last executing test programs: 6.033763577s ago: executing program 2 (id=21080): socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x400000000010, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_rdma(0x10, 0x3, 0x14) socket$netlink(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480), 0xc0}, 0x40000002) socket$netlink(0x10, 0x3, 0xf) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$l2tp(0x2, 0x2, 0x73) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r2, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', @ANYRES32=r2], 0x28}, 0x1, 0x0, 0x0, 0x24008821}, 0x802) 5.98101527s ago: executing program 2 (id=21082): connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}, 0x1c) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b80)=ANY=[@ANYBLOB="e8000000100001002dbd7000fddbdf257874732874776f6669736829"], 0xe8}, 0x1, 0x0, 0x0, 0x44}, 0x80) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000ac0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'bond0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000780)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100d2f2d16eb32902ce2f0000000c00018008000100", @ANYRES32=r5], 0x20}}, 0x0) sendmsg$inet(r1, &(0x7f0000000700)={&(0x7f0000000180)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10, &(0x7f00000004c0)=[{&(0x7f00000002c0)="500b570fc980bb95a72f3c5647da5c85ebbf0dceeff6b1665d53d4310e2d4f4894aa1940aed0a0e82ef5805a316a765cc0b4e8e51f95633f6a8b76d1cf911ff937160ad2b7ca6b3c138d47ef3716eb6c3e9c72cf5ccdbe25b4b146ff3b3e31ea238632c3cf0122a160b979d726bf44d8d0fb70", 0x73}, {&(0x7f0000000340)="c8075843864ca0eb2ffe2decab114471786a29e4cfcf15431fc3ac9e66a5dcbc9944158e2574475f428af045d299787bd5b0bc0a4e5011d15ba0ce882ffe4cea36c55208f2c59aeb1385f29b39154b881879f2b8a1ff90b582c36739fb682d7ed05daf79def2ec848e62884a6334965fa3b5f700bb5669fafb0e1c5e9cc70dec9bec4e281177ed729e17e08f6dbc01b96ba98419fa2989f16fa1b7dbef247d7b1bc065ed65d8b5f7ce64d082d3e4953c4a3b017d20334b8874b9b08e610434d6080458d351257d", 0xc7}, {&(0x7f0000000440)="8e702ab02c109aa5fc4b9ae599d1b1c108e05788835149dd597de31bbf9d4c528d34528f1b9c195b8686767afb35d307f89e5cc0e203a1867fd2050ff26534e781cfe2fa4ad8c035138693f826365fbdcebe52459c76a1bace8f97e64dbafdd3f831fe9237721a20e812e3470c1a560aafbc277f0549", 0x76}], 0x3, &(0x7f00000010c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @rand_addr=0x64010101, @empty}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xf}}, @ip_retopts={{0xc0, 0x0, 0x7, {[@noop, @generic={0x88, 0x11, "6108b50b8f75176d503aacd9601603"}, @cipso={0x86, 0x1a, 0x2, [{0x0, 0x7, "17f9c54a56"}, {0x7, 0x2}, {0x6, 0xb, "35be601179860246e3"}]}, @ssrr={0x89, 0x1b, 0x7a, [@rand_addr=0x64010102, @remote, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x22}, @empty]}, @timestamp_prespec={0x44, 0x34, 0x3c, 0x3, 0xb, [{@empty}, {@broadcast, 0x6}, {@rand_addr=0x64010102, 0x1000}, {@remote, 0x7}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7}, {@local, 0x38}]}, @cipso={0x86, 0x8, 0x0, [{0x2, 0x2}]}, @cipso={0x86, 0x29, 0x3, [{0x0, 0xa, "ee2af169a230c969"}, {0x1, 0x4, "86f6"}, {0x7, 0x8, "51e28b8741cb"}, {0x1, 0xa, "9af23ce158a3267d"}, {0x1, 0x3, "98"}]}, @ssrr={0x89, 0x3, 0x71}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x5}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}], 0x140}, 0x800) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001080)={&(0x7f00000001c0)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000001000)=[{&(0x7f0000000d00)=""/188, 0xbc}, {&(0x7f0000000dc0)=""/196, 0xc4}, {&(0x7f0000000ec0)=""/218, 0xda}, {&(0x7f0000000fc0)=""/26, 0x1a}], 0x4, 0x0, 0x0, 0x8800}, 0x4000800) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x3c1, 0x3, 0x3b8, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x100, 0x168, 0x0, {0x0, 0x2000000000000}, [@common=@ipv6header={{0x28}, {0x6, 0x4d, 0x1}}, @common=@inet=@l2tp={{0x30}, {0x3, 0x3, 0x3, 0x1, 0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x6, 0x5, 0x8, 0x401, 'pptp\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x160, 0x180, 0x0, {}, [@common=@inet=@set1={{0x28}, {{0x2, 0x0, 0x7}}}, @common=@srh1={{0x90}, {0x2f, 0x11, 0x0, 0xd, 0x1c, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @empty, @dev={0xfe, 0x80, '\x00', 0x1e}, [0xffffffff, 0x0, 0xffffffff, 0xff], [0xff000000, 0x0, 0xff000000, 0xffffffff], [0xffffffff, 0xff000000, 0xff000000, 0x7fffff00], 0x0, 0x1000}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0x8}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newqdisc={0x50, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x8, '\x00', 0x7, 0x7f, 0x1, 0x7}}}}, @TCA_RATE={0x6, 0x5, {0x7}}]}, 0x50}, 0x1, 0x0, 0x0, 0x14028010}, 0x20004000) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x30, r12, 0x1, 0x0, 0x100000, {{}, {}, {0x14, 0x19, {0x1, 0x1, 0x0, 0x2000000}}}}, 0x30}, 0x1, 0x0, 0x0, 0x24000001}, 0x1004) sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000c80)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, r12, 0x300, 0x70bd27, 0x25dfdbff, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x800) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5b5d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @rand_addr=' \x01\x00'}]}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'gre0\x00'}]}, 0x50}}, 0x0) 5.476631417s ago: executing program 4 (id=21085): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000bc0)=@newsa={0x138, 0x10, 0x1, 0x8000000, 0x0, {{@in=@remote, @in6=@loopback, 0x2, 0x0, 0x4e20, 0x50, 0x0, 0x20, 0x0, 0x16}, {@in6=@local, 0xfffffffc, 0x33}, @in=@local, {0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x5680000000, 0x0, 0x9, 0x10400}, {0x401, 0x9}, 0x3, 0x0, 0xa, 0x1, 0x0, 0x90}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x20000010}, 0x24000058) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800130001"], 0x50) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r5 = socket(0x15, 0xc, 0x7fff) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000040)=0x4, 0x4) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x48) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_ethernet(0x19e, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f00000002c0)=@ethtool_sfeatures={0x3b, 0x2, [{0xfe, 0x8020ffa1}, {0xfffffff9, 0x80500}]}}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000006080)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r4}, 0x0, &(0x7f0000000880)=r7}, 0x20) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r5, 0x84, 0xf, &(0x7f0000000600)={0x0, @in6={{0xa, 0x4e22, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}}, 0x7ff, 0x5, 0xc03a, 0x3, 0x200}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r7, r9, 0x25, 0x2, @void}, 0x10) r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="1801000030"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x20000000) connect$bt_sco(r0, &(0x7f0000000bc0), 0x8) 5.327842476s ago: executing program 3 (id=21086): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000019440)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x24040804}, 0x4008000) sendmsg$nl_route(r0, 0x0, 0x40084) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0) preadv(r3, &(0x7f00000013c0)=[{0x0}, {&(0x7f00000000c0)=""/4092, 0xffc}], 0x2, 0x5, 0x45) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r5 = socket(0x40000000015, 0x805, 0x0) getsockopt(r5, 0x114, 0x271b, 0x0, &(0x7f00000000c0)) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) r6 = socket$can_bcm(0x1d, 0x2, 0x2) recvmmsg(r6, &(0x7f0000001180), 0x0, 0x10002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, 0x0, 0x0) connect$inet(r7, 0x0, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) unshare(0xe040400) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010128bd7000000000002b00000008000300", @ANYRES32=r8, @ANYBLOB="040046000500340000000000080026006c07"], 0x34}, 0x1, 0x0, 0x0, 0xf040}, 0x20004800) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x28, r1, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x805}, 0x10) 2.303704071s ago: executing program 0 (id=21087): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@fallback=r0, r0, 0x2f, 0x8, 0xffffffffffffffff, @void, @value=0x0}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[], 0x20) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)=0xf, 0x12) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, 0x0, &(0x7f0000000140)) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) recvmsg(r2, &(0x7f000000c1c0)={0x0, 0x0, &(0x7f000000c080)=[{&(0x7f000000acc0)=""/4096, 0x1000}, {&(0x7f000000bec0)=""/27, 0x1b}], 0x2}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x4, 0x4, 0x2, 0x0, 0x1, 0x2000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000725e85000000010000"], &(0x7f0000000040)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x94) syz_emit_ethernet(0x66, &(0x7f0000002bc0)={@local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f81fcb", 0x30, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "4aa1d3", 0x0, 0x0, 0x0, @private1, @ipv4={'\x00', '\xff\xff', @loopback}}}}}}}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x2c, 0xd, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x42100}, [@IFLA_IFNAME={0x14, 0x3, 'batadv0\x00'}, @IFLA_MTU={0x8, 0x4, 0xd7}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0xfffffff8, 0x9}}]}]}]}, 0x50}}, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r8, &(0x7f0000000b80)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000540)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r8, 0x84, 0x77, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="070017000800"], 0xa) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0xb, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000000000000000000004000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000bbffffffb702000008000000b70300000000000085000000cf00000095"], &(0x7f0000000080)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) 2.278520896s ago: executing program 3 (id=21088): socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x400000000010, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_rdma(0x10, 0x3, 0x14) socket$netlink(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480), 0xc0}, 0x40000002) socket(0x28, 0x5, 0x0) socket$netlink(0x10, 0x3, 0xf) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$l2tp(0x2, 0x2, 0x73) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', @ANYRES32=r1], 0x28}, 0x1, 0x0, 0x0, 0x24008821}, 0x802) 2.220355985s ago: executing program 2 (id=21090): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f00000000c0)={0x0, 0x1, 0xfc, 0xfffffff7, @vifc_lcl_addr=@rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) socket(0x40000000015, 0x5, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000006800e97800000000000000ea0900000000000000040004"], 0x1c}}, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000, 0x1}, 0x20) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000001040)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @multicast2}, 0x20000003}}, 0x2e) ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f0000001300)) readv(r3, &(0x7f0000001240)=[{&(0x7f0000000040)=""/4090, 0xffa}, {0x0}, {&(0x7f0000001340)=""/224, 0xe0}], 0x3) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x24044044, &(0x7f0000000540)={0xa, 0x4e22, 0x0, @mcast2, 0x4}, 0x1c) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r5 = socket(0x40000000015, 0x5, 0x0) connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r5, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet(r5, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40) getsockopt(r5, 0x200000000114, 0x2715, &(0x7f0000000580)=""/102393, &(0x7f0000000400)=0x18ff9) 2.159997258s ago: executing program 4 (id=21091): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008091}, 0x4000004) socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0x7d, 0x0, &(0x7f00000001c0)) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYRES16=r2, @ANYRES8=r1, @ANYBLOB="2493be19cc5313563658eee95a8ebaac1c278f4156c3d3e1ec6a671ae12d73f3d1599fbab2748e9b30fc1d70df2ff730dd1e5ada4f51a3139fdb7b51f45987af6ff7c943244cc82e"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r2, 0x0, 0x4000800) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8801}, 0x20008850) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r9) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001340)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd25, 0x8004, {0x0, 0x0, 0x0, r10, {0x0, 0xfff3}, {}, {0xfff3, 0xb}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x2}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000080}, 0x24040812) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f00000004c0)={'filter\x00', 0x7, 0x4, 0x438, 0x0, 0x110, 0x220, 0x350, 0x350, 0x350, 0x4, 0x0, {[{{@arp={@remote, @loopback, 0xff000000, 0xffffff00, 0xc, 0x5, {@mac, {[0xff, 0x0, 0x0, 0xff, 0x0, 0xff]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}, {[0x0, 0xff, 0x0, 0x0, 0xff]}}, 0x8c65, 0x0, 0xb45a, 0x9d4, 0x1, 0xfc9, 'pimreg\x00', 'lo\x00', {}, {0xff}, 0x0, 0xad3706fb507c050}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x20}, @mac=@link_local, @remote, @dev={0xac, 0x14, 0x14, 0x14}, 0x8}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="4317b2b931ba", @mac=@multicast, @broadcast, @rand_addr=0x64010101, 0x8, 0xffffffff}}}, {{@uncond, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x4, 0x1, 0x0, 0x0, 0x0, "46ffb8b043f67b83761bb1d6a7930832a54d06810372ba3ddf6ab4a59902f3593a39b1b8c1363b3bc6f18afa07107cb08730446452841f1e14d8bff64aaf1ff7"}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x488) 1.850516707s ago: executing program 1 (id=21092): socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x400000000010, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_rdma(0x10, 0x3, 0x14) socket$netlink(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480), 0xc0}, 0x40000002) socket$netlink(0x10, 0x3, 0xf) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$l2tp(0x2, 0x2, 0x73) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r2, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', @ANYRES32=r2], 0x28}, 0x1, 0x0, 0x0, 0x24008821}, 0x802) 1.802601612s ago: executing program 0 (id=21093): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x10, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}, 0x14) r2 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r3 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close(r3) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r2) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket(0x10, 0x80003, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xb, "0000000000020400"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'dummy0\x00'}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'gre0\x00', &(0x7f00000000c0)={'erspan0\x00', 0x0, 0x80, 0x10, 0x2, 0xff, {{0x28, 0x4, 0x0, 0x3, 0xa0, 0x66, 0x0, 0x8, 0x29, 0x0, @local, @empty, {[@end, @noop, @generic={0x82, 0xf, "aecd140ea5bba8848bf050b33f"}, @ssrr={0x89, 0x1b, 0xa7, [@loopback, @broadcast, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @rand_addr=0x64010102]}, @noop, @timestamp_addr={0x44, 0x14, 0x34, 0x1, 0x7, [{@remote, 0x4}, {@multicast2, 0xaad}]}, @cipso={0x86, 0x3b, 0x3, [{0x1, 0x6, "f393dd9a"}, {0x0, 0xe, "bc74866041e0bf8ea98a86f4"}, {0x1, 0x8, "c4deea6a611e"}, {0x5, 0x4, "df29"}, {0x0, 0x2}, {0x4, 0x11, "4dfeb6a6e4eb9d42182115ffb0b047"}, {0x2, 0x2}]}, @generic={0x7, 0x2}, @generic={0x88, 0xe, "e54a03f020cc920782f9883f"}]}}}}}) r8 = socket(0x10, 0x2, 0x0) r9 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r9, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8) bind$inet6(r9, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r9, &(0x7f00000022c0)=[{{&(0x7f0000000080)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000340)=""/224, 0xe0}, {&(0x7f00000007c0)=""/216, 0xd8}, {&(0x7f00000008c0)}, {&(0x7f0000000900)=""/4096, 0x1000}, {&(0x7f0000001900)=""/13, 0xd}, {&(0x7f0000001940)=""/243, 0xf3}, {&(0x7f0000000240)=""/22, 0x16}, {&(0x7f0000001a80)=""/100, 0x64}], 0x8, &(0x7f0000001b80)=""/102, 0x66}}, {{&(0x7f0000001c00)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, &(0x7f0000002180)=[{&(0x7f0000001c80)=""/141, 0x8d}, {&(0x7f0000001d40)=""/176, 0xb0}, {&(0x7f0000001e00)=""/196, 0xc4}, {&(0x7f0000001f00)=""/201, 0xc9}, {&(0x7f0000002000)=""/147, 0x93}, {0x0}], 0x6, &(0x7f0000002200)=""/158, 0x9e}}], 0x2, 0x10022, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r8, 0x89f2, &(0x7f0000000200)={'gre0\x00', &(0x7f0000000100)={'syztnl0\x00', r10, 0x1, 0x40, 0xfffffff8, 0x5, {{0xe, 0x4, 0x1, 0x5, 0x38, 0x68, 0x0, 0x6, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, {[@ssrr={0x89, 0xb, 0x5c, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @generic={0x82, 0xf, "ebe7456883813d8752af68b318"}, @ssrr={0x89, 0x7, 0x73, [@broadcast]}]}}}}}) r11 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_control(r11, &(0x7f0000000080)='disconnect aa:aa:aa:aa:aa:11 0', 0x1e) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000001c0), 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, 0x0, 0x10000000) syz_genetlink_get_family_id$tipc2(&(0x7f0000001840), r0) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f0000001880)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x44830}, 0x8094) 1.738023993s ago: executing program 1 (id=21094): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="380000002300010324bd7002fadbdf25010000001800028014001c0000000000000003f86f161ed927187f830000000000ac1414bb0000000000"], 0x38}}, 0xc004) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newtfilter={0x24, 0x11, 0x1, 0x70bd27, 0x80, {0x0, 0x0, 0x74, 0x0, {0xb, 0xfff2}, {0xfff2, 0x9}, {0x4, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x8041}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000300)={0xa, 0x4e24, 0x6bb, @ipv4={'\x00', '\xff\xff', @local}, 0x5}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000540), 0x3) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f00000004c0)=@gcm_256={{0x303, 0x3a}, "56db7a2700f81000", "a8ef1a3a33071799b7bbebfa6dc371290d0e3808802000", "336819df", "4008000000008700"}, 0x38) sendto$inet6(r3, &(0x7f0000000000)="442e2717bdbd39f5d2185ec9050d681a1038f4", 0x13, 0x40, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r4, &(0x7f00000023c0)=[{{&(0x7f0000000300)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xa}, 0x1c, &(0x7f0000000000)=[{&(0x7f00000002c0)="474d10", 0x3}], 0x1}}, {{&(0x7f00000004c0)={0xa, 0x4e21, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, &(0x7f0000000500)}}], 0x2, 0x880) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x58, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x9, 0xffffffff}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x2}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x58}}, 0x8000) r6 = accept$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000240)=0x14) poll(&(0x7f0000000280)=[{r3, 0x8020}, {r0, 0x4000}, {r6, 0x1}, {r0, 0x500}, {r6, 0x67}, {r4, 0x2}, {r6, 0x8}], 0x7, 0x9) recvmsg(r1, &(0x7f0000000600)={&(0x7f0000000540)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000480)}], 0x1}, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1.536139148s ago: executing program 1 (id=21095): r0 = epoll_create(0xfff) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="120000001b0000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="0d000000000000007110b3000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x94) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000400)={0x30000000}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r2, &(0x7f0000000700)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x244}, 0x1, 0x0, 0x0, 0x80d0}, 0x5) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'bridge0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), r7) recvmsg(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000000180)=""/103, 0x67}], 0x3}, 0x400002e1) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f00000002c0), &(0x7f0000000300)=0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b4000000000000007900480000000000630a0700000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x21) sendmsg$FOU_CMD_ADD(r7, &(0x7f0000000280)={0x0, 0xffffffe8, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002dbd7000000000000100000008000600e0000001050004000100000008000b"], 0x2c}, 0x1, 0x0, 0x0, 0x20048091}, 0x0) r9 = socket$inet6(0xa, 0x2, 0x0) close(r9) r10 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r10, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x800, 0x0, 0x3, 0x1, 0x8}, 0x20) setsockopt$inet6_int(r9, 0x29, 0x1000000000021, &(0x7f0000000040)=0x2005, 0x4) sendmsg$inet6(r10, &(0x7f0000000140)={&(0x7f0000000100)={0xa, 0x4e23, 0x180000, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x31}}, 0xfffffffb}, 0x1c, 0x0, 0x0, &(0x7f0000000bc0)=[@hopopts={{0x18, 0x29, 0x36, {0x32}}}, @hopopts_2292={{0x18, 0x29, 0x36, {0x1}}}], 0x30}, 0x34004894) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x12, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0xd, 0xfff2}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x9, 0x4, 0x241, 0x5, 0x9}, 0xffff, 0x1, 0x7, 0x80000001, 0x4, 0x7, 0x13, 0x4, 0x6, 0x800, {0x8, 0x9, 0x2, 0x8, 0x8001, 0xf4}}}}]}, 0x78}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r11 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCGARP(r11, 0x8954, &(0x7f0000000500)={{0x2, 0x4e20, @local}, {0x306, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}}, 0x60, {0x2, 0x4e20, @multicast2}, 'veth0_to_team\x00'}) 1.399645724s ago: executing program 4 (id=21096): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0x9, 0x5fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r3, {0xc}, {}, {0xf, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x1, 0x9, 0x8000, 0x3, 0x7, 0x6, 0xb762, 0x6, 0x40, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x7fc, 0xffff8000, 0x6, 0x401, 0x9, 0xb89, 0xffffe4f9, 0xd6, 0x4, 0x8, 0x7, 0xfffffffd, 0x2, 0x101, 0x1, 0xfffffffc, 0x4, 0x81000, 0x1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0x3, 0x1, 0x180, 0x5f09973, 0x9, 0x44, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x80000007, 0x80000001, 0x0, 0x8, 0xfffffa72, 0xcd, 0xffffff80, 0x80000000, 0xc, 0x6, 0x65, 0x91, 0x659, 0x400009, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x0, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7f, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x40101, 0x0, 0x3, 0x1000, 0x4, 0x401, 0x7, 0x80000002, 0xffff, 0x6, 0x5, 0x4, 0xffffffff, 0x80000000, 0x0, 0x200, 0x8, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x8, 0x2d5421e8, 0x7, 0x10000, 0xffffffff, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x3, 0xfffffffb, 0xd4c, 0x0, 0x0, 0x2, 0x1000, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0xd, 0x6, 0x5, 