last executing test programs: 5.006607562s ago: executing program 2 (id=6455): getsockopt(0xffffffffffffffff, 0x200000000114, 0x8, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x20000001, 0x25dfdbf9, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x2000003, 0x6361, 0x7, 0xffffffff, 0x1000002}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x20) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 4.484834169s ago: executing program 2 (id=6462): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendto$packet(r0, &(0x7f00000002c0)="44c33b69ebc9e05e9bdec0c288a8", 0x5ee, 0x830, &(0x7f0000000440)={0x11, 0x0, r3, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x14) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r4, 0x40089413, &(0x7f00000001c0)=0x6) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000b80), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000040)={0x58, r5, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7fffffff}]}, @TIPC_NLA_MEDIA={0x28, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}]}, @TIPC_NLA_BEARER={0x10, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'eth', 0x3a, 'nr0\x00'}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x4) r6 = socket(0x11, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bind$packet(r6, &(0x7f00000001c0)={0x11, 0x0, r8, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}}, 0x14) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 4.217405457s ago: executing program 2 (id=6465): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x800448d4, &(0x7f0000000400)) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="310328bd7000fbdbdf250200"], 0x78}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) r4 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xd, &(0x7f0000003640)=ANY=[@ANYBLOB="18020000050000000000000000000000850000005300000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41000, 0x5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000140)="e0b9547ed387dbe9abc89b6f4bec", 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) sendmsg$TIPC_NL_KEY_FLUSH(r0, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x130, r6, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0xa8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "ac1589a3245b9b963147045d97d4a8b935e69329ec06a2706c"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xa}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xdb}, @TIPC_NLA_NODE_ID={0x50, 0x3, "d39e880b0c303f0f1e345a322134c230c6d25bfa2082ead41ed55f1779752b3681c55f0080ccac56dabca4903b820838d00463702ffcbb513660009f83b90e00"/76}]}, @TIPC_NLA_BEARER={0x74, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x77, @remote, 0x200}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x401, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}}}}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x8000}, 0x4000005) pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r7, &(0x7f0000000200)=[{0x0}, {&(0x7f00000006c0)="e6", 0xfdef}], 0x2) writev(r7, &(0x7f0000000180)=[{&(0x7f0000000000)="729804819e25bf1576ffe5c12a5207113f19d58313aba5de68f29cba9eabb7ffc8ffa6ff5e57bb2a1a4db35012bba91acdbe6123e6d1b0e9b009f638c2262aa71fdb6fdca6f5afd31515336efa9d3ac3d1dcb773d177640fa9d940ae528c0de4820b43c5ca5aadd87316a4539842e59b2b62294946b288ccec1b315ad96484c9ce1069450e4b459926691d6e833aa0bc56251cb81bd60c84e5c38f6d84f5e0d7", 0xa0}, {&(0x7f0000000880)="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", 0xf61}], 0x2) sendmsg$GTP_CMD_ECHOREQ(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000828bd7000fcdbdf250300000006000600020000000800090002000000080002000100000014000b00000000000000000000000000000000007d3a50d18ea3516b0af3ecfcd2e413b2ba5c04772ffb9f05bf322d1cdedd1aa14bf6db3fc6293a8c448342eb14dbb4fab32c580b0935937e28dadf4209b2de2aaa5282749b2a56d511b2e1e20d8975adca7d1170e67d81e0b3f23c4402476d5b69b8a7affbcba39b0e8eac1d386ba9554b3fcbfc076441dabaf5cf"], 0x40}, 0x1, 0x0, 0x0, 0xf4}, 0x40000) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002540)={0x30, 0x40, 0x107, 0x70bd2b, 0x25dfdbfe, {0x2, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0x18, 0x9, 0x0, 0x1, [@nested={0x14, 0xff, 0x0, 0x1, [@nested={0x10, 0xb7, 0x0, 0x1, [@nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x108, 0x0, 0x0, @pid}]}]}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) 3.707870767s ago: executing program 4 (id=6475): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000001800)=ANY=[@ANYBLOB="0a00000016000000b30000007f"], 0x48) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) (async) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) (async, rerun: 32) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000240)=0x4000, 0x4) (async, rerun: 32) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r4, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000340)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4) sendmsg$inet(r8, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) (async) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000040)=0x4000, 0x4) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x25, 0x0, 0x0, 0x0, 0x1}, @initr0, @exit, @alu={0x7, 0x0, 0x5, 0x3}]}, &(0x7f0000000300)='syzkaller\x00'}, 0x94) 3.373724122s ago: executing program 4 (id=6477): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)=0x1) (async) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cgroup.controllers\x00', 0x0, 0x0) bind$bt_hci(r1, &(0x7f00000001c0)={0x1f, 0x1, 0x4}, 0x6) ioctl$PPPIOCGNPMODE(r0, 0x4008744b, &(0x7f0000000100)={0x283}) (async, rerun: 32) socket(0x2d, 0x2, 0x0) (rerun: 32) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) (async, rerun: 32) r3 = socket(0xa, 0x3, 0x3a) (rerun: 32) setsockopt$MRT6_ADD_MFC_PROXY(r3, 0x29, 0xd2, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'veth0_vlan\x00', 0x2000}) r5 = socket(0x400000000010, 0x3, 0x0) (async, rerun: 32) socket$unix(0x1, 0x1, 0x0) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'xfrm0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2f, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r6, {0x0, 0xf}, {}, {0xffff}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x2}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) (async) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0x8000}, 0x1c) (async) socket$caif_stream(0x25, 0x1, 0x2) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r8 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r8, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000005c0)=ANY=[@ANYBLOB="e00000001000090500000000000000006f6d8864d22a3f2ffaa46c88bca90000002b0e13e735a3184f123d6da2f1acfac0ee2dd2b184b27db1010000007c0004060000000000bf852c8986626691b01b5f44e4ce287128"], 0xe0}], 0x1}, 0x40040) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001d00070f000000000000000007000000", @ANYRES32, @ANYBLOB="4000270006"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async, rerun: 64) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000080)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x4008010}, 0x0) (rerun: 64) r9 = socket(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f0000000000), 0x4000000000001f2, 0x0) (async) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x3, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x40050) sendmsg$NFT_MSG_GETFLOWTABLE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000170a0101000000de0f00000000000007"], 0x14}}, 0x4004000) 3.275480577s ago: executing program 2 (id=6479): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x1a, &(0x7f0000000580)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_LABEL={0x8}, @IFLA_GENEVE_PORT={0x6, 0x5, 0x4e21}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x8044) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x3b}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) 3.045249148s ago: executing program 4 (id=6481): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000a5f5fde31abc816a3c47e25a6d0cbe49ba8f9f869f35d1f710db6bfcbc49ec9533ac8127d4fda8164789e9e388271e9c36391f21fff45c1d1f7f6ce7ee817fc1c55153f68f7fc70c5f8a08ec61fefba9683096e59c0d4d7ccc0db823b9dc38069c2336e1630f16e835b390646094d13a13b8257228c34b6c665ca1b31f383239f4b6fe1ab766ca4c337128614dd8f3b5e70283111c2f17fa6a8e67b6453b8fc7f84f3ce1e943219521e80cf60612b3431725290910629c1614aa6e13b92374763bb2d2318166f12e1b0340defc05"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="030000004d8d0000040000000a"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r1, r1}, &(0x7f0000000600), &(0x7f0000000640)=r0}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$kcm(0x11, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) (async) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000480)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0x8, '\x00', r8, 0xffffffffffffffff, 0x2, 0x4, 0x4}, 0x50) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000480)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0x8, '\x00', r8, 0xffffffffffffffff, 0x2, 0x4, 0x4}, 0x50) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd0a, 0x25dfdbff, {0x0, 0x0, 0x0, r11, {0x0, 0x4}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a40)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0xb, 0xfff3}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x6}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x1, 0x2, 0x6, 0x7, 0xfffffffb}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x2004c8d0) (async) sendmsg$nl_route_sched(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a40)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0xb, 0xfff3}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x6}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x1, 0x2, 0x6, 0x7, 0xfffffffb}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x2004c8d0) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r12) (async) close(r12) socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r13, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000002300)="81", 0x1}], 0x1}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r14, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x20000130, &(0x7f0000000280)=ANY=[@ANYRES8=r2, @ANYRESOCT=r5, @ANYRESOCT=r14, @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000940000000c62cdcd440000000000000095"], &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x4f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) 2.970360725s ago: executing program 2 (id=6483): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f0000001ff0)={0x1d, r2}, 0x10) r3 = socket(0x10, 0x803, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001640)=ANY=[@ANYRES32=r3, @ANYRESDEC=r2], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xf, &(0x7f00000005c0)=ANY=[@ANYBLOB="18730000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0xfca804a0, 0xe, 0x0, &(0x7f00000002c0)="b8000005000000005baf2312bbc2", 0x0, 0x12000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="d2ff03084003158cb89e08f086dd", 0x0, 0xd5ae, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async) sendmsg$ETHTOOL_MSG_STRSET_GET(r6, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="18ae81e56e0000010000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x89ff, 0x0) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000780)=ANY=[], 0x40}}, 0x0) (async) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000006c0)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x4008010) (async) r9 = socket(0x10, 0x803, 0x0) r10 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r10, &(0x7f0000002440)={&(0x7f0000000000)=@in={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10, &(0x7f00000023c0)=[{&(0x7f0000000040)='\b', 0x1}], 0x1, 0x0, 0x0, 0x24040000}, 0xc0) sendmsg$inet_sctp(r10, &(0x7f0000000140)={&(0x7f0000000700)=@in={0x2, 0x4e1d, @loopback}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000740)="1931ab5cab8ab678bf0d9ba57399dc0f485423d397033e074e1cffebaa38e2f9f66b654542624f60853fa2de3115ca8b4089319cc0861c0b55b8e6da745418d5355a4f6856b7e152099a32179a07a890d9dc3bcd3894addf7aa162f46f9d2b6e9ba1c58053710662ff0cf416d3152976535ce959d7907c87b6182c1ee01d7b6b4cc1807f39421ca79342432a680c1b2af2357c61d782d124665b9a2faa50e5dfb8f1987a4cda683f6b6fe77065a398eb343d8b64940ab3f8eb924609adf6b5bc7c3a78a5099df2699aed90f0abb42a93bd6b9637aa0591ba309c8c985d5e29b302715b65b2f12c0dc9a431e7d17677bcfac755cf190d4b1cb2160a6cbe2a364d8676bca552ec6855c6f27a010eb22155681b067164b39a1a9f5955980c2cc86a5e67d7093ab41ece096c705b7cb3133d892b82dbbe0fe19e7b509c2a497dd58ade63af3da7de68e6cd0aa381fb3575c73f40327fd54638a8903f35b3c25b2f57a91739356f26602994471367eeadf360ca85c97711377edc9e15af990c83f8f6d3dbbb03c52cdb0097b8a9e1ad5e85a3926cadf1b5eb1aaadae7828d800d26801feb32700f13368e75d254c50253b23df6dba1179ae2588879c2779b23fc42d955ab39377089e97d6ae83751fe96fc761a336b27f8ca50c99dae1b257261586a2ba1c1d7d19f225947a910d96b26363ff60f315de424ff99f0812fd9c162bb1bf36440782e253ef9859d5410e78b4fdd0d02df79abd28f98ca31b8c2f23aacb6f2d5886f7b8e2b41158417bfd697b006d907eed3d9b394d17fe32394e1fcb24a9abb2dfa2d0b54d23097cae2b5d1b0a186579770769b623072bdf240376d238ff8ea9dde0a8cbef8b52be4a84c9e6a77acccebd139ae2eaf459332bea0d0a6eacb30ca0cd96097031c41f4e1afd70e397f05787c89e13731b97e921d35c533bbfee2d403a8973e24440dff1c95299d005d5bb86b05bdf3b130d8c6c3632dc24edfbc5cf589a14558946ed94ab14d7295363e0411c7ec119f959707176e790249379ab3a56a1472e40be0d883318e8c4ba0a8029959a3c388b5e1d8ba295105ef308f897d384d646a08d8f2947d5a4df0587ec9d483e11d298ccca701069c47cc1785a8e9169d3b2a865b2163761ccd6922880d32740d495bdea21d741d004bb378356da1c505c05d75b0cbf50a59b9ad12f08a4607792807e93a04890dec1e371842fcea5ddef02822ecbf00f358c28baafe5b0191a5a75d510ac4f1d41508c8df83d62586577d381bb6efaf71b30e2f154d0b891bbbff1254b96b3d5f8561ed9d2f421f5bf1c7053b5dff8e53ab8c72fb3062aa49e13fce6379c0c178c48147179691289266e687f8443fb570568d8cd3a9346d2c077de46d4307e6ceaa434671f241c93da3eda8583f79b475f31d95b5e48c699084bf4ccb8e6e5990570fab36d21812ad9032395b09a7db0ddc8ffccad1a6246091d5de2d7f731690bf33a39b92b5395e6c5f8811c31da597021362ff83aca0b36666d9d8a18094c5cf87f80be35fdfd197669004ee7c899b543f41c2a99251c6c59eb0dfa48a8c58c674ac125269b86b4573ada43d4aec145dc92c39f7bba7bced76bb59dbaeb13b9f0fb461336dd790bce6bde268ca9b89841ce2d0ce57afd81a28fc1b3f4ad0ac23fea9eb43483995708e2faa1f9b200f0f26e74534a0b8bbbd213ac22d9e36fb763b855c990e6d3707d9f5fa48220d60e33c2d140268cad7c0152c1b2b02df86164059bc9eb50dcec40a9a256224b7bddce3c24ce96ecbab75d4a627eb5dae79a9af1c778ae73400cea8045acbaa04822e576c06ef3e1dd0a041621121cc0a08d02b6fb926c72fc5a5e9694c06ca246303556ae1a0a37d256f0cf42019db8b1f994b4afcb32816b5254a72bab125b222511a27a00d7db98295201c72dda9a6daa1436fd04c27cb9f2a2fa688d23908e7a6b6cd2adb26ec9a896fff7a4b3e50895c29e0b1e2e0d245f817fc177b3f25ce0809313d6f66e2e4d917c55f00dde79bd53894173d6f1db498779eade735552965d01099758a50b2bd777769afa8a80c2e463e2a411efd97ace64427812e918fbe02e683b89ba012de652b00bf3af62269ac1bb1ea28ef2254f931e20ada7493954656a7c827d0c9cdd75e53909f833d1fca81f28e09c9bd737a0f032679b05a061bab4dda3530163f9d0b7e1a8d23c804756f039817d083b7273a", 0x628}], 0x1, 0x0, 0x0, 0x24040100}, 0x4000050) (async) setsockopt$sock_int(r10, 0x1, 0x7, &(0x7f0000004dc0)=0x2, 0x4) (async) sendmsg$IPVS_CMD_SET_INFO(r9, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="4000000010000305000000000000000000000b0d296b6d686c290000", @ANYRES32=0x0, @ANYBLOB="10000000000000002000128008000100767469001400028008000500ac1414bb08000100", @ANYRES8=r10, @ANYBLOB], 0x40}}, 0x0) sendmmsg(r0, &(0x7f0000003500)=[{{&(0x7f0000000080)=@l2tp={0x2, 0x0, @empty}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000180)="52c327e5155cfb7667b25b111c5067812051a6e1be7f74a7259b35c9ab81109c1c7dc154bbc7e1a29a7808ae9f", 0x2d}, {&(0x7f00000001c0)="8f660bca4a287c7cefc9f9a242706af27e2cc7e82999", 0x16}], 0x2}}, {{&(0x7f00000002c0)=@qipcrtr={0x2a, 0xffffffffffffffff, 0x2}, 0x80, &(0x7f0000000fc0)=[{&(0x7f0000000340)="01ab08eab892e565f42236797183bb18e50c4c87b81e5dbe09b6a8f9fa707f8aa31b9cf8f9446df3d2a9d6d9d32211d3ccf1ec1aeedbbb9340a8a5d95fd76369d405c692b546589b1a85e02622c6f943266fdf984ed63a5b99ddefa0708c666a6205", 0x62}, {&(0x7f00000003c0)="db914d7b8f92da12692399e8815dacf07b18780588c7303d449361307864ef49264ca7a4aff737b5bd63f9564bae0ca679c13cc44a2c6f35ee31e9ceaa97254e88950ca57e57ce5dcc83c99af3f5104ce5a0ae578e51e6dfccde68fc2a6a63267f948ea9d2c2495b07a45e95a2868e26b89dffcb8363f93a0bf7bafc5724cdb92e7cf4ea0f27d89db05c5d61138724805ffea9896493d1db02e81512fcef10ebe15b7f1fc2b5b03963654820fa5cbfe71922d78ea90367d95de3d2681411b16d2699bee1cd8414976c6ebb22", 0xcc}, {&(0x7f00000004c0)="4465156cca0fe05a0673be831d65839d70394994341cee91957f34abd427471bbb4e85f20e7ccf57b5a23ea04b51f05a62451948417cce3ea01f72aeaa707df96b8da94018d03f40523d942ac13eaf991896506bf375caa6a28858b8bb2c5ac9ac9609a237fdbbbeb38ae40e99", 0x6d}, {&(0x7f0000000540)="5baa7f6f77cb092338a0cc06cff3823b5f4b4f77750b5af5a6315a4688a690ac5eeaf69f8ac13a9af87b90e63a2acfeeab", 0x31}, {&(0x7f0000000580)="e30e822f0ca32cd7e7ac1137fdfb292a0e06ac16a88cdf273146adbab3110d7c796ea74eec1ea3ba73c6fd1718ea7a2bfb4c8c79e638fe5e7cc558012c3b48dca07069966fb8d70c6dbc30266a6829bff30b6b5822a13f856ce01dc05018deaf4d48d94f5fc0e9ebabebdedcb0b5cf07eaf7d7c9839fc0b4dd21d429c95d645fe2d9702badc2e23557dd12ffaea0b47a1545f641da70ba23ac98d9a8", 0x9c}, {&(0x7f0000000640)="22fee9", 0x3}, {&(0x7f0000000d80)="1fa916ca4669763dd9817ce9efaa12636310601cae599e75d42a9114994e297e06f12dbd81be0f10053223281824dd85acce0a7e78e5e3079606184c676b79b09f0a2e0ca6d34f16f099ca0607e56c5fcacb42c7e65380277662fc2751f177de8cddc15f9f1a1915f8e8484bdb4638ed6f9d822395b9b7b1be37ee743a75e205da75add2c86bfc42481eb2fbd13c051b6fe83ead68d74afdb899d2ba4d336b45c5a1fb89e7297e80c1caf2af63ba", 0xae}, {&(0x7f0000000e40)="166caff34b56de0868f5425704a5641a5b3bdd91", 0x14}, {&(0x7f0000000e80)="cd0cc9bf752176ffbb1e4bfe33105f3caf5e596c7ec8b2cb6cb4d3b1cd31bf0a25dc8322978aa98e120a0330b49cf919d078422319accf9fbe432337be4946cf127ee5f083fe0d351ddbcbfa04b4addb52454c8bc949b08621e62dc69f4ccad7be685ead022ae4a9b2b1c654059d7a5e95f841a0f870d97fc34d1a5c6ed3482821de47941aa50c99224db59f899f3fddc031b29b454837a9f3f48c81767f6b1777e25671f1f79400374499edb968c7b01e9b20460699fac3d27e36cfb8c71462302dafb97d5dae82d1e045a15404ca4891bf93bd56c6e33775b670e53e153535f3582394f4e72ce7d6acdb2659d5", 0xee}, {&(0x7f0000000f80)="5dae013192c668caebfd18c02b4852083376fbef6ead3243428d818b4b61e8fc4a863766c4", 0x25}], 0xa, &(0x7f0000001580)=ANY=[@ANYBLOB="70000000000000001201000005000000a5f8f7afebcacb319909ce5efb53027df48b2ef962661f77ce60da0761428f6c4d8f72ce71de43b004557e9a5eaec2cc2dc9d25dcd1f0887b7d8e16562ab5a30446292cd5047d6c44f9ac915273c1e4b381e2ed8a68be809a36600000000000010000000000000003a000000b89c00000c3f32fcb931a9c8b763b0fa21a704c17ebfb07f38444e0542734d"], 0x80}}, {{&(0x7f0000001100)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}}, 0x80, &(0x7f00000013c0)=[{&(0x7f0000001180)="53113bdb15f4404109f7efbf1b759bf165021aacc978cde241c3396ae41fa691dcfdafb59ccfab68497a1625f70d4d8d00edeb74a41abbe15cc59ba3c325ad02b87d5638be3cac98ef7f74866cc6b9c5980b7b4172eacda96ea989476a8036064d0f93d177dc078af7a7b071d17387a8f01456ec878eaa07ae4657746ce07d7de024f9e84748e1e28995a7d9643d758cc65418c2874f20c545b1e0af50cb0d78d2ce6b0bb7b90fca38d2c35235d6e9cc192141b32b6d676b7781", 0xba}, {&(0x7f0000001240)="d119ec6a06bac7371d14c104c6ae0c155e39041b87918159d33b03c040e2c2c8bdeab08e19bd3f601f1c935433263366d9098c5d1eb7fb7ce75e861134613017", 0x40}, {&(0x7f0000001280)="0e331cb0b6dc30", 0x7}, {&(0x7f00000012c0)="e4eaf6dfcc81e819b187a5edb3a9a0b6f91aa4c4284db8b908b826270dc524e2bbaa44635f01f1b2894f1020a3bfade2f4ab396c83fdc5f08ab0dd94bb3191309b429f778bb481dbec93f70be4db6d19a28e3af4d6a4d5b48fee60716b1b6cfefe5e85c5e308220968cab4af23412d52b43d1dc75ae6da0d3539b0250e1f544468ed91695ab7d020699b6b9c1e58a35634edc5620e1e7c3b39051e898f054c132268ecaeee9647757d7346e27375b996f976eb8e965409c1434134c132ff67192b5a9aac8d141469", 0xc8}], 0x4}}, {{&(0x7f0000001400)=@in={0x2, 0x4e24, @remote}, 0x80, &(0x7f0000001540)=[{&(0x7f0000001480)="9060df54273d81b5cc10bb2a2309284e799746c261acffa2c39802d7b74d3d62733696da9520533efe348de537788ec60cfd1619878a8eef2b77b74626a24637b47a9dcd29d1f4d8d528f24a4f11565b200e03413a1dd2ab79f5f58d9ec9ee5e6e83cf06f13467e1e8780f5dd469b33ea87769cde01907343d648f76276cb3c9150acbe416bd86de208ce1b65e630179328e5cd5054b2b031f9442e8bf2fb2edd2642a914256af50d61d1c6de24455d8060d7572", 0xb4}], 0x1, &(0x7f0000003600)=ANY=[@ANYBLOB="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"], 0x1070}}], 0x4, 0x0) 2.694001177s ago: executing program 2 (id=6484): unshare(0x42040400) r0 = socket$inet_udp(0x2, 0x2, 0x0) unshare(0x12000200) setsockopt$inet_int(r0, 0x0, 0x18, &(0x7f0000000140)=0x7, 0x4) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) 2.546191082s ago: executing program 4 (id=6486): openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4048810}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002180)=@newtfilter={0x1644, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r3, {0xc, 0xfff1}, {}, {0x5, 0xf}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x1614, 0x2, [@TCA_CGROUP_EMATCHES={0x254, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x28, 0x2, 0x0, 0x1, [@TCF_EM_META={0x24, 0x3, 0x0, 0x0, {{0x4, 0x4, 0x1ff}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x7, 0x1}, {0x9, 0x9, 0x1}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x100, 0x7}, {0xb, 0x60, 0x1}}}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8}}, @TCA_EMATCH_TREE_LIST={0x198, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xcc, 0x3, 0x0, 0x0, {{0x6, 0x0, 0x6}, "bb949062dbbdc2bac44e28b16d3db753b8d3bb9abd7d162a53466da118860f9f4ea1875d96136e6f833c42444576a511b23cbd7ebbf3fbf76126a4fd1676d385e02092ae85bd1bf28cf79425df6c64f56f5c365aa68db06eed04fd4cd0842ce614de1fcc66af66e713e787d7e0bf02714084028b134c6dc3a99858de79523cc36cc39298b4a6194c0d3ffb130e8e6e9a856adfee0055d40eb1f4e8f9c429590b2b80f726a8c53f3582f4642e11d622edef967ffdbaa8344b0ef646079b5ecd"}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x7fff, 0x3, 0x867}, {0x4, 0x6, 0x4, 0x8000}}}, @TCF_EM_IPT={0xac, 0x2, 0x0, 0x0, {{0x1, 0x9, 0x78c}, [@TCA_EM_IPT_MATCH_DATA={0x95, 0x5, "99cca969ec63820efd751cb1b7bb0c0efdb8bb49ecbf75905f0a24650a0ebf4c65e5494c3a72ce18b59139aef1ad9fbd94846e230515edea185b45d7d318c09f4e35f2eaedadb8b1013b1b309b6edd9ef842714c73f7492d6127d19c2dec88205192e4c6b8d302267eab072a2b0b2939e83ac3fc7d5c382c72fc71b751ba548e741c922da77ea9bea9508f303ec5384d28"}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x4}]}}]}, @TCA_EMATCH_TREE_LIST={0x6c, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x38, 0x2, 0x0, 0x0, {{0x2, 0x9, 0x2f4}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x1}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x93}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x9}]}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0xff88, 0x7, 0x6}, {{0x2, 0x0, 0x1, 0x1}, {0x2}}}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x39}, {0x6, 0x2, 0x100, 0x68}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xf5}}, @TCA_EMATCH_TREE_LIST={0x4}]}, @TCA_CGROUP_EMATCHES={0x12c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x128, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x5c, 0x1, 0x0, 0x0, {{0x4, 0x0, 0x8}, "e2afe2b11afff5a2137a7a31a8f7bf3f347ec0f2c86e8e86c4d30e589a2024863e9a21673fadac2609105c9d10153f85de6d6a4e931c12b3ea877c47108a39063dde26b9cf6602730d4d4f19c7"}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x6, 0x7, 0x4007}, {{0x0, 0x1}, {0x3, 0x0, 0x0, 0x1}}}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x8, 0x3, 0x6}, {0x7f, 0x9, 0x4, 0x1}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x0, 0x3, 0x8}, {0x9, 0x1d55, 0x81, 0x81}}}, @TCF_EM_CONTAINER={0x7c, 0x3, 0x0, 0x0, {{0x3, 0x0, 0x5}, "4e0cdeefeb0c19dcca9a71a8e0d9d0661bc5ce9b1f0332e109364f030f70440285037ce433fbab737992629e7c7310e6b06447b60d50574a3fd2ab2cc445bba3a6e477442a973f4fbdb90392f9b4e463419413b0c19747235fcc979861f3a8a00e61dc94ae084165a1b203da69d9"}}]}]}, @TCA_CGROUP_EMATCHES={0x50, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x5, 0x0, 0x0, {{0xf, 0x1, 0xfb3b}, {0x40, 0x129, 0xffb6, 0x1, 0x8}}}]}, @TCA_EMATCH_TREE_LIST={0x28, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x3, 0x0, 0x0, {{0x9, 0x2, 0x8001}, {0x47d5, 0x0, 0x3}}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x5, 0x7, 0x2}, {{0x4, 0x1, 0x0, 0x1}, {0x2, 0x0, 0x1}}}}]}]}, @TCA_CGROUP_POLICE={0x10, 0x2, [@TCA_POLICE_RATE64={0xc, 0x8, 0xd20}]}, @TCA_CGROUP_ACT={0x1d4, 0x1, [@m_tunnel_key={0xd0, 0x10, 0x0, 0x0, {{0xf}, {0x38, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @private0}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3b}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x3f}}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, {0x6b, 0x6, "50450e8203cc14af56776175d5c8f2a79b49616ae44cd25ff0c8b5ef0fa18833debebfdd7090d103c1b632dbad6d32826b2694a5b510e75ba3708e3b95b488b1deb31603783219322898e4d5720b243d9919e886a799343d7bfc3c0de79473327f0283916db1b4"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_sample={0x100, 0x9, 0x0, 0x0, {{0xb}, {0x4}, {0xd1, 