497c53ec639b676caba88abd34adfcd2be9140b56c76e3fd0fc77988eb5c8d7c2", 0xea}, {&(0x7f0000000340)="2e1890ac5eeb19415450d3aa8d18f2a0f15fcdddac5286638b7c4a9128724f317f6e8eb191609157c755b41384731fe02bd6495573a872e200bf2260a271576af124be94577eea0727ec4e73579cd0148fac12a79a8525f2f087ebf54ea55dfda46d72ec7b65d4cc71", 0x69}, {&(0x7f00000002c0)="18a626f531b58d371dac5fa30f6fe0ca9f552b107079a357f6c3cc09a53d184b13c47279a9f02413c0f33b404f59677232733b4e35e4", 0x36}, {&(0x7f0000000740)="71d727cef2096cb6cd19c167d2127a6fdb1ca8df5617e86fc93a2d484904280dd78c56f21aa4fcf4a1b848f3649935780e8b6bd116ab499dc33753f1061a480dd7632162cfd2ed01eda27a10320a5652d0ef63db94b6743cb4780e59ff75011659976e2766f4d77893c62c2a119e41f1d94c315df7b16ceac5d0f34983ecfd0fb3b3029a4654e716429627763039bd3760c0", 0x92}, {&(0x7f00000003c0)="11bccfd64d1c6786ead4e693301a2df5f504264b8ae3e16f43aa51a89e", 0x1d}], 0x5, &(0x7f0000000b40)=ANY=[@ANYBLOB="580000000000000029000000390000007308000300000000fe880000000000000000000000000001fe8000000000000000000000000000190000000000000000000000000000000120010000000000000000000000000001580000000000000029000000390000008908010000000000fe8000000000000000000000000000aafc010000000000000000000000000000fe8000000000000000000000000000aa00000000000000000000ffffac1e00011400000000000000290000004300000002e7ff00000000001400000000000000290000003e0000000500000000000000380100000000000029000000370000005c230000000000000502040000010001070000000000000001010001ebf8792dc12e57e9d5c07c5bea8c9221f213c8932b806adf1314e19a33f89e348402a251878409cd7baae9e1c42166a6d9f9a4f9cf3dab8c81512458dcd458969d4975155a502437efb5614b94e125a153f61ef9925a8f5d9480c4ddd9ae5a5b05bf9bceb08bafffd994bc5897bdb97fdc805c602ca60377bf0c93dfcfeb3da5e4e2a3e3d6c5bbd05d2bbfcff6cdb8fad5b5b8fb721ca2956ae9f2f9d1a8b36a68e91022a52f70c1da8fdbf64eeb9399d72728bcfd4005a29d35b169c264bef981bc9b10792788c6bb0c8d5a89cff400fa2ca0e0aef7a20c3b9afb85e05a66bdf079f6755d9830727104ba32c2047fffffff0100c91000000000003ee1177aa5a379db0000000000ffffe0000001040103000000280000000000000029000000370000005c01000000000000040108c2040000000600000000000000"], 0x240}, 0x80) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd7, &(0x7f0000000580)=[{}], 0x8, 0x10, &(0x7f0000001f00), &(0x7f0000000540), 0x8, 0x15, 0x8, 0x0, 0x0}}, 0x10) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000001158000000000000800000850000006d00000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000008c0)={r9, 0x4d, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xb3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r8, 0x0, 0x24040808) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r7], 0x1c}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 990.672282ms ago: executing program 4 (id=2366): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000001c0)=@mangle={'mangle\x00', 0x1d, 0x6, 0x7d8, 0x308, 0x220, 0x0, 0x308, 0x4d8, 0x708, 0x708, 0x708, 0x708, 0x708, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'pimreg0\x00', 'macvtap0\x00', {}, {}, 0x21}, 0x0, 0x118, 0x140, 0x0, {0x7a00000010000000}, [@common=@hl={{0x28}, {0x3, 0x4}}, @common=@unspec=@ipvs={{0x48}, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xffffff00, 0x0, 0xffffffff, 0xff000000], 0x4e20, 0x2f, 0x6, 0x4e22, 0x20, 0x20}}]}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@mcast2, @dev, [0xff000000], [], 'veth1_macvtap\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {0x0, 0x20}}}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x4, 0x0}, [0x0, 0x0, 0x0, 0xff], [0x0, 0x0, 0xff000000], '\x00', 'bond_slave_0\x00', {}, {}, 0x0, 0x0, 0x2}, 0x0, 0xa8, 0xe8, 0x48000000}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x0, 0xffffffff, 0x3, 0x5, 0x2, 0x8000, 0xc, 0x4]}}}, {{@uncond, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0xcb, 'system_u:object_r:kmsg_device_t:s0\x00'}}}, {{@uncond, 0x0, 0x208, 0x230, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @remote}, @mcast2, @private1, @private1, @empty, @private2={0xfc, 0x2, '\x00', 0x2}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @private0, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0]}}]}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x838) unshare(0x22020400) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x3fe3aa0262d8c583, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xf}, {}, {0x6, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x40022}, 0x2000400c) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r3, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000000f1404002abd7000fbdbdf06009c88992155e4767e636d00"], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x80089419, &(0x7f0000000440)) writev(r2, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newqdisc={0x1c8, 0x24, 0x800, 0x70bd29, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0xfff1, 0x8000}, {0x1, 0xc}, {0xfff3, 0x8}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x80000000}, @TCA_CAKE_MPU={0x8, 0xe, 0xd5}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}, @TCA_STAB={0x174, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2, 0x7, 0x5, 0x5, 0x1, 0x2, 0xff, 0x5}}, {0xe, 0x2, [0x2, 0x2, 0x6, 0x8, 0xffc0]}}, {{0x1c, 0x1, {0x2, 0x0, 0x200, 0x5, 0x0, 0x4, 0xffffffff, 0x2}}, {0x8, 0x2, [0x401, 0x80]}}, {{0x1c, 0x1, {0x1, 0x9, 0xfffd, 0x0, 0x1, 0x6, 0x8, 0x4}}, {0xc, 0x2, [0x4, 0xffff, 0x5, 0x30d]}}, {{0x1c, 0x1, {0x1, 0x71, 0x7, 0x63, 0x0, 0xffff0001, 0x5}}, {0x4}}, {{0x1c, 0x1, {0x2, 0x81, 0x8, 0x7f, 0x0, 0x8, 0xc3d, 0x9}}, {0x16, 0x2, [0xfff7, 0x35e, 0x5, 0xe9a0, 0xffff, 0x8, 0x1, 0x0, 0x4]}}, {{0x1c, 0x1, {0x9, 0x2, 0x8, 0x6, 0x1, 0x18, 0x4, 0x1}}, {0x6, 0x2, [0x2]}}, {{0x1c, 0x1, {0xf1, 0x4, 0x6a, 0x0, 0x0, 0x2, 0x7, 0x4}}, {0xc, 0x2, [0x7, 0xcd3, 0x8, 0x0]}}, {{0x1c, 0x1, {0x8, 0x2, 0x3, 0x77c, 0x1, 0x7, 0x5, 0x9}}, {0x16, 0x2, [0x1ff, 0x8000, 0x4, 0x6, 0x80, 0x1, 0x9, 0x6, 0x9]}}, {{0x1c, 0x1, {0x3, 0x8, 0x4, 0x4812, 0x2, 0x10, 0x2, 0x2}}, {0x8, 0x2, [0xf, 0x8]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x89}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x44045}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000084) 989.57912ms ago: executing program 2 (id=2367): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f00000004c0)="e0d6bb4ee2dbd89da573425576ea", 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x5, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000004830000000000000fa40000007010000080020007500feff0000820095000000d3031a006dd015836e4d27f5182b60bbb7c19e21eec859fe68f9428ac407630eac8eb682f5b2d86b4abf9e63ad263fec7db9338ca9eebf2218c8b9ca64bcdcdaa06fc4c7aa217fcecd9443c54143bde8ddcbc3b8ac619930206d8d0881af823d6d18c66f021c20b55013d7fb6ea7013c062d13176d71d7dad98eb976ed679fa639"], &(0x7f0000000000)='GPL\x00', 0x4, 0x40, &(0x7f0000000140)=""/250, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x23, 0x0, 0x0, 0xff87}, 0x23) 829.723183ms ago: executing program 3 (id=2368): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000040)={r3, 0x3, 0x30}, &(0x7f0000000080)=0xc) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="780000001300010029bd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0254000091f90000140035006261746164765f736c6176655f30000044002b8008000100", @ANYRES32, @ANYBLOB="110008"], 0x78}, 0x1, 0x0, 0x0, 0x40000081}, 0x4008004) 770.900286ms ago: executing program 3 (id=2369): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000002740)=ANY=[@ANYBLOB="140000001300015b993dde440113e90006"], 0x14}], 0x1}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0xffe, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200060000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) (async) socket$nl_route(0x10, 0x3, 0x0) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000002740)=ANY=[@ANYBLOB="140000001300015b993dde440113e90006"], 0x14}], 0x1}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0xffe, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200060000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) (async) 759.657089ms ago: executing program 2 (id=2370): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="020c09090600000028bd7000fddbdf2504000400000000000400000000000000053e2e999a000000000000000300000000000000d50981ccc3ddd8aefb8a7cb3a473cf688149338f2cef28976923d30a3e4fd6ebb6b1e741906d7c30"], 0x30}}, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x1000) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x1000) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) socket$kcm(0x11, 0x200000000000002, 0x300) (async) r3 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000001f80)=r2, 0x4) socket$inet6(0x10, 0x3, 0x0) (async) r4 = socket$inet6(0x10, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r4, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000006180)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16, @ANYBLOB="110026bd7000fddbdf2507002600"/26, @ANYRES32, @ANYBLOB="0c009900fb"], 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x20004014) r5 = socket$l2tp(0x2, 0x2, 0x73) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{}], 0x1, 0x40800) (async) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{}], 0x1, 0x40800) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x298, 0x168, 0x0, 0x0, 0x200, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x298}}, {{@ip={@private=0xa010100, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x2, 0x4, 0x11000000]}}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) bind$ax25(r1, &(0x7f0000000100)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r7, 0x8914, &(0x7f0000000000)) setsockopt$ax25_SO_BINDTODEVICE(r1, 0x101, 0x19, &(0x7f0000000240)=@bpq0, 0x10) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={'nr', 0x0}, 0x1, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000)) (async) ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000)) 707.488599ms ago: executing program 4 (id=2371): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) socket$key(0xf, 0x3, 0x2) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000300)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x30, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x4}, @NL802154_ATTR_SEC_ENABLED={0x5, 0x29, 0x1}, @NL802154_ATTR_SEC_ENABLED={0x5, 0x29, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2004c015}, 0x810) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r4) sendmsg$NLBL_UNLABEL_C_STATICADD(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000780)={0x14, r5, 0x201, 0x70bd26, 0xfffffffe, {0x3, 0x0, 0x26}}, 0x14}, 0x8, 0x3000000000002, 0x0, 0x4000020}, 0x844) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x28, r5, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_virt_wifi\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x8080}, 0x20004004) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'pimreg0\x00', 0x0}) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r9, r8, 0x25, 0x0, @val=@netfilter={0x1, 0x0, 0x7}}, 0x20) close(r10) openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) (async) socket$key(0xf, 0x3, 0x2) (async) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000300)={'wpan0\x00'}) (async) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x30, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x4}, @NL802154_ATTR_SEC_ENABLED={0x5, 0x29, 0x1}, @NL802154_ATTR_SEC_ENABLED={0x5, 0x29, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2004c015}, 0x810) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r4) (async) sendmsg$NLBL_UNLABEL_C_STATICADD(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000780)={0x14, r5, 0x201, 0x70bd26, 0xfffffffe, {0x3, 0x0, 0x26}}, 0x14}, 0x8, 0x3000000000002, 0x0, 0x4000020}, 0x844) (async) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x28, r5, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_virt_wifi\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x8080}, 0x20004004) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'pimreg0\x00'}) (async) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r9, r8, 0x25, 0x0, @val=@netfilter={0x1, 0x0, 0x7}}, 0x20) (async) close(r10) (async) 260.113703ms ago: executing program 2 (id=2372): mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1, 0x1000000000000}}], 0x48}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$qrtr(0x2a, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x39b3) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r6, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r4}, 0x20) close(0x4) close(r6) recvmmsg(r4, &(0x7f0000005b80)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/163, 0xa3}], 0x1}, 0x6}], 0x1, 0x21, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x19, &(0x7f0000000280)=0x1, 0x4) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@gettfilter={0x5c, 0x2e, 0x100, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0xffff, 0xd}, {0x0, 0xf}, {0x4, 0x6}}, [{0x8, 0xb, 0xf}, {0x8, 0xb, 0xf8b1}, {0x8, 0xb, 0x401}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4008881}, 0x0) 0s ago: executing program 2 (id=2373): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000680)={{r0, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000140)='%+9llu \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000540)={r1, r0}, 0x4) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3b071, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x20000000000000e3, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffde, 0x0, 0x0, 0x0, 0xffffffff}}, &(0x7f0000000180)='GPL\x00', 0x4, 0x1019, &(0x7f0000002240)=""/4137, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r1}, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000d000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000200000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000500)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000340)="c1dfb080cd21d308098e00000000", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) kernel console output (not intermixed with test programs): est ffff888027000600: control (read@3072,1024B). Runtime 30 seconds [ 330.448504][ T9126] ipvlan2: entered allmulticast mode [ 330.453885][ T9126] veth0_vlan: entered allmulticast mode [ 330.493742][ T9126] netlink: 'syz.4.823': attribute type 1 has an invalid length. [ 330.523846][ T9126] netlink: 224 bytes leftover after parsing attributes in process `syz.4.823'. [ 331.003851][ T9144] netlink: 16 bytes leftover after parsing attributes in process `syz.3.826'. [ 331.166207][ T9148] netlink: 'syz.3.829': attribute type 4 has an invalid length. [ 331.213983][ T9148] netlink: 'syz.3.829': attribute type 4 has an invalid length. [ 331.235352][ T9151] netlink: 8 bytes leftover after parsing attributes in process `syz.2.830'. [ 331.262563][ T9151] netlink: 8 bytes leftover after parsing attributes in process `syz.2.830'. [ 331.272610][ T9151] netlink: 8 bytes leftover after parsing attributes in process `syz.2.830'. [ 331.434665][ T9158] lo speed is unknown, defaulting to 1000 [ 331.864018][ T9177] xt_l2tp: invalid flags combination: 8 [ 331.879762][ T9179] openvswitch: netlink: Flow actions attr not present in new flow. [ 332.182818][ T9158] virt_wifi0 speed is unknown, defaulting to 1000 [ 332.182845][ T9162] lo speed is unknown, defaulting to 1000 [ 332.359013][ T9189] "syz.2.838" (9189) uses obsolete ecb(arc4) skcipher [ 333.133255][ T9199] lo speed is unknown, defaulting to 1000 [ 333.351333][ T9199] virt_wifi0 speed is unknown, defaulting to 1000 [ 333.436391][ T9162] virt_wifi0 speed is unknown, defaulting to 1000 [ 333.883559][ T9229] syzkaller0: entered promiscuous mode [ 333.899296][ T9229] syzkaller0: entered allmulticast mode [ 333.974337][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 334.229685][ T9239] __nla_validate_parse: 6 callbacks suppressed [ 334.229707][ T9239] netlink: 16 bytes leftover after parsing attributes in process `syz.2.853'. [ 334.614169][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5460 ms [ 334.622858][ C0] lec:lec_tx_timeout: lec0 [ 334.627656][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 334.713004][ T9258] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 335.175037][ T9282] netlink: 12 bytes leftover after parsing attributes in process `syz.1.862'. [ 335.175723][ T9280] netlink: 16 bytes leftover after parsing attributes in process `syz.4.865'. [ 335.187408][ T9278] netlink: zone id is out of range [ 335.193448][ T9281] netlink: 12 bytes leftover after parsing attributes in process `syz.1.862'. [ 335.209534][ T9277] syzkaller0: entered promiscuous mode [ 335.216031][ T9273] netlink: 32 bytes leftover after parsing attributes in process `syz.1.862'. [ 335.228124][ T9277] syzkaller0: entered allmulticast mode [ 335.234175][ T9278] netlink: zone id is out of range [ 335.242381][ T9278] netlink: zone id is out of range [ 335.264490][ T9286] netlink: 132 bytes leftover after parsing attributes in process `syz.0.864'. [ 335.276231][ T9278] netlink: zone id is out of range [ 335.281479][ T9278] netlink: zone id is out of range [ 