0x5, 0x4d15, 0x1ff, 0xfffff060, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x1, 0x8, 0x42ba, 0x4, 0x1009, 0x3, 0x76, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xffb, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0x0, 0x2, 0x7, 0x8, 0xfff, 0x1ff, 0x8000, 0x3, 0x8, 0x2, 0x9, 0x9a6, 0x245, 0x402, 0x1, 0x1ff, 0x3e, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0x9, 0x0, 0x4, 0x8, 0x7, 0x5, 0x2, 0x7b, 0xfffffefe, 0x6, 0x6, 0xc, 0x401000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x4, 0x1, 0x4, 0x200, 0x2]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40098}, 0x10) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'syzkaller0\x00', 0x0}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xb, 0xfff3}, {}, {0x8, 0xc}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x0, 0x13}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x4000010) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f0000000000)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r6, 0x7}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200080314000e00072f01000000000000113cfdcb00000080ed00827600000000000100", 0x26}, {&(0x7f0000000780)="9942d6af00007f8f", 0xdd86}], 0x2}, 0x5) 1.376186843s ago: executing program 1 (id=21097): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0xb, @empty}, 0x1c) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x2, 0x8000}}, @func_proto]}}, 0x0, 0x3e, 0x0, 0x1, 0x3}, 0x28) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e23, @empty}}, 0x0, 0xfff9, 0x20000000, 0x5, 0x50, 0x1000, 0x1}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000440)={0x0, @in6={{0xa, 0x4e23, 0x2, @empty, 0x9d7}}, 0x80000001, 0x0, 0x0, 0xb3, 0xb3550aa4ba878396, 0x10001, 0x1}, 0x9c) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) socketpair(0x1e, 0x2, 0x10001, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x20, r2, 0x10, 0x70bd6c, 0xfffffffe, {0x1a}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000801}, 0x44050) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000003000000010000000000000803000000000000000000000200000000010000000000000f02000000002e"], 0x0, 0x3f, 0x0, 0x1}, 0x28) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[], &(0x7f0000000f40)=""/4089, 0x3f, 0xff9, 0xa}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@ccm_128={{0x303}, "0e57b3d487e2db32", "a9df7ccffde8899f914d4f2c3e263509", "3c36a51c", "6775c975b6b15e11"}, 0x28) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x50a32, 0x823}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @loopback={0x300}}]}}}, @IFLA_MTU={0x8, 0x4, 0x400005}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000080}, 0xc010) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "f64e40992f79ecf0", "53c272d8b763f690b35605dff8a4a8d2", "021000", "72392a24199b5903"}, 0x28) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)="c800b66cf7e6a58cd8e0e80c86470ec8c3c0d6b06acd299df554ff6d4c46a5e948e458d6291d3aab88af945442040056972d9d82b584db7aed7075fcb4850257c7cf202122802afec235970a469a73ea4193e861993d0d14c39e25a81de895927d3a86ba369ed1c66b615488829a7502aaed5d20c90800753013f6a46fd587a882589bea59703c5619a8697ee9661140a295a65ede871662b0a5713e89f3bfff54a01fbb1a641056b8f7d98a65a17dedcf11ffbb8c93ed0275431beebd524767543f3a0083992c9406001106a201fa8fb4c2abb7d22d810aa4101e5e6100", 0xde}, {&(0x7f00000029c0)="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", 0xf06}], 0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) readv(r0, &(0x7f00000006c0)=[{&(0x7f0000001980)=""/4099, 0x1003}], 0x1) 1.3753677s ago: executing program 3 (id=21098): r0 = socket(0x2b, 0x1, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="c289060000000000240012800b00010067656e6576650000140002800600050080b805dd9941599e05c28b4e2200000500080001000000"], 0x44}}, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r2, 0x400448e3, &(0x7f0000000100)={0x0, 0x4000, '\x00', 0x2}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, 0x0, 0x20004800) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet_tcp_int(r0, 0x6, 0x17, &(0x7f0000000340)=0xfb78, 0x4) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x31}}, 0x10) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, 0x0, 0x0) r5 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000040)={0x2}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001f80)={0x2c, 0x35, 0x1, 0x70bd25, 0x25dfdbfd, {0x7}, [@nested={0x10, 0x1, 0x0, 0x1, [@typed={0xc, 0x8c8, 0x0, 0x0, @u64=0x2}]}, @nested={0x8, 0x4, 0x0, 0x1, [@nested={0x4, 0x92}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8800}, 0x4040) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, 0x0, &(0x7f00000001c0)=0x84) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r7}, 0xc) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4620}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x34040017}, 0x4c080) 1.312987948s ago: executing program 2 (id=21099): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket(0x840000000002, 0x3, 0x100) setsockopt$inet_msfilter(r1, 0x0, 0x29, 0x0, 0xffad) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f0000000000), 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000600), 0x1c1341, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000140)=ANY=[@ANYBLOB="030000000000000017000000020000000500000000000000", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\t2\x00'/28]) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r4, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010002000000000000000000000a18010000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000002cd40009800800014000000006c80002800c00018008000140000000032400018008000140000000070800014000000008080001400000000908000140000000080c000180080001400000000a24"], 0x140}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$alg(0x26, 0x5, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1800000040000703fcffffff00000100037c000004"], 0x18}, 0x1, 0x0, 0x0, 0x4008011}, 0xc000) ioctl$TUNSETNOCSUM(r2, 0x400454c8, 0x1) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x3e8, 0xffffffff, 0xf0, 0x0, 0x0, 0xfeffffff, 0xffffffff, 0x318, 0x318, 0x318, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x35, {0x3}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x1, 0x3d, {0x6}}}}, {{@ipv6={@private0, @loopback, [0xff, 0x0, 0xff000000, 0xff000000], [0x0, 0xff, 0xff000000, 0xffffff00], 'team0\x00', 'batadv_slave_0\x00', {0xff}, {}, 0xff, 0xe7, 0x4, 0x44}, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@dst={{0x48}, {0x4, 0x9, 0x1, [0x3, 0x8575, 0x9, 0xfff, 0x8, 0x101, 0x1, 0x101, 0x8, 0x5, 0x800, 0xb9e, 0x6, 0x8, 0x7, 0x4], 0xf}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x0, 0x2, {0x7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x448) bind$alg(r7, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(twofish-asm)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000200)="2c3c5a2a33c1ff64022462bfd46095097ab1a3b6bc436ab123f0f048c388e0cb", 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@newtfilter={0x5c, 0x2c, 0xd3f, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0xc, 0xc}, {0x0, 0x9}, {0x0, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x20, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x1c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_LABEL={0x8, 0x5, {0x0, 0x0, 0x1}}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x3}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_TTL={0x5, 0x2, 0x7f}]}}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), 0xffffffffffffffff) r10 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r10, 0x8983, &(0x7f00000001c0)={0x7, 'gretap0\x00', {0x8000}, 0x6}) 1.294095036s ago: executing program 3 (id=21100): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={r0, r1/1000+10000}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x10, 0x803, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000002", 0x38, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x8, 0x2, 0x0, 0x0, {0x0, 0x6, "c8b7a7", 0x0, 0x2f, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @private2, [@fragment={0x2c, 0x0, 0x80, 0x1, 0x0, 0x17, 0x64}]}}}}}}}, 0x0) 1.123179557s ago: executing program 2 (id=21101): r0 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001d80)=ANY=[@ANYBLOB="4c060000", @ANYRES16=r0, @ANYBLOB="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"], 0x64c}, 0x1, 0x0, 0x0, 0xc004}, 0x40001) r1 = socket$nl_generic(0x10, 0x3, 0x10) writev(r1, &(0x7f0000000200), 0x20) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x290, 0x0, 0xb, 0xd0e0011, 0x120, 0xc6, 0x1f8, 0x1d8, 0x190, 0x1f8, 0x1d8, 0x3, 0x0, {[{{@ip={@rand_addr, @broadcast, 0x0, 0x0, 'nr0\x00', '\x00', {}, {}, 0x1}, 0x0, 0xd8, 0x120, 0x7000000, {}, [@common=@icmp={{0x28}, {0xd, "0010"}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x33f}}}, {{@ip={@remote, @multicast1, 0x0, 0x0, 'bridge_slave_1\x00', 'virt_wifi0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x9, 0x0, 0x0, 0x20000, 'syz1\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0) openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x4001, 0x3, 0x228, 0x0, 0xb, 0x148, 0x0, 0x148, 0x208, 0x240, 0x240, 0x208, 0x215, 0x3, 0x0, {[{{@ip={@local, @multicast1, 0x0, 0xffffff00, 'ip6erspan0\x00', 'nr0\x00', {}, {0xff}, 0x21, 0x0, 0x10}, 0x2e8, 0x70, 0xb8, 0x0, {0xff0f000000000000}}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x7, 0xab, 0x6, 'syz1\x00', {0x4}}}}, {{@ip={@broadcast, @remote, 0x0, 0x0, 'team0\x00', 'netpci0\x00', {}, {}, 0x0, 0x1}, 0xec010000, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x4, 0x5, 0x22000000, 0xfffffffa, '\x00', 'syz1\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x288) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x48050) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socket$alg(0x26, 0x5, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x24004004) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r4, 0x400448ca, 0x0) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r4, &(0x7f0000000440)=ANY=[], 0xa) 928.561898ms ago: executing program 4 (id=21102): r0 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r1) sendmsg$NFC_CMD_LLC_GET_PARAMS(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, r2, 0x1, 0x70bd31, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000080}, 0x804) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)={0x2c, r0, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040020}, 0x64100) socket$inet(0x2, 0x3, 0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x6, 0x4, 0x1, 0x0, r3}, 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r4, &(0x7f0000000900)}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000800"], 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)=ANY=[], 0x50) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, 0x0, &(0x7f00000001c0)=0x84) ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f0000000240)={0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000400100004112200a4e2000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000000580), 0x2000cc0, r7}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280), 0x0, 0x1, r7}, 0x38) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000c3a0f8ff4100000095"], 0x0, 0x4, 0x96, &(0x7f00000015c0)=""/150}, 0x94) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$802154_dgram(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x24, @short={0x2, 0x1, 0xaaa1}}, 0x14, &(0x7f0000000040)={0x0, 0x6c}, 0x1, 0x0, 0x0, 0x1000}, 0x800) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$PPPIOCGIDLE(r6, 0x8010743f, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, 0x0, 0x0) 925.972568ms ago: executing program 0 (id=21112): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0x9, 0x5fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r3, {0xc}, {}, {0xf, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x1, 0x9, 0x8000, 0x3, 0x7, 0x6, 0xb762, 0x6, 0x40, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x7fc, 0xffff8000, 0x6, 0x401, 0x9, 0xb89, 0xffffe4f9, 0xd6, 0x4, 0x8, 0x7, 0xfffffffd, 0x2, 0x101, 0x1, 0xfffffffc, 0x4, 0x81000, 0x1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0x3, 0x1, 0x180, 0x5f09973, 0x9, 0x44, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x80000007, 0x80000001, 0x0, 0x8, 0xfffffa72, 0xcd, 0xffffff80, 0x80000000, 0xc, 0x6, 0x65, 0x91, 0x659, 0x400009, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x0, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7f, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x40101, 0x0, 0x3, 0x1000, 0x4, 0x401, 0x7, 0x80000002, 0xffff, 0x6, 0x5, 0x4, 0xffffffff, 0x80000000, 0x0, 0x200, 0x8, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x8, 0x2d5421e8, 0x7, 0x10000, 0xffffffff, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x3, 0xfffffffb, 0xd4c, 0x0, 0x0, 0x2, 0x1000, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0xd, 0x6, 0x5, 0x5, 0x4d15, 0x1ff, 0xfffff060, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x1, 0x8, 0x42ba, 0x4, 0x1009, 0x3, 0x76, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xffb, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0x0, 0x2, 0x7, 0x8, 0xfff, 0x1ff, 0x8000, 0x3, 0x8, 0x2, 0x9, 0x9a6, 0x245, 0x402, 0x1, 0x1ff, 0x3e, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0x9, 0x0, 0x4, 0x8, 0x7, 0x5, 0x2, 0x7b, 0xfffffefe, 0x6, 0x6, 0xc, 0x401000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x4, 0x1, 0x4, 0x200, 0x2]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40098}, 0x10) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'syzkaller0\x00', 0x0}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xb, 0xfff3}, {}, {0x8, 0xc}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x0, 0x13}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x4000010) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f0000000000)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r6, 0x7}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200080314000e00072f01000000000000113cfdcb00000080ed00827600000000000100", 0x26}, {&(0x7f0000000780)="9942d6af00007f8f", 0xdd86}], 0x2}, 0x5) 702.065019ms ago: executing program 4 (id=21103): epoll_create(0x7) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000080)={'ip6_vti0\x00', 0x0, 0x2f, 0x8, 0x40, 0xf, 0x51, @private0, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x8, 0x700, 0x8, 0x1}}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write(r1, &(0x7f0000000000)="2e000000010002", 0x7) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x8, 0x3000000000002, 0x0, 0x80}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000002900)=r3, 0x4) bind$netlink(r2, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000000700)=@deltaction={0x14, 0x31, 0x800, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x600, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000004001a80180002"], 0x44}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[], 0x1c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d1030000140000001100"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r6, 0x0, 0x40) close(0x3) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) 700.866957ms ago: executing program 0 (id=21114): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, 0x0, 0x20040084) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r2, {0xc}, {}, {0xf, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x1, 0x9, 0x8000, 0x3, 0x7, 0x6, 0xb762, 0x6, 0x40, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x7fc, 0xffff8000, 0x6, 0x401, 0x9, 0xb89, 0xffffe4f9, 0xd6, 0x4, 0x8, 0x7, 0xfffffffd, 0x2, 0x101, 0x1, 0xfffffffc, 0x4, 0x81000, 0x1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0x3, 0x1, 0x180, 0x5f09973, 0x9, 0x44, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x80000007, 0x80000001, 0x0, 0x8, 0xfffffa72, 0xcd, 0xffffff80, 0x80000000, 0xc, 0x6, 0x65, 0x91, 0x659, 0x400009, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x0, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7f, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x40101, 0x0, 0x3, 0x1000, 0x4, 0x401, 0x7, 0x80000002, 0xffff, 0x6, 0x5, 0x4, 0xffffffff, 0x80000000, 0x0, 0x200, 0x8, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x8, 0x2d5421e8, 0x7, 0x10000, 0xffffffff, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x3, 0xfffffffb, 0xd4c, 0x0, 0x0, 0x2, 0x1000, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0xd, 0x6, 0x5, 0x5, 0x4d15, 0x1ff, 0xfffff060, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x1, 0x8, 0x42ba, 0x4, 0x1009, 0x3, 0x76, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xffb, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0x0, 0x2, 0x7, 0x8, 0xfff, 0x1ff, 0x8000, 0x3, 0x8, 0x2, 0x9, 0x9a6, 0x245, 0x402, 0x1, 0x1ff, 0x3e, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0x9, 0x0, 0x4, 0x8, 0x7, 0x5, 0x2, 0x7b, 0xfffffefe, 0x6, 0x6, 0xc, 0x401000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x4, 0x1, 0x4, 0x200, 0x2]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40098}, 0x10) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xb, 0xfff3}, {}, {0x8, 0xc}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x0, 0x13}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x4000010) 700.068113ms ago: executing program 2 (id=21104): socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x400000000010, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_rdma(0x10, 0x3, 0x14) socket$netlink(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480), 0xc0}, 0x40000002) socket(0x28, 0x5, 0x0) socket$netlink(0x10, 0x3, 0xf) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$l2tp(0x2, 0x2, 0x73) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', @ANYRES32=r1], 0x28}, 0x1, 0x0, 0x0, 0x24008821}, 0x802) 654.814177ms ago: executing program 0 (id=21105): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x80) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f00000001c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0x4}]}}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x24000804) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r7, 0x3e}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x20004014) 478.818132ms ago: executing program 0 (id=21106): r0 = socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) write(r1, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_lsm={0x6, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe09, 0x0, 0x40f00, 0x7, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r4 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0xfffe, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000e0ff00000000000000bd0000000000000000000000e4ec010000000040000000000000000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000067ff0000000000000005"], 0x310) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f0000001080)=ANY=[@ANYBLOB="01000000000000000a00000300000000ff01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000001"], 0x110) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f1, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000c40)={'ip_vti0\x00', 0x0, 0x8, 0x0, 0x7fff, 0xffff, {{0x7, 0x4, 0x0, 0x2, 0x1c, 0x0, 0x2, 0x0, 0x5e55b37311de6d89, 0x0, @remote, @local, {[@cipso={0x86, 0x6, 0x3}]}}}}}) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001140)=ANY=[@ANYBLOB="140100003e0001030000000000000000010100800c000100", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="0000fc8000009800", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="0000c6005b2a00000000a200", @ANYRES32, @ANYBLOB="0000c300000000800000d6800000002e8000004b000a000000000000000000db8074dae68f5db3db3c801f777d40d7fa8025b70dd5243e59a8fdf2f0504c11a7ed7252d44743a615df3b2d02cc8548b772f9587df4852ccc12fcba5bc0411caafa38de00000000000000"], 0x13a}], 0x1}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha256\x00'}, 0x58) accept(r0, 0x0, 0x0) sendmmsg$inet6(r3, &(0x7f0000001a00)=[{{0x0, 0x0, &(0x7f00000006c0)}}], 0x1, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r8, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_MPATH(r3, &(0x7f00000003c0)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYBLOB="00082dbd7000fcdbdf2517002e756688eec3de000008000300", @ANYRES32=r9, @ANYBLOB="0a001a0008021100000100000a00060008021100000000000a001a00ffffffffffff00000a00060008021100000000000a001a0008021100000100000a001a0008021100000000000a00060008021100000000000a000600ffffffffffff0000"], 0x7c}, 0x1, 0x0, 0x0, 0x4008000}, 0x14041) 475.150481ms ago: executing program 1 (id=21107): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3e, &(0x7f00000040c0)=0x7, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'tunl0\x00'}) sendmsg$NL80211_CMD_SET_WDS_PEER(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x20000090}, 0x40) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b0400000000000000000200fffe4c0004802800018007000100637400001c0002800800014000000002080002400000000a050003000000000020000180070001006374000014000280080002400000000d080004400000000c0900010073797a30000000000900020073797a32"], 0xa0}, 0x1, 0x0, 0x0, 0x840}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000400000000000000000000850000002c000000850000002a00000095"], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000840)={r6, r4, 0x25, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0, 0x0, 0x5}}, 0x30) syz_emit_ethernet(0xbe, &(0x7f0000000300)=ANY=[], 0x0) syz_genetlink_get_family_id$nl802154(0x0, r2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)={0x2, 0xf, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@private, @in6=@dev}}, @sadb_address={0x5, 0x17, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}}]}, 0x78}}, 0x0) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r2, 0x0, 0x20000000) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) sendmmsg$inet(r0, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x3284b164842c97f7, 0x8014) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c000000140003002bbd700600dbdf250a019cc8402324c096f85bf75fa65792dd758b9f6ed0453b012a15f1a34b4796d2f7af6a29e9c845e835edb2063906cf2e3321490849cd8db0685a72b77ed25952c450bec38d783560be655adc052126704a9fa5938d9e9d66a4fc485ca734a41ed40a43c5ff5bf5dc5e6878189466e560439c009e169346be2eceff79ade3b403f9d4df388d31be6e20ba6b83d64549a7922e9d5c650046d5f16cbe17176632", @ANYRES32=r8, @ANYBLOB="14000200fe8000000000000000000000000000aa08000a00010000000800090000000080"], 0x3c}, 0x1, 0x0, 0x0, 0x20000001}, 0x1) 388.715654ms ago: executing program 3 (id=21108): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_audit(0x10, 0x3, 0x9) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r6, {0x0, 0x7}, {0x1, 0xb}, {0xffff, 0xfff2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x21, 0x4}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240448a4}, 0x4890) r7 