0x6, "13714b45e310593f7e7dc46fd131082dcad8b6eb0d37679138fe78d00361f7badba14fd87e40b454b4fe923fcf0e7ec10def14adc5b2c1b53d2cbab2968e22180bc888e55c8d6f8f11c9ab9b3890139a741eda0364b1acf54e35f23d03810d2a2498b91083d659c75eb48f2e779be77b729a6c4b8311809a08a1164bc693e7cd9101b7ec311bd70e432d664c6872fafe48f492e05291be8856ffb6dad47e14d0f205ebc8e73714fb9e56230e874c14b1fe01faaed44bd57a232b5494e72de34fb035de351c22fff081da0bfdae"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_CGROUP_POLICE={0x105c, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x10000000, 0x6, 0x7, 0x2, {0x5, 0x0, 0x6, 0x4, 0x8, 0x9}, {0x0, 0x0, 0x2, 0xaf65, 0x1}, 0x4, 0x1}}, @TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x6, 0x7, 0x3, 0xfffffa66, 0x7, 0x6, 0xc4cf, 0xfffffffd, 0x8, 0x270, 0x7, 0x0, 0x8, 0x2, 0x7, 0x4, 0x10000, 0x3, 0x101, 0x904d, 0x2d8, 0x3, 0x725, 0x9aae, 0xa, 0x2, 0x2, 0x7, 0x6, 0x9, 0xc, 0x4, 0x2, 0x31, 0x6, 0x4bd3, 0x3ff, 0xe, 0x8, 0x2, 0x7, 0x8, 0xaaa, 0x4, 0x9, 0x3ec, 0x4, 0x4fe800, 0x6, 0x2, 0x4, 0x4, 0xffff, 0x7243, 0x5, 0x8, 0x3ff, 0x7, 0xc947, 0x2, 0x5, 0x8, 0x7, 0x2, 0x3, 0xa73, 0xcc83, 0x2, 0xfffffff5, 0x2, 0x3, 0x9, 0x80000001, 0x0, 0x20000000, 0xd06a, 0x6, 0x0, 0xfffffffd, 0xd0e, 0x7e1, 0x4, 0x8, 0x8, 0x42, 0x7, 0x8, 0x1, 0x9, 0x8, 0x7, 0x3cf, 0x1, 0x9, 0xfeca, 0x8e, 0xa, 0x6, 0x525, 0x0, 0x2, 0x9, 0x1, 0xed5, 0x1, 0x6, 0x6b58, 0x4, 0x9, 0x980, 0x10001, 0xa, 0x0, 0x4, 0x8, 0x2, 0x9, 0x7ff, 0x1ac, 0x8, 0xfffffffb, 0x0, 0x6, 0x0, 0x33d6, 0x40, 0x2, 0x8, 0x0, 0x401, 0x3, 0x8, 0x40, 0x4000000, 0xfffffffc, 0x1, 0x2, 0x50fc, 0x100, 0x7, 0x5, 0x1, 0x926, 0x2f, 0x5, 0xd, 0x2, 0x2, 0x3, 0x5, 0x3, 0xf57, 0x7f8, 0x2, 0xfffffffa, 0x1d, 0x9b, 0x1ff, 0x3a, 0xffffffff, 0xf, 0xb0, 0x0, 0x8, 0x14, 0x7, 0x7, 0x275, 0x5, 0x9, 0x8, 0x10, 0x7fffffff, 0x7, 0x0, 0x457, 0x6, 0x1, 0xfffffffb, 0x4, 0x600, 0x4, 0xff8000, 0x0, 0x8000, 0xb29, 0x8fbe, 0x8, 0x6, 0x0, 0x1, 0x9, 0x3, 0x4, 0x9, 0x5, 0x5, 0xc, 0x2, 0x7f, 0x7, 0x7fff, 0x2, 0x2, 0x2, 0x5, 0xb6, 0x6, 0x0, 0xe, 0x80, 0x8, 0x6, 0xfffffffb, 0x400, 0x1, 0x3, 0x7, 0x9, 0x9, 0xf, 0x0, 0x0, 0x6, 0x1, 0x4, 0x5, 0x3, 0x1000, 0x6, 0x4, 0xffffffff, 0x6d, 0x372c, 0x2, 0x0, 0x0, 0x8, 0x9, 0x4, 0x1, 0x7, 0x2, 0xcf6f, 0xa7, 0x0, 0x1d0a, 0x8, 0x4, 0x8000, 0x80, 0x8, 0xba, 0x5, 0xd1f]}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x1, 0x5, 0x7, 0x1, 0xfc, 0x84aa, 0xc, 0x4, 0x6, 0x6, 0x9, 0x7d63, 0x9, 0x69a5, 0xfffff831, 0x80, 0xfffffe15, 0xffffff01, 0xe6697a, 0x5, 0x1000, 0x9, 0x7, 0xdc, 0x0, 0x3, 0x80000001, 0x1, 0x3, 0x7, 0x8, 0x2, 0x10000, 0xe, 0x5, 0x8db, 0x4, 0x6, 0x9c, 0x101, 0xf, 0x4, 0x6, 0xc5f, 0x80, 0x5, 0x2, 0x5, 0xe, 0x7, 0x603, 0xd, 0x1, 0x29, 0x5, 0x4, 0x9, 0x4, 0x2, 0x0, 0x2, 0xe687, 0x2, 0x4, 0x57, 0x5, 0x0, 0xd, 0xa6, 0xfffffffb, 0xfffffffb, 0xfffffff9, 0x5, 0x3, 0x8, 0x6, 0x7f, 0x8000, 0x9, 0x11, 0xb6, 0x81, 0x6, 0x6, 0x7, 0xfffffffa, 0x1, 0x43, 0x5e, 0x0, 0x3ff, 0x3, 0x95c, 0x2, 0x0, 0x0, 0xfffffffd, 0xcd, 0x0, 0x7, 0x7, 0x91ca, 0xd1, 0x8, 0x3, 0x7, 0x253a626e, 0xffffea00, 0x3ff, 0x4, 0x9, 0x9, 0x1, 0x3, 0x8, 0xf, 0x3a, 0x3, 0xfffffe01, 0x80000000, 0xc1, 0x4, 0x10, 0x7, 0xa5c, 0xffffffee, 0xfffffff5, 0x8, 0x2, 0x6, 0x4, 0x645, 0x7fff, 0x1e8e, 0xd, 0x8, 0x1, 0xd, 0x7, 0x3ff, 0x7, 0x2, 0x2, 0xbe, 0x6, 0x4, 0x7, 0x4, 0x7fffffff, 0x9, 0x800, 0x9, 0x3a15, 0x58, 0x3, 0x9, 0x0, 0x3, 0x2, 0x6, 0x45c, 0x2, 0x9, 0x4, 0x9, 0xa6, 0x5, 0x30, 0x3, 0x0, 0xffff, 0xe85, 0x4, 0x5, 0x6, 0x5, 0x60330378, 0x1, 0x8, 0xce1, 0x7, 0x7ff, 0x1, 0x0, 0x4, 0x65, 0x4, 0x1197, 0x8, 0x5, 0x7f, 0x1, 0x8, 0x1, 0x95, 0x0, 0x7, 0x0, 0xfff, 0xa3cd, 0x0, 0x3, 0x2, 0x8, 0xabfb, 0x4, 0x7, 0x9, 0x6c920549, 0x5, 0x0, 0x0, 0x1, 0x7, 0x9, 0x8, 0x2, 0x3, 0xde9, 0x9, 0xb, 0x5, 0xb9e1, 0x6, 0x0, 0x2, 0x4, 0x589, 0x8, 0x5, 0x3, 0x9, 0x5, 0x71, 0x5, 0x787, 0x9, 0x1200000, 0x4, 0x3, 0xeaef, 0x7, 0x0, 0x6, 0x3, 0x8, 0x40, 0x2, 0x6, 0x8000, 0x80, 0x3, 0x80, 0x80000000, 0x5]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x3, 0x9ae, 0x702b, 0x2, 0x401, 0x1000, 0x2, 0xd, 0x0, 0x8, 0x101, 0x5, 0xd0, 0x7, 0x9, 0x3, 0x991, 0x4, 0x5, 0xf5a1, 0xffffff00, 0x1000, 0x6, 0xf, 0x61b, 0x0, 0xd, 0x3d3, 0x5, 0x5, 0x1, 0x3, 0x6, 0x9000, 0xd8f, 0x9d, 0xab3b, 0x3, 0x5, 0x0, 0xffffffe0, 0x6, 0x4, 0x3, 0x7, 0x5, 0xb7e, 0x0, 0x7fffffff, 0xfffffffe, 0x9, 0x6fd, 0x1, 0x14, 0x5, 0x10001, 0xd, 0x10001, 0x4, 0x8, 0x2, 0x9, 0x9, 0x4, 0x6, 0xe2, 0x2, 0x5, 0x6, 0x9, 0x2, 0xfffff801, 0x9, 0xffffffff, 0x5, 0x3, 0x7ff, 0x5, 0xff, 0x4, 0x1, 0x4, 0x4, 0xe, 0x4, 0x2, 0x3, 0x0, 0x10001, 0x4, 0xfffffff8, 0x9, 0x0, 0x13, 0x2, 0x88f, 0x0, 0xf2, 0x4, 0x7fffffff, 0x10, 0x2, 0xff, 0xd, 0x1, 0xb, 0x7, 0x2, 0xf, 0x7, 0xffffffff, 0x0, 0x68e8, 0x2, 0x1, 0x8, 0x1, 0x4, 0x0, 0x52, 0xbfa, 0x8001, 0x6, 0x5815, 0x3, 0x80000000, 0xb1f9, 0xd1, 0x0, 0x200, 0x6, 0x7ff, 0x0, 0x8, 0x1, 0x3, 0x57, 0x0, 0x5, 0x1000, 0x7, 0x6, 0x6, 0x1, 0x2, 0xfffffffe, 0xfff, 0x80, 0x4, 0x0, 0xf, 0x8d9f, 0x2, 0x0, 0x4, 0x0, 0x5, 0x0, 0x7fffffff, 0x1, 0x7, 0x1ff, 0x80, 0x6, 0x3, 0x3, 0x9158, 0x2, 0x0, 0x8001, 0x57, 0x6, 0x4, 0x4444, 0x4, 0x549, 0x6, 0xa, 0x401, 0xa, 0x5, 0xbea0, 0x10000, 0x6ab8, 0x9, 0x10, 0x780000, 0x8, 0x80000001, 0x8, 0xfffffc6b, 0x1, 0x3, 0x0, 0x7, 0xba, 0x4, 0x784, 0xffffffff, 0x40, 0xc, 0x8, 0x5, 0x1, 0xe7c, 0x873, 0x5c6, 0x3ff, 0x4d24, 0x400, 0x200, 0xd, 0x40ba, 0x8, 0x3, 0x9, 0x9, 0x2, 0x6, 0x28, 0x0, 0x8, 0x0, 0x6, 0x401, 0x4, 0x4, 0x400, 0x4, 0xff, 0x4, 0x3, 0xd43, 0x80000001, 0x8, 0x3000, 0x8, 0xfff, 0xfa2a, 0xc, 0x1, 0x1c00000, 0x1ff, 0x830, 0x4ee, 0xb, 0x2, 0x0, 0x80000001, 0x2, 0x1ff, 0x8e4, 0x88, 0x9, 0x8]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xa06a}, @TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x57, 0x3, 0x2, 0x7, 0x1000, 0x1, 0x7, 0x40, 0x10, 0x4, 0x8e, 0xfffffff8, 0x2ee, 0x6aa, 0x7, 0x100, 0x0, 0x18000, 0x9, 0x9, 0x1, 0x9, 0x9, 0x2, 0x2, 0x1725, 0x3, 0x6, 0x4, 0x2, 0x200, 0x101, 0x5, 0x3, 0x70b, 0x10000000, 0x5, 0x5465, 0x971, 0x7, 0x1042, 0x3, 0x10000, 0x3, 0x7, 0x8bf, 0x8, 0x80000000, 0x17c, 0x1, 0x400000, 0x7, 0x6, 0x5, 0xa0, 0x3, 0x7, 0x7, 0x5341, 0xffffffff, 0x4, 0xb, 0x7, 0x4080, 0xa6, 0x1, 0x40a2, 0x7fffffff, 0x2, 0x339, 0x190, 0x10001, 0x3a66, 0x8, 0x8000, 0x6, 0x9, 0x2, 0x4, 0x7caa29db, 0x8000, 0x7, 0x4, 0x10, 0x3ff, 0x8, 0x7, 0x4, 0x1, 0x4, 0xce6d, 0x1, 0x6, 0x6d, 0x2, 0x8, 0x10000, 0xfffffff8, 0x7f, 0xe709, 0x2, 0x200, 0x90d3, 0x4, 0xffff2b69, 0x2, 0x10, 0x6, 0xe, 0x40c, 0x1, 0x8, 0x3, 0x7f, 0x36, 0x80000001, 0x0, 0x7fffffff, 0x4, 0x100, 0x4, 0x4, 0x3, 0x7, 0x8, 0x80000001, 0xfffffc00, 0xbb6e, 0x4, 0x2, 0x5, 0x101, 0xfffffff9, 0x9, 0x5, 0x3014, 0x7, 0x4, 0x9, 0x5, 0x81, 0x1, 0xfffffff7, 0x0, 0x0, 0x7, 0x6, 0x5, 0x754cc1cd, 0x2, 0x5, 0x7, 0x2, 0x9, 0x2, 0x0, 0x4, 0xfff, 0xc34a, 0x4, 0x7, 0x1, 0xe, 0x2, 0x0, 0x80000000, 0x4, 0x0, 0x7, 0x800, 0x6, 0x7, 0x2, 0x6, 0x1, 0x80, 0x9, 0x200, 0xd, 0x10000, 0xa, 0x0, 0x0, 0x80000001, 0x5, 0xd, 0x6, 0x5, 0xb860, 0x7, 0x8000, 0x2, 0x5, 0x98, 0x6, 0xf27, 0xfffffffd, 0xae, 0x8, 0x1, 0xfffffffe, 0x46, 0x6ecd, 0x3, 0x7fffffff, 0xd30b, 0x3a000000, 0xffffffff, 0x60ad, 0x5, 0x4, 0x5, 0x80000000, 0x401, 0xffffffff, 0x45, 0x1, 0x1, 0x0, 0xf, 0xe, 0x3, 0x7, 0x9, 0x2, 0xffffff08, 0x800, 0x6, 0x3, 0x5, 0x5, 0x250, 0x5, 0x0, 0x7, 0x8, 0x82f, 0xc52, 0xdd, 0x8001, 0xec, 0x5, 0x9, 0x4, 0x10000, 0x5a7b, 0x0, 0xa32, 0x5, 0x6, 0x8, 0x1, 0x2, 0x7, 0x9]}]}]}}]}, 0x1644}}, 0x20040054) 2.369491702s ago: executing program 4 (id=6488): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="28000000120001032cbd7000fbdbdf2507000000", @ANYRES32=0x0, @ANYBLOB="6b8a00003015010008001d0080"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="28000000120001032cbd7000fbdbdf2507000000", @ANYRES32=0x0, @ANYBLOB="6b8a00003015010008001d0080"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000040)) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}], 0x1c) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}], 0x1c) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@empty, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x2, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x4, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@empty, 0xfffffffc, 0x3c}, 0x2, @in=@empty, 0x6, 0x4, 0x3, 0x0, 0x401}]}]}, 0xfc}}, 0x0) socket$packet(0x11, 0x3, 0x300) (async) r4 = socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0xa, 0x0) (async) r6 = socket(0x10, 0xa, 0x0) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) (async) getsockname$packet(r6, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x9801}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STATS_ENABLED={0x5, 0x2a, 0x1}]}}}]}, 0x3c}}, 0x0) sendto$packet(r4, &(0x7f0000000240)="f3277b60d4e19ea5be6413ec7093", 0xe, 0x44890, &(0x7f0000000200)={0x11, 0x86dd, r7, 0x1, 0x4, 0x6, @local}, 0x14) sendto$inet6(r2, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) (async) sendto$inet6(r2, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) r8 = socket$alg(0x26, 0x5, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r9 = accept4(r8, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000000)="ad00"/16, 0x10) recvmmsg(r9, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) 2.047069727s ago: executing program 3 (id=6493): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) ioctl$XFS_IOC_GETPARENTS_BY_HANDLE(r0, 0xc040583f, &(0x7f0000000200)={{@align=0xffffffffffffffff, {0x7, 0x543, 0x784d, 0x40}}, {{[0x8, 0x0, 0x3, 0x401]}, 0x0, 0x1, 0x6, 0x0, &(0x7f00000000c0)=[{{@_ha_fsid={[0x4, 0x7]}, {0x872, 0x40, 0x8000, 0x7}}, 0x8, 0x0, ',.)!\x00'}, {{@align=0x100000000, {0x7, 0x800, 0x80000000, 0x4}}, 0x4, 0x0, 'py0-]\x00'}, {{@align=0x82c0, {0x9, 0x7, 0x40, 0x95}}, 0x7fffffff, 0x0, ';!{^.^\x00'}, {{@align=0x1e3e, {0x3, 0x8, 0xfed5, 0x2}}, 0x0, 0x0, '/+%\\\xca){\'%\x00'}, {{@_ha_fsid={[0xb, 0x4]}, {0x1ff, 0x7ff, 0x6, 0x6}}, 0xc07, 0x0, 'O\x03\x00'}, {{@_ha_fsid={[0xfffffffe, 0x400]}, {0x986, 0x1, 0x6, 0x1b}}, 0x31, 0x0, '\xc4\x00'}, {{@align=0x9, {0x3, 0x6, 0x53, 0x7}}, 0xc136, 0x0, '.&^\x9c{#\x7f\xc6}#\x00'}, {{@_ha_fsid={[0x7ff, 0x9]}, {0x5, 0x35, 0xb8, 0x2}}, 0x2, 0x0, '\xbd@\x00'}]}}) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000300)={r0, &(0x7f0000000240)="bf748bacf6dc3e8e38ebd64589bfc7aaac450cce5f6210f46cc329ad07a65306699e373dae0e21e6f52d911308dac4b82ff29b1a9f294b5bcb685046243ecfe24284fa5c171d4be28d7887cc0be84295a131e77e884dea7604bb9725b5660bbc9a91c875bed5fdb7b82105ca1ff1e62e89f757f3e6815dd600e4a789bd09cc0767f4713f9faea5a62860ed54a150b62c2e604ae45c2503d2f65516554b"}, 0x20) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000340)={0x7, 0x0, {0x6, @usage=0x4, 0x0, 0x462c, 0xdf, 0x5, 0x8, 0x9, 0x49, @struct={0x4, 0x7}, 0x4, 0xffff, [0x5, 0x4, 0x68bd, 0x6, 0x8, 0xd0a9]}, {0xe596, @struct={0x7fff, 0x800}, 0x0, 0x7ff, 0x1, 0x8, 0x4, 0x7ff, 0x40, @struct={0x5, 0x7fff}, 0x4, 0x1000, [0x7fffffffffffffff, 0x2, 0x47, 0x2, 0xffffffffffffff91, 0x5]}, {0xe304, @struct={0xfff, 0x9}, 0x0, 0x5, 0x6, 0x700000000000, 0x40, 0x37, 0x0, @usage=0x3, 0x1, 0x1, [0x0, 0xf, 0x7fffffff, 0x4, 0x3, 0x8001]}, {0x2, 0x2, 0x2}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000740)={r1, 0x6}) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000b40)=0x27e) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000b80)=0x7fffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000bc0)={0x9, {{0x2, 0x4e21, @multicast1}}, 0x1, 0x4, [{{0x2, 0x4e20, @remote}}, {{0x2, 0x4e20, @broadcast}}, {{0x2, 0x4e20, @broadcast}}, {{0x2, 0x4e24, @empty}}]}, 0x290) r3 = socket$kcm(0x29, 0x2, 0x0) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001000)=@bpf_tracing={0x1a, 0x6, &(0x7f0000000e80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0x1a}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}]}, &(0x7f0000000ec0)='syzkaller\x00', 0x0, 0xd, &(0x7f0000000f00)=""/13, 0x40f00, 0x2, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000f40)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000f80)={0x3, 0x8, 0x7, 0xb}, 0x10, 0x1c9bd, 0xffffffffffffffff, 0x0, &(0x7f0000000fc0)=[r0], 0x0, 0x10, 0x400}, 0x94) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f00000010c0)={r2, r4}) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001280)={&(0x7f0000001100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xbc, 0xbc, 0x5, [@enum={0xd, 0xa, 0x0, 0x6, 0x4, [{0x2, 0x4}, {0x8, 0xfffffffd}, {0x5, 0x5}, {0x10, 0x9}, {0x9}, {0xf, 0x2}, {0xe, 0x8}, {0xb, 0x8}, {0xe, 0x1}, {0x10, 0x7ff}]}, @enum64={0xb, 0x6, 0x0, 0x13, 0x0, 0x5, [{0x10, 0x8, 0x3}, {0xe, 0xff, 0x6}, {0x6, 0x5, 0x2}, {0xb, 0x5c8c, 0x8}, {0x7, 0xc2b9, 0x9}, {0xc, 0x2, 0x42}]}, @volatile={0x7, 0x0, 0x0, 0x9, 0x2}]}, {0x0, [0x61, 0x2e, 0x0]}}, &(0x7f0000001200)=""/84, 0xd9, 0x54, 0x1, 0x9}, 0x28) r6 = socket(0xf, 0x2, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r7, 0x84, 0x20, &(0x7f00000012c0)=0x8d, 0x4) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$gtp(&(0x7f0000001340), r6) sendmsg$GTP_CMD_NEWPDP(r8, &(0x7f0000001400)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x14, r9, 0x10, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r8, &(0x7f0000001500)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x24, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x501}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004080}, 0x4000) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x12, &(0x7f0000001540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@call={0x85, 0x0, 0x0, 0x57}, @generic={0x4, 0xa, 0x8, 0x3, 0x800}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001600)='syzkaller\x00', 0x3, 0xc9, &(0x7f0000001640)=""/201, 0x41000, 0x20, '\x00', 0x0, 0x25, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001740)={0x0, 0x5, 0x5e9, 0x5}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000001780)=[r0, 0x1], &(0x7f00000017c0)=[{0x2, 0x2, 0xc, 0x5}], 0x10, 0x4}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001940)={r0, 0x58, &(0x7f00000018c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001a80)={@fallback=r4, 0x31, 0x1, 0x5, &(0x7f0000001980)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f00000019c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001a00)=[0x0, 0x0, 0x0], &(0x7f0000001a40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001ac0)={r10, r11, 0x25, 0x6, @val=@netkit={@void, @value=r4, @void, @void, r13}}, 0x1c) tee(r5, r3, 0x9, 0x3) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000001b00)=0x9, 0x4) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r12, 0x84, 0x1d, &(0x7f0000001b40)={0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000001b80)=0x24) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000001bc0)={r14, 0xe, 0x6, [0xa045, 0x2, 0xffff, 0xfffb, 0x8020, 0x2]}, &(0x7f0000001c00)=0x14) r15 = socket$kcm(0x29, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r15, 0x89e1, &(0x7f0000001c40)={r12}) 1.910350453s ago: executing program 0 (id=6494): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000040)={'wg0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@getnexthop={0x44, 0x76, 0x1, 0x0, 0x25dfdbdf, {0x3}, [@NHA_OIF={0x8, 0x5, r1}, @NHA_GROUPS={0x4}, @NHA_FDB={0x4}, @NHA_MASTER={0x8, 0xa, 0x1}, @NHA_GROUPS={0x4}, @NHA_FDB={0x4}, @NHA_GROUPS={0x4}, @NHA_FDB={0x4}, @NHA_FDB={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x0) 1.862622158s ago: executing program 0 (id=6495): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000480), r0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r1, 0x0, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010100}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f0000000040)) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) ioctl$XFS_IOC_START_COMMIT(r2, 0x80585882, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0}, &(0x7f0000000300)=0xc) r7 = syz_init_net_socket$ax25(0x3, 0x2, 0xce) r8 = socket$igmp(0x2, 0x3, 0x2) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000001340)={0x0, 0x0}, &(0x7f0000001380)=0xc) ioctl$SIOCAX25ADDUID(r7, 0x89e1, &(0x7f0000000640)={0x3, @bcast, r6}) r10 = getgid() r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x44014) recvmmsg(r11, &(0x7f0000000580)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f00000029c0)=[{0x0}], 0x1}}, {{0x0, 0x0, &(0x7f0000004140)=[{&(0x7f00000015c0)=""/4102, 0x1006}, {&(0x7f0000003ec0)=""/128, 0x80}, {&(0x7f0000003f40)=""/41, 0x29}, {&(0x7f0000003f80)=""/135, 0x87}, {&(0x7f00000014c0)=""/200, 0xc8}], 0x5}, 0x7fff}], 0x3, 0x12, 0x0) r12 = socket$nl_audit(0x10, 0x3, 0x9) r13 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup/syz1\x00', 0x200002, 0x0) sendmsg$unix(r4, &(0x7f0000000400)={&(0x7f0000000100)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000180)="8e3f385ceb00341058fda9c47615b5fbc41afcdad4c1127baafdf55b765136c3026f467676ccbe10dc2520373e5c27d7408dcf65e1d1fcb068f1c64550ef4c6a71a4f1547c312dc1f3c488509f3fda9193d3da61ac7c81b46106", 0x5a}], 0x1, &(0x7f0000000380)=[@cred={{0x1c, 0x1, 0x2, {r5, r9, r10}}}, @rights={{0x28, 0x1, 0x1, [r2, r11, r2, r12, r13, r2]}}], 0x48, 0x40}, 0x2000c004) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000780)={r4, &(0x7f0000000680)="395e5ec6a3fba356e98ad0ff629980e91e3678591371a33702b2fc83e66bb9155b3a14b9413348f1238077bad7ee94abfdecf89241b2c50a48bad5790dbb691eb7cfec809f647564b5080ca31e582ab46d05af5e15535b13f500ddc7856d400dc7dfec9f8f449a0f96664b70461ee9ac25163e1a26d3e3168edf7e803ca4cee8d0a14252c0d81c35edda9823de86b0d44f790de7fbe66876e17e63321bba767dbf984cca9c95f06523403c2b1d2457bcec76ee6087eadde39d6f6b8448e8973b", &(0x7f0000000740)=@tcp6=r4, 0x4}, 0x20) 1.796059221s ago: executing program 3 (id=6496): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000080)={0x0, 0x5, 0x1, "fd"}, 0x9) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000180)=ANY=[], 0x9) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0x9, &(0x7f0000000000), 0x4) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x23, &(0x7f00000000c0)={0x0, 0x5}, 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="180200000700000000000000fdffffff850000002800000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000002000000850000001700000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100}, 0x94) syz_emit_ethernet(0x5e, &(0x7f0000000340)={@multicast, @random="bad4f9431624", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x28, 0x3a, 0xff, @initdev={0xfe, 0x4, '\x00', 0x0, 0x0}, @mcast2, {[], @ndisc_redir={0x89, 0x4, 0x0, '\x00', @dev={0xfe, 0x80, '\x00', 0x8}, @dev}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x60, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 1.730540098s ago: executing program 1 (id=6497): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='lp', 0x2) (async) r1 = socket$inet(0x2, 0x2, 0x7) setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x48f, &(0x7f0000000040)={0x2b, @remote, 0x4e23, 0x40, 'sh\x00', 0x2, 0x8, 0x48}, 0x2c) (async) r2 = accept4$ax25(0xffffffffffffffff, &(0x7f0000000080)={{0x3, @rose}, [@null, @null, @default, @rose, @netrom, @null, @null, @default]}, &(0x7f0000000100)=0x48, 0x800) accept4$ax25(r2, &(0x7f0000000140)={{0x3, @bcast}, [@remote, @rose, @netrom, @rose, @remote, @bcast, @null, @netrom]}, &(0x7f00000001c0)=0x48, 0x80000) (async) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='blkio.bfq.group_wait_time\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) (rerun: 64) sendmsg$NL80211_CMD_SET_CQM(r3, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, r4, 0x200, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x2, 0x41}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0xc0) (async) bind$bt_rfcomm(r3, &(0x7f00000003c0)={0x1f, @none, 0x1}, 0xa) (async) getsockopt$X25_QBITINCL(r3, 0x106, 0x1, &(0x7f0000000400), &(0x7f0000000440)=0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), r3) (async, rerun: 32) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f00000004c0)={0xffffffffffffffff}) (rerun: 32) sendmsg$nl_generic(r6, &(0x7f00000007c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000580)={0x1e4, 0x3b, 0x4, 0x70bd28, 0x25dfdbfc, {0x20}, [@generic="95b89b258c0661defc94b284242cb5fc1889809d7628dd4a4bfdc5325bb3", @generic="85b7a3e772650d91a5cdff8cb89dadbf0a245c5bebc36a8e3431d79279182a445d0d2d4a2102124db8020915625e8a86f40b903a7eff7723fe34521b6a6994f1f8c4761df820cf098f267f03136863fbf75db5c3649f278c7e12092dd43c3e19bc0c4f3d5a3b64710ff0b0614627437211a584b81ec15d8594a86ab68546c0a9291dc25e116d33ce4afc82cd7f07aba5a9704dda7f45e815", @typed={0x8, 0x9f, 0x0, 0x0, @u32=0xfd73}, @generic="f143239ad8d6b559e4e47caff30ce128bef537ea7a54e7c2023c4e83542d9b6359c0716eee75da49fbc6e736b3f16ade357cb29f66ec80c35f6578b71e3242dbd0a298b47eec644aea0fb681367cd79dc8da22204633084e7e6acc7fac942a3d3546fea353475a3fc62e3b3e5643e0e4b4e3296dba0646b0825373", @generic="f80774fb0748cb5c033164ed9be1977a5dedf3319e7fddd2c212949d7b46c35359f8ae2afa2dfeae182c944aa70a408cce14d5cb93299a7c4768912739531748355db3d295255de350c632741a271bcf9933de1b3971975afd6418ae2de889e43d9401ff47bdc2514bd51b4d965f3248dcacd1705d3b10e2dce2d2716803003ab979eaf41f5631e19aacd4", @nested={0xc, 0x14b, 0x0, 0x1, [@typed={0x8, 0x12b, 0x0, 0x0, @fd=r2}]}]}, 0x1e4}, 0x1, 0x0, 0x0, 0x20000084}, 0x4000000) (async) ioctl$BTRFS_IOC_QUOTA_CTL(r6, 0xc0109428, &(0x7f0000000800)={0x1, 0x8}) (async) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r6, &(0x7f0000000940)={&(0x7f0000000840), 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x24, r7, 0x8, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4000) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f0000000980)={0x6, 0x6, 0x204, 0x2, 0x0}, &(0x7f00000009c0)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000a00)={0x4, 0x20, 0x2, 0xffffffff, 0x8, 0x5, 0x1, 0x1, r8}, 0x20) (async, rerun: 32) r9 = socket$inet_sctp(0x2, 0x5, 0x84) (rerun: 32) setsockopt$EBT_SO_SET_ENTRIES(r9, 0x0, 0x80, &(0x7f0000001280)=@nat={'nat\x00', 0x19, 0x6, 0x7cc, [0x200000000a80, 0x0, 0x0, 0x200000000ba6, 0x200000000e0a], 0x0, &(0x7f0000000a40), &(0x7f0000000a80)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{0x5, 0x5, 0x6001, 'gre0\x00', 'hsr0\x00', 'ipvlan1\x00', 'lo\x00', @empty, [0x0, 0x0, 0x0, 0x0, 0xff, 0xff], @empty, [0xff, 0x0, 0x0, 0x0, 0x0, 0xff], 0xae, 0xae, 0xf6, [@time={{'time\x00', 0x0, 0x18}, {{0x2, 0x3, 0x1475a, 0xbdef, 0x24, 0x7f, 0x2}}}], [], @common=@ERROR={'ERROR\x00', 0x20, {"ccb3210e8fd735e570b0db53f9786eea77ddde5ffc4daaf6cb37c1056afb"}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffc, 0x2, [{0x11, 0x40, 0x6558, 'ip6erspan0\x00', 'wg2\x00', 'ip6erspan0\x00', 'tunl0\x00', @broadcast, [0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty, [0x0, 0xad8dfe9a99f302d3, 0x0, 0x80, 0x0, 0xff], 0x11e, 0x11e, 0x156, [@statistic={{'statistic\x00', 0x0, 0x18}, {{0x1, 0x0, 0x6, 0x8, 0x10001, {0x80000001}}}}, @rateest={{'rateest\x00', 0x0, 0x48}, {{'bridge0\x00', 'bridge_slave_1\x00', 0x19, 0x2, 0xa, 0x1800, 0x6, 0x5e, {}, {0x2}}}}], [], @arpreply={'arpreply\x00', 0x10, {{@broadcast, 0xfffffffffffffffc}}}}, {0x11, 0x5, 0xed0e020774ce3b2f, 'netdevsim0\x00', 'macvtap0\x00', 'rose0\x00', 'batadv_slave_0\x00', @multicast, [0x0, 0xff, 0x0, 0xff, 0x0, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0x6e, 0xa6, 0xde, [], [@arpreply={'arpreply\x00', 0x10, {{@dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, 0xfffffffffffffffc}}}], @arpreply={'arpreply\x00', 0x10, {{@local, 0xfffffffffffffffc}}}}]}, {0x0, '\x00', 0x3, 0xffffffffffffffff, 0x2, [{0x9, 0x10, 0x11, 'macvtap0\x00', 'team0\x00', 'pimreg1\x00', 'bond_slave_1\x00', @multicast, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], @multicast, [0x0, 0x0, 0x0, 0x0, 0xff], 0xde, 0x14e, 0x186, [@mark_m={{'mark_m\x00', 0x0, 0x18}, {{0x4, 0x0, 0x2, 0x2}}}, @m802_3={{'802_3\x00', 0x0, 0x8}, {{0xbc, 0x0, 0x1, 0x581b1f7bf5de14ea}}}], [@arpreply={'arpreply\x00', 0x10, {{@multicast, 0xffffffffffffffff}}}, @snat={'snat\x00', 0x10, {{@multicast, 0xfffffffffffffffc}}}], @snat={'snat\x00', 0x10, {{@dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}, 0xfffffffffffffffc}}}}, {0x9, 0xa, 0xd, 'nr0\x00', 'bond_slave_1\x00', 'ip6erspan0\x00', 'pimreg\x00', @random="89d72f0f9ca3", [0xff, 0xff, 0x0, 0x0, 0xff], @broadcast, [0x0, 0xff, 0x0, 0x0, 0x0, 0xff], 0x6e, 0xde, 0x10e, [], [@snat={'snat\x00', 0x10, {{@dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}, 0xffffffffffffffff}}}, @snat={'snat\x00', 0x10, {{@empty, 0xfffffffffffffffc}}}], @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x5, 0xfffffffffffffffc, 0x1, [{0x9, 0x20, 0x6003, 'veth0_macvtap\x00', 'veth1_vlan\x00', 'ipvlan0\x00', 'vlan0\x00', @remote, [0xff, 0xff, 0xff, 0xff, 0xff], @random="bc6f86b85a7a", [0xff, 0x0, 0xff, 0x0, 0xff], 0x116, 0x116, 0x14e, [@realm={{'realm\x00', 0x0, 0x10}, {{0xfffffffb, 0x7, 0x1}}}, @physdev={{'physdev\x00', 0x0, 0x48}, {{'veth1_macvtap\x00', {0xff}, 'batadv_slave_0\x00', {0xff}, 0x14, 0x2}}}], [], @snat={'snat\x00', 0x10, {{@local, 0xfffffffffffffffe}}}}]}]}, 0x844) (async, rerun: 32) bpf$MAP_CREATE(0x0, &(0x7f0000001300)=@base={0x1a, 0x276, 0x3, 0xc0, 0x40000, r3, 0xc08, '\x00', 0x0, r3, 0x0, 0x4, 0x3}, 0x50) (async, rerun: 32) recvmmsg(r0, &(0x7f0000001a40)=[{{&(0x7f0000001380)=@ieee802154, 0x80, &(0x7f00000019c0)=[{&(0x7f0000001400)=""/215, 0xd7}, {&(0x7f0000001500)=""/201, 0xc9}, {&(0x7f0000001600)=""/184, 0xb8}, {&(0x7f00000016c0)=""/56, 0x38}, {&(0x7f0000001700)=""/190, 