335.314227][ T9278] netlink: zone id is out of range [ 335.339415][ T9278] netlink: zone id is out of range [ 335.364354][ T9278] netlink: zone id is out of range [ 335.378247][ T9278] netlink: zone id is out of range [ 335.389994][ T9273] lo speed is unknown, defaulting to 1000 [ 335.610344][ T3489] nci: nci_rsp_packet: unsupported rsp opcode 0xf00 [ 335.702904][ T9308] validate_nla: 3 callbacks suppressed [ 335.702920][ T9308] netlink: 'syz.0.870': attribute type 13 has an invalid length. [ 335.745071][ T9308] netlink: 'syz.0.870': attribute type 17 has an invalid length. [ 335.808152][ T9308] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.815619][ T9308] bridge0: port 2(bridge_slave_1) entered forwarding state [ 335.823224][ T9308] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.830596][ T9308] bridge0: port 1(bridge_slave_0) entered forwarding state [ 335.847163][ T9273] virt_wifi0 speed is unknown, defaulting to 1000 [ 335.991147][ T9315] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 336.262720][ T9293] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 336.537527][ T9331] syzkaller0: entered promiscuous mode [ 336.543154][ T9331] syzkaller0: entered allmulticast mode [ 336.838431][ T9332] lo speed is unknown, defaulting to 1000 [ 336.997371][ T9361] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 337.251886][ T9370] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 337.309906][ T9374] 8021q: adding VLAN 0 to HW filter on device macvlan1 [ 337.651385][ T9332] virt_wifi0 speed is unknown, defaulting to 1000 [ 338.708378][ T9394] netlink: 12 bytes leftover after parsing attributes in process `syz.0.890'. [ 339.691964][ T9344] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 339.841597][ T9398] netlink: 8 bytes leftover after parsing attributes in process `syz.1.892'. [ 339.896080][ T9402] netlink: 20 bytes leftover after parsing attributes in process `syz.1.892'. [ 340.374181][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5740 ms [ 340.382255][ C0] lec:lec_tx_timeout: lec0 [ 340.387009][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 340.469356][ T9422] tipc: Started in network mode [ 340.504968][ T9422] tipc: Node identity 56c1081b212b, cluster identity 4711 [ 340.529770][ T9422] tipc: Enabled bearer , priority 0 [ 340.554961][ T9432] syzkaller0: entered promiscuous mode [ 340.593194][ T9432] syzkaller0: entered allmulticast mode [ 340.667227][ T9432] tipc: Resetting bearer [ 341.172839][ T9421] tipc: Resetting bearer [ 341.192479][ T9421] tipc: Disabling bearer [ 341.535986][ T9484] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 341.600561][ T9488] net_ratelimit: 371 callbacks suppressed [ 341.600583][ T9488] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 341.729073][ T9494] netlink: 8 bytes leftover after parsing attributes in process `syz.4.908'. [ 341.761269][ T9494] netlink: 32 bytes leftover after parsing attributes in process `syz.4.908'. [ 341.800932][ T9497] netlink: 'syz.0.909': attribute type 1 has an invalid length. [ 341.840818][ T9497] 8021q: adding VLAN 0 to HW filter on device bond5 [ 341.875789][ T9497] bond5: (slave veth5): Enslaving as an active interface with a down link [ 341.977344][ T9504] netlink: 'syz.4.908': attribute type 4 has an invalid length. [ 342.594697][ T9521] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 342.720762][ T9525] sit2: entered promiscuous mode [ 342.732081][ T9525] netlink: 8 bytes leftover after parsing attributes in process `syz.4.913'. [ 342.741842][ T9525] netlink: 12 bytes leftover after parsing attributes in process `syz.4.913'. [ 342.751196][ T9525] netlink: 8 bytes leftover after parsing attributes in process `syz.4.913'. [ 343.790025][ T9447] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 344.158576][ T9548] netlink: 16 bytes leftover after parsing attributes in process `syz.2.920'. [ 344.416253][ T9565] netlink: 'syz.1.921': attribute type 4 has an invalid length. [ 344.433881][ T9565] netlink: 'syz.1.921': attribute type 4 has an invalid length. [ 344.441845][ T9566] "syz.3.926" (9566) uses obsolete ecb(arc4) skcipher [ 344.597816][ T30] audit: type=1800 audit(1771862194.808:2): pid=9575 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.927" name="memory.events" dev="tmpfs" ino=990 res=0 errno=0 [ 344.739678][ T9586] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 344.936763][ T9596] netlink: 12 bytes leftover after parsing attributes in process `syz.0.932'. [ 344.996374][ T9599] netlink: 'syz.2.934': attribute type 1 has an invalid length. [ 345.268905][ T9615] netlink: 296 bytes leftover after parsing attributes in process `syz.1.937'. [ 345.365076][ T9620] netlink: 8 bytes leftover after parsing attributes in process `syz.1.937'. [ 345.448306][ T9625] tipc: Enabling of bearer rejected, failed to enable media [ 345.704594][ T9638] netlink: 40 bytes leftover after parsing attributes in process `syz.3.940'. [ 346.134145][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5750 ms [ 346.142267][ C0] lec:lec_tx_timeout: lec0 [ 346.146991][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 346.282336][ T9664] netlink: 8 bytes leftover after parsing attributes in process `syz.2.949'. [ 346.571963][ T9680] netlink: 12 bytes leftover after parsing attributes in process `syz.0.955'. [ 346.689928][ T9689] netlink: 'syz.2.957': attribute type 1 has an invalid length. [ 346.771025][ T9689] bond2: entered promiscuous mode [ 346.795636][ T9689] bond2: entered allmulticast mode [ 346.856994][ T9699] netlink: 28 bytes leftover after parsing attributes in process `syz.2.957'. [ 346.894051][ T9690] bond2: (slave ip6gretap2): making interface the new active one [ 346.921408][ T9690] ip6gretap2: entered promiscuous mode [ 346.939511][ T9690] ip6gretap2: entered allmulticast mode [ 346.958889][ T9690] bond2: (slave ip6gretap2): Enslaving as an active interface with an up link [ 346.996676][ T9699] bond2: left promiscuous mode [ 347.012917][ T9699] ip6gretap2: left promiscuous mode [ 347.020828][ T9699] bond2: left allmulticast mode [ 347.030754][ T9699] ip6gretap2: left allmulticast mode [ 347.050124][ T9699] 8021q: adding VLAN 0 to HW filter on device bond2 [ 347.384522][ T9717] netlink: 8 bytes leftover after parsing attributes in process `syz.4.962'. [ 347.396535][ T9719] netlink: 24 bytes leftover after parsing attributes in process `syz.2.963'. [ 347.406390][ T9717] Cannot find set identified by id 1 to match [ 347.668108][ T9732] netlink: 4 bytes leftover after parsing attributes in process `syz.3.968'. [ 348.289061][ T9756] xt_hashlimit: size too large, truncated to 1048576 [ 348.325409][ T9756] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 348.694321][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 348.902845][ T9784] lo speed is unknown, defaulting to 1000 [ 349.158313][ T9784] virt_wifi0 speed is unknown, defaulting to 1000 [ 351.154154][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 351.162190][ C0] lec:lec_tx_timeout: lec0 [ 351.167053][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 351.368207][ T9762] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 351.647565][ T9820] syzkaller1: entered promiscuous mode [ 351.653196][ T9820] syzkaller1: entered allmulticast mode [ 351.674593][ T9821] netem: change failed [ 352.034656][ T9841] lo speed is unknown, defaulting to 1000 [ 352.122202][ T9844] netlink: 'syz.4.997': attribute type 23 has an invalid length. [ 352.507718][ T9842] netlink: 12 bytes leftover after parsing attributes in process `syz.1.996'. [ 352.553154][ T9856] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.999'. [ 352.577707][ T9841] virt_wifi0 speed is unknown, defaulting to 1000 [ 352.601483][ T9856] tipc: New replicast peer: 255.255.255.255 [ 352.609135][ T9856] tipc: Enabled bearer , priority 10 [ 353.522284][ T9886] tipc: Enabled bearer , priority 0 [ 353.557411][ T9888] netlink: 'syz.2.1009': attribute type 3 has an invalid length. [ 353.572257][ T9888] netlink: 666 bytes leftover after parsing attributes in process `syz.2.1009'. [ 353.602793][ T9891] syzkaller0: entered allmulticast mode [ 353.657045][ T5841] Bluetooth: hci4: command 0x0406 tx timeout [ 353.770479][ T9885] tipc: Disabling bearer [ 353.794871][ T795] tipc: Node number set to 2010659235 [ 354.013747][ T9908] IPVS: set_ctl: invalid protocol: 0 10.1.1.0:20001 [ 354.093863][ T12] nci: nci_ntf_packet: unknown ntf opcode 0x207 [ 354.182532][ T9919] lo speed is unknown, defaulting to 1000 [ 354.227151][ T9926] syzkaller1: entered promiscuous mode [ 354.240549][ T9926] syzkaller1: entered allmulticast mode [ 354.529147][ T9919] virt_wifi0 speed is unknown, defaulting to 1000 [ 354.571617][ T9942] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1021'. [ 356.174175][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 356.182418][ C0] lec:lec_tx_timeout: lec0 [ 356.187193][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 356.967866][ T9904] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 357.242582][ T9960] netlink: 'syz.4.1026': attribute type 3 has an invalid length. [ 357.271642][ T9960] netlink: 'syz.4.1026': attribute type 3 has an invalid length. [ 357.866415][ T9992] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1034'. [ 357.887186][ T9992] batman_adv: batadv0: Removing interface: ipvlan2 [ 357.930136][ T9992] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 357.955014][T10000] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1034'. [ 358.058375][ T9999] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1037'. [ 358.074260][ T9999] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1037'. [ 358.130624][T10004] lo speed is unknown, defaulting to 1000 [ 358.448790][T10022] netlink: 'syz.3.1040': attribute type 83 has an invalid length. [ 358.513770][T10027] netlink: 'syz.0.1041': attribute type 3 has an invalid length. [ 358.749961][T10039] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1045'. [ 358.821573][T10042] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 359.018256][T10004] virt_wifi0 speed is unknown, defaulting to 1000 [ 359.018349][T10048] netdevsim0: mtu greater than device maximum [ 359.033025][T10034] lo speed is unknown, defaulting to 1000 [ 359.259930][T10054] netlink: 'syz.0.1048': attribute type 1 has an invalid length. [ 359.517166][T10066] bond0: (slave sit0): The slave device specified does not support setting the MAC address [ 359.528536][T10066] bond0: (slave sit0): Error -95 calling set_mac_address [ 359.538151][T10056] lo speed is unknown, defaulting to 1000 [ 359.581874][T10066] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1052'. [ 359.592919][T10066] netlink: 'syz.0.1052': attribute type 1 has an invalid length. [ 359.620195][T10066] netlink: 'syz.0.1052': attribute type 2 has an invalid length. [ 359.628704][T10066] netlink: 'syz.0.1052': attribute type 1 has an invalid length. [ 359.637244][T10066] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1052'. [ 359.783099][T10073] xt_TPROXY: Can be used only with -p tcp or -p udp [ 359.797256][T10074] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1055'. [ 359.810812][T10074] netlink: 35 bytes leftover after parsing attributes in process `syz.3.1055'. [ 359.875161][T10056] virt_wifi0 speed is unknown, defaulting to 1000 [ 359.907584][T10034] virt_wifi0 speed is unknown, defaulting to 1000 [ 360.227463][ T5167] block nbd1: Possible stuck request ffff888027000000: control (read@0,1024B). Runtime 60 seconds [ 360.239334][ T5167] block nbd1: Possible stuck request ffff888027000200: control (read@1024,1024B). Runtime 60 seconds [ 360.250900][ T5167] block nbd1: Possible stuck request ffff888027000400: control (read@2048,1024B). Runtime 60 seconds [ 360.262908][ T5167] block nbd1: Possible stuck request ffff888027000600: control (read@3072,1024B). Runtime 60 seconds [ 360.707653][T10099] netlink: 'syz.3.1060': attribute type 3 has an invalid length. [ 360.960578][T10107] bridge2: entered allmulticast mode [ 361.194159][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 361.202310][ C0] lec:lec_tx_timeout: lec0 [ 361.207023][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 361.563395][T10126] netlink: 'syz.2.1069': attribute type 4 has an invalid length. [ 362.063882][T10142] bond6: Removing last ns target with arp_interval on [ 362.083019][T10153] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1075'. [ 362.286780][T10165] validate_nla: 1 callbacks suppressed [ 362.286799][T10165] netlink: 'syz.4.1080': attribute type 1 has an invalid length. [ 362.312946][T10163] xt_hashlimit: max too large, truncated to 1048576 [ 362.334485][T10163] xt_hashlimit: overflow, try lower: 13/0 [ 362.703578][T10188] netlink: 'syz.1.1086': attribute type 1 has an invalid length. [ 362.717175][T10188] syz_tun: left promiscuous mode [ 362.723218][T10188] erspan1: left promiscuous mode [ 364.849357][T10133] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 364.926845][T10210] syzkaller1: entered promiscuous mode [ 364.944684][T10210] syzkaller1: entered allmulticast mode [ 365.091555][T10218] tipc: Enabling of bearer rejected, failed to enable media [ 365.123209][T10223] netlink: 'syz.0.1099': attribute type 1 has an invalid length. [ 365.259067][T10231] __nla_validate_parse: 3 callbacks suppressed [ 365.259088][T10231] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1099'. [ 365.299927][T10236] x_tables: duplicate underflow at hook 2 [ 365.576365][T10227] bond7: (slave vxcan1): The slave device specified does not support setting the MAC address [ 365.628535][T10227] bond7: (slave vxcan1): Error -95 calling set_mac_address [ 365.711956][T10250] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1103'. [ 365.992603][T10234] bond5: Unable to set up delay as MII monitoring is disabled [ 366.002304][T10234] bond5 (unregistering): Released all slaves [ 366.030119][T10231] bond7: (slave gretap2): making interface the new active one [ 366.039151][T10231] bond7: (slave gretap2): Enslaving as an active interface with an up link [ 366.214166][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 366.222471][ C0] lec:lec_tx_timeout: lec0 [ 366.227376][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 366.355830][T10270] syzkaller0: entered promiscuous mode [ 366.378946][T10270] syzkaller0: entered allmulticast mode [ 366.449746][ T5934] IPVS: starting estimator thread 0... [ 366.458507][T10279] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 366.470223][T10279] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 366.554630][T10282] IPVS: using max 25 ests per chain, 60000 per kthread [ 366.573998][T10286] workqueue: name exceeds WQ_NAME_LEN. Truncating to: .