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r7, 0x0, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(0xffffffffffffffff, 0x0, 0x40010) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x80}, 0x1, 0x0, 0x0, 0x10}, 0x10) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r9, &(0x7f0000000140)="05", 0x1, 0x4040094, &(0x7f00000000c0)={0x11, 0x10, r10, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000000)=0x1f, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=@newtaction={0x84, 0x30, 0xb, 0x5, 0x0, {}, [{0x70, 0x1, [@m_ct={0x6c, 0x1, 0x0, 0x0, {{0x7}, {0x44, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x14, 0x0, 0x0, 0x0, 0x400}}, @TCA_CT_LABELS={0x14, 0x7, "e142a1dc6b3a3dd0aaeb9317676b63d2"}, @TCA_CT_LABELS_MASK={0x14, 0x8, "ea32d9c3eada5bb4feefd4bf8818faba"}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x8890}, 0x8050) 141.706042ms ago: executing program 4 (id=21109): ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000040)={'syztnl1\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x0, 0x0, 0xf9, 0x1, 0x50, @loopback, @loopback={0x0, 0xffff888101827518}, 0x80f, 0x20, 0x1, 0xfffffff8}}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000005c0)={0x14, 0xa, 0xa, 0x101, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0xc0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x439, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r2, 0x9801}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gre={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @remote}, @IFLA_GRE_IGNORE_DF={0x5, 0x13, 0x1}, @IFLA_GRE_PMTUDISC={0x5}]}}}]}, 0x48}}, 0x0) r5 = socket$igmp(0x2, 0x3, 0x2) r6 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x12, 0x4, 0x4, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$inet(r5, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @dev={0xac, 0x14, 0x14, 0x3c}, @dev={0xac, 0x14, 0x14, 0x12}}}}], 0x20}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x4c, &(0x7f0000000000), 0x4) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x80, &(0x7f0000000000)=""/4087, &(0x7f0000001040)=0xff7) r10 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r10, 0x89f1, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000140)=@ethtool_sset_info={0x37, 0x9, 0x10000}}) 56.650413ms ago: executing program 3 (id=21110): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f00000000c0)={0x0, 0x1, 0xfc, 0xfffffff7, @vifc_lcl_addr=@rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) socket(0x40000000015, 0x5, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000006800e97800000000000000ea0900000000000000040004"], 0x1c}}, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000, 0x1}, 0x20) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000001040)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @multicast2}, 0x20000003}}, 0x2e) ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f0000001300)) readv(r3, &(0x7f0000001240)=[{&(0x7f0000000040)=""/4090, 0xffa}, {0x0}, {&(0x7f0000001340)=""/224, 0xe0}], 0x3) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x24044044, &(0x7f0000000540)={0xa, 0x4e22, 0x0, @mcast2, 0x4}, 0x1c) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r5 = socket(0x40000000015, 0x5, 0x0) connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r5, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet(r5, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40) getsockopt(r5, 0x200000000114, 0x2715, &(0x7f0000000580)=""/102393, &(0x7f0000000400)=0x18ff9) 0s ago: executing program 1 (id=21111): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) unshare(0x2a060400) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0xf8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) pwritev(r2, &(0x7f0000000100)=[{&(0x7f0000000040)="8e", 0x1}], 0x1, 0x4008001, 0x80) close(r2) socket$kcm(0x29, 0x2, 0x0) sendfile(r2, r1, 0x0, 0xf03a0005) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) r5 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r5, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) r7 = socket(0x2d, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) getsockname$packet(r7, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r0, 0xffffffffffffffff, 0x34, 0x0, @val=@uprobe_multi={0x0, &(0x7f0000000080), 0x0, 0x2e30, 0x0, 0x1}}, 0x40) kernel console output (not intermixed with test programs): tdevsim2 eth2: set [1, 1] type 2 family 0 port 20004 - 0 [ 1141.335966][ T1169] netdevsim netdevsim2 eth2: set [1, 2] type 2 family 0 port 52589 - 0 [ 1141.389080][ T1169] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1141.423493][ T1169] netdevsim netdevsim2 eth3: set [0, 1] type 1 family 0 port 4352 - 0 [ 1141.437608][ T1169] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1141.446262][ T1169] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 20004 - 0 [ 1141.454888][ T1169] netdevsim netdevsim2 eth3: set [1, 2] type 2 family 0 port 52589 - 0 [ 1141.577211][ T5635] tipc: Resetting bearer [ 1142.246921][T18925] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 1142.287686][T18925] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 1142.326512][T18925] tipc: Resetting bearer [ 1142.372994][T18930] tipc: Resetting bearer [ 1142.622833][T18929] tipc: Resetting bearer [ 1142.680163][ T48] tipc: Resetting bearer [ 1142.902258][T18944] ip_tables: iptables: counters copy to user failed while replacing table [ 1142.931727][T18936] syzkaller0: entered promiscuous mode [ 1142.945029][T18936] syzkaller0: entered allmulticast mode [ 1142.982025][T18946] tipc: Enabling of bearer rejected, already enabled [ 1143.347654][T18959] tipc: Enabled bearer , priority 0 [ 1143.429836][ T4936] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1146.305542][T18962] syzkaller0: entered promiscuous mode [ 1146.312010][T18962] syzkaller0: entered allmulticast mode [ 1146.370791][T18959] tipc: Resetting bearer [ 1146.518235][T18952] tipc: Resetting bearer [ 1146.609243][T18952] tipc: Disabling bearer [ 1146.633240][T18989] syzkaller0: entered promiscuous mode [ 1146.645900][T18989] syzkaller0: entered allmulticast mode [ 1146.664223][T18993] tipc: Enabling of bearer rejected, already enabled [ 1147.347439][T19020] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1147.510483][T19036] nbd: nbd3 already in use [ 1147.515667][T19036] block nbd3: NBD_DISCONNECT [ 1147.520919][T19036] block nbd3: Send disconnect failed -32 [ 1147.528146][T19036] block nbd3: Send disconnect failed -32 [ 1147.536641][T19036] block nbd3: shutting down sockets [ 1147.569642][T19036] netlink: 12 bytes leftover after parsing attributes in process `syz.3.19855'. [ 1147.951432][T19046] syzkaller0: entered promiscuous mode [ 1147.971627][T19046] syzkaller0: entered allmulticast mode [ 1148.118857][T19052] tipc: Resetting bearer [ 1151.260231][T19051] tipc: Resetting bearer [ 1151.499156][T19075] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1151.539510][T19075] netlink: 28 bytes leftover after parsing attributes in process `syz.3.19862'. [ 1151.718512][T19085] tipc: Enabling of bearer rejected, already enabled [ 1151.738926][T19090] netlink: 'syz.2.19868': attribute type 10 has an invalid length. [ 1151.837234][T19096] netlink: 'syz.0.19869': attribute type 1 has an invalid length. [ 1151.890424][T19101] netlink: 20 bytes leftover after parsing attributes in process `syz.0.19869'. [ 1151.921302][T19096] 8021q: adding VLAN 0 to HW filter on device bond28 [ 1152.008212][T19101] veth23: entered allmulticast mode [ 1152.023111][T19101] bond28: (slave veth23): Enslaving as an active interface with a down link [ 1152.045012][T19096] bond28: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 1152.059597][T19098] syzkaller0: entered promiscuous mode [ 1152.078648][T19098] syzkaller0: entered allmulticast mode [ 1152.104244][T19096] macvlan3: entered promiscuous mode [ 1152.110027][T19096] macvlan3: entered allmulticast mode [ 1152.116664][T19096] bond28: entered promiscuous mode [ 1152.128391][T19096] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1152.136321][T19096] bond28: (slave macvlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 1152.147995][ T30] audit: type=1804 audit(1785389341.729:25): pid=19104 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.19867" name="/newroot/3625/cgroup.controllers" dev="tmpfs" ino=18251 res=1 errno=0 [ 1152.177399][ T30] audit: type=1800 audit(1785389341.749:26): pid=19104 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.19867" name="cgroup.controllers" dev="tmpfs" ino=18251 res=0 errno=0 [ 1152.178837][T19096] bond28: left promiscuous mode [ 1152.201997][ T30] audit: type=1800 audit(1785389341.749:27): pid=19104 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.19867" name="cgroup.controllers" dev="tmpfs" ino=18251 res=0 errno=0 [ 1152.240158][T19098] tipc: Enabled bearer , priority 0 [ 1152.258008][T19106] tipc: Resetting bearer [ 1152.269940][T19097] tipc: Resetting bearer [ 1152.307254][T19097] tipc: Disabling bearer [ 1152.322487][ T1181] tipc: Resetting bearer [ 1152.399522][T19108] netlink: 12 bytes leftover after parsing attributes in process `syz.1.19871'. [ 1152.439211][T19108] vlan3: entered promiscuous mode [ 1152.447705][T19108] bond0: entered promiscuous mode [ 1152.640066][T19115] tipc: Resetting bearer [ 1152.800334][T19122] netlink: 28 bytes leftover after parsing attributes in process `syz.3.19874'. [ 1152.822572][T19123] syzkaller0: left promiscuous mode [ 1152.829445][T19123] syzkaller0: left allmulticast mode [ 1152.942706][T19114] tipc: Resetting bearer [ 1153.317219][T19133] netlink: 'syz.3.19882': attribute type 13 has an invalid length. [ 1153.360178][T19133] netlink: 'syz.3.19882': attribute type 17 has an invalid length. [ 1154.042568][T19139] bridge0: port 1(team0) entered disabled state [ 1154.501644][T19139] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1154.543343][T19139] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1155.409727][T19139] tipc: Resetting bearer [ 1155.643094][T19133] 8021q: adding VLAN 0 to HW filter on device team0 [ 1155.652632][T19133] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1155.677389][T19133] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1155.687575][T19133] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1155.704040][T19133] 0·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1155.714443][T19133] 0·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1155.734420][T19133] veth1_vlan: left promiscuous mode [ 1155.741125][T19133] veth0_vlan: left promiscuous mode [ 1155.748348][T19133] veth0_vlan: entered promiscuous mode [ 1155.755608][T19133] veth1_vlan: entered promiscuous mode [ 1155.765139][T19133] veth1_macvtap: left promiscuous mode [ 1155.772063][T19133] veth0_macvtap: left promiscuous mode [ 1155.779090][T19133] veth0_macvtap: entered promiscuous mode [ 1155.791473][T19133] veth1_macvtap: entered promiscuous mode [ 1155.823166][T19133] A link change request failed with some changes committed already. Interface geneve3 may have been left with an inconsistent configuration, please check. [ 1155.858772][T19161] bridge0: port 1(syz_tun) entered blocking state [ 1155.868728][T19161] bridge0: port 1(syz_tun) entered disabled state [ 1155.879407][T19161] syz_tun: entered promiscuous mode [ 1155.966361][T19183] syzkaller0: entered promiscuous mode [ 1155.972176][T19183] syzkaller0: entered allmulticast mode [ 1156.186393][T19221] tipc: Enabled bearer , priority 0 [ 1156.240657][T19221] syzkaller0: entered promiscuous mode [ 1156.247525][T19221] syzkaller0: entered allmulticast mode [ 1156.329329][T19221] tipc: Resetting bearer [ 1156.341350][T19220] tipc: Resetting bearer [ 1156.371055][T19220] tipc: Disabling bearer [ 1156.402217][T19231] ipvlan0: Caught tx_queue_len zero misconfig [ 1156.651936][T19244] syzkaller0: entered promiscuous mode [ 1156.657818][T19244] syzkaller0: entered allmulticast mode [ 1156.885216][T19251] tipc: Resetting bearer [ 1156.932392][T19251] 0: reclassify loop, rule prio 0, protocol 03 [ 1156.964075][T19251] tipc: Resetting bearer [ 1157.017181][T19251] tipc: Resetting bearer [ 1157.046422][T19256] netlink: 'syz.1.19907': attribute type 1 has an invalid length. [ 1157.085806][T19256] netlink: 224 bytes leftover after parsing attributes in process `syz.1.19907'. [ 1157.146160][T19250] tipc: Resetting bearer [ 1157.227532][T19256] netlink: 'syz.1.19907': attribute type 2 has an invalid length. [ 1157.235646][T19256] netlink: 40 bytes leftover after parsing attributes in process `syz.1.19907'. [ 1157.322932][T19273] netlink: 'syz.2.19910': attribute type 13 has an invalid length. [ 1157.331363][T19273] netlink: 'syz.2.19910': attribute type 17 has an invalid length. [ 1157.350578][T19272] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 1157.723533][T19281] team0: No ports can be present during mode change [ 1157.932108][ T7212] tipc: Resetting bearer [ 1158.035464][T19292] syzkaller0: entered promiscuous mode [ 1158.052814][T19292] syzkaller0: entered allmulticast mode [ 1158.127394][T19296] syzkaller0: entered promiscuous mode [ 1158.146797][T19296] syzkaller0: entered allmulticast mode [ 1158.329150][T19311] netlink: 4 bytes leftover after parsing attributes in process `syz.0.19917'. [ 1158.444459][ T30] audit: type=1804 audit(1785389348.029:28): pid=19315 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.19918" name="/newroot/4013/cgroup.controllers" dev="tmpfs" ino=20241 res=1 errno=0 [ 1158.471133][ T30] audit: type=1800 audit(1785389348.029:29): pid=19315 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.19918" name="cgroup.controllers" dev="tmpfs" ino=20241 res=0 errno=0 [ 1158.604450][T19319] netlink: 'syz.2.19921': attribute type 1 has an invalid length. [ 1158.742425][T19326] netlink: 'syz.1.19922': attribute type 13 has an invalid length. [ 1159.096680][T19317] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1159.131225][T19317] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1159.298307][T19343] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1159.680493][T19353] netlink: 'syz.4.19926': attribute type 13 has an invalid length. [ 1159.690111][T19353] netlink: 'syz.4.19926': attribute type 17 has an invalid length. [ 1159.764792][T19317] gretap4: left promiscuous mode [ 1159.776864][T19317] tipc: Resetting bearer [ 1159.799743][T19317] geneve6: left promiscuous mode [ 1159.805137][T19317] bond8: left promiscuous mode [ 1159.810731][T19317] bond11: left promiscuous mode [ 1159.815606][T19317] veth0_to_bond: left promiscuous mode [ 1159.821411][T19317] bond11: left allmulticast mode [ 1159.826809][T19317] veth0_to_bond: left allmulticast mode [ 1159.832809][T19317] bridge15: left promiscuous mode [ 1159.838533][T19317] bond15: left promiscuous mode [ 1159.843402][T19317] bond15: left allmulticast mode [ 1159.849636][T19319] workqueue: Failed to create a rescuer kthread for wq "bond24": -EINTR [ 1159.933717][ T7211] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1159.953835][ T7211] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1159.963120][ T7211] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1160.027920][T19353] gretap0: left promiscuous mode [ 1160.119279][T19353] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1160.222934][T19353] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1160.233783][T19353] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1160.263236][T19353] veth1_macvtap: left promiscuous mode [ 1160.270350][T19353] veth0_macvtap: left promiscuous mode [ 1160.277388][T19353] veth0_macvtap: entered promiscuous mode [ 1160.294667][T19353] veth1_macvtap: entered promiscuous mode [ 1160.312803][T19353] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1160.355176][T19353] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1160.364787][T19353] A link change request failed with some changes committed already. Interface geneve3 may have been left with an inconsistent configuration, please check. [ 1160.388395][ T7211] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1160.398684][ T7211] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1160.511192][ T7211] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1160.570865][ T7211] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1160.580027][ T7211] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1160.641527][T19369] syzkaller0: entered promiscuous mode [ 1160.649455][T19369] syzkaller0: entered allmulticast mode [ 1160.659093][T19371] tc action pedit offset 132 out of bounds [ 1160.833067][T19379] netlink: 'syz.0.19934': attribute type 1 has an invalid length. [ 1160.848457][T19379] netlink: 224 bytes leftover after parsing attributes in process `syz.0.19934'. [ 1161.002880][T19379] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 1161.022213][T19390] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.19935'. [ 1161.073981][T19397] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.19935'. [ 1161.149157][ T7211] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1161.305090][ T7211] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 1161.635214][T19413] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1161.646560][T19413] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1161.866332][T19418] tipc: Enabling of bearer rejected, already enabled [ 1161.902101][T19404] lo speed is unknown, defaulting to 1000 [ 1162.686672][T19452] syzkaller0: entered promiscuous mode [ 1162.695666][T19452] syzkaller0: entered allmulticast mode [ 1162.718965][T19454] syzkaller0: entered promiscuous mode [ 1162.729292][T19454] syzkaller0: entered allmulticast mode [ 1163.089175][T19463] syzkaller0: entered promiscuous mode [ 1163.094911][T19463] syzkaller0: entered allmulticast mode [ 1163.446034][T19472] tc action pedit 'at' offset 5 out of bounds [ 1163.453325][T19472] tc action pedit 'at' offset 5 out of bounds [ 1163.459464][T19472] tc action pedit 'at' offset 5 out of bounds [ 1163.465540][T19472] tc action pedit 'at' offset 5 out of bounds [ 1163.471630][T19472] tc action pedit 'at' offset 5 out of bounds [ 1163.477728][T19472] tc action pedit 'at' offset 5 out of bounds [ 1163.483798][T19472] tc action pedit 'at' offset 5 out of bounds [ 1163.489917][T19472] tc action pedit 'at' offset 5 out of bounds [ 1163.496021][T19472] tc action pedit 'at' offset 5 out of bounds [ 1163.502106][T19472] tc action pedit 'at' offset 5 out of bounds [ 1163.508210][T19472] 0: reclassify loop, rule prio 0, protocol 800 [ 1163.522010][T19471] tipc: Resetting bearer [ 1163.591542][T19477] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1163.640601][T19478] netlink: 'syz.3.19960': attribute type 4 has an invalid length. [ 1163.660285][T19481] netlink: 'syz.0.19962': attribute type 1 has an invalid length. [ 1163.692379][T19481] 8021q: adding VLAN 0 to HW filter on device bond29 [ 1163.732159][T19481] veth25: entered allmulticast mode [ 1163.740973][T19481] bond29: (slave veth25): Enslaving as an active interface with an up link [ 1163.788374][T19481] bond29 (unregistering): (slave veth25): Releasing backup interface [ 1163.840229][T19481] bond29 (unregistering): Released all slaves [ 1163.916232][T19491] tipc: Resetting bearer [ 1163.939715][T19491] netlink: 'syz.3.19965': attribute type 2 has an invalid length. [ 1163.964141][T19491] syzkaller0: entered promiscuous mode [ 1163.986716][T19491] syzkaller0: entered allmulticast mode [ 1164.004514][T19491] tipc: Resetting bearer [ 1164.040801][T19490] tipc: Resetting bearer [ 1164.180628][T19497] tipc: Enabling of bearer rejected, already enabled [ 1164.191284][T19497] sch_tbf: burst 255 is lower than device syzkaller0 mtu (299) ! [ 1164.323786][T19500] tipc: Enabling of bearer rejected, already enabled [ 1164.339578][T19500] sch_tbf: burst 255 is lower than device syzkaller0 mtu (299) ! [ 1164.421330][T19505] netlink: 40 bytes leftover after parsing attributes in process `syz.3.19970'. [ 1164.434042][T19505] netlink: 'syz.3.19970': attribute type 32 has an invalid length. [ 1164.500815][T19508] netlink: 4 bytes leftover after parsing attributes in process `syz.3.19970'. [ 1164.515386][T19509] syzkaller0: entered promiscuous mode [ 1164.522672][T19509] syzkaller0: entered allmulticast mode [ 1164.537603][T19509] tipc: Enabled bearer , priority 0 [ 1164.553479][T19509] tipc: Resetting bearer [ 1164.569795][T19507] tipc: Resetting bearer [ 1164.621054][T19507] tipc: Disabling bearer [ 1164.838792][T19523] sctp: [Deprecated]: syz.1.19974 (pid 19523) Use of int in max_burst socket option deprecated. [ 1164.838792][T19523] Use struct sctp_assoc_value instead [ 1164.962753][T19530] netlink: 'syz.0.19977': attribute type 4 has an invalid length. [ 1164.988569][T19533] tipc: Resetting bearer [ 1165.042239][T19533] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.19978'. [ 1165.043133][T19530] netlink: 7 bytes leftover after parsing attributes in process `syz.0.19977'. [ 1165.068388][T19532] tipc: Resetting bearer [ 1165.185896][ C1] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 1165.479794][T19550] tipc: Enabling of bearer rejected, already enabled [ 1165.516084][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1165.554207][T19556] syzkaller0: entered promiscuous mode [ 1165.559997][T19556] syzkaller0: entered allmulticast mode [ 1165.585608][T19562] netlink: 4 bytes leftover after parsing attributes in process `syz.0.19986'. [ 1165.758756][T19575] tipc: Resetting bearer [ 1165.778192][T19574] tipc: Resetting bearer [ 1165.973387][T19579] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.19991'. [ 1166.082622][T19585] tipc: Resetting bearer [ 1166.121369][T19584] tipc: Resetting bearer [ 1166.133811][T19591] tipc: Enabling of bearer rejected, already enabled [ 1166.146755][T19589] syzkaller0: entered promiscuous mode [ 1166.152434][T19589] syzkaller0: entered allmulticast mode [ 1166.409996][T19605] tipc: Enabling of bearer rejected, already enabled [ 1166.440654][T19610] tipc: Resetting bearer [ 1166.463873][T19610] xt_hashlimit: size too large, truncated to 1048576 [ 1166.468108][T19608] tipc: Enabled bearer , priority 0 [ 1166.515686][T19608] syzkaller0: entered promiscuous mode [ 1166.524421][T19608] syzkaller0: entered allmulticast mode [ 1166.540207][T19608] tipc: Resetting bearer [ 1166.576320][T19606] tipc: Resetting bearer [ 1166.603812][T19606] tipc: Disabling bearer [ 1166.767873][T19609] tipc: Resetting bearer [ 1166.780601][T19622] netlink: 'syz.1.20008': attribute type 13 has an invalid length. [ 1166.840406][T19623] netlink: 20 bytes leftover after parsing attributes in process `syz.1.20008'. [ 1166.897154][T19626] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.20010'. [ 1167.233950][ T57] tipc: Resetting bearer [ 1167.288197][T19642] tipc: Enabled bearer , priority 0 [ 1167.312619][T19642] syzkaller0: entered promiscuous mode [ 1167.337211][T19642] syzkaller0: entered allmulticast mode [ 1167.348870][T19646] team0: No ports can be present during mode change [ 1167.358286][T19642] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1167.419815][T19648] netlink: 36 bytes leftover after parsing attributes in process `syz.3.20013'. [ 1167.497253][T19642] tipc: Resetting bearer [ 1167.552447][T19641] tipc: Resetting bearer [ 1167.588559][T19641] tipc: Disabling bearer [ 1168.119572][T19668] bond13 (unregistering): Released all slaves [ 1168.254013][T19676] netlink: 'syz.4.20014': attribute type 2 has an invalid length. [ 1168.265538][T19676] netlink: 'syz.4.20014': attribute type 11 has an invalid length. [ 1168.347678][T19676] netlink: 4312 bytes leftover after parsing attributes in process `syz.4.20014'. [ 1169.831558][T19696] tipc: Resetting bearer [ 1169.933455][T19691] syzkaller0: entered promiscuous mode [ 1169.940200][T19691] syzkaller0: entered allmulticast mode [ 1169.952552][T19704] tipc: Enabled bearer , priority 0 [ 1169.980540][T19696] bridge0: port 4(wlan1) entered disabled state [ 1170.007083][T19706] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode [ 1170.014365][T19706] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode [ 1170.023835][T13129] batman_adv: batadv0: Interface deactivated: vlan2 [ 1170.251444][T19691] tipc: Resetting bearer [ 1170.364814][T19690] tipc: Resetting bearer [ 1170.429391][T19690] tipc: Disabling bearer [ 1170.483131][T19713] __nla_validate_parse: 2 callbacks suppressed [ 1170.483151][T19713] netlink: 164 bytes leftover after parsing attributes in process `syz.3.20033'. [ 1170.749539][T19711] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 1170.757597][T19711] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 1170.799566][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 1170.815737][ C0] bridge0: port 2(macvlan0) entered learning state [ 1170.860433][T19723] netlink: 12 bytes leftover after parsing attributes in process `syz.4.20036'. [ 1171.129110][T19731] netlink: 204 bytes leftover after parsing attributes in process `syz.0.20038'. [ 1171.152041][T19731] netlink: 84 bytes leftover after parsing attributes in process `syz.0.20038'. [ 1171.364965][T19735] netlink: 60 bytes leftover after parsing attributes in process `syz.0.20040'. [ 1171.784503][T19678] Set syz0 is full, maxelem 65536 reached [ 1171.803235][T19741] syzkaller0: entered promiscuous mode [ 1171.839076][T19741] syzkaller0: entered allmulticast mode [ 1171.941186][T19746] netlink: 4 bytes leftover after parsing attributes in process `syz.1.20045'. [ 1172.363756][T19757] netlink: 20 bytes leftover after parsing attributes in process `syz.0.20049'. [ 1172.394179][T19757] netlink: 20 bytes leftover after parsing attributes in process `syz.0.20049'. [ 1172.482610][T19751] bridge0: port 2(macvlan0) entered disabled state [ 1172.489422][T19751] bridge0: port 1(bridge_slave_0) entered disabled state [ 1172.555150][T19751] tipc: Resetting bearer [ 1172.900567][T19751] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1172.929686][T19751] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1173.346464][ C1] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 1174.082097][ T4936] block nbd3: Receive control failed (result -1) [ 1174.316944][T19772] netlink: 4 bytes leftover after parsing attributes in process `syz.4.20051'. [ 1174.626340][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1174.860611][T19751] batman_adv: batadv0: Interface deactivated: gretap4 [ 1175.021091][T19751] batman_adv: batadv0: Interface deactivated: gretap5 [ 1175.063018][ T57] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1175.074947][ T57] netdevsim netdevsim2 eth0: unset [0, 1] type 1 family 0 port 4352 - 0 [ 1175.098303][ T57] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1175.118254][ T57] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 1175.128414][ T57] netdevsim netdevsim2 eth0: unset [1, 2] type 2 family 0 port 52589 - 0 [ 1175.139113][ T57] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1175.151133][ T57] netdevsim netdevsim2 eth1: unset [0, 1] type 1 family 0 port 4352 - 0 [ 1175.160243][ T57] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1175.171005][ T57] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 1175.180421][ T57] netdevsim netdevsim2 eth1: unset [1, 2] type 2 family 0 port 52589 - 0 [ 1175.207294][ T57] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1175.231738][ T57] netdevsim netdevsim2 eth2: unset [0, 1] type 1 family 0 port 4352 - 0 [ 1175.249198][ T57] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1175.268115][ T57] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 1175.292256][ T57] netdevsim netdevsim2 eth2: unset [1, 2] type 2 family 0 port 52589 - 0 [ 1175.325559][ T57] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1175.347146][ T57] netdevsim netdevsim2 eth3: unset [0, 1] type 1 family 0 port 4352 - 0 [ 1175.358523][ T57] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1175.383062][ T57] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 1175.401289][ T57] netdevsim netdevsim2 eth3: unset [1, 2] type 2 family 0 port 52589 - 0 [ 1175.442370][T19771] netlink: 'syz.4.20051': attribute type 12 has an invalid length. [ 1175.548681][T19791] tipc: Enabled bearer , priority 0 [ 1175.579235][T19808] netlink: 12 bytes leftover after parsing attributes in process `syz.3.20057'. [ 1175.598278][T19795] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode [ 1175.605585][T19795] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode [ 1175.744926][T19797] syzkaller0: entered promiscuous mode [ 1175.751591][T19797] syzkaller0: entered allmulticast mode [ 1175.795356][T19817] vlan4: entered allmulticast mode [ 1175.800610][T19817] bridge17: entered allmulticast mode [ 1175.806817][T19819] bridge17: port 1(erspan0) entered blocking state [ 1175.817145][T19819] bridge17: port 1(erspan0) entered disabled state [ 1175.823930][T19819] erspan0: entered allmulticast mode [ 1175.834413][T19819] erspan0: left allmulticast mode [ 1175.839842][T19809] syzkaller0: entered promiscuous mode [ 1175.845452][T19809] syzkaller0: entered allmulticast mode [ 1175.864416][T19784] tipc: Resetting bearer [ 1175.879437][T19780] tipc: Resetting bearer [ 1175.933339][T19780] tipc: Disabling bearer [ 1176.134954][T19831] syzkaller0: entered promiscuous mode [ 1176.145150][T19831] syzkaller0: entered allmulticast mode [ 1176.163428][T19834] tipc: Resetting bearer [ 1176.180224][T19831] netlink: 1028 bytes leftover after parsing attributes in process `syz.1.20060'. [ 1176.234732][T19838] IPVS: set_ctl: invalid protocol: 2 0.0.0.0:20004 [ 1176.301434][T19843] netlink: 8 bytes leftover after parsing attributes in process `syz.0.20062'. [ 1176.317297][T19838] bond29: option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5) [ 1176.329548][T19838] bond29 (unregistering): Released all slaves [ 1176.396361][T19834] syzkaller0: left promiscuous mode [ 1176.407638][T19834] syzkaller0: left allmulticast mode [ 1176.420947][T19834] tipc: Resetting bearer [ 1176.541489][T19833] tipc: Resetting bearer [ 1176.821217][T19870] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 1176.829757][T19870] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 1176.900558][T19867] syzkaller0: entered promiscuous mode [ 1176.907466][T19867] syzkaller0: entered allmulticast mode [ 1177.043971][T19882] openvswitch: netlink: Duplicate or invalid key (type 0). [ 1177.059124][T19882] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1177.341221][ T57] tipc: Resetting bearer [ 1177.398767][T19890] syzkaller0: entered promiscuous mode [ 1177.416204][T19890] syzkaller0: entered allmulticast mode [ 1177.450766][T19898] tipc: Resetting bearer [ 1177.472320][T19898] syzkaller0: entered promiscuous mode [ 1177.484670][T19898] syzkaller0: entered allmulticast mode [ 1177.494146][T19903] bond0: Caught tx_queue_len zero misconfig [ 1177.609549][T19897] tipc: Resetting bearer [ 1177.816251][T19918] tipc: Resetting bearer [ 1177.825364][T19918] syzkaller0: left promiscuous mode [ 1177.840896][T19918] syzkaller0: left allmulticast mode [ 1177.858482][T19917] tipc: Resetting bearer [ 1177.970475][T19930] netlink: 'syz.1.20079': attribute type 1 has an invalid length. [ 1177.988738][T19930] netlink: 224 bytes leftover after parsing attributes in process `syz.1.20079'. [ 1178.233888][T19945] lo speed is unknown, defaulting to 1000 [ 1178.523134][ T7211] tipc: Resetting bearer [ 1178.618181][T19961] netlink: 'syz.3.20083': attribute type 14 has an invalid length. [ 1178.634192][T19961] netlink: 8 bytes leftover after parsing attributes in process `syz.3.20083'. [ 1178.643995][T19961] bond0: option xmit_hash_policy: invalid value (183) [ 1179.118060][T19981] 8021q: adding VLAN 0 to HW filter on device team0 [ 1179.149774][T19981] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1179.239434][T19981] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1179.268333][T19981] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1179.285174][T19981] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1179.330555][T19985] tipc: Resetting bearer [ 1179.518444][T19990] tc_dump_action: action bad kind [ 1179.620512][T20000] netlink: 164 bytes leftover after parsing attributes in process `syz.0.20091'. [ 1179.631128][T19984] tipc: Resetting bearer [ 1179.924716][T20007] syzkaller0: entered promiscuous mode [ 1179.935509][T20007] syzkaller0: entered allmulticast mode [ 1179.946412][T20007] tipc: Resetting bearer [ 1179.970565][T20007] tc action pedit unable to extract header offset for header type (0x5) [ 1179.980224][T20007] tc action pedit unable to extract header offset for header type (0x5) [ 1179.988623][T20007] tc action pedit unable to extract header offset for header type (0x5) [ 1179.997010][T20007] tc action pedit unable to extract header offset for header type (0x5) [ 1180.005343][T20007] tc action pedit unable to extract header offset for header type (0x5) [ 1180.013719][T20007] tc action pedit unable to extract header offset for header type (0x5) [ 1180.022097][T20007] tc action pedit unable to extract header offset for header type (0x5) [ 1180.030480][T20007] tc action pedit unable to extract header offset for header type (0x5) [ 1180.038838][T20007] tc action pedit unable to extract header offset for header type (0x5) [ 1180.047223][T20007] tc action pedit unable to extract header offset for header type (0x5) [ 1180.055569][T20007] 0: reclassify loop, rule prio 0, protocol 800 [ 1180.153852][ T7171] tipc: Resetting bearer [ 1180.167452][T19975] syzkaller0: entered promiscuous mode [ 1180.175225][T19975] syzkaller0: entered allmulticast mode [ 1180.494382][T20018] veth0_macvtap: entered allmulticast mode [ 1180.518259][T20018] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 1180.827432][T20037] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode [ 1180.834986][T20037] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode [ 1180.843505][T20046] tipc: Resetting bearer [ 1180.941121][T20042] tipc: Resetting bearer [ 1181.071508][T20058] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 1181.116293][T20056] syzkaller0: entered promiscuous mode [ 1181.122285][T20056] syzkaller0: entered allmulticast mode [ 1181.206194][ T7212] tipc: Resetting bearer [ 1181.392614][T20069] 8021q: adding VLAN 0 to HW filter on device team0 [ 1181.403960][T20069] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1181.449080][T20069] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1181.470033][T20069] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1181.495618][T20069] 0·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1181.507580][T20069] 0·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1181.524082][T20069] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1181.677379][T20074] tipc: Resetting bearer [ 1181.699315][T20074] syzkaller0: left promiscuous mode [ 1181.708139][T20074] syzkaller0: left allmulticast mode [ 1181.775487][T20074] TC_ACT_REPEAT abuse ? [ 1181.786667][T20073] tipc: Resetting bearer [ 1181.803236][T20072] netlink: 'syz.4.20111': attribute type 1 has an invalid length. [ 1182.018818][T20082] sctp: [Deprecated]: syz.0.20115 (pid 20082) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1182.018818][T20082] Use struct sctp_sack_info instead [ 1182.189743][ T1181] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1182.207526][ T1181] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1182.239094][ T1014] tipc: Resetting bearer [ 1182.255358][ T57] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1182.268148][ T57] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1182.310873][T20097] netlink: 12 bytes leftover after parsing attributes in process `syz.1.20121'. [ 1182.357056][ T4936] block nbd8: Receive control failed (result -1) [ 1182.407660][T20102] syzkaller0: entered promiscuous mode [ 1182.435493][T20102] syzkaller0: entered allmulticast mode [ 1182.444800][T20100] tipc: Resetting bearer [ 1182.460131][T20100] syzkaller0: entered promiscuous mode [ 1182.467871][T20100] syzkaller0: entered allmulticast mode [ 1182.565116][T20098] tipc: Resetting bearer [ 1182.650144][T20110] tipc: Resetting bearer [ 1182.795952][T20109] tipc: Resetting bearer [ 1182.818884][T20117] tc action pedit offset must be on 32 bit boundaries [ 1183.241482][T20132] netlink: 12 bytes leftover after parsing attributes in process `syz.1.20130'. [ 1183.278089][T20132] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1183.544965][ T1014] tipc: Resetting bearer [ 1183.580171][T20145] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 1183.620321][T20145] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 1183.678597][T20150] syzkaller0: entered promiscuous mode [ 1183.684628][T20150] syzkaller0: entered allmulticast mode [ 1183.856989][T20159] syzkaller0: entered promiscuous mode [ 1183.872753][T20159] syzkaller0: entered allmulticast mode [ 1183.901320][T20159] tc action pedit offset must be on 32 bit boundaries [ 1183.909558][T20159] tc action pedit offset must be on 32 bit boundaries [ 1183.916423][T20159] tc action pedit offset must be on 32 bit boundaries [ 1183.923222][T20159] tc action pedit offset must be on 32 bit boundaries [ 1183.930027][T20159] tc action pedit offset must be on 32 bit boundaries [ 1183.936834][T20159] tc action pedit offset must be on 32 bit boundaries [ 1183.943616][T20159] tc action pedit offset must be on 32 bit boundaries [ 1183.950448][T20159] tc action pedit offset must be on 32 bit boundaries [ 1183.957258][T20159] tc action pedit offset must be on 32 bit boundaries [ 1183.964044][T20159] 0: reclassify loop, rule prio 0, protocol 800 [ 1184.076249][T20163] syzkaller0: entered promiscuous mode [ 1184.082238][T20163] syzkaller0: entered allmulticast mode [ 1184.092936][T20165] netlink: 12 bytes leftover after parsing attributes in process `syz.0.20141'. [ 1184.170891][ T4936] block nbd9: Receive control failed (result -1) [ 1184.738895][T20185] tipc: Resetting bearer [ 1184.798490][T20184] tipc: Resetting bearer [ 1184.915228][T20190] tipc: Resetting bearer [ 1184.963743][T20189] tipc: Resetting bearer [ 1185.050046][T20196] tipc: Resetting bearer [ 1185.098593][T20196] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1185.142599][T20195] tipc: Resetting bearer [ 1185.215925][T20201] tc_dump_action: action bad kind [ 1185.279271][T20204] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 1185.343367][ T7211] tipc: Resetting bearer [ 1185.457805][T20209] xt_hashlimit: size too large, truncated to 1048576 [ 1185.737274][T20216] tipc: Resetting bearer [ 1185.759840][T20216] syzkaller0: left promiscuous mode [ 1185.767261][T20216] syzkaller0: left allmulticast mode [ 1185.777831][T20215] tipc: Resetting bearer [ 1185.919727][T20221] netlink: 12 bytes leftover after parsing attributes in process `syz.3.20158'. [ 1185.970737][ T4936] block nbd10: Receive control failed (result -1) [ 1186.107691][T20231] netlink: 388 bytes leftover after parsing attributes in process `syz.2.20160'. [ 1186.347670][ T7211] tipc: Resetting bearer [ 1186.523547][T20247] netlink: 24 bytes leftover after parsing attributes in process `syz.0.20177'. [ 1186.799214][T20245] syzkaller1: entered promiscuous mode [ 1186.808322][T20245] syzkaller1: entered allmulticast mode [ 1186.850222][T20261] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode [ 1186.857641][T20261] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode [ 1187.082386][T20267] netlink: 'syz.0.20184': attribute type 1 has an invalid length. [ 1187.124244][T20267] 8021q: adding VLAN 0 to HW filter on device bond29 [ 1187.238091][T20267] bond29: (slave veth27): Enslaving as an active interface with a down link [ 1187.279801][T20275] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1187.327698][T20280] bond4: (slave lo): Releasing backup interface [ 1187.397133][T20280] bond4: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 1187.414970][T20275] netlink: 12 bytes leftover after parsing attributes in process `syz.0.20184'. [ 1187.441674][T20280] team0: left allmulticast mode [ 1187.451499][T20280] team_slave_0: left allmulticast mode [ 1187.458113][T20280] team_slave_1: left allmulticast mode [ 1187.463679][T20280] bridge10: left allmulticast mode [ 1187.470958][T20280] bridge14: left allmulticast mode [ 1187.477257][T20280] team0: left promiscuous mode [ 1187.482554][T20280] team_slave_0: left promiscuous mode [ 1187.489678][T20280] team_slave_1: left promiscuous mode [ 1187.496252][T20280] bridge10: left promiscuous mode [ 1187.501434][T20287] netlink: 12 bytes leftover after parsing attributes in process `syz.2.20179'. [ 1187.509195][T20280] bridge14: left promiscuous mode [ 1187.516514][T20280] bridge0: port 1(team0) entered disabled state [ 1187.527769][T20280] bond11: (slave veth0_to_bond): Releasing active interface [ 1187.539426][ T4936] block nbd11: Receive control failed (result -1) [ 1187.571180][T20280] team0: Port device team_slave_0 removed [ 1187.626742][T20280] team0: Port device team_slave_1 removed [ 1187.656918][T20280] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1187.678256][T20280] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1187.706902][T20280] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1187.723004][T20280] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1187.752049][T20280] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1187.806947][T20267] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1187.818524][T20267] bond29: (slave batadv1): making interface the new active one [ 1187.833369][T20267] batadv1: entered promiscuous mode [ 1187.845452][T20267] bond29: (slave batadv1): Enslaving as an active interface with an up link [ 1188.256190][T20317] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.20183'. [ 1188.672907][T20332] tipc: Resetting bearer [ 1188.719605][T20332] syzkaller0: entered promiscuous mode [ 1188.725151][T20332] syzkaller0: entered allmulticast mode [ 1188.740310][T20332] tipc: Enabling of bearer rejected, already enabled [ 1188.759864][T20331] tipc: Resetting bearer [ 1188.798856][ T1181] tipc: Resetting bearer [ 1188.860095][T20335] lo speed is unknown, defaulting to 1000 [ 1188.944024][T20345] netlink: 12 bytes leftover after parsing attributes in process `syz.3.20195'. [ 1189.082527][T20351] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.20196'. [ 1189.116436][ T4936] block nbd12: Receive control failed (result -1) [ 1189.239140][T20350] syzkaller0: entered promiscuous mode [ 1189.256988][T20350] syzkaller0: entered allmulticast mode [ 1189.346076][ C1] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 1189.385357][T20365] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1190.049388][T20391] tipc: Resetting bearer [ 1190.078284][T20391] syzkaller0: left promiscuous mode [ 1190.083714][T20391] syzkaller0: left allmulticast mode [ 1190.100956][T20390] tipc: Resetting bearer [ 1190.242207][T20397] syzkaller0: entered promiscuous mode [ 1190.248620][T20397] syzkaller0: entered allmulticast mode [ 1190.302283][T20397] tipc: Enabled bearer , priority 0 [ 1190.328644][T20396] tipc: Resetting bearer [ 1190.356484][T20396] tipc: Disabling bearer [ 1190.511757][T20403] netlink: 'syz.1.20218': attribute type 1 has an invalid length. [ 1190.580642][T20403] 8021q: adding VLAN 0 to HW filter on device bond15 [ 1190.604479][T20410] bond15: (slave dummy0): making interface the new active one [ 1190.619544][T20414] netlink: 12 bytes leftover after parsing attributes in process `syz.2.20220'. [ 1190.635476][T20410] bond15: (slave dummy0): Enslaving as an active interface with an up link [ 1190.654497][T20403] bond15: entered promiscuous mode [ 1190.660115][T20403] dummy0: entered promiscuous mode [ 1190.666862][ T4936] block nbd13: Receive control failed (result -1) [ 1190.683482][T20403] bond15: entered allmulticast mode [ 1190.869636][ T7211] tipc: Resetting bearer [ 1191.158668][T20435] tipc: Resetting bearer [ 1191.184615][T20435] netlink: 'syz.3.20227': attribute type 1 has an invalid length. [ 1191.202923][T20435] netlink: 224 bytes leftover after parsing attributes in process `syz.3.20227'. [ 1191.220778][T20437] lo speed is unknown, defaulting to 1000 [ 1191.273473][T20444] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 1191.291364][T20444] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 1191.295652][T20435] netlink: 'syz.3.20227': attribute type 2 has an invalid length. [ 1191.307656][T20435] netlink: 40 bytes leftover after parsing attributes in process `syz.3.20227'. [ 1191.349008][T20435] : entered promiscuous mode [ 1191.354558][T20439] sch_tbf: burst 255 is lower than device syzkaller0 mtu (313) ! [ 1191.398239][T20434] tipc: Resetting bearer [ 1191.499114][T20452] tipc: Resetting bearer [ 1191.555632][T20452] syzkaller0: entered promiscuous mode [ 1191.561401][T20452] syzkaller0: entered allmulticast mode [ 1191.571727][T20455] syzkaller0: entered promiscuous mode [ 1191.579246][T20455] syzkaller0: entered allmulticast mode [ 1191.591367][T20449] tipc: Resetting bearer [ 1191.674556][T20459] tipc: Resetting bearer [ 1191.692479][T20459] syzkaller0: left promiscuous mode [ 1191.701422][T20459] syzkaller0: left allmulticast mode [ 1191.717239][T20458] tipc: Resetting bearer [ 1191.792491][T20463] tipc: Resetting bearer [ 1191.802526][T20463] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.20235'. [ 1191.813130][T20463] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.20235'. [ 1191.825585][T20462] tipc: Resetting bearer [ 1191.871826][ T306] tipc: Resetting bearer [ 1192.421614][T20490] __nla_validate_parse: 1 callbacks suppressed [ 1192.421631][T20490] netlink: 