0xbe}, {&(0x7f00000017c0)=""/226, 0xe2}, {&(0x7f00000018c0)=""/248, 0xf8}], 0x7}, 0xfd74}], 0x1, 0x10000, &(0x7f0000001a80)) (async) accept4(r9, &(0x7f0000001ac0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, &(0x7f0000001b40)=0x80, 0x800) bind$inet6(r1, &(0x7f0000001b80)={0xa, 0x4e24, 0xe, @mcast1, 0x1963}, 0x1c) (async, rerun: 32) ioctl$XFS_IOC_START_COMMIT(r10, 0x80585882, &(0x7f0000001bc0)={0xffffffffffffffff}) (rerun: 32) socket$inet6_mptcp(0xa, 0x1, 0x106) (async, rerun: 32) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001f00)={0xffffffffffffffff, 0xe0, &(0x7f0000001e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000001c40)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, &(0x7f0000001c80)=[0x0], &(0x7f0000001cc0)=[0x0, 0x0, 0x0], 0x0, 0xa1, &(0x7f0000001d00)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000001d40), &(0x7f0000001d80), 0x8, 0xf7, 0x8, 0x8, &(0x7f0000001dc0)}}, 0x10) (rerun: 32) bind$xdp(r11, &(0x7f0000002080)={0x2c, 0x5, r12, 0x2b}, 0x10) 1.609142598s ago: executing program 0 (id=6498): syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x34, r1, 0x301, 0x70bd29, 0x25dfdbfc, {0x24}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8041}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r10], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) sendmsg$TIPC_NL_MON_PEER_GET(r8, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x48, r10, 0x8, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x200}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xae}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040c44}, 0xc000) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r7], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4008054) r11 = socket(0x1e, 0x4, 0x0) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES8=r5, @ANYRES16=r11], 0x14) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r11) 1.561678009s ago: executing program 3 (id=6499): openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4048810}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002180)=@newtfilter={0x1644, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r3, {0xc, 0xfff1}, {}, {0x5, 0xf}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x1614, 0x2, [@TCA_CGROUP_EMATCHES={0x254, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x28, 0x2, 0x0, 0x1, [@TCF_EM_META={0x24, 0x3, 0x0, 0x0, {{0x4, 0x4, 0x1ff}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x7, 0x1}, {0x9, 0x9, 0x1}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x100, 0x7}, {0xb, 0x60, 0x1}}}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8}}, @TCA_EMATCH_TREE_LIST={0x198, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xcc, 0x3, 0x0, 0x0, {{0x6, 0x0, 0x6}, "bb949062dbbdc2bac44e28b16d3db753b8d3bb9abd7d162a53466da118860f9f4ea1875d96136e6f833c42444576a511b23cbd7ebbf3fbf76126a4fd1676d385e02092ae85bd1bf28cf79425df6c64f56f5c365aa68db06eed04fd4cd0842ce614de1fcc66af66e713e787d7e0bf02714084028b134c6dc3a99858de79523cc36cc39298b4a6194c0d3ffb130e8e6e9a856adfee0055d40eb1f4e8f9c429590b2b80f726a8c53f3582f4642e11d622edef967ffdbaa8344b0ef646079b5ecd"}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x7fff, 0x3, 0x867}, {0x4, 0x6, 0x4, 0x8000}}}, @TCF_EM_IPT={0xac, 0x2, 0x0, 0x0, {{0x1, 0x9, 0x78c}, [@TCA_EM_IPT_MATCH_DATA={0x95, 0x5, "99cca969ec63820efd751cb1b7bb0c0efdb8bb49ecbf75905f0a24650a0ebf4c65e5494c3a72ce18b59139aef1ad9fbd94846e230515edea185b45d7d318c09f4e35f2eaedadb8b1013b1b309b6edd9ef842714c73f7492d6127d19c2dec88205192e4c6b8d302267eab072a2b0b2939e83ac3fc7d5c382c72fc71b751ba548e741c922da77ea9bea9508f303ec5384d28"}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x4}]}}]}, @TCA_EMATCH_TREE_LIST={0x6c, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x38, 0x2, 0x0, 0x0, {{0x2, 0x9, 0x2f4}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x1}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x93}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x9}]}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0xff88, 0x7, 0x6}, {{0x2, 0x0, 0x1, 0x1}, {0x2}}}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x39}, {0x6, 0x2, 0x100, 0x68}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xf5}}, @TCA_EMATCH_TREE_LIST={0x4}]}, @TCA_CGROUP_EMATCHES={0x12c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x128, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x5c, 0x1, 0x0, 0x0, {{0x4, 0x0, 0x8}, "e2afe2b11afff5a2137a7a31a8f7bf3f347ec0f2c86e8e86c4d30e589a2024863e9a21673fadac2609105c9d10153f85de6d6a4e931c12b3ea877c47108a39063dde26b9cf6602730d4d4f19c7"}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x6, 0x7, 0x4007}, {{0x0, 0x1}, {0x3, 0x0, 0x0, 0x1}}}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x8, 0x3, 0x6}, {0x7f, 0x9, 0x4, 0x1}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x0, 0x3, 0x8}, {0x9, 0x1d55, 0x81, 0x81}}}, @TCF_EM_CONTAINER={0x7c, 0x3, 0x0, 0x0, {{0x3, 0x0, 0x5}, "4e0cdeefeb0c19dcca9a71a8e0d9d0661bc5ce9b1f0332e109364f030f70440285037ce433fbab737992629e7c7310e6b06447b60d50574a3fd2ab2cc445bba3a6e477442a973f4fbdb90392f9b4e463419413b0c19747235fcc979861f3a8a00e61dc94ae084165a1b203da69d9"}}]}]}, @TCA_CGROUP_EMATCHES={0x50, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x5, 0x0, 0x0, {{0xf, 0x1, 0xfb3b}, {0x40, 0x129, 0xffb6, 0x1, 0x8}}}]}, @TCA_EMATCH_TREE_LIST={0x28, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x3, 0x0, 0x0, {{0x9, 0x2, 0x8001}, {0x47d5, 0x0, 0x3}}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x5, 0x7, 0x2}, {{0x4, 0x1, 0x0, 0x1}, {0x2, 0x0, 0x1}}}}]}]}, @TCA_CGROUP_POLICE={0x10, 0x2, [@TCA_POLICE_RATE64={0xc, 0x8, 0xd20}]}, @TCA_CGROUP_ACT={0x1d4, 0x1, [@m_tunnel_key={0xd0, 0x10, 0x0, 0x0, {{0xf}, {0x38, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @private0}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3b}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x3f}}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, {0x6b, 0x6, "50450e8203cc14af56776175d5c8f2a79b49616ae44cd25ff0c8b5ef0fa18833debebfdd7090d103c1b632dbad6d32826b2694a5b510e75ba3708e3b95b488b1deb31603783219322898e4d5720b243d9919e886a799343d7bfc3c0de79473327f0283916db1b4"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_sample={0x100, 0x9, 0x0, 0x0, {{0xb}, {0x4}, {0xd1, 0x6, "13714b45e310593f7e7dc46fd131082dcad8b6eb0d37679138fe78d00361f7badba14fd87e40b454b4fe923fcf0e7ec10def14adc5b2c1b53d2cbab2968e22180bc888e55c8d6f8f11c9ab9b3890139a741eda0364b1acf54e35f23d03810d2a2498b91083d659c75eb48f2e779be77b729a6c4b8311809a08a1164bc693e7cd9101b7ec311bd70e432d664c6872fafe48f492e05291be8856ffb6dad47e14d0f205ebc8e73714fb9e56230e874c14b1fe01faaed44bd57a232b5494e72de34fb035de351c22fff081da0bfdae"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_CGROUP_POLICE={0x105c, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x10000000, 0x6, 0x7, 0x2, {0x5, 0x0, 0x6, 0x4, 0x8, 0x9}, {0x0, 0x0, 0x2, 0xaf65, 0x1}, 0x4, 0x1}}, @TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x6, 0x7, 0x3, 0xfffffa66, 0x7, 0x6, 0xc4cf, 0xfffffffd, 0x8, 0x270, 0x7, 0x0, 0x8, 0x2, 0x7, 0x4, 0x10000, 0x3, 0x101, 0x904d, 0x2d8, 0x3, 0x725, 0x9aae, 0xa, 0x2, 0x2, 0x7, 0x6, 0x9, 0xc, 0x4, 0x2, 0x31, 0x6, 0x4bd3, 0x3ff, 0xe, 0x8, 0x2, 0x7, 0x8, 0xaaa, 0x4, 0x9, 0x3ec, 0x4, 0x4fe800, 0x6, 0x2, 0x4, 0x4, 0xffff, 0x7243, 0x5, 0x8, 0x3ff, 0x7, 0xc947, 0x2, 0x5, 0x8, 0x7, 0x2, 0x3, 0xa73, 0xcc83, 0x2, 0xfffffff5, 0x2, 0x3, 0x9, 0x80000001, 0x0, 0x20000000, 0xd06a, 0x6, 0x0, 0xfffffffd, 0xd0e, 0x7e1, 0x4, 0x8, 0x8, 0x42, 0x7, 0x8, 0x1, 0x9, 0x8, 0x7, 0x3cf, 0x1, 0x9, 0xfeca, 0x8e, 0xa, 0x6, 0x525, 0x0, 0x2, 0x9, 0x1, 0xed5, 0x1, 0x6, 0x6b58, 0x4, 0x9, 0x980, 0x10001, 0xa, 0x0, 0x4, 0x8, 0x2, 0x9, 0x7ff, 0x1ac, 0x8, 0xfffffffb, 0x0, 0x6, 0x0, 0x33d6, 0x40, 0x2, 0x8, 0x0, 0x401, 0x3, 0x8, 0x40, 0x4000000, 0xfffffffc, 0x1, 0x2, 0x50fc, 0x100, 0x7, 0x5, 0x1, 0x926, 0x2f, 0x5, 0xd, 0x2, 0x2, 0x3, 0x5, 0x3, 0xf57, 0x7f8, 0x2, 0xfffffffa, 0x1d, 0x9b, 0x1ff, 0x3a, 0xffffffff, 0xf, 0xb0, 0x0, 0x8, 0x14, 0x7, 0x7, 0x275, 0x5, 0x9, 0x8, 0x10, 0x7fffffff, 0x7, 0x0, 0x457, 0x6, 0x1, 0xfffffffb, 0x4, 0x600, 0x4, 0xff8000, 0x0, 0x8000, 0xb29, 0x8fbe, 0x8, 0x6, 0x0, 0x1, 0x9, 0x3, 0x4, 0x9, 0x5, 0x5, 0xc, 0x2, 0x7f, 0x7, 0x7fff, 0x2, 0x2, 0x2, 0x5, 0xb6, 0x6, 0x0, 0xe, 0x80, 0x8, 0x6, 0xfffffffb, 0x400, 0x1, 0x3, 0x7, 0x9, 0x9, 0xf, 0x0, 0x0, 0x6, 0x1, 0x4, 0x5, 0x3, 0x1000, 0x6, 0x4, 0xffffffff, 0x6d, 0x372c, 0x2, 0x0, 0x0, 0x8, 0x9, 0x4, 0x1, 0x7, 0x2, 0xcf6f, 0xa7, 0x0, 0x1d0a, 0x8, 0x4, 0x8000, 0x80, 0x8, 0xba, 0x5, 0xd1f]}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x1, 0x5, 0x7, 0x1, 0xfc, 0x84aa, 0xc, 0x4, 0x6, 0x6, 0x9, 0x7d63, 0x9, 0x69a5, 0xfffff831, 0x80, 0xfffffe15, 0xffffff01, 0xe6697a, 0x5, 0x1000, 0x9, 0x7, 0xdc, 0x0, 0x3, 0x80000001, 0x1, 0x3, 0x7, 0x8, 0x2, 0x10000, 0xe, 0x5, 0x8db, 0x4, 0x6, 0x9c, 0x101, 0xf, 0x4, 0x6, 0xc5f, 0x80, 0x5, 0x2, 0x5, 0xe, 0x7, 0x603, 0xd, 0x1, 0x29, 0x5, 0x4, 0x9, 0x4, 0x2, 0x0, 0x2, 0xe687, 0x2, 0x4, 0x57, 0x5, 0x0, 0xd, 0xa6, 0xfffffffb, 0xfffffffb, 0xfffffff9, 0x5, 0x3, 0x8, 0x6, 0x7f, 0x8000, 0x9, 0x11, 0xb6, 0x81, 0x6, 0x6, 0x7, 0xfffffffa, 0x1, 0x43, 0x5e, 0x0, 0x3ff, 0x3, 0x95c, 0x2, 0x0, 0x0, 0xfffffffd, 0xcd, 0x0, 0x7, 0x7, 0x91ca, 0xd1, 0x8, 0x3, 0x7, 0x253a626e, 0xffffea00, 0x3ff, 0x4, 0x9, 0x9, 0x1, 0x3, 0x8, 0xf, 0x3a, 0x3, 0xfffffe01, 0x80000000, 0xc1, 0x4, 0x10, 0x7, 0xa5c, 0xffffffee, 0xfffffff5, 0x8, 0x2, 0x6, 0x4, 0x645, 0x7fff, 0x1e8e, 0xd, 0x8, 0x1, 0xd, 0x7, 0x3ff, 0x7, 0x2, 0x2, 0xbe, 0x6, 0x4, 0x7, 0x4, 0x7fffffff, 0x9, 0x800, 0x9, 0x3a15, 0x58, 0x3, 0x9, 0x0, 0x3, 0x2, 0x6, 0x45c, 0x2, 0x9, 0x4, 0x9, 0xa6, 0x5, 0x30, 0x3, 0x0, 0xffff, 0xe85, 0x4, 0x5, 0x6, 0x5, 0x60330378, 0x1, 0x8, 0xce1, 0x7, 0x7ff, 0x1, 0x0, 0x4, 0x65, 0x4, 0x1197, 0x8, 0x5, 0x7f, 0x1, 0x8, 0x1, 0x95, 0x0, 0x7, 0x0, 0xfff, 0xa3cd, 0x0, 0x3, 0x2, 0x8, 0xabfb, 0x4, 0x7, 0x9, 0x6c920549, 0x5, 0x0, 0x0, 0x1, 0x7, 0x9, 0x8, 0x2, 0x3, 0xde9, 0x9, 0xb, 0x5, 0xb9e1, 0x6, 0x0, 0x2, 0x4, 0x589, 0x8, 0x5, 0x3, 0x9, 0x5, 0x71, 0x5, 0x787, 0x9, 0x1200000, 0x4, 0x3, 0xeaef, 0x7, 0x0, 0x6, 0x3, 0x8, 0x40, 0x2, 0x6, 0x8000, 0x80, 0x3, 0x80, 0x80000000, 0x5]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x3, 0x9ae, 0x702b, 0x2, 0x401, 0x1000, 0x2, 0xd, 0x0, 0x8, 0x101, 0x5, 0xd0, 0x7, 0x9, 0x3, 0x991, 0x4, 0x5, 0xf5a1, 0xffffff00, 0x1000, 0x6, 0xf, 0x61b, 0x0, 0xd, 0x3d3, 0x5, 0x5, 0x1, 0x3, 0x6, 0x9000, 0xd8f, 0x9d, 0xab3b, 0x3, 0x5, 0x0, 0xffffffe0, 0x6, 0x4, 0x3, 0x7, 0x5, 0xb7e, 0x0, 0x7fffffff, 0xfffffffe, 0x9, 0x6fd, 0x1, 0x14, 0x5, 0x10001, 0xd, 0x10001, 0x4, 0x8, 0x2, 0x9, 0x9, 0x4, 0x6, 0xe2, 0x2, 0x5, 0x6, 0x9, 0x2, 0xfffff801, 0x9, 0xffffffff, 0x5, 0x3, 0x7ff, 0x5, 0xff, 0x4, 0x1, 0x4, 0x4, 0xe, 0x4, 0x2, 0x3, 0x0, 0x10001, 0x4, 0xfffffff8, 0x9, 0x0, 0x13, 0x2, 0x88f, 0x0, 0xf2, 0x4, 0x7fffffff, 0x10, 0x2, 0xff, 0xd, 0x1, 0xb, 0x7, 0x2, 0xf, 0x7, 0xffffffff, 0x0, 0x68e8, 0x2, 0x1, 0x8, 0x1, 0x4, 0x0, 0x52, 0xbfa, 0x8001, 0x6, 0x5815, 0x3, 0x80000000, 0xb1f9, 0xd1, 0x0, 0x200, 0x6, 0x7ff, 0x0, 0x8, 0x1, 0x3, 0x57, 0x0, 0x5, 0x1000, 0x7, 0x6, 0x6, 0x1, 0x2, 0xfffffffe, 0xfff, 0x80, 0x4, 0x0, 0xf, 0x8d9f, 0x2, 0x0, 0x4, 0x0, 0x5, 0x0, 0x7fffffff, 0x1, 0x7, 0x1ff, 0x80, 0x6, 0x3, 0x3, 0x9158, 0x2, 0x0, 0x8001, 0x57, 0x6, 0x4, 0x4444, 0x4, 0x549, 0x6, 0xa, 0x401, 0xa, 0x5, 0xbea0, 0x10000, 0x6ab8, 0x9, 0x10, 0x780000, 0x8, 0x80000001, 0x8, 0xfffffc6b, 0x1, 0x3, 0x0, 0x7, 0xba, 0x4, 0x784, 0xffffffff, 0x40, 0xc, 0x8, 0x5, 0x1, 0xe7c, 0x873, 0x5c6, 0x3ff, 0x4d24, 0x400, 0x200, 0xd, 0x40ba, 0x8, 0x3, 0x9, 0x9, 0x2, 0x6, 0x28, 0x0, 0x8, 0x0, 0x6, 0x401, 0x4, 0x4, 0x400, 0x4, 0xff, 0x4, 0x3, 0xd43, 0x80000001, 0x8, 0x3000, 0x8, 0xfff, 0xfa2a, 0xc, 0x1, 0x1c00000, 0x1ff, 0x830, 0x4ee, 0xb, 0x2, 0x0, 0x80000001, 0x2, 0x1ff, 0x8e4, 0x88, 0x9, 0x8]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xa06a}, @TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x57, 0x3, 0x2, 0x7, 0x1000, 0x1, 0x7, 0x40, 0x10, 0x4, 0x8e, 0xfffffff8, 0x2ee, 0x6aa, 0x7, 0x100, 0x0, 0x18000, 0x9, 0x9, 0x1, 0x9, 0x9, 0x2, 0x2, 0x1725, 0x3, 0x6, 0x4, 0x2, 0x200, 0x101, 0x5, 0x3, 0x70b, 0x10000000, 0x5, 0x5465, 0x971, 0x7, 0x1042, 0x3, 0x10000, 0x3, 0x7, 0x8bf, 0x8, 0x80000000, 0x17c, 0x1, 0x400000, 0x7, 0x6, 0x5, 0xa0, 0x3, 0x7, 0x7, 0x5341, 0xffffffff, 0x4, 0xb, 0x7, 0x4080, 0xa6, 0x1, 0x40a2, 0x7fffffff, 0x2, 0x339, 0x190, 0x10001, 0x3a66, 0x8, 0x8000, 0x6, 0x9, 0x2, 0x4, 0x7caa29db, 0x8000, 0x7, 0x4, 0x10, 0x3ff, 0x8, 0x7, 0x4, 0x1, 0x4, 0xce6d, 0x1, 0x6, 0x6d, 0x2, 0x8, 0x10000, 0xfffffff8, 0x7f, 0xe709, 0x2, 0x200, 0x90d3, 0x4, 0xffff2b69, 0x2, 0x10, 0x6, 0xe, 0x40c, 0x1, 0x8, 0x3, 0x7f, 0x36, 0x80000001, 0x0, 0x7fffffff, 0x4, 0x100, 0x4, 0x4, 0x3, 0x7, 0x8, 0x80000001, 0xfffffc00, 0xbb6e, 0x4, 0x2, 0x5, 0x101, 0xfffffff9, 0x9, 0x5, 0x3014, 0x7, 0x4, 0x9, 0x5, 0x81, 0x1, 0xfffffff7, 0x0, 0x0, 0x7, 0x6, 0x5, 0x754cc1cd, 0x2, 0x5, 0x7, 0x2, 0x9, 0x2, 0x0, 0x4, 0xfff, 0xc34a, 0x4, 0x7, 0x1, 0xe, 0x2, 0x0, 0x80000000, 0x4, 0x0, 0x7, 0x800, 0x6, 0x7, 0x2, 0x6, 0x1, 0x80, 0x9, 0x200, 0xd, 0x10000, 0xa, 0x0, 0x0, 0x80000001, 0x5, 0xd, 0x6, 0x5, 0xb860, 0x7, 0x8000, 0x2, 0x5, 0x98, 0x6, 0xf27, 0xfffffffd, 0xae, 0x8, 0x1, 0xfffffffe, 0x46, 0x6ecd, 0x3, 0x7fffffff, 0xd30b, 0x3a000000, 0xffffffff, 0x60ad, 0x5, 0x4, 0x5, 0x80000000, 0x401, 0xffffffff, 0x45, 0x1, 0x1, 0x0, 0xf, 0xe, 0x3, 0x7, 0x9, 0x2, 0xffffff08, 0x800, 0x6, 0x3, 0x5, 0x5, 0x250, 0x5, 0x0, 0x7, 0x8, 0x82f, 0xc52, 0xdd, 0x8001, 0xec, 0x5, 0x9, 0x4, 0x10000, 0x5a7b, 0x0, 0xa32, 0x5, 0x6, 0x8, 0x1, 0x2, 0x7, 0x9]}]}]}}]}, 0x1644}}, 0x20040054) 1.490912068s ago: executing program 1 (id=6500): socket$inet_udp(0x2, 0x2, 0x0) 1.272800989s ago: executing program 1 (id=6501): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket(0xa, 0x3, 0x87) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'ipvlan0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={@remote, 0x10002e, r2}) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a010400000000000000000200ffff400004803c0001800b00010065787468647200002c000280050002008300000008000340000000d50800044000000000080006400000000208000140000000130900010073797a30000000000900020073797a32"], 0x94}}, 0x8000) 1.206420715s ago: executing program 3 (id=6502): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80003, 0x0) write(r1, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) r2 = socket(0x10, 0x80003, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(r3, &(0x7f0000000000)={0x0, 0x7, &(0x7f0000000040)={&(0x7f0000000140)={0x14, r4, 0x301, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x404c880) write(r2, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000540)=0x80) ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f0000000840)) socket$kcm(0x2, 0x3, 0x2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000780)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x5}, 0x50) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000040), 0x4) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40845}, 0x24044000) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x90, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0x9}, {}, {0x7, 0x10}}, [@TCA_RATE={0x6, 0x5, {0x81, 0x7}}, @filter_kind_options=@f_route={{0xa}, {0x58, 0x2, [@TCA_ROUTE4_ACT={0x54, 0x6, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x4}, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x40}, 0x2008c014) syz_genetlink_get_family_id$devlink(0x0, r1) 1.023426447s ago: executing program 0 (id=6503): r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x2b, 0x3, 0x3) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5) getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=@delchain={0x44, 0x2c, 0xf31, 0x0, 0x2000, {0x0, 0x0, 0x0, r6, {}, {0xfff2, 0xffff}, {0xffff, 0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x2}, @TCA_FLOWER_CLASSID={0x8, 0x1, {0x23ea5d1b09597025, 0xd}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008854}, 0x4010) sendmsg$nl_route(r4, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@ipv4_delrule={0x2c, 0x21, 0x300, 0x70bd2a, 0x25dfdbfe, {0x2, 0x20, 0x14, 0x10, 0x1, 0x0, 0x0, 0x2, 0x5}, [@FRA_GENERIC_POLICY=@FRA_GOTO={0x8, 0x4, 0x6}, @FRA_FLOW={0x8, 0xb, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc00}, 0x1) sendmsg$NL80211_CMD_SET_CHANNEL(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="01002dbd7000fbdbdf254100000008000300", @ANYRES32=r3], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4090) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x7, &(0x7f0000000100)=0x6, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000380)={&(0x7f0000000780)={0x1d, r7}, 0x10, &(0x7f0000000700)={&(0x7f0000000000)=@can={{0x0, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x4, 0x0, "36e932c486d21bdc"}, 0x10}, 0x1, 0x0, 0x0, 0x200848c0}, 0x884) 1.02219672s ago: executing program 1 (id=6504): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x66, 0x903, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xe, 0x7}, {0x2, 0xfff1}, {0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x24004804) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) connect$rose(r4, &(0x7f0000000140)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40) r8 = openat$cgroup_int(r7, &(0x7f00000000c0)='hugetlb.2MB.limit_in_bytes\x00', 0x2, 0x0) write$cgroup_int(r8, &(0x7f0000000440)=0x51e, 0x12) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0xa0, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0x8c, 0x1, [@m_gact={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xfffffffffffffed0}}}, @m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x2, 0x5f, 0x0, 0x101, 0x8cb8}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x6}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x3}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0xa0}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$unix(0x1, 0x1, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) (async) socket(0x400000000010, 0x3, 0x0) (async) socket$unix(0x1, 0x5, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x66, 0x903, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xe, 0x7}, {0x2, 0xfff1}, {0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x24004804) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) connect$rose(r4, &(0x7f0000000140)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40) (async) openat$cgroup_int(r7, &(0x7f00000000c0)='hugetlb.2MB.limit_in_bytes\x00', 0x2, 0x0) (async) write$cgroup_int(r8, &(0x7f0000000440)=0x51e, 0x12) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0xa0, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0x8c, 0x1, [@m_gact={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xfffffffffffffed0}}}, @m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x2, 0x5f, 0x0, 0x101, 0x8cb8}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x6}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x3}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0xa0}}, 0x0) (async) 930.142685ms ago: executing program 4 (id=6505): unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e20}, {0x2, 0x4e20, @multicast1}, {0x2, 0x2, @empty}, 0x248, 0x0, 0x0, 0x0, 0xfff5, 0x0, 0x0, 0x4, 0x80}) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-arm\x00'}, 0x58) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x4c, 0x3, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000400}, 0x4000810) close(r1) r2 = socket$kcm(0x2b, 0x1, 0x0) close(r2) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000002c0)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(twofish-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$unix(r4, &(0x7f00000092c0)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000700)="c3379fa6", 0x4}], 0x1, &(0x7f0000000a40)=ANY=[], 0xd0, 0x24044040}}], 0x1, 0x24048821) recvmsg$unix(r4, &(0x7f0000000cc0)={0x0, 0x0, 0x0}, 0x40000080) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004040) setsockopt$sock_attach_bpf(r1, 0x1, 0xd, &(0x7f0000000080), 0x2cb) close(r2) 409.450892ms ago: executing program 0 (id=6506): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000100)=0x9, 0x4) (async) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x439a, 0x4) (async) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x4e20, 0xffffffff, @loopback, 0xbf}, 0x1c) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x405, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x48}}, 0x0) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000f40)=0x6c, 0x4) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}, 0xffff78a9}], 0x1, 0x2020, 0x0) 321.316663ms ago: executing program 3 (id=6507): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=@framed, &(0x7f0000000300)='GPL\x00'}, 0x80) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r1, r2, 0x25, 0x4, @val=@uprobe_multi={0x0, 0x0, 0x0, 0xff}}, 0x40) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa33"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) (async, rerun: 64) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) (rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2, 0x31}, 0x48) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) (async, rerun: 64) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f0000000280)=@assoc_value={0x0}, &(0x7f0000000880)=0x8) (async) r6 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r6, &(0x7f0000000c00)=[{{&(0x7f0000000140)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000240)='P', 0x1}], 0x1}}, {{&(0x7f0000000180)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f00000004c0)="89", 0x1}], 0x1}}], 0x2, 0x0) (async) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r6, 0x84, 0x17, &(0x7f0000001140)=@sack_info={r5, 0xef, 0x6}, 0xc) r7 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r7, 0x84, 0x85, 0x0, 0x0) (async, rerun: 64) r8 = socket$kcm(0x10, 0x2, 0x0) (rerun: 64) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x3, 0xc, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) (async) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r8, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, 0x0) (async) ioctl$XFS_IOC_START_COMMIT(r9, 0x80585882, &(0x7f0000000340)) r10 = socket$kcm(0x10, 0x2, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="50000000090601020000000000000000030000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0c00148008000140ac1414190c000280080001"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5758661d46}, 0x4) sendmsg$kcm(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001206", 0x2e}], 0x1}, 0x48000) socket$igmp6(0xa, 0x3, 0x2) (async) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="01002bbd7000fddbdf251b00000008009a0001000000", @ANYRES32], 0x24}}, 0x40004) 262.897348ms ago: executing program 1 (id=6508): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0xc5) ioctl$SIOCAX25ADDUID(r1, 0x89e1, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1c, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffb}}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x9c, &(0x7f0000001300)=""/156, 0x41000, 0xa}, 0x94) 211.149966ms ago: executing program 0 (id=6509): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006d00000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x41}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCGARP(r3, 0x8954, &(0x7f0000000080)={{0x2, 0x4e21, @empty}, {0x0, @random="4d8ab36b2919"}, 0x6, {0x2, 0x4e20, @remote}, 'lo\x00'}) (async, rerun: 32) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) (async, rerun: 32) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)={0x2, 0x13, 0x7, 0x6, 0x5, 0x0, 0x70bd27, 0x25dfdbfc, [@sadb_address={0x3, 0x17, 0x32, 0xa0, 0x0, @in={0x2, 0x4e22, @local}}]}, 0x28}}, 0x0) (async, rerun: 32) r5 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000000)="e097566f5bec64466cf0925782dd", 0x0, 0x8c9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=ANY=[@ANYBLOB="4000000010000108fdffffff0000000800000000", @ANYRES32=0x0, @ANYBLOB="000000002104020008001b000000000010001a800800028079a1cf038b1e946f050027"], 0x40}, 0x1, 0x0, 0x0, 0x4040000}, 0x8024) 187.950642ms ago: executing program 1 (id=6510): r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) clock_gettime(0x37ad3e8caf423423, 0x0) getsockopt$netrom_NETROM_T2(r1, 0x103, 0x42000004, 0x0, &(0x7f0000000080)) ioctl$SIOCNRDECOBS(r1, 0x89e2) bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'ccm-aes-ce\x00'}, 0x55) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb01001800000000000000200000002000000004000000000000000000000d0aaa00000000000001000006"], &(0x7f0000000f40)=""/4089, 0x3c, 0xff9, 0x1, 0xfffffffa}, 0x28) close(0x3) 0s ago: executing program 3 (id=6511): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) ioctl(r0, 0x8, &(0x7f00000005c0)) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f0000000580)={&(0x7f00000000c0), 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, 0x0, 0x0, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x44000}, 0x4001) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e00)=@newqdisc={0x40, 0x24, 0xd0f, 0x10, 0x25dfdbfb, {0x60, 0x0, 0x0, r3, {0x10}, {0xffff, 