¿šØ ÕáÊÎí ÿìà´*žËî]æÌÔáÿÿÿÿÁ [ 366.830454][T10304] vlan4: entered allmulticast mode [ 366.835733][T10304] team0: entered allmulticast mode [ 366.840878][T10304] team_slave_0: entered allmulticast mode [ 366.846732][T10304] team_slave_1: entered allmulticast mode [ 367.331100][T10334] netlink: 'syz.3.1129': attribute type 1 has an invalid length. [ 367.476992][T10334] bond3: entered promiscuous mode [ 367.511301][T10334] 8021q: adding VLAN 0 to HW filter on device bond3 [ 367.555438][T10334] netlink: 292 bytes leftover after parsing attributes in process `syz.3.1129'. [ 367.565022][T10334] netlink: 'syz.3.1129': attribute type 9 has an invalid length. [ 367.572967][T10334] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1129'. [ 367.584401][T10334] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1129'. [ 367.675459][T10338] bond3: (slave bridge3): making interface the new active one [ 367.683407][T10338] bridge3: entered promiscuous mode [ 367.692132][T10338] bridge3: left promiscuous mode [ 367.815649][T10346] dummy0: entered promiscuous mode [ 367.822271][T10346] macsec2: entered promiscuous mode [ 367.835574][T10346] macsec2: entered allmulticast mode [ 367.866326][T10346] dummy0: entered allmulticast mode [ 367.883744][T10346] dummy0: left allmulticast mode [ 367.922264][T10346] dummy0: left promiscuous mode [ 368.055193][T10354] bond5 (unregistering): Released all slaves [ 368.087886][T10342] lo speed is unknown, defaulting to 1000 [ 368.093957][T10359] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1135'. [ 368.316476][T10371] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1138'. [ 368.320999][T10342] virt_wifi0 speed is unknown, defaulting to 1000 [ 368.608124][T10382] netlink: 'syz.4.1140': attribute type 1 has an invalid length. [ 368.660316][T10387] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1141'. [ 368.660922][T10386] x_tables: duplicate underflow at hook 1 [ 368.777185][T10392] netlink: 260 bytes leftover after parsing attributes in process `syz.1.1141'. [ 368.799600][T10389] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 368.811230][T10389] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 368.847841][T10391] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1140'. [ 368.945301][T10391] bond5: (slave bridge3): Enslaving as an active interface with a down link [ 369.047928][T10389] macvlan3: entered promiscuous mode [ 369.076843][T10389] macvlan3: entered allmulticast mode [ 369.115964][T10389] bond5: entered promiscuous mode [ 369.122061][T10389] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 369.200039][T10389] bond5: left promiscuous mode [ 369.254451][T10413] veth0_to_batadv: Caught tx_queue_len zero misconfig [ 369.288998][T10413] netlink: 'syz.0.1149': attribute type 2 has an invalid length. [ 369.603553][T10420] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.657549][T10432] netlink: 'syz.4.1153': attribute type 1 has an invalid length. [ 369.668960][T10432] netlink: 'syz.4.1153': attribute type 2 has an invalid length. [ 369.677794][T10432] netlink: 'syz.4.1153': attribute type 1 has an invalid length. [ 369.827686][ T51] block nbd2: Receive control failed (result -32) [ 369.838414][T10420] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.879554][T10439] tipc: Enabled bearer , priority 0 [ 369.887781][T10443] syzkaller0: entered promiscuous mode [ 369.893537][T10443] syzkaller0: entered allmulticast mode [ 369.953216][T10445] netlink: 'syz.2.1159': attribute type 27 has an invalid length. [ 369.966151][T10443] sctp: [Deprecated]: syz.1.1157 (pid 10443) Use of struct sctp_assoc_value in delayed_ack socket option. [ 369.966151][T10443] Use struct sctp_sack_info instead [ 369.984870][T10443] delete_channel: no stack [ 369.995821][T10442] syzkaller0: entered promiscuous mode [ 369.996535][T10443] delete_channel: no stack [ 370.001338][T10442] syzkaller0: entered allmulticast mode [ 370.046363][T10420] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.068070][T10439] tipc: Resetting bearer [ 370.077604][T10453] netlink: 'syz.4.1160': attribute type 13 has an invalid length. [ 370.089254][T10438] tipc: Resetting bearer [ 370.115980][T10438] tipc: Disabling bearer [ 370.289334][T10420] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.438052][ T60] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.470066][ T60] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.492531][ T60] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.614386][ T60] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.841705][T10478] nbd: socks must be embedded in a SOCK_ITEM attr [ 371.244148][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 371.252236][ C0] lec:lec_tx_timeout: lec0 [ 371.257140][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 372.376805][T10480] __nla_validate_parse: 4 callbacks suppressed [ 372.376826][T10480] netlink: 7 bytes leftover after parsing attributes in process `syz.1.1166'. [ 372.435768][T10479] lo speed is unknown, defaulting to 1000 [ 372.772892][T10503] openvswitch: netlink: Duplicate or invalid key (type 0). [ 372.796393][T10503] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 372.933261][T10479] virt_wifi0 speed is unknown, defaulting to 1000 [ 372.985848][T10509] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1175'. [ 373.021402][T10512] netlink: 'syz.4.1176': attribute type 1 has an invalid length. [ 373.099325][T10515] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 373.110501][T10515] bond6: (slave vxcan3): Error -95 calling set_mac_address [ 373.238259][T10512] bond6: (slave bridge4): Enslaving as an active interface with a down link [ 373.403226][T10519] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 373.463063][T10512] bond6: (slave gretap2): making interface the new active one [ 373.497576][T10512] bond6: (slave gretap2): Enslaving as an active interface with an up link [ 373.757198][T10526] xt_cgroup: invalid path, errno=-2 [ 373.792199][T10535] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1181'. [ 373.803802][T10535] openvswitch: netlink: Flow key attr not present in new flow. [ 374.090186][T10552] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1186'. [ 374.498384][T10577] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1190'. [ 374.513866][T10567] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1190'. [ 374.564270][T10575] lo speed is unknown, defaulting to 1000 [ 374.570358][T10583] netlink: 'syz.1.1192': attribute type 5 has an invalid length. [ 374.583471][T10583] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1192'. [ 374.678812][T10589] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 374.872651][T10591] tipc: Enabled bearer , priority 0 [ 374.988254][T10591] syzkaller0: entered promiscuous mode [ 374.995663][T10591] syzkaller0: entered allmulticast mode [ 375.001835][T10591] tipc: Resetting bearer [ 375.013422][T10575] virt_wifi0 speed is unknown, defaulting to 1000 [ 375.020955][T10590] tipc: Resetting bearer [ 375.097615][T10606] xt_hashlimit: size too large, truncated to 1048576 [ 375.312073][T10618] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1199'. [ 376.268721][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 376.276798][ C0] lec:lec_tx_timeout: lec0 [ 376.282617][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 376.780405][T10590] tipc: Disabling bearer [ 376.827567][ T29] tipc: Node number set to 1253305784 [ 377.041928][T10633] netlink: set zone limit has 8 unknown bytes [ 377.068046][ T12] nci: nci_ntf_packet: unknown ntf opcode 0x207 [ 377.472795][T10654] lo speed is unknown, defaulting to 1000 [ 377.494388][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 377.761648][T10654] virt_wifi0 speed is unknown, defaulting to 1000 [ 379.961490][T10625] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 380.313364][T10691] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1219'. [ 380.568892][T10705] netlink: 'syz.4.1223': attribute type 2 has an invalid length. [ 380.761062][T10719] IPVS: set_ctl: invalid protocol: 92 127.0.0.1:19999 [ 381.103384][T10732] FAULT_INJECTION: forcing a failure. [ 381.103384][T10732] name failslab, interval 1, probability 0, space 0, times 0 [ 381.138113][T10732] CPU: 0 UID: 0 PID: 10732 Comm: syz.1.1227 Not tainted syzkaller #0 PREEMPT(full) [ 381.138142][T10732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 381.138152][T10732] Call Trace: [ 381.138160][T10732] [ 381.138169][T10732] dump_stack_lvl+0xe8/0x150 [ 381.138203][T10732] should_fail_ex+0x412/0x560 [ 381.138233][T10732] should_failslab+0xa8/0x100 [ 381.138258][T10732] __kmalloc_noprof+0xe8/0x760 [ 381.138279][T10732] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 381.138317][T10732] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 381.138353][T10732] genl_family_rcv_msg_doit+0xd9/0x330 [ 381.138382][T10732] ? __asan_memcpy+0x40/0x70 [ 381.138414][T10732] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 381.138450][T10732] ? apparmor_capable+0x137/0x1a0 [ 381.138481][T10732] ? bpf_lsm_capable+0x9/0x20 [ 381.138515][T10732] ? security_capable+0x7e/0x2c0 [ 381.138543][T10732] genl_rcv_msg+0x61c/0x7a0 [ 381.138578][T10732] ? __pfx_genl_rcv_msg+0x10/0x10 [ 381.138605][T10732] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 381.138632][T10732] ? __lock_acquire+0x6b5/0x2cf0 [ 381.138669][T10732] netlink_rcv_skb+0x232/0x4b0 [ 381.138693][T10732] ? __pfx_genl_rcv_msg+0x10/0x10 [ 381.138722][T10732] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 381.138764][T10732] ? down_read+0x272/0x2e0 [ 381.138782][T10732] ? genl_rcv+0xd/0x40 [ 381.138811][T10732] genl_rcv+0x28/0x40 [ 381.138835][T10732] netlink_unicast+0x80f/0x9b0 [ 381.138866][T10732] ? __pfx_netlink_unicast+0x10/0x10 [ 381.138889][T10732] ? netlink_sendmsg+0x650/0xb40 [ 381.138909][T10732] ? skb_put+0x11b/0x210 [ 381.138939][T10732] netlink_sendmsg+0x813/0xb40 [ 381.138973][T10732] ? __pfx_netlink_sendmsg+0x10/0x10 [ 381.139000][T10732] ? aa_sock_msg_perm+0xf1/0x1b0 [ 381.139025][T10732] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 381.139048][T10732] ? __pfx_netlink_sendmsg+0x10/0x10 [ 381.139069][T10732] ____sys_sendmsg+0xa68/0xad0 [ 381.139107][T10732] ? __pfx_____sys_sendmsg+0x10/0x10 [ 381.139145][T10732] ? import_iovec+0x73/0xa0 [ 381.139177][T10732] ___sys_sendmsg+0x2a5/0x360 [ 381.139211][T10732] ? __pfx____sys_sendmsg+0x10/0x10 [ 381.139279][T10732] ? __fget_files+0x2a/0x420 [ 381.139306][T10732] ? __fget_files+0x3a0/0x420 [ 381.139344][T10732] __x64_sys_sendmsg+0x1bd/0x2a0 [ 381.139375][T10732] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 381.139414][T10732] ? __pfx_ksys_write+0x10/0x10 [ 381.139447][T10732] do_syscall_64+0x14d/0xf80 [ 381.139474][T10732] ? trace_irq_disable+0x3b/0x150 [ 381.139508][T10732] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.139528][T10732] ? clear_bhb_loop+0x40/0x90 [ 381.139552][T10732] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.139571][T10732] RIP: 0033:0x7f326d99c629 [ 381.139590][T10732] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 381.139605][T10732] RSP: 002b:00007f326e89e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 381.139627][T10732] RAX: ffffffffffffffda RBX: 00007f326dc15fa0 RCX: 00007f326d99c629 [ 381.139640][T10732] RDX: 0000000000000040 RSI: 0000200000001540 RDI: 0000000000000003 [ 381.139651][T10732] RBP: 00007f326e89e090 R08: 0000000000000000 R09: 0000000000000000 [ 381.139663][T10732] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 381.139674][T10732] R13: 00007f326dc16038 R14: 00007f326dc15fa0 R15: 00007fff662a3bd8 [ 381.139708][T10732] [ 381.623967][T10743] netlink: 'syz.1.1232': attribute type 3 has an invalid length. [ 381.632195][T10743] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1232'. [ 381.642062][T10743] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1232'. [ 381.652076][T10743] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1232'. [ 381.661590][T10738] bridge_slave_1: left allmulticast mode [ 381.682501][T10738] bridge_slave_1: left promiscuous mode [ 381.702290][T10738] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.716999][T10750] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1230'. [ 381.730657][T10738] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 381.813324][T10753] nbd: nbd0 already in use [ 381.832263][T10750] block nbd0: NBD_DISCONNECT [ 381.848548][T10750] block nbd0: Send disconnect failed -32 [ 381.862606][T10750] block nbd0: shutting down sockets [ 381.976075][T10760] netlink: 25 bytes leftover after parsing attributes in process `syz.2.1234'. [ 382.189153][T10773] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1236'. [ 382.305372][T10778] vlan1: entered promiscuous mode [ 382.310877][T10778] vlan1: entered allmulticast mode [ 382.369587][T10778] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1239'. [ 382.593631][T10795] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1243'. [ 382.614131][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 6330 ms [ 382.622303][ C0] lec:lec_tx_timeout: lec0 [ 382.627317][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 382.899793][T10812] netlink: 1028 bytes leftover after parsing attributes in process `syz.2.1247'. [ 382.944446][T10812] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 383.811192][T10863] FAULT_INJECTION: forcing a failure. [ 383.811192][T10863] name failslab, interval 1, probability 0, space 0, times 0 [ 383.847361][T10863] CPU: 1 UID: 0 PID: 10863 Comm: syz.0.1259 Not tainted syzkaller #0 PREEMPT(full) [ 383.847388][T10863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 383.847398][T10863] Call Trace: [ 383.847405][T10863] [ 383.847413][T10863] dump_stack_lvl+0xe8/0x150 [ 383.847446][T10863] should_fail_ex+0x412/0x560 [ 383.847473][T10863] should_failslab+0xa8/0x100 [ 383.847496][T10863] __kmalloc_noprof+0xe8/0x760 [ 383.847516][T10863] ? ethnl_default_set_doit+0x16a/0xad0 [ 383.847548][T10863] ethnl_default_set_doit+0x16a/0xad0 [ 383.847575][T10863] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 383.847600][T10863] ? genl_family_rcv_msg_attrs_parse+0x212/0x2a0 [ 383.847633][T10863] genl_family_rcv_msg_doit+0x22a/0x330 [ 383.847660][T10863] ? __asan_memcpy+0x40/0x70 [ 383.847691][T10863] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 383.847741][T10863] ? bpf_lsm_capable+0x9/0x20 [ 383.847763][T10863] ? security_capable+0x7e/0x2c0 [ 383.847791][T10863] genl_rcv_msg+0x61c/0x7a0 [ 383.847823][T10863] ? __pfx_genl_rcv_msg+0x10/0x10 [ 383.847847][T10863] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 383.847872][T10863] ? __lock_acquire+0x6b5/0x2cf0 [ 383.847907][T10863] netlink_rcv_skb+0x232/0x4b0 [ 383.847931][T10863] ? __pfx_genl_rcv_msg+0x10/0x10 [ 383.847959][T10863] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 383.847998][T10863] ? down_read+0x272/0x2e0 [ 383.848015][T10863] ? genl_rcv+0xd/0x40 [ 383.848042][T10863] genl_rcv+0x28/0x40 [ 383.848067][T10863] netlink_unicast+0x80f/0x9b0 [ 383.848095][T10863] ? __pfx_netlink_unicast+0x10/0x10 [ 383.848115][T10863] ? netlink_sendmsg+0x650/0xb40 [ 383.848135][T10863] ? skb_put+0x11b/0x210 [ 383.848162][T10863] netlink_sendmsg+0x813/0xb40 [ 383.848195][T10863] ? __pfx_netlink_sendmsg+0x10/0x10 [ 383.848220][T10863] ? aa_sock_msg_perm+0xf1/0x1b0 [ 383.848244][T10863] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 383.848265][T10863] ? __pfx_netlink_sendmsg+0x10/0x10 [ 383.848284][T10863] ____sys_sendmsg+0xa68/0xad0 [ 383.848320][T10863] ? __pfx_____sys_sendmsg+0x10/0x10 [ 383.848353][T10863] ? import_iovec+0x73/0xa0 [ 383.848380][T10863] ___sys_sendmsg+0x2a5/0x360 [ 383.848412][T10863] ? __pfx____sys_sendmsg+0x10/0x10 [ 383.848474][T10863] ? __fget_files+0x2a/0x420 [ 383.848497][T10863] ? __fget_files+0x3a0/0x420 [ 383.848532][T10863] __x64_sys_sendmsg+0x1bd/0x2a0 [ 383.848562][T10863] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 383.848600][T10863] ? __pfx_ksys_write+0x10/0x10 [ 383.848632][T10863] do_syscall_64+0x14d/0xf80 [ 383.848659][T10863] ? trace_irq_disable+0x3b/0x150 [ 383.848685][T10863] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.848704][T10863] ? clear_bhb_loop+0x40/0x90 [ 383.848737][T10863] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.848756][T10863] RIP: 0033:0x7f435e99c629 [ 383.848775][T10863] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 383.848789][T10863] RSP: 002b:00007f435f85e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 383.848810][T10863] RAX: ffffffffffffffda RBX: 00007f435ec15fa0 RCX: 00007f435e99c629 [ 383.848823][T10863] RDX: 0000000000000040 RSI: 0000200000001540 RDI: 0000000000000003 [ 383.848834][T10863] RBP: 00007f435f85e090 R08: 0000000000000000 R09: 0000000000000000 [ 383.848844][T10863] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 383.848854][T10863] R13: 00007f435ec16038 R14: 00007f435ec15fa0 R15: 00007ffdf014d648 [ 383.848886][T10863] [ 384.391504][T10857] bond3: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 384.420392][T10857] bond3 (unregistering): Released all slaves [ 384.466527][T10879] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0 [ 385.082384][T10912] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 385.102888][T10912] syzkaller1: linktype set to 768 [ 385.150049][T10917] openvswitch: netlink: IP tunnel dst address not specified [ 385.169900][T10917] openvswitch: netlink: Missing valid actions attribute. [ 385.180485][T10917] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 385.341370][T10926] __nla_validate_parse: 4 callbacks suppressed [ 385.341390][T10926] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1273'. [ 385.355829][T10924] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1273'. [ 385.488937][T10937] IPVS: sync thread started: state = BACKUP, mcast_ifn = team0, syncid = 4, id = 0 [ 385.540469][T10940] veth0: entered promiscuous mode [ 385.546824][T10940] bond0: entered promiscuous mode [ 385.552279][T10940] bond_slave_0: entered promiscuous mode [ 385.565053][T10940] bond_slave_1: entered promiscuous mode [ 385.576648][T10940] dummy0: entered promiscuous mode [ 385.615343][T10938] bond0: left promiscuous mode [ 385.627108][T10938] bond_slave_0: left promiscuous mode [ 385.637568][T10938] bond_slave_1: left promiscuous mode [ 385.646336][T10938] dummy0: left promiscuous mode [ 385.652345][T10938] veth0: left promiscuous mode [ 385.682988][T10946] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 385.950207][T10967] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1280'. [ 386.281999][T10982] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1290'. [ 386.320889][T10988] netlink: 364 bytes leftover after parsing attributes in process `syz.0.1291'. [ 386.322462][T10986] dvmrp0: left allmulticast mode [ 386.520090][T10998] syz_tun: entered allmulticast mode [ 386.527287][T10998] macsec0: left allmulticast mode [ 386.532610][T10998] veth1_macvtap: left allmulticast mode [ 386.554681][T10998] siw: device registration error -23 [ 386.620272][T10998] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 387.243716][T10994] syz_tun: left allmulticast mode [ 388.384131][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5760 ms [ 