9 bytes leftover after parsing attributes in process `syz.1.20241'. [ 1192.492114][T20490] 0·: renamed from hsr0 [ 1192.509562][T20490] 0·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1192.528032][T20490] 0·: entered allmulticast mode [ 1192.533053][T20490] hsr_slave_0: entered allmulticast mode [ 1192.541693][T20490] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 1192.566119][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1192.694629][T20499] lo speed is unknown, defaulting to 1000 [ 1192.896637][T20506] netlink: 8 bytes leftover after parsing attributes in process `syz.1.20244'. [ 1193.165186][T20504] tipc: Resetting bearer [ 1193.172262][T20505] bridge0: entered promiscuous mode [ 1193.177798][T20505] vlan1: entered promiscuous mode [ 1193.183340][T20505] bridge0: entered allmulticast mode [ 1193.319746][T20503] tipc: Resetting bearer [ 1193.328107][T20515] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.20246'. [ 1193.378855][T20516] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.20246'. [ 1193.594406][T20519] tipc: Resetting bearer [ 1193.623073][T20523] syzkaller0: entered promiscuous mode [ 1193.645773][T20523] syzkaller0: entered allmulticast mode [ 1193.661384][T20523] tipc: Enabled bearer , priority 0 [ 1193.673757][T20519] syzkaller0: entered promiscuous mode [ 1193.690138][T20519] syzkaller0: entered allmulticast mode [ 1193.716009][T20523] tipc: Resetting bearer [ 1193.758341][T20522] tipc: Resetting bearer [ 1193.873714][T20522] tipc: Disabling bearer [ 1193.901423][T20518] tipc: Resetting bearer [ 1194.033653][T20531] 8021q: adding VLAN 0 to HW filter on device bond16 [ 1194.041704][T20531] bridge0: port 2(bond16) entered blocking state [ 1194.048539][T20531] bridge0: port 2(bond16) entered disabled state [ 1194.055145][T20531] bond16: entered allmulticast mode [ 1194.063508][T20531] bond16: entered promiscuous mode [ 1194.074888][T20531] bridge0: port 2(bond16) entered blocking state [ 1194.081380][T20531] bridge0: port 2(bond16) entered forwarding state [ 1194.093230][T20535] tipc: Resetting bearer [ 1194.108749][ T7212] bridge0: port 2(bond16) entered disabled state [ 1194.136137][T20534] tipc: Resetting bearer [ 1194.199141][ T7212] tipc: Resetting bearer [ 1194.314920][T20549] netlink: 4 bytes leftover after parsing attributes in process `syz.3.20256'. [ 1194.362544][T20549] batadv0: entered promiscuous mode [ 1194.389525][T20546] netlink: 32 bytes leftover after parsing attributes in process `syz.1.20258'. [ 1194.416295][T20549] macvtap2: entered promiscuous mode [ 1194.426039][T20549] macvtap2: entered allmulticast mode [ 1194.462072][T20549] batadv0: entered allmulticast mode [ 1194.487127][T20549] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 1194.731502][T20551] batadv0: left allmulticast mode [ 1194.775962][T20551] batadv0: left promiscuous mode [ 1194.794075][T20546] netlink: 32 bytes leftover after parsing attributes in process `syz.1.20258'. [ 1195.004055][T20551] macvtap2: left promiscuous mode [ 1195.009398][T20551] macvtap2: left allmulticast mode [ 1195.132581][T20557] tipc: Resetting bearer [ 1195.321599][T20563] netlink: 'syz.0.20261': attribute type 1 has an invalid length. [ 1195.358352][T20556] tipc: Resetting bearer [ 1195.422028][ T306] tipc: Resetting bearer [ 1195.433690][T20560] syzkaller0: entered promiscuous mode [ 1195.440575][T20560] syzkaller0: entered allmulticast mode [ 1195.461530][T20564] netlink: 28 bytes leftover after parsing attributes in process `syz.0.20261'. [ 1195.522997][T20564] 8021q: adding VLAN 0 to HW filter on device bond30 [ 1195.536863][T20570] tipc: Resetting bearer [ 1195.592836][T20572] IPVS: set_ctl: invalid protocol: 2 0.0.0.0:20004 [ 1195.638592][T20563] tipc: Resetting bearer [ 1195.676788][T20577] netlink: 8 bytes leftover after parsing attributes in process `syz.1.20264'. [ 1195.720040][T20572] bond17: option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5) [ 1195.740078][T20572] bond17 (unregistering): Released all slaves [ 1195.910547][T20575] syzkaller0: entered promiscuous mode [ 1195.916629][T20575] syzkaller0: entered allmulticast mode [ 1195.924385][T20569] tipc: Resetting bearer [ 1196.037429][T20591] netlink: 164 bytes leftover after parsing attributes in process `syz.3.20269'. [ 1196.710852][ T4936] block nbd14: Receive control failed (result -1) [ 1198.761276][T20593] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 1198.766014][ T7211] tipc: Resetting bearer [ 1198.839205][T20616] tipc: Enabling of bearer rejected, already enabled [ 1199.017739][ T1014] batadv1: left promiscuous mode [ 1199.040827][T20638] netlink: 'syz.1.20277': attribute type 1 has an invalid length. [ 1199.097500][T20642] __nla_validate_parse: 1 callbacks suppressed [ 1199.097538][T20642] netlink: 28 bytes leftover after parsing attributes in process `syz.1.20277'. [ 1199.122666][T20638] bond17: entered promiscuous mode [ 1199.128785][T20638] 8021q: adding VLAN 0 to HW filter on device bond17 [ 1199.137714][T20642] bond17: entered allmulticast mode [ 1199.191515][T20645] IPVS: set_ctl: invalid protocol: 2 0.0.0.0:20004 [ 1199.235356][T20638] bond17: (slave bridge16): making interface the new active one [ 1199.252174][T20638] bridge16: entered promiscuous mode [ 1199.257568][T20648] netlink: 164 bytes leftover after parsing attributes in process `syz.2.20281'. [ 1199.273662][T20650] netlink: 8 bytes leftover after parsing attributes in process `syz.3.20280'. [ 1199.283685][T20638] bridge16: entered allmulticast mode [ 1199.290687][T20638] bond17: (slave bridge16): Enslaving as an active interface with an up link [ 1199.348537][T20645] bond18: option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5) [ 1199.362377][T20645] bond18 (unregistering): Released all slaves [ 1199.453810][T20666] netlink: 4 bytes leftover after parsing attributes in process `syz.1.20285'. [ 1199.523323][T20669] netlink: 212 bytes leftover after parsing attributes in process `syz.2.20284'. [ 1199.535956][T20669] netlink: 12 bytes leftover after parsing attributes in process `syz.2.20284'. [ 1199.565431][T20669] netlink: 16 bytes leftover after parsing attributes in process `syz.2.20284'. [ 1199.610225][T20662] nbd: couldn't find a device at index 0 [ 1199.808122][ T30] audit: type=1804 audit(1785389389.399:30): pid=20675 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.20287" name="/newroot/3660/cgroup.controllers" dev="tmpfs" ino=18433 res=1 errno=0 [ 1199.835454][ T30] audit: type=1800 audit(1785389389.429:31): pid=20675 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.20287" name="cgroup.controllers" dev="tmpfs" ino=18433 res=0 errno=0 [ 1200.066905][T20650] tipc: Resetting bearer [ 1200.195167][T20652] netlink: 4 bytes leftover after parsing attributes in process `syz.0.20283'. [ 1200.228159][T20664] pimreg: entered allmulticast mode [ 1200.246020][T20664] pimreg: left allmulticast mode [ 1200.347473][T20691] netlink: 'syz.3.20291': attribute type 1 has an invalid length. [ 1200.393774][T20691] bond18: entered promiscuous mode [ 1200.399631][T20691] 8021q: adding VLAN 0 to HW filter on device bond18 [ 1200.442062][T20688] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.20290'. [ 1200.452630][T20688] openvswitch: netlink: Message has 512 unknown bytes. [ 1200.495126][T20691] macvtap3: entered allmulticast mode [ 1200.585151][T20695] macvtap4: entered allmulticast mode [ 1200.618732][T20691] bond18: (slave bridge18): making interface the new active one [ 1200.628550][T20691] bridge18: entered promiscuous mode [ 1200.637814][T20691] bond18: (slave bridge18): Enslaving as an active interface with an up link [ 1200.718396][T20700] syzkaller0: entered promiscuous mode [ 1200.723911][T20700] syzkaller0: entered allmulticast mode [ 1200.780394][T20710] syzkaller0: entered promiscuous mode [ 1200.786623][T20710] syzkaller0: entered allmulticast mode [ 1200.941686][T20724] netlink: 8 bytes leftover after parsing attributes in process `syz.3.20295'. [ 1205.607355][T20730] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1205.636007][T20730] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1205.652655][T20730] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1205.701282][T20740] __nla_validate_parse: 2 callbacks suppressed [ 1205.701301][T20740] netlink: 12 bytes leftover after parsing attributes in process `syz.1.20310'. [ 1205.746050][T20745] netlink: 40 bytes leftover after parsing attributes in process `syz.2.20302'. [ 1205.773669][ T4936] block nbd15: Receive control failed (result -107) [ 1205.860568][T20755] netlink: 'syz.4.20300': attribute type 13 has an invalid length. [ 1205.880061][T20754] netlink: 8 bytes leftover after parsing attributes in process `syz.0.20305'. [ 1205.942125][T20760] netlink: 'syz.1.20306': attribute type 1 has an invalid length. [ 1206.053305][T20760] bond18: entered promiscuous mode [ 1206.059114][T20760] 8021q: adding VLAN 0 to HW filter on device bond18 [ 1206.079389][T20762] macvtap0: entered allmulticast mode [ 1206.156295][T20764] macvtap1: entered allmulticast mode [ 1206.197298][T20760] bond18: (slave bridge17): making interface the new active one [ 1206.205286][T20760] bridge17: entered promiscuous mode [ 1206.212414][T20760] bond18: (slave bridge17): Enslaving as an active interface with an up link [ 1206.312467][T20772] netlink: 20 bytes leftover after parsing attributes in process `syz.3.20308'. [ 1206.493422][T20741] udevd[20741]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1206.542237][T20780] udevd[20780]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1206.642775][T20784] netlink: 164 bytes leftover after parsing attributes in process `syz.3.20315'. [ 1206.852716][T20777] No such timeout policy "syz1" [ 1206.873426][T20777] netlink: zone id is out of range [ 1206.887051][T20777] netlink: zone id is out of range [ 1206.904698][T20777] netlink: zone id is out of range [ 1206.914817][T20777] netlink: zone id is out of range [ 1206.919788][T20789] syzkaller0: entered promiscuous mode [ 1206.925789][T20789] syzkaller0: entered allmulticast mode [ 1206.931678][T20777] netlink: zone id is out of range [ 1206.933222][T20800] netlink: 48 bytes leftover after parsing attributes in process `syz.2.20317'. [ 1206.939077][T20777] netlink: zone id is out of range [ 1206.952500][T20777] netlink: zone id is out of range [ 1206.958215][T20777] netlink: zone id is out of range [ 1206.963511][T20777] netlink: zone id is out of range [ 1206.969919][T20777] netlink: zone id is out of range [ 1209.643628][T20807] syzkaller0: left promiscuous mode [ 1209.652119][T20807] syzkaller0: left allmulticast mode [ 1209.662455][T20807] tipc: Resetting bearer [ 1209.700222][T20819] tipc: Enabling of bearer rejected, already enabled [ 1209.701540][T20824] netlink: 'syz.2.20321': attribute type 13 has an invalid length. [ 1209.753176][T20827] netlink: 20 bytes leftover after parsing attributes in process `syz.2.20321'. [ 1209.821587][T20803] tipc: Resetting bearer [ 1209.874608][T20814] lo speed is unknown, defaulting to 1000 [ 1209.892567][T20833] netlink: 'syz.0.20323': attribute type 1 has an invalid length. [ 1209.961603][T20833] bond31: entered promiscuous mode [ 1209.969126][T20833] 8021q: adding VLAN 0 to HW filter on device bond31 [ 1209.982561][T20835] tipc: Resetting bearer [ 1210.000170][T20833] macvtap1: entered allmulticast mode [ 1210.074032][T20833] macvtap2: entered allmulticast mode [ 1210.090040][T20845] syzkaller0: entered promiscuous mode [ 1210.098207][T20845] syzkaller0: entered allmulticast mode [ 1210.147157][T20839] bond31: (slave bridge19): making interface the new active one [ 1210.155140][T20839] bridge19: entered promiscuous mode [ 1210.163767][T20839] bond31: (slave bridge19): Enslaving as an active interface with an up link [ 1210.173348][T20834] tipc: Resetting bearer [ 1210.354055][T20856] netlink: 'syz.0.20330': attribute type 1 has an invalid length. [ 1210.380438][T20856] netlink: 'syz.0.20330': attribute type 2 has an invalid length. [ 1211.035265][ T7211] tipc: Resetting bearer [ 1211.462197][T20874] netlink: 'syz.0.20336': attribute type 1 has an invalid length. [ 1211.559429][T20881] netlink: 164 bytes leftover after parsing attributes in process `syz.2.20337'. [ 1211.573363][T20874] 8021q: adding VLAN 0 to HW filter on device bond32 [ 1211.585431][T20880] bridge0: port 1(ip6gretap0) entered blocking state [ 1211.594420][T20881] netlink: 36 bytes leftover after parsing attributes in process `syz.2.20337'. [ 1211.607680][T20880] bridge0: port 1(ip6gretap0) entered disabled state [ 1211.620679][T20880] ip6gretap0: entered allmulticast mode [ 1211.641408][T20880] ip6gretap0: entered promiscuous mode [ 1211.681867][T20882] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 1211.723280][T20882] bond32: (slave batadv2): making interface the new active one [ 1211.750626][T20882] bond32: (slave batadv2): Enslaving as an active interface with an up link [ 1211.802029][T20888] tipc: Resetting bearer [ 1211.827632][T20887] tipc: Resetting bearer [ 1211.871179][T20889] syzkaller0: entered promiscuous mode [ 1211.883098][T20889] syzkaller0: entered allmulticast mode [ 1212.037381][ T7212] tipc: Resetting bearer [ 1212.472936][T20905] netlink: 'syz.0.20346': attribute type 7 has an invalid length. [ 1212.484973][T20905] netlink: 'syz.0.20346': attribute type 3 has an invalid length. [ 1212.493387][T20905] netlink: 224 bytes leftover after parsing attributes in process `syz.0.20346'. [ 1212.506051][T20905] nbd: couldn't find a device at index 0 [ 1212.672102][T20913] netlink: 'syz.4.20341': attribute type 1 has an invalid length. [ 1212.790901][T20919] netlink: 164 bytes leftover after parsing attributes in process `syz.3.20349'. [ 1212.794677][T20913] bond11: entered promiscuous mode [ 1212.807222][T20913] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1212.844052][T20925] netlink: 'syz.1.20352': attribute type 20 has an invalid length. [ 1212.908016][T20926] bond33: option primary_reselect: invalid value (6) [ 1212.937085][T20926] bond33 (unregistering): Released all slaves [ 1213.038028][T20913] macvtap1: entered allmulticast mode [ 1213.072693][T20920] macvtap2: entered allmulticast mode [ 1213.105211][T20913] bond11: (slave bridge10): making interface the new active one [ 1213.113889][T20913] bridge10: entered promiscuous mode [ 1213.149720][T20913] bond11: (slave bridge10): Enslaving as an active interface with an up link [ 1213.161813][T20938] tipc: Resetting bearer [ 1213.204681][T20936] tipc: Resetting bearer [ 1213.430648][T20948] syzkaller0: left promiscuous mode [ 1213.436198][T20948] syzkaller0: left allmulticast mode [ 1213.441876][T20948] tipc: Resetting bearer [ 1213.462205][T20946] netlink: 164 bytes leftover after parsing attributes in process `syz.2.20357'. [ 1213.474886][T20946] netlink: 16 bytes leftover after parsing attributes in process `syz.2.20357'. [ 1213.648402][T20952] netlink: 164 bytes leftover after parsing attributes in process `syz.0.20363'. [ 1213.664755][T20952] netlink: 36 bytes leftover after parsing attributes in process `syz.0.20363'. [ 1213.737979][T20956] syzkaller0: entered promiscuous mode [ 1213.743696][T20956] syzkaller0: entered allmulticast mode [ 1213.754842][T20956] tipc: Resetting bearer [ 1213.764816][T20956] netlink: 'syz.3.20364': attribute type 1 has an invalid length. [ 1213.788602][T20956] netlink: 'syz.3.20364': attribute type 2 has an invalid length. [ 1213.892656][T20963] netlink: 292 bytes leftover after parsing attributes in process `syz.3.20367'. [ 1214.029710][T20967] netlink: 8 bytes leftover after parsing attributes in process `syz.1.20368'. [ 1214.029799][T20971] lo speed is unknown, defaulting to 1000 [ 1214.052540][T20967] netlink: 'syz.1.20368': attribute type 10 has an invalid length. [ 1214.115911][T20967] geneve0: entered promiscuous mode [ 1214.125077][T20967] geneve0: entered allmulticast mode [ 1214.179566][ T7212] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1214.453543][ T7211] tipc: Resetting bearer [ 1214.721594][T20987] bond0: option resend_igmp: invalid value (695) [ 1214.728681][T20987] bond0: option resend_igmp: allowed values 0 - 255 [ 1214.742486][T20989] netlink: 'syz.1.20372': attribute type 1 has an invalid length. [ 1214.939926][T20989] bond19: entered promiscuous mode [ 1214.946463][T20989] 8021q: adding VLAN 0 to HW filter on device bond19 [ 1215.046937][T20994] macvtap2: entered allmulticast mode [ 1215.104216][T20999] macvtap3: entered allmulticast mode [ 1215.166945][T20989] bond19: (slave bridge18): making interface the new active one [ 1215.174660][T20989] bridge18: entered promiscuous mode [ 1215.174927][T20982] netlink: 'syz.3.20370': attribute type 23 has an invalid length. [ 1215.189129][T20982] IPv6: NLM_F_CREATE should be specified when creating new route [ 1215.197312][T20989] bond19: (slave bridge18): Enslaving as an active interface with an up link [ 1215.829984][T21044] tipc: Resetting bearer [ 1215.852618][T21044] syzkaller0: left promiscuous mode [ 1215.858388][T21044] syzkaller0: left allmulticast mode [ 1215.864940][T21044] net_ratelimit: 12 callbacks suppressed [ 1215.864957][T21044] TC_ACT_REPEAT abuse ? [ 1215.981794][T21051] syzkaller0: entered promiscuous mode [ 1215.988676][T21051] syzkaller0: entered allmulticast mode [ 1216.842857][T21064] syzkaller0: entered promiscuous mode [ 1216.852461][T21064] syzkaller0: entered allmulticast mode [ 1216.860140][T21042] tipc: Resetting bearer [ 1216.929720][T21087] validate_nla: 2 callbacks suppressed [ 1216.929740][T21087] netlink: 'syz.3.20389': attribute type 1 has an invalid length. [ 1217.911366][T21103] __nla_validate_parse: 8 callbacks suppressed [ 1217.911386][T21103] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.20390'. [ 1217.929403][T21103] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.20390'. [ 1219.438059][ C1] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 1219.693233][T21087] workqueue: Failed to create a rescuer kthread for wq "bond19": -EINTR [ 1219.708281][T21096] tipc: Enabling of bearer rejected, failed to enable media [ 1219.729877][ T1014] tipc: Resetting bearer [ 1219.736780][T21102] mac80211_hwsim hwsim5 syzkaller0: Caught tx_queue_len zero misconfig [ 1220.063258][T21113] 8021q: adding VLAN 0 to HW filter on device bond24 [ 1220.073267][T21113] bridge0: port 3(bond24) entered blocking state [ 1220.080705][T21113] bridge0: port 3(bond24) entered disabled state [ 1220.094037][T21113] bond24: entered allmulticast mode [ 1220.101998][T21113] bond24: entered promiscuous mode [ 1220.470297][T21138] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.20402'. [ 1220.499436][T21138] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.20402'. [ 1220.747686][T21141] syzkaller0: entered promiscuous mode [ 1220.763470][T21141] syzkaller0: entered allmulticast mode [ 1220.817056][T21141] tcf_pedit_act: 7 callbacks suppressed [ 1220.817167][T21141] tc action pedit 'at' offset 20 out of bounds [ 1220.971250][T21144] netlink: 12 bytes leftover after parsing attributes in process `syz.0.20404'. [ 1221.023345][T21146] netlink: 28 bytes leftover after parsing attributes in process `syz.0.20404'. [ 1221.066583][T21146] netlink: 20 bytes leftover after parsing attributes in process `syz.0.20404'. [ 1221.108277][T21148] lo: Caught tx_queue_len zero misconfig [ 1221.133787][T21150] tipc: Resetting bearer [ 1221.149678][T21152] syzkaller0: entered promiscuous mode [ 1221.155340][T21152] syzkaller0: entered allmulticast mode [ 1221.162646][T21144] bridge0: entered allmulticast mode [ 1221.181052][T21144] syz_tun: left promiscuous mode [ 1221.188053][T21144] bridge0: port 1(syz_tun) entered disabled state [ 1221.324501][T21158] netlink: 4 bytes leftover after parsing attributes in process `syz.2.20408'. [ 1221.458739][T21164] netlink: 'syz.3.20410': attribute type 12 has an invalid length. [ 1221.498043][T21161] ip6tnl6: entered allmulticast mode [ 1221.519506][ T7212] ip6_tunnel: ip6tnl6 xmit: Local address not yet configured! [ 1221.539492][ T7212] ip6_tunnel: ip6tnl6 xmit: Local address not yet configured! [ 1221.547757][T13129] ip6_tunnel: ip6tnl6 xmit: Local address not yet configured! [ 1221.578625][T21170] syzkaller0: entered promiscuous mode [ 1221.597781][T21170] syzkaller0: entered allmulticast mode [ 1221.613826][T21166] lo speed is unknown, defaulting to 1000 [ 1221.624604][T21176] netlink: 12 bytes leftover after parsing attributes in process `syz.3.20414'. [ 1221.923345][T21185] netlink: 12 bytes leftover after parsing attributes in process `syz.1.20415'. [ 1222.168383][T13129] ip6_tunnel: ip6tnl6 xmit: Local address not yet configured! [ 1222.186022][T21198] netlink: 'syz.0.20417': attribute type 16 has an invalid length. [ 1222.195325][T21198] netlink: 'syz.0.20417': attribute type 17 has an invalid length. [ 1222.396275][T21192] veth17: entered allmulticast mode [ 1222.424482][T21192] bond20: (slave veth17): Enslaving as an active interface with an up link [ 1222.434729][T21196] eql: remember to turn off Van-Jacobson compression on your slave devices [ 1222.457926][T21196] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 1222.467122][T13129] ip6_tunnel: ip6tnl6 xmit: Local address not yet configured! [ 1222.490757][T21191] bond20 (unregistering): (slave veth17): Releasing backup interface [ 1222.503401][T21191] bond20 (unregistering): Released all slaves [ 1222.659290][T21198] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1222.800839][T21209] x_tables: unsorted entry at hook 2 [ 1222.815344][T21209] xt_hashlimit: size too large, truncated to 1048576 [ 1222.841291][T21212] syzkaller0: entered promiscuous mode [ 1222.851769][T21212] syzkaller0: entered allmulticast mode [ 1222.864211][ T306] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1222.874923][ T306] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1222.899072][T21212] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1222.909854][T21212] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1222.919884][T21212] tipc: Enabled bearer , priority 0 [ 1222.937077][T21203] __nla_validate_parse: 2 callbacks suppressed [ 1222.937094][T21203] netlink: 36 bytes leftover after parsing attributes in process `syz.4.20416'. [ 1222.978495][T21203] netlink: 16 bytes leftover after parsing attributes in process `syz.4.20416'. [ 1222.991879][T21212] tipc: Resetting bearer [ 1223.004353][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1223.014363][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1223.026114][T21217] syzkaller0: entered promiscuous mode [ 1223.028353][T21203] netlink: 36 bytes leftover after parsing attributes in process `syz.4.20416'. [ 1223.039935][T21217] syzkaller0: entered allmulticast mode [ 1223.057302][T21217] tipc: Resetting bearer [ 