0xffff}, {0xc}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x14, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x8, 0x4, 0xfffff5cc}, @TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x1}]}}]}, 0x40}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000300)=ANY=[@ANYBLOB="18080000000000800000000080000100851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000003c08010000000000180000000000000000000000000095000000000000000000000000000000dda84b37eb22b410fbc9c48a3306fe78e24758468e2ba0f4fbec54265a22ea9b6bf04d5d20bdd7161eee7b49a6836ec3a127d542133f6cd26326250b30fd00054501108306b858c6b676687c181c8358d44d6a3e1dae71075799c19017871d6a993d3d343687422651fd6c1c4bd871e1ac5f74c6fa64c1ff8eab822597dafda22381e5149802992af4069493254b"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) r4 = accept(0xffffffffffffffff, &(0x7f0000000100)=@nfc, &(0x7f0000000180)=0x80) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r4, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r5, 0x100, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x48050}, 0x8000) kernel console output (not intermixed with test programs): 738.904377][T26807] block nbd0: server does not support multiple connections per device. [ 738.913209][T26807] block nbd0: shutting down sockets [ 739.004639][T26809] block nbd5: server does not support multiple connections per device. [ 739.013366][T26809] block nbd5: shutting down sockets [ 740.721327][T26823] __nla_validate_parse: 1 callbacks suppressed [ 740.721346][T26823] netlink: 87 bytes leftover after parsing attributes in process `syz.1.5231'. [ 740.782916][T26827] netlink: 87 bytes leftover after parsing attributes in process `syz.1.5231'. [ 740.807381][T26825] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5232'. [ 740.825345][T26830] syzkaller0: entered promiscuous mode [ 740.837935][T26830] syzkaller0: entered allmulticast mode [ 740.851511][T26831] netlink: 'syz.2.5233': attribute type 10 has an invalid length. [ 740.899949][T26831] team0: left allmulticast mode [ 740.911406][T26831] team_slave_1: left allmulticast mode [ 740.925411][T26831] bond3: left allmulticast mode [ 740.931065][T26831] team0: left promiscuous mode [ 740.937321][T26831] team_slave_1: left promiscuous mode [ 740.943042][T26831] bond3: left promiscuous mode [ 740.948800][T26831] bridge0: port 3(team0) entered disabled state [ 740.975707][T26831] 8021q: adding VLAN 0 to HW filter on device team0 [ 740.983000][T26840] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.5237'. [ 740.999590][T26840] skbuff: bad partial csum: csum=65535/2 headroom=212 headlen=65543 [ 741.013119][T26834] netlink: 104 bytes leftover after parsing attributes in process `syz.0.5235'. [ 741.106146][T26848] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5239'. [ 741.117426][T26848] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5239'. [ 741.136854][T26850] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.5240'. [ 741.146671][T26850] ksmbd: Unknown IPC event: 1, ignore. [ 741.500381][T26872] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5247'. [ 741.531582][T26871] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5247'. [ 741.672989][T26885] openvswitch: netlink: IP tunnel dst address not specified [ 742.061960][T26900] netlink: 'syz.0.5255': attribute type 10 has an invalid length. [ 742.115185][T26903] tipc: Enabled bearer , priority 0 [ 742.123544][T26903] syzkaller0: entered promiscuous mode [ 742.131291][T26903] syzkaller0: entered allmulticast mode [ 742.165010][T26902] tipc: Resetting bearer [ 742.190727][T26902] tipc: Disabling bearer [ 742.727136][T26938] syzkaller0: entered promiscuous mode [ 742.736744][T26938] syzkaller0: entered allmulticast mode [ 743.163355][T26964] lo speed is unknown, defaulting to 1000 [ 743.185825][T26970] netlink: 'syz.0.5271': attribute type 12 has an invalid length. [ 743.218002][T26969] netlink: 'syz.1.5273': attribute type 21 has an invalid length. [ 743.262875][T26969] netlink: 'syz.1.5273': attribute type 5 has an invalid length. [ 743.458776][T26981] sctp: [Deprecated]: syz.1.5275 (pid 26981) Use of struct sctp_assoc_value in delayed_ack socket option. [ 743.458776][T26981] Use struct sctp_sack_info instead [ 743.630247][T26964] wg1 speed is unknown, defaulting to 1000 [ 743.783298][T26999] netlink: 'syz.2.5279': attribute type 1 has an invalid length. [ 743.868096][T26999] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 743.993666][T27011] netlink: 'syz.3.5282': attribute type 1 has an invalid length. [ 744.017597][T26964] lo speed is unknown, defaulting to 1000 [ 744.090973][T27011] bond10: entered promiscuous mode [ 744.097492][T27011] 8021q: adding VLAN 0 to HW filter on device bond10 [ 744.130607][T27020] 8021q: adding VLAN 0 to HW filter on device bond10 [ 744.139670][T27020] bond10: (slave wireguard1): The slave device specified does not support setting the MAC address [ 744.150857][T27020] bond10: (slave wireguard1): Setting fail_over_mac to active for active-backup mode [ 744.170707][T27020] bond10: (slave wireguard1): making interface the new active one [ 744.179215][T27020] wireguard1: entered promiscuous mode [ 744.187230][T27020] bond10: (slave wireguard1): Enslaving as an active interface with an up link [ 744.213923][T27019] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 744.478093][T27030] pim6reg: entered allmulticast mode [ 744.501747][T27038] bond0: (slave bond_slave_0): Releasing backup interface [ 744.525662][T27038] bond0: (slave bond_slave_1): Releasing backup interface [ 744.547172][T27038] team0: Port device team_slave_0 removed [ 744.559928][T27038] team0: Port device team_slave_1 removed [ 744.568738][T27043] netlink: 'syz.2.5286': attribute type 1 has an invalid length. [ 744.581269][T27038] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 744.596818][T27038] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 744.621179][T27038] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 744.717650][T27050] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 744.974427][T27044] bond11: option primary_reselect: invalid value (133) [ 744.989215][T27044] bond11 (unregistering): Released all slaves [ 745.096201][T27048] gretap2: entered allmulticast mode [ 745.160247][T27051] syzkaller1: entered promiscuous mode [ 745.203413][T27051] syzkaller1: entered allmulticast mode [ 745.357294][T27029] pim6reg: left allmulticast mode [ 745.766589][T27081] __nla_validate_parse: 14 callbacks suppressed [ 745.766611][T27081] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5296'. [ 745.799670][T27070] syz_tun (unregistering): left allmulticast mode [ 745.903002][T27075] lo speed is unknown, defaulting to 1000 [ 746.332175][T27092] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5299'. [ 746.409356][T27075] wg1 speed is unknown, defaulting to 1000 [ 746.442405][T27092] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5299'. [ 746.459890][T27097] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 746.783148][T27075] lo speed is unknown, defaulting to 1000 [ 746.851081][T27105] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5303'. [ 746.870751][T27105] netlink: 'syz.0.5303': attribute type 30 has an invalid length. [ 747.019477][T13265] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 747.042650][T13265] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 747.068082][T13265] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 747.089828][T13265] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 748.182565][T27129] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 748.200518][T27129] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 748.936165][T27154] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5314'. [ 748.947347][T27154] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5314'. [ 749.157496][T27167] syzkaller0: entered promiscuous mode [ 749.171896][T27167] syzkaller0: entered allmulticast mode [ 749.338862][T27177] netlink: 196 bytes leftover after parsing attributes in process `syz.2.5327'. [ 749.721772][T27207] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5332'. [ 749.744366][T27207] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5332'. [ 749.759763][T27207] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5332'. [ 749.854962][T27213] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 749.979570][T27224] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 750.025274][T27226] netlink: 'syz.4.5338': attribute type 7 has an invalid length. [ 750.062664][T27228] syzkaller0: entered promiscuous mode [ 750.075441][T27228] syzkaller0: entered allmulticast mode [ 750.111339][T27228] netlink: 'syz.3.5339': attribute type 5 has an invalid length. [ 750.317357][T27246] netlink: 'syz.4.5343': attribute type 1 has an invalid length. [ 750.340907][T27246] netlink: 'syz.4.5343': attribute type 1 has an invalid length. [ 750.975068][T27285] __nla_validate_parse: 13 callbacks suppressed [ 750.975089][T27285] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.5354'. [ 751.146637][T27291] atomic_op ffff8880442bb198 conn xmit_atomic 0000000000000000 [ 751.280193][T27291] netlink: 'syz.1.5357': attribute type 1 has an invalid length. [ 751.321261][T27291] netlink: 'syz.1.5357': attribute type 2 has an invalid length. [ 751.345037][T27291] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5357'. [ 751.375793][T27298] x_tables: duplicate underflow at hook 1 [ 751.645345][T27317] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 751.886355][T27324] IPVS: length: 24 != 43032 [ 752.097134][T27331] lo speed is unknown, defaulting to 1000 [ 752.137574][T27329] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5365'. [ 752.151477][T27336] netlink: 192 bytes leftover after parsing attributes in process `syz.4.5366'. [ 752.310500][T27339] sctp: [Deprecated]: syz.2.5368 (pid 27339) Use of struct sctp_assoc_value in delayed_ack socket option. [ 752.310500][T27339] Use struct sctp_sack_info instead [ 752.393038][T27339] syzkaller0: entered promiscuous mode [ 752.406431][T27339] syzkaller0: entered allmulticast mode [ 752.672539][T27332] lo speed is unknown, defaulting to 1000 [ 752.672556][T27331] wg1 speed is unknown, defaulting to 1000 [ 752.743471][T27341] syzkaller1: entered promiscuous mode [ 752.769758][T27341] syzkaller1: entered allmulticast mode [ 752.935637][T27350] dummy0: entered promiscuous mode [ 752.969318][T27352] SET target dimension over the limit! [ 752.977902][T27349] dummy0: left promiscuous mode [ 753.475000][T27367] syzkaller0: entered promiscuous mode [ 753.489950][T27367] syzkaller0: entered allmulticast mode [ 753.519797][T27332] wg1 speed is unknown, defaulting to 1000 [ 753.519830][T27331] lo speed is unknown, defaulting to 1000 [ 755.720673][T27332] lo speed is unknown, defaulting to 1000 [ 756.609520][T27419] syzkaller1: tun_chr_ioctl cmd 35108 [ 756.767506][T27426] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5389'. [ 756.871053][T27430] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5389'. [ 756.888283][T27431] IPVS: set_ctl: invalid protocol: 58 10.1.1.1:20002 [ 757.108592][T27430] bond10: entered promiscuous mode [ 757.115685][T27430] 8021q: adding VLAN 0 to HW filter on device bond10 [ 757.145564][T27430] bond10 (unregistering): Released all slaves [ 757.319400][T27453] netlink: 'syz.0.5395': attribute type 4 has an invalid length. [ 757.328878][T27453] netlink: 17 bytes leftover after parsing attributes in process `syz.0.5395'. [ 757.346234][T27453] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 757.421858][T27457] netlink: 'syz.2.5396': attribute type 11 has an invalid length. [ 757.431362][T27457] netlink: 199828 bytes leftover after parsing attributes in process `syz.2.5396'. [ 758.017559][T27496] netlink: 'syz.1.5407': attribute type 1 has an invalid length. [ 758.068959][T27498] netlink: 88 bytes leftover after parsing attributes in process `syz.3.5406'. [ 758.084875][T27498] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5406'. [ 758.261008][T27501] syzkaller0: entered promiscuous mode [ 758.284747][T27501] syzkaller0: entered allmulticast mode [ 758.343876][T27507] netlink: 840 bytes leftover after parsing attributes in process `syz.1.5409'. [ 758.502802][T27512] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 758.515965][T27516] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5411'. [ 758.522492][T27512] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 758.721178][T27525] netlink: 9 bytes leftover after parsing attributes in process `syz.4.5413'. [ 758.758827][T27525] .70·X: renamed from hsr0 [ 758.796697][T27525] .70·X: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 758.864589][T27525] .70·X: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 758.929996][T27525] .70·X: entered allmulticast mode [ 758.957449][T27525] hsr_slave_0: entered allmulticast mode [ 758.963287][T27525] hsr_slave_1: entered allmulticast mode [ 759.006245][T27525] A link change request failed with some changes committed already. Interface .70·X may have been left with an inconsistent configuration, please check. [ 759.111251][T27547] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5415'. [ 759.285069][ T1222] lo speed is unknown, defaulting to 1000 [ 759.290950][T21704] syz1: Port: 1 Link DOWN [ 759.348053][T27553] netlink: 'syz.3.5418': attribute type 5 has an invalid length. [ 759.567556][T27562] FAULT_INJECTION: forcing a failure. [ 759.567556][T27562] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 759.596842][T27562] CPU: 1 UID: 0 PID: 27562 Comm: syz.1.5421 Not tainted syzkaller #0 PREEMPT(full) [ 759.596876][T27562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 759.596891][T27562] Call Trace: [ 759.596900][T27562] [ 759.596909][T27562] dump_stack_lvl+0xe8/0x150 [ 759.596951][T27562] should_fail_ex+0x412/0x560 [ 759.596993][T27562] _copy_from_user+0x2d/0xb0 [ 759.597021][T27562] do_sock_getsockopt+0x200/0x7e0 [ 759.597054][T27562] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 759.597096][T27562] ? __fget_files+0x3a0/0x420 [ 759.597119][T27562] ? __fget_files+0x2a/0x420 [ 759.597150][T27562] __x64_sys_getsockopt+0x1a4/0x240 [ 759.597181][T27562] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 759.597206][T27562] do_syscall_64+0x15f/0xf80 [ 759.597246][T27562] ? trace_irq_disable+0x3b/0x140 [ 759.597276][T27562] ? clear_bhb_loop+0x40/0x90 [ 759.597304][T27562] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 759.597327][T27562] RIP: 0033:0x7f426f39cdd9 [ 759.597347][T27562] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 759.597368][T27562] RSP: 002b:00007f42702cb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 759.597392][T27562] RAX: ffffffffffffffda RBX: 00007f426f615fa0 RCX: 00007f426f39cdd9 [ 759.597409][T27562] RDX: 000000000000006c RSI: 0000000000000084 RDI: 0000000000000004 [ 759.597423][T27562] RBP: 00007f42702cb090 R08: 0000200000000280 R09: 0000000000000000 [ 759.597449][T27562] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000001 [ 759.597461][T27562] R13: 00007f426f616038 R14: 00007f426f615fa0 R15: 00007fff3c958068 [ 759.597492][T27562] [ 759.977254][T27577] 8021q: adding VLAN 0 to HW filter on device bond11 [ 759.986279][T27577] team0: Port device bond11 added [ 760.208775][T27598] netlink: 'syz.2.5430': attribute type 10 has an invalid length. [ 760.250928][T27598] team0: Port device dummy0 added [ 760.280548][T27598] netlink: 'syz.2.5430': attribute type 10 has an invalid length. [ 760.331790][T27598] team0: Port device dummy0 removed [ 760.926040][T27646] netlink: 'syz.0.5442': attribute type 1 has an invalid length. [ 760.935816][T27638] lo speed is unknown, defaulting to 1000 [ 761.018297][T27646] 8021q: adding VLAN 0 to HW filter on device bond9 [ 761.068521][T27648] vlan0: entered allmulticast mode [ 761.085674][T27648] bond9: entered allmulticast mode [ 761.131194][T27646] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 761.169641][T27652] bond9: (slave geneve4): making interface the new active one [ 761.198708][T27652] geneve4: entered allmulticast mode [ 761.225593][T27652] bond9: (slave geneve4): Enslaving as an active interface with an up link [ 761.255367][ T135] netdevsim netdevsim0 eth0: set [1, 2] type 2 family 0 port 6081 - 0 [ 761.324264][ T135] netdevsim netdevsim0 eth1: set [1, 2] type 2 family 0 port 6081 - 0 [ 761.334479][ T135] netdevsim netdevsim0 eth2: set [1, 2] type 2 family 0 port 6081 - 0 [ 761.343734][T27638] wg1 speed is unknown, defaulting to 1000 [ 761.361276][ T135] netdevsim netdevsim0 eth3: set [1, 2] type 2 family 0 port 6081 - 0 [ 761.715197][T27638] lo speed is unknown, defaulting to 1000 [ 761.907104][T27682] __nla_validate_parse: 5 callbacks suppressed [ 761.907124][T27682] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5455'. [ 762.207892][T27692] tc_dump_action: action bad kind [ 762.294933][T27698] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5457'. [ 762.401504][T27692] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5456'. [ 762.517420][T27709] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5460'. [ 762.554302][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 762.678846][T27716] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5462'. [ 762.708506][T27709] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5460'. [ 762.723944][T27711] bond7: (slave geneve5): Enslaving as an active interface with an up link [ 762.768613][T13264] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 762.784256][T27709] 8021q: adding VLAN 0 to HW filter on device bond7 [ 762.792017][T13264] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 762.819311][T13264] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 762.848049][T13264] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 762.900574][T27724] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5465'. [ 762.955179][T27726] netlink: 'syz.3.5466': attribute type 2 has an invalid length. [ 762.994021][T27726] netlink: 'syz.3.5466': attribute type 1 has an invalid length. [ 763.047851][T27731] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5468'. [ 763.094809][T27731] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5468'. [ 763.150172][T27736] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5466'. [ 763.633830][T27748] lo speed is unknown, defaulting to 1000 [ 763.683009][T27756] dvmrp6: entered allmulticast mode [ 764.249392][T27799] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 764.394720][T27807] netlink: 'syz.1.5488': attribute type 2 has an invalid length. [ 764.521155][T27748] wg1 speed is unknown, defaulting to 1000 [ 764.523673][T27814] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 764.696100][T27829] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 764.811065][T27811] nbd: socks must be embedded in a SOCK_ITEM attr [ 764.854863][T26204] block nbd64: NBD_DISCONNECT [ 764.866848][T27818] nbd: device at index 64 is going down [ 764.938906][T27840] openvswitch: netlink: Flow key attr not present in new flow. [ 765.229123][T26204] udevd[26204]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 765.373097][T27748] lo speed is unknown, defaulting to 1000 [ 765.382156][T27853] bridge0: entered allmulticast mode [ 765.424385][T27853] bridge0: left allmulticast mode [ 765.585841][T27857] netlink: 'syz.1.5498': attribute type 5 has an invalid length. [ 766.439875][T27877] netlink: 'syz.4.5504': attribute type 22 has an invalid length. [ 766.468523][T27877] netlink: 'syz.4.5504': attribute type 22 has an invalid length. [ 767.003398][T27895] lo speed is unknown, defaulting to 1000 [ 767.315702][T13264] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 767.344758][T13264] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 53710 - 0 [ 767.354528][T13264] netdevsim netdevsim0 eth0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 767.368995][T13264] netdevsim netdevsim0 eth0: unset [1, 2] type 2 family 0 port 6081 - 0 [ 767.383004][T13264] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 767.412848][T13264] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 53710 - 0 [ 767.431521][T13264] netdevsim netdevsim0 eth1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 767.464320][T13264] netdevsim netdevsim0 eth1: unset [1, 2] type 2 family 0 port 6081 - 0 [ 767.486084][T27895] wg1 speed is unknown, defaulting to 1000 [ 767.487637][T13264] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 767.525783][T13264] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 53710 - 0 [ 767.570604][T13264] netdevsim netdevsim0 eth2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 767.616987][T13264] netdevsim netdevsim0 eth2: unset [1, 2] type 2 family 0 port 6081 - 0 [ 767.640322][T27918] netlink: 'syz.4.5514': attribute type 21 has an invalid length. [ 767.652820][T13264] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 767.682147][T13264] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 53710 - 0 [ 767.694566][T13264] netdevsim netdevsim0 eth3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 767.703144][T13264] netdevsim netdevsim0 eth3: unset [1, 2] type 2 family 0 port 6081 - 0 [ 767.712960][T27918] __nla_validate_parse: 17 callbacks suppressed [ 767.712976][T27918] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5514'. [ 767.730511][T27918] netlink: 'syz.4.5514': attribute type 1 has an invalid length. [ 768.071132][T27942] xt_hashlimit: size too large, truncated to 1048576 [ 768.129933][T27895] lo speed is unknown, defaulting to 1000 [ 768.309709][T27955] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 768.663735][T27969] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5525'. [ 768.819534][T27975] IPv6: NLM_F_REPLACE set, but no existing node found! [ 768.932433][T27979] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5529'. [ 769.168892][T27982] lo speed is unknown, defaulting to 1000 [ 769.223932][T27992] tap0: tun_chr_ioctl cmd 21731 [ 769.259467][T27992] tipc: New replicast peer: 255.255.255.255 [ 769.272346][T27992] tipc: Enabled bearer , priority 5 [ 769.467497][T27996] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5532'. [ 769.702315][T28012] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5536'. [ 770.083719][T28027] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5540'. [ 770.141544][T27982] wg1 speed is unknown, defaulting to 1000 [ 770.160202][T28029] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5540'. [ 770.180531][T28015] bridge0: port 1(bridge_slave_0) entered disabled state [ 770.189025][T28029] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5540'. [ 770.203700][T28029] netlink: 'syz.3.5540': attribute type 11 has an invalid length. [ 770.216574][T28015] vlan2 (unregistering): left promiscuous mode [ 770.234419][T28015] bridge_slave_0 (unregistering): left promiscuous mode [ 770.246148][T28015] bridge0: port 3(vlan2) entered disabled state [ 770.290518][ T7603] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 770.310645][ T7603] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 770.338306][ T7603] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 770.359952][ T7603] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 770.377123][ T7603] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 770.386903][ T7603] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 770.403828][ T807] tipc: Node number set to 1681440008 [ 770.409825][ T7603] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 770.435809][ T7603] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 770.454127][ T7603] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 770.476282][ T7603] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 770.495063][ T7603] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 770.518134][ T7603] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 770.562376][T28036] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5543'. [ 770.649481][T27982] lo speed is unknown, defaulting to 1000 [ 770.775737][T28045] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5545'. [ 770.819414][T28048] netlink: 'syz.1.5546': attribute type 5 has an invalid length. [ 771.005032][T28052] xt_nat: multiple ranges no longer supported [ 771.641603][T28081] team0 (unregistering): Port device team_slave_0 removed [ 771.681316][T28081] team0 (unregistering): Port device team_slave_1 removed [ 771.740217][T28086] lo speed is unknown, defaulting to 1000 [ 771.743879][T28089] syzkaller0: entered promiscuous mode [ 771.770866][T28089] syzkaller0: entered allmulticast mode [ 772.445969][T28106] macvtap0: entered promiscuous mode [ 772.465383][T28106] macvtap0: entered allmulticast mode [ 772.479923][T28106] veth1_vlan: entered allmulticast mode [ 772.620741][T28086] wg1 speed is unknown, defaulting to 1000 [ 772.989778][T28086] lo speed is unknown, defaulting to 1000 [ 773.106846][T28134] __nla_validate_parse: 8 callbacks suppressed [ 773.106868][T28134] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5569'. [ 773.278746][T28140] netlink: 'syz.4.5571': attribute type 4 has an