388.392213][ C0] lec:lec_tx_timeout: lec0 [ 388.397342][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 389.195799][T10977] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 389.371172][T11016] netlink: 91 bytes leftover after parsing attributes in process `syz.2.1296'. [ 389.395788][T11023] netlink: 'syz.1.1300': attribute type 1 has an invalid length. [ 389.493823][T11032] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 389.497879][T11023] 8021q: adding VLAN 0 to HW filter on device bond4 [ 389.540382][T11027] vlan2: entered promiscuous mode [ 389.553705][T11027] bond4: entered promiscuous mode [ 389.561771][T11027] vlan2: entered allmulticast mode [ 389.567497][T11027] bond4: entered allmulticast mode [ 389.588756][T11023] A link change request failed with some changes committed already. Interface ip6gre0 may have been left with an inconsistent configuration, please check. [ 389.618745][T11024] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1299'. [ 389.656266][ T3489] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 389.666864][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 389.678661][ T1209] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 389.706073][T11027] bond4: (slave bridge7): making interface the new active one [ 389.713902][T11027] bridge7: entered promiscuous mode [ 389.720015][T11027] bridge7: entered allmulticast mode [ 389.727364][T11027] bond4: (slave bridge7): Enslaving as an active interface with an up link [ 389.738834][T11037] lo speed is unknown, defaulting to 1000 [ 389.820105][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 389.828846][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 390.307564][ T5167] block nbd1: Possible stuck request ffff888027000000: control (read@0,1024B). Runtime 90 seconds [ 390.318501][ T5167] block nbd1: Possible stuck request ffff888027000200: control (read@1024,1024B). Runtime 90 seconds [ 390.339805][ T5167] block nbd1: Possible stuck request ffff888027000400: control (read@2048,1024B). Runtime 90 seconds [ 390.351221][ T5167] block nbd1: Possible stuck request ffff888027000600: control (read@3072,1024B). Runtime 90 seconds [ 390.432240][T11037] virt_wifi0 speed is unknown, defaulting to 1000 [ 390.435075][T11045] lo speed is unknown, defaulting to 1000 [ 390.534495][T11058] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 390.588070][T11062] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 390.599667][T11047] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1305'. [ 390.857487][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 390.866357][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 390.874699][T11070] tipc: Enabling of bearer rejected, failed to enable media [ 390.895112][T11070] syzkaller0: entered promiscuous mode [ 390.904153][T11070] syzkaller0: entered allmulticast mode [ 390.967932][T11064] lo speed is unknown, defaulting to 1000 [ 391.268043][T11081] netlink: 6032 bytes leftover after parsing attributes in process `syz.1.1315'. [ 391.295113][T11045] virt_wifi0 speed is unknown, defaulting to 1000 [ 391.321219][T11064] virt_wifi0 speed is unknown, defaulting to 1000 [ 391.494596][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 391.598490][T11088] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1317'. [ 391.645231][T11088] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1317'. [ 392.040677][T11099] TCP: TCP_TX_DELAY enabled [ 392.181622][T11106] smc: net device wlan0 applied user defined pnetid SYZ0 [ 392.477383][T11116] vlan3: entered promiscuous mode [ 392.482500][T11116] erspan0: entered promiscuous mode [ 392.507660][T11113] tipc: Enabling of bearer rejected, failed to enable media [ 392.520248][T11117] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1326'. [ 392.538782][T11117] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1326'. [ 392.557558][T11116] vlan3: entered promiscuous mode [ 392.576205][T11113] syzkaller0: entered promiscuous mode [ 392.584400][T11113] syzkaller0: entered allmulticast mode [ 392.600295][T11120] bridge3: entered promiscuous mode [ 392.607601][T11120] bridge3: entered allmulticast mode [ 392.619848][T11120] team0: Port device bridge3 added [ 392.637099][T11116] vlan3: entered promiscuous mode [ 392.668167][T11120] bridge0: port 3(team0) entered blocking state [ 392.675016][T11120] bridge0: port 3(team0) entered disabled state [ 392.686937][T11120] team0: entered promiscuous mode [ 392.692192][T11120] team_slave_0: entered promiscuous mode [ 392.702554][T11120] team_slave_1: entered promiscuous mode [ 392.750133][T11116] vlan3: entered promiscuous mode [ 392.843375][T11116] vlan3: entered promiscuous mode [ 393.006515][T11116] vlan3: entered promiscuous mode [ 393.107561][T11116] vlan3: entered promiscuous mode [ 393.216202][T11116] vlan3: entered promiscuous mode [ 393.602400][T11164] tipc: Enabling of bearer rejected, failed to enable media [ 393.617557][T11166] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1342'. [ 393.646076][T11164] syzkaller0: entered promiscuous mode [ 393.662391][T11164] syzkaller0: entered allmulticast mode [ 393.691306][T11168] netlink: 'syz.0.1342': attribute type 46 has an invalid length. [ 394.134416][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5740 ms [ 394.142598][ C0] lec:lec_tx_timeout: lec0 [ 394.147667][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 394.334514][T11187] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1348'. [ 394.368090][T11153] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1340'. [ 394.390823][T11153] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1340'. [ 394.426946][T11187] netlink: 'syz.0.1348': attribute type 39 has an invalid length. [ 394.435245][ T1209] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 394.775887][ T36] net_ratelimit: 12 callbacks suppressed [ 394.775910][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.790562][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.854385][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.862859][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.871572][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 395.005579][T11207] tipc: Enabling of bearer rejected, failed to enable media [ 395.014970][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 395.023327][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 395.045222][T11207] syzkaller0: entered promiscuous mode [ 395.072481][T11207] syzkaller0: entered allmulticast mode [ 395.132617][T11217] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 395.335885][ T1209] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 395.415663][ T8703] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 395.424909][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 395.544594][T11226] syzkaller0: entered promiscuous mode [ 395.550351][T11226] syzkaller0: entered allmulticast mode [ 395.607067][T11238] netlink: 'syz.4.1365': attribute type 1 has an invalid length. [ 395.896976][T11257] __nla_validate_parse: 2 callbacks suppressed [ 395.896997][T11257] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1366'. [ 395.905626][T11259] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1367'. [ 395.912500][T11257] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1366'. [ 396.100638][T11261] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1367'. [ 397.490280][T11265] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 397.508443][T11263] tipc: Cannot configure node identity twice [ 397.736198][T11279] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.1374'. [ 397.787183][T11280] tipc: Enabling of bearer rejected, failed to enable media [ 397.815786][T11280] syzkaller0: entered promiscuous mode [ 397.836109][T11280] syzkaller0: entered allmulticast mode [ 397.996159][T11290] FAULT_INJECTION: forcing a failure. [ 397.996159][T11290] name failslab, interval 1, probability 0, space 0, times 0 [ 398.027996][T11290] CPU: 0 UID: 0 PID: 11290 Comm: syz.0.1375 Not tainted syzkaller #0 PREEMPT(full) [ 398.028025][T11290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 398.028036][T11290] Call Trace: [ 398.028044][T11290] [ 398.028052][T11290] dump_stack_lvl+0xe8/0x150 [ 398.028084][T11290] should_fail_ex+0x412/0x560 [ 398.028113][T11290] should_failslab+0xa8/0x100 [ 398.028140][T11290] __kmalloc_noprof+0xe8/0x760 [ 398.028160][T11290] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 398.028195][T11290] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 398.028230][T11290] genl_family_rcv_msg_doit+0xd9/0x330 [ 398.028258][T11290] ? __asan_memcpy+0x40/0x70 [ 398.028289][T11290] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 398.028326][T11290] ? apparmor_capable+0x137/0x1a0 [ 398.028355][T11290] ? bpf_lsm_capable+0x9/0x20 [ 398.028390][T11290] ? security_capable+0x7e/0x2c0 [ 398.028418][T11290] genl_rcv_msg+0x61c/0x7a0 [ 398.028452][T11290] ? __pfx_genl_rcv_msg+0x10/0x10 [ 398.028479][T11290] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 398.028506][T11290] ? __lock_acquire+0x6b5/0x2cf0 [ 398.028543][T11290] netlink_rcv_skb+0x232/0x4b0 [ 398.028567][T11290] ? __pfx_genl_rcv_msg+0x10/0x10 [ 398.028594][T11290] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 398.028635][T11290] ? down_read+0x272/0x2e0 [ 398.028653][T11290] ? genl_rcv+0xd/0x40 [ 398.028680][T11290] genl_rcv+0x28/0x40 [ 398.028704][T11290] netlink_unicast+0x80f/0x9b0 [ 398.028734][T11290] ? __pfx_netlink_unicast+0x10/0x10 [ 398.028757][T11290] ? netlink_sendmsg+0x650/0xb40 [ 398.028777][T11290] ? skb_put+0x11b/0x210 [ 398.028807][T11290] netlink_sendmsg+0x813/0xb40 [ 398.028840][T11290] ? __pfx_netlink_sendmsg+0x10/0x10 [ 398.028867][T11290] ? aa_sock_msg_perm+0xf1/0x1b0 [ 398.028890][T11290] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 398.028913][T11290] ? __pfx_netlink_sendmsg+0x10/0x10 [ 398.028934][T11290] ____sys_sendmsg+0xa68/0xad0 [ 398.028972][T11290] ? __pfx_____sys_sendmsg+0x10/0x10 [ 398.029009][T11290] ? import_iovec+0x73/0xa0 [ 398.029039][T11290] ___sys_sendmsg+0x2a5/0x360 [ 398.029073][T11290] ? __pfx____sys_sendmsg+0x10/0x10 [ 398.029139][T11290] ? __fget_files+0x2a/0x420 [ 398.029164][T11290] ? __fget_files+0x3a0/0x420 [ 398.029202][T11290] __x64_sys_sendmsg+0x1bd/0x2a0 [ 398.029231][T11290] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 398.029267][T11290] ? __pfx_ksys_write+0x10/0x10 [ 398.029300][T11290] do_syscall_64+0x14d/0xf80 [ 398.029326][T11290] ? trace_irq_disable+0x3b/0x150 [ 398.029353][T11290] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.029372][T11290] ? clear_bhb_loop+0x40/0x90 [ 398.029404][T11290] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.029423][T11290] RIP: 0033:0x7f435e99c629 [ 398.029442][T11290] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 398.029458][T11290] RSP: 002b:00007f435f85e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 398.029480][T11290] RAX: ffffffffffffffda RBX: 00007f435ec15fa0 RCX: 00007f435e99c629 [ 398.029494][T11290] RDX: 0000000000000040 RSI: 0000200000001540 RDI: 0000000000000003 [ 398.029505][T11290] RBP: 00007f435f85e090 R08: 0000000000000000 R09: 0000000000000000 [ 398.029516][T11290] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 398.029526][T11290] R13: 00007f435ec16038 R14: 00007f435ec15fa0 R15: 00007ffdf014d648 [ 398.029559][T11290] [ 398.087347][T11293] tipc: Enabled bearer , priority 0 [ 398.167638][T11297] FAULT_INJECTION: forcing a failure. [ 398.167638][T11297] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 398.370555][T11307] xt_policy: output policy not valid in PREROUTING and INPUT [ 398.379024][T11297] CPU: 0 UID: 0 PID: 11297 Comm: syz.1.1383 Not tainted syzkaller #0 PREEMPT(full) [ 398.379050][T11297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 398.379060][T11297] Call Trace: [ 398.379068][T11297] [ 398.379075][T11297] dump_stack_lvl+0xe8/0x150 [ 398.379105][T11297] should_fail_ex+0x412/0x560 [ 398.379130][T11297] _copy_to_user+0x31/0xb0 [ 398.379156][T11297] simple_read_from_buffer+0xe1/0x170 [ 398.379184][T11297] proc_fail_nth_read+0x1bb/0x230 [ 398.379211][T11297] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 398.379237][T11297] ? rw_verify_area+0x2a6/0x4d0 [ 398.379253][T11297] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 398.379277][T11297] vfs_read+0x20c/0xa70 [ 398.379293][T11297] ? fdget_pos+0x246/0x320 [ 398.379321][T11297] ? __pfx___mutex_lock+0x10/0x10 [ 398.379348][T11297] ? __pfx_vfs_read+0x10/0x10 [ 398.379366][T11297] ? __fget_files+0x2a/0x420 [ 398.379393][T11297] ? __fget_files+0x3a0/0x420 [ 398.379414][T11297] ? __fget_files+0x2a/0x420 [ 398.379445][T11297] ksys_read+0x150/0x270 [ 398.379465][T11297] ? __pfx_ksys_read+0x10/0x10 [ 398.379494][T11297] do_syscall_64+0x14d/0xf80 [ 398.379518][T11297] ? trace_irq_disable+0x3b/0x150 [ 398.379541][T11297] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.379559][T11297] ? clear_bhb_loop+0x40/0x90 [ 398.379581][T11297] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.379598][T11297] RIP: 0033:0x7f326d95cece [ 398.379616][T11297] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 398.379642][T11297] RSP: 002b:00007f326e89dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 398.379663][T11297] RAX: ffffffffffffffda RBX: 00007f326e89e6c0 RCX: 00007f326d95cece [ 398.379675][T11297] RDX: 000000000000000f RSI: 00007f326e89e0a0 RDI: 0000000000000005 [ 398.379686][T11297] RBP: 00007f326e89e090 R08: 0000000000000000 R09: 0000000000000000 [ 398.379696][T11297] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 398.379706][T11297] R13: 00007f326dc16038 R14: 00007f326dc15fa0 R15: 00007fff662a3bd8 [ 398.379735][T11297] [ 398.650089][T11305] syzkaller0: entered promiscuous mode [ 398.664542][T11305] syzkaller0: entered allmulticast mode [ 398.683653][T11305] tipc: Resetting bearer [ 398.735920][T11292] tipc: Resetting bearer [ 398.974305][T11333] netlink: 'syz.3.1390': attribute type 4 has an invalid length. [ 399.025872][T11330] netlink: 'syz.3.1390': attribute type 4 has an invalid length. [ 399.157885][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 399.166011][ C0] lec:lec_tx_timeout: lec0 [ 399.170869][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 400.294676][ T24] net_ratelimit: 14 callbacks suppressed [ 400.294699][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 400.308856][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 400.336398][T11292] tipc: Disabling bearer [ 400.345548][T11306] lo speed is unknown, defaulting to 1000 [ 400.388498][ T1209] tipc: Node number set to 820944273 [ 400.536870][ T60] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 400.546506][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 400.710450][T11348] FAULT_INJECTION: forcing a failure. [ 400.710450][T11348] name failslab, interval 1, probability 0, space 0, times 0 [ 400.741412][T11348] CPU: 1 UID: 0 PID: 11348 Comm: syz.3.1394 Not tainted syzkaller #0 PREEMPT(full) [ 400.741442][T11348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 400.741453][T11348] Call Trace: [ 400.741461][T11348] [ 400.741470][T11348] dump_stack_lvl+0xe8/0x150 [ 400.741503][T11348] should_fail_ex+0x412/0x560 [ 400.741533][T11348] should_failslab+0xa8/0x100 [ 400.741568][T11348] __kmalloc_noprof+0xe8/0x760 [ 400.741589][T11348] ? ethnl_default_set_doit+0x16a/0xad0 [ 400.741623][T11348] ethnl_default_set_doit+0x16a/0xad0 [ 400.741650][T11348] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 400.741677][T11348] ? genl_family_rcv_msg_attrs_parse+0x212/0x2a0 [ 400.741712][T11348] genl_family_rcv_msg_doit+0x22a/0x330 [ 400.741741][T11348] ? __asan_memcpy+0x40/0x70 [ 400.741774][T11348] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 400.741816][T11348] ? bpf_lsm_capable+0x9/0x20 [ 400.741841][T11348] ? security_capable+0x7e/0x2c0 [ 400.741870][T11348] genl_rcv_msg+0x61c/0x7a0 [ 400.741905][T11348] ? __pfx_genl_rcv_msg+0x10/0x10 [ 400.741932][T11348] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 400.741959][T11348] ? __lock_acquire+0x6b5/0x2cf0 [ 400.741997][T11348] netlink_rcv_skb+0x232/0x4b0 [ 400.742021][T11348] ? __pfx_genl_rcv_msg+0x10/0x10 [ 400.742050][T11348] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 400.742093][T11348] ? down_read+0x272/0x2e0 [ 400.742112][T11348] ? genl_rcv+0xd/0x40 [ 400.742141][T11348] genl_rcv+0x28/0x40 [ 400.742166][T11348] netlink_unicast+0x80f/0x9b0 [ 400.742197][T11348] ? __pfx_netlink_unicast+0x10/0x10 [ 400.742221][T11348] ? netlink_sendmsg+0x650/0xb40 [ 400.742241][T11348] ? skb_put+0x11b/0x210 [ 400.742271][T11348] netlink_sendmsg+0x813/0xb40 [ 400.742304][T11348] ? __pfx_netlink_sendmsg+0x10/0x10 [ 400.742330][T11348] ? aa_sock_msg_perm+0xf1/0x1b0 [ 400.742355][T11348] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 400.742377][T11348] ? __pfx_netlink_sendmsg+0x10/0x10 [ 400.742398][T11348] ____sys_sendmsg+0xa68/0xad0 [ 400.742436][T11348] ? __pfx_____sys_sendmsg+0x10/0x10 [ 