1223.077893][T21211] tipc: Resetting bearer [ 1223.114474][T21211] tipc: Disabling bearer [ 1223.785011][T21247] netlink: 164 bytes leftover after parsing attributes in process `syz.2.20429'. [ 1223.794769][T21247] netlink: 36 bytes leftover after parsing attributes in process `syz.2.20429'. [ 1223.983115][T21254] tipc: Enabling of bearer rejected, already enabled [ 1224.075211][T21258] netlink: 'syz.0.20433': attribute type 12 has an invalid length. [ 1224.087087][T21258] netlink: 4 bytes leftover after parsing attributes in process `syz.0.20433'. [ 1224.211420][T21262] netlink: 'syz.3.20435': attribute type 1 has an invalid length. [ 1224.308186][T21266] netlink: 'syz.1.20436': attribute type 1 has an invalid length. [ 1224.777831][T21279] syzkaller0: entered promiscuous mode [ 1224.783530][T21279] syzkaller0: entered allmulticast mode [ 1224.797872][T21279] tipc: Enabled bearer , priority 0 [ 1224.822250][T21279] tipc: Resetting bearer [ 1224.835638][T21278] tipc: Resetting bearer [ 1224.864843][T21278] tipc: Disabling bearer [ 1224.907138][T21257] batman_adv: batadv0: Adding interface: gretap2 [ 1224.913952][T21257] batman_adv: batadv0: Interface activated: gretap2 [ 1225.460050][T21312] netlink: 8 bytes leftover after parsing attributes in process `syz.3.20450'. [ 1225.494664][T21312] tipc: Invalid UDP bearer configuration [ 1225.494722][T21312] tipc: Enabling of bearer rejected, failed to enable media [ 1225.552750][T21315] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1225.563126][T21315] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1225.574779][T21315] batman_adv: batadv0: Removing interface: vlan2 [ 1225.585921][ C0] ip6_tunnel: ip6tnl6 xmit: Local address not yet configured! [ 1225.594198][T21309] netlink: 4 bytes leftover after parsing attributes in process `syz.0.20448'. [ 1225.605075][T21315] batman_adv: batadv0: Removing interface: gretap4 [ 1225.668939][T21315] batman_adv: batadv0: Removing interface: gretap5 [ 1225.697330][T21315] tipc: Disabling bearer [ 1225.728941][T21315] batadv0 (unregistering): left promiscuous mode [ 1225.797983][T21323] bond19: Removing last arp target with arp_interval on [ 1226.092388][T21346] 8021q: adding VLAN 0 to HW filter on device team0 [ 1226.111351][T21346] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1226.173806][T21346] 0·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1226.186045][T21346] 0·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1226.201929][T21346] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1226.403652][T21359] netlink: 8 bytes leftover after parsing attributes in process `syz.1.20461'. [ 1226.426214][T21359] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1226.770755][T21375] netlink: 4 bytes leftover after parsing attributes in process `syz.3.20467'. [ 1227.177001][T21403] tipc: Enabling of bearer rejected, already enabled [ 1227.476895][T21408] lo speed is unknown, defaulting to 1000 [ 1227.746122][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1227.887066][T21424] tipc: Enabling of bearer rejected, already enabled [ 1227.922745][T21426] syzkaller0: entered promiscuous mode [ 1227.931329][T21426] syzkaller0: entered allmulticast mode [ 1228.202953][T21432] __nla_validate_parse: 2 callbacks suppressed [ 1228.202972][T21432] netlink: 164 bytes leftover after parsing attributes in process `syz.3.20481'. [ 1228.461338][T21448] tipc: Enabling of bearer rejected, already enabled [ 1228.609190][T21459] netlink: 'syz.3.20489': attribute type 1 has an invalid length. [ 1228.681296][T21459] bond20: entered promiscuous mode [ 1228.687378][T21459] 8021q: adding VLAN 0 to HW filter on device bond20 [ 1228.696436][T21464] virt_wifi0: Device is already in use. [ 1229.591742][T21479] netlink: 164 bytes leftover after parsing attributes in process `syz.2.20496'. [ 1229.614423][T21479] netlink: 36 bytes leftover after parsing attributes in process `syz.2.20496'. [ 1229.813284][T21481] netlink: 'syz.0.20495': attribute type 1 has an invalid length. [ 1229.823219][T21486] lo: Caught tx_queue_len zero misconfig [ 1229.823379][T21481] netlink: 224 bytes leftover after parsing attributes in process `syz.0.20495'. [ 1229.966628][T21496] openvswitch: netlink: Duplicate key (type 6). [ 1230.261411][T21505] netlink: 'syz.2.20499': attribute type 12 has an invalid length. [ 1230.299280][T21505] netlink: 4 bytes leftover after parsing attributes in process `syz.2.20499'. [ 1230.476363][T21516] netlink: 88 bytes leftover after parsing attributes in process `syz.0.20501'. [ 1230.521300][T21519] tipc: Enabling of bearer rejected, already enabled [ 1230.533871][T21520] syzkaller0: entered promiscuous mode [ 1230.540932][T21520] syzkaller0: entered allmulticast mode [ 1230.899923][T21536] netlink: 164 bytes leftover after parsing attributes in process `syz.1.20507'. [ 1230.919634][T21536] netlink: 36 bytes leftover after parsing attributes in process `syz.1.20507'. [ 1230.961510][T21541] tipc: Enabling of bearer rejected, already enabled [ 1231.020710][T21543] tipc: Enabling of bearer rejected, already enabled [ 1231.201738][T21549] netlink: 12 bytes leftover after parsing attributes in process `syz.0.20514'. [ 1231.290652][ T4936] block nbd0: Receive control failed (result -107) [ 1231.382187][T21561] syzkaller0: entered promiscuous mode [ 1231.402649][T21561] syzkaller0: entered allmulticast mode [ 1231.504163][T21569] netlink: 28 bytes leftover after parsing attributes in process `syz.2.20520'. [ 1231.522418][T21569] siw: device registration error -23 [ 1231.533224][T21569] ip6tnl0: Caught tx_queue_len zero misconfig [ 1231.822513][T21584] openvswitch: netlink: Message has 5920 unknown bytes. [ 1231.830093][T21584] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1231.855638][T21578] syzkaller0: entered promiscuous mode [ 1231.861419][T21578] syzkaller0: entered allmulticast mode [ 1231.872197][T21566] syzkaller0: entered promiscuous mode [ 1231.878733][T21566] syzkaller0: entered allmulticast mode [ 1233.508622][ C0] ip6_tunnel: ip6tnl6 xmit: Local address not yet configured! [ 1235.372440][T21620] tipc: Resetting bearer [ 1235.419290][T21619] tipc: Resetting bearer [ 1235.503253][T21632] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode [ 1235.515844][T21632] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode [ 1235.569489][T21637] syzkaller0: entered promiscuous mode [ 1235.575109][T21637] syzkaller0: entered allmulticast mode [ 1235.964308][T21665] xfrm1: entered allmulticast mode [ 1236.019351][T21652] syzkaller0: entered promiscuous mode [ 1236.025074][T21652] syzkaller0: entered allmulticast mode [ 1236.038960][T21669] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 1236.046971][T21669] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 1236.059417][ T7211] tipc: Resetting bearer [ 1236.065415][T21643] tipc: Enabling of bearer rejected, already enabled [ 1236.088363][T21654] syzkaller0: entered promiscuous mode [ 1236.093911][T21654] syzkaller0: entered allmulticast mode [ 1238.612604][T13129] bridge0: entered promiscuous mode [ 1238.750082][T21648] tipc: Enabling of bearer rejected, failed to enable media [ 1238.879709][T21686] tc_dump_action: action bad kind [ 1241.744918][T21699] geneve0: Caught tx_queue_len zero misconfig [ 1241.753354][T21701] __nla_validate_parse: 1 callbacks suppressed [ 1241.753374][T21701] netlink: 8 bytes leftover after parsing attributes in process `syz.0.20554'. [ 1241.890745][T21709] netlink: 666 bytes leftover after parsing attributes in process `syz.1.20555'. [ 1241.910965][T21709] netlink: 'syz.1.20555': attribute type 1 has an invalid length. [ 1241.922859][T21709] netlink: 224 bytes leftover after parsing attributes in process `syz.1.20555'. [ 1242.062766][T21715] netlink: 36 bytes leftover after parsing attributes in process `syz.1.20558'. [ 1242.270934][T21725] ip6gre6: entered promiscuous mode [ 1242.277246][T21725] ip6gre6: entered allmulticast mode [ 1242.387165][T21738] syzkaller1: entered promiscuous mode [ 1242.394340][T21738] syzkaller1: entered allmulticast mode [ 1242.406457][T21738] netlink: 4 bytes leftover after parsing attributes in process `syz.1.20574'. [ 1242.438674][T21730] tipc: Enabling of bearer rejected, already enabled [ 1242.514591][T21733] syzkaller0: entered promiscuous mode [ 1242.535308][T21733] syzkaller0: entered allmulticast mode [ 1242.545038][T21744] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode [ 1242.553310][T21744] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode [ 1242.576219][T21747] tipc: Resetting bearer [ 1242.634547][T21739] tipc: Enabled bearer , priority 0 [ 1242.650414][T21746] tipc: Resetting bearer [ 1242.751580][T21750] lo speed is unknown, defaulting to 1000 [ 1242.879120][T21761] tipc: Resetting bearer [ 1242.991604][T21761] 0: reclassify loop, rule prio 0, protocol 800 [ 1243.030753][T21760] tipc: Resetting bearer [ 1243.080623][T21733] tipc: Resetting bearer [ 1243.191798][T21726] tipc: Resetting bearer [ 1243.217563][T21726] tipc: Disabling bearer [ 1243.328152][T21771] netlink: 'syz.3.20576': attribute type 1 has an invalid length. [ 1243.370553][T21771] 8021q: adding VLAN 0 to HW filter on device bond21 [ 1243.424408][T21771] bond21: (slave veth10): Enslaving as an active interface with a down link [ 1243.469067][T21771] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1243.623679][T21771] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 1243.681757][T21783] netlink: 12 bytes leftover after parsing attributes in process `syz.3.20576'. [ 1243.723173][T21771] bond21: (slave batadv2): making interface the new active one [ 1243.753426][T21771] batadv2: entered promiscuous mode [ 1243.760047][T21771] bond21: (slave batadv2): Enslaving as an active interface with an up link [ 1246.882672][ T7171] tipc: Resetting bearer [ 1247.027383][T21804] netlink: 28 bytes leftover after parsing attributes in process `syz.1.20587'. [ 1247.144345][T21810] netlink: 'syz.3.20586': attribute type 30 has an invalid length. [ 1247.213169][T21817] netlink: 20 bytes leftover after parsing attributes in process `syz.1.20587'. [ 1249.506326][ C0] ip6_tunnel: ip6tnl6 xmit: Local address not yet configured! [ 1250.414859][T21810] workqueue: Failed to create a rescuer kthread for wq "bond22": -EINTR [ 1250.416638][T21820] tipc: Enabling of bearer rejected, failed to enable media [ 1250.566179][T21835] xt_l2tp: missing protocol rule (udp|l2tpip) [ 1250.568584][T21841] syzkaller0: entered promiscuous mode [ 1250.578236][T21841] syzkaller0: entered allmulticast mode [ 1250.588484][T21835] dvmrp8: left allmulticast mode [ 1250.713194][T21849] netlink: 48 bytes leftover after parsing attributes in process `syz.0.20593'. [ 1250.726778][ T30] audit: type=1804 audit(1785389440.299:32): pid=21848 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.20590" name="/newroot/4306/cgroup.controllers" dev="tmpfs" ino=21727 res=1 errno=0 [ 1250.756079][ T30] audit: type=1800 audit(1785389440.319:33): pid=21848 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.20590" name="cgroup.controllers" dev="tmpfs" ino=21727 res=0 errno=0 [ 1251.516187][T21865] netlink: 8 bytes leftover after parsing attributes in process `syz.3.20597'. [ 1251.648466][T21853] 0·: left allmulticast mode [ 1251.658163][T21853] hsr_slave_0: left allmulticast mode [ 1251.677001][T21853] bridge0: left promiscuous mode [ 1251.682076][T21853] bridge0: left allmulticast mode [ 1251.718825][T21853] bond15: left promiscuous mode [ 1251.731157][T21868] netlink: 'syz.2.20598': attribute type 142 has an invalid length. [ 1251.731393][T21853] dummy0: left promiscuous mode [ 1251.752746][T21853] bond15: left allmulticast mode [ 1251.779332][T21853] bond17: left promiscuous mode [ 1251.789908][T21853] bridge16: left promiscuous mode [ 1251.806160][T21853] bond17: left allmulticast mode [ 1251.815945][T21853] bridge16: left allmulticast mode [ 1251.843513][T21853] bond18: left promiscuous mode [ 1251.866102][T21853] bridge17: left promiscuous mode [ 1251.879947][T21853] macvtap0: left allmulticast mode [ 1251.885546][T21853] macvtap1: left allmulticast mode [ 1251.897729][T21853] bond19: left promiscuous mode [ 1251.902760][T21853] bridge18: left promiscuous mode [ 1251.913165][T21853] macvtap2: left allmulticast mode [ 1251.919904][T21853] macvtap3: left allmulticast mode [ 1251.928802][T21853] veth17: left allmulticast mode [ 1252.033902][T21879] netlink: 68 bytes leftover after parsing attributes in process `syz.1.20599'. [ 1252.073061][T21875] syzkaller0: entered promiscuous mode [ 1252.083773][T21879] IPv6: NLM_F_CREATE should be specified when creating new route [ 1252.135842][T21875] syzkaller0: entered allmulticast mode [ 1252.144503][T21880] tipc: Enabled bearer , priority 0 [ 1252.207150][T21890] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1252.244900][T21884] lo speed is unknown, defaulting to 1000 [ 1253.187592][T21909] netlink: 8 bytes leftover after parsing attributes in process `syz.2.20607'. [ 1253.292121][T21861] tipc: Resetting bearer [ 1253.354340][T21909] bond0: option min_links: invalid value (18446744072563799392) [ 1253.362710][T21909] bond0: option min_links: allowed values 0 - 2147483647 [ 1253.419659][T21855] tipc: Resetting bearer [ 1253.463260][T21855] tipc: Disabling bearer [ 1253.584271][T21924] netlink: 'syz.1.20614': attribute type 2 has an invalid length. [ 1253.602813][T21924] netlink: 'syz.1.20614': attribute type 2 has an invalid length. [ 1253.616156][T21924] netlink: 128 bytes leftover after parsing attributes in process `syz.1.20614'. [ 1253.626942][T21924] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1253.675030][T21928] netlink: 8 bytes leftover after parsing attributes in process `syz.0.20613'. [ 1253.693229][T21928] bond0: option lp_interval: invalid value (0) [ 1253.703582][T21928] bond0: option lp_interval: allowed values 1 - 2147483647 [ 1253.729784][T21932] netlink: 'syz.1.20615': attribute type 21 has an invalid length. [ 1253.755861][T21932] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 1254.077314][T21938] netlink: 8 bytes leftover after parsing attributes in process `syz.0.20616'. [ 1254.348063][T21963] netlink: 8 bytes leftover after parsing attributes in process `syz.1.20619'. [ 1254.716628][T21972] tipc: Resetting bearer [ 1254.727559][T21972] syzkaller0: left promiscuous mode [ 1254.732832][T21972] syzkaller0: left allmulticast mode [ 1254.739700][ C1] 0: reclassify loop, rule prio 0, protocol 03 [ 1254.764709][T21970] tipc: Resetting bearer [ 1254.911780][T21980] netlink: 32 bytes leftover after parsing attributes in process `syz.0.20625'. [ 1255.127415][T21995] netlink: 36 bytes leftover after parsing attributes in process `syz.0.20625'. [ 1255.161489][T21989] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 1255.177786][T21986] syzkaller1: entered promiscuous mode [ 1255.183571][T21986] syzkaller1: entered allmulticast mode [ 1255.245273][T21992] netlink: 4 bytes leftover after parsing attributes in process `syz.1.20627'. [ 1255.302554][T21998] netlink: 56 bytes leftover after parsing attributes in process `syz.3.20629'. [ 1255.312184][T21998] netlink: 56 bytes leftover after parsing attributes in process `syz.3.20629'. [ 1255.516120][ T306] batadv2: left promiscuous mode [ 1255.705292][ T306] tipc: Resetting bearer [ 1256.459720][T22025] netlink: 'syz.4.20637': attribute type 2 has an invalid length. [ 1256.775550][T22032] bridge0: entered promiscuous mode [ 1256.782075][T22032] bridge0: entered allmulticast mode [ 1256.998534][T22037] syzkaller0: entered promiscuous mode [ 1257.006179][T22037] syzkaller0: entered allmulticast mode [ 1257.711560][T22056] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1260.660100][T22039] lo speed is unknown, defaulting to 1000 [ 1260.965253][T22069] __nla_validate_parse: 5 callbacks suppressed [ 1260.965272][T22069] netlink: 8 bytes leftover after parsing attributes in process `syz.4.20644'. [ 1261.128074][T22071] netlink: 164 bytes leftover after parsing attributes in process `syz.0.20648'. [ 1261.143347][T22071] netlink: 36 bytes leftover after parsing attributes in process `syz.0.20648'. [ 1261.306137][T22079] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 1261.335884][T22079] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 1261.499499][T22069] netlink: 8 bytes leftover after parsing attributes in process `syz.4.20644'. [ 1261.542275][T22087] netlink: 20 bytes leftover after parsing attributes in process `syz.3.20653'. [ 1261.634077][T22091] netlink: 48 bytes leftover after parsing attributes in process `syz.2.20654'. [ 1262.133221][T22110] netlink: 4 bytes leftover after parsing attributes in process `syz.3.20659'. [ 1262.560456][T22118] lo speed is unknown, defaulting to 1000 [ 1262.900250][T22124] netlink: 8 bytes leftover after parsing attributes in process `syz.2.20662'. [ 1262.944200][T22124] netlink: 8 bytes leftover after parsing attributes in process `syz.2.20662'. [ 1262.982166][T22112] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1263.196105][T22136] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode [ 1263.203465][T22136] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode [ 1263.281885][T22100] Set syz0 is full, maxelem 65536 reached [ 1263.454703][T22144] tipc: Resetting bearer [ 1263.488472][T22144] netlink: 16 bytes leftover after parsing attributes in process `syz.3.20667'. [ 1263.499126][T22144] openvswitch: netlink: IP tunnel attribute has 5393 unknown bytes. [ 1263.527194][T22143] tipc: Resetting bearer [ 1263.736775][T22148] §: renamed from sit0 [ 1263.757680][ T1014] tipc: Resetting bearer [ 1263.823513][T22161] xt_addrtype: ipv6 does not support BROADCAST matching [ 1263.904679][T22166] syzkaller0: entered promiscuous mode [ 1263.910877][T22166] syzkaller0: entered allmulticast mode [ 1264.099127][T22170] tipc: Enabled bearer , priority 0 [ 1264.138265][T22170] syzkaller0: entered promiscuous mode [ 1264.143792][T22170] syzkaller0: entered allmulticast mode [ 1264.150567][T22170] tipc: Resetting bearer [ 1264.174301][T22169] tipc: Resetting bearer [ 1264.275058][T22172] IPVS: set_ctl: invalid protocol: 4 224.0.0.2:20002 [ 1264.283640][T22172] IPVS: nq: FWM 3 0x00000003 - no destination available [ 1268.441161][T22169] tipc: Disabling bearer [ 1268.568840][T22184] tipc: Resetting bearer [ 1268.604335][T22183] tipc: Resetting bearer [ 1268.705377][T22190] gre0: Caught tx_queue_len zero misconfig [ 1268.781691][T22195] __nla_validate_parse: 1 callbacks suppressed [ 1268.781710][T22195] netlink: 4 bytes leftover after parsing attributes in process `syz.3.20683'. [ 1272.676162][T22207] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 1272.684240][T22207] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 1272.695529][ T7211] tipc: Resetting bearer [ 1272.711876][T22210] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 1272.880352][T22236] lo speed is unknown, defaulting to 1000 [ 1272.960813][T22246] netlink: 8 bytes leftover after parsing attributes in process `syz.2.20693'. [ 1273.084809][T22246] 8021q: adding VLAN 0 to HW filter on device team0 [ 1273.153257][T22246] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1273.177298][T22246] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1273.220965][T22246] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1273.388920][T22251] netlink: 132 bytes leftover after parsing attributes in process `syz.2.20693'. [ 1273.485506][T22255] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode [ 1273.503714][T22255] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode [ 1273.521480][ T1181] bridge0: port 1(bridge_slave_0) entered blocking state [ 1273.528763][ T1181] bridge0: port 1(bridge_slave_0) entered listening state [ 1273.697857][T22270] netlink: 8 bytes leftover after parsing attributes in process `syz.2.20700'. [ 1273.927009][T22272] netlink: 'syz.3.20701': attribute type 210 has an invalid length. [ 1274.643504][T22289] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 1274.651895][T22289] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 1278.436483][T22315] IPVS: Error joining to the multicast group [ 1278.601691][T22337] netlink: 8 bytes leftover after parsing attributes in process `syz.0.20714'. [ 1278.740638][ T7211] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1278.772009][ T7211] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1278.840429][T22341] RDS: rds_bind could not find a transport for ::fcff:ffff:8000:0:20:0, load rds_tcp or rds_rdma? [ 1278.923360][T22348] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 1279.585893][ C1] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 1282.788262][ C0] ip6_tunnel: ip6tnl6 xmit: Local address not yet configured! [ 1282.925059][T22376] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1283.102364][T22422] netlink: 8 bytes leftover after parsing attributes in process `syz.0.20735'. [ 1283.124365][T22422] netlink: 20 bytes leftover after parsing attributes in process `syz.0.20735'. [ 1283.154002][T22422] netlink: 4 bytes leftover after parsing attributes in process `syz.0.20735'. [ 1283.166656][T22414] syzkaller1: entered promiscuous mode [ 1283.172200][T22414] syzkaller1: entered allmulticast mode [ 1283.277617][T22403] tipc: Resetting bearer [ 1283.289910][T22409] syzkaller0: entered promiscuous mode [ 1283.300337][T22409] syzkaller0: entered allmulticast mode [ 1283.415238][T22410] tipc: Resetting bearer [ 1283.493421][T22431] netlink: 32 bytes leftover after parsing attributes in process `syz.1.20738'. [ 1283.524555][T22431] openvswitch: netlink: Flow key attr not present in new flow. [ 1283.536769][T22429] tipc: Resetting bearer [ 1283.826016][T22445] netlink: 8 bytes leftover after parsing attributes in process `syz.2.20743'. [ 1283.853129][T22447] IPv6: NLM_F_CREATE should be specified when creating new route [ 1283.861856][T22447] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1283.869176][T22447] IPv6: NLM_F_CREATE should be set when creating new route [ 1283.876530][T22447] IPv6: NLM_F_CREATE should be set when creating new route [ 1283.883805][T22447] IPv6: NLM_F_CREATE should be set when creating new route [ 1283.896155][T22447] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.20744'. [ 1284.160811][ T7212] tipc: Resetting bearer [ 1284.540870][T22459] netlink: zone id is out of range [ 1284.558874][T22459] netlink: get zone limit has 4 unknown bytes [ 1284.775937][T22473] netlink: 8 bytes leftover after parsing attributes in process `syz.0.20748'. [ 1284.808472][T22473] netlink: 20 bytes leftover after parsing attributes in process `syz.0.20748'. [ 1284.859320][T22475] netlink: 16 bytes leftover after parsing attributes in process `syz.2.20749'. [ 1285.094141][T22475] block nbd5: server does not support