invalid length. [ 773.287565][T28140] netlink: 152 bytes leftover after parsing attributes in process `syz.4.5571'. [ 792.708611][T28174] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5582'. [ 792.803189][T28178] ip6gre2: entered promiscuous mode [ 792.812234][T28178] ip6gre2: entered allmulticast mode [ 792.821851][ T36] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 792.831482][T28178] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 792.840946][ T36] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 792.854350][T21699] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 792.886647][T28182] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5582'. [ 792.920278][T28174] veth7: entered promiscuous mode [ 792.961196][T28178] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5585'. [ 792.996854][T28178] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5585'. [ 793.082172][T28188] bond9 (unregistering): Released all slaves [ 793.123136][T28186] lo speed is unknown, defaulting to 1000 [ 793.134637][T21699] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 793.163816][T21699] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 793.343078][T28198] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5590'. [ 793.366797][T28196] tc_dump_action: action bad kind [ 793.695569][T28206] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5593'. [ 793.715779][T28205] delete_channel: no stack [ 793.850811][T28210] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5590'. [ 793.867902][T28186] wg1 speed is unknown, defaulting to 1000 [ 794.201521][T28220] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5596'. [ 794.394564][T28186] lo speed is unknown, defaulting to 1000 [ 794.533235][T28233] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5599'. [ 794.608285][T28233] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5599'. [ 794.670597][ T30] audit: type=1804 audit(1777118287.174:33): pid=28238 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.5600" name="/newroot/458/memory.events" dev="tmpfs" ino=2372 res=1 errno=0 [ 794.730115][ T30] audit: type=1800 audit(1777118287.174:34): pid=28238 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5600" name="memory.events" dev="tmpfs" ino=2372 res=0 errno=0 [ 794.752528][ T30] audit: type=1804 audit(1777118287.194:35): pid=28238 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.5600" name="/newroot/458/memory.events" dev="tmpfs" ino=2372 res=1 errno=0 [ 794.947174][T28244] netlink: 'syz.1.5604': attribute type 2 has an invalid length. [ 795.146003][T28249] netlink: 'syz.4.5605': attribute type 1 has an invalid length. [ 795.501847][T28249] 8021q: adding VLAN 0 to HW filter on device bond9 [ 795.903442][T28282] vlan0: entered allmulticast mode [ 795.909675][T28282] bond0: entered allmulticast mode [ 796.188288][T28296] netlink: 'syz.1.5618': attribute type 15 has an invalid length. [ 796.215418][T28296] netlink: 'syz.1.5618': attribute type 25 has an invalid length. [ 796.634324][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 796.740997][T28313] lo speed is unknown, defaulting to 1000 [ 797.005150][T28324] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 797.030723][T28324] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 797.456981][T28329] syzkaller0: entered promiscuous mode [ 797.478925][T28329] syzkaller0: entered allmulticast mode [ 797.510515][T28339] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 797.581833][T28313] wg1 speed is unknown, defaulting to 1000 [ 797.696044][T28351] netlink: 'syz.3.5633': attribute type 10 has an invalid length. [ 797.713507][T28351] 8021q: adding VLAN 0 to HW filter on device team0 [ 797.745502][T28351] team0: entered allmulticast mode [ 797.750787][T28351] bond11: entered allmulticast mode [ 797.757678][T28355] __nla_validate_parse: 7 callbacks suppressed [ 797.757692][T28355] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5633'. [ 797.761247][T28351] bond0: (slave team0): Enslaving as an active interface with an up link [ 797.819679][T28354] Bluetooth: hci3: Opcode 0x0401 failed: -4 [ 797.982947][T28313] lo speed is unknown, defaulting to 1000 [ 799.840325][ T5161] Bluetooth: hci3: command 0x0401 tx timeout [ 800.189485][T28381] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5640'. [ 800.297615][T28382] netlink: 'syz.2.5641': attribute type 3 has an invalid length. [ 800.323501][T28388] netlink: 72 bytes leftover after parsing attributes in process `syz.4.5640'. [ 800.353113][T28390] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5643'. [ 800.503068][T28392] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5641'. [ 800.572050][T28398] pim6reg1: entered promiscuous mode [ 800.586234][T28398] pim6reg1: entered allmulticast mode [ 800.603638][T28394] netlink: 'syz.1.5645': attribute type 1 has an invalid length. [ 800.821068][T28394] bond10: entered promiscuous mode [ 800.835239][T28394] 8021q: adding VLAN 0 to HW filter on device bond10 [ 800.922829][T28415] netlink: zone id is out of range [ 800.980002][T28401] bond10: (slave bridge5): making interface the new active one [ 800.998744][T28401] bridge5: entered promiscuous mode [ 801.005884][T28401] bond10: (slave bridge5): Enslaving as an active interface with an up link [ 801.038769][T28412] block nbd0: server does not support multiple connections per device. [ 801.051212][T28412] block nbd0: shutting down sockets [ 801.295416][T28427] lo speed is unknown, defaulting to 1000 [ 801.362837][T28434] Unsupported ieee802154 address type: 0 [ 801.383710][T28437] netlink: 'syz.1.5656': attribute type 1 has an invalid length. [ 801.402888][T28434] netlink: 340 bytes leftover after parsing attributes in process `syz.3.5655'. [ 801.426734][T28435] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5655'. [ 801.448077][T28437] bond11: entered promiscuous mode [ 801.455734][T28437] 8021q: adding VLAN 0 to HW filter on device bond11 [ 801.528663][T28437] ipvlan1: entered allmulticast mode [ 801.549545][T28437] bond11: entered allmulticast mode [ 801.603785][T28446] netlink: 676 bytes leftover after parsing attributes in process `syz.2.5658'. [ 801.645275][T28437] bond11: (slave bridge6): making interface the new active one [ 801.663111][T28437] bridge6: entered promiscuous mode [ 801.673371][T28437] bridge6: entered allmulticast mode [ 801.698480][T28437] bond11: (slave bridge6): Enslaving as an active interface with an up link [ 801.772857][T28452] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5660'. [ 801.803017][T28452] vlan1: entered allmulticast mode [ 801.813662][T28452] macvtap0: entered allmulticast mode [ 802.584006][T28427] wg1 speed is unknown, defaulting to 1000 [ 802.769231][T28472] netlink: 'syz.2.5664': attribute type 5 has an invalid length. [ 802.801290][T28472] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5664'. [ 802.881923][T28475] syzkaller1: entered promiscuous mode [ 802.888447][T28477] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5665'. [ 802.916368][T28475] syzkaller1: entered allmulticast mode [ 803.145169][T28427] lo speed is unknown, defaulting to 1000 [ 803.465849][T28498] lo speed is unknown, defaulting to 1000 [ 803.650467][T28515] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5675'. [ 803.697927][T28508] bond10 (unregistering): Released all slaves [ 803.913280][T28513] syzkaller1: entered promiscuous mode [ 803.947728][T28513] syzkaller1: entered allmulticast mode [ 804.147645][T28527] netlink: 76 bytes leftover after parsing attributes in process `syz.0.5678'. [ 804.288077][T28538] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5679'. [ 804.722491][T28555] syzkaller0: entered promiscuous mode [ 804.734689][T28555] syzkaller0: entered allmulticast mode [ 804.742058][T28558] IPVS: set_ctl: invalid protocol: 33 0.0.0.0:20003 [ 804.794227][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 804.812850][T28498] wg1 speed is unknown, defaulting to 1000 [ 805.298141][T28569] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5686'. [ 805.465941][T28498] lo speed is unknown, defaulting to 1000 [ 806.072941][T28569] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 806.125444][T28569] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5686'. [ 806.185885][T28618] Cannot find del_set index 4 as target [ 806.192886][T28569] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5686'. [ 806.448898][T28635] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5699'. [ 806.893848][T28644] ip6tnl0: Caught tx_queue_len zero misconfig [ 807.170502][T28654] netlink: 68 bytes leftover after parsing attributes in process `syz.0.5703'. [ 807.472219][T28658] lo speed is unknown, defaulting to 1000 [ 807.971027][T28661] lo speed is unknown, defaulting to 1000 [ 807.972648][T28658] wg1 speed is unknown, defaulting to 1000 [ 808.428991][T28692] lo speed is unknown, defaulting to 1000 [ 808.478827][T28661] wg1 speed is unknown, defaulting to 1000 [ 808.486713][T28658] lo speed is unknown, defaulting to 1000 [ 808.806841][T28692] wg1 speed is unknown, defaulting to 1000 [ 808.811043][T28661] lo speed is unknown, defaulting to 1000 [ 809.051569][T28692] lo speed is unknown, defaulting to 1000 [ 809.978637][T28666] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 810.208151][T28707] __nla_validate_parse: 3 callbacks suppressed [ 810.208170][T28707] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5710'. [ 810.334427][T28712] netlink: 84 bytes leftover after parsing attributes in process `syz.1.5710'. [ 810.439626][T28710] bond12 (unregistering): Released all slaves [ 810.818625][T28733] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5720'. [ 810.845000][T28735] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 811.151893][T28752] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 811.326129][T28756] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5725'. [ 811.406182][T28764] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 811.420940][T28767] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5728'. [ 811.530820][T28771] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5729'. [ 811.576803][T28771] netlink: 'syz.3.5729': attribute type 10 has an invalid length. [ 811.595955][T28771] vxcan1: entered allmulticast mode [ 811.606993][T28771] team0: Device vxcan1 is of different type [ 811.691459][T28773] lo speed is unknown, defaulting to 1000 [ 811.790501][T28787] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5733'. [ 812.076068][T28802] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5735'. [ 812.173241][T28773] wg1 speed is unknown, defaulting to 1000 [ 812.599355][T28816] bond10: Removing last arp target with arp_interval on [ 812.621645][T28773] lo speed is unknown, defaulting to 1000 [ 812.652655][T28819] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5741'. [ 813.092550][T28834] netlink: 204 bytes leftover after parsing attributes in process `syz.0.5745'. [ 813.577151][T28856] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 813.840887][T28875] netlink: 'syz.0.5756': attribute type 13 has an invalid length. [ 813.870746][T28875] netlink: 'syz.0.5756': attribute type 17 has an invalid length. [ 814.012724][T28875] 8021q: adding VLAN 0 to HW filter on device team0 [ 814.041711][T28875] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 816.862688][T28882] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 817.107005][T28932] __nla_validate_parse: 4 callbacks suppressed [ 817.107026][T28932] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.5765'. [ 817.127776][T28932] netlink: Conntrack attr type has unexpected length (type=2, length=0, expected=2) [ 817.159180][T28936] netlink: 'syz.4.5767': attribute type 14 has an invalid length. [ 817.193920][T28936] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5767'. [ 817.585028][T28962] tipc: Enabled bearer , priority 0 [ 817.606786][T28971] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 817.637656][T28961] tipc: Disabling bearer [ 817.828624][T28995] bridge_slave_0: default FDB implementation only supports local addresses [ 818.165549][T28999] Bluetooth: MGMT ver 1.23 [ 818.230132][T29020] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5781'. [ 818.479245][T29027] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5784'. [ 819.379417][ T5847] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 819.392434][ T5847] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 819.406604][ T5847] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 819.419168][ T5847] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 819.427013][ T5847] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 819.489698][T29067] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5794'. [ 819.498822][T29067] netlink: 260 bytes leftover after parsing attributes in process `syz.4.5794'. [ 819.597322][T29072] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5796'. [ 819.613646][T29061] lo speed is unknown, defaulting to 1000 [ 819.795772][T29073] 8021q: adding VLAN 0 to HW filter on device bond12 [ 819.840500][T29073] team0: Port device bond12 added [ 819.852200][T29075] netlink: 'syz.3.5797': attribute type 1 has an invalid length. [ 820.038546][T29089] netlink: 'syz.0.5796': attribute type 3 has an invalid length. [ 820.361880][T29061] wg1 speed is unknown, defaulting to 1000 [ 820.495828][T29111] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5804'. [ 820.835929][T29061] lo speed is unknown, defaulting to 1000 [ 820.935926][T29123] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5809'. [ 820.961712][T29123] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5809'. [ 821.025020][T29123] ip6gre3: entered promiscuous mode [ 821.033714][T29123] ip6gre3: entered allmulticast mode [ 821.205289][T13264] bridge_slave_1: left allmulticast mode [ 821.231415][T13264] bridge_slave_1: left promiscuous mode [ 821.252146][T13264] bridge0: port 2(bridge_slave_1) entered disabled state [ 821.279115][T13264] bridge_slave_0: left allmulticast mode [ 821.293458][T13264] bridge_slave_0: left promiscuous mode [ 821.307680][T13264] bridge0: port 1(bridge_slave_0) entered disabled state [ 821.514157][ T5847] Bluetooth: hci4: command tx timeout [ 821.777335][T28162] udevd[28162]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 822.265097][T13264] bond5 (unregistering): (slave geneve2): Releasing active interface [ 822.462139][T13264] bond2 (unregistering): (slave bridge1): Releasing backup interface [ 822.612212][T29165] __nla_validate_parse: 3 callbacks suppressed [ 822.612233][T29165] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5816'. [ 822.695338][T13264] team0: Port device bridge5 removed [ 822.826538][T29188] --map-set only usable from mangle table [ 822.957766][T13264] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 822.967885][ T7595] smbdirect: ib_dev[syz1] removed [ 822.976962][T13264] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 822.990044][T13264] bond0 (unregistering): Released all slaves [ 823.012998][T13264] bond1 (unregistering): Released all slaves [ 823.031057][T13264] bond2 (unregistering): Released all slaves [ 823.055841][T13264] team0: Port device bond3 removed [ 823.061896][T13264] bond3 (unregistering): Released all slaves [ 823.077039][T13264] bond4 (unregistering): Released all slaves [ 823.092619][T13264] bond5 (unregistering): Released all slaves [ 823.110158][T13264] bond6 (unregistering): Released all slaves [ 823.128497][T13264] bond7 (unregistering): Released all slaves [ 823.146300][T13264] bond8 (unregistering): Released all slaves [ 823.164514][T13264] bond9 (unregistering): Released all slaves [ 823.192455][ T5506] 8021q: adding VLAN 0 to HW filter on device eth1 [ 823.369272][T13264] : left promiscuous mode [ 823.480808][T13264] tipc: Disabling bearer [ 823.496557][T13264] tipc: Disabling bearer [ 823.502421][T13264] tipc: Left network mode [ 823.596476][ T5847] Bluetooth: hci4: command tx timeout [ 823.768235][T29203] netlink: 84 bytes leftover after parsing attributes in process `syz.1.5824'. [ 823.823948][T29211] netlink: 'syz.3.5825': attribute type 4 has an invalid length. [ 823.909912][T29216] netlink: 'syz.3.5825': attribute type 1 has an invalid length. [ 823.953591][T29061] chnl_net:caif_netlink_parms(): no params data found [ 824.191331][T29230] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5828'. [ 824.467672][T29236] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5831'. [ 824.750826][T29233] lo speed is unknown, defaulting to 1000 [ 824.877121][T29256] batman_adv: batadv0: Adding interface: macvtap1 [ 824.886489][T29256] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 824.916395][T29256] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 824.973422][ T5506] 8021q: adding VLAN 0 to HW filter on device eth2 [ 825.083947][T29261] bridge0: port 3(syz_tun) entered blocking state [ 825.124640][T29261] bridge0: port 3(syz_tun) entered disabled state [ 825.156746][T29261] syz_tun: entered allmulticast mode [ 825.166707][T29261] syz_tun: entered promiscuous mode [ 825.173508][T29061] bridge0: port 1(bridge_slave_0) entered blocking state [ 825.186525][T29061] bridge0: port 1(bridge_slave_0) entered disabled state [ 825.210364][T29061] bridge_slave_0: entered allmulticast mode [ 825.223780][T29061] bridge_slave_0: entered promiscuous mode [ 825.292927][T29061] bridge0: port 2(bridge_slave_1) entered blocking state [ 825.314199][T29061] bridge0: port 2(bridge_slave_1) entered disabled state [ 825.327902][T29061] bridge_slave_1: entered allmulticast mode [ 825.342249][T29061] bridge_slave_1: entered promiscuous mode [ 825.432652][T29233] wg1 speed is unknown, defaulting to 1000 [ 825.443863][T29061] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 825.475473][T29061] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 825.487103][T29266] lo speed is unknown, defaulting to 1000 [ 825.666690][T29061] team0: Port device team_slave_0 added [ 825.674282][ T5847] Bluetooth: hci4: command tx timeout [ 825.776544][T29061] team0: Port device team_slave_1 added [ 825.935081][T29061] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 825.953267][T29061] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 825.989662][T29061] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 826.103771][T29061] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 826.129198][T29061] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 826.225759][T29061] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 826.278161][T29233] lo speed is unknown, defaulting to 1000 [ 826.311156][T29266] wg1 speed is unknown, defaulting to 1000 [ 826.533681][T29061] hsr_slave_0: entered promiscuous mode [ 826.560476][T29061] hsr_slave_1: entered promiscuous mode [ 826.596500][T29061] debugfs: 'hsr0' already exists in 'hsr' [ 826.614227][T29061] Cannot create hsr debugfs directory [ 827.645662][ T5506] 8021q: adding VLAN 0 to HW filter on device eth3 [ 827.659711][T29266] lo speed is unknown, defaulting to 1000 [ 827.754848][ T5847] Bluetooth: hci4: command tx timeout [ 828.092187][T29329] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5848'. [ 828.427332][T29327] lo speed is unknown, defaulting to 1000 [ 828.933708][T29355] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5851'. [ 828.987030][T29355] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5851'. [ 829.349375][T29327] wg1 speed is unknown, defaulting to 1000 [ 829.949833][T29385] openvswitch: netlink: IP tunnel dst address not specified [ 829.986044][T29327] lo speed is unknown, defaulting to 1000 [ 830.098392][T29061] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 830.200061][T29061] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 830.290245][T29061] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 830.328388][T29061] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 830.371370][T29061] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 830.429626][T29061] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 830.581811][T29061] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 830.630171][T29061] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 830.660621][T29410] netlink: 'syz.0.5860': attribute type 21 has an invalid length. [ 830.668668][T29410] netlink: 128 bytes leftover after parsing attributes in process `syz.0.5860'. [ 830.857689][T29410] netlink: 'syz.0.5860': attribute type 4 has an invalid length. [ 830.910687][T29410] netlink: 'syz.0.5860': attribute type 5 has an invalid length. [ 830.927470][T29410] netlink: 3 bytes leftover after parsing attributes in process `syz.0.5860'. [ 831.132152][T29436] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5862'. [ 831.557811][T29441] syz_tun: entered allmulticast mode [ 831.616357][T29441] team0: Port device syz_tun added [ 831.946498][T29061] 8021q: adding VLAN 0 to HW filter on device bond0 [ 832.102451][T29458] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5864'. [ 832.123782][T29460] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5865'. [ 832.148674][T29458] veth0: Caught tx_queue_len zero misconfig [ 832.197044][T13264] hsr_slave_0: left promiscuous mode [ 832.219068][T13264] hsr_slave_1: left promiscuous mode [ 832.226212][T13264] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 832.240544][T13264] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 832.699184][T13264] team0 (unregistering): Port device team_slave_1 removed [ 832.893473][T29061] 8021q: adding VLAN 0 to HW filter on device team0 [ 832.901246][ T7595] smbdirect: ib_dev[syz2] removed [ 833.006593][ T7616] bridge0: port 1(bridge_slave_0) entered blocking state [ 833.013809][ T7616] bridge0: port 1(bridge_slave_0) entered forwarding state [ 833.080432][ T7616] bridge0: port 2(bridge_slave_1) entered blocking state [ 833.087680][ T7616] bridge0: port 2(bridge_slave_1) entered forwarding state [ 834.066417][T29488] ipvlan0: entered promiscuous mode [ 834.225127][T29491] lo speed is unknown, defaulting to 1000 [ 834.540584][T13264] IPVS: stop unused estimator thread 0... [ 834.913446][T29061] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 835.089725][T29061] veth0_vlan: entered promiscuous mode [ 835.148659][T29061] veth1_vlan: entered promiscuous mode [ 835.209892][T29491] wg1 speed is unknown, defaulting to 1000 [ 835.246823][T29061] veth0_macvtap: entered promiscuous mode [ 835.299910][T29548] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5878'. [ 835.340243][T29061] veth1_macvtap: entered promiscuous mode [ 835.418266][T29061] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 835.452129][T29061] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 835.479993][ T7616] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 835.510366][ T7616] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 835.536461][T29556] netlink: 'syz.4.5878': attribute type 1 has an invalid length. [ 835.555868][ T7616] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 835.593867][ T7616] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 835.828763][ T7616] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 835.843021][T29540] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 835.863547][ T7616] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 835.892531][T29563] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5880'. [ 835.968174][T29563] veth9: entered promiscuous mode [ 835.987335][T13265] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 836.003363][T13265] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 836.364984][T29575] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5882'. [ 836.398946][T29575] syzkaller1: tun_chr_ioctl cmd 35111 [ 836.502807][T29575] syzkaller1: tun_chr_ioctl cmd 2148553947 [ 837.000072][T29593] lo speed is unknown, defaulting to 1000 [ 837.096579][T29612] netlink: 'syz.2.5888': attribute type 1 has an invalid length. [ 837.126793][T29612] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5888'. [ 837.350630][ T5161] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 837.371336][ T5161] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 837.380927][ T5161] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 837.392122][ T5161] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 837.401814][ T5161] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 837.514680][T29619] bridge0: port 3(vlan2) entered blocking state [ 837.547645][T29619] bridge0: port 3(vlan2) entered disabled state [ 837.559559][T29619] vlan2: entered allmulticast mode [ 837.598189][T29619] geneve0: entered allmulticast mode [ 837.652924][T29619] vlan2: entered promiscuous mode [ 837.678116][T29619] geneve0: entered promiscuous mode [ 837.717740][T29624] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5891'. [ 837.749055][T17247] syz_tun (unregistering): left allmulticast mode [ 837.776986][T17247] team0: Port device syz_tun removed [ 837.891391][T29626] syzkaller1: entered promiscuous mode [ 837.904395][T29626] syzkaller1: entered allmulticast mode [ 