400.742473][T11348] ? import_iovec+0x73/0xa0 [ 400.742505][T11348] ___sys_sendmsg+0x2a5/0x360 [ 400.742546][T11348] ? __pfx____sys_sendmsg+0x10/0x10 [ 400.742614][T11348] ? __fget_files+0x2a/0x420 [ 400.742640][T11348] ? __fget_files+0x3a0/0x420 [ 400.742677][T11348] __x64_sys_sendmsg+0x1bd/0x2a0 [ 400.742708][T11348] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 400.742747][T11348] ? __pfx_ksys_write+0x10/0x10 [ 400.742781][T11348] do_syscall_64+0x14d/0xf80 [ 400.742808][T11348] ? trace_irq_disable+0x3b/0x150 [ 400.742834][T11348] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.742854][T11348] ? clear_bhb_loop+0x40/0x90 [ 400.742879][T11348] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.742898][T11348] RIP: 0033:0x7fc73599c629 [ 400.742918][T11348] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 400.742935][T11348] RSP: 002b:00007fc73688a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 400.742957][T11348] RAX: ffffffffffffffda RBX: 00007fc735c15fa0 RCX: 00007fc73599c629 [ 400.742970][T11348] RDX: 0000000000000040 RSI: 0000200000001540 RDI: 0000000000000003 [ 400.742982][T11348] RBP: 00007fc73688a090 R08: 0000000000000000 R09: 0000000000000000 [ 400.742994][T11348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 400.743006][T11348] R13: 00007fc735c16038 R14: 00007fc735c15fa0 R15: 00007ffda09d2eb8 [ 400.743039][T11348] [ 401.156248][T11306] virt_wifi0 speed is unknown, defaulting to 1000 [ 401.169000][T11344] lo speed is unknown, defaulting to 1000 [ 401.186888][ T60] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 401.196657][ T1209] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 401.234027][ T1209] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 401.336712][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 401.345246][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 401.520300][T11360] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1399'. [ 401.565018][T11364] syzkaller0: entered promiscuous mode [ 401.570626][T11364] syzkaller0: entered allmulticast mode [ 401.576667][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 402.051492][T11344] virt_wifi0 speed is unknown, defaulting to 1000 [ 402.075868][T11374] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1405'. [ 402.598459][T11389] FAULT_INJECTION: forcing a failure. [ 402.598459][T11389] name failslab, interval 1, probability 0, space 0, times 0 [ 402.634427][T11389] CPU: 0 UID: 0 PID: 11389 Comm: syz.2.1408 Not tainted syzkaller #0 PREEMPT(full) [ 402.634458][T11389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 402.634469][T11389] Call Trace: [ 402.634477][T11389] [ 402.634485][T11389] dump_stack_lvl+0xe8/0x150 [ 402.634519][T11389] should_fail_ex+0x412/0x560 [ 402.634549][T11389] should_failslab+0xa8/0x100 [ 402.634575][T11389] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 402.634705][T11389] ? __alloc_skb+0x1d0/0x7d0 [ 402.634732][T11389] ? __local_bh_enable_ip+0xd0/0x130 [ 402.634761][T11389] __alloc_skb+0x1d0/0x7d0 [ 402.634783][T11389] ? netlink_ack_tlv_len+0x6c/0x210 [ 402.634808][T11389] netlink_ack+0x146/0xa50 [ 402.634827][T11389] ? __pfx_genl_rcv_msg+0x10/0x10 [ 402.634856][T11389] ? __lock_acquire+0x6b5/0x2cf0 [ 402.634894][T11389] netlink_rcv_skb+0x2b6/0x4b0 [ 402.634916][T11389] ? __pfx_genl_rcv_msg+0x10/0x10 [ 402.634944][T11389] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 402.634986][T11389] ? down_read+0x272/0x2e0 [ 402.635004][T11389] ? genl_rcv+0xd/0x40 [ 402.635032][T11389] genl_rcv+0x28/0x40 [ 402.635057][T11389] netlink_unicast+0x80f/0x9b0 [ 402.635087][T11389] ? __pfx_netlink_unicast+0x10/0x10 [ 402.635109][T11389] ? netlink_sendmsg+0x650/0xb40 [ 402.635127][T11389] ? skb_put+0x11b/0x210 [ 402.635155][T11389] netlink_sendmsg+0x813/0xb40 [ 402.635187][T11389] ? __pfx_netlink_sendmsg+0x10/0x10 [ 402.635213][T11389] ? aa_sock_msg_perm+0xf1/0x1b0 [ 402.635237][T11389] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 402.635261][T11389] ? __pfx_netlink_sendmsg+0x10/0x10 [ 402.635283][T11389] ____sys_sendmsg+0xa68/0xad0 [ 402.635320][T11389] ? __pfx_____sys_sendmsg+0x10/0x10 [ 402.635369][T11389] ? import_iovec+0x73/0xa0 [ 402.635399][T11389] ___sys_sendmsg+0x2a5/0x360 [ 402.635433][T11389] ? __pfx____sys_sendmsg+0x10/0x10 [ 402.635498][T11389] ? __fget_files+0x2a/0x420 [ 402.635524][T11389] ? __fget_files+0x3a0/0x420 [ 402.635562][T11389] __x64_sys_sendmsg+0x1bd/0x2a0 [ 402.635592][T11389] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 402.635628][T11389] ? __pfx_ksys_write+0x10/0x10 [ 402.635662][T11389] do_syscall_64+0x14d/0xf80 [ 402.635688][T11389] ? trace_irq_disable+0x3b/0x150 [ 402.635714][T11389] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.635733][T11389] ? clear_bhb_loop+0x40/0x90 [ 402.635757][T11389] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.635777][T11389] RIP: 0033:0x7fd377d9c629 [ 402.635798][T11389] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 402.635815][T11389] RSP: 002b:00007fd378d2f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 402.635837][T11389] RAX: ffffffffffffffda RBX: 00007fd378015fa0 RCX: 00007fd377d9c629 [ 402.635851][T11389] RDX: 0000000000000040 RSI: 0000200000001540 RDI: 0000000000000003 [ 402.635863][T11389] RBP: 00007fd378d2f090 R08: 0000000000000000 R09: 0000000000000000 [ 402.635874][T11389] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 402.635886][T11389] R13: 00007fd378016038 R14: 00007fd378015fa0 R15: 00007ffd010aed48 [ 402.635919][T11389] [ 403.008556][T11392] netlink: 'syz.3.1410': attribute type 39 has an invalid length. [ 403.179029][T11400] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1412'. [ 403.248182][T11399] syzkaller0: entered promiscuous mode [ 403.253712][T11399] syzkaller0: entered allmulticast mode [ 403.261658][T11400] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1412'. [ 403.323389][T11404] IPVS: ip_vs_edit_dest(): server weight less than zero [ 403.734033][T11419] netlink: 'syz.3.1419': attribute type 1 has an invalid length. [ 404.187114][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 404.195580][ C0] lec:lec_tx_timeout: lec0 [ 404.200254][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 405.142120][T11411] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 405.273941][T11425] lo speed is unknown, defaulting to 1000 [ 405.494581][ T795] net_ratelimit: 14 callbacks suppressed [ 405.494601][ T795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 405.508859][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 405.635276][T11443] netlink: 27 bytes leftover after parsing attributes in process `syz.0.1426'. [ 405.674602][T11443] netlink: 'syz.0.1426': attribute type 21 has an invalid length. [ 405.682631][T11443] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1426'. [ 405.947543][T11451] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.1427'. [ 406.290559][T11425] virt_wifi0 speed is unknown, defaulting to 1000 [ 406.298040][ T60] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 406.302591][T11430] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1420'. [ 406.306531][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 406.367992][T11430] xt_nfacct: accounting object `syz0' does not exist [ 406.534628][ T795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 406.543235][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 406.939661][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 406.948653][ T795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 406.958507][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 406.979521][T11471] openvswitch: netlink: IP tunnel dst address not specified [ 408.058797][T11508] syzkaller0: entered promiscuous mode [ 408.073859][T11508] syzkaller0: entered allmulticast mode [ 408.285445][T11518] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 408.610322][T11534] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1457'. [ 408.897581][T11549] macsec1: entered promiscuous mode [ 408.917213][T11549] macsec1: entered allmulticast mode [ 408.952822][T11551] netlink: 'syz.4.1463': attribute type 5 has an invalid length. [ 409.028233][T11557] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1463'. [ 409.176111][T11563] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1465'. [ 409.214275][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 409.222353][ C0] lec:lec_tx_timeout: lec0 [ 409.227118][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 409.249907][T11563] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1465'. [ 409.259424][T11563] nbd: nbd64 already in use [ 409.483144][T11585] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1471'. [ 409.577144][ T7109] udevd[7109]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 409.632980][T11587] bond5: ARP target 9.0.0.0 is already present [ 409.685336][T11587] bond5: option arp_ip_target: invalid value (9) [ 409.720750][T11587] bond5 (unregistering): Released all slaves [ 409.743505][T11601] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1474'. [ 409.895254][T11613] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1475'. [ 409.916133][T11613] unsupported nlmsg_type 40 [ 410.159169][T11627] netlink: 192 bytes leftover after parsing attributes in process `syz.2.1481'. [ 410.192473][T11627] netlink: 'syz.2.1481': attribute type 1 has an invalid length. [ 410.476739][T11634] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1484'. [ 410.534888][T11631] netlink: 'syz.2.1483': attribute type 30 has an invalid length. [ 410.548959][T11634] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1484'. [ 410.560701][T11634] bridge_slave_1: vlans aren't supported yet for dev_uc|mc_add() [ 410.697787][ T795] net_ratelimit: 12 callbacks suppressed [ 410.697811][ T795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 410.711984][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 411.070720][T11658] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 411.096162][T11656] syzkaller0: entered promiscuous mode [ 411.113701][T11656] syzkaller0: entered allmulticast mode [ 411.610554][T11683] bond8: Invalid ad_actor_system MAC address. [ 411.619981][T11683] bond8: option ad_actor_system: invalid value (7) [ 411.628760][T11683] bond8 (unregistering): Released all slaves [ 411.734919][ T795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 411.743371][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 411.817956][T11697] tipc: Can't bind to reserved service type 2 [ 411.946371][T11702] lo speed is unknown, defaulting to 1000 [ 412.056053][ T8703] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 412.064515][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 412.083667][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 412.093477][ T1209] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 412.106893][ T1209] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 412.487379][T11726] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 412.512599][T11728] xt_TCPMSS: Only works on TCP SYN packets [ 412.529181][T11720] syzkaller0: entered promiscuous mode [ 412.538783][T11720] syzkaller0: entered allmulticast mode [ 412.556782][T11725] bridge0: entered allmulticast mode [ 412.619829][T11724] tipc: Enabled bearer , priority 0 [ 412.737310][T11724] syzkaller0: entered promiscuous mode [ 412.743083][T11724] syzkaller0: entered allmulticast mode [ 412.750419][T11724] tipc: Resetting bearer [ 414.236842][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 414.245175][ C0] lec:lec_tx_timeout: lec0 [ 414.249938][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 414.285707][T11721] tipc: Resetting bearer [ 414.575417][T11756] __nla_validate_parse: 8 callbacks suppressed [ 414.575438][T11756] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1520'. [ 415.897664][ T5893] net_ratelimit: 11 callbacks suppressed [ 415.897687][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 415.911733][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 416.096497][T11721] tipc: Disabling bearer [ 416.105537][ T29] tipc: Node number set to 2011826203 [ 416.312540][T11780] syzkaller0: entered promiscuous mode [ 416.318543][T11780] syzkaller0: entered allmulticast mode [ 416.332603][T11780] netlink: 'syz.4.1526': attribute type 3 has an invalid length. [ 416.634352][T11792] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1530'. [ 416.700363][T11797] tipc: Enabled bearer , priority 0 [ 416.730375][T11792] syzkaller0: entered promiscuous mode [ 416.755497][T11792] syzkaller0: entered allmulticast mode [ 416.768918][T11796] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1531'. [ 416.807056][T11796] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1531'. [ 416.823255][T11792] tipc: Resetting bearer [ 416.855811][T11791] tipc: Resetting bearer [ 416.872480][T11791] tipc: Disabling bearer [ 416.937034][ T795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 416.945502][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 416.953365][T11798] xt_limit: Overflow, try lower: 268435456/134217728 [ 417.442646][T11825] netlink: 'syz.3.1539': attribute type 13 has an invalid length. [ 417.463917][T11825] netlink: 'syz.3.1539': attribute type 17 has an invalid length. [ 417.652875][T11825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 417.677296][T11825] 8021q: adding VLAN 0 to HW filter on device team0 [ 417.691115][T11825] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 417.739565][T11832] syzkaller0: entered promiscuous mode [ 417.749820][T11832] syzkaller0: entered allmulticast mode [ 417.816326][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 417.825098][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 417.850793][T11834] batman_adv: batadv0: Adding interface: dummy0 [ 417.857280][T11834] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 417.884633][T11834] batman_adv: batadv0: Interface activated: dummy0 [ 417.893818][T11832] netlink: 'syz.4.1543': attribute type 13 has an invalid length. [ 417.985726][ T795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 417.994309][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 418.106975][ T795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 418.238606][T11839] tipc: Enabled bearer , priority 0 [ 418.274739][T11849] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1543'. [ 418.444578][T11849] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 418.522626][T11849] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 418.653905][T11831] tipc: Resetting bearer [ 418.759566][T11831] tipc: Disabling bearer [ 418.986395][T11863] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1549'. [ 419.011311][T11862] xt_l2tp: invalid flags combination: 8 [ 419.027287][T11862] netlink: 'syz.0.1547': attribute type 21 has an invalid length. [ 419.035377][T11862] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1547'. [ 419.113049][T11869] netlink: 'syz.4.1550': attribute type 1 has an invalid length. [ 419.253514][T11869] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1550'. [ 419.264133][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 419.272165][ C0] lec:lec_tx_timeout: lec0 [ 419.276930][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 419.296225][T11873] bond7: (slave veth5): Enslaving as an active interface with a down link [ 419.309247][T11869] 8021q: adding VLAN 0 to HW filter on device bond7 [ 419.410449][T11880] tunl0: Caught tx_queue_len zero misconfig [ 419.794363][ T5193] udevd[5193]: worker [7111] /devices/virtual/block/nbd1 is taking a long time [ 419.847830][T11899] netlink: 'syz.0.1558': attribute type 21 has an invalid length. [ 419.881401][T11899] tipc: Enabling of bearer rejected, failed to enable media [ 420.284306][T11909] lo speed is unknown, defaulting to 1000 [ 420.390720][ T5167] block nbd1: Possible stuck request ffff888027000000: control (read@0,1024B). Runtime 120 seconds [ 420.401634][ T5167] block nbd1: Possible stuck request ffff888027000200: control (read@1024,1024B). Runtime 120 seconds [ 420.412718][ T5167] block nbd1: Possible stuck request ffff888027000400: control (read@2048,1024B). Runtime 120 seconds [ 420.423771][ T5167] block nbd1: Possible stuck request ffff888027000600: control (read@3072,1024B). Runtime 120 seconds [ 421.094609][ T29] net_ratelimit: 11 callbacks suppressed [ 421.094633][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 421.109366][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 421.214604][T11927] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1563'. [ 421.263980][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 421.283256][T11930] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1564'. [ 421.604302][T11935] netlink: 'syz.0.1565': attribute type 3 has an invalid length. [ 422.136326][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 422.145101][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 422.312238][T11960] syzkaller0: entered promiscuous mode [ 