multiple connections per device. [ 1285.108957][T22475] block nbd5: shutting down sockets [ 1285.546322][T22506] netlink: 32 bytes leftover after parsing attributes in process `syz.2.20755'. [ 1285.572503][T22506] netlink: 16 bytes leftover after parsing attributes in process `syz.2.20755'. [ 1285.591874][T22506] netlink: 28 bytes leftover after parsing attributes in process `syz.2.20755'. [ 1285.638847][T22513] can: request_module (can-proto-0) failed. [ 1285.958700][T22526] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1286.016969][T22531] tipc: Enabling of bearer rejected, already enabled [ 1286.029994][T22531] netlink: 12 bytes leftover after parsing attributes in process `syz.1.20761'. [ 1286.048778][T22531] netlink: 'syz.1.20761': attribute type 1 has an invalid length. [ 1286.217730][T22536] netlink: 28 bytes leftover after parsing attributes in process `syz.1.20761'. [ 1286.248467][T22531] bond20: entered promiscuous mode [ 1286.258216][T22531] 8021q: adding VLAN 0 to HW filter on device bond20 [ 1286.268570][T22536] bond20: entered allmulticast mode [ 1286.364197][T22531] bond20: (slave bridge19): making interface the new active one [ 1286.384331][T22531] bridge19: entered promiscuous mode [ 1286.407787][T22531] bridge19: entered allmulticast mode [ 1286.431869][T22531] bond20: (slave bridge19): Enslaving as an active interface with an up link [ 1286.483444][T22542] netlink: 'syz.3.20764': attribute type 4 has an invalid length. [ 1286.849235][T22548] TC_ACT_REPEAT abuse ? [ 1287.031352][T22541] syzkaller1: entered promiscuous mode [ 1287.042260][T22541] syzkaller1: entered allmulticast mode [ 1287.709603][T22585] syzkaller0: create flow: hash 1722855062 index 0 [ 1289.518474][T22621] __nla_validate_parse: 8 callbacks suppressed [ 1289.518495][T22621] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.20784'. [ 1289.545139][T22618] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.20784'. [ 1291.765054][ C1] syzkaller0 (unregistering): delete flow: hash 1722855062 index 0 [ 1292.171236][T22601] batman_adv: batadv0: Adding interface: ip6gretap3 [ 1292.178142][T22601] batman_adv: batadv0: The MTU of interface ip6gretap3 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1292.204148][T22601] batman_adv: batadv0: Not using interface ip6gretap3 (retrying later): interface not active [ 1292.351350][T22623] bond0: entered allmulticast mode [ 1292.367798][T22623] ip6gre5: entered allmulticast mode [ 1292.391265][T22623] netlink: 4 bytes leftover after parsing attributes in process `syz.0.20785'. [ 1292.415373][T22623] netlink: 'syz.0.20785': attribute type 9 has an invalid length. [ 1292.424388][T22623] netlink: 'syz.0.20785': attribute type 6 has an invalid length. [ 1292.435053][T22622] bond0: left allmulticast mode [ 1292.440158][T22622] ip6gre5: left allmulticast mode [ 1292.455248][T22634] netlink: 24 bytes leftover after parsing attributes in process `syz.3.20790'. [ 1292.534550][T22639] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1293.031381][T22643] tc_dump_action: action bad kind [ 1293.183916][T22653] tipc: Resetting bearer [ 1293.244208][T22655] ip6gre4: entered promiscuous mode [ 1293.250394][T22655] ip6gre4: entered allmulticast mode [ 1293.394305][T22663] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.20800'. [ 1293.407333][T22663] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.20800'. [ 1293.407463][T22653] block nbd5: server does not support multiple connections per device. [ 1293.441371][T22653] block nbd5: shutting down sockets [ 1293.579431][T22651] tipc: Resetting bearer [ 1293.617512][T22673] netlink: 'syz.2.20803': attribute type 12 has an invalid length. [ 1294.041264][T22693] netlink: 56 bytes leftover after parsing attributes in process `syz.0.20810'. [ 1294.078901][T22693] netlink: 8 bytes leftover after parsing attributes in process `syz.0.20810'. [ 1294.238545][ T7212] tipc: Resetting bearer [ 1294.419078][T22707] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.20814'. [ 1294.437626][T22707] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.20814'. [ 1294.514399][T22711] bond15: (slave dummy0): Releasing active interface [ 1294.535590][T22711] batman_adv: batadv0: Adding interface: dummy0 [ 1294.553687][T22711] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1294.568277][T22709] netlink: 12 bytes leftover after parsing attributes in process `syz.4.20802'. [ 1294.595238][T22711] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 1294.822450][T22709] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1294.882837][T22730] netlink: 'syz.3.20818': attribute type 8 has an invalid length. [ 1294.897233][T22730] netlink: 256 bytes leftover after parsing attributes in process `syz.3.20818'. [ 1294.908055][T22730] netlink: 32 bytes leftover after parsing attributes in process `syz.3.20818'. [ 1294.956658][T22712] vlan0: entered allmulticast mode [ 1294.962135][T22712] erspan0: entered allmulticast mode [ 1294.968887][T22712] bond12: (slave vlan0): Error -34 calling dev_set_mtu [ 1295.029598][T22736] syzkaller0: entered promiscuous mode [ 1295.035109][T22736] syzkaller0: entered allmulticast mode [ 1295.043489][T22730] netlink: 'syz.3.20818': attribute type 23 has an invalid length. [ 1295.205889][T22741] netlink: 'syz.4.20822': attribute type 1 has an invalid length. [ 1295.362341][T22741] bond13: entered promiscuous mode [ 1295.368764][T22741] bond13: entered allmulticast mode [ 1295.374740][T22741] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1295.402993][T22746] erspan2: entered allmulticast mode [ 1295.423189][T22746] bond13: (slave erspan2): making interface the new active one [ 1295.444363][T22746] erspan2: entered promiscuous mode [ 1295.453877][T22746] bond13: (slave erspan2): Enslaving as an active interface with an up link [ 1295.644108][T22756] netlink: 12 bytes leftover after parsing attributes in process `syz.4.20824'. [ 1295.721012][T22761] netlink: 28 bytes leftover after parsing attributes in process `syz.1.20826'. [ 1295.743918][T22761] siw: device registration error -23 [ 1295.752725][T22758] tc_dump_action: action bad kind [ 1295.810668][T22765] tipc: Resetting bearer [ 1295.863973][T22765] syzkaller0: left promiscuous mode [ 1295.879899][T22765] syzkaller0: left allmulticast mode [ 1295.930968][T22764] tipc: Resetting bearer [ 1295.956696][T22771] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.20828'. [ 1295.992455][T22771] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.20828'. [ 1296.050025][T22774] tipc: Resetting bearer [ 1296.060532][T22774] syzkaller0: entered promiscuous mode [ 1296.075852][T22774] syzkaller0: entered allmulticast mode [ 1296.099415][T22773] tipc: Resetting bearer [ 1296.420548][T22791] netlink: 8 bytes leftover after parsing attributes in process `syz.0.20835'. [ 1296.438170][ T7211] tipc: Resetting bearer [ 1296.444745][T22790] netlink: 32 bytes leftover after parsing attributes in process `syz.1.20837'. [ 1296.473503][T22790] netlink: 128 bytes leftover after parsing attributes in process `syz.1.20837'. [ 1296.483677][T22790] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1296.722793][T22798] netlink: 'syz.2.20839': attribute type 1 has an invalid length. [ 1297.201447][T22817] syzkaller0: entered promiscuous mode [ 1297.208233][T22817] syzkaller0: entered allmulticast mode [ 1297.526504][T22826] bridge0: port 1(bridge_slave_0) entered disabled state [ 1297.534217][T22826] bridge0: entered allmulticast mode [ 1297.571341][T22826] bond24: left allmulticast mode [ 1297.577537][T22826] bond24: left promiscuous mode [ 1297.587897][T22826] bridge0: port 3(bond24) entered disabled state [ 1297.602231][T22826] macvlan0: left allmulticast mode [ 1297.607956][T22826] macvlan0: left promiscuous mode [ 1297.616719][T22826] bridge0: port 2(macvlan0) entered disabled state [ 1297.633576][T22826] mac80211_hwsim hwsim7 wlan1: left allmulticast mode [ 1297.640888][T22826] mac80211_hwsim hwsim7 wlan1: left promiscuous mode [ 1297.673944][T22826] bridge0: port 4(wlan1) entered disabled state [ 1297.706214][T22826] bridge_slave_0: left allmulticast mode [ 1297.726057][T22826] bridge0: port 1(bridge_slave_0) entered disabled state [ 1298.214521][T22869] syzkaller0: entered promiscuous mode [ 1298.222922][T22869] syzkaller0: entered allmulticast mode [ 1298.654506][T22883] tipc: Resetting bearer [ 1298.685221][T22882] tipc: Resetting bearer [ 1299.146294][T22893] bond11: left promiscuous mode [ 1299.151281][T22893] bridge10: left promiscuous mode [ 1299.159147][T22893] macvtap1: left allmulticast mode [ 1299.164517][T22893] macvtap2: left allmulticast mode [ 1299.171814][T22893] ip6tnl6: left allmulticast mode [ 1299.179392][T22893] batman_adv: batadv0: Interface deactivated: gretap2 [ 1299.191051][T22893] bond13: left promiscuous mode [ 1299.197252][T22893] erspan2: left promiscuous mode [ 1299.202359][T22893] bond13: left allmulticast mode [ 1299.210267][T22893] erspan2: left allmulticast mode [ 1299.217989][ T1014] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1299.227070][ T1014] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1299.235483][ T1014] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1299.244640][ T1014] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1299.417957][ T1014] tipc: Resetting bearer [ 1299.769623][T22917] __nla_validate_parse: 14 callbacks suppressed [ 1299.769645][T22917] netlink: 4 bytes leftover after parsing attributes in process `syz.4.20869'. [ 1299.819257][T22914] Timeout policy `syz1' can only be used by L3 protocol number 1536 [ 1299.829991][T22914] netlink: zone id is out of range [ 1299.835141][T22914] netlink: zone id is out of range [ 1299.840668][T22914] netlink: zone id is out of range [ 1299.846327][T22914] netlink: zone id is out of range [ 1299.851594][T22914] netlink: zone id is out of range [ 1299.856787][T22914] netlink: zone id is out of range [ 1299.862064][T22914] netlink: zone id is out of range [ 1299.867399][T22914] netlink: zone id is out of range [ 1299.872614][T22914] netlink: zone id is out of range [ 1299.877921][T22914] netlink: zone id is out of range [ 1299.970379][T22920] lo speed is unknown, defaulting to 1000 [ 1300.103308][T22920] dvmrp0: entered allmulticast mode [ 1300.336797][ T7211] dvmrp0: left allmulticast mode [ 1301.375510][T22873] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1302.470862][T22929] veth0_macvtap: left allmulticast mode [ 1302.498376][T22929] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode [ 1302.505542][T22929] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode [ 1302.519566][T22929] veth23: left allmulticast mode [ 1302.524812][T22929] veth25: left allmulticast mode [ 1302.630148][T22929] bond31: left promiscuous mode [ 1302.637153][T22929] bridge19: left promiscuous mode [ 1302.645978][T22929] macvtap1: left allmulticast mode [ 1302.651335][T22929] macvtap2: left allmulticast mode [ 1302.684492][T22929] ip6gre6: left promiscuous mode [ 1302.693639][T22929] ip6gre6: left allmulticast mode [ 1302.839517][ T7212] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1302.894776][T22944] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.20878'. [ 1302.908985][T22944] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.20878'. [ 1302.938271][ T7212] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1302.951993][T22951] syzkaller0: left promiscuous mode [ 1302.957720][T22951] syzkaller0: left allmulticast mode [ 1302.963310][T22951] tipc: Resetting bearer [ 1302.990973][T22956] netlink: 4 bytes leftover after parsing attributes in process `syz.0.20882'. [ 1302.999690][T22958] sctp: [Deprecated]: syz.1.20883 (pid 22958) Use of int in maxseg socket option. [ 1302.999690][T22958] Use struct sctp_assoc_value instead [ 1303.127218][T22963] netlink: 'syz.3.20884': attribute type 1 has an invalid length. [ 1303.166368][T22967] netlink: 8 bytes leftover after parsing attributes in process `syz.4.20881'. [ 1303.206755][T22967] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1303.231471][T22967] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1303.252240][T22967] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1303.280422][T22968] bond22: (slave ip6gretap3): Enslaving as a backup interface with an up link [ 1303.314593][T22968] netlink: 28 bytes leftover after parsing attributes in process `syz.3.20884'. [ 1303.385532][T22963] veth12: entered promiscuous mode [ 1303.394888][T22963] bond22: (slave veth12): Enslaving as a backup interface with a down link [ 1303.404608][T22971] netlink: 132 bytes leftover after parsing attributes in process `syz.4.20881'. [ 1303.425317][T22968] 8021q: adding VLAN 0 to HW filter on device bond22 [ 1303.436988][T22970] block nbd5: server does not support multiple connections per device. [ 1303.452410][T22970] block nbd5: shutting down sockets [ 1303.541097][T22970] syzkaller0: entered promiscuous mode [ 1303.553537][T22970] syzkaller0: entered allmulticast mode [ 1303.720302][T22987] netlink: 'syz.0.20890': attribute type 1 has an invalid length. [ 1303.792496][T22987] 8021q: adding VLAN 0 to HW filter on device bond33 [ 1303.822319][T22990] bond33: (slave gretap4): Enslaving as a backup interface with an up link [ 1303.879540][T22987] bond33 (unregistering): (slave gretap4): Releasing backup interface [ 1303.930939][T22987] bond33 (unregistering): Released all slaves [ 1304.049344][T22991] syzkaller0: entered promiscuous mode [ 1304.054854][T22991] syzkaller0: entered allmulticast mode [ 1304.070793][T23003] tipc: Enabling of bearer rejected, already enabled [ 1307.225277][T22999] syzkaller0: entered promiscuous mode [ 1307.232363][T22999] syzkaller0: entered allmulticast mode [ 1307.238664][T22999] tipc: Resetting bearer [ 1307.337825][T23035] netlink: 20 bytes leftover after parsing attributes in process `syz.0.20897'. [ 1307.532800][T23048] netlink: 'syz.1.20911': attribute type 1 has an invalid length. [ 1307.705306][T23053] batman_adv: batadv0: Removing interface: dummy0 [ 1307.742032][T23053] bond21: (slave dummy0): making interface the new active one [ 1307.757697][T23053] bond21: (slave dummy0): Enslaving as an active interface with an up link [ 1307.766984][T23059] net_ratelimit: 15 callbacks suppressed [ 1307.767002][T23059] openvswitch: netlink: ct_state flags 806d0004 unsupported [ 1307.815193][T23051] udevd[23051]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1307.858971][T23051] udevd[23051]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1307.898183][T23044] No such timeout policy "syz1" [ 1307.926667][T23055] bond21: (slave dummy0): Releasing active interface [ 1307.946865][T23044] netlink: zone id is out of range [ 1307.952146][T23044] netlink: zone id is out of range [ 1307.966283][T23044] netlink: zone id is out of range [ 1307.971467][T23044] netlink: zone id is out of range [ 1307.979917][T23055] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 1307.986514][T23044] netlink: zone id is out of range [ 1308.015968][T23044] netlink: zone id is out of range [ 1308.039908][T23044] netlink: zone id is out of range [ 1308.055952][T23044] netlink: zone id is out of range [ 1308.336702][T23065] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 1308.360175][T23065] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 1308.585606][T23076] netlink: 164 bytes leftover after parsing attributes in process `syz.0.20907'. [ 1308.601594][T23076] netlink: 36 bytes leftover after parsing attributes in process `syz.0.20907'. [ 1308.670461][T23082] syzkaller0: entered promiscuous mode [ 1308.676649][T23082] syzkaller0: entered allmulticast mode [ 1308.695423][T23085] tipc: Resetting bearer [ 1308.780182][T23087] can: request_module (can-proto-0) failed. [ 1308.928232][T23096] netlink: 32 bytes leftover after parsing attributes in process `syz.3.20913'. [ 1308.961734][T23087] bond10: (slave dummy0): Releasing active interface [ 1308.973638][T23087] batman_adv: batadv0: Adding interface: dummy0 [ 1308.980452][T23087] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1309.006476][T23087] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 1309.033394][T23109] netlink: 20 bytes leftover after parsing attributes in process `syz.2.20915'. [ 1309.065950][T23096] netlink: 36 bytes leftover after parsing attributes in process `syz.3.20913'. [ 1309.321204][T23107] syzkaller1: entered promiscuous mode [ 1309.326889][T23107] syzkaller1: entered allmulticast mode [ 1309.527590][T23051] udevd[23051]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1309.677368][T23143] netlink: 24 bytes leftover after parsing attributes in process `syz.0.20920'. [ 1309.861824][T23150] netlink: 4 bytes leftover after parsing attributes in process `syz.0.20920'. [ 1310.410322][T23150] hsr_slave_0: left promiscuous mode [ 1310.427748][T23150] hsr_slave_1: left promiscuous mode [ 1310.587808][T23156] netlink: 164 bytes leftover after parsing attributes in process `syz.1.20922'. [ 1310.597832][T23156] netlink: 36 bytes leftover after parsing attributes in process `syz.1.20922'. [ 1310.700577][T23152] lo speed is unknown, defaulting to 1000 [ 1312.308595][T23125] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1312.447868][T23179] netlink: 8 bytes leftover after parsing attributes in process `syz.1.20929'. [ 1313.671833][T23179] bridge0: left allmulticast mode [ 1313.771212][T23179] bond20: left promiscuous mode [ 1313.783022][T23179] bridge19: left promiscuous mode [ 1313.788887][T23179] bond20: left allmulticast mode [ 1313.794012][T23179] bridge19: left allmulticast mode [ 1313.977696][T23206] netlink: 16 bytes leftover after parsing attributes in process `syz.3.20934'. [ 1314.078797][T23206] block nbd5: server does not support multiple connections per device. [ 1314.097078][T23206] block nbd5: shutting down sockets [ 1314.531601][T23225] tipc: Resetting bearer [ 1314.568143][T23224] tipc: Resetting bearer [ 1314.655496][T23230] veth1_macvtap: left promiscuous mode [ 1314.697106][T23230] veth0_macvtap: left promiscuous mode [ 1314.709748][T23230] veth0_macvtap: entered promiscuous mode [ 1314.728561][T23230] veth1_macvtap: entered promiscuous mode [ 1314.730553][T23234] netlink: 'syz.4.20941': attribute type 1 has an invalid length. [ 1314.749724][T23230] net_ratelimit: 15 callbacks suppressed [ 1314.749744][T23230] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1314.792973][ T1014] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1314.803873][ T1014] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1314.817064][ T1014] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1314.852465][ T1014] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1314.997023][T23234] 8021q: adding VLAN 0 to HW filter on device bond14 [ 1315.096982][T23241] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 1315.141573][T23241] bond14: (slave batadv2): making interface the new active one [ 1315.151795][T23241] bond14: (slave batadv2): Enslaving as an active interface with an up link [ 1315.166697][ T1014] tipc: Resetting bearer [ 1315.278285][T23253] 8021q: adding VLAN 0 to HW filter on device team0 [ 1315.322323][T23253] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1315.441615][T23253] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1315.655157][T23275] netlink: 28 bytes leftover after parsing attributes in process `syz.3.20951'. [ 1315.762522][T23280] netlink: 12 bytes leftover after parsing attributes in process `syz.1.20953'. [ 1315.949538][T23291] netlink: 199784 bytes leftover after parsing attributes in process `syz.2.20954'. [ 1315.966855][T23291] netlink: 'syz.2.20954': attribute type 1 has an invalid length. [ 1316.294883][T23299] lo speed is unknown, defaulting to 1000 [ 1317.057518][T23315] tipc: Resetting bearer [ 1317.069039][T23321] syzkaller0: left promiscuous mode [ 1317.076166][T23321] syzkaller0: left allmulticast mode [ 1317.085470][T23313] tipc: Resetting bearer [ 1317.192283][ T48] tipc: Resetting bearer [ 1317.219740][T23331] bridge0: port 2(veth0_virt_wifi) entered blocking state [ 1317.227385][T23331] bridge0: port 2(veth0_virt_wifi) entered disabled state [ 1317.234681][T23331] veth0_virt_wifi: entered allmulticast mode [ 1317.242729][T23331] veth0_virt_wifi: entered promiscuous mode [ 1317.263994][T23335] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 1317.295162][T23335] netlink: 28 bytes leftover after parsing attributes in process `syz.0.20966'. [ 1317.486103][T23347] 8021q: adding VLAN 0 to HW filter on device batadv5 [ 1317.623144][T23347] netlink: 28 bytes leftover after parsing attributes in process `syz.1.20967'. [ 1318.357132][T23396] netlink: 28 bytes leftover after parsing attributes in process `syz.3.20973'. [ 1318.392126][T23396] netlink: 7 bytes leftover after parsing attributes in process `syz.3.20973'. [ 1318.782357][T23413] vlan0: Caught tx_queue_len zero misconfig [ 1319.394500][T23435] syzkaller0: refused to change device tx_queue_len [ 1319.940390][T23445] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1319.968342][T23445] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1320.064702][T23445] 0·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1320.098154][T23445] veth1_macvtap: left promiscuous mode [ 1320.116654][T23445] veth1_macvtap: entered promiscuous mode [ 1320.159779][T23445] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1320.185469][T23445] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1320.197230][T23445] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1320.207803][T23445] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1320.216426][T23445] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1320.348887][T23456] syzkaller0: entered promiscuous mode [ 1320.364773][T23456] syzkaller0: entered allmulticast mode [ 1320.375078][T23456] tipc: Resetting bearer [ 1320.390698][ T1014] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1320.416327][ T1014] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1320.462906][ T1014] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1320.499188][ T1014] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1321.564378][T23496] netlink: 'syz.3.20995': attribute type 3 has an invalid length. [ 1321.601342][T23496] netlink: 284 bytes leftover after parsing attributes in process `syz.3.20995'. [ 1321.955019][T23515] lo speed is unknown, defaulting to 1000 [ 1322.583876][T23515] dvmrp0: entered allmulticast mode [ 1322.880390][T23538] netlink: 4 bytes leftover after parsing attributes in process `syz.0.21003'. [ 1323.080412][T23541] netlink: 24 bytes leftover after parsing attributes in process `syz.3.21004'. [ 1323.116462][ T48] dvmrp0: left allmulticast mode [ 1323.256060][T23538] tunl0: Caught tx_queue_len zero misconfig [ 1323.279419][T23554] x_tables: unsorted entry at hook 2 [ 