837.918802][T29593] wg1 speed is unknown, defaulting to 1000 [ 837.967644][T29614] lo speed is unknown, defaulting to 1000 [ 838.477000][T29614] wg1 speed is unknown, defaulting to 1000 [ 838.676723][T29656] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5898'. [ 839.353368][T29675] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5903'. [ 839.434756][ T5847] Bluetooth: hci2: command tx timeout [ 839.577471][T29671] syzkaller1: entered promiscuous mode [ 839.583199][T29671] syzkaller1: entered allmulticast mode [ 839.595420][T29614] chnl_net:caif_netlink_parms(): no params data found [ 839.751565][T29614] bridge0: port 1(bridge_slave_0) entered blocking state [ 839.758940][T29614] bridge0: port 1(bridge_slave_0) entered disabled state [ 839.767287][T29614] bridge_slave_0: entered allmulticast mode [ 839.775337][T29614] bridge_slave_0: entered promiscuous mode [ 839.783279][T29614] bridge0: port 2(bridge_slave_1) entered blocking state [ 839.790880][T29614] bridge0: port 2(bridge_slave_1) entered disabled state [ 839.798531][T29614] bridge_slave_1: entered allmulticast mode [ 839.806440][T29614] bridge_slave_1: entered promiscuous mode [ 839.871920][T29614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 839.884881][T29614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 839.952305][T29614] team0: Port device team_slave_0 added [ 839.961330][T29614] team0: Port device team_slave_1 added [ 840.011463][T29614] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 840.018850][T29614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 840.046565][T29614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 840.060309][T29614] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 840.069167][T29614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 840.098231][T29614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 840.912073][T29614] hsr_slave_0: entered promiscuous mode [ 840.931143][T29614] hsr_slave_1: entered promiscuous mode [ 840.945671][T29614] debugfs: 'hsr0' already exists in 'hsr' [ 840.959817][T29614] Cannot create hsr debugfs directory [ 841.036223][T29716] netlink: 'syz.2.5909': attribute type 1 has an invalid length. [ 841.074092][T29716] netlink: 'syz.2.5909': attribute type 2 has an invalid length. [ 841.107157][T29721] netlink: 'syz.2.5909': attribute type 1 has an invalid length. [ 841.116776][T29721] netlink: 'syz.2.5909': attribute type 2 has an invalid length. [ 841.129295][T29724] netlink: 'syz.0.5911': attribute type 1 has an invalid length. [ 841.190243][T29725] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5911'. [ 841.225468][T29725] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5911'. [ 841.252094][T29724] bond11: entered promiscuous mode [ 841.260497][T29724] 8021q: adding VLAN 0 to HW filter on device bond11 [ 841.268208][T29712] lo speed is unknown, defaulting to 1000 [ 841.323053][T29730] bond11: (slave bridge6): making interface the new active one [ 841.339293][T29730] bridge6: entered promiscuous mode [ 841.346689][T29730] bond11: (slave bridge6): Enslaving as an active interface with an up link [ 841.386180][T29728] syzkaller1: entered promiscuous mode [ 841.391792][T29728] syzkaller1: entered allmulticast mode [ 841.526403][ T5847] Bluetooth: hci2: command tx timeout [ 841.587369][T29739] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5915'. [ 841.712415][T29712] wg1 speed is unknown, defaulting to 1000 [ 841.767591][T29743] netlink: 'syz.1.5917': attribute type 1 has an invalid length. [ 841.862846][T29746] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5917'. [ 841.971991][T29746] 8021q: adding VLAN 0 to HW filter on device bond13 [ 842.097042][T29751] block nbd0: server does not support multiple connections per device. [ 842.125300][T29751] block nbd0: shutting down sockets [ 843.208120][T29779] lo speed is unknown, defaulting to 1000 [ 843.452233][T29614] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 843.495964][T29614] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 843.510001][T29614] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 843.549566][T29614] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 843.606023][ T5847] Bluetooth: hci2: command tx timeout [ 843.662924][T29614] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 843.692583][T29614] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 843.740677][T29614] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 843.801431][T29614] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 844.239543][T29815] veth13: entered promiscuous mode [ 844.376384][T29614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 844.432141][T29614] 8021q: adding VLAN 0 to HW filter on device team0 [ 844.466653][ T7595] bridge0: port 1(bridge_slave_0) entered blocking state [ 844.473835][ T7595] bridge0: port 1(bridge_slave_0) entered forwarding state [ 844.537802][ T135] bridge0: port 2(bridge_slave_1) entered blocking state [ 844.545024][ T135] bridge0: port 2(bridge_slave_1) entered forwarding state [ 844.938863][T29779] wg1 speed is unknown, defaulting to 1000 [ 845.485256][T29614] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 845.674635][ T5847] Bluetooth: hci2: command tx timeout [ 845.702036][T29614] veth0_vlan: entered promiscuous mode [ 845.737655][T29614] veth1_vlan: entered promiscuous mode [ 845.740695][T29866] netlink: 424 bytes leftover after parsing attributes in process `syz.1.5939'. [ 845.862568][T29614] veth0_macvtap: entered promiscuous mode [ 845.913337][T29614] veth1_macvtap: entered promiscuous mode [ 845.986444][T29614] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 846.030895][T29614] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 846.178388][ T7595] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 846.199591][T29874] xt_hashlimit: size too large, truncated to 1048576 [ 846.294175][ T7595] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 846.332325][ T7595] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 846.383319][T13264] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 846.575698][T29885] syzkaller0: entered promiscuous mode [ 846.597617][T29885] syzkaller0: entered allmulticast mode [ 846.715279][T29880] 8021q: VLANs not supported on lo [ 846.767423][T29889] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5943'. [ 846.996758][T13264] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 847.022049][T13264] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 847.070080][T29896] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5945'. [ 847.122058][T13265] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 847.143207][T13265] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 847.649947][T29921] netlink: 203340 bytes leftover after parsing attributes in process `syz.2.5950'. [ 848.099269][T29943] netlink: 280 bytes leftover after parsing attributes in process `syz.2.5956'. [ 848.199050][ T5161] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 848.228103][ T5161] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 848.237945][ T5161] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 848.246446][ T5161] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 848.256646][ T5161] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 848.351991][T29945] lo speed is unknown, defaulting to 1000 [ 848.622518][T29945] wg1 speed is unknown, defaulting to 1000 [ 848.912547][T29945] chnl_net:caif_netlink_parms(): no params data found [ 848.992451][T29945] bridge0: port 1(bridge_slave_0) entered blocking state [ 848.999842][T29945] bridge0: port 1(bridge_slave_0) entered disabled state [ 849.007910][T29945] bridge_slave_0: entered allmulticast mode [ 849.017274][T29945] bridge_slave_0: entered promiscuous mode [ 849.025893][T29945] bridge0: port 2(bridge_slave_1) entered blocking state [ 849.033054][T29945] bridge0: port 2(bridge_slave_1) entered disabled state [ 849.040893][T29945] bridge_slave_1: entered allmulticast mode [ 849.048756][T29945] bridge_slave_1: entered promiscuous mode [ 849.078541][T29945] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 849.090544][T29945] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 849.122828][T29945] team0: Port device team_slave_0 added [ 849.132156][T29945] team0: Port device team_slave_1 added [ 849.157414][T29945] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 849.164711][T29945] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 849.191352][T29945] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 849.207789][T29945] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 849.215152][T29945] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 849.241912][T29945] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 849.286652][T29945] hsr_slave_0: entered promiscuous mode [ 849.293016][T29945] hsr_slave_1: entered promiscuous mode [ 849.299895][T29945] debugfs: 'hsr0' already exists in 'hsr' [ 849.306073][T29945] Cannot create hsr debugfs directory [ 850.298003][T29911] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 850.322706][ T5161] Bluetooth: hci5: command tx timeout [ 850.343242][T29945] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 850.390028][T29945] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 850.403959][T29945] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 850.421104][T29945] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 850.429255][T29945] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 850.448386][T29945] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 850.468187][T29945] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 850.502407][T29945] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 850.615453][T29984] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5960'. [ 850.635326][T29984] bridge0: port 2(bridge_slave_1) entered disabled state [ 850.642739][T29984] bridge0: port 1(bridge_slave_0) entered disabled state [ 850.668821][T29987] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5964'. [ 850.690538][T29987] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5964'. [ 850.767871][T29945] 8021q: adding VLAN 0 to HW filter on device bond0 [ 850.825940][T29991] openvswitch: netlink: IP tunnel attribute has 4460 unknown bytes. [ 850.835994][T29945] 8021q: adding VLAN 0 to HW filter on device team0 [ 850.900312][T13265] bridge0: port 1(bridge_slave_0) entered blocking state [ 850.907539][T13265] bridge0: port 1(bridge_slave_0) entered forwarding state [ 850.925638][T13265] bridge0: port 2(bridge_slave_1) entered blocking state [ 850.932855][T13265] bridge0: port 2(bridge_slave_1) entered forwarding state [ 850.997970][T29995] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5966'. [ 851.262677][T30009] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5970'. [ 851.290672][T30009] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5970'. [ 851.351986][T29945] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 851.454913][T29945] veth0_vlan: entered promiscuous mode [ 851.537435][T29945] veth1_vlan: entered promiscuous mode [ 851.580322][T30023] syzkaller0: entered promiscuous mode [ 851.587691][T30023] syzkaller0: entered allmulticast mode [ 851.635063][T29945] veth0_macvtap: entered promiscuous mode [ 851.691240][T29945] veth1_macvtap: entered promiscuous mode [ 851.712496][T29945] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 851.736235][T29945] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 851.756438][ T7616] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 851.772431][ T7616] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 851.794449][ T7616] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 851.803370][ T7616] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 852.394486][ T5161] Bluetooth: hci5: command tx timeout [ 854.474246][ T5161] Bluetooth: hci5: command tx timeout [ 854.673357][T30028] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 854.822125][ T135] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 854.836660][ T135] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 855.012613][ T7616] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 855.031430][ T7616] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 855.202866][T30088] __nla_validate_parse: 2 callbacks suppressed [ 855.202887][T30088] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5991'. [ 855.258178][T30088] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.5991'. [ 855.451603][T30102] syzkaller1: entered promiscuous mode [ 855.470548][T30102] syzkaller1: entered allmulticast mode [ 855.500125][T30106] tipc: New replicast peer: 255.255.255.255 [ 855.519067][T30106] tipc: Enabled bearer , priority 5 [ 855.922688][T30127] netlink: 'syz.0.6002': attribute type 1 has an invalid length. [ 855.954625][T30127] netlink: 244 bytes leftover after parsing attributes in process `syz.0.6002'. [ 856.139036][T30139] bridge0: port 4(syz_tun) entered blocking state [ 856.151572][T30139] bridge0: port 4(syz_tun) entered disabled state [ 856.183750][T30139] syz_tun: entered allmulticast mode [ 856.199925][T30139] syz_tun: entered promiscuous mode [ 856.423151][T30148] netlink: 'syz.2.6009': attribute type 39 has an invalid length. [ 856.568105][ T5161] Bluetooth: hci5: command tx timeout [ 856.637012][T21706] tipc: Node number set to 4278321153 [ 856.672766][T30156] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 856.703373][T30158] netlink: 144 bytes leftover after parsing attributes in process `syz.0.6013'. [ 856.722216][T30156] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 856.738678][T30158] netlink: 'syz.0.6013': attribute type 1 has an invalid length. [ 857.060415][T30168] sctp: [Deprecated]: syz.0.6016 (pid 30168) Use of struct sctp_assoc_value in delayed_ack socket option. [ 857.060415][T30168] Use struct sctp_sack_info instead [ 857.096671][T30168] sctp: [Deprecated]: syz.0.6016 (pid 30168) Use of struct sctp_assoc_value in delayed_ack socket option. [ 857.096671][T30168] Use struct sctp_sack_info instead [ 857.137335][T30168] sctp: [Deprecated]: syz.0.6016 (pid 30168) Use of int in max_burst socket option. [ 857.137335][T30168] Use struct sctp_assoc_value instead [ 857.892530][T30193] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6020'. [ 857.950788][T30196] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6021'. [ 857.988265][T30193] team0: Port device syz_tun added [ 858.277101][T30207] netlink: 'syz.0.6022': attribute type 1 has an invalid length. [ 858.297567][T30207] netlink: 96 bytes leftover after parsing attributes in process `syz.0.6022'. [ 858.308364][T30207] netlink: 'syz.0.6022': attribute type 1 has an invalid length. [ 858.320426][T30207] netlink: 634 bytes leftover after parsing attributes in process `syz.0.6022'. [ 858.345209][T30207] netlink: 1 bytes leftover after parsing attributes in process `syz.0.6022'. [ 858.630501][T30224] tipc: Enabling of bearer rejected, failed to enable media [ 858.669054][T30226] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6026'. [ 859.016103][T30247] Cannot find add_set index 0 as target [ 859.069575][T30247] pimreg9: entered allmulticast mode [ 859.255414][T30251] lo speed is unknown, defaulting to 1000 [ 859.472249][T30263] syzkaller0: entered promiscuous mode [ 859.487039][T30263] syzkaller0: entered allmulticast mode [ 859.569312][T30265] netlink: 'syz.0.6034': attribute type 13 has an invalid length. [ 859.592996][T30265] netlink: 'syz.0.6034': attribute type 17 has an invalid length. [ 859.622430][T30266] netlink: 'syz.0.6034': attribute type 13 has an invalid length. [ 859.644514][T30266] netlink: 'syz.0.6034': attribute type 17 has an invalid length. [ 859.806200][T30265] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 859.888775][T30266] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 859.915367][T30251] wg1 speed is unknown, defaulting to 1000 [ 860.160715][T30290] tipc: Enabling of bearer rejected, failed to enable media [ 860.346088][T30298] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20000 [ 860.375663][T30298] IPVS: set_ctl: invalid protocol: 59 10.1.1.2:20001 [ 860.569583][T30303] netlink: 'syz.0.6044': attribute type 8 has an invalid length. [ 860.582503][T30303] __nla_validate_parse: 3 callbacks suppressed [ 860.582519][T30303] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6044'. [ 860.662201][T30303] veth1_to_team: entered promiscuous mode [ 860.669963][T30303] veth1: entered promiscuous mode [ 860.677165][T30303] veth1_to_team: left promiscuous mode [ 860.713166][T30303] veth1: left promiscuous mode [ 860.829291][T30312] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6046'. [ 860.842640][T30307] xt_hashlimit: size too large, truncated to 1048576 [ 860.957367][T30315] xt_TCPMSS: Only works on TCP SYN packets [ 861.117194][T30315] bridge_slave_1: left allmulticast mode [ 861.145842][T30315] bridge_slave_1: left promiscuous mode [ 861.161940][T30315] bridge0: port 2(bridge_slave_1) entered disabled state [ 861.184529][T30315] bridge_slave_0: left allmulticast mode [ 861.201198][T30315] bridge_slave_0: left promiscuous mode [ 861.214714][T30315] bridge0: port 1(bridge_slave_0) entered disabled state [ 861.389876][T30330] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6050'. [ 861.429934][T30321] can: request_module (can-proto-4) failed. [ 861.541954][T30330] ip6tnl0: entered promiscuous mode [ 861.730194][T30340] netlink: 'syz.0.6053': attribute type 3 has an invalid length. [ 862.055315][T30358] tipc: Enabling of bearer rejected, failed to enable media [ 862.115144][T30361] netlink: 'syz.0.6055': attribute type 3 has an invalid length. [ 862.188589][T30362] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6055'. [ 862.198951][T30362] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 862.249514][T30362] syzkaller1: entered promiscuous mode [ 862.265356][T30362] syzkaller1: entered allmulticast mode [ 862.578467][T30381] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6060'. [ 862.777721][T30388] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6063'. [ 862.871023][T30397] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6066'. [ 862.886630][T30397] tipc: Started in network mode [ 862.892047][T30397] tipc: Node identity a200fdbc5ee5, cluster identity 4711 [ 862.906969][T30397] tipc: Enabled bearer , priority 0 [ 862.988396][T30396] tipc: Disabling bearer [ 863.177905][T30409] IPv6: NLM_F_CREATE should be specified when creating new route [ 863.187138][T30409] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 863.194436][T30409] IPv6: NLM_F_CREATE should be set when creating new route [ 863.201729][T30409] IPv6: NLM_F_CREATE should be set when creating new route [ 863.208999][T30409] IPv6: NLM_F_CREATE should be set when creating new route [ 863.261275][T30411] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 863.297249][ T6585] hsr0: entered promiscuous mode [ 863.360942][T30418] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6074'. [ 863.449483][T30421] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6074'. [ 863.655520][T30417] lo speed is unknown, defaulting to 1000 [ 863.911942][T30442] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6079'. [ 864.190073][T30447] tipc: Enabled bearer , priority 0 [ 864.203394][T30450] netlink: 'syz.3.6082': attribute type 4 has an invalid length. [ 864.256384][T30452] netlink: 'syz.3.6082': attribute type 4 has an invalid length. [ 864.267698][T30446] tipc: Disabling bearer [ 864.322385][T30417] wg1 speed is unknown, defaulting to 1000 [ 864.346961][T30450] vxcan2: entered promiscuous mode [ 864.361129][T30454] rdma_op ffff88807cc5a1f0 conn xmit_rdma 0000000000000000 [ 864.369605][T30450] vxcan2: entered allmulticast mode [ 864.669516][ T6585] IPVS: starting estimator thread 0... [ 864.691414][T30468] lo speed is unknown, defaulting to 1000 [ 864.737011][T30445] syzkaller1: entered promiscuous mode [ 864.762819][T30445] syzkaller1: entered allmulticast mode [ 864.774271][T30470] IPVS: using max 27 ests per chain, 64800 per kthread [ 865.185781][T30468] wg1 speed is unknown, defaulting to 1000 [ 865.699954][T30489] netlink: 'syz.2.6092': attribute type 1 has an invalid length. [ 865.855611][T30492] __nla_validate_parse: 10 callbacks suppressed [ 865.855629][T30492] netlink: 56 bytes leftover after parsing attributes in process `syz.2.6093'. [ 866.399553][T30514] netlink: 68 bytes leftover after parsing attributes in process `syz.1.6096'. [ 866.685807][T30523] netlink: 'syz.1.6099': attribute type 1 has an invalid length. [ 866.781214][T30528] xt_limit: Overflow, try lower: 324382443/0 [ 866.927095][T30531] sctp: [Deprecated]: syz.2.6102 (pid 30531) Use of struct sctp_assoc_value in delayed_ack socket option. [ 866.927095][T30531] Use struct sctp_sack_info instead [ 867.045719][T30534] lo speed is unknown, defaulting to 1000 [ 867.081813][T30540] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6104'. [ 867.588049][T30563] netlink: 'syz.3.6111': attribute type 1 has an invalid length. [ 867.611822][ T30] audit: type=1800 audit(1777118360.114:36): pid=30567 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.6109" name="r" dev="tmpfs" ino=142 res=0 errno=0 [ 867.635425][T30562] netlink: 'syz.3.6111': attribute type 1 has an invalid length. [ 867.637386][T30566] netlink: 'syz.1.6108': attribute type 1 has an invalid length. [ 867.643650][T30562] netlink: 280 bytes leftover after parsing attributes in process `syz.3.6111'. [ 867.662519][T30563] netlink: 280 bytes leftover after parsing attributes in process `syz.3.6111'. [ 867.736613][T30566] 8021q: adding VLAN 0 to HW filter on device bond14 [ 867.745888][T30562] syzkaller1: entered promiscuous mode [ 867.755366][T30562] syzkaller1: entered allmulticast mode [ 867.806940][T30555] nbd1: detected capacity change from 0 to 63 [ 867.823654][T30564] block nbd1: NBD_DISCONNECT [ 867.838127][T30564] block nbd1: Disconnected due to user request. [ 867.846302][T30564] block nbd1: shutting down sockets [ 867.852523][T28162] blk_print_req_error: 138 callbacks suppressed [ 867.852540][T28162] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 867.879092][T28162] buffer_io_error: 138 callbacks suppressed [ 867.879160][T28162] Buffer I/O error on dev nbd1, logical block 2, async page read [ 867.912194][T30563] pim6reg: entered allmulticast mode [ 867.929723][ C1] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 867.938886][ C1] Buffer I/O error on dev nbd1, logical block 0, async page read [ 867.952581][ C1] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 867.961747][ C1] Buffer I/O error on dev nbd1, logical block 1, async page read [ 867.972266][ T25] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 867.992238][T30564] netlink: 14 bytes leftover after parsing attributes in process `syz.1.6108'. [ 868.001747][ T25] Buffer I/O error on dev nbd1, logical block 3, async page read [ 868.016476][T28162] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 868.027581][T28162] Buffer I/O error on dev nbd1, logical block 0, async page read [ 868.038419][T28162] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 868.048653][T28162] Buffer I/O error on dev nbd1, logical block 1, async page read [ 868.059859][T30566] bond14: (slave veth15): Enslaving as an active interface with a down link [ 868.069488][T28162] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 868.069536][T28162] Buffer I/O error on dev nbd1, logical block 2, async page read [ 868.069654][T28162] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 868.097226][T28162] Buffer I/O error on dev nbd1, logical block 3, async page read [ 868.108547][T28162] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 868.118454][T28162] Buffer I/O error on dev nbd1, logical block 0, async page read [ 868.126514][T30562] pim6reg: left allmulticast mode [ 868.133149][T28162] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 868.143393][T28162] Buffer I/O error on dev nbd1, logical block 1, async page read [ 868.156548][T28162] ldm_validate_partition_table(): Disk read failed. [ 868.165639][ T7616] netdevsim netdevsim1 ªªªªª»: unset [1, 0] type 2 family 0 port 20000 - 0 [ 868.177272][T28162] Dev nbd1: unable to read RDB block 0 [ 868.183616][ T7616] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 868.208781][T28162] nbd1: unable to read partition table [ 868.217748][T30534] wg1 speed is unknown, defaulting to 1000 [ 868.217743][ T7616] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 868.217801][ T7616] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 868.259018][T28162] ldm_validate_partition_table(): Disk read failed. [ 868.269589][T28162] Dev nbd1: unable to read RDB block 0 [ 868.278803][T28162] nbd1: unable to read partition table [ 868.287603][T30555] bond14: (slave dummy0): making interface the new active one [ 868.324964][T30555] dummy0: entered promiscuous mode [ 868.330940][T30555] bond14: (slave dummy0): Enslaving as an active interface with an up link [ 868.389422][T30564] bond14: (slave dummy0): Releasing active interface [ 868.409917][T30564] dummy0 (unregistering): left promiscuous mode [ 868.469008][T30580] netlink: 'syz.2.6115': attribute type 13 has an invalid length. [ 868.546326][T30583] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6115'. [ 868.585350][ T30] audit: type=1107 audit(1777118361.094:37): pid=30577 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 869.005522][T30580] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 869.025430][T30580] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 869.387626][T13264] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 869.398452][T13264] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 869.481107][T13264] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 869.500190][T13264] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 869.831423][T30625] netlink: 'syz.2.6124': attribute type 2 has an invalid length. [ 869.852704][T30625] netlink: 'syz.2.6124': attribute type 2 has an invalid length. [ 869.921729][T30618] syzkaller0: entered promiscuous mode [ 869.936352][T30618] syzkaller0: entered allmulticast mode [ 869.946887][T30626] tipc: Started in network mode [ 869.971230][T30626] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 869.987322][T30626] tipc: Enabling of bearer rejected, failed to enable media [ 869.996279][T30627] netlink: 'syz.2.6124': attribute type 2 has an invalid length. [ 870.007841][T30627] netlink: 'syz.2.6124': attribute type 2 has an invalid length. [ 872.275689][T30635] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 872.306938][T30644] lo speed is unknown, defaulting to 1000 [ 872.455755][T30657] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6131'. [ 872.504735][T30657] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6131'. [ 872.598966][T30662] netlink: 52 bytes leftover after parsing attributes in process `syz.3.6132'. [ 872.966350][T30678] veth0_macvtap: left promiscuous mode [ 873.106141][T30679] syzkaller0: entered promiscuous mode [ 873.130886][T30679] syzkaller0: entered allmulticast mode [ 873.139435][T30644] wg1 speed is unknown, defaulting to 1000 [ 873.146851][T30688] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 873.168203][T30677] tipc: Enabled bearer , priority 0 [ 873.190388][T30684] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6138'. [ 873.223253][T30675] tipc: Resetting bearer [ 873.272169][T30675] tipc: Disabling bearer [ 873.582147][T30700] syzkaller1: entered promiscuous mode [ 873.610220][T30700] syzkaller1: entered allmulticast mode [ 873.635997][T30704] sctp: [Deprecated]: syz.3.6142 (pid 30704) Use of int in max_burst socket option. [ 873.635997][T30704] Use struct sctp_assoc_value instead [ 873.899527][T30711] netlink: 76 bytes leftover after parsing attributes in process `syz.0.6143'. [ 873.916633][T30711] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 873.942639][T30720] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6144'. [ 873.982525][T30711] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6143'. [ 874.091427][T30711] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 874.132631][T30711] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 874.183147][T30711] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 874.216284][T30711] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 874.702709][T30750] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6149'. [ 874.747042][ T5506] veth0_macvtap: entered promiscuous mode [ 874.758705][T30750] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6149'. [ 874.809714][T30750] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6149'. [ 874.837889][T30750] netlink: 'syz.0.6149': attribute type 3 has an invalid length. [ 875.017840][T30758] tipc: Enabled bearer , priority 0 [ 875.192535][T30762] syzkaller0: entered promiscuous mode [ 875.227661][T30762] syzkaller0: entered allmulticast mode [ 875.254332][T30756] tipc: Resetting bearer [ 875.340540][T30756] tipc: Disabling bearer [ 876.502640][T30804] netlink: 'syz.4.6159': attribute type 1 has an invalid length. [ 876.533924][T30804] netlink: 'syz.4.6159': attribute type 2 has an invalid length. [ 876.783970][T30817] sctp: [Deprecated]: syz.2.6161 (pid 30817) Use of int in maxseg socket option. [ 876.783970][T30817] Use struct sctp_assoc_value instead [ 876.820888][T30818] lo speed is unknown, defaulting to 1000 [ 876.913809][T30810] syzkaller0: entered promiscuous mode [ 876.926494][T30810] syzkaller0: entered allmulticast mode [ 879.293228][T30830] __nla_validate_parse: 5 callbacks suppressed [ 879.293247][T30830] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6165'. [ 879.309716][T30818] wg1 speed is unknown, defaulting to 1000 [ 879.379571][T30856] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6170'. [ 879.422890][T30856] netlink: 'syz.4.6170': attribute type 1 has an invalid length. [ 879.451428][T30856] netlink: 'syz.4.6170': attribute type 3 has an invalid length. [ 879.470175][T30856] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6170'. [ 879.595304][T30862] syzkaller0: entered promiscuous mode [ 879.615760][T30862] syzkaller0: entered allmulticast mode [ 879.632202][T30862] tipc: Enabled bearer , priority 0 [ 879.649433][T30870] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6174'. [ 879.663494][T30860] tipc: Resetting bearer [ 879.710736][T30860] tipc: Disabling bearer [ 880.129833][T30889] lo speed is unknown, defaulting to 1000 [ 880.381382][T30889] wg1 speed is unknown, defaulting to 1000 [ 880.391246][T30902] pim6reg1: entered promiscuous mode [ 880.404061][T30902] pim6reg1: entered allmulticast mode [ 880.426676][T30902] xt_NFQUEUE: number of total queues is 0 [ 880.712863][T30909] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6186'. [ 880.763187][T30909] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6186'. [ 881.036480][T30928] netlink: 276 bytes leftover after parsing attributes in process `syz.1.6190'. [ 881.087987][T30931] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6191'. [ 881.178895][T30934] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6192'. [ 881.761124][T30948] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6195'. [ 881.837773][T30948] veth1_to_team: entered promiscuous mode [ 881.845816][T30948] veth1: entered promiscuous mode [ 881.863625][T30948] hsr1: entered promiscuous mode [ 882.379103][T30977] syzkaller0: entered promiscuous mode [ 882.385957][T30977] syzkaller0: entered allmulticast mode [ 884.971784][T30953] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 885.221355][T30992] bond10 (unregistering): Released all slaves [ 885.392112][T31004] __nla_validate_parse: 1 callbacks suppressed [ 885.392132][T31004] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6207'. [ 885.424679][T31004] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6207'. [ 885.454141][T31004] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6207'. [ 885.651203][T31024] netlink: 'syz.4.6211': attribute type 15 has an invalid length. [ 885.679403][T31024] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6211'. [ 885.771991][T30991] syzkaller0: entered promiscuous mode [ 885.784070][T30991] syzkaller0: entered allmulticast mode [ 885.794931][T31017] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6207'. [ 885.936212][T31009] lo speed is unknown, defaulting to 1000 [ 886.115834][T31033] netlink: 'syz.4.6214': attribute type 153 has an invalid length. [ 886.184521][T31035] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6215'. [ 886.214206][T31035] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6215'. [ 886.235723][T31035] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6215'. [ 886.443388][T31054] openvswitch: netlink: Unexpected mask (mask=20440, allowed=10048) [ 886.471347][T31053] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6219'. [ 886.514839][T31054] netlink: 'syz.0.6218': attribute type 2 has an invalid length. [ 886.620311][T31009] wg1 speed is unknown, defaulting to 1000 [ 886.697895][T31064] openvswitch: netlink: Flow actions attr not present in new flow. [ 886.959660][T31081] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6225'. [ 887.557576][T31092] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 887.629133][T31094] xt_hashlimit: size too large, truncated to 1048576 [ 889.311940][T31084] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 889.565792][T31107] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 889.646803][T31116] netlink: 'syz.2.6233': attribute type 1 has an invalid length. [ 889.746882][T31116] netlink: 'syz.2.6233': attribute type 1 has an invalid length. [ 889.912986][T31125] batadv0: entered promiscuous mode [ 889.934709][T31125] batadv0: entered allmulticast mode [ 890.476939][T31152] lo speed is unknown, defaulting to 1000 [ 890.503910][T31162] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 890.577707][T31166] netlink: 'syz.4.6243': attribute type 1 has an invalid length. [ 890.882105][T31173] nbd0: detected capacity change from 0 to 63 [ 890.906898][ T5161] block nbd0: Receive control failed (result -104) [ 891.804900][T31152] wg1 speed is unknown, defaulting to 1000 [ 891.848966][T31189] netlink: 'syz.2.6247': attribute type 10 has an invalid length. [ 891.881490][T31189] __nla_validate_parse: 7 callbacks suppressed [ 891.881509][T31189] netlink: 228 bytes leftover after parsing attributes in process `syz.2.6247'. [ 891.964788][T31189] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 892.084592][T31189] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 892.505305][T31152] tipc: can't start tipc send workqueue [ 892.585860][T31214] lo speed is unknown, defaulting to 1000 [ 892.686026][T31220] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6255'. [ 893.588256][T31214] wg1 speed is unknown, defaulting to 1000 [ 894.000737][T31253] syzkaller0: entered promiscuous mode [ 894.025007][T31253] syzkaller0: entered allmulticast mode [ 894.067502][T31253] tipc: Enabled bearer , priority 0 [ 894.113329][T31252] tipc: Resetting bearer [ 894.234435][ T11] block nbd0: Possible stuck request ffff888027898a40: control (read@0,1024B). Runtime 2 seconds [ 894.247838][ T11] block nbd0: Possible stuck request ffff888027898c00: control (read@1024,1024B). Runtime 2 seconds [ 894.259662][ T11] block nbd0: Possible stuck request ffff888027898dc0: control (read@2048,1024B). Runtime 2 seconds [ 894.270608][ T11] block nbd0: Possible stuck request ffff888027898f80: control (read@3072,1024B). Runtime 2 seconds [ 894.320079][T31252] tipc: Disabling bearer [ 894.738603][T31279] netlink: 'syz.4.6265': attribute type 1 has an invalid length. [ 894.862973][T31279] 8021q: adding VLAN 0 to HW filter on device bond10 [ 894.898237][T31272] syzkaller1: tun_chr_ioctl cmd 2147767506 [ 894.913880][T31283] syzkaller0: entered promiscuous mode [ 894.920431][T31283] syzkaller0: entered allmulticast mode [ 894.931661][T31279] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 895.023440][T31282] lo speed is unknown, defaulting to 1000 [ 895.776601][T31299] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6268'. [ 896.105849][T31282] wg1 speed is unknown, defaulting to 1000 [ 896.253000][T29949] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 896.269843][T29949] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 896.281184][T29949] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 896.289572][T29949] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 896.300037][T29949] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 896.445094][T31326] syzkaller0: entered promiscuous mode [ 896.451024][T31326] syzkaller0: entered allmulticast mode [ 896.460008][T31313] lo speed is unknown, defaulting to 1000 [ 896.469355][T31326] tipc: Enabled bearer , priority 0 [ 896.493648][T31325] tipc: Resetting bearer [ 896.578175][T31325] tipc: Disabling bearer [ 896.645663][T31328] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6275'. [ 896.657077][T31328] netlink: 'syz.3.6275': attribute type 10 has an invalid length. [ 896.692213][T31328] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 896.795843][T31332] netlink: 'syz.2.6277': attribute type 1 has an invalid length. [ 897.360929][T31313] wg1 speed is unknown, defaulting to 1000 [ 897.367474][T31364] netlink: 'syz.2.6283': attribute type 3 has an invalid length. [ 897.395130][T31364] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6283'. [ 897.529342][T31373] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6286'. [ 897.550842][T31370] syzkaller1: entered promiscuous mode [ 897.570113][T31370] syzkaller1: entered allmulticast mode [ 897.591493][T31370] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6284'. [ 897.604249][ T11] block nbd0: Possible stuck request ffff888027898a40: control (read@0,1024B). Runtime 4 seconds [ 897.615965][ T11] block nbd0: Possible stuck request ffff888027898c00: control (read@1024,1024B). Runtime 4 seconds [ 897.627826][ T11] block nbd0: Possible stuck request ffff888027898dc0: control (read@2048,1024B). Runtime 4 seconds [ 897.639253][ T11] block nbd0: Possible stuck request ffff888027898f80: control (read@3072,1024B). Runtime 4 seconds [ 897.661041][T31379] netlink: 'syz.0.6287': attribute type 6 has an invalid length. [ 897.758665][ T5161] Bluetooth: hci1: command 0x0406 tx timeout [ 897.865464][T18842] syz_tun (unregistering): left allmulticast mode [ 897.896554][T18842] syz_tun (unregistering): left promiscuous mode [ 897.918652][T18842] bridge0: port 3(syz_tun) entered disabled state [ 898.050379][T31389] netlink: 'syz.3.6291': attribute type 4 has an invalid length. [ 898.060649][T31392] IPVS: sync thread started: state = MASTER, mcast_ifn = vcan0, syncid = 0, id = 0 [ 898.288515][T31395] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6292'. [ 898.399917][ T5847] Bluetooth: hci3: command tx timeout [ 898.789292][T31313] chnl_net:caif_netlink_parms(): no params data found [ 898.941364][T31415] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6295'. [ 898.956065][T31415] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6295'. [ 898.979844][T31415] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6295'. [ 898.999383][T31415] netlink: 80 bytes leftover after parsing attributes in process `syz.3.6295'. [ 899.029878][T31415] netlink: 'syz.3.6295': attribute type 1 has an invalid length. [ 899.055957][T31415] netlink: 'syz.3.6295': attribute type 2 has an invalid length. [ 899.075976][T31313] bridge0: port 1(bridge_slave_0) entered blocking state [ 899.083568][T31313] bridge0: port 1(bridge_slave_0) entered disabled state [ 899.101222][T31313] bridge_slave_0: entered allmulticast mode [ 899.127010][T31313] bridge_slave_0: entered promiscuous mode [ 899.171621][T31313] bridge0: port 2(bridge_slave_1) entered blocking state [ 899.212490][T31313] bridge0: port 2(bridge_slave_1) entered disabled state [ 899.231558][T31313] bridge_slave_1: entered allmulticast mode [ 899.240825][T31313] bridge_slave_1: entered promiscuous mode [ 899.307119][T31313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 899.349835][T31313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 899.451694][T31313] team0: Port device team_slave_0 added [ 899.476201][T31313] team0: Port device team_slave_1 added [ 899.581817][T31313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 899.591937][T31313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 899.657955][T31313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 899.673842][T31313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 899.686676][T31313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 899.717430][T31313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 899.804358][T31443] netlink: 72 bytes leftover after parsing attributes in process `syz.4.6302'. [ 899.821967][T31313] hsr_slave_0: entered promiscuous mode [ 899.850526][T31313] hsr_slave_1: entered promiscuous mode [ 899.857775][T31313] debugfs: 'hsr0' already exists in 'hsr' [ 899.879264][T31313] Cannot create hsr debugfs directory [ 899.936407][T31434] lo speed is unknown, defaulting to 1000 [ 900.015647][T31443] netlink: 'syz.4.6302': attribute type 1 has an invalid length. [ 900.108935][T31449] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6303'. [ 900.478786][ T5847] Bluetooth: hci3: command tx timeout [ 900.562416][T31434] wg1 speed is unknown, defaulting to 1000 [ 900.658919][T31456] erspan0: left promiscuous mode [ 900.741226][T31456] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 900.767389][T30601] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 900.856736][ T7595] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 900.877377][ T7595] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 900.914343][T30601] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 900.955530][ T11] block nbd0: Possible stuck request ffff888027898a40: control (read@0,1024B). Runtime 6 seconds [ 900.967064][ T11] block nbd0: Possible stuck request ffff888027898c00: control (read@1024,1024B). Runtime 6 seconds [ 900.978725][ T11] block nbd0: Possible stuck request ffff888027898dc0: control (read@2048,1024B). Runtime 6 seconds [ 900.990282][ T11] block nbd0: Possible stuck request ffff888027898f80: control (read@3072,1024B). Runtime 6 seconds [ 901.134448][T21699] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 901.495288][T31465] openvswitch: netlink: Flow actions attr not present in new flow. [ 901.801374][T31313] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 901.850164][T31313] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 901.883380][T31313] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 901.909960][T31474] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 901.913219][T31313] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 901.967725][T31475] xfrm1: entered allmulticast mode [ 901.980486][T31313] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 901.993066][T31478] netlink: 'syz.2.6310': attribute type 5 has an invalid length. [ 902.021883][T31313] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 902.044914][T31313] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 902.077168][T31313] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 902.249537][T31313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 902.279785][T31313] 8021q: adding VLAN 0 to HW filter on device team0 [ 902.301015][ T7595] bridge0: port 1(bridge_slave_0) entered blocking state [ 902.308248][ T7595] bridge0: port 1(bridge_slave_0) entered forwarding state [ 902.332451][ T7595] bridge0: port 2(bridge_slave_1) entered blocking state [ 902.339743][ T7595] bridge0: port 2(bridge_slave_1) entered forwarding state [ 902.354608][T31489] syzkaller0: entered promiscuous mode [ 902.360827][T31489] syzkaller0: entered allmulticast mode [ 902.380889][T31489] tipc: Enabled bearer , priority 0 [ 902.392642][T31488] tipc: Resetting bearer [ 902.420216][T31488] tipc: Disabling bearer [ 902.554760][ T5847] Bluetooth: hci3: command tx timeout [ 902.807040][T31503] __nla_validate_parse: 3 callbacks suppressed [ 902.807060][T31503] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6314'. [ 902.832467][T31509] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0 [ 902.843601][T31508] tipc: New replicast peer: 255.255.255.255 [ 902.851713][T31508] tipc: Enabled bearer , priority 5 [ 902.913465][T31313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 903.068935][T31518] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6318'. [ 903.093683][T31518] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6318'. [ 903.133891][T31313] veth0_vlan: entered promiscuous mode [ 903.167014][T31520] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6320'. [ 903.205354][T31313] veth1_vlan: entered promiscuous mode [ 903.212020][T31520] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6320'. [ 903.237578][T31520] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6320'. [ 903.302906][T31313] veth0_macvtap: entered promiscuous mode [ 903.339005][T31313] veth1_macvtap: entered promiscuous mode [ 903.428101][T31524] syzkaller0: entered promiscuous mode [ 903.439933][T31524] syzkaller0: entered allmulticast mode [ 903.457606][T31524] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6322'. [ 903.497519][T31524] tipc: Enabled bearer , priority 0 [ 903.509792][T31523] tipc: Resetting bearer [ 903.540880][T31523] tipc: Disabling bearer [ 903.580985][T31313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 903.618038][T31313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 903.645688][T31531] lo speed is unknown, defaulting to 1000 [ 903.660771][ T7608] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 903.685710][ T7608] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 903.712225][T31534] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6325'. [ 903.733507][T31534] netlink: 7 bytes leftover after parsing attributes in process `syz.3.6325'. [ 903.763886][ T7608] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 903.782477][ T7608] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 903.969403][T19842] tipc: Node number set to 4242931132 [ 904.121415][T31545] netlink: 'syz.2.6328': attribute type 1 has an invalid length. [ 904.159980][T31545] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 904.161896][ T7595] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 904.196867][ T7595] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 904.315391][ T11] block nbd0: Possible stuck request ffff888027898a40: control (read@0,1024B). Runtime 8 seconds [ 904.326765][ T11] block nbd0: Possible stuck request ffff888027898c00: control (read@1024,1024B). Runtime 8 seconds [ 904.338645][ T11] block nbd0: Possible stuck request ffff888027898dc0: control (read@2048,1024B). Runtime 8 seconds [ 904.350386][ T11] block nbd0: Possible stuck request ffff888027898f80: control (read@3072,1024B). Runtime 8 seconds [ 904.404524][T31531] wg1 speed is unknown, defaulting to 1000 [ 904.410502][ T7616] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 904.433960][ T7616] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 904.554393][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 904.635736][ T5847] Bluetooth: hci3: command tx timeout [ 904.692118][T31569] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6332'. [ 904.998508][T31562] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 905.189846][T31562] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 905.387581][T31562] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 905.461049][T31583] syzkaller0: entered promiscuous mode [ 905.485076][T31583] syzkaller0: entered allmulticast mode [ 905.508667][T31581] tipc: Started in network mode [ 905.518393][T31581] tipc: Node identity 6600ea61d731, cluster identity 4711 [ 905.548638][T31581] tipc: Enabled bearer , priority 0 [ 905.682648][T31562] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 905.765900][T31579] tipc: Resetting bearer [ 905.808791][T31579] tipc: Disabling bearer [ 905.947620][ T5847] Bluetooth: hci2: link tx timeout [ 905.957776][ T5847] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 905.973946][ T5847] Bluetooth: hci2: link tx timeout [ 905.979175][ T5847] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 906.202954][ T7595] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 906.270541][T31605] netlink: 'syz.1.6341': attribute type 1 has an invalid length. [ 906.288211][ T36] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 906.373870][ T7595] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 906.499254][ T135] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 906.700765][T31622] syzkaller0: entered promiscuous mode [ 906.717805][T31622] syzkaller0: entered allmulticast mode [ 906.770135][T31624] bond3: entered allmulticast mode [ 906.808517][T31624] macvlan2: entered promiscuous mode [ 906.815511][T31624] macvlan2: entered allmulticast mode [ 906.822300][T31624] bond3: (slave macvlan2): Opening slave failed [ 906.844542][T31622] tipc: Enabled bearer , priority 0 [ 906.868923][T31621] tipc: Resetting bearer [ 906.892729][T31621] tipc: Disabling bearer [ 907.085666][T31636] netlink: 'syz.0.6351': attribute type 2 has an invalid length. [ 907.187717][T31642] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 907.539845][T31665] pimreg: entered allmulticast mode [ 907.547784][T31664] netlink: 'syz.4.6361': attribute type 3 has an invalid length. [ 907.674871][ T11] block nbd0: Possible stuck request ffff888027898a40: control (read@0,1024B). Runtime 10 seconds [ 907.686147][ T11] block nbd0: Possible stuck request ffff888027898c00: control (read@1024,1024B). Runtime 10 seconds [ 907.698004][ T11] block nbd0: Possible stuck request ffff888027898dc0: control (read@2048,1024B). Runtime 10 seconds [ 907.712828][T31673] netlink: 'syz.4.6364': attribute type 29 has an invalid length. [ 907.713238][ T11] block nbd0: Possible stuck request ffff888027898f80: control (read@3072,1024B). Runtime 10 seconds [ 907.746321][T31673] netlink: 'syz.4.6364': attribute type 29 has an invalid length. [ 907.842809][T31679] __nla_validate_parse: 10 callbacks suppressed [ 907.842826][T31679] netlink: 61 bytes leftover after parsing attributes in process `syz.4.6365'. [ 908.004153][ T5847] Bluetooth: hci2: command 0x0406 tx timeout [ 908.393335][T31699] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6371'. [ 908.439586][T29949] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 908.456054][T29949] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 908.469821][T29949] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 908.483648][T29949] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 908.493464][T29949] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 908.518570][T31699] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6371'. [ 908.725569][T31701] lo speed is unknown, defaulting to 1000 [ 909.172351][T31739] netlink: 292 bytes leftover after parsing attributes in process `syz.1.6375'. [ 909.204533][T31738] netlink: 80 bytes leftover after parsing attributes in process `syz.1.6375'. [ 909.220044][T31743] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.6377'. [ 909.248744][T31738] netlink: 776 bytes leftover after parsing attributes in process `syz.1.6375'. [ 909.264938][T31740] SET target dimension over the limit! [ 909.341472][T31747] netlink: 'syz.2.6378': attribute type 1 has an invalid length. [ 909.460080][T31749] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6379'. [ 909.541671][T31747] 8021q: adding VLAN 0 to HW filter on device bond4 [ 909.645011][T31763] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6381'. [ 909.697900][T31754] bond4: (slave ip6erspan0): making interface the new active one [ 909.722413][T31754] bond4: (slave ip6erspan0): Enslaving as an active interface with an up link [ 909.749347][T31770] netlink: 'syz.1.6381': attribute type 1 has an invalid length. [ 909.759888][T31769] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6383'. [ 909.789124][T31701] wg1 speed is unknown, defaulting to 1000 [ 909.827899][T31761] netlink: 'syz.1.6381': attribute type 4 has an invalid length. [ 910.084557][T29949] Bluetooth: hci2: command 0x0406 tx timeout [ 910.556492][ T5161] Bluetooth: hci1: command tx timeout [ 910.747203][T31813] netlink: 'syz.1.6393': attribute type 1 has an invalid length. [ 910.791926][T31802] syzkaller0: entered promiscuous mode [ 910.826035][T31802] syzkaller0: entered allmulticast mode [ 911.035738][ T11] block nbd0: Possible stuck request ffff888027898a40: control (read@0,1024B). Runtime 12 seconds [ 911.047236][ T11] block nbd0: Possible stuck request ffff888027898c00: control (read@1024,1024B). Runtime 12 seconds [ 911.058993][ T11] block nbd0: Possible stuck request ffff888027898dc0: control (read@2048,1024B). Runtime 12 seconds [ 911.070870][ T11] block nbd0: Possible stuck request ffff888027898f80: control (read@3072,1024B). Runtime 12 seconds [ 911.090625][T31822] macvlan2: entered promiscuous mode [ 911.099737][T31822] macvlan2: entered allmulticast mode [ 911.822601][T31701] chnl_net:caif_netlink_parms(): no params data found [ 912.092497][T31857] ipvlan1: entered promiscuous mode [ 912.099485][T31857] ipvlan1: left promiscuous mode [ 912.314276][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 912.346673][T31701] bridge0: port 1(bridge_slave_0) entered blocking state [ 912.370743][T31701] bridge0: port 1(bridge_slave_0) entered disabled state [ 912.398565][T31701] bridge_slave_0: entered allmulticast mode [ 912.430762][T31701] bridge_slave_0: entered promiscuous mode [ 912.460520][T31701] bridge0: port 2(bridge_slave_1) entered blocking state [ 912.485995][T31701] bridge0: port 2(bridge_slave_1) entered disabled state [ 912.524876][T31701] bridge_slave_1: entered allmulticast mode [ 912.556116][T31701] bridge_slave_1: entered promiscuous mode [ 912.634870][ T5161] Bluetooth: hci1: command tx timeout [ 912.685148][T31701] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 912.748425][T31701] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 912.902457][T31701] team0: Port device team_slave_0 added [ 912.947507][T31701] team0: Port device team_slave_1 added [ 913.049133][T31896] netlink: 'syz.3.6406': attribute type 6 has an invalid length. [ 913.079434][T31701] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 913.097834][T31701] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 913.161673][T31701] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 913.216543][T31701] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 913.231806][T31701] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 913.270656][T31701] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 913.322973][T31905] syzkaller0: entered promiscuous mode [ 913.358712][T31905] syzkaller0: entered allmulticast mode [ 913.417188][T31905] __nla_validate_parse: 10 callbacks suppressed [ 913.417209][T31905] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6408'. [ 913.513127][T31701] hsr_slave_0: entered promiscuous mode [ 913.557226][T31701] hsr_slave_1: entered promiscuous mode [ 913.585709][T31701] debugfs: 'hsr0' already exists in 'hsr' [ 913.591856][T31701] Cannot create hsr debugfs directory [ 913.603373][T31908] tipc: Enabled bearer , priority 0 [ 913.641167][T31904] tipc: Resetting bearer [ 913.670331][T31904] tipc: Disabling bearer [ 914.094104][ T30] audit: type=1800 audit(1777118406.574:38): pid=31922 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.6411" name="blkio.bfq.time_recursive" dev="tmpfs" ino=489 res=0 errno=0 [ 914.220153][T31924] bridge0: port 1(bridge_slave_0) entered disabled state [ 914.269679][T31924] bridge0: port 2(bridge_slave_1) entered disabled state [ 914.394948][ T11] block nbd0: Possible stuck request ffff888027898a40: control (read@0,1024B). Runtime 14 seconds [ 914.407851][ T11] block nbd0: Possible stuck request ffff888027898c00: control (read@1024,1024B). Runtime 14 seconds [ 914.420085][ T11] block nbd0: Possible stuck request ffff888027898dc0: control (read@2048,1024B). Runtime 14 seconds [ 914.432027][ T11] block nbd0: Possible stuck request ffff888027898f80: control (read@3072,1024B). Runtime 14 seconds [ 914.483396][T31928] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6413'. [ 914.722164][ T5161] Bluetooth: hci1: command tx timeout [ 915.466767][T31963] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6416'. [ 915.525990][T31961] lo speed is unknown, defaulting to 1000 [ 915.798790][T31963] macsec1: entered promiscuous mode [ 916.166855][T31701] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 916.215720][T31701] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 916.253715][T31701] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 916.309998][T31701] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 916.340920][T31786] Set syz1 is full, maxelem 65536 reached [ 916.349925][T31701] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 916.381242][T31701] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 916.396576][T31701] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 916.443280][T31701] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 916.518794][T31981] syzkaller0: entered promiscuous mode [ 916.538828][T31981] syzkaller0: entered allmulticast mode [ 916.561285][T31981] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6419'. [ 916.611219][T31981] tipc: Enabled bearer , priority 0 [ 916.659162][T31979] tipc: Resetting bearer [ 916.673392][T31994] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6420'. [ 916.698376][T31994] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6420'. [ 916.742655][T31979] tipc: Disabling bearer [ 916.813573][ T5161] Bluetooth: hci1: command tx timeout [ 917.112557][T31701] 8021q: adding VLAN 0 to HW filter on device bond0 [ 917.169752][T31961] wg1 speed is unknown, defaulting to 1000 [ 917.171794][T31971] lo speed is unknown, defaulting to 1000 [ 917.185085][T31701] 8021q: adding VLAN 0 to HW filter on device team0 [ 917.211439][ T7616] bridge0: port 1(bridge_slave_0) entered blocking state [ 917.218638][ T7616] bridge0: port 1(bridge_slave_0) entered forwarding state [ 917.312067][ T7616] bridge0: port 2(bridge_slave_1) entered blocking state [ 917.319335][ T7616] bridge0: port 2(bridge_slave_1) entered forwarding state [ 917.378768][T32008] netlink: 'syz.3.6424': attribute type 3 has an invalid length. [ 917.391675][T32008] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6424'. [ 917.504701][T32010] netlink: 120 bytes leftover after parsing attributes in process `syz.3.6424'. [ 917.514446][T32010] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6424'. [ 917.540255][T32010] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6424'. [ 917.755703][ T11] block nbd0: Possible stuck request ffff888027898a40: control (read@0,1024B). Runtime 16 seconds [ 917.766671][ T11] block nbd0: Possible stuck request ffff888027898c00: control (read@1024,1024B). Runtime 16 seconds [ 917.778396][ T11] block nbd0: Possible stuck request ffff888027898dc0: control (read@2048,1024B). Runtime 16 seconds [ 917.790011][ T11] block nbd0: Possible stuck request ffff888027898f80: control (read@3072,1024B). Runtime 16 seconds [ 917.988250][T31992] lo speed is unknown, defaulting to 1000 [ 918.085552][T31701] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 918.383950][T31971] wg1 speed is unknown, defaulting to 1000 [ 918.748379][T31701] veth0_vlan: entered promiscuous mode [ 918.762060][T31701] veth1_vlan: entered promiscuous mode [ 918.799367][T31701] veth0_macvtap: entered promiscuous mode [ 918.812535][T31701] veth1_macvtap: entered promiscuous mode [ 918.834668][T31701] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 918.856186][T31701] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 918.877032][T31992] wg1 speed is unknown, defaulting to 1000 [ 918.886474][T32042] lo speed is unknown, defaulting to 1000 [ 918.945816][ T135] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 918.974436][ T135] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 919.056650][ T135] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 919.076823][ T135] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 919.230775][ T7608] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 919.239394][ T7608] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 919.293087][T13264] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 919.302914][T13264] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 919.430066][T32048] __nla_validate_parse: 1 callbacks suppressed [ 919.430087][T32048] netlink: 56 bytes leftover after parsing attributes in process `syz.4.6368'. [ 919.430539][T32042] wg1 speed is unknown, defaulting to 1000 [ 919.826180][T32054] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6430'. [ 919.860115][T32054] tipc: Started in network mode [ 919.874108][T32054] tipc: Node identity ba4cfb8c7fc7, cluster identity 4711 [ 919.882176][T32054] tipc: Enabled bearer , priority 0 [ 919.890546][T32055] syzkaller0: entered promiscuous mode [ 919.897307][T32055] syzkaller0: entered allmulticast mode [ 919.909488][T32053] tipc: Resetting bearer [ 919.933742][T32053] tipc: Disabling bearer [ 921.121107][ T11] block nbd0: Possible stuck request ffff888027898a40: control (read@0,1024B). Runtime 18 seconds [ 921.132094][ T11] block nbd0: Possible stuck request ffff888027898c00: control (read@1024,1024B). Runtime 18 seconds [ 921.143648][ T11] block nbd0: Possible stuck request ffff888027898dc0: control (read@2048,1024B). Runtime 18 seconds [ 921.155173][ T11] block nbd0: Possible stuck request ffff888027898f80: control (read@3072,1024B). Runtime 18 seconds [ 921.264342][T32065] netlink: 'syz.4.6433': attribute type 1 has an invalid length. [ 921.406102][T32066] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6434'. [ 921.667676][T32077] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6437'. [ 921.686507][T32079] IPVS: set_ctl: invalid protocol: 50 224.0.0.2:20002 [ 921.878959][T32083] netlink: 'syz.0.6440': attribute type 21 has an invalid length. [ 921.906779][T32083] IPv6: NLM_F_CREATE should be specified when creating new route [ 922.011283][T32089] syzkaller0: entered promiscuous mode [ 922.024370][T32089] syzkaller0: entered allmulticast mode [ 922.040369][T32089] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6441'. [ 922.110206][T32089] tipc: Enabled bearer , priority 0 [ 922.138289][T32088] tipc: Resetting bearer [ 922.207489][T32088] tipc: Disabling bearer [ 922.259761][T32096] ip6tnl1: entered allmulticast mode [ 922.452074][T32102] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6445'. [ 922.522343][T32104] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6446'. [ 922.641054][T32106] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6447'. [ 922.695516][T32106] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 922.748538][T32109] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 922.755863][T32109] IPv6: NLM_F_CREATE should be set when creating new route [ 922.858451][T32114] ip6erspan0: entered allmulticast mode [ 922.870433][T32117] netlink: 200 bytes leftover after parsing attributes in process `syz.2.6451'. [ 922.892836][T32117] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6451'. [ 922.926443][T32111] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input7 [ 923.106771][T32113] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 64993 [ 923.228243][T32134] syzkaller0: entered promiscuous mode [ 923.234223][T32134] syzkaller0: entered allmulticast mode [ 923.326433][T32134] tipc: Enabled bearer , priority 0 [ 923.342611][T32131] tipc: Resetting bearer [ 923.426351][T32131] tipc: Disabling bearer [ 923.456066][T32147] tipc: Enabling of bearer rejected, failed to enable media [ 923.639189][T32148] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 923.700304][T32164] tipc: Started in network mode [ 923.711615][T32164] tipc: Node identity bbbbbb, cluster identity 4711 [ 923.719320][T32164] tipc: Enabled bearer , priority 10 [ 923.727640][T32164] netlink: 'syz.2.6462': attribute type 10 has an invalid length. [ 923.743559][T32164] 8021q: adding VLAN 0 to HW filter on device team0 [ 923.762501][T32164] bond0: (slave team0): Enslaving as an active interface with an up link [ 923.919775][T32175] nbd: must specify at least one socket [ 923.930059][T32177] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 924.105446][T32185] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 924.213729][T32192] netlink: 'syz.0.6470': attribute type 3 has an invalid length. [ 924.474733][ T11] block nbd0: Possible stuck request ffff888027898a40: control (read@0,1024B). Runtime 20 seconds [ 924.486252][ T11] block nbd0: Possible stuck request ffff888027898c00: control (read@1024,1024B). Runtime 20 seconds [ 924.498026][ T11] block nbd0: Possible stuck request ffff888027898dc0: control (read@2048,1024B). Runtime 20 seconds [ 924.509178][ T11] block nbd0: Possible stuck request ffff888027898f80: control (read@3072,1024B). Runtime 20 seconds [ 924.835080][T21699] tipc: Node number set to 3149642496 [ 924.903879][T32226] geneve2: entered promiscuous mode [ 924.918193][T32226] geneve2: entered allmulticast mode [ 925.097219][T32196] lec:lec_atm_close: lec0: Shut down! [ 925.493793][T32257] lo speed is unknown, defaulting to 1000 [ 926.053179][T32284] netlink: 'syz.1.6491': attribute type 3 has an invalid length. [ 926.224826][T21699] lec:lec_start_xmit: lec0:No lecd attached [ 926.282484][T32296] __nla_validate_parse: 4 callbacks suppressed [ 926.282506][T32296] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6495'. [ 926.360033][T32257] wg1 speed is unknown, defaulting to 1000 [ 927.034267][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 927.422513][T32333] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 927.452149][T32333] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 927.553336][ T7608] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 927.571908][ T7608] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 927.639999][ T7608] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 927.668247][ T7608] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 927.831761][T32344] lo speed is unknown, defaulting to 1000 [ 927.841517][ T11] block nbd0: Possible stuck request ffff888027898a40: control (read@0,1024B). Runtime 22 seconds [ 927.852430][ T11] block nbd0: Possible stuck request ffff888027898c00: control (read@1024,1024B). Runtime 22 seconds [ 927.865037][ T11] block nbd0: Possible stuck request ffff888027898dc0: control (read@2048,1024B). Runtime 22 seconds [ 927.876982][ T11] block nbd0: Possible stuck request ffff888027898f80: control (read@3072,1024B). Runtime 22 seconds [ 928.032590][T32379] [ 928.034986][T32379] ====================================================== [ 928.042022][T32379] WARNING: possible circular locking dependency detected [ 928.049073][T32379] syzkaller #0 Not tainted [ 928.053538][T32379] ------------------------------------------------------ [ 928.060599][T32379] syz.1.6510/32379 is trying to acquire lock: [ 928.066690][T32379] ffffffff8ff618d8 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_ioctl+0x40c/0xf90 [ 928.075908][T32379] [ 928.075908][T32379] but task is already holding lock: [ 928.083307][T32379] ffff88803530de70 (&nr_node->node_lock){+...}-{3:3}, at: nr_rt_ioctl+0x215/0xf90 [ 928.092671][T32379] [ 928.092671][T32379] which lock already depends on the new lock. [ 928.092671][T32379] [ 928.103105][T32379] [ 928.103105][T32379] the existing dependency chain (in reverse order) is: [ 928.112142][T32379] [ 928.112142][T32379] -> #2 (&nr_node->node_lock){+...}-{3:3}: [ 928.120180][T32379] _raw_spin_lock_bh+0x36/0x50 [ 928.125512][T32379] nr_rt_device_down+0x153/0x860 [ 928.131011][T32379] nr_device_event+0x137/0x150 [ 928.136356][T32379] notifier_call_chain+0x1ad/0x3d0 [ 928.142052][T32379] __dev_notify_flags+0x16d/0x310 [ 928.147633][T32379] netif_change_flags+0xe8/0x1a0 [ 928.153112][T32379] dev_change_flags+0x130/0x270 [ 928.158492][T32379] dev_ioctl+0x7b4/0x1150 [ 928.163371][T32379] sock_do_ioctl+0x23e/0x320 [ 928.168504][T32379] sock_ioctl+0x5c6/0x7f0 [ 928.173378][T32379] __se_sys_ioctl+0xfc/0x170 [ 928.178523][T32379] do_syscall_64+0x15f/0xf80 [ 928.183678][T32379] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 928.190106][T32379] [ 928.190106][T32379] -> #1 (nr_node_list_lock){+.-.}-{3:3}: [ 928.197969][T32379] _raw_spin_lock_bh+0x36/0x50 [ 928.203284][T32379] nr_rt_device_down+0xbe/0x860 [ 928.208692][T32379] nr_device_event+0x137/0x150 [ 928.214005][T32379] notifier_call_chain+0x1ad/0x3d0 [ 928.219690][T32379] __dev_notify_flags+0x16d/0x310 [ 928.225274][T32379] netif_change_flags+0xe8/0x1a0 [ 928.230749][T32379] dev_change_flags+0x130/0x270 [ 928.236133][T32379] dev_ioctl+0x7b4/0x1150 [ 928.241108][T32379] sock_do_ioctl+0x23e/0x320 [ 928.246236][T32379] sock_ioctl+0x5c6/0x7f0 [ 928.251130][T32379] __se_sys_ioctl+0xfc/0x170 [ 928.256317][T32379] do_syscall_64+0x15f/0xf80 [ 928.261451][T32379] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 928.267878][T32379] [ 928.267878][T32379] -> #0 (nr_neigh_list_lock){+...}-{3:3}: [ 928.275825][T32379] __lock_acquire+0x15a5/0x2cf0 [ 928.281239][T32379] lock_acquire+0x106/0x350 [ 928.286276][T32379] _raw_spin_lock_bh+0x36/0x50 [ 928.291596][T32379] nr_rt_ioctl+0x40c/0xf90 [ 928.296549][T32379] sock_do_ioctl+0x101/0x320 [ 928.301681][T32379] sock_ioctl+0x5c6/0x7f0 [ 928.306557][T32379] __se_sys_ioctl+0xfc/0x170 [ 928.311698][T32379] do_syscall_64+0x15f/0xf80 [ 928.316824][T32379] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 928.323251][T32379] [ 928.323251][T32379] other info that might help us debug this: [ 928.323251][T32379] [ 928.333480][T32379] Chain exists of: [ 928.333480][T32379] nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock [ 928.333480][T32379] [ 928.347325][T32379] Possible unsafe locking scenario: [ 928.347325][T32379] [ 928.354796][T32379] CPU0 CPU1 [ 928.360170][T32379] ---- ---- [ 928.365548][T32379] lock(&nr_node->node_lock); [ 928.370325][T32379] lock(nr_node_list_lock); [ 928.377457][T32379] lock(&nr_node->node_lock); [ 928.384756][T32379] lock(nr_neigh_list_lock); [ 928.389450][T32379] [ 928.389450][T32379] *** DEADLOCK *** [ 928.389450][T32379] [ 928.397602][T32379] 2 locks held by syz.1.6510/32379: [ 928.402800][T32379] #0: ffffffff8ff61938 (nr_node_list_lock){+.-.}-{3:3}, at: nr_rt_ioctl+0x15f/0xf90 [ 928.412316][T32379] #1: ffff88803530de70 (&nr_node->node_lock){+...}-{3:3}, at: nr_rt_ioctl+0x215/0xf90 [ 928.421980][T32379] [ 928.421980][T32379] stack backtrace: [ 928.427882][T32379] CPU: 0 UID: 0 PID: 32379 Comm: syz.1.6510 Not tainted syzkaller #0 PREEMPT(full) [ 928.427908][T32379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 928.427921][T32379] Call Trace: [ 928.427930][T32379] [ 928.427939][T32379] dump_stack_lvl+0xe8/0x150 [ 928.427973][T32379] print_circular_bug+0x2e1/0x300 [ 928.427998][T32379] check_noncircular+0x12e/0x150 [ 928.428022][T32379] __lock_acquire+0x15a5/0x2cf0 [ 928.428063][T32379] ? nr_rt_ioctl+0x40c/0xf90 [ 928.428079][T32379] lock_acquire+0x106/0x350 [ 928.428105][T32379] ? nr_rt_ioctl+0x40c/0xf90 [ 928.428123][T32379] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 928.428148][T32379] ? nr_rt_ioctl+0x40c/0xf90 [ 928.428164][T32379] _raw_spin_lock_bh+0x36/0x50 [ 928.428185][T32379] ? nr_rt_ioctl+0x40c/0xf90 [ 928.428201][T32379] nr_rt_ioctl+0x40c/0xf90 [ 928.428223][T32379] ? __pfx_nr_rt_ioctl+0x10/0x10 [ 928.428245][T32379] ? apparmor_capable+0x126/0x170 [ 928.428280][T32379] ? capable+0x88/0xe0 [ 928.428307][T32379] ? nr_ioctl+0x1b1/0x3b0 [ 928.428333][T32379] sock_do_ioctl+0x101/0x320 [ 928.428359][T32379] ? __pfx_sock_do_ioctl+0x10/0x10 [ 928.428381][T32379] ? do_futex+0x333/0x420 [ 928.428406][T32379] sock_ioctl+0x5c6/0x7f0 [ 928.428429][T32379] ? __pfx_sock_ioctl+0x10/0x10 [ 928.428450][T32379] ? __fget_files+0x2a/0x420 [ 928.428468][T32379] ? __fget_files+0x3a0/0x420 [ 928.428485][T32379] ? __fget_files+0x2a/0x420 [ 928.428504][T32379] ? bpf_lsm_file_ioctl+0x9/0x20 [ 928.428528][T32379] ? __pfx_sock_ioctl+0x10/0x10 [ 928.428551][T32379] __se_sys_ioctl+0xfc/0x170 [ 928.428574][T32379] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 928.428592][T32379] do_syscall_64+0x15f/0xf80 [ 928.428616][T32379] ? trace_irq_disable+0x3b/0x140 [ 928.428640][T32379] ? clear_bhb_loop+0x40/0x90 [ 928.428659][T32379] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 928.428677][T32379] RIP: 0033:0x7ffa5259cdd9 [ 928.428701][T32379] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 928.428717][T32379] RSP: 002b:00007ffa507ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 928.428737][T32379] RAX: ffffffffffffffda RBX: 00007ffa52815fa0 RCX: 00007ffa5259cdd9 [ 928.428752][T32379] RDX: 0000000000000000 RSI: 00000000000089e2 RDI: 0000000000000005 [ 928.428763][T32379] RBP: 00007ffa52632d69 R08: 0000000000000000 R09: 0000000000000000 [ 928.428775][T32379] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 928.428790][T32379] R13: 00007ffa52816038 R14: 00007ffa52815fa0 R15: 00007ffd1cf6b7a8 [ 928.428813][T32379] [ 928.704870][T32344] wg1 speed is unknown, defaulting to 1000 [ 931.194611][ T11] block nbd0: Possible stuck request ffff888027898a40: control (read@0,1024B). Runtime 24 seconds [ 931.205780][ T11] block nbd0: Possible stuck request ffff888027898c00: control (read@1024,1024B). Runtime 24 seconds [ 931.217545][ T11] block nbd0: Possible stuck request ffff888027898dc0: control (read@2048,1024B). Runtime 24 seconds [ 931.228968][ T11] block nbd0: Possible stuck request ffff888027898f80: control (read@3072,1024B). Runtime 24 seconds [ 931.834007][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5610 ms [ 931.842092][ C1] lec:lec_tx_timeout: lec0 [ 931.846733][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 934.554878][ T11] block nbd0: Possible stuck request ffff888027898a40: control (read@0,1024B). Runtime 26 seconds [ 934.566022][ T11] block nbd0: Possible stuck request ffff888027898c00: control (read@1024,1024B). Runtime 26 seconds [ 934.577857][ T11] block nbd0: Possible stuck request ffff888027898dc0: control (read@2048,1024B). Runtime 26 seconds [ 934.589301][ T11] block nbd0: Possible stuck request ffff888027898f80: control (read@3072,1024B). Runtime 26 seconds [ 936.864023][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 936.872088][ C1] lec:lec_tx_timeout: lec0 [ 936.876800][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 937.914718][ T11] block nbd0: Possible stuck request ffff888027898a40: control (read@0,1024B). Runtime 28 seconds [ 937.925889][ T11] block nbd0: Possible stuck request ffff888027898c00: control (read@1024,1024B). Runtime 28 seconds [ 937.937375][ T11] block nbd0: Possible stuck request ffff888027898dc0: control (read@2048,1024B). Runtime 28 seconds [ 937.948855][ T11] block nbd0: Possible stuck request ffff888027898f80: control (read@3072,1024B). Runtime 28 seconds