422.321644][T11960] syzkaller0: entered allmulticast mode [ 422.568400][T11961] syz.1.1566 uses old SIOCAX25GETINFO [ 422.854679][ T60] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 422.863054][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 422.976395][T11981] IPv6: Can't replace route, no match found [ 423.150027][T11986] lo speed is unknown, defaulting to 1000 [ 423.458527][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 423.469278][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 423.491109][T11994] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1577'. [ 423.505380][T11995] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1577'. [ 423.788574][T12001] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1579'. [ 423.981607][T12007] tipc: Enabled bearer , priority 0 [ 424.007427][T12007] tipc: Resetting bearer [ 424.040272][T12004] tipc: Disabling bearer [ 424.304562][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.396250][T12018] netlink: 'syz.4.1585': attribute type 1 has an invalid length. [ 424.405606][T12018] netlink: 'syz.4.1585': attribute type 21 has an invalid length. [ 424.422600][T12022] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1587'. [ 424.433424][T12018] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1585'. [ 424.444254][T12018] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1585'. [ 424.776835][T12028] lo speed is unknown, defaulting to 1000 [ 425.156319][T12041] syzkaller1: entered promiscuous mode [ 425.161935][T12041] syzkaller1: entered allmulticast mode [ 425.468450][T12048] tipc: Enabled bearer , priority 0 [ 425.491054][T12048] tipc: Resetting bearer [ 425.496965][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 6220 ms [ 425.497039][ C0] lec:lec_tx_timeout: lec0 [ 425.505238][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 425.597427][T12047] tipc: Disabling bearer [ 425.809957][T12066] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 425.854855][T12066] netlink: 'syz.2.1600': attribute type 4 has an invalid length. [ 425.872534][T12066] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1600'. [ 425.948498][T12064] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1598'. [ 426.252973][T12080] netlink: 'syz.0.1603': attribute type 3 has an invalid length. [ 426.262628][T12080] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1603'. [ 426.354915][T12080] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1603'. [ 426.382697][T12080] net_ratelimit: 4 callbacks suppressed [ 426.382718][T12080] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 426.614873][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 426.623380][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 426.632375][T12102] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1608'. [ 426.677389][T12102] IPv6: sit1: Disabled Multicast RS [ 426.689341][T12106] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 426.781172][T12105] tipc: Enabled bearer , priority 0 [ 426.813914][T12105] tipc: Resetting bearer [ 426.871467][T12108] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1611'. [ 426.901237][T12103] tipc: Disabling bearer [ 426.951286][T12119] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1612'. [ 427.025534][T12124] netlink: 67 bytes leftover after parsing attributes in process `syz.4.1612'. [ 427.334902][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 427.390743][T12133] netlink: 'syz.4.1617': attribute type 10 has an invalid length. [ 427.428440][T12133] netlink: 228 bytes leftover after parsing attributes in process `syz.4.1617'. [ 427.489298][T12135] lo speed is unknown, defaulting to 1000 [ 427.654608][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 427.663057][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 427.964003][T12146] lo speed is unknown, defaulting to 1000 [ 428.312079][T12173] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1626'. [ 428.410209][T12173] bridge_slave_1: left allmulticast mode [ 428.417220][T12173] bridge_slave_1: left promiscuous mode [ 428.425250][T12173] bridge0: port 2(bridge_slave_1) entered disabled state [ 428.457277][T12173] bridge_slave_0: left promiscuous mode [ 428.480936][T12173] bridge0: port 1(bridge_slave_0) entered disabled state [ 428.524304][T12179] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 428.701637][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 428.710239][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 429.153719][T12204] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1635'. [ 429.235345][T12202] lo speed is unknown, defaulting to 1000 [ 429.317338][T12209] tipc: Enabled bearer , priority 0 [ 429.345605][T12209] syzkaller0: entered promiscuous mode [ 429.351292][T12209] syzkaller0: entered allmulticast mode [ 429.384570][T12207] tipc: Resetting bearer [ 429.419637][T12207] tipc: Disabling bearer [ 429.676675][T12215] netlink: 212344 bytes leftover after parsing attributes in process `syz.4.1638'. [ 429.693594][T12215] lo: Caught tx_queue_len zero misconfig [ 429.699516][T12215] sch_tbf: burst 240 is lower than device lo mtu (11337746) ! [ 430.075322][T12222] 8021q: adding VLAN 0 to HW filter on device bond0 [ 430.306102][T12222] 8021q: adding VLAN 0 to HW filter on device team0 [ 430.926200][T12248] tipc: Enabled bearer , priority 0 [ 430.944436][T12248] syzkaller0: entered promiscuous mode [ 430.949960][T12248] syzkaller0: entered allmulticast mode [ 431.010256][T12247] tipc: Resetting bearer [ 431.042633][T12247] tipc: Disabling bearer [ 431.096566][T12255] netlink: 'syz.2.1646': attribute type 4 has an invalid length. [ 431.254110][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5750 ms [ 431.262204][ C0] lec:lec_tx_timeout: lec0 [ 431.267520][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 431.658964][T12274] lo speed is unknown, defaulting to 1000 [ 431.920560][T12285] __nla_validate_parse: 4 callbacks suppressed [ 431.920583][T12285] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1659'. [ 431.966037][T12285] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1659'. [ 432.075622][T12289] netlink: 'syz.3.1658': attribute type 10 has an invalid length. [ 432.513554][T12317] syzkaller0: entered promiscuous mode [ 432.521081][T12317] syzkaller0: entered allmulticast mode [ 432.636408][T12327] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1667'. [ 432.642286][T12328] netlink: 'syz.1.1669': attribute type 21 has an invalid length. [ 432.694583][T12328] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1669'. [ 432.889115][T12333] tipc: Enabled bearer , priority 10 [ 433.156635][T12347] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1675'. [ 433.280981][T12349] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1676'. [ 433.306719][T12349] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1676'. [ 433.332234][T12349] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1676'. [ 433.355149][T12349] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1676'. [ 433.553042][T12361] net_ratelimit: 3 callbacks suppressed [ 433.553063][T12361] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 433.580083][T12363] pim6reg1: tun_chr_ioctl cmd 1074025677 [ 433.586651][T12363] pim6reg1: linktype set to 805 [ 433.835173][T12374] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1685'. [ 433.860013][T12377] netlink: 'syz.3.1686': attribute type 29 has an invalid length. [ 433.909787][T12376] netlink: 'syz.3.1686': attribute type 29 has an invalid length. [ 433.935834][T12377] netlink: 'syz.3.1686': attribute type 29 has an invalid length. [ 434.021190][T12381] lo speed is unknown, defaulting to 1000 [ 434.024126][ T10] tipc: Node number set to 1923888091 [ 434.067091][T12382] syzkaller1: entered promiscuous mode [ 434.073515][T12382] syzkaller1: entered allmulticast mode [ 434.089712][T12385] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 435.094356][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 435.277922][T12420] gretap0: entered promiscuous mode [ 435.308999][T12420] gretap0: left promiscuous mode [ 435.489335][T12427] 8021q: adding VLAN 0 to HW filter on device bond0 [ 435.566566][ T49] bond0: (slave bond_slave_0): link status definitely down, disabling slave [ 435.626495][ T49] bond0: (slave bond_slave_1): link status definitely down, disabling slave [ 435.811168][T12428] 8021q: adding VLAN 0 to HW filter on device bond5 [ 435.878374][T12436] xt_CT: No such helper "snmp" [ 436.160526][T12455] netlink: 'syz.0.1707': attribute type 61 has an invalid length. [ 436.513562][T12464] wg1: entered promiscuous mode [ 436.535835][T12464] wg1: entered allmulticast mode [ 436.555312][T12464] tipc: Enabled bearer , priority 0 [ 436.733870][T12463] tipc: Disabling bearer [ 437.094154][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5830 ms [ 437.102367][ C0] lec:lec_tx_timeout: lec0 [ 437.107980][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 437.410099][T12501] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 438.004728][T12534] openvswitch: netlink: Tunnel attr 2827 out of range max 16 [ 438.439525][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880564f2800: rx timeout, send abort [ 438.880490][T12588] xt_hashlimit: size too large, truncated to 1048576 [ 438.948016][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880564f2800: abort rx timeout. Force session deactivation [ 439.208450][T12605] tipc: Enabling of bearer rejected, failed to enable media [ 439.380421][T12605] lo speed is unknown, defaulting to 1000 [ 440.003165][T12647] bridge_slave_1: left allmulticast mode [ 440.009561][T12647] bridge_slave_1: left promiscuous mode [ 440.016218][T12647] bridge0: port 2(bridge_slave_1) entered disabled state [ 440.103975][T12652] netlink: 'syz.2.1761': attribute type 1 has an invalid length. [ 440.128575][T12656] __nla_validate_parse: 16 callbacks suppressed [ 440.128598][T12656] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1762'. [ 440.258012][T12652] 8021q: adding VLAN 0 to HW filter on device bond3 [ 440.455728][T12652] bond3: (slave geneve2): making interface the new active one [ 440.490143][T12652] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 440.499511][T12681] netlink: 'syz.4.1766': attribute type 11 has an invalid length. [ 440.542381][ T49] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.570312][ T49] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.639561][ T49] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.664417][ T49] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.767821][T12692] netlink: 'syz.1.1767': attribute type 1 has an invalid length. [ 440.793581][T12684] syzkaller0: entered promiscuous mode [ 440.826604][T12684] syzkaller0: entered allmulticast mode [ 440.923924][T12680] bond6 (unregistering): Released all slaves [ 441.037903][T12702] netlink: 192 bytes leftover after parsing attributes in process `syz.4.1771'. [ 441.092461][T12701] lo speed is unknown, defaulting to 1000 [ 441.168120][T12709] netlink: 'syz.0.1773': attribute type 1 has an invalid length. [ 441.188194][T12709] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1773'. [ 441.256384][T12717] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1774'. [ 441.702215][T12724] lo speed is unknown, defaulting to 1000 [ 441.709712][T12730] netlink: 'syz.1.1778': attribute type 61 has an invalid length. [ 442.001846][ T29] IPVS: starting estimator thread 0... [ 442.124137][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 442.132293][ C0] lec:lec_tx_timeout: lec0 [ 442.137261][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 442.143883][T12743] IPVS: using max 30 ests per chain, 72000 per kthread [ 442.373514][T12752] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1786'. [ 442.837013][T12768] netlink: 'syz.4.1788': attribute type 10 has an invalid length. [ 442.846664][T12764] lo speed is unknown, defaulting to 1000 [ 443.013046][T12768] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 443.152094][T12779] vxcan1: entered promiscuous mode [ 443.275797][ T12] bond0: (slave dummy0): interface is now down [ 443.293268][ T12] bond0: now running without any active interface! [ 443.370044][T12782] syzkaller1: entered promiscuous mode [ 443.397553][T12782] syzkaller1: entered allmulticast mode [ 443.732260][T12792] netlink: 116 bytes leftover after parsing attributes in process `syz.4.1795'. [ 444.045517][T12800] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1796'. [ 444.088753][T12797] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1796'. [ 444.104668][T12797] netlink: 336 bytes leftover after parsing attributes in process `syz.4.1796'. [ 444.113940][T12797] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1796'. [ 444.216255][T12802] tipc: Enabled bearer , priority 0 [ 444.244889][T12802] syzkaller0: entered promiscuous mode [ 444.253533][T12802] syzkaller0: entered allmulticast mode [ 444.310989][T12802] tipc: Resetting bearer [ 444.337597][T12801] tipc: Resetting bearer [ 444.396281][T12801] tipc: Disabling bearer [ 444.540078][T12817] netlink: 'syz.4.1801': attribute type 10 has an invalid length. [ 444.565756][T12820] netlink: 'syz.3.1803': attribute type 1 has an invalid length. [ 444.567244][T12817] team0: Device veth1_macvtap failed to register rx_handler [ 444.678567][T12820] bond4: entered allmulticast mode [ 444.703996][T12831] lo speed is unknown, defaulting to 1000 [ 445.254971][T12855] lo speed is unknown, defaulting to 1000 [ 445.287962][T12857] __nla_validate_parse: 4 callbacks suppressed [ 445.287986][T12857] netlink: 192 bytes leftover after parsing attributes in process `syz.2.1809'. [ 445.324766][T12854] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1808'. [ 445.340065][T12854] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1808'. [ 447.144145][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 447.152325][ C0] lec:lec_tx_timeout: lec0 [ 447.157262][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 447.521648][T12821] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 448.177763][T12911] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1818'. [ 448.252354][T12891] lo speed is unknown, defaulting to 1000 [ 448.389292][T12889] syz.3.1813 (12889) used greatest stack depth: 17696 bytes left [ 448.397234][T12890] syz.3.1813 (12890) used greatest stack depth: 17472 bytes left [ 448.996111][T12934] tap0: tun_chr_ioctl cmd 1074025677 [ 449.010982][T12934] tap0: linktype set to 769 [ 449.137951][T12939] gretap0: entered promiscuous mode [ 449.145764][T12939] vlan4: entered promiscuous mode [ 449.221722][T12945] xt_hashlimit: size too large, truncated to 1048576 [ 449.290722][T12949] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1832'. [ 449.583173][T12943] lo speed is unknown, defaulting to 1000 [ 449.978637][T12957] lo speed is unknown, defaulting to 1000 [ 450.450698][T12981] netlink: 'syz.4.1839': attribute type 15 has an invalid length. [ 450.461319][ T5167] block nbd1: Possible stuck request ffff888027000000: control (read@0,1024B). Runtime 150 seconds [ 450.472381][ T5167] block nbd1: Possible stuck request ffff888027000200: control (read@1024,1024B). Runtime 150 seconds [ 450.485514][ T5167] block nbd1: Possible stuck request ffff888027000400: control (read@2048,1024B). Runtime 150 seconds [ 450.498130][ T5167] block nbd1: Possible stuck request ffff888027000600: control (read@3072,1024B). Runtime 150 seconds [ 450.533134][T12983] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1840'. [ 450.628108][T12985] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1840'. [ 451.016056][T13000] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1843'. [ 451.141010][T13003] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1845'. [ 451.154631][T13003] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1845'. [ 451.220034][T12997] lo speed is unknown, defaulting to 1000 [ 452.040692][T13022] tipc: Enabled bearer , priority 0 [ 452.061538][T13021] syzkaller0: entered promiscuous mode [ 452.078141][T13021] syzkaller0: entered allmulticast mode [ 452.108740][T13021] tipc: Resetting bearer [ 452.164097][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 452.172147][ C0] lec:lec_tx_timeout: lec0 [ 452.177259][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 452.204008][T13020] tipc: Resetting bearer [ 452.253860][T13027] netlink: 'syz.3.1851': attribute type 1 has an invalid length. [ 452.283809][T13027] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 452.303851][T13020] tipc: Disabling bearer [ 452.340651][T13025] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 452.867340][T13061] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1856'. [ 452.886911][T13054] netlink: 'syz.4.1859': attribute type 10 has an invalid length. [ 452.910931][T13054] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 453.291279][T13085] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 453.418495][T13091] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1867'. [ 453.641168][T13108] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1866'. [ 453.801457][T13114] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1872'. [ 453.874953][T13116] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 453.902569][T13114] syzkaller0: entered promiscuous mode [ 453.908900][T13114] syzkaller0: entered allmulticast mode [ 453.943554][T13124] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1876'. [ 454.536246][ T5841] Bluetooth: hci4: command 0x0406 tx timeout [ 454.643211][T13142] pim6reg1: entered promiscuous mode [ 454.648976][T13142] pim6reg1: entered allmulticast mode [ 454.937504][T13155] IPVS: Unknown mcast interface: vcan0 [ 455.226647][T13183] netlink: 'syz.0.1890': attribute type 1 has an invalid length. [ 455.293409][T13185] bond8: entered promiscuous mode [ 455.298947][T13185] bond8: entered allmulticast mode [ 455.309612][T13185] 8021q: adding VLAN 0 to HW filter on device bond8 [ 455.320994][T13186] netlink: 'syz.3.1889': attribute type 1 has an invalid length. [ 455.329353][T13186] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 455.377778][T13183] bridge5: entered promiscuous mode [ 455.383409][T13183] bridge5: entered allmulticast mode [ 455.389872][T13183] bond8: (slave bridge5): Enslaving as a backup interface with a down link [ 455.400002][T13195] netlink: 'syz.3.1889': attribute type 15 has an invalid length. [ 455.498262][T13183] bridge6: entered promiscuous mode [ 455.503792][T13183] bridge6: entered allmulticast mode [ 455.510439][T13183] bond8: (slave bridge6): Enslaving as a backup interface with a down link [ 455.540645][T13199] __nla_validate_parse: 8 callbacks suppressed [ 455.540665][T13199] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1893'. [ 455.595260][T13204] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1893'. [ 455.674357][T13206] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1896'. [ 455.972908][T13198] lo speed is unknown, defaulting to 1000 [ 457.017401][T13253] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1906'. [ 457.038467][T13243] netlink: zone id is out of range [ 457.043732][T13243] netlink: zone id is out of range [ 457.049040][T13243] netlink: zone id is out of range [ 457.054446][T13243] netlink: zone id is out of range [ 457.061926][T13243] netlink: zone id is out of range [ 457.074330][T13243] netlink: zone id is out of range [ 457.085346][T13243] netlink: zone id is out of range [ 457.097771][T13243] netlink: zone id is out of range [ 457.194530][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 457.202587][ C0] lec:lec_tx_timeout: lec0 [ 457.207639][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 458.304325][T13297] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1917'. [ 458.390003][T13302] tipc: Failed to remove unknown binding: 66,0,0/2010659235:1661066192/1661066193 [ 458.457389][T13311] tipc: Failed to remove unknown binding: 66,0,0/2010659235:1661066192/1661066193 [ 458.668130][T13321] syzkaller1: entered promiscuous mode [ 458.673663][T13321] syzkaller1: entered allmulticast mode [ 458.684830][T13314] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1922'. [ 458.694028][T13314] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1922'. [ 458.711436][T13321] SET target dimension over the limit! [ 458.746590][T13331] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1926'. [ 458.769603][T13331] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1926'. [ 459.096933][T13348] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1929'. [ 459.292185][T13351] gretap3: entered promiscuous mode [ 459.493739][T13361] syzkaller1: entered promiscuous mode [ 459.501905][T13361] syzkaller1: entered allmulticast mode [ 459.767231][T13371] netlink: 'syz.2.1937': attribute type 4 has an invalid length. [ 459.784261][T13371] netlink: 'syz.2.1937': attribute type 4 has an invalid length. [ 460.220291][ T1104] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.228919][ T1104] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.237954][T13399] sit0: entered promiscuous mode [ 460.251402][T13399] netlink: 'syz.1.1944': attribute type 1 has an invalid length. [ 460.259781][ T1104] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.273115][ T1104] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.303544][T13396] lo speed is unknown, defaulting to 1000 [ 460.445211][T13410] net_ratelimit: 62 callbacks suppressed [ 460.445235][T13410] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 460.848893][T13433] __nla_validate_parse: 6 callbacks suppressed [ 460.848914][T13433] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1955'. [ 460.851469][T13434] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1956'. [ 460.865025][T13433] netlink: 'syz.2.1955': attribute type 1 has an invalid length. [ 460.893526][T13431] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1954'. [ 460.934835][T13431] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1954'. [ 460.960605][T13431] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1954'. [ 461.002456][T13431] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1954'. [ 461.030260][T13431] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1954'. [ 461.066462][T13431] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1954'. [ 461.128049][T13443] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1957'. [ 461.341665][T13455] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1961'. [ 462.214119][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 462.222229][ C0] lec:lec_tx_timeout: lec0 [ 462.227333][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 462.721938][T13512] netlink: 'syz.4.1978': attribute type 1 has an invalid length. [ 462.808831][T13514] netlink: 'syz.2.1979': attribute type 1 has an invalid length. [ 462.836787][T13512] bond8: entered promiscuous mode [ 462.842077][T13512] bond8: entered allmulticast mode [ 462.847995][T13512] 8021q: adding VLAN 0 to HW filter on device bond8 [ 462.869693][T13516] macvlan3: entered promiscuous mode [ 462.875336][T13516] macvlan3: entered allmulticast mode [ 463.053574][T13528] netlink: 'syz.3.1982': attribute type 9 has an invalid length. [ 463.085517][T13523] x_tables: duplicate underflow at hook 2 [ 463.839078][T13570] No such timeout policy "syz0" [ 464.011939][T13574] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 464.024212][T13574] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 464.072013][T13577] 8021q: adding VLAN 0 to HW filter on device bond9 [ 464.097588][T13577] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 464.106913][T13577] bond9: (slave batadv1): Enslaving as an active interface with an up link [ 464.149471][T13577] bond9 (unregistering): (slave batadv1): Releasing backup interface [ 464.171818][T13577] bond9 (unregistering): Released all slaves [ 464.224675][T13587] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 464.365954][T13577] netlink: 'syz.4.1996': attribute type 11 has an invalid length. [ 464.465956][T13595] netlink: 'syz.0.2000': attribute type 4 has an invalid length. [ 464.541284][T13595] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 465.130276][T13616] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 465.170640][T13616] netlink: 'syz.1.2007': attribute type 21 has an invalid length. [ 467.234159][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 467.242249][ C0] lec:lec_tx_timeout: lec0 [ 467.247183][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 467.670576][T13601] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 467.699350][T13643] netlink: 'syz.3.2014': attribute type 10 has an invalid length. [ 467.734275][T13643] __nla_validate_parse: 19 callbacks suppressed [ 467.734298][T13643] netlink: 228 bytes leftover after parsing attributes in process `syz.3.2014'. [ 467.850039][T13653] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2015'. [ 467.863989][T13643] smc: removing net device wlan0 with user defined pnetid SYZ0 [ 467.930648][T13653] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2015'. [ 467.963603][T13653] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 467.981127][T13659] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2016'. [ 468.272750][T13673] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2020'. [ 468.326800][T13678] netlink: 'syz.3.2019': attribute type 3 has an invalid length. [ 468.354493][T13678] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2019'. [ 468.400188][T13671] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2021'. [ 468.984002][T13707] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2028'. [ 469.317191][T13731] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2033'. [ 470.217028][T13741] lo speed is unknown, defaulting to 1000 [ 471.696108][T13693] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 471.927891][T13758] netlink: 'syz.2.2041': attribute type 10 has an invalid length. [ 471.947509][T13761] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2040'. [ 471.979811][T13764] netlink: 'syz.2.2041': attribute type 10 has an invalid length. [ 472.035648][T13758] bond0: (slave dummy0): Releasing backup interface [ 472.079200][T13758] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 472.102984][T13758] team0: Failed to send options change via netlink (err -105) [ 472.111575][T13758] team0: Port device dummy0 added [ 472.223200][T13764] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 472.254175][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 472.262270][ C0] lec:lec_tx_timeout: lec0 [ 472.268664][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 472.315011][T13780] xt_nfacct: accounting object `syz1' does not exist [ 472.365205][T13759] lo speed is unknown, defaulting to 1000 [ 472.597459][T13787] netlink: 'syz.2.2049': attribute type 3 has an invalid length. [ 472.815739][T13774] lo speed is unknown, defaulting to 1000 [ 472.913454][T13805] __nla_validate_parse: 3 callbacks suppressed [ 472.913476][T13805] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2053'. [ 473.070216][T13805] netlink: 'syz.1.2053': attribute type 9 has an invalid length. [ 473.104727][T13805] netlink: 'syz.1.2053': attribute type 6 has an invalid length. [ 473.128620][T13797] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2053'. [ 473.317306][T13820] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2057'. [ 473.339655][T13820] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2057'. [ 473.379659][T13820] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2057'. [ 473.409112][T13820] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2057'. [ 473.422941][T13820] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2057'. [ 473.433766][T13820] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2057'. [ 473.443130][T13820] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2057'. [ 473.453400][T13820] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2057'. [ 473.526674][T13828] netlink: 'syz.2.2057': attribute type 6 has an invalid length. [ 473.691531][T13831] netlink: 'syz.1.2061': attribute type 10 has an invalid length. [ 473.710022][T13831] syz_tun: entered promiscuous mode [ 474.084724][T13843] netlink: 'syz.1.2065': attribute type 32 has an invalid length. [ 475.669734][T13849] openvswitch: netlink: Actions may not be safe on all matching packets [ 475.698006][T13849] netlink: 'syz.1.2066': attribute type 4 has an invalid length. [ 475.788112][T13856] tipc: Enabled bearer , priority 0 [ 475.967938][T13854] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 476.001421][T13854] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 476.021856][T13874] netlink: 'syz.3.2073': attribute type 3 has an invalid length. [ 476.039526][T13854] bond0 (unregistering): Released all slaves [ 476.092498][T13856] syzkaller0: entered promiscuous mode [ 476.115655][T13856] syzkaller0: entered allmulticast mode [ 476.193949][T13882] tipc: Resetting bearer [ 476.229677][T13855] tipc: Resetting bearer [ 476.371872][T13855] tipc: Disabling bearer [ 476.587337][T13907] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 477.025442][T13934] netlink: 'syz.3.2080': attribute type 22 has an invalid length. [ 477.098096][ T1104] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 477.114670][T13934] netlink: 'syz.3.2080': attribute type 22 has an invalid length. [ 477.123572][ T1104] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 477.144959][ T1104] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 477.173883][ T1104] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 477.556445][T13964] netlink: 'syz.0.2088': attribute type 4 has an invalid length. [ 477.609196][T13966] netlink: 'syz.4.2091': attribute type 1 has an invalid length. [ 477.617220][T13966] netlink: 'syz.4.2091': attribute type 3 has an invalid length. [ 477.625342][T13966] netlink: 'syz.4.2091': attribute type 2 has an invalid length. [ 477.796643][T13973] lo: entered allmulticast mode [ 477.817052][T13973] lo: left allmulticast mode [ 478.054081][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5780 ms [ 478.062141][ C0] lec:lec_tx_timeout: lec0 [ 478.066978][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 478.145671][T14000] syzkaller1: entered promiscuous mode [ 478.193160][T14000] syzkaller1: entered allmulticast mode [ 478.298016][T14002] lo speed is unknown, defaulting to 1000 [ 478.506259][T14017] netlink: 'syz.3.2098': attribute type 10 has an invalid length. [ 479.131234][T14038] netlink: 'syz.0.2103': attribute type 1 has an invalid length. [ 479.335512][T14038] 8021q: adding VLAN 0 to HW filter on device bond9 [ 479.593296][T14063] __nla_validate_parse: 91 callbacks suppressed [ 479.593312][T14063] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2108'. [ 479.853635][T14083] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2112'. [ 480.000657][T14088] netlink: 'syz.2.2113': attribute type 16 has an invalid length. [ 480.008975][T14088] netlink: 'syz.2.2113': attribute type 17 has an invalid length. [ 480.137069][T14088] 8021q: adding VLAN 0 to HW filter on device team0 [ 480.152165][T14088] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 480.276417][T14096] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2116'. [ 480.409566][T14102] bridge0: entered allmulticast mode [ 480.537136][ T5167] block nbd1: Possible stuck request ffff888027000000: control (read@0,1024B). Runtime 180 seconds [ 480.554134][ T5167] block nbd1: Possible stuck request ffff888027000200: control (read@1024,1024B). Runtime 180 seconds [ 480.556402][T14108] lo speed is unknown, defaulting to 1000 [ 480.565936][ T5167] block nbd1: Possible stuck request ffff888027000400: control (read@2048,1024B). Runtime 180 seconds [ 480.582400][ T5167] block nbd1: Possible stuck request ffff888027000600: control (read@3072,1024B). Runtime 180 seconds [ 480.615977][T14107] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2120'. [ 480.652084][T14107] macvlan2: entered promiscuous mode [ 480.759065][T14112] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2121'. [ 481.204657][T14128] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2127'. [ 481.859941][T14149] bond10 (unregistering): Released all slaves [ 481.897566][T14155] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2137'. [ 481.998413][T14153] team0: Device gtp0 is of different type [ 482.369332][T14182] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2142'. [ 482.379391][T14182] netlink: 39 bytes leftover after parsing attributes in process `syz.0.2142'. [ 482.405855][T14182] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2142'. [ 482.407527][T14185] ip6tnl0: Caught tx_queue_len zero misconfig [ 482.930170][T14205] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 482.945937][T14205] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.958005][T14205] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 41495 - 0 [ 482.997293][T14219] pim6reg: entered allmulticast mode [ 483.021221][T14219] pim6reg: left allmulticast mode [ 483.100975][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5030 ms [ 483.109290][ C0] lec:lec_tx_timeout: lec0 [ 483.114189][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 483.133411][T14205] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 483.144267][T14205] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.155996][T14205] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 41495 - 0 [ 483.276667][T14205] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 483.304400][T14205] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.334966][T14205] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 41495 - 0 [ 483.462820][T14205] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 483.476466][T14205] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.487586][T14205] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 41495 - 0 [ 483.643401][T13293] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 483.653736][T13293] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 41495 - 0 [ 483.663388][T13293] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 483.683148][ T60] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 483.692600][ T60] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 41495 - 0 [ 483.705406][ T60] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 483.769045][ T60] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 483.784728][ T60] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 41495 - 0 [ 483.797568][ T60] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 483.813218][ T60] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 483.828478][ T60] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 41495 - 0 [ 483.837553][ T60] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 483.867280][T14254] netlink: 'syz.1.2167': attribute type 3 has an invalid length. [ 484.069755][T14264] lo speed is unknown, defaulting to 1000 [ 484.134922][T14267] syzkaller1: entered promiscuous mode [ 484.140861][T14267] syzkaller1: entered allmulticast mode [ 484.441156][T14275] netlink: 'syz.1.2172': attribute type 2 has an invalid length. [ 484.450560][T14275] netlink: 'syz.1.2172': attribute type 1 has an invalid length. [ 484.461679][T14275] netlink: 'syz.1.2172': attribute type 1 has an invalid length. [ 484.483559][T14275] netlink: 'syz.1.2172': attribute type 2 has an invalid length. [ 484.492601][T14275] netlink: 'syz.1.2172': attribute type 2 has an invalid length. [ 484.509465][T14275] netlink: 'syz.1.2172': attribute type 1 has an invalid length. [ 484.518109][T14275] netlink: 'syz.1.2172': attribute type 2 has an invalid length. [ 484.641396][T14283] bridge: RTM_NEWNEIGH with invalid ether address [ 484.821618][T14288] netlink: 'syz.3.2175': attribute type 29 has an invalid length. [ 484.874170][T14290] netlink: 'syz.3.2175': attribute type 29 has an invalid length. [ 484.911568][T14288] __nla_validate_parse: 4 callbacks suppressed [ 484.911591][T14288] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2175'. [ 485.096922][T14302] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2179'. [ 485.474447][T14312] lo speed is unknown, defaulting to 1000 [ 485.555102][T14316] IPVS: Error connecting to the multicast addr [ 485.686076][T14326] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2182'. [ 485.738740][T14327] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2182'. [ 485.863210][T14335] xt_hashlimit: size too large, truncated to 1048576 [ 486.319910][T14362] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2191'. [ 486.574493][T14372] lo speed is unknown, defaulting to 1000 [ 486.999983][T14393] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2196'. [ 487.102459][T14393] nbd: must specify at least one socket [ 487.515853][T14411] 8021q: adding VLAN 0 to HW filter on device bond0 [ 487.651078][T14429] openvswitch: netlink: Message has 8 unknown bytes. [ 487.829450][T14435] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2204'. [ 487.838878][T14436] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2204'. [ 488.031293][T14442] bridge0: entered promiscuous mode [ 488.124097][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 488.132164][ C0] lec:lec_tx_timeout: lec0 [ 488.137490][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 488.196030][T14445] tipc: Enabling of bearer rejected, media not registered [ 488.578644][T14466] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2214'. [ 488.592822][T14475] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2211'. [ 488.603796][T14474] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 488.858326][T14484] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 489.014945][T14491] validate_nla: 4 callbacks suppressed [ 489.014965][T14491] netlink: 'syz.1.2219': attribute type 1 has an invalid length. [ 489.084835][T14491] netlink: 'syz.1.2219': attribute type 2 has an invalid length. [ 489.540664][T14521] pim6reg1: entered promiscuous mode [ 489.552799][T14521] pim6reg1: entered allmulticast mode [ 489.562418][T14519] bridge0: entered allmulticast mode [ 489.806656][T14532] lo speed is unknown, defaulting to 1000 [ 490.825344][T14570] netlink: 'syz.2.2241': attribute type 83 has an invalid length. [ 491.338039][T14588] ip6_vti0: entered promiscuous mode [ 491.375352][T14588] __nla_validate_parse: 5 callbacks suppressed [ 491.375376][T14588] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2246'. [ 491.403592][T14590] netlink: 'syz.2.2247': attribute type 1 has an invalid length. [ 491.435893][T14590] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2247'. [ 491.569085][T14598] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2249'. [ 491.666880][T14598] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2249'. [ 492.025937][T14612] bond4: Unable to set down delay as MII monitoring is disabled [ 492.058446][T14614] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2254'. [ 492.072524][T14612] bond4 (unregistering): Released all slaves [ 492.112364][T14610] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2253'. [ 492.137672][T14614] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2254'. [ 492.570166][T14627] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 492.605588][T14631] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2259'. [ 492.777195][T14636] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2260'. [ 493.144134][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 493.152347][ C0] lec:lec_tx_timeout: lec0 [ 493.157099][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 493.229142][T14648] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2264'. [ 493.249349][T14648] erspan0: entered promiscuous mode [ 493.256220][T14648] erspan0: left promiscuous mode [ 493.344773][T14651] pimreg: entered allmulticast mode [ 495.681450][T14690] lo speed is unknown, defaulting to 1000 [ 496.073941][T14640] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 496.449052][T14716] __nla_validate_parse: 5 callbacks suppressed [ 496.449074][T14716] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2284'. [ 496.483017][T14718] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2287'. [ 496.567429][T14724] lo speed is unknown, defaulting to 1000 [ 496.685478][T14732] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2285'. [ 496.794808][T14740] netlink: 'syz.0.2291': attribute type 2 has an invalid length. [ 496.853608][T14740] hmac(sha224: entered promiscuous mode [ 497.421587][T14774] syzkaller0: entered promiscuous mode [ 497.427786][T14774] syzkaller0: entered allmulticast mode [ 498.164127][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 498.172251][ C0] lec:lec_tx_timeout: lec0 [ 498.176886][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 499.725286][T14736] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 499.875124][T14781] syzkaller0: entered promiscuous mode [ 499.890278][T14781] syzkaller0: entered allmulticast mode [ 499.906619][T14783] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2302'. [ 499.957897][T14781] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2301'. [ 499.977334][T14792] batadv_slave_0: Caught tx_queue_len zero misconfig [ 500.071144][T14799] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2306'. [ 500.100879][T14800] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2306'. [ 500.126601][T14793] IPVS: set_ctl: invalid protocol: 94 10.1.1.2:3 [ 500.133171][T14803] IPVS: set_ctl: invalid protocol: 94 10.1.1.2:3 [ 500.305373][T14811] netlink: 244 bytes leftover after parsing attributes in process `syz.4.2308'. [ 500.309696][T14812] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2307'. [ 500.367320][T14812] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 500.638921][T14827] lo speed is unknown, defaulting to 1000 [ 500.740230][T14838] netlink: 'syz.4.2313': attribute type 2 has an invalid length. [ 501.268544][T14844] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2316'. [ 502.569075][T14874] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2327'. [ 503.184127][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 503.192197][ C0] lec:lec_tx_timeout: lec0 [ 503.196834][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 503.429192][T14889] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2331'. [ 503.438561][T14889] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2331'. [ 503.618817][T14893] sctp: [Deprecated]: syz.0.2332 (pid 14893) Use of int in max_burst socket option. [ 503.618817][T14893] Use struct sctp_assoc_value instead [ 503.685205][T14895] syzkaller0: entered promiscuous mode [ 503.690914][T14895] syzkaller0: entered allmulticast mode [ 503.703071][T14895] openvswitch: netlink: VXLAN extension 1 has unexpected len 6 expected 4 [ 504.974371][T14861] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 505.182000][T14914] netlink: 'syz.4.2338': attribute type 1 has an invalid length. [ 505.190862][T14914] nbd: error processing sock list [ 505.206726][T14904] netlink: 'syz.3.2336': attribute type 1 has an invalid length. [ 505.239448][T14904] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2336'. [ 505.267025][T14919] lo speed is unknown, defaulting to 1000 [ 505.308743][T14923] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 505.510987][T14932] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2344'. [ 505.541190][T14932] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 505.608845][T14937] tipc: Enabled bearer , priority 0 [ 505.726202][T14940] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2346'. [ 505.761597][T14940] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2346'. [ 505.782005][T14937] syzkaller0: entered promiscuous mode [ 505.787981][T14937] syzkaller0: entered allmulticast mode [ 505.795758][T14937] tipc: Resetting bearer [ 505.843071][T14936] tipc: Resetting bearer [ 506.349857][T14959] netlink: 180568 bytes leftover after parsing attributes in process `syz.1.2350'. [ 507.618076][T14936] tipc: Disabling bearer [ 507.783590][T14978] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2353'. [ 507.797061][T14978] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2353'. [ 507.806535][T14978] netlink: 'syz.4.2353': attribute type 14 has an invalid length. [ 508.214098][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 508.222198][ C0] lec:lec_tx_timeout: lec0 [ 508.227220][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 508.884471][T14950] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 509.026666][T14990] 8021q: adding VLAN 0 to HW filter on device bond5 [ 509.135648][T14995] netlink: 116 bytes leftover after parsing attributes in process `syz.0.2357'. [ 509.146526][T14999] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2358'. [ 509.182196][T14995] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2357'. [ 509.224940][T14995] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 509.239564][T15005] sctp: [Deprecated]: syz.3.2361 (pid 15005) Use of struct sctp_assoc_value in delayed_ack socket option. [ 509.239564][T15005] Use struct sctp_sack_info instead [ 509.251777][T15008] netlink: 'syz.2.2362': attribute type 1 has an invalid length. [ 509.265973][T15008] netlink: 'syz.2.2362': attribute type 2 has an invalid length. [ 509.520981][T15025] x_tables: duplicate underflow at hook 2 [ 509.580144][T15025] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2366'. [ 509.583889][T15030] netlink: 'syz.3.2368': attribute type 8 has an invalid length. [ 509.602297][T15025] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2366'. [ 509.629284][T15027] lo speed is unknown, defaulting to 1000 [ 509.644769][T15023] lec:lec_vcc_attach: copy from user failed for 28 bytes [ 509.697809][T15023] lec:lec_vcc_attach: copy from user failed for 28 bytes [ 509.791562][T15040] vlan4: entered promiscuous mode [ 510.265604][T15055] syzkaller0: entered promiscuous mode [ 510.271250][T15055] syzkaller0: entered allmulticast mode [ 510.607887][T15027] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN PTI [ 510.619934][T15027] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 510.628478][T15027] CPU: 0 UID: 0 PID: 15027 Comm: syz.0.2364 Not tainted syzkaller #0 PREEMPT(full) [ 510.637875][T15027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 510.647945][T15027] RIP: 0010:lec_arp_clear_vccs+0xad/0x380 [ 510.653683][T15027] Code: e8 03 80 3c 28 00 74 08 4c 89 e7 e8 cd fb 57 f7 4c 89 74 24 18 49 8b 2c 24 4c 89 e8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 4c 89 ef e8 a5 fb 57 f7 4d 8b 75 00 4d 8d a7 30 [ 510.673294][T15027] RSP: 0018:ffffc9000214f828 EFLAGS: 00010046 [ 510.679370][T15027] RAX: 0000000000000000 RBX: ffff888030d28400 RCX: dffffc0000000000 [ 510.687429][T15027] RDX: 0000000000000000 RSI: ffffffff8c27a460 RDI: ffff888030d28400 [ 510.695414][T15027] RBP: ffff8880537fe000 R08: ffffffff8ef1b273 R09: 1ffffffff1de364e [ 510.703490][T15027] R10: dffffc0000000000 R11: fffffbfff1de364f R12: ffff88807af2d650 [ 510.711758][T15027] R13: 0000000000000000 R14: ffff888030d28430 R15: ffff88807af2d000 [ 510.719733][T15027] FS: 0000000000000000(0000) GS:ffff888125466000(0000) knlGS:0000000000000000 [ 510.728851][T15027] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 510.735458][T15027] CR2: 00007ffd010af0a8 CR3: 000000002f552000 CR4: 00000000003526f0 [ 510.743463][T15027] Call Trace: [ 510.746746][T15027] [ 510.749679][T15027] lec_push+0x3cb/0x19d0 [ 510.753933][T15027] ? __local_bh_enable_ip+0xd0/0x130 [ 510.759249][T15027] ? __pfx_lec_push+0x10/0x10 [ 510.763939][T15027] vcc_release+0x15f/0x580 [ 510.768453][T15027] sock_close+0xc3/0x240 [ 510.772897][T15027] ? __pfx_sock_close+0x10/0x10 [ 510.777790][T15027] __fput+0x44f/0xa70 [ 510.781879][T15027] task_work_run+0x1d9/0x270 [ 510.786492][T15027] ? __pfx_task_work_run+0x10/0x10 [ 510.791607][T15027] ? do_raw_spin_unlock+0xf5/0x210 [ 510.796729][T15027] do_exit+0x69b/0x2320 [ 510.800886][T15027] ? cgroup1_freezing+0x20/0x350 [ 510.805876][T15027] ? __pfx_do_exit+0x10/0x10 [ 510.810595][T15027] ? cgroup1_freezing+0x20/0x350 [ 510.815566][T15027] ? cgroup1_freezing+0x20/0x350 [ 510.820519][T15027] do_group_exit+0x21b/0x2d0 [ 510.825120][T15027] ? _raw_spin_unlock_irq+0x23/0x50 [ 510.830490][T15027] get_signal+0x1284/0x1330 [ 510.835006][T15027] arch_do_signal_or_restart+0xbc/0x830 [ 510.840555][T15027] ? unshare_nsproxy_namespaces+0x143/0x160 [ 510.846451][T15027] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 510.852606][T15027] ? ksys_unshare+0x7fc/0x900 [ 510.857507][T15027] exit_to_user_mode_loop+0x86/0x480 [ 510.862974][T15027] ? rcu_is_watching+0x15/0xb0 [ 510.867835][T15027] do_syscall_64+0x32d/0xf80 [ 510.872521][T15027] ? trace_irq_disable+0x3b/0x150 [ 510.877549][T15027] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.883625][T15027] ? clear_bhb_loop+0x40/0x90 [ 510.888404][T15027] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.894297][T15027] RIP: 0033:0x7f435e99c629 [ 510.898711][T15027] Code: Unable to access opcode bytes at 0x7f435e99c5ff. [ 510.905723][T15027] RSP: 002b:00007f435f83d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 510.914252][T15027] RAX: fffffffffffffffc RBX: 00007f435ec16090 RCX: 00007f435e99c629 [ 510.922226][T15027] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 510.930293][T15027] RBP: 00007f435ea32b39 R08: 0000000000000000 R09: 0000000000000000 [ 510.938354][T15027] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 510.946424][T15027] R13: 00007f435ec16128 R14: 00007f435ec16090 R15: 00007ffdf014d648 [ 510.954405][T15027] [ 510.957423][T15027] Modules linked in: [ 510.961495][T15027] ---[ end trace 0000000000000000 ]--- [ 510.966946][T15027] RIP: 0010:lec_arp_clear_vccs+0xad/0x380 [ 510.972690][T15027] Code: e8 03 80 3c 28 00 74 08 4c 89 e7 e8 cd fb 57 f7 4c 89 74 24 18 49 8b 2c 24 4c 89 e8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 4c 89 ef e8 a5 fb 57 f7 4d 8b 75 00 4d 8d a7 30 [ 510.992302][T15027] RSP: 0018:ffffc9000214f828 EFLAGS: 00010046 [ 510.998378][T15027] RAX: 0000000000000000 RBX: ffff888030d28400 RCX: dffffc0000000000 [ 511.006527][T15027] RDX: 0000000000000000 RSI: ffffffff8c27a460 RDI: ffff888030d28400 [ 511.014511][T15027] RBP: ffff8880537fe000 R08: ffffffff8ef1b273 R09: 1ffffffff1de364e [ 511.022603][T15027] R10: dffffc0000000000 R11: fffffbfff1de364f R12: ffff88807af2d650 [ 511.030599][T15027] R13: 0000000000000000 R14: ffff888030d28430 R15: ffff88807af2d000 [ 511.038577][T15027] FS: 0000000000000000(0000) GS:ffff888125466000(0000) knlGS:0000000000000000 [ 511.047511][T15027] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 511.054615][T15027] CR2: 00007ffd010af0a8 CR3: 000000002f552000 CR4: 00000000003526f0 [ 511.062597][T15027] Kernel panic - not syncing: Fatal exception [ 511.069021][T15027] Kernel Offset: disabled [ 511.073336][T15027] Rebooting in 86400 seconds..