1323.309131][T23554] xt_hashlimit: size too large, truncated to 1048576 [ 1323.627114][T23565] netlink: 28 bytes leftover after parsing attributes in process `syz.3.21008'. [ 1323.661047][T23565] tipc: Resetting bearer [ 1323.904860][T23575] gretap0: entered promiscuous mode [ 1323.918381][T23575] vlan0: entered promiscuous mode [ 1324.000619][T23493] lo speed is unknown, defaulting to 1000 [ 1324.004949][T23580] block nbd0: reconnected socket [ 1324.007888][ T4936] block nbd0: Receive control failed (result -107) [ 1324.139977][T23563] tipc: Resetting bearer [ 1324.261252][T23587] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode [ 1324.270294][T23587] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode [ 1324.357449][T23594] netlink: 136 bytes leftover after parsing attributes in process `syz.0.21016'. [ 1324.687291][ T57] tipc: Resetting bearer [ 1324.754703][T23603] SET target dimension over the limit! [ 1324.773139][T23603] netlink: 12 bytes leftover after parsing attributes in process `syz.0.21019'. [ 1324.801165][T23603] netlink: 12 bytes leftover after parsing attributes in process `syz.0.21019'. [ 1324.818281][T23603] ip6tnl0: Caught tx_queue_len zero misconfig [ 1324.951674][T23607] netlink: 16 bytes leftover after parsing attributes in process `syz.0.21020'. [ 1325.046411][T23607] block nbd5: server does not support multiple connections per device. [ 1325.078258][T23607] block nbd5: shutting down sockets [ 1325.120758][T23611] syzkaller0: entered promiscuous mode [ 1325.140783][T23611] syzkaller0: entered allmulticast mode [ 1326.616956][T23641] netlink: 68 bytes leftover after parsing attributes in process `syz.4.21027'. [ 1329.113239][T23624] tipc: Resetting bearer [ 1329.120429][T23624] tipc: Resetting bearer [ 1329.147715][ T1014] tipc: Resetting bearer [ 1329.168776][T23640] workqueue: Failed to create a rescuer kthread for wq "bond25": -EINTR [ 1329.208283][T23646] netlink: 'syz.0.21029': attribute type 1 has an invalid length. [ 1329.278748][T23648] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1329.354569][T23652] netlink: 36 bytes leftover after parsing attributes in process `syz.3.21032'. [ 1329.357776][T23654] netlink: 120 bytes leftover after parsing attributes in process `syz.0.21033'. [ 1329.375023][ T1014] tipc: Subscription rejected, illegal request [ 1329.570670][T23656] netlink: 164 bytes leftover after parsing attributes in process `syz.3.21034'. [ 1329.653249][T23662] smbdirect: ib_dev[syz2] removed [ 1329.775599][T23677] geneve1: entered promiscuous mode [ 1329.836398][T23677] netlink: 24 bytes leftover after parsing attributes in process `syz.3.21039'. [ 1330.054727][T23685] syzkaller0: entered promiscuous mode [ 1330.084702][T23685] syzkaller0: entered allmulticast mode [ 1330.314574][T23702] netlink: 132 bytes leftover after parsing attributes in process `syz.4.21043'. [ 1334.008034][T23693] syzkaller0: entered promiscuous mode [ 1334.013534][T23693] syzkaller0: entered allmulticast mode [ 1334.021689][T23705] netlink: 4 bytes leftover after parsing attributes in process `syz.4.21043'. [ 1334.139957][T23729] netlink: 12 bytes leftover after parsing attributes in process `syz.3.21050'. [ 1334.264126][T23733] netlink: 4 bytes leftover after parsing attributes in process `syz.3.21050'. [ 1334.341022][T23735] netlink: 164 bytes leftover after parsing attributes in process `syz.4.21049'. [ 1334.409264][T23735] netlink: 36 bytes leftover after parsing attributes in process `syz.4.21049'. [ 1337.726767][T23760] dvmrp0: entered allmulticast mode [ 1337.802879][T23762] 8021q: VLANs not supported on sit0 [ 1337.814356][T23765] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 1337.822418][T23765] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 1337.842954][T23768] netlink: 12 bytes leftover after parsing attributes in process `syz.4.21054'. [ 1337.948857][T23770] veth19: entered allmulticast mode [ 1338.295316][T23782] netlink: 164 bytes leftover after parsing attributes in process `syz.0.21061'. [ 1338.320276][T23782] netlink: 36 bytes leftover after parsing attributes in process `syz.0.21061'. [ 1338.322147][T23784] ip6_vti0: Caught tx_queue_len zero misconfig [ 1338.346979][T23784] netlink: 164 bytes leftover after parsing attributes in process `syz.2.21060'. [ 1338.356988][T23784] netlink: 16 bytes leftover after parsing attributes in process `syz.2.21060'. [ 1338.369340][T23777] bond15: (slave macvlan1): Error -22 calling dev_set_mtu [ 1338.543414][T23768] bond15 (unregistering): Released all slaves [ 1338.599746][T23791] netlink: 'syz.3.21062': attribute type 10 has an invalid length. [ 1338.661377][T23793] xt_HMARK: spi-set and port-set can't be combined [ 1338.754724][T23796] SET target dimension over the limit! [ 1338.768254][T23791] team0: Port device veth1_virt_wifi added [ 1338.840253][T23796] netlink: 'syz.1.21064': attribute type 10 has an invalid length. [ 1339.344191][T23806] netlink: 'syz.4.21066': attribute type 13 has an invalid length. [ 1339.642694][T23818] syzkaller0: entered promiscuous mode [ 1339.651983][T23818] syzkaller0: entered allmulticast mode [ 1340.044170][T23831] SET target dimension over the limit! [ 1340.207350][T23843] netlink: 'syz.4.21073': attribute type 10 has an invalid length. [ 1342.948378][T23832] tipc: Enabling of bearer rejected, already enabled [ 1343.095881][T23857] nbd3: detected capacity change from 0 to 115 [ 1343.108029][ T1721] block nbd3: Dead connection, failed to find a fallback [ 1343.283505][T23871] netlink: 8 bytes leftover after parsing attributes in process `syz.2.21082'. [ 1343.447986][T23873] xt_l2tp: invalid flags combination: 8 [ 1344.167362][ T1721] block nbd3: shutting down sockets [ 1344.182457][ T1721] blk_print_req_error: 124 callbacks suppressed [ 1344.182477][ T1721] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1344.203594][ T1721] buffer_io_error: 138 callbacks suppressed [ 1344.203692][ T1721] Buffer I/O error on dev nbd3, logical block 0, async page read [ 1344.223352][ T1721] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 3 prio class 2 [ 1344.233521][ T1721] Buffer I/O error on dev nbd3, logical block 1, async page read [ 1344.241360][ T1721] Buffer I/O error on dev nbd3, logical block 2, async page read [ 1344.249168][ T1721] Buffer I/O error on dev nbd3, logical block 3, async page read [ 1344.257700][ T1721] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 1344.267315][ T1721] Buffer I/O error on dev nbd3, logical block 0, async page read [ 1344.275057][ T1721] Buffer I/O error on dev nbd3, logical block 1, async page read [ 1344.282978][ T1721] Buffer I/O error on dev nbd3, logical block 2, async page read [ 1344.290909][ T1721] Buffer I/O error on dev nbd3, logical block 3, async page read [ 1344.308520][ T4948] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 1344.319109][ T4948] Buffer I/O error on dev nbd3, logical block 0, async page read [ 1344.327308][ T4948] Buffer I/O error on dev nbd3, logical block 1, async page read [ 1344.336545][ T1721] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1344.346925][ T1721] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 3 prio class 2 [ 1344.364454][ T4948] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 1344.374387][ T1721] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1344.384326][ T1721] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 3 prio class 2 [ 1344.395945][ T1721] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1344.407930][T23846] ldm_validate_partition_table(): Disk read failed. [ 1344.415927][T23846] Dev nbd3: unable to read RDB block 0 [ 1344.427492][T23846] nbd3: unable to read partition table [ 1344.460690][T23846] ldm_validate_partition_table(): Disk read failed. [ 1344.468701][T23846] Dev nbd3: unable to read RDB block 0 [ 1344.475585][T23846] nbd3: unable to read partition table [ 1344.500306][T23846] block nbd3: NBD_DISCONNECT [ 1344.511560][T23846] block nbd3: Send disconnect failed -32 [ 1347.059861][T23905] tipc: Resetting bearer [ 1347.244678][ T186] syz1: Port: 1 Link DOWN [ 1347.253095][T23909] batadv0: entered promiscuous mode [ 1347.279814][T23909] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 1347.584250][T23927] netlink: 'syz.1.21094': attribute type 13 has an invalid length. [ 1347.612283][T23908] dvmrp0: entered allmulticast mode [ 1347.931354][ T1181] dvmrp0: left allmulticast mode [ 1348.012048][T23947] netlink: 8 bytes leftover after parsing attributes in process `syz.2.21099'. [ 1348.024445][T23947] netlink: 32 bytes leftover after parsing attributes in process `syz.2.21099'. [ 1348.083317][T23935] syzkaller0: entered promiscuous mode [ 1348.091357][T23935] syzkaller0: entered allmulticast mode [ 1348.588593][T23966] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode [ 1348.596757][T23966] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode [ 1348.889856][T23979] tipc: Resetting bearer [ 1349.095220][T23978] tipc: Resetting bearer [ 1349.129343][ T1181] tipc: Resetting bearer [ 1349.559613][T23987] dvmrp0: entered allmulticast mode [ 1349.640597][T23997] netlink: 20 bytes leftover after parsing attributes in process `syz.4.21109'. [ 1349.688681][T23997] [ 1349.691060][T23997] ====================================================== [ 1349.698185][T23997] WARNING: possible circular locking dependency detected [ 1349.705335][T23997] syzkaller #0 Not tainted [ 1349.709744][T23997] ------------------------------------------------------ [ 1349.716926][T23997] syz.4.21109/23997 is trying to acquire lock: [ 1349.723170][T23997] ffff888032adea98 (set->srcu){.+.+}-{0:0}, at: __synchronize_srcu+0xb5/0x2f0 [ 1349.732187][T23997] [ 1349.732187][T23997] but task is already holding lock: [ 1349.739542][T23997] ffff88802aaba178 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1af/0x480 [ 1349.749050][T23997] [ 1349.749050][T23997] which lock already depends on the new lock. [ 1349.749050][T23997] [ 1349.759443][T23997] [ 1349.759443][T23997] the existing dependency chain (in reverse order) is: [ 1349.768467][T23997] [ 1349.768467][T23997] -> #6 (&q->elevator_lock){+.+.}-{4:4}: [ 1349.776402][T23997] __mutex_lock+0x19d/0x1550 [ 1349.781736][T23997] elevator_change+0x1af/0x480 [ 1349.787017][T23997] elevator_set_none+0xb5/0x140 [ 1349.792386][T23997] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 1349.798815][T23997] nbd_start_device+0x189/0xb30 [ 1349.804254][T23997] nbd_genl_connect+0x1597/0x1c10 [ 1349.809784][T23997] genl_family_rcv_msg_doit+0x233/0x340 [ 1349.815954][T23997] genl_rcv_msg+0x614/0x7a0 [ 1349.820971][T23997] netlink_rcv_skb+0x226/0x4a0 [ 1349.826263][T23997] genl_rcv+0x28/0x40 [ 1349.830766][T23997] netlink_unicast+0x7bb/0x940 [ 1349.836035][T23997] netlink_sendmsg+0x813/0xb40 [ 1349.841306][T23997] sock_sendmsg_nosec+0x13a/0x180 [ 1349.846978][T23997] ____sys_sendmsg+0x54e/0x850 [ 1349.852249][T23997] ___sys_sendmsg+0x2a5/0x360 [ 1349.857434][T23997] __x64_sys_sendmsg+0x1b1/0x290 [ 1349.862882][T23997] do_syscall_64+0x174/0x580 [ 1349.868007][T23997] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1349.874482][T23997] [ 1349.874482][T23997] -> #5 (&q->q_usage_counter(io)#52){++++}-{0:0}: [ 1349.883121][T23997] blk_alloc_queue+0x544/0x690 [ 1349.888476][T23997] __blk_mq_alloc_disk+0x194/0x390 [ 1349.894270][T23997] nbd_dev_add+0x494/0xb60 [ 1349.899197][T23997] nbd_init+0x15f/0x1e0 [ 1349.903953][T23997] do_one_initcall+0x250/0x870 [ 1349.909270][T23997] do_initcall_level+0x10a/0x1a0 [ 1349.914728][T23997] do_initcalls+0x59/0xa0 [ 1349.919572][T23997] kernel_init_freeable+0x29d/0x3e0 [ 1349.925288][T23997] kernel_init+0x1d/0x1d0 [ 1349.930137][T23997] ret_from_fork+0x514/0xb70 [ 1349.935311][T23997] ret_from_fork_asm+0x1a/0x30 [ 1349.940581][T23997] [ 1349.940581][T23997] -> #4 (fs_reclaim){+.+.}-{0:0}: [ 1349.947773][T23997] fs_reclaim_acquire+0x71/0x100 [ 1349.953286][T23997] __kmalloc_cache_node_noprof+0x66/0x630 [ 1349.959544][T23997] create_worker+0x112/0x7b0 [ 1349.964695][T23997] workqueue_prepare_cpu+0xe4/0x170 [ 1349.970426][T23997] cpuhp_invoke_callback+0x434/0x810 [ 1349.976226][T23997] _cpu_up+0x2ce/0x5b0 [ 1349.980802][T23997] cpu_up+0x1d2/0x220 [ 1349.985289][T23997] cpuhp_bringup_mask+0xb2/0x1a0 [ 1349.990818][T23997] cpuhp_bringup_cpus_parallel+0x109/0x120 [ 1349.997141][T23997] bringup_nonboot_cpus+0x17/0x30 [ 1350.002669][T23997] smp_init+0x32/0x110 [ 1350.007317][T23997] kernel_init_freeable+0x27f/0x3e0 [ 1350.013053][T23997] kernel_init+0x1d/0x1d0 [ 1350.017903][T23997] ret_from_fork+0x514/0xb70 [ 1350.023011][T23997] ret_from_fork_asm+0x1a/0x30 [ 1350.028283][T23997] [ 1350.028283][T23997] -> #3 (cpu_hotplug_lock){++++}-{0:0}: [ 1350.035999][T23997] cpus_read_lock+0x42/0x160 [ 1350.041121][T23997] static_key_slow_inc+0x12/0x30 [ 1350.046614][T23997] nbd_genl_reconfigure+0x1301/0x1e80 [ 1350.052494][T23997] genl_family_rcv_msg_doit+0x233/0x340 [ 1350.058550][T23997] genl_rcv_msg+0x614/0x7a0 [ 1350.063570][T23997] netlink_rcv_skb+0x226/0x4a0 [ 1350.068850][T23997] genl_rcv+0x28/0x40 [ 1350.073348][T23997] netlink_unicast+0x7bb/0x940 [ 1350.078640][T23997] netlink_sendmsg+0x813/0xb40 [ 1350.083914][T23997] sock_sendmsg_nosec+0x13a/0x180 [ 1350.089450][T23997] ____sys_sendmsg+0x54e/0x850 [ 1350.094726][T23997] ___sys_sendmsg+0x2a5/0x360 [ 1350.100692][T23997] __x64_sys_sendmsg+0x1b1/0x290 [ 1350.106171][T23997] do_syscall_64+0x174/0x580 [ 1350.111272][T23997] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1350.117676][T23997] [ 1350.117676][T23997] -> #2 (&nsock->tx_lock){+.+.}-{4:4}: [ 1350.125350][T23997] __mutex_lock+0x19d/0x1550 [ 1350.130457][T23997] nbd_queue_rq+0x373/0x1150 [ 1350.135562][T23997] blk_mq_dispatch_rq_list+0x499/0x1990 [ 1350.141729][T23997] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 1350.148887][T23997] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1350.155390][T23997] blk_mq_run_work_fn+0x16c/0x300 [ 1350.160942][T23997] process_scheduled_works+0xa8e/0x14e0 [ 1350.167033][T23997] worker_thread+0xa47/0xfb0 [ 1350.172139][T23997] kthread+0x388/0x470 [ 1350.176723][T23997] ret_from_fork+0x514/0xb70 [ 1350.181857][T23997] ret_from_fork_asm+0x1a/0x30 [ 1350.187167][T23997] [ 1350.187167][T23997] -> #1 (&cmd->lock){+.+.}-{4:4}: [ 1350.194375][T23997] __mutex_lock+0x19d/0x1550 [ 1350.199495][T23997] nbd_queue_rq+0xc1/0x1150 [ 1350.204600][T23997] blk_mq_dispatch_rq_list+0x499/0x1990 [ 1350.210747][T23997] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 1350.217593][T23997] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1350.224091][T23997] blk_mq_run_work_fn+0x16c/0x300 [ 1350.229677][T23997] process_scheduled_works+0xa8e/0x14e0 [ 1350.235733][T23997] worker_thread+0xa47/0xfb0 [ 1350.240834][T23997] kthread+0x388/0x470 [ 1350.245415][T23997] ret_from_fork+0x514/0xb70 [ 1350.250516][T23997] ret_from_fork_asm+0x1a/0x30 [ 1350.255784][T23997] [ 1350.255784][T23997] -> #0 (set->srcu){.+.+}-{0:0}: [ 1350.262897][T23997] __lock_acquire+0x1520/0x2cf0 [ 1350.268299][T23997] lock_sync+0x9d/0x120 [ 1350.272966][T23997] __synchronize_srcu+0xc9/0x2f0 [ 1350.278414][T23997] elevator_switch+0x1e8/0x7b0 [ 1350.283689][T23997] elevator_change+0x2fa/0x480 [ 1350.288962][T23997] elevator_set_default+0x375/0x440 [ 1350.294677][T23997] blk_register_queue+0x3f3/0x4e0 [ 1350.300226][T23997] __add_disk+0x6cb/0xe30 [ 1350.305143][T23997] add_disk_fwnode+0x100/0x3a0 [ 1350.310416][T23997] nbd_dev_add+0x733/0xb60 [ 1350.315338][T23997] nbd_genl_connect+0x992/0x1c10 [ 1350.320780][T23997] genl_family_rcv_msg_doit+0x233/0x340 [ 1350.327142][T23997] genl_rcv_msg+0x614/0x7a0 [ 1350.332343][T23997] netlink_rcv_skb+0x226/0x4a0 [ 1350.337883][T23997] genl_rcv+0x28/0x40 [ 1350.342777][T23997] netlink_unicast+0x7bb/0x940 [ 1350.349132][T23997] netlink_sendmsg+0x813/0xb40 [ 1350.354531][T23997] sock_sendmsg_nosec+0x13a/0x180 [ 1350.360079][T23997] ____sys_sendmsg+0x54e/0x850 [ 1350.365449][T23997] ___sys_sendmsg+0x2a5/0x360 [ 1350.370657][T23997] __x64_sys_sendmsg+0x1b1/0x290 [ 1350.376104][T23997] do_syscall_64+0x174/0x580 [ 1350.381206][T23997] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1350.387609][T23997] [ 1350.387609][T23997] other info that might help us debug this: [ 1350.387609][T23997] [ 1350.397823][T23997] Chain exists of: [ 1350.397823][T23997] set->srcu --> &q->q_usage_counter(io)#52 --> &q->elevator_lock [ 1350.397823][T23997] [ 1350.411573][T23997] Possible unsafe locking scenario: [ 1350.411573][T23997] [ 1350.419091][T23997] CPU0 CPU1 [ 1350.424483][T23997] ---- ---- [ 1350.429859][T23997] lock(&q->elevator_lock); [ 1350.434444][T23997] lock(&q->q_usage_counter(io)#52); [ 1350.442337][T23997] lock(&q->elevator_lock); [ 1350.449435][T23997] sync(set->srcu); [ 1350.453390][T23997] [ 1350.453390][T23997] *** DEADLOCK *** [ 1350.453390][T23997] [ 1350.461516][T23997] 6 locks held by syz.4.21109/23997: [ 1350.466784][T23997] #0: ffffffff9009d9e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1350.475054][T23997] #1: ffffffff9009d820 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1350.484100][T23997] #2: ffff8880386921c0 (&set->update_nr_hwq_lock){++++}-{4:4}, at: add_disk_fwnode+0xea/0x3a0 [ 1350.494641][T23997] #3: ffff88802aaba200 (&q->sysfs_lock){+.+.}-{4:4}, at: blk_register_queue+0x10d/0x4e0 [ 1350.504484][T23997] #4: ffff88802aab9c88 (&q->q_usage_counter(queue)#54){+.+.}-{0:0}, at: elevator_change+0x194/0x480 [ 1350.515373][T23997] #5: ffff88802aaba178 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1af/0x480 [ 1350.525288][T23997] [ 1350.525288][T23997] stack backtrace: [ 1350.531196][T23997] CPU: 1 UID: 0 PID: 23997 Comm: syz.4.21109 Not tainted syzkaller #0 PREEMPT(full) [ 1350.531216][T23997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1350.531236][T23997] Call Trace: [ 1350.531320][T23997] [ 1350.531358][T23997] dump_stack_lvl+0xe8/0x150 [ 1350.531436][T23997] print_circular_bug+0x2e1/0x300 [ 1350.531455][T23997] check_noncircular+0x12e/0x150 [ 1350.531473][T23997] __lock_acquire+0x1520/0x2cf0 [ 1350.531495][T23997] ? check_noncircular+0xda/0x150 [ 1350.531581][T23997] ? lockdep_unlock+0x5d/0xd0 [ 1350.531599][T23997] ? __lock_acquire+0x13e8/0x2cf0 [ 1350.531621][T23997] ? __lock_acquire+0x13e8/0x2cf0 [ 1350.531642][T23997] ? __synchronize_srcu+0xb5/0x2f0 [ 1350.531662][T23997] lock_sync+0x9d/0x120 [ 1350.531682][T23997] ? __synchronize_srcu+0xb5/0x2f0 [ 1350.531704][T23997] __synchronize_srcu+0xc9/0x2f0 [ 1350.531726][T23997] ? __pfx___synchronize_srcu+0x10/0x10 [ 1350.531746][T23997] ? do_raw_spin_lock+0x12b/0x2f0 [ 1350.531767][T23997] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1350.531784][T23997] ? ktime_get_mono_fast_ns+0x2d2/0x2f0 [ 1350.531804][T23997] ? synchronize_srcu+0x20a/0x260 [ 1350.531826][T23997] elevator_switch+0x1e8/0x7b0 [ 1350.531846][T23997] ? blk_mq_cancel_work_sync+0xa5/0xe0 [ 1350.531863][T23997] elevator_change+0x2fa/0x480 [ 1350.531883][T23997] ? do_raw_spin_unlock+0xf5/0x210 [ 1350.531902][T23997] elevator_set_default+0x375/0x440 [ 1350.531924][T23997] ? __pfx_elevator_set_default+0x10/0x10 [ 1350.531948][T23997] ? disk_register_independent_access_ranges+0x2d8/0x380 [ 1350.531998][T23997] ? blk_crypto_sysfs_register+0x11c/0x170 [ 1350.532069][T23997] blk_register_queue+0x3f3/0x4e0 [ 1350.532087][T23997] __add_disk+0x6cb/0xe30 [ 1350.532106][T23997] add_disk_fwnode+0x100/0x3a0 [ 1350.532125][T23997] nbd_dev_add+0x733/0xb60 [ 1350.532142][T23997] ? __pfx_nbd_dev_add+0x10/0x10 [ 1350.532164][T23997] ? bpf_lsm_capable+0x9/0x20 [ 1350.532197][T23997] ? security_capable+0x7e/0x2c0 [ 1350.532251][T23997] ? radix_tree_lookup+0x25c/0x290 [ 1350.532314][T23997] nbd_genl_connect+0x992/0x1c10 [ 1350.532333][T23997] ? __pfx_nbd_genl_connect+0x10/0x10 [ 1350.532348][T23997] ? rcu_is_watching+0x15/0xb0 [ 1350.532363][T23997] ? trace_kmalloc+0x2a/0xf0 [ 1350.532384][T23997] ? __kmalloc_noprof+0x396/0x720 [ 1350.532404][T23997] ? __nla_parse+0x40/0x60 [ 1350.532479][T23997] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 1350.532509][T23997] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 1350.532535][T23997] genl_family_rcv_msg_doit+0x233/0x340 [ 1350.532560][T23997] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1350.532586][T23997] ? __lock_acquire+0x683/0x2cf0 [ 1350.532610][T23997] genl_rcv_msg+0x614/0x7a0 [ 1350.532633][T23997] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1350.532654][T23997] ? __pfx_nbd_genl_connect+0x10/0x10 [ 1350.532674][T23997] netlink_rcv_skb+0x226/0x4a0 [ 1350.532692][T23997] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1350.532714][T23997] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1350.532736][T23997] ? down_read+0x2be/0x330 [ 1350.532757][T23997] genl_rcv+0x28/0x40 [ 1350.532777][T23997] netlink_unicast+0x7bb/0x940 [ 1350.532797][T23997] netlink_sendmsg+0x813/0xb40 [ 1350.532819][T23997] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1350.532838][T23997] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1350.532885][T23997] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1350.532902][T23997] sock_sendmsg_nosec+0x13a/0x180 [ 1350.532925][T23997] ____sys_sendmsg+0x54e/0x850 [ 1350.532945][T23997] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1350.532965][T23997] ? import_iovec+0x73/0xa0 [ 1350.533017][T23997] ___sys_sendmsg+0x2a5/0x360 [ 1350.533034][T23997] ? __lock_acquire+0x683/0x2cf0 [ 1350.533055][T23997] ? __pfx____sys_sendmsg+0x10/0x10 [ 1350.533074][T23997] ? futex_wake+0x51b/0x5f0 [ 1350.533115][T23997] ? __fget_files+0x2a/0x420 [ 1350.533147][T23997] ? __fget_files+0x3a2/0x420 [ 1350.533171][T23997] __x64_sys_sendmsg+0x1b1/0x290 [ 1350.533189][T23997] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1350.533213][T23997] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1350.533230][T23997] do_syscall_64+0x174/0x580 [ 1350.533248][T23997] ? trace_irq_disable+0x3b/0x140 [ 1350.533276][T23997] ? clear_bhb_loop+0x40/0x90 [ 1350.533293][T23997] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1350.533309][T23997] RIP: 0033:0x7f82cbf9de99 [ 1350.533352][T23997] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1350.533367][T23997] RSP: 002b:00007f82cce2e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1350.533412][T23997] RAX: ffffffffffffffda RBX: 00007f82cc226090 RCX: 00007f82cbf9de99 [ 1350.533424][T23997] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 000000000000000a [ 1350.533435][T23997] RBP: 00007f82cc033eaf R08: 0000000000000000 R09: 0000000000000000 [ 1350.533446][T23997] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1350.533455][T23997] R13: 00007f82cc226128 R14: 00007f82cc226090 R15: 00007fff1a625408 [ 1350.533474][T23997] [ 1351.053597][ T48] dvmrp0: left allmulticast mode [ 1351.160664][T23846] udevd[23846]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory