last executing test programs: 3m46.36025976s ago: executing program 3 (id=3114): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071120d000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (async, rerun: 64) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000b40)={'dummy0\x00'}) (rerun: 64) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r0) sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0x7c, r2, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffff}, @IPVS_CMD_ATTR_SERVICE={0x58, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast1}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x16}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x84}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x800}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) 3m45.999993552s ago: executing program 3 (id=3117): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b40)={'wlan1\x00', 0x0}) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="140100001f000504000000000000000003"], 0x114}], 0x1}, 0x0) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000080)={0x40, r1, 0x1, 0x0, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_PLINK_STATE={0x5}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x401}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x5e3}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x0) 3m45.795459162s ago: executing program 3 (id=3119): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x41, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000280), &(0x7f00000000c0)='%+9llu \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x10, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000ff0500000000000000000000b7080000000000007b8af8ff00000000b7080000ff0100007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b6f7bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3m45.641851126s ago: executing program 3 (id=3120): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0xe, &(0x7f0000001740)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff0200000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000010000006a0af2fe000000008500000009000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989425f5d0b79f6584d0416d7c4bb9f547b328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7f9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d00000020000000ef19349ee7f31abc11c800000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2c4af38ffb7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da202274f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec7ffff35e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0eb3280e09758bd445ab91d20baca005472b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92fe8bad99ca332af00f191b66b6a6f732a91f0e2e9190e4b448da7de018c58e950767f9b320be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c52573d9308a13d115b43f8b1894c8fa8a14dc4810f61ae96bf704526a8919bc700002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dfff4a979369b0e8ebc62887aa46e820a74f91381ccc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f78fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb3c035fc6846abe389b25c988f0bbb889560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a426a9b7d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0dac4728288e78980c1184d8223edbccbf9258b7374e79a1f8bf3fb73cfd1e76982f3d899f71e4a9f0ba8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ca2a4583f3d40e817433d0f4f25cfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f3e34b7524642c248aa813edaa626f00000021f8547d393dabe616fbbde21c90be00b5a22671395c7a69c6dd4d022ffc97ddb6aa025131652d409da1d8cfc3d219d4b1c1b7b8170d7c33d91db2b73f7ae02485a209a2474b5d0790d05c01bec623056e4d3f4d3149373a28b26a15a1fcce73d57e6eaf7e6f315fe275ebc9ef7aeca277dde01dde724f419803a2172a7833ceab38d21ca4f1dea5e1f4d8824167b21dd289dd4e6ecfba9e163bdbc48e1e758ecde0"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040), 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffece}, 0x48) r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x180000000) 3m45.436351693s ago: executing program 3 (id=3123): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x28, 0x14, 0x509, 0x70bd2a, 0x25dfdbfd, {0x2, 0x18, 0x0, 0xfd, r2}, [@IFA_LOCAL={0x8, 0x2, @loopback}, @IFA_ADDRESS={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x34}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000480)="b1", 0x1) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) accept(r4, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$tipc(0x1e, 0x5, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000500000000000000000000008500000041000000850000000700000095"], &(0x7f0000000100)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x0, 0xffffffffffffff1b, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) bind$tipc(r8, &(0x7f00000001c0)=@name={0x1e, 0x2, 0x3, {{0x40, 0x2}, 0x5}}, 0x19) connect$tipc(r8, &(0x7f00000002c0)=@id={0x1e, 0x3, 0x0, {0x4e21}}, 0x10) r10 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r10, 0x10e, 0xc, &(0x7f0000000240)={0x3ffd}, 0x10) r11 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r11, 0x29, 0xd2, &(0x7f0000000000)={{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x2000}, 0x5c) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@ipv6_getaddr={0x2c, 0x16, 0x3c2be10bca706f15, 0x0, 0x0, {}, [@IFA_LOCAL={0x14, 0x2, @private1}]}, 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) r13 = socket$netlink(0x10, 0x3, 0x15) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r13, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000001}, 0xc844) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @func_proto, @typedef={0x0, 0x0, 0x0, 0x13, 0x4}, @volatile={0x0, 0x0, 0x0, 0xa, 0x3}]}, {0x0, [0x0, 0x0, 0x0, 0x5f]}}, 0x0, 0x52}, 0x20) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x24, r6, 0x1, 0x70bd2c, 0x25dfdb7f, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r12}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004000}, 0x800) 3m30.579236557s ago: executing program 4 (id=3227): r0 = socket$netlink(0x10, 0x3, 0x12) socket$alg(0x26, 0x5, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="100000f70000000000000000070000002acb529e0c486188b75cc2817da292c5d67c7d261736c60d793d938d872cb1c48ebb095b5e1710aee90c4be8186590707d13c186c637c57839c60d41262489152cfce2205f53379569790c274251f0b54ab187e1f6dcfb29f73b235f04349e5d8b46b3acb5792a87eb7b90cf7dbcaa51f4b8088a09a5912516b29f5a73f79fc00145f902c47427e0f8621ed7a862df9d3b54d3f25c77f1dc75094b5aa41fe6b96a44fa96d2f66966b03236e6f4bf671b8d79f406566be1c8a45cbf566841f52b7ab3"], 0x10}}], 0x1, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000080)={'nr0\x00', 0x2000}) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000003c0), 0x0) writev(r3, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @loopback}, 0xc) setsockopt$inet_mreqsrc(r1, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000002000000851000000600000018020000", @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8"], &(0x7f0000000000)='GPL\x00', 0x2}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x50) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x6, 0x0, 0x0, 0x2, 0x0, 0x70bd2d}, 0x10}}, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[], 0x104}, 0x1, 0x0, 0x0, 0x20040890}, 0x200080c0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x4030582a, &(0x7f0000000300)={0x1100, 0x0, 0x0, 0x2a40}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(rfc4106(gcm(aes)))\x00'}, 0x58) close(0x3) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r8) 3m27.28690872s ago: executing program 4 (id=3233): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r0, 0x0, 0x18, &(0x7f0000000240)=0xc, 0x3) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x3, 0xc06a2f6, 0x1, 0x7}, 0x6, 0x0, 0xa, 0x4, 0x6, 0x8, 0x18, 0x9, 0x3, 0x4, {0x0, 0x2, 0x9, 0x800, 0x8704, 0x27000000}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x44, 0x2c, 0xd2b, 0x800, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x9}, {}, {0xfff1, 0xb}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0xd, 0x1, 0x3, 0x1, 0x4, 0x401, 0xe, 0xfffffffa}}]}}]}, 0x44}}, 0x20000000) 3m14.131339517s ago: executing program 1 (id=3249): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x3ff}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xd8}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r1, 0x29, 0x3a, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x48, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x48}}, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x3, 0x103, @empty, 0x20010}, 0x1c) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r5, @ANYBLOB="0c000280060001"], 0x24}}, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r4, 0x0, 0x480, &(0x7f00000001c0), &(0x7f0000000240)=0x40) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000001800)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r7, &(0x7f0000001d00)={0x0, 0x0, &(0x7f0000001cc0)={&(0x7f0000001940)={0x28, r6, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x4081}, 0x4008804) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000540), 0x3c) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000008c0)=@setlink={0x30, 0x13, 0x709, 0x0, 0x0, {}, [@IFLA_NET_NS_PID={0x8}, @IFLA_TARGET_NETNSID={0x8}]}, 0x30}}, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x303}, "41328ac34a4ad2ba", "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "89b06aff130000fd"}, 0x38) socket$key(0xf, 0x3, 0x2) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000019600)=[@ip_tos_int={{0x14, 0x11a, 0x1, 0x2}}], 0x28}, 0x0) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040), 0x4) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000030400000000fef5df2500007400", @ANYRES32=0x0, @ANYBLOB="00080000075005001c0012800b00010062726964676500000c0002800500160001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r10, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0x7fff, @loopback, 0x9}, @in6={0xa, 0x4e22, 0x7ff, @empty, 0x7}], 0x38) 3m14.084508584s ago: executing program 4 (id=3250): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r3 = socket$kcm(0x10, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x15) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet_tcp_int(r5, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r5, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) sendto$inet(r5, &(0x7f0000000200)="e1", 0x1, 0x8040000, 0x0, 0x0) splice(r5, 0x0, r4, 0x0, 0x9, 0x8) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="d800000018007bf6e00212ba0d8105040a000000000f040b067c55a1bc0009001e0006990600000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a288747f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d345ef464095cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3099ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5000000000000", 0xd8}], 0x1b, 0x0, 0x0, 0x2663}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2, 0x3}, @TCA_FQ_QUANTUM={0xffffffffffffff0f}]}}]}, 0x48}}, 0x0) 3m13.42367612s ago: executing program 4 (id=3254): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x58, 0x0, 0x1, 0x405, 0x0, 0x0, {0x2}, [@CTA_SYNPROXY={0x4}, @CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_SEQ_ADJ_ORIG={0x1c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8}, @CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8}]}]}, 0x58}}, 0x0) (async) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000130a01030000000000000000030000060000010073797a30000000000900020073797a31000000000c00064000000000000000015f33131ab70e17"], 0x38}}, 0x80) 3m13.157974795s ago: executing program 1 (id=3256): bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000140)='%pS \x00'}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r2) r3 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000400), 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xa, 0xff, 0xffffffc3, 0x4, 0x30584, r0, 0x81, '\x00', r1, r2, 0x5, 0x2, 0x1, 0x0, @void, @value, @value=r3}, 0x50) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$netlink(0x10, 0x3, 0xc) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f00000012c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x1000000}]}]}}, 0x0, 0x2e, 0x0, 0x1}, 0x20) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x1e, 0x4, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r10, 0x10f, 0x81, &(0x7f0000000480), 0x4) getsockopt$inet_tcp_int(r10, 0x6, 0x0, &(0x7f00000001c0), &(0x7f0000000200)=0x4) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@bridge_setlink={0x44, 0x13, 0xa2f, 0x70bd2b, 0x0, {0x7, 0x0, 0x68, r8, 0x940, 0x22265}, [@IFLA_LINKINFO={0x24, 0x1a, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x4, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x6, 0x3}}]}]}}}]}, 0x44}}, 0x8004) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRESOCT=r6, @ANYRES32=0x0, @ANYRES64=r8, @ANYRES32=r5], 0x7c}, 0x1, 0x0, 0x0, 0x41}, 0x8000) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a4c000000090a010400000000000000000a0000020900010073797a3100000000080005400000001d0900020073797a31e1ff000008000a4000000000080003400000001408000c40008000031400000011000100"], 0x74}, 0x1, 0x0, 0x0, 0x24000850}, 0x40) 3m12.917065743s ago: executing program 4 (id=3258): ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)={0x6f9b, 0x81, 0xc, 0x1ff, 0x7fff, 0x9}) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000003c000b0000000000fcffffff04000000040000800c000100091c", @ANYRES16], 0x24}}, 0x0) r1 = accept(r0, &(0x7f0000000080)=@isdn, &(0x7f0000000140)=0x80) getpeername$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000280)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0xc09, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x50081}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_MCAST_STATS_ENABLED={0x5, 0x2a, 0x1}]}}}]}, 0x48}}, 0x0) 3m12.642047377s ago: executing program 1 (id=3260): socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$alg(0x26, 0x5, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) (async) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCGUNIT(r2, 0x80047456, &(0x7f0000000080)) (async) writev(r1, &(0x7f0000000400)=[{&(0x7f00000002c0)="a609a89c9edd34187123b5adceb3968557f4e107445a53c0815c9636d00f896d1e8cd8de77a79f1e3e2c53ddf1bb9f8ac5cb5257ff4e8b960026bc4244c4b09179a97dffdf02563e23546d3e78f944e7e2fee2a00b6313048fe354223318badb21d8c086669c5f7772f4a6d90d0997babdf79f7d557e055b3e6f2e4f41ec06a39a57b9ccc00bbca22395e41f9e9652af665f0e1603fb85d4799d54d44c706ff8df9bb805b182a1260b5936ae44f649b5e2fdca240984dcd0033ec28aeaaa686608c5c50538eea153", 0xc8}, {&(0x7f00000004c0)="7ee25c099579d92f8da721f68a8100b6adf04e0cd543f7d26019d57e6a3ecf7ef34486da35c482845d517dc801cca9e4f248b15413a7e252b0", 0x39}], 0x2) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000600)='mctp_key_release\x00', r3, 0x0, 0x5}, 0x18) (async) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffee5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000340)={r4}) (async) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000400)='netfs_rreq_ref\x00', r5, 0x0, 0x9}, 0x18) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r6}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000600)='mctp_key_release\x00', r5, 0x0, 0x5}, 0x18) (async) close(r7) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(r7, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000580)="1e00180081060d12a0b9b545c70000", 0xf}], 0x1}, 0x140040c4) (async) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e3, &(0x7f0000000180)={r4, r8}) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58) (async) r9 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmmsg$inet(r9, &(0x7f0000000200)=[{{&(0x7f0000000040)={0x2, 0x0, @empty}, 0x10, 0x0}}, {{&(0x7f0000000000)={0x2, 0x0, @empty=0x3000000}, 0x10, 0x0}}], 0x2, 0x0) (async) r10 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r10, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) (async) setsockopt$TIPC_GROUP_JOIN(r10, 0x10f, 0x87, &(0x7f0000000000)={0x200042, 0x0, 0x3}, 0x10) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (async) r11 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) 3m12.603979039s ago: executing program 0 (id=3261): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="01002cbd7000ffdbdf253e00000008000300", @ANYRES32=r4], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x90) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r0, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001e80)=[0x0], 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 3m12.374565783s ago: executing program 4 (id=3262): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) ioctl$BTRFS_IOC_ADD_DEV(r0, 0x5000940a, &(0x7f0000000040)={{r0}, "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"}) pipe(&(0x7f0000001040)={0xffffffffffffffff}) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r2, 0x0, 0x13, &(0x7f0000d10ffc), 0x4) 3m12.257805812s ago: executing program 3 (id=3129): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000b80)=@delchain={0x68, 0x65, 0x20, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x10, 0x2}, {0x0, 0xb}, {0xd, 0xb}}, [@filter_kind_options=@f_flow={{0x9}, {0x38, 0x2, [@TCA_FLOW_XOR={0x8, 0x7, 0xffffffff}, @TCA_FLOW_EMATCHES={0x4}, @TCA_FLOW_XOR={0x8, 0x7, 0xffffff7b}, @TCA_FLOW_MODE={0x8}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x5}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x7f}, @TCA_FLOW_RSHIFT={0x8, 0x4, 0x5}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x80}, 0x20000080) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f, 0xa1}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r3, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000300)=r4}, 0x20) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x5, 0x0, 0x0, 0x80000008}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000680)={r5, &(0x7f0000000400), &(0x7f00000003c0)=@udp, 0x1}, 0x20) close(r2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000800000000000000000000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000002b00)=ANY=[@ANYBLOB="b702000007000000bfa300000000000007030000f0ffffff7a0af0ff0020000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000000000006a0af2fe0000000085000000a3000000b700000000000000950000000000000000e154cd8445974b26ffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87867c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f86bb47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a55b000000c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2d90addedc28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad91935a6ddfa8f90e79321a0574fb30ff0000801989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c1f860d050d694cc7806d294d3665016a7b29da0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d40887c58559b7dcb98a6273b8c651e57f727041c62cea5b7bd24d9f679e4fbe948dfb4cc4a389469608241630459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7b9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b83720eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb89872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d0000002000000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fc361b4735efbf3411718d6ee7aebed161980f2fde4f9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da202274f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec780f535e62f4eeee50e5bafecea4d4134d006c8d6883eca5c9c58c9e9338c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e4bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802c8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000ff0ffd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af0be61e58c79d497247d278888901d442ad7f8536607a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96c18cc7130000000000002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dfff4a979369b0e8ebc62887aa46e820a74f91381dcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f7f05b47d3e519f1634e8fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb560ae99e85b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a426a996d503a26e9a714ee5f72d8805dd1bfbd081f6a5359dbdfbf31a562395020becaf3fd1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0dac4b28288e78980c1184d8223edbc4bf9258b7374e79a8f8bf3fb73c8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ca2a4583f3d40e817433d0f4f25cfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f3e34b5524642c248aa813edaa626f0000000000000000000000000000000003ba5bac34b611569a451564d3a5400f9097ffe7a37e765bc652be71ee24250d6d9cf19878dd62c53062d6000c40bde6a6135eae8a00000000008d797190a26c933f933aff5c521eeb7a84a62d149d846e74e76b515b6b8be29e8b69310fa130cf6d6b74f33205d3cc218ca554ed8085ae044f5bf2e89ad07963acbd4dd4dc5b4552591edde7a22ad06f7567e6fec2f65011b579bf609d61a3ff4d6f490824bb035995449fc34106ae6889f036d67b6aaee784f855ebc746ac871b5d2031ac0a252ac1f86e93e245f3793cea80b6de773899d49d11d3b1ed79163b111c976cf840a2ef6214a43338fba8c9edb6be26e68fcc5d47ed74a66ce8aba726ab955b9b32ab1890e84a5e2d7476252af25e5c95c5a8b2b1b5c8a2645b01b823c0f169d6ab529cc889bb07889d9e155114cf3e26a50c527ec6d4021cd2cacfea6d7e41e39e26b3967cad65c648b170f12ea9cc69dcee64be0c27b1f4f7f5ce3e62c35602c9d2921326891901661c85b988494f094abb91ed813b42828aa93105896e0aee851a8087e169a1d69e841257d9053d0cdc3a6ac4f12084cc6470abebe8b344b1f56690a2687b428686c854c21831da277e8b8a21b7b91a46d22ba083eca7b1f8268048cde7d6f237dca42035881b29ca9c8c2937971821b613894297ff6f7796053a4de1fd77e180cc22b205d43bb4a1b59962c1f605ea1b74585cf5e8d579f157cb45561c357f9976cec6a43388b3049a0d9c171ff6145266ba119d00000000001ef3794a930eb12f3a6215c510bf0bca70c127e9c70cc7bef921249a7f18a0034ce3264a9e96656b47233e2ed7c76520e649c3fd550bdafd77c5cd72b4446d3e157ddd97e7622a6891fb739acd3b2cdaf65ac78490f0641be6e8c6f55bf3d228786895ff5fd5970faacd8a5025aca0aa1931f477ba06aa60051298c8bf7f3b399194f98dc3f4e8513ad06da09dc393c1284515986b8c70ac69512f6c0c04f42edb3a097a11f2ab480e3e391abffae097752300576337c6dd24c4a98280684aa1fe8c7b43ee8bce05fe979b34da18cdb44dbb030b8009cd3b3b44fd8e7b534acd3f1839cb54817668ab446d3d47848429ea831a57f222c714870582a8832c2a326c5d1e406c8b05dedddceb24483f8f998b05c3ddf85c3799c9000000000000000000000000001e57cf839eb3150d6a076fb7b86fae98dbb46014f483aecb4ec4f0877371bcae8912c78aff857c669760f0e55041563c5c3e8ee4a0eef885fd43fe34a1febc82370d1d07fdfe705ada47288e41e7e6ee82d66b99ae4b0889fe949e7342ca97c1a64dcc7f6a0c0da07de8c808b4caec54820f856889fc5f1af3d675206e3257f974d6e45ff1e905c2f0fc0173ac6714acaaca2397bee23630ecaa2c1c6ddc3085689a033d6d41a1a7ac59baec299158faa52308856805f2130863f4668e27b8bbef4f4cd43a2fd294b5b0bf2b0e4afbe570c54aa214579ca0caf54231d00a94eda2be6f037e2befdd03bf152f696ca1d1ea86eb7ee1f021062ad71246dae1580c4f959a320912032ed468a8ed9f27a2258ddf465de77a51b4713bc6b789a0e8b203f0f592ddb27aa90989a9e0cb624bc34e7d6ebf156ea251e3a2f83ada9f0b70035e8ed200a52b00"/3910], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r8, 0xe0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000020c0)={r4, 0xe0, &(0x7f0000001fc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0), ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, &(0x7f0000000940)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000e80)=[0x0, 0x0, 0x0], 0x0, 0x1c, &(0x7f0000000ec0)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000f00), &(0x7f0000000f40), 0x8, 0x4e, 0x8, 0x8, &(0x7f0000000f80)}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r9}, 0x4) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000080)={@map=r2, 0xffffffffffffffff, 0x5, 0x20, 0x0, @void, @void, @void, @value=r9}, 0x20) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000080)={0x2, &(0x7f00000001c0)=[{0x20, 0x0, 0x3f, 0xfffff004}, {0x16, 0x0, 0x6, 0xfffffffe}]}) r10 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r10, &(0x7f0000000040)={0x18, 0x0, {0xfffe, @local, 'gre0\x00'}}, 0x1e) r11 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r11, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve0\x00'}}, 0x1e) r12 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r12, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve0\x00'}}, 0x1e) close(r11) 3m12.194553934s ago: executing program 0 (id=3263): r0 = epoll_create1(0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000040)={0x80000017}) r2 = socket$alg(0x26, 0x5, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r3, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) bind$alg(r2, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r4 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=ANY=[], 0x240}, 0x1, 0x0, 0x0, 0xd0}, 0x4048010) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r4) 3m11.113265821s ago: executing program 0 (id=3268): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000b"], 0x48) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x10, 0x34, 0x1, 0x0, 0x25dfdbff}, 0x10}], 0x1}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x5, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000010"], 0x0, 0xffff, 0x0, 0x0, 0x40f00, 0x4a, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) (async) listen(r0, 0x0) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async) syz_emit_ethernet(0x4e, &(0x7f0000000340)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x5a}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x10000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) 3m10.700841529s ago: executing program 2 (id=3269): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x4c, r1, 0x201, 0x0, 0x0, {0x3, 0x0, 0x26}, [@NLBL_UNLABEL_A_IPV4ADDR={0x5, 0x4, @initdev={0xac, 0x35, 0x0, 0x0}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'sit0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @dev}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev}]}, 0x4c}, 0x8, 0x3000000000002}, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)={0x154, 0x0, 0x800, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x4}, @TIPC_NLA_MEDIA={0xb0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x85}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x737c92ff}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xbe800000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}]}]}, @TIPC_NLA_MEDIA={0x80, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe27e243}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffff801}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8a1}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xe86a}]}]}, 0x154}, 0x1, 0x0, 0x0, 0x4}, 0x2000000) 3m10.586551406s ago: executing program 2 (id=3270): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f00000003c0)="2000000012005f0214f9f4070000fbe40a000000000085b5ca8d7c10277582b9", 0x20) recvmmsg(r1, &(0x7f00000021c0), 0x5b, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x5a0c829fef27fdb1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000300)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2c, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="28c6674a30f89835df7322000000000007"], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4, 0x0, 0x10003}}, 0x2e) ioctl$PPPIOCGCHAN(r5, 0x80047437, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60122d9200083a0000000000000000000000ffffac1414aafe80000000000000000000000000b775258400aa02009078000000818b4f6994d56eda04"], 0x0) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x28, r0, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ipvlan0\x00'}}]}]}, 0x28}}, 0x20000080) r6 = socket$nl_rdma(0x10, 0x3, 0x14) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r6, 0x10e, 0x2, &(0x7f0000000000)=0x16, 0x4) 3m10.238315845s ago: executing program 2 (id=3271): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f0000000000)=@ethtool_cmd={0x8, 0x6, 0x1, 0x389, 0x8, 0x2, 0x4, 0x6, 0x0, 0x1, 0x5, 0x5, 0xfffb, 0x8, 0x5, 0x0, [0xe, 0xff]}}) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYRESDEC, @ANYRES8=r1], 0x7c}, 0x1, 0x0, 0x0, 0x4008800}, 0x4090) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000060a0b040000000000000000020000001400048010000180090001006d657461000000000900010073797a300000000009000200737964320000000014000000110001000000000000919e9c2f0000000000000a"], 0x68}, 0x1, 0x0, 0x0, 0x8004}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001ec0)={0x6, 0x4, &(0x7f0000001c00)=@framed={{}, [@ldst={0x1, 0x0, 0x4, 0x0, 0xa, 0xfe00}]}, &(0x7f0000001c40)='syzkaller\x00', 0xf}, 0x90) r2 = socket(0x15, 0x5, 0x0) getsockopt(r2, 0x200000000114, 0x2711, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000140)={@remote, @local, 0x1, 0x5, [@multicast1, @broadcast, @private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, 0x24) 3m10.048032921s ago: executing program 0 (id=3272): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)={0x24, 0x2d, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r2}, @nested={0xb, 0x0, 0x0, 0x1, [@generic="976b6408686030"]}]}, 0x24}], 0x1}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)=@allocspi={0x108, 0x16, 0x400, 0x70bd2c, 0x25dfdbff, {{{@in6=@private2={0xfc, 0x2, '\x00', 0x8}, @in6=@dev={0xfe, 0x80, '\x00', 0x2d}, 0x4e20, 0x7ff, 0x4e23, 0x0, 0x2, 0x20, 0xa0, 0x3b, 0x0, r2}, {@in6=@private1, 0x4d3, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x12}, {0x2, 0xfffffffffffffffd, 0x3, 0x6, 0xffffffff, 0x98, 0x9, 0x1}, {0x9, 0x8, 0x4, 0x2}, {0x10, 0x4, 0x5}, 0x70bd26, 0x3500, 0x2, 0x0, 0x9, 0x10}, 0x0, 0x39981357}, [@proto={0x5, 0x19, 0x49}, @proto={0x5, 0x19, 0x32}]}, 0x108}, 0x1, 0x0, 0x0, 0xc0840}, 0x40001) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c010000160001000000000000000000ffffffff000000000000000000000000e00000020000000000000000000000000000000000000000000000003c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000000000006c000000ac1414aa0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007e00000000000000000400000000000000000000000000000000000000000000000000000000000000ff0f000000000000000000800000000000000000000000000000000000000000000000000000000100000000000000000000000032100000080022"], 0x12c}}, 0x0) 3m10.014970004s ago: executing program 2 (id=3273): syz_emit_ethernet(0x46, &(0x7f0000000000)={@multicast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, '\x00', 0x10, 0x3a, 0xff, @local, @loopback, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x2d, 0x6, 0x999, 0x5932}}}}}}, 0x0) (async, rerun: 64) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94) (async, rerun: 64) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) write$tun(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="120086dd0000120000000000000060ec97000f982c00fb8000000000000000000000000000aaff0200"], 0xfce) (async) write$tun(r1, &(0x7f00000000c0)={@val={0x0, 0x88a2}, @void, @llc={@llc={0xfc, 0x80, "16be", "ddf31ae104101ebdf935bebbc2781c95331dd1f1a18bb5ba30efea98377ba8442fc7e9d583e9e840d35c58e388965e6566fe1572dfab7dd592332a61c5b95beb74e9fc02e8d9a77289c4f693034620f9c7"}}}, 0x59) (async, rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x50, 0x0, &(0x7f0000000000)="ff", 0x0, 0x36, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) (rerun: 64) 3m9.950042281s ago: executing program 1 (id=3274): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000000)={0x0, 0x5d, "c42978a8c37f09c8cfd2ad9f9780c2939017010961e016da27ca0ead1d02d0c21fffccf5df49dfd860ebcd00d1d268f310739841213b3eccee92f5502bfdf260e959bf117d009fb879419ce3843486c0b98884f89beb853834c337c535"}, &(0x7f0000000080)=0x65) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f00000000c0)={r1, @in={{0x2, 0x4e24, @multicast2}}, [0x0, 0x400, 0x100000001, 0x0, 0xd17, 0x6, 0x8000000000000001, 0x9, 0x2, 0x3, 0x1, 0x9, 0x5, 0x8, 0x2]}, &(0x7f00000001c0)=0x100) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000200)=@assoc_value={r1, 0x401}, 0x8) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000240)={r1, 0x5, 0x10}, 0xc) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f0000000280)={r2, @in={{0x2, 0x4e20, @multicast1}}, 0x0, 0x7, 0x1, 0x6, 0x7}, &(0x7f0000000340)=0x98) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000380)={r4, 0x6}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f00000003c0)={0x2, 0xd, 0x7fffffff, 0x8001, r1}, 0x10) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000400)={r1, 0x7}, &(0x7f0000000440)=0x8) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r5, 0x84, 0xf, &(0x7f0000000480)={r4, @in6={{0xa, 0x4e24, 0x1dfa, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xf}}, 0x9, 0x6, 0x1, 0x4ce1, 0x27}, &(0x7f0000000540)=0x98) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x800, 0x70bd28, 0x25dfdbff, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004004}, 0x8000) r7 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$inet_mreqsrc(r7, 0x0, 0x27, &(0x7f0000000680)={@dev, @remote, @local}, &(0x7f00000006c0)=0xc) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000700)={r3, 0x7, 0xfffffffffffffffe, 0xffffffffffff4afe}) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r8, &(0x7f00000008c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000880)={&(0x7f00000007c0)={0x94, r9, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80000001}, @IPVS_CMD_ATTR_DAEMON={0x70, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pim6reg0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xb}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4b}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @empty}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x4040000}, 0x24008001) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000900)={r6, 0x400}, &(0x7f0000000940)=0x8) getsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000980)={@loopback, @dev, @dev}, &(0x7f00000009c0)=0xc) ioctl$sock_SIOCGSKNS(r5, 0x894c, &(0x7f0000000a00)=0x7) getsockname$packet(r8, &(0x7f0000000f80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000fc0)=0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r8, 0x89f2, &(0x7f0000001080)={'syztnl2\x00', &(0x7f0000001000)={'syztnl0\x00', 0x0, 0x4, 0x3, 0x2b, 0x0, 0x10, @private1, @local, 0x700, 0x0, 0x7fffffff, 0x3}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000010c0)={'batadv_slave_0\x00', 0x0}) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000013c0)={0x0, @multicast2, @private}, &(0x7f0000001400)=0xc) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, &(0x7f00000014c0)={'ip6gre0\x00', &(0x7f0000001440)={'ip6tnl0\x00', 0x0, 0x2f, 0x4, 0x6, 0xc, 0x3a, @remote, @private1={0xfc, 0x1, '\x00', 0xb}, 0xe1, 0x1, 0x2, 0x2}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r8, 0x89f8, &(0x7f0000001a00)={'gretap0\x00', &(0x7f0000001940)={'syztnl1\x00', 0x0, 0x0, 0x80, 0x1, 0x0, {{0x23, 0x4, 0x3, 0x1, 0x8c, 0x65, 0x0, 0x8, 0x29, 0x0, @multicast2, @multicast1, {[@lsrr={0x83, 0x27, 0xac, [@dev={0xac, 0x14, 0x14, 0x3f}, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @broadcast, @local]}, @lsrr={0x83, 0x17, 0x4e, [@empty, @remote, @local, @loopback, @multicast1]}, @lsrr={0x83, 0xf, 0x33, [@empty, @multicast1, @broadcast]}, @lsrr={0x83, 0x13, 0xbe, [@rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @rand_addr=0x64010102]}, @end, @rr={0x7, 0x7, 0xb1, [@private=0xa010102]}, @generic={0x88, 0xf, "aff1e4f9ec97f29588ae51b4d2"}]}}}}}) sendmmsg$inet(r0, &(0x7f0000003180)=[{{0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000000a40)="f8d8648a8b26e9c9d508a2084f06982474a6ea2e1b6a2857fd", 0x19}, {&(0x7f0000000a80)="32c9cafb252442b45a0d0d997d2383051ad3b13a4e77cb4b175219c6", 0x1c}, {&(0x7f0000000ac0)="6401a19fdc980992cd37ec8128e7adc7c220787522864f9e9705fd7cc16e67688b93db90545f676b3aabc3ae4d00b60f53444f538d61345f2588a173beff992778682132ddbf839823c61c120ead85540ff775fdda38e3ee828c", 0x5a}, {&(0x7f0000000b40)="80b1ad08c0bf835ca131efb87ef717f6495a6b1fec77adb5b8244919fa558b21a2f730fd97f59e25a57e4a3f2bc9ef7c1ba5606a96314b25b9ea4202e41ec49abef48059958688d592c1a353a5817fd89a1dd3b9fd05ea09cfb69ca0372016dace0cf579bc3f6e075b93bbd011c0d0780d278026df9286eba83eaf33779c9d59e9f19ad0f11bdf848be5e9a6aed41040e31e7ed86d54bac5329b50360990bda8a29d35cc", 0xa4}, {&(0x7f0000000c00)="8c8e22838d05d09ae982cead209a80b90163a3f17678939dffb894c022b1bdffec328d59a4763a316dfb4a5691b2f8f1a5d27817a8bd54d527b210e8ac2140ceda8cd81d20fb26fedd264bf5038af9fafd7f8d5dadb031eb35024476464a66da9b532475075c33b4e5f83bc5b4987420e93bcbcf8d46bdfa92a5801b918657f6513772da5300a5ee6782578da5c633a07a", 0x91}, {&(0x7f0000000cc0)="d7f8b6b0528b99b758ae25af845826fa18bff8626c0906d38d16ab7dddb94c1998f94e732ff87b67da6f4e06290c22042644d756576d63f40d3df3db", 0x3c}, {&(0x7f0000000d00)="a7369ea19aa3ad21c22989fddc53b9d868486120125284feb1c7e66628cff2f26afd6f027a67441a8dbb49a9132b82098a66bdfc4614c6a93168acc9f4b03018e3accd43fbc433e58376e78a99b1d9c72e7c9c625c72085b9c10294ae174921dbc740e9f922f532c67885b7df317ca152c72b6cbed534b36160280d37a1c525823357215ec42ef80aff7a429d59206115a959a325ad2e2ca0696bfc08860eaf2bb7a04d8f5234d60c7598f29c98050a6067b51f40afb49b4d460e1d9e55786979862f47363ed00a9d0f6c7f81160fe7da402f40bc55dd8dfa9aecdacffe86847a887213b9ce21eb60f934d9a081f0fa804", 0xf1}, {&(0x7f0000000e00)="44bd89639a54521c04be4d563bfe7bcf", 0x10}, {&(0x7f0000000e40)="9e618c02dc1980150130d3ff8e1eb5490e8b595bd522953efbdb4c6626bad1460557464d6f3cbb9195460f7eefdb148417d38ac133b2e2e11fa9c186d3d71521bb22eea71ad05044ece9f46d9ebc09", 0x4f}], 0x9, &(0x7f0000001100)=[@ip_ttl={{0x14, 0x0, 0x2, 0x3}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @remote, @remote}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xcd}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r11, @broadcast, @remote}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r12, @multicast2, @rand_addr=0x64010100}}}, @ip_retopts={{0x7c, 0x0, 0x7, {[@noop, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x34, 0x6d, 0x3, 0x7, [{@broadcast, 0x4}, {@remote, 0xb}, {@remote, 0x5}, {@multicast2, 0xfffffffe}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, {@local, 0x8000}]}, @end, @ssrr={0x89, 0x27, 0x14, [@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0xc}, @multicast1, @rand_addr=0x64010102, @empty, @rand_addr=0x64010102, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x81}]}, @generic={0x44, 0x6, "86248fdb"}, @ra={0x94, 0x4, 0x1}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xa}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x401}}], 0x170}}, {{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f0000001280)="d5110f04016473253684aa3b6e04b31603353440d8abb8a5d147669a1dd52b4df7449999b125da058fbd7b67f32233e1c91bcc06ca53d82aa976353f0ae8ed5183c553fba247f1c5878eb22392a9e5e5b49e093144c85853ddb0fa6ef5e53dfad1d2eed4eaf15a883f6086ec9e1206d6fa91a0f4d2c88b9eaf0757382420d20b1fd103547ca454cc", 0x88}, {&(0x7f0000001340)="b989f8af34e77df2c2c264c135d6", 0xe}], 0x2, &(0x7f0000001500)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r13, @dev={0xac, 0x14, 0x14, 0x27}, @remote}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xf4}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r14, @empty, @local}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}], 0xa0}}, {{&(0x7f00000015c0)={0x2, 0x4e23, @remote}, 0x10, &(0x7f00000018c0)=[{&(0x7f0000001600)="8a24a06811e7608e7ca06ee73d", 0xd}, {&(0x7f0000001640)="b05b1d921eff08a785ae04cf98895c14910091902fd17ac1cc1461f0b0a7f988ab7517b007afecc4dc2f", 0x2a}, {&(0x7f0000001680)="11687c0bf777c994e58fb64d8c3fd63bd558984af38bed4e2b4bec8dce19b6d2bf7c882af50c26552701636e93fa0419619b4ad2f65e0c8bdff08743c5fd35393e92eb001644d4eed8094f84ce27181585e532e9421b68f62da53e15def0d7092ac599e50650d6c1bebdf2137b4470f39f93adf69393356dc2f657ffb77b6f5a5e59cfb7ec330e2549ac8733f893025336d082c54ad54c8ffa7029f8a500998b", 0xa0}, {&(0x7f0000001740)="25023c888ed1a431fbb5bb472d5d63e9de08d93adaee330976bfb200ee6650519da7f40f1d7a97656fd9a232a22e80cb54f0bfbd3e3d3557d31639200d173f45e72bc311b552e1d2c251b4ce2371b4068bc63f9c781c22fe8720100438a16c80165d98aa5aed95a163e56115c7f964462c05666dafd1e060893c612ac7955e98f9d1e029ff5402457e2dc3eb7e5d5e", 0x8f}, {&(0x7f0000001800)="2d30472832203472e876a96e2dd099e0afe7053a13d8053687c09afb7369ceacc7bfbc9cb8124b6f2ac525584435d498eb52933772051c9b880717edeb832bbc8033b06489faee1643cce2b2c1a962b41d0ceb76fb61d979b7a6660096dc50b4c079aa82022eb84362eaa7282ef3cb9d5410aff449f25acbc9e5718b3de29a83ad32", 0x82}], 0x5, &(0x7f0000001a40)=[@ip_ttl={{0x14, 0x0, 0x2, 0x13c0}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r15, @private=0xa010100, @local}}}, @ip_retopts={{0x2c, 0x0, 0x7, {[@end, @timestamp_addr={0x44, 0x14, 0xce, 0x1, 0x1, [{@loopback, 0x4}, {@remote, 0xdedc}]}, @generic={0x44, 0x6, "391a9e55"}]}}}], 0x80}}, {{&(0x7f0000001ac0)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000001bc0)=[{&(0x7f0000001b00)="51123e3e93d6ee2323f918bb85bf257cab2b6b8ab82f8aeee28a2ef388abe8097ab5f7916086", 0x26}, {&(0x7f0000001b40)="a659122ec794d9c2219714a5ef7f05708e5bdf2a8bacb4896733733a1730b5a3c3a639b62719500adabed9a95121cd29e1fdb66bbd8b7924c07120459a9b3b8a230d37de5ceba52d9363d568eafc213649a484c7b3252e85acdc4100b50cfbf915e9600989858e8024a22d9622d0b825c00598a6682afe8dd2fb6a775ec3cc", 0x7f}], 0x2, &(0x7f0000001c00)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_ttl={{0x14, 0x0, 0x2, 0x81}}], 0x30}}, {{&(0x7f0000001c40)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f00000030c0)=[{&(0x7f0000001c80)="a580d0b3c22fb021399882b05a50fa5a52bac0fbba4fe0691d0ad2799e7f8b2efe7e629a9054f8", 0x27}, {&(0x7f0000001cc0)="aa7cf303819776a01a35", 0xa}, {&(0x7f0000001d00)="5cf0215e1e83efcf12b4bce4c4920692e3620c276f436c0a087947796105939c69b7a4c4dd1a199646f183d03c989d17ba4747ba12a30ac251a082905b2feac1c9017144337858a97b04be3836b50b6c84556b95fb22fa70d728359aa9", 0x5d}, {&(0x7f0000001d80)="d1622e14c0ded6a63639d0c11c14906ec4870437fbf76df7cb48caeff6f45dc5ae3d87a7cc68961fb23fdabf2825b472f23e07358ee2add4659e198aba070900c508b28d8a0818252bf297ab2b14ec26ab036aece88d0891cd107c66c335954706073fb8e3f1bcd8a9d6694c63d7c300b916f9919f0f65a93a8d40fec143eb8f365ab777a6b02d864bb5194e36113387c34078bc9a722d67a58b2cfd5f2f3015b90fa0e6a7bb19da30885b9906cc24ade60b41d531a480ce2a8a23493fdcc8ed982ea0615bce15b8adda897e9d84ef7df6d7a8485552044b31f6ca6ac2", 0xdd}, {&(0x7f0000001e80)="36eec8d9e41a84dafb6b3fd75704cb6138a51ec77bc02822bd379a5d742b445dcab77cbca83a618e46c54b5893c218929cf6deda3f2b688fd6c128b34b4a08181aac917f", 0x44}, {&(0x7f0000001f00)="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", 0x1000}, {&(0x7f0000002f00)="da706537e5dc2ccc67adc4307eff77f6874d37cf62516ca38ac37c758a6b6fde319bfa360dd0837255948866785285da72eb28ee443b928ff41aa771c0c28ef231a9d4e916d29e543bef", 0x4a}, {&(0x7f0000002f80)="d6de0d87e05b3137c07d6d9d86d1a630b41c3172ee4bc296c3ddd19a59c3c4ee7bf7b4f4b09d7f88ac755fc5628b61bbe8a4e065793fdae8e14d74d3010c9225d4b67c7473eac85922d620ef16254ba255bb11cd89859c761b187d51c741b2d2fd", 0x61}, {&(0x7f0000003000)="3aad7d77c0833f99c3b75bacf18d85653c47d57b7c746d7270709a0b9e8c63d35d07b4f7723da1e510bfb1ae0b755d486acf3c", 0x33}, {&(0x7f0000003040)="357e86b02cf5b1aeed4ab2b22dd03f6a227fb24ca8085e9c4ebe4445a7726de86c360aaa3d3c5c8451a390fb491c698e4a210ba537b54d2bf523ccffb0ee896127cfb06b72047695cd7beba7868a", 0x4e}], 0xa}}], 0x5, 0x804) r16 = socket$inet(0x2, 0xd, 0x6) read(r16, &(0x7f00000032c0)=""/111, 0x6f) 3m9.72417174s ago: executing program 0 (id=3275): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r2) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) (async) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async) accept$alg(r5, 0x0, 0x0) (async) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) (async) sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003900)={0x14, 0x16, 0xa01, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) (async) r7 = socket$netlink(0x10, 0x3, 0x4) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a04000800ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) (async) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000080)) (async) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x48, 0x10, 0x609, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x48}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) 3m9.691337433s ago: executing program 2 (id=3276): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@ipv4_newroute={0x38, 0x18, 0x1, 0xfffffffc, 0x0, {0x2, 0x10, 0x0, 0x0, 0x0, 0x4, 0x0, 0x9}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, @LWTUNNEL_IP_OPT_ERSPAN_HWID={0x5, 0x4, 0x80}}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8040}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="f80000003e000701feffffff00000000017c0000040042800c00018006000600800a0000d1000280cb0014"], 0xf8}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r0) sendmsg$DEVLINK_CMD_PORT_SET(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x12c, r2, 0x2a211c6923552139, 0x70bd2d, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x1}}]}, 0x12c}, 0x1, 0x0, 0x0, 0x1}, 0x4000004) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r0) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, r3, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_FLOW={0x6}, @GTPA_NET_NS_FD={0x8}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_TID={0xc}, @GTPA_FAMILY={0x5, 0xd, 0x9}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@ipv4_newroute={0x38, 0x18, 0x1, 0xfffffffc, 0x0, {0x2, 0x10, 0x0, 0x0, 0x0, 0x4, 0x0, 0x9}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, @LWTUNNEL_IP_OPT_ERSPAN_HWID={0x5, 0x4, 0x80}}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8040}, 0x0) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="f80000003e000701feffffff00000000017c0000040042800c00018006000600800a0000d1000280cb0014"], 0xf8}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r0) (async) sendmsg$DEVLINK_CMD_PORT_SET(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x12c, r2, 0x2a211c6923552139, 0x70bd2d, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x1}}]}, 0x12c}, 0x1, 0x0, 0x0, 0x1}, 0x4000004) (async) syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r0) (async) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, r3, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_FLOW={0x6}, @GTPA_NET_NS_FD={0x8}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_TID={0xc}, @GTPA_FAMILY={0x5, 0xd, 0x9}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) 3m9.506422186s ago: executing program 1 (id=3277): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x12, 0x12, r3, 0x0) (async) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r6, 0x1, 0x0, 0x0, {{}, {0x0, 0x410c}, {0x4c, 0x14, {0xfffffff0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) (async) sendmsg$TIPC_CMD_SHOW_PORTS(r3, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f00000002c0)={0x1c, r6, 0x20, 0x70bd27, 0xc, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004004}, 0x4004090) (async) setsockopt$rose(r4, 0x104, 0x4, &(0x7f0000000000)=0xffff7ffd, 0x4) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r2) bpf$ITER_CREATE(0x21, 0x0, 0x0) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000002b80), r8) (async) r10 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f0000000200)=[@in={0x2, 0x4e24, @empty}], 0x10) listen(r10, 0x100) (async) sendmsg$inet_sctp(r10, &(0x7f0000001640)={&(0x7f0000000000)=@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000040)=')', 0x1}], 0x1, &(0x7f00000015c0)=[@dstaddrv4={0x18, 0x84, 0x7, @dev={0xac, 0x14, 0x14, 0x2a}}], 0x18, 0x8000}, 0x20000000) sendmsg$TIPC_NL_KEY_SET(r8, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000002bc0)=ANY=[@ANYBLOB="cc000000", @ANYRES16=r9, @ANYBLOB="01ad00000000fbdbdf25170000000c00058004000280040002805400068004000300080006002000000008000600020000003c00040067636d28616573290000000000000000000000000000000000000000000000001400000050e858cb"], 0xcc}, 0x1, 0x0, 0x0, 0x20000040}, 0x90) (async) sendmsg$IEEE802154_START_REQ(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000000d00000005000700000000000600080000000000050017000000000006000a00000000001b92b9a1736fdf82e91afaca8381544f3c4ad56e71749e9e04c7696b453100824a3c6e482aa529e27a6bc30c0abe3618ca274fade9da304ef80a1e87e8f42801a367c9167a65480125d36483d2dbbc0e074dffb794f8ef495c718417b7d54a4873b7429c9c63fc93c8784eb808b594c050682e8cc9a467d5bd752b36d20a5ba75f01c1daf362c38a296124f2dfaaa3c0e90b3a714a"], 0x34}}, 0x0) (async) sendmsg$IEEE802154_LLSEC_DEL_DEV(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r7, 0x20, 0x70b926, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x8080}, 0x8000) sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}}, 0x24004044) (async) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r12 = socket(0x2, 0x80000, 0x8017d) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r12, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r12, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r11, 0x84, 0x76, &(0x7f0000000140)={r13, 0x2}, 0x8) 3m9.406975457s ago: executing program 0 (id=3278): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="3c0000001000010400000000000000c104000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008003a"], 0x3c}}, 0x0) (async) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/144, 0x90}], 0x1) 3m9.336626445s ago: executing program 2 (id=3279): r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='mem_connect\x00', r2}, 0x18) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb01000400000000000000340000003400000002000000000000000000000d00000000000000000000000105000000080000000000000000001203000000000100000002000000000000000000"], 0x0, 0x4e}, 0x20) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='westwood\x00', 0x9) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000300)=""/82, 0x32c000, 0x1000}, 0x20) r4 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r4, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x2, 0x0, 0x0, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in=@multicast2, {0x0, 0x0, 0x0, 0x9, 0xffffffff00000001, 0x0, 0x80000001, 0x543}, {0x4, 0x7fffffffffffffff, 0x0, 0x1}, {}, 0x70bd2c, 0x3500, 0xa, 0x0, 0x0, 0x50}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x60}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x880}, 0x2000) 3m5.681374971s ago: executing program 1 (id=3280): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2d, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x104, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac0a}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8cd1"]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) socket$can_raw(0x1d, 0x3, 0x1) 0s ago: executing program 32 (id=3129): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000b80)=@delchain={0x68, 0x65, 0x20, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x10, 0x2}, {0x0, 0xb}, {0xd, 0xb}}, [@filter_kind_options=@f_flow={{0x9}, {0x38, 0x2, [@TCA_FLOW_XOR={0x8, 0x7, 0xffffffff}, @TCA_FLOW_EMATCHES={0x4}, @TCA_FLOW_XOR={0x8, 0x7, 0xffffff7b}, @TCA_FLOW_MODE={0x8}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x5}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x7f}, @TCA_FLOW_RSHIFT={0x8, 0x4, 0x5}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x80}, 0x20000080) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f, 0xa1}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r3, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000300)=r4}, 0x20) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x5, 0x0, 0x0, 0x80000008}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000680)={r5, &(0x7f0000000400), &(0x7f00000003c0)=@udp, 0x1}, 0x20) close(r2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000800000000000000000000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000002b00)=ANY=[@ANYBLOB="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"/3910], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r8, 0xe0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000020c0)={r4, 0xe0, &(0x7f0000001fc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0), ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, &(0x7f0000000940)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000e80)=[0x0, 0x0, 0x0], 0x0, 0x1c, &(0x7f0000000ec0)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000f00), &(0x7f0000000f40), 0x8, 0x4e, 0x8, 0x8, &(0x7f0000000f80)}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r9}, 0x4) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000080)={@map=r2, 0xffffffffffffffff, 0x5, 0x20, 0x0, @void, @void, @void, @value=r9}, 0x20) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000080)={0x2, &(0x7f00000001c0)=[{0x20, 0x0, 0x3f, 0xfffff004}, {0x16, 0x0, 0x6, 0xfffffffe}]}) r10 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r10, &(0x7f0000000040)={0x18, 0x0, {0xfffe, @local, 'gre0\x00'}}, 0x1e) r11 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r11, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve0\x00'}}, 0x1e) r12 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r12, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve0\x00'}}, 0x1e) close(r11) kernel console output (not intermixed with test programs): (slave veth0_to_bond): Enslaving as an active interface with an up link [ 195.041586][T10144] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1151'. [ 195.144054][T10139] netlink: 'syz.3.1148': attribute type 21 has an invalid length. [ 195.151504][T10149] tipc: Enabled bearer , priority 0 [ 195.158720][ T51] block nbd1: Receive control failed (result -32) [ 195.167651][T10149] syzkaller0: entered promiscuous mode [ 195.173229][T10149] syzkaller0: entered allmulticast mode [ 195.203266][T10147] tipc: Resetting bearer [ 195.261329][T10147] tipc: Disabling bearer [ 195.290688][T10139] netlink: 'syz.3.1148': attribute type 5 has an invalid length. [ 195.439315][ T55] block nbd0: Possible stuck request ffff8880254871c0: control (read@0,1024B). Runtime 60 seconds [ 195.450294][ T55] block nbd0: Possible stuck request ffff888025487380: control (read@1024,1024B). Runtime 60 seconds [ 195.461399][ T55] block nbd0: Possible stuck request ffff888025487540: control (read@2048,1024B). Runtime 60 seconds [ 195.472566][ T55] block nbd0: Possible stuck request ffff888025487700: control (read@3072,1024B). Runtime 60 seconds [ 195.742487][T10176] netlink: 'syz.3.1161': attribute type 1 has an invalid length. [ 195.750706][T10176] netlink: 'syz.3.1161': attribute type 1 has an invalid length. [ 196.221128][T10196] netlink: 'syz.0.1166': attribute type 1 has an invalid length. [ 196.237570][ T5885] Bluetooth: hci1: command 0x0406 tx timeout [ 196.243692][ T5885] Bluetooth: hci3: command 0x0401 tx timeout [ 196.244950][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 196.621405][T10218] netlink: 'syz.0.1175': attribute type 11 has an invalid length. [ 196.829551][T10229] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 197.173879][T10245] netlink: 'syz.2.1182': attribute type 2 has an invalid length. [ 198.339272][T10298] __nla_validate_parse: 9 callbacks suppressed [ 198.339289][T10298] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1197'. [ 198.498599][T10303] validate_nla: 1 callbacks suppressed [ 198.498616][T10303] netlink: 'syz.3.1199': attribute type 1 has an invalid length. [ 198.704014][T10315] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1199'. [ 198.732194][T10303] bond4: (slave gretap0): making interface the new active one [ 198.740648][T10303] bond4: (slave gretap0): Enslaving as an active interface with an up link [ 198.777070][T10329] netlink: 'syz.1.1204': attribute type 10 has an invalid length. [ 198.907180][T10313] 8021q: adding VLAN 0 to HW filter on device bond5 [ 198.938083][T10313] bond4: (slave bond5): Enslaving as a backup interface with an up link [ 198.962781][T10315] 8021q: adding VLAN 0 to HW filter on device bond4 [ 199.021758][T10326] bond0: left promiscuous mode [ 199.034633][T10326] bond_slave_0: left promiscuous mode [ 199.043380][T10326] bond_slave_1: left promiscuous mode [ 199.053053][T10326] mac80211_hwsim hwsim3 wlan1: left promiscuous mode [ 199.073155][T10326] bridge_slave_0: left promiscuous mode [ 199.091200][T10326] veth0_to_team: left promiscuous mode [ 199.127361][T10326] veth3: left promiscuous mode [ 199.142993][T10326] bond2: left promiscuous mode [ 199.152299][T10326] bond3: left promiscuous mode [ 199.338142][T10347] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1209'. [ 199.352735][T10349] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1209'. [ 199.636522][T10359] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1214'. [ 199.902236][T10370] netlink: 'syz.1.1216': attribute type 21 has an invalid length. [ 199.939592][T10370] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1216'. [ 200.002246][T10368] netlink: 576 bytes leftover after parsing attributes in process `syz.3.1217'. [ 200.011518][T10370] netlink: 'syz.1.1216': attribute type 4 has an invalid length. [ 200.045276][T10370] netlink: 'syz.1.1216': attribute type 5 has an invalid length. [ 200.093633][T10382] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 200.105979][T10383] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1220'. [ 200.123629][T10370] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1216'. [ 200.136755][T10383] ieee802154 phy0 wpan0: encryption failed: -22 [ 200.144043][T10383] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1220'. [ 200.591434][T10402] tipc: Started in network mode [ 200.633517][T10402] tipc: Node identity 628a59a5fafb, cluster identity 4711 [ 200.699640][T10402] tipc: Enabled bearer , priority 0 [ 200.726428][T10402] syzkaller0: entered promiscuous mode [ 200.746409][T10402] syzkaller0: entered allmulticast mode [ 200.783934][T10402] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 200.859995][T10402] tipc: Resetting bearer [ 200.876758][T10401] tipc: Resetting bearer [ 200.899686][T10401] tipc: Disabling bearer [ 201.431601][T10454] netlink: 'syz.2.1241': attribute type 30 has an invalid length. [ 201.443276][T10454] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 201.463319][T10454] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 202.254867][T10494] netlink: 'syz.2.1252': attribute type 1 has an invalid length. [ 202.998883][T10534] netlink: 'syz.3.1261': attribute type 7 has an invalid length. [ 203.015220][T10534] netlink: 'syz.3.1261': attribute type 8 has an invalid length. [ 203.051671][T10535] netlink: 'syz.0.1262': attribute type 1 has an invalid length. [ 203.736336][T10568] __nla_validate_parse: 78 callbacks suppressed [ 203.736353][T10568] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1272'. [ 203.792354][T10568] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1272'. [ 203.822839][T10569] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 203.876934][T10568] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1272'. [ 203.889201][T10568] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1272'. [ 204.018084][T10583] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1278'. [ 204.368510][T10603] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1285'. [ 204.370275][T10600] team0: Device gtp0 is of different type [ 204.415670][T10596] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1285'. [ 204.449027][T10596] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1285'. [ 204.490771][T10607] v: renamed from dummy0 (while UP) [ 204.600609][T10607] bridge0: port 3(v) entered disabled state [ 204.669726][T10614] tipc: Enabled bearer , priority 0 [ 204.704045][T10614] syzkaller0: entered promiscuous mode [ 204.716342][T10619] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1288'. [ 204.746538][T10614] syzkaller0: entered allmulticast mode [ 204.849970][T10614] tipc: Resetting bearer [ 204.925778][T10614] tipc: Disabling bearer [ 205.447001][T10644] validate_nla: 64 callbacks suppressed [ 205.447019][T10644] netlink: 'syz.3.1297': attribute type 29 has an invalid length. [ 205.466616][T10644] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1297'. [ 205.566276][T10646] netlink: 'syz.3.1298': attribute type 7 has an invalid length. [ 205.829345][T10652] bond4: entered promiscuous mode [ 205.834512][T10652] bond4: entered allmulticast mode [ 205.840246][T10652] 8021q: adding VLAN 0 to HW filter on device bond4 [ 206.065840][ T78] veth0_to_bond: left promiscuous mode [ 206.601936][T10710] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 206.920000][T10726] netlink: 'syz.3.1319': attribute type 5 has an invalid length. [ 207.068955][T10725] netlink: 'syz.1.1317': attribute type 9 has an invalid length. [ 207.733525][T10765] dvmrp1: entered allmulticast mode [ 207.736454][T10764] netlink: 'syz.4.1334': attribute type 1 has an invalid length. [ 207.758981][T10764] netlink: 'syz.4.1334': attribute type 1 has an invalid length. [ 207.773586][T10764] netlink: 'syz.4.1334': attribute type 2 has an invalid length. [ 207.911460][T10774] x_tables: ip_tables: udp match: only valid for protocol 17 [ 208.061731][T10783] can: request_module (can-proto-0) failed. [ 208.108873][T10781] can: request_module (can-proto-0) failed. [ 208.293916][T10797] pimreg: entered allmulticast mode [ 209.158333][T10840] __nla_validate_parse: 16 callbacks suppressed [ 209.158350][T10840] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1356'. [ 209.168930][T10844] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1357'. [ 209.419472][T10860] netlink: 'syz.4.1362': attribute type 1 has an invalid length. [ 209.535924][T10863] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 209.751104][T10876] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1367'. [ 209.860113][T10879] vlan2: entered allmulticast mode [ 209.925052][T10879] veth1: entered allmulticast mode [ 210.063604][T10889] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1373'. [ 210.241160][T10898] tipc: Enabled bearer , priority 0 [ 210.264563][T10891] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1374'. [ 210.339971][T10898] tipc: Disabling bearer [ 210.449721][T10909] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1381'. [ 210.553397][T10918] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1381'. [ 210.582676][T10918] 0ªî{X¹¦: entered promiscuous mode [ 210.619088][T10919] tunl0: entered promiscuous mode [ 210.678376][T10919] netlink: 'syz.4.1383': attribute type 3 has an invalid length. [ 210.719698][T10919] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1383'. [ 210.764402][T10926] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1385'. [ 210.782454][T10926] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1385'. [ 210.807400][ T7375] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 210.847742][T10922] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 210.853895][ T7375] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 210.911206][T10926] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 210.953694][ T1110] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 210.973119][ T1110] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 211.259800][T10959] tipc: Enabled bearer , priority 0 [ 211.277651][T10959] syzkaller0: entered promiscuous mode [ 211.283159][T10959] syzkaller0: entered allmulticast mode [ 211.332054][T10959] tipc: Resetting bearer [ 211.350074][T10958] tipc: Resetting bearer [ 211.405344][T10958] tipc: Disabling bearer [ 211.423360][T10966] netlink: 'syz.2.1397': attribute type 1 has an invalid length. [ 211.620231][T10980] openvswitch: netlink: Flow key attr not present in new flow. [ 211.699103][T10983] nbd: must specify at least one socket [ 211.891397][T10990] geneve2: entered promiscuous mode [ 211.897485][T10990] geneve2: entered allmulticast mode [ 212.203215][T11014] netlink: 'syz.3.1411': attribute type 1 has an invalid length. [ 212.325874][T11014] bond6: entered promiscuous mode [ 212.351705][T11014] 8021q: adding VLAN 0 to HW filter on device bond6 [ 212.558657][T11035] IPVS: set_ctl: invalid protocol: 43 0.0.0.0:20004 [ 212.682929][T11042] tipc: Enabled bearer , priority 10 [ 212.862090][T11050] openvswitch: netlink: Flow actions attr not present in new flow. [ 213.284119][T11078] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode [ 213.314551][T11078] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode [ 213.646400][T11098] netlink: 'syz.0.1435': attribute type 10 has an invalid length. [ 213.682214][T11100] netlink: 'syz.1.1436': attribute type 29 has an invalid length. [ 213.809111][T11106] Bluetooth: MGMT ver 1.23 [ 213.815844][ T9] tipc: Node number set to 2557565349 [ 214.166156][T11123] __nla_validate_parse: 24 callbacks suppressed [ 214.166173][T11123] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1447'. [ 214.438996][T11135] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1452'. [ 214.707459][T11148] netlink: 'syz.4.1456': attribute type 8 has an invalid length. [ 214.912296][T11159] nbd: must specify at least one socket [ 214.938245][T11162] nbd: must specify at least one socket [ 215.493682][T11195] syz.0.1470 uses old SIOCAX25GETINFO [ 215.620067][T11200] sctp: [Deprecated]: syz.4.1471 (pid 11200) Use of struct sctp_assoc_value in delayed_ack socket option. [ 215.620067][T11200] Use struct sctp_sack_info instead [ 215.641952][T11200] IPVS: set_ctl: invalid protocol: 136 0.0.0.0:20002 [ 215.915441][ T5877] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 215.922955][ T5877] Bluetooth: hci2: command 0x0406 tx timeout [ 215.952151][T11214] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 215.962119][T11214] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 216.026845][T11219] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1474'. [ 216.181426][T11225] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1477'. [ 216.354286][T11232] netlink: 'syz.3.1479': attribute type 13 has an invalid length. [ 216.430683][T11236] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 217.562095][T11290] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 218.321115][T11339] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 218.363887][T11337] netlink: 'syz.3.1506': attribute type 4 has an invalid length. [ 218.491397][T11345] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1509'. [ 218.535813][T11345] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1509'. [ 218.556636][T11350] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1511'. [ 218.576207][T11350] openvswitch: netlink: Tunnel attr 3 has unexpected len 4 expected 1 [ 218.636563][T11352] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1512'. [ 218.640920][T11354] netlink: 'syz.1.1513': attribute type 2 has an invalid length. [ 218.682978][T11355] netlink: 'syz.1.1513': attribute type 2 has an invalid length. [ 218.893482][T11368] netdevsim netdevsim2: Direct firmware load for ..€ failed with error -2 [ 218.904646][T11370] netlink: 'syz.1.1519': attribute type 2 has an invalid length. [ 218.943606][T11368] netdevsim netdevsim2: Falling back to sysfs fallback for: ..€ [ 219.044463][T11376] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1520'. [ 219.066526][T11378] netlink: 'syz.1.1521': attribute type 1 has an invalid length. [ 219.169691][T11378] bond0: entered promiscuous mode [ 219.224233][T11378] 8021q: adding VLAN 0 to HW filter on device bond0 [ 219.345655][T11386] 8021q: adding VLAN 0 to HW filter on device bond4 [ 219.354645][T11386] bond0: (slave bond4): making interface the new active one [ 219.365801][T11386] bond4: entered promiscuous mode [ 219.377215][T11386] bond0: (slave bond4): Enslaving as an active interface with an up link [ 219.476434][T11393] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1525'. [ 219.591179][T11393] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1525'. [ 219.596323][T11396] netlink: 'syz.1.1526': attribute type 2 has an invalid length. [ 219.637062][T11393] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1525'. [ 220.293489][T11428] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 221.130088][T11476] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1545'. [ 221.156823][T11476] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1545'. [ 221.180168][T11478] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1544'. [ 221.539585][T11500] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1551'. [ 221.618047][ T5877] Bluetooth: hci4: link tx timeout [ 221.632265][ T5877] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 221.635914][T11512] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 222.335809][T11544] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 222.563442][T11553] 8021q: adding VLAN 0 to HW filter on device bond0 [ 222.575341][T11553] bond0: (slave ip6tnl0): The slave device specified does not support setting the MAC address [ 222.610393][T11553] bond0: (slave ip6tnl0): Error -95 calling set_mac_address [ 222.642291][T11563] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1568'. [ 222.678590][T11562] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1568'. [ 222.688517][T11562] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1568'. [ 222.818436][ T1110] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x80 [ 222.937152][T11588] netlink: 'syz.3.1572': attribute type 8 has an invalid length. [ 222.970231][T11588] tc_dump_action: action bad kind [ 223.678763][ T5871] Bluetooth: hci4: command 0x0406 tx timeout [ 224.376106][T11669] netlink: 'syz.2.1595': attribute type 23 has an invalid length. [ 224.520839][T11669] netlink: 'syz.2.1595': attribute type 23 has an invalid length. [ 224.572037][T11669] netlink: 'syz.2.1595': attribute type 23 has an invalid length. [ 224.607252][T11678] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 224.639772][T11676] netlink: 'syz.1.1598': attribute type 2 has an invalid length. [ 224.654505][T11676] __nla_validate_parse: 57 callbacks suppressed [ 224.654523][T11676] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1598'. [ 224.674456][T11669] netlink: 'syz.2.1595': attribute type 23 has an invalid length. [ 224.725511][T11675] netlink: 'syz.0.1599': attribute type 1 has an invalid length. [ 224.729827][T11669] netlink: 'syz.2.1595': attribute type 23 has an invalid length. [ 224.778725][T11669] netlink: 'syz.2.1595': attribute type 23 has an invalid length. [ 224.930377][T11669] netlink: 'syz.2.1595': attribute type 23 has an invalid length. [ 225.484401][T11719] C: renamed from team_slave_0 (while UP) [ 225.495917][T11719] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 225.516042][ T55] block nbd0: Possible stuck request ffff8880254871c0: control (read@0,1024B). Runtime 90 seconds [ 225.527143][ T55] block nbd0: Possible stuck request ffff888025487380: control (read@1024,1024B). Runtime 90 seconds [ 225.538573][ T55] block nbd0: Possible stuck request ffff888025487540: control (read@2048,1024B). Runtime 90 seconds [ 225.549879][ T55] block nbd0: Possible stuck request ffff888025487700: control (read@3072,1024B). Runtime 90 seconds [ 225.591199][T11723] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 225.601322][T11723] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 225.640603][T11727] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1615'. [ 225.692852][T11727] bond6: (slave gretap1): making interface the new active one [ 225.707913][T11727] bond6: (slave gretap1): Enslaving as an active interface with an up link [ 225.839853][T11739] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1619'. [ 226.232360][T11748] atm:do_vcc_ioctl: ATM_SETSC is obsolete; used by syz.1.1621:11748 [ 226.713803][T11768] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1628'. [ 226.732260][T11768] wlan1: mtu less than device minimum [ 226.801252][T11775] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 226.820356][T11775] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 226.844309][T11775] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 226.915952][T11781] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1631'. [ 227.349390][T11802] macsec0: entered promiscuous mode [ 227.363631][T11802] macsec0: entered allmulticast mode [ 227.603173][T11813] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1640'. [ 228.007183][T11837] validate_nla: 7 callbacks suppressed [ 228.007201][T11837] netlink: 'syz.3.1647': attribute type 5 has an invalid length. [ 228.056769][T11842] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1649'. [ 228.196892][T11850] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1652'. [ 228.315459][T11858] netlink: 'syz.3.1654': attribute type 1 has an invalid length. [ 228.428389][T11863] netlink: 232 bytes leftover after parsing attributes in process `syz.1.1656'. [ 228.523967][T11858] 8021q: adding VLAN 0 to HW filter on device bond7 [ 228.621375][T11878] netlink: 'syz.4.1662': attribute type 6 has an invalid length. [ 228.882777][T11896] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1667'. [ 229.373718][T11925] openvswitch: netlink: Key 9 has unexpected len 0 expected 4 [ 229.508097][T11931] erspan0: entered promiscuous mode [ 229.539829][T11931] erspan0: entered allmulticast mode [ 229.663348][T11925] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1680'. [ 229.829578][T11946] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1686'. [ 229.836504][T11948] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1687'. [ 230.056380][T11956] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1688'. [ 230.066376][T11956] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1688'. [ 230.208497][T11963] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1691'. [ 230.271518][T11966] netlink: 'syz.0.1692': attribute type 21 has an invalid length. [ 230.300199][T11966] netlink: 'syz.0.1692': attribute type 22 has an invalid length. [ 230.334069][T11966] netlink: 'syz.0.1692': attribute type 23 has an invalid length. [ 230.348553][T11966] netlink: 'syz.0.1692': attribute type 25 has an invalid length. [ 230.357217][T11966] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1692'. [ 230.629987][T11983] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1698'. [ 230.712089][T11987] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 231.003695][T12010] Bluetooth: MGMT ver 1.23 [ 231.089817][T12020] tipc: Enabling of bearer rejected, failed to enable media [ 231.271428][T12034] netlink: 'syz.4.1713': attribute type 1 has an invalid length. [ 231.310838][T12036] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1712'. [ 231.474035][T12046] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1716'. [ 231.478733][T12034] 8021q: adding VLAN 0 to HW filter on device bond5 [ 231.512834][T12049] vlan2: entered promiscuous mode [ 231.542728][T12049] bond5: entered promiscuous mode [ 231.549343][T12049] vlan2: entered allmulticast mode [ 231.555084][T12049] bond5: entered allmulticast mode [ 231.667329][T12034] bond5: (slave gretap1): making interface the new active one [ 231.720778][T12034] gretap1: entered promiscuous mode [ 231.737400][T12034] gretap1: entered allmulticast mode [ 231.778555][T12034] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 231.813686][T12054] v: left allmulticast mode [ 231.831037][T12054] bridge0: port 3(v) entered disabled state [ 231.886425][T12054] bridge_slave_0: left allmulticast mode [ 231.897924][T12054] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.250415][T12092] netlink: 'syz.0.1728': attribute type 30 has an invalid length. [ 232.364927][T12089] bond0: (slave syz_tun): Releasing backup interface [ 232.395668][T12089] dummy0: left allmulticast mode [ 232.405885][T12089] bridge0: port 3(dummy0) entered disabled state [ 232.429406][T12089] bridge_slave_0: left allmulticast mode [ 232.435631][T12089] bridge_slave_0: left promiscuous mode [ 232.441577][T12089] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.458192][T12089] bridge_slave_1: left allmulticast mode [ 232.464599][T12089] bridge_slave_1: left promiscuous mode [ 232.472170][T12089] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.503094][T12089] bond4: (slave veth0_to_bond): Releasing active interface [ 232.515728][T12089] bond4: (slave veth0_to_bond): the permanent HWaddr of slave - aa:aa:aa:aa:aa:1d - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 232.550947][T12089] bond0: (slave bond_slave_0): Releasing backup interface [ 232.569817][T12089] bond0: (slave bond_slave_1): Releasing backup interface [ 232.606265][T12089] team0: Port device team_slave_0 removed [ 232.629407][T12089] team0: Port device team_slave_1 removed [ 232.638390][T12089] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 232.646559][T12089] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 232.657116][T12089] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 232.665227][T12089] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 232.689883][T12089] A link change request failed with some changes committed already. Interface bond3 may have been left with an inconsistent configuration, please check. [ 233.085339][T12128] netlink: 'syz.3.1736': attribute type 1 has an invalid length. [ 233.117804][T12128] netlink: 'syz.3.1736': attribute type 1 has an invalid length. [ 233.134848][T12128] netlink: 'syz.3.1736': attribute type 2 has an invalid length. [ 233.216751][T12131] openvswitch: netlink: Flow actions attr not present in new flow. [ 233.244226][T12131] openvswitch: netlink: Flow actions attr not present in new flow. [ 233.267737][T12131] openvswitch: netlink: Flow actions attr not present in new flow. [ 233.293381][T12131] openvswitch: netlink: Flow actions attr not present in new flow. [ 233.315460][T12131] openvswitch: netlink: Flow actions attr not present in new flow. [ 233.433496][T12141] lo: entered allmulticast mode [ 233.510543][T12131] openvswitch: netlink: Flow actions attr not present in new flow. [ 233.537836][T12140] lo: left allmulticast mode [ 233.547284][T12131] openvswitch: netlink: Flow actions attr not present in new flow. [ 233.548296][T12146] tipc: Enabled bearer , priority 0 [ 233.556119][T12131] openvswitch: netlink: Flow actions attr not present in new flow. [ 233.575514][T12131] openvswitch: netlink: Flow actions attr not present in new flow. [ 233.584636][T12147] erspan0: left promiscuous mode [ 233.599968][T12147] v: left promiscuous mode [ 233.634267][T12147] bridge_slave_0: left promiscuous mode [ 233.674201][T12147] macsec0: left promiscuous mode [ 233.699577][T12147] mac80211_hwsim hwsim11 syzkaller0: left promiscuous mode [ 233.719730][T12147] bond0: left promiscuous mode [ 233.725450][T12147] bond4: left promiscuous mode [ 234.299139][T12176] netlink: 'syz.1.1751': attribute type 10 has an invalid length. [ 234.371637][T12176] `: (slave wlan1): Error -22 calling dev_set_mtu [ 234.568094][ T9] tipc: Node number set to 4222441006 [ 234.975708][T12216] __nla_validate_parse: 82 callbacks suppressed [ 234.975725][T12216] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1764'. [ 235.131549][T12228] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1767'. [ 235.169385][T12223] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1768'. [ 235.480617][T12238] 8021q: VLANs not supported on ip_vti0 [ 235.543782][T12247] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1773'. [ 235.622607][T12253] netlink: 'syz.1.1776': attribute type 1 has an invalid length. [ 235.800105][T12253] 8021q: adding VLAN 0 to HW filter on device bond5 [ 235.867179][T12259] bond5: (slave gretap0): making interface the new active one [ 235.889419][T12259] bond5: (slave gretap0): Enslaving as an active interface with an up link [ 236.173321][T12286] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1786'. [ 236.386318][T12308] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1792'. [ 236.763856][T12330] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1798'. [ 236.828251][T12330] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1798'. [ 237.349411][T12349] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 237.512788][T12364] tipc: Enabling of bearer rejected, already enabled [ 237.532664][T12371] tipc: Enabling of bearer rejected, already enabled [ 237.575646][T12372] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 237.584359][T12372] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 237.659836][T12364] syzkaller1: entered promiscuous mode [ 237.678138][T12364] syzkaller1: entered allmulticast mode [ 237.723477][T12364] syzkaller1: left promiscuous mode [ 237.767741][T12364] syzkaller1: left allmulticast mode [ 237.812272][T12381] netlink: 64985 bytes leftover after parsing attributes in process `syz.0.1806'. [ 237.913036][T12383] netlink: 'syz.3.1808': attribute type 142 has an invalid length. [ 237.941939][T12383] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1808'. [ 238.148626][T12393] chnl_net:caif_netlink_parms(): no params data found [ 238.816234][T12429] tipc: Started in network mode [ 238.835054][T12429] tipc: Node identity aaaaaaaaaa33, cluster identity 4711 [ 238.868110][T12430] tipc: Can't bind to reserved service type 2 [ 238.875364][T12429] tipc: Enabled bearer , priority 12 [ 239.176503][T12451] bond0: entered allmulticast mode [ 239.181670][T12451] bond_slave_0: entered allmulticast mode [ 239.216390][T12451] bond_slave_1: entered allmulticast mode [ 239.247151][T12451] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 240.004874][ T9] tipc: Node number set to 10070698 [ 240.231812][T12512] __nla_validate_parse: 11 callbacks suppressed [ 240.231829][T12512] netlink: 45 bytes leftover after parsing attributes in process `syz.3.1847'. [ 240.367985][T12521] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1850'. [ 240.402353][T12521] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1850'. [ 240.463328][T12520] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1850'. [ 240.512597][T12530] netlink: 4552 bytes leftover after parsing attributes in process `syz.3.1853'. [ 240.528154][T12530] netlink: 4552 bytes leftover after parsing attributes in process `syz.3.1853'. [ 240.573928][T12530] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1853'. [ 240.610100][T12530] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1853'. [ 240.639048][T12530] netlink: 'syz.3.1853': attribute type 3 has an invalid length. [ 240.705140][T12534] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1854'. [ 240.737169][T12534] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1854'. [ 240.793684][T12537] delete_channel: no stack [ 241.068351][T12552] netlink: 'syz.1.1861': attribute type 1 has an invalid length. [ 241.128829][T12555] rdma_rxe: rxe_newlink: failed to add lo [ 241.144601][T12556] tipc: Enabling of bearer rejected, already enabled [ 241.156048][T12555] net_ratelimit: 59 callbacks suppressed [ 241.156065][T12555] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 241.269740][T12555] 0ªî{X¹¦: left allmulticast mode [ 241.312447][T12555] bond0: left allmulticast mode [ 241.318187][T12555] bond_slave_0: left allmulticast mode [ 241.331941][T12555] bond_slave_1: left allmulticast mode [ 241.342062][T12555] mac80211_hwsim hwsim5 wlan1: left allmulticast mode [ 241.372444][T12555] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 241.554461][T12583] ieee802154 phy0 wpan0: encryption failed: -22 [ 241.765655][T12588] netlink: 'syz.4.1874': attribute type 5 has an invalid length. [ 241.883364][T12599] dummy0: entered allmulticast mode [ 241.896411][T12599] batman_adv: batadv0: Adding interface: dummy0 [ 241.902796][T12599] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 241.936845][T12599] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 242.238881][T12618] netlink: 'syz.3.1884': attribute type 1 has an invalid length. [ 243.028830][T12643] netlink: 'syz.4.1889': attribute type 2 has an invalid length. [ 243.048613][T12643] nbd: must specify a device to reconfigure [ 243.273839][T12664] netlink: 'syz.4.1897': attribute type 4 has an invalid length. [ 243.279930][ T7377] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 243.299716][ T7377] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 243.355387][T12662] bond7: entered promiscuous mode [ 243.360549][T12662] bond7: entered allmulticast mode [ 243.367515][T12662] 8021q: adding VLAN 0 to HW filter on device bond7 [ 243.467362][T12674] tipc: Enabled bearer , priority 0 [ 243.550903][T12674] syzkaller0: entered promiscuous mode [ 243.556585][T12674] syzkaller0: entered allmulticast mode [ 243.589016][T12674] tipc: Resetting bearer [ 243.631888][T12682] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 243.642898][T12682] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 244.007128][T12696] netlink: 'syz.1.1908': attribute type 4 has an invalid length. [ 244.021371][T12697] sch_fq: defrate 0 ignored. [ 244.068767][T12656] tipc: Resetting bearer [ 245.538646][T12656] tipc: Disabling bearer [ 245.899569][T12720] tipc: Enabled bearer , priority 0 [ 245.974667][T12726] __nla_validate_parse: 15 callbacks suppressed [ 245.974685][T12726] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1917'. [ 246.136331][T12737] syzkaller0: entered promiscuous mode [ 246.141845][T12737] syzkaller0: entered allmulticast mode [ 246.194832][T12735] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1920'. [ 246.241701][T12731] tipc: Enabled bearer , priority 0 [ 246.291394][T12720] tipc: Resetting bearer [ 246.393688][T12719] tipc: Resetting bearer [ 246.455449][T12719] tipc: Disabling bearer [ 246.477588][T12730] tipc: Disabling bearer [ 246.491360][T12751] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1923'. [ 246.516413][T12751] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1923'. [ 246.546543][T12756] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (32767) [ 246.570755][T12756] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 247.113090][T12796] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1937'. [ 247.361453][T12810] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1941'. [ 247.442805][T12813] nbd: must specify an index to disconnect [ 247.569151][T12815] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1943'. [ 247.869033][T12832] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1946'. [ 247.990269][T12840] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1949'. [ 248.676822][T12875] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1960'. [ 248.842657][T12882] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 248.863999][T12880] tipc: Enabled bearer , priority 0 [ 249.030633][T12887] syzkaller0: entered promiscuous mode [ 249.051336][T12887] syzkaller0: entered allmulticast mode [ 249.055382][T12899] netlink: 'syz.2.1966': attribute type 11 has an invalid length. [ 249.062109][T12887] tipc: Resetting bearer [ 249.065904][T12899] netlink: 'syz.2.1966': attribute type 11 has an invalid length. [ 249.079536][T12899] netlink: 'syz.2.1966': attribute type 11 has an invalid length. [ 249.087755][T12899] netlink: 'syz.2.1966': attribute type 11 has an invalid length. [ 249.096896][T12899] netlink: 'syz.2.1966': attribute type 11 has an invalid length. [ 249.105300][T12899] netlink: 'syz.2.1966': attribute type 11 has an invalid length. [ 249.113513][T12899] netlink: 'syz.2.1966': attribute type 11 has an invalid length. [ 249.122677][T12899] netlink: 'syz.2.1966': attribute type 11 has an invalid length. [ 249.141115][T12899] netlink: 'syz.2.1966': attribute type 11 has an invalid length. [ 249.149523][T12899] netlink: 'syz.2.1966': attribute type 11 has an invalid length. [ 249.157780][T12879] tipc: Resetting bearer [ 249.306216][T12907] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 249.318184][T12907] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 250.689937][T12879] tipc: Disabling bearer [ 251.110671][T12937] __nla_validate_parse: 10 callbacks suppressed [ 251.110689][T12937] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1976'. [ 251.112990][T12939] syzkaller0 speed is unknown, defaulting to 1000 [ 251.164166][T12939] syzkaller0 speed is unknown, defaulting to 1000 [ 251.183323][T12939] syzkaller0 speed is unknown, defaulting to 1000 [ 251.210735][T12939] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 251.283827][T12939] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 251.342255][T12949] veth5: entered allmulticast mode [ 251.349511][T12939] syzkaller0 speed is unknown, defaulting to 1000 [ 251.362652][T12939] syzkaller0 speed is unknown, defaulting to 1000 [ 251.374183][T12939] syzkaller0 speed is unknown, defaulting to 1000 [ 251.410811][T12939] syzkaller0 speed is unknown, defaulting to 1000 [ 251.434429][T12939] syzkaller0 speed is unknown, defaulting to 1000 [ 251.593396][T12961] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1986'. [ 251.616011][T12963] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1986'. [ 251.625989][T12961] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1986'. [ 251.636715][T12963] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1986'. [ 251.939908][T12984] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 252.000247][T12986] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1992'. [ 252.260725][T12999] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1997'. [ 252.281394][T13002] IPVS: set_ctl: invalid protocol: 44 224.0.0.1:20001 [ 252.309499][T12999] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1997'. [ 252.326400][T13004] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1999'. [ 252.346463][T13004] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1999'. [ 252.503647][T13007] 0ªî{X¹¦: left promiscuous mode [ 252.662401][T13021] IPVS: length: 24 != 3445464 [ 253.147230][T13007] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 254.138815][T13099] validate_nla: 30 callbacks suppressed [ 254.138834][T13099] netlink: 'syz.4.2026': attribute type 10 has an invalid length. [ 254.164012][T13099] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 254.694301][T13120] netlink: 'syz.2.2032': attribute type 10 has an invalid length. [ 254.699666][T13124] bridge7: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 254.814666][T13120] team0: Port device geneve0 added [ 254.874255][T13141] openvswitch: netlink: Multiple metadata blocks provided [ 254.935168][T13141] openvswitch: netlink: Multiple metadata blocks provided [ 255.030165][T13148] batman_adv: batadv0: Removing interface: dummy0 [ 255.150714][T13148] bond0: (slave bond_slave_0): Releasing backup interface [ 255.200099][T13148] bond0: (slave bond_slave_1): Releasing backup interface [ 255.253498][T13163] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 255.307020][T13148] team0: Port device team_slave_0 removed [ 255.330742][T13148] team0: Port device team_slave_1 removed [ 255.338539][T13148] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 255.346951][T13148] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 255.360554][T13148] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 255.368999][T13148] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 255.391683][T13148] bond0: (slave wlan1): Releasing backup interface [ 255.414289][T13148] bond4: (slave gretap0): Releasing backup interface [ 255.423440][T13148] bond4: (slave gretap0): the permanent HWaddr of slave - f2:a0:c9:e5:59:6a - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 255.444570][T13148] bond4: (slave bond5): making interface the new active one [ 255.459080][T13148] bond4: (slave bond5): Releasing backup interface [ 255.474078][T13160] team0: Mode changed to "activebackup" [ 255.599960][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.607317][ T55] block nbd0: Possible stuck request ffff8880254871c0: control (read@0,1024B). Runtime 120 seconds [ 255.618481][ T55] block nbd0: Possible stuck request ffff888025487380: control (read@1024,1024B). Runtime 120 seconds [ 255.630930][ T55] block nbd0: Possible stuck request ffff888025487540: control (read@2048,1024B). Runtime 120 seconds [ 255.642577][ T55] block nbd0: Possible stuck request ffff888025487700: control (read@3072,1024B). Runtime 120 seconds [ 255.651213][T13165] 8021q: adding VLAN 0 to HW filter on device bond6 [ 255.971934][T13165] bond6 (unregistering): Released all slaves [ 256.020692][T13188] netlink: 'syz.3.2052': attribute type 4 has an invalid length. [ 256.033866][T13170] macvlan0: entered allmulticast mode [ 256.039543][T13170] veth1_vlan: entered allmulticast mode [ 256.049387][T13171] veth1_vlan: left allmulticast mode [ 256.064989][T13171] macvlan0 (unregistering): left allmulticast mode [ 256.078468][T13196] netlink: 'syz.3.2052': attribute type 4 has an invalid length. [ 256.090293][T13184] netlink: 'syz.1.2050': attribute type 12 has an invalid length. [ 256.441731][T13215] __nla_validate_parse: 9 callbacks suppressed [ 256.441750][T13215] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2058'. [ 256.489162][T13215] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2058'. [ 256.515143][T13215] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2058'. [ 256.534232][T13215] netlink: 'syz.3.2058': attribute type 20 has an invalid length. [ 256.559624][T13215] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2058'. [ 256.576527][T13217] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2059'. [ 256.585691][T13215] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2058'. [ 256.595496][T13217] openvswitch: netlink: Actions may not be safe on all matching packets [ 256.604481][T13215] netlink: 'syz.3.2058': attribute type 20 has an invalid length. [ 256.826839][T13230] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2064'. [ 257.087740][T13241] bond5: (slave veth0_to_bond): Releasing active interface [ 257.149357][T13241] bond0: (slave bond_slave_0): Releasing backup interface [ 257.222469][T13241] bond0: (slave bond_slave_1): Releasing backup interface [ 257.272184][T13241] team0: Port device C removed [ 257.297798][T13241] team0: Port device team_slave_1 removed [ 257.304601][T13241] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 257.312546][T13241] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 257.328850][T13241] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 257.340687][T13241] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 257.375476][T13241] team0: Port device geneve0 removed [ 257.383688][T13241] bond0: (slave wlan1): Releasing backup interface [ 257.394487][T13263] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2074'. [ 257.406836][T13241] bond2: (slave bond3): Releasing backup interface [ 257.423071][T13241] bond4: (slave veth7): Releasing backup interface [ 257.431431][T13241] bond4: (slave veth7): the permanent HWaddr of slave - 2a:f7:ea:25:99:49 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 257.458510][T13241] bond4: (slave batadv1): Releasing backup interface [ 257.477014][T13241] bond5: (slave veth1): Releasing active interface [ 257.492429][T13241] bond6: (slave gretap1): Releasing active interface [ 257.562999][T13263] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2074'. [ 257.563323][ T10] syzkaller0 speed is unknown, defaulting to 1000 [ 257.591486][T13263] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2074'. [ 257.851735][T13279] dvmrp1: entered allmulticast mode [ 257.881608][T13281] gretap0: entered promiscuous mode [ 257.900774][T13281] gretap0: left promiscuous mode [ 258.473166][T13310] netlink: 'syz.3.2089': attribute type 62 has an invalid length. [ 258.515873][T13310] netlink: 'syz.3.2089': attribute type 2 has an invalid length. [ 258.688653][T13330] sctp: [Deprecated]: syz.0.2094 (pid 13330) Use of int in max_burst socket option. [ 258.688653][T13330] Use struct sctp_assoc_value instead [ 258.746128][T13332] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1340 [ 258.824271][T13338] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1340 [ 258.893420][T13336] bridge_slave_0: left allmulticast mode [ 259.027352][T13336] veth0_to_team: left allmulticast mode [ 259.322398][T13336] macsec0: left promiscuous mode [ 259.333950][T13336] macsec0: left allmulticast mode [ 259.392188][T13336] veth3: left allmulticast mode [ 259.480404][T13336] tipc: Resetting bearer [ 259.499392][T13336] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode [ 259.510870][T13336] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode [ 259.531143][T13336] vlan0: left allmulticast mode [ 259.538465][T13336] bridge0: left allmulticast mode [ 259.670723][T13336] geneve2: left promiscuous mode [ 259.676638][T13336] geneve2: left allmulticast mode [ 259.705637][T13336] bond7: left promiscuous mode [ 259.710463][T13336] bond7: left allmulticast mode [ 259.740770][T13369] netlink: 'syz.1.2110': attribute type 2 has an invalid length. [ 259.783472][T13344] bridge0: port 1(vlan0) entered blocking state [ 259.790831][T13344] bridge0: port 1(vlan0) entered disabled state [ 259.830366][T13344] vlan0: entered allmulticast mode [ 259.837128][T13344] bridge0: entered allmulticast mode [ 259.851313][T13344] vlan0: left allmulticast mode [ 259.858821][T13344] bridge0: left allmulticast mode [ 259.892483][ T24] syzkaller0 speed is unknown, defaulting to 1000 [ 259.892483][ T7376] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 259.892511][ T7376] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.900307][ T24] syz2: Port: 1 Link DOWN [ 259.917053][ T7376] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 259.931488][ T7376] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.948674][ T7376] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 259.960932][ T7376] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.979742][ T7376] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 260.019725][ T7376] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.134513][T13437] tc_dump_action: action bad kind [ 261.606357][T13474] bridge_slave_0: entered promiscuous mode [ 261.613246][T13473] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551585) [ 261.630442][T13473] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647 [ 262.004673][T13491] __nla_validate_parse: 41 callbacks suppressed [ 262.004693][T13491] netlink: 248 bytes leftover after parsing attributes in process `syz.0.2149'. [ 262.141810][T13491] veth0: entered promiscuous mode [ 262.161693][T13500] syzkaller1: entered promiscuous mode [ 262.178058][T13500] syzkaller1: entered allmulticast mode [ 262.368249][T13506] tipc: Enabled bearer , priority 0 [ 262.398683][T13506] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 262.409977][T13506] tipc: Resetting bearer [ 262.416602][T13490] veth0: left promiscuous mode [ 262.432922][T13505] tipc: Disabling bearer [ 262.529744][T13512] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 262.536259][T13512] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 262.619085][T13520] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2158'. [ 263.030880][T13557] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 263.091995][T13557] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2164'. [ 263.202069][T13560] gre1: entered promiscuous mode [ 263.223822][T13560] gre1: entered allmulticast mode [ 263.406105][T13570] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2169'. [ 263.472157][T13579] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2172'. [ 263.685803][T13577] netlink: 'syz.1.2171': attribute type 1 has an invalid length. [ 263.708015][T13587] netlink: 'syz.4.2175': attribute type 1 has an invalid length. [ 263.721964][T13587] netlink: 184 bytes leftover after parsing attributes in process `syz.4.2175'. [ 263.744124][T13587] netlink: 'syz.4.2175': attribute type 1 has an invalid length. [ 263.782823][T13587] netlink: 184 bytes leftover after parsing attributes in process `syz.4.2175'. [ 263.844284][T13597] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2178'. [ 264.135711][T13612] netlink: 'syz.3.2182': attribute type 21 has an invalid length. [ 264.152509][T13614] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 264.293479][T13621] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.2186'. [ 264.304189][T13621] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 264.473395][T13626] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2189'. [ 264.731217][T13639] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 264.752066][T13642] netlink: 'syz.1.2193': attribute type 10 has an invalid length. [ 264.813657][T13642] team0: Port device geneve0 added [ 265.007562][T13660] lo: entered promiscuous mode [ 265.021350][T13660] netlink: 'syz.2.2200': attribute type 2 has an invalid length. [ 265.047241][T13660] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 265.074110][T13669] netlink: 'syz.1.2199': attribute type 13 has an invalid length. [ 265.100750][T13669] macvtap0: refused to change device tx_queue_len [ 265.168330][T13675] netlink: 'syz.3.2203': attribute type 4 has an invalid length. [ 265.347678][T13681] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 266.596318][T13759] openvswitch: netlink: Multiple metadata blocks provided [ 266.790199][T13769] sctp: [Deprecated]: syz.0.2230 (pid 13769) Use of int in maxseg socket option. [ 266.790199][T13769] Use struct sctp_assoc_value instead [ 266.817664][T13777] netlink: 'syz.2.2231': attribute type 13 has an invalid length. [ 266.868413][T13778] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 266.904214][T13777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 266.917872][T13777] 8021q: adding VLAN 0 to HW filter on device team0 [ 266.942368][T13777] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 267.185143][T13794] wg1: entered promiscuous mode [ 267.190388][T13794] wg1: entered allmulticast mode [ 267.203855][T13797] __nla_validate_parse: 18 callbacks suppressed [ 267.203874][T13797] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2238'. [ 267.245549][T13798] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2238'. [ 267.272799][T13802] netlink: 'syz.3.2239': attribute type 23 has an invalid length. [ 267.311084][T13797] xfrm2: entered promiscuous mode [ 267.337016][T13804] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2240'. [ 267.337986][T13797] xfrm2: entered allmulticast mode [ 267.366569][T13807] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2241'. [ 267.385358][T13807] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2241'. [ 267.465267][T13804] netlink: 'syz.0.2240': attribute type 3 has an invalid length. [ 267.505502][T13804] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2240'. [ 267.587476][T13811] netlink: 'syz.2.2242': attribute type 13 has an invalid length. [ 267.641097][T13814] delete_channel: no stack [ 267.649453][T13811] net_ratelimit: 1 callbacks suppressed [ 267.649463][T13811] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 267.696664][T13818] netlink: 240 bytes leftover after parsing attributes in process `syz.0.2245'. [ 267.842537][T13821] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2247'. [ 268.027831][T13832] netlink: 668 bytes leftover after parsing attributes in process `syz.3.2250'. [ 268.504417][T13854] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2258'. [ 268.661182][T13866] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 268.769394][T13878] netlink: 'syz.3.2266': attribute type 1 has an invalid length. [ 268.801288][T13878] netlink: 'syz.3.2266': attribute type 4 has an invalid length. [ 268.835497][T13883] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 268.961484][T13892] openvswitch: netlink: Flow key attr not present in new flow. [ 270.303346][T13963] bridge_slave_0: entered promiscuous mode [ 270.465191][T13974] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 270.539802][T13976] validate_nla: 2 callbacks suppressed [ 270.539820][T13976] netlink: 'syz.2.2301': attribute type 2 has an invalid length. [ 271.364226][T14017] tipc: Enabled bearer , priority 10 [ 271.941266][T14045] veth0: entered promiscuous mode [ 271.949991][T14044] veth0: left promiscuous mode [ 272.038523][T14048] bond0: entered promiscuous mode [ 272.043676][T14048] bond4: entered promiscuous mode [ 272.061569][T14048] bond0: left promiscuous mode [ 272.071895][T14048] bond4: left promiscuous mode [ 272.246482][T14057] nbd2: detected capacity change from 0 to 127 [ 272.259889][ T5877] block nbd2: Receive control failed (result -104) [ 272.508935][T14078] netlink: 'syz.3.2337': attribute type 7 has an invalid length. [ 272.658970][T14088] __nla_validate_parse: 20 callbacks suppressed [ 272.658989][T14088] netlink: 92 bytes leftover after parsing attributes in process `syz.0.2341'. [ 272.686557][T14088] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2341'. [ 272.716285][T14091] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2342'. [ 272.749332][T14091] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2342'. [ 272.777685][T14093] delete_channel: no stack [ 272.967079][T14103] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2348'. [ 273.000824][T14105] netlink: 176 bytes leftover after parsing attributes in process `syz.2.2347'. [ 273.111772][T14109] tipc: Enabled bearer , priority 0 [ 273.126402][T14112] syzkaller0: entered promiscuous mode [ 273.164899][T14112] syzkaller0: entered allmulticast mode [ 273.180777][T14109] tipc: Enabling of bearer rejected, already enabled [ 273.288221][T14109] tipc: Resetting bearer [ 273.378380][T14127] can: request_module (can-proto-0) failed. [ 273.401330][T14109] tipc: Disabling bearer [ 273.452712][T14138] tipc: Enabling of bearer rejected, already enabled [ 273.489455][T14138] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 273.532043][T14138] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 273.552028][T14138] tipc: Resetting bearer [ 273.561415][T14145] sctp: [Deprecated]: syz.4.2359 (pid 14145) Use of int in maxseg socket option. [ 273.561415][T14145] Use struct sctp_assoc_value instead [ 273.588992][ T5976] syzkaller0 speed is unknown, defaulting to 1000 [ 273.596324][ T5976] syz2: Port: 1 Link ACTIVE [ 273.650290][T14138] tipc: Resetting bearer [ 274.192655][T14175] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 274.205336][T14188] IPVS: set_ctl: invalid protocol: 43 172.30.0.5:20000 [ 274.244920][T14188] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2370'. [ 274.270842][T14188] ifb0: entered promiscuous mode [ 274.295934][T14188] ifb0: entered allmulticast mode [ 274.566023][T14212] tipc: Enabling of bearer rejected, already enabled [ 274.593251][T14212] netem: change failed [ 274.784163][T14231] delete_channel: no stack [ 274.865690][T14233] netlink: 'syz.2.2382': attribute type 12 has an invalid length. [ 274.931895][T14239] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 275.080645][T14244] netlink: 'syz.0.2387': attribute type 178 has an invalid length. [ 275.119028][T14190] syzkaller0 speed is unknown, defaulting to 1000 [ 275.132648][T14250] netlink: 'syz.1.2390': attribute type 8 has an invalid length. [ 275.295037][T14256] netlink: 'syz.3.2392': attribute type 2 has an invalid length. [ 275.324379][T14256] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2392'. [ 275.341223][T14259] geneve2: entered promiscuous mode [ 275.346734][T14259] geneve2: entered allmulticast mode [ 275.364606][T14259] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2393'. [ 275.464148][T14265] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2394'. [ 277.722866][T14374] __nla_validate_parse: 1 callbacks suppressed [ 277.722893][T14374] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2420'. [ 277.861008][T14381] IPVS: set_ctl: invalid protocol: 47 172.20.20.187:20000 [ 277.949014][T14388] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2424'. [ 278.062762][T14391] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2426'. [ 278.104648][T14396] netlink: 'syz.0.2427': attribute type 1 has an invalid length. [ 278.113672][T14396] netlink: 'syz.0.2427': attribute type 3 has an invalid length. [ 278.123617][T14396] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2427'. [ 278.237893][T14398] sctp: [Deprecated]: syz.4.2428 (pid 14398) Use of int in max_burst socket option. [ 278.237893][T14398] Use struct sctp_assoc_value instead [ 278.393926][T14413] tipc: Enabled bearer , priority 0 [ 278.432899][T14413] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode [ 278.465565][T14413] tipc: Resetting bearer [ 278.468537][T14412] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2431'. [ 278.510089][T14412] raw_sendmsg: syz.0.2431 forgot to set AF_INET. Fix it! [ 278.564518][T14412] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 278.770589][T14435] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2439'. [ 278.812973][T14435] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2439'. [ 278.850244][T14444] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 279.008553][T14443] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2440'. [ 279.021002][T14443] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2440'. [ 279.073590][T14435] bond9: entered allmulticast mode [ 279.079292][T14435] 8021q: adding VLAN 0 to HW filter on device bond9 [ 279.086824][T14435] bridge0: port 1(bond9) entered blocking state [ 279.093453][T14435] bridge0: port 1(bond9) entered disabled state [ 279.102632][T14435] bond9: entered promiscuous mode [ 279.116956][T14435] bridge0: port 1(bond9) entered blocking state [ 279.124436][T14435] bridge0: port 1(bond9) entered forwarding state [ 279.515302][T14459] syz_tun: mtu less than device minimum [ 279.888228][T14481] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2448'. [ 280.002538][ T1110] bridge0: port 1(bond9) entered disabled state [ 280.032184][T14490] netlink: 'syz.4.2451': attribute type 1 has an invalid length. [ 280.256997][T14504] netlink: 'syz.1.2457': attribute type 1 has an invalid length. [ 280.270801][T14504] netlink: 'syz.1.2457': attribute type 4 has an invalid length. [ 280.691578][T14527] tipc: Enabling of bearer rejected, already enabled [ 280.731056][T14527] netlink: 'syz.1.2462': attribute type 1 has an invalid length. [ 280.742580][T14527] netlink: 'syz.1.2462': attribute type 1 has an invalid length. [ 280.762765][T14527] netlink: 'syz.1.2462': attribute type 1 has an invalid length. [ 280.781118][T14527] netlink: 'syz.1.2462': attribute type 2 has an invalid length. [ 281.064278][T14551] netlink: 'syz.1.2468': attribute type 1 has an invalid length. [ 281.194568][T14562] openvswitch: netlink: Multiple metadata blocks provided [ 281.259743][T14551] 8021q: adding VLAN 0 to HW filter on device bond8 [ 281.276764][T14551] bond7: (slave bond8): making interface the new active one [ 281.287090][T14551] bond7: (slave bond8): Enslaving as an active interface with an up link [ 281.319142][T14551] bond7: entered allmulticast mode [ 281.335603][T14551] bond8: entered allmulticast mode [ 281.593892][T14585] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 281.672636][T14589] IPVS: set_ctl: invalid protocol: 0 10.1.1.2:20000 [ 282.011710][T14610] dummy0: left allmulticast mode [ 282.101830][T14610] team0: Port device dummy0 added [ 282.112864][T14612] chnl_net:caif_netlink_parms(): no params data found [ 282.220649][T14613] team0: Port device dummy0 removed [ 282.237696][T14613] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 282.478205][T14615] 8021q: adding VLAN 0 to HW filter on device ` [ 282.499297][T14615] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 282.701540][T14642] tipc: Enabling of bearer rejected, already enabled [ 282.734516][T14642] netem: change failed [ 282.742360][T14642] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 283.119653][T14662] IPVS: set_ctl: invalid protocol: 51 224.0.0.1:20004 [ 283.268360][T14667] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 283.287255][T14667] team0: Device macvtap1 is already an upper device of the team interface [ 283.310670][T14672] __nla_validate_parse: 13 callbacks suppressed [ 283.310689][T14672] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2504'. [ 283.439806][T14656] netlink: 248 bytes leftover after parsing attributes in process `syz.1.2498'. [ 283.725480][T14691] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2510'. [ 283.853452][T14701] validate_nla: 3 callbacks suppressed [ 283.853470][T14701] netlink: 'syz.0.2513': attribute type 1 has an invalid length. [ 283.873214][T14701] netlink: 'syz.0.2513': attribute type 3 has an invalid length. [ 283.881750][T14701] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2513'. [ 283.933358][T14704] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2513'. [ 284.024557][T14709] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2512'. [ 284.036108][T14709] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2512'. [ 284.064683][T14709] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 284.072802][T14709] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 284.123755][T14711] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2516'. [ 284.150750][T14711] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 284.178616][T14711] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 284.483175][T14736] vlan0: entered allmulticast mode [ 284.516432][T14736] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 284.808057][T14758] sch_tbf: burst 8 is lower than device ip6tnl0 mtu (1452) ! [ 284.887903][T14764] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 284.901523][T14764] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2532'. [ 285.052419][T14771] veth0: entered promiscuous mode [ 285.141285][T14774] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2535'. [ 285.480353][T14793] openvswitch: netlink: nsh attr 8196 is out of range max 3 [ 285.530945][T14793] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 285.676533][ T55] block nbd0: Possible stuck request ffff8880254871c0: control (read@0,1024B). Runtime 150 seconds [ 285.688343][ T55] block nbd0: Possible stuck request ffff888025487380: control (read@1024,1024B). Runtime 150 seconds [ 285.700872][ T55] block nbd0: Possible stuck request ffff888025487540: control (read@2048,1024B). Runtime 150 seconds [ 285.712365][ T55] block nbd0: Possible stuck request ffff888025487700: control (read@3072,1024B). Runtime 150 seconds [ 285.748427][T14765] veth0: left promiscuous mode [ 287.072717][T14867] ieee802154 phy0 wpan0: encryption failed: -22 [ 287.090139][T14872] netlink: 'syz.1.2569': attribute type 1 has an invalid length. [ 287.117953][T14872] netlink: 'syz.1.2569': attribute type 1 has an invalid length. [ 288.105246][T14917] netlink: 'syz.4.2582': attribute type 2 has an invalid length. [ 288.484151][T14934] __nla_validate_parse: 16 callbacks suppressed [ 288.484173][T14934] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2587'. [ 288.672019][T14943] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2590'. [ 288.846082][T14947] netlink: 84 bytes leftover after parsing attributes in process `syz.4.2592'. [ 288.868222][T14948] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2591'. [ 289.102379][T14960] sctp: [Deprecated]: syz.0.2594 (pid 14960) Use of int in max_burst socket option. [ 289.102379][T14960] Use struct sctp_assoc_value instead [ 289.890397][T14977] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2599'. [ 289.925308][T14982] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2599'. [ 290.322231][T15009] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2608'. [ 290.800783][T15018] veth15: entered allmulticast mode [ 290.961170][T15035] netlink: 'syz.1.2615': attribute type 10 has an invalid length. [ 291.507272][T15054] netlink: 'syz.1.2622': attribute type 4 has an invalid length. [ 291.521020][T15055] netlink: 'syz.1.2622': attribute type 4 has an invalid length. [ 291.587821][T15059] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2623'. [ 291.718459][T15065] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 291.751500][T15065] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 291.778117][T15070] netlink: 'syz.4.2626': attribute type 3 has an invalid length. [ 291.820894][T15063] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2625'. [ 291.834219][T15063] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2625'. [ 291.853033][T15069] tipc: Enabling of bearer rejected, already enabled [ 292.268310][T15090] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 293.328898][T15141] 0ªî{X¹¦: entered promiscuous mode [ 293.349877][T15141] 0ªî{X¹¦: left allmulticast mode [ 293.396797][T15147] 1ªî{X¹¦: renamed from 30ªî{X¹¦ [ 293.427218][T15147] 1ªî{X¹¦: left promiscuous mode [ 293.442351][T15147] 1ªî{X¹¦: entered allmulticast mode [ 293.480915][T15147] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 293.573142][T15141] tipc: Enabling of bearer rejected, already enabled [ 293.654218][T15141] tc_dump_action: action bad kind [ 293.787354][T15164] __nla_validate_parse: 38 callbacks suppressed [ 293.787372][T15164] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2651'. [ 293.854323][T15168] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 294.039825][T15184] netlink: 277 bytes leftover after parsing attributes in process `syz.0.2658'. [ 294.110010][T15184] netlink: 277 bytes leftover after parsing attributes in process `syz.0.2658'. [ 294.122651][T15187] netlink: 216 bytes leftover after parsing attributes in process `syz.2.2661'. [ 294.158680][T15184] netlink: 277 bytes leftover after parsing attributes in process `syz.0.2658'. [ 294.185370][T15184] netlink: 277 bytes leftover after parsing attributes in process `syz.0.2658'. [ 294.206492][T15184] netlink: 277 bytes leftover after parsing attributes in process `syz.0.2658'. [ 294.229931][T15184] netlink: 277 bytes leftover after parsing attributes in process `syz.0.2658'. [ 294.243801][T15184] netlink: 277 bytes leftover after parsing attributes in process `syz.0.2658'. [ 294.278214][T15184] netlink: 277 bytes leftover after parsing attributes in process `syz.0.2658'. [ 294.471404][T15199] sctp: [Deprecated]: syz.1.2664 (pid 15199) Use of int in max_burst socket option. [ 294.471404][T15199] Use struct sctp_assoc_value instead [ 295.196156][T15230] syzkaller1: entered promiscuous mode [ 295.212709][T15230] syzkaller1: entered allmulticast mode [ 295.671930][T15246] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 295.907387][T15256] netlink: 'syz.4.2683': attribute type 1 has an invalid length. [ 295.934890][T15256] netlink: 'syz.4.2683': attribute type 1 has an invalid length. [ 295.971968][T15258] netlink: 'syz.1.2684': attribute type 24 has an invalid length. [ 296.163238][T15265] netlink: 'syz.4.2686': attribute type 2 has an invalid length. [ 296.333810][T15272] ieee802154 phy0 wpan0: encryption failed: -90 [ 296.795803][T15237] syzkaller0 speed is unknown, defaulting to 1000 [ 297.358136][T15307] nbd: couldn't find a device at index -373156329 [ 297.787196][T15317] netlink: set zone limit has 8 unknown bytes [ 297.819989][T15319] netlink: set zone limit has 8 unknown bytes [ 298.277363][T15337] netlink: 'syz.2.2708': attribute type 32 has an invalid length. [ 298.696322][T15361] netlink: 'syz.1.2717': attribute type 10 has an invalid length. [ 298.869078][T15373] netlink: 'syz.4.2720': attribute type 1 has an invalid length. [ 298.913159][T15373] netlink: 'syz.4.2720': attribute type 1 has an invalid length. [ 299.311142][T15396] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 299.333208][T15399] __nla_validate_parse: 75 callbacks suppressed [ 299.333227][T15399] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2729'. [ 299.385704][T15399] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2729'. [ 299.416550][T15399] netlink: 'syz.1.2729': attribute type 20 has an invalid length. [ 299.424651][T15399] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2729'. [ 299.450046][T15399] netlink: 'syz.1.2729': attribute type 20 has an invalid length. [ 299.720068][T15420] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2735'. [ 300.089977][T15433] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 300.129015][T15436] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2741'. [ 300.138169][T15436] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2741'. [ 300.285194][T15444] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2742'. [ 300.294197][T15444] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2742'. [ 300.369667][T15444] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2742'. [ 300.417648][T15444] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2742'. [ 300.812973][T15467] bond0: (slave rose0): Error: Device can not be enslaved while up [ 300.905183][T15470] syzkaller1: entered promiscuous mode [ 300.933372][T15470] syzkaller1: entered allmulticast mode [ 301.116466][T15475] tipc: Enabled bearer , priority 31 [ 301.140214][T15475] netlink: 'syz.2.2753': attribute type 11 has an invalid length. [ 301.372465][T15500] netlink: 'syz.0.2758': attribute type 1 has an invalid length. [ 301.453763][T15506] IPVS: set_ctl: invalid protocol: 43 172.30.0.3:20000 [ 301.526575][T15506] ip_vti0: entered promiscuous mode [ 301.582362][T15506] ip_vti0: entered allmulticast mode [ 302.166015][T15539] netlink: 'syz.1.2765': attribute type 5 has an invalid length. [ 302.316008][ T55] block nbd2: Possible stuck request ffff888025525080: control (read@0,1024B). Runtime 30 seconds [ 302.328109][ T55] block nbd2: Possible stuck request ffff888025525240: control (read@1024,1024B). Runtime 30 seconds [ 302.340723][ T55] block nbd2: Possible stuck request ffff888025525400: control (read@2048,1024B). Runtime 30 seconds [ 302.350784][T15545] ipvlan2: entered promiscuous mode [ 302.352876][ T55] block nbd2: Possible stuck request ffff8880255255c0: control (read@3072,1024B). Runtime 30 seconds [ 302.383554][T15545] bridge0: port 1(ipvlan2) entered blocking state [ 302.390757][T15545] bridge0: port 1(ipvlan2) entered disabled state [ 302.398222][T15545] ipvlan2: entered allmulticast mode [ 302.403538][T15545] bridge0: entered allmulticast mode [ 302.414673][T15545] ipvlan2: left allmulticast mode [ 302.420610][T15545] bridge0: left allmulticast mode [ 302.612937][T15549] vlan3: entered allmulticast mode [ 302.639029][T15549] bridge15: entered allmulticast mode [ 302.680062][T15502] syzkaller0 speed is unknown, defaulting to 1000 [ 302.984417][T15577] netlink: 'syz.4.2775': attribute type 6 has an invalid length. [ 303.057630][T15582] netlink: 'syz.4.2775': attribute type 6 has an invalid length. [ 303.633755][T15605] tipc: Resetting bearer [ 303.943568][T15633] netlink: 'syz.4.2796': attribute type 33 has an invalid length. [ 304.041530][T15634] netlink: 'syz.2.2795': attribute type 11 has an invalid length. [ 304.085143][T15634] netlink: 'syz.2.2795': attribute type 11 has an invalid length. [ 304.420723][T15656] sctp: [Deprecated]: syz.4.2801 (pid 15656) Use of int in max_burst socket option. [ 304.420723][T15656] Use struct sctp_assoc_value instead [ 304.719056][T15665] netlink: 'syz.2.2805': attribute type 5 has an invalid length. [ 304.910597][T15673] netlink: 'syz.4.2808': attribute type 15 has an invalid length. [ 304.945802][T15673] __nla_validate_parse: 13 callbacks suppressed [ 304.945820][T15673] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2808'. [ 305.037573][T15677] netlink: 112 bytes leftover after parsing attributes in process `syz.3.2809'. [ 305.323207][T15694] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2812'. [ 305.365570][T15694] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2812'. [ 305.396694][T15695] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2812'. [ 305.480636][ T5871] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 305.493160][ T5871] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 305.502669][ T5871] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 305.515451][ T5871] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 305.533428][ T5871] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 305.738979][T15714] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2818'. [ 305.988561][T15696] syzkaller0 speed is unknown, defaulting to 1000 [ 306.111061][T15724] bridge7: entered promiscuous mode [ 306.119561][T15724] bridge7: entered allmulticast mode [ 306.277769][T15730] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2822'. [ 306.286947][T15730] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2822'. [ 306.330591][T15732] netlink: 'syz.0.2823': attribute type 21 has an invalid length. [ 306.392957][T15734] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2824'. [ 306.436342][T15735] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2824'. [ 306.454579][T15740] netlink: 'syz.3.2826': attribute type 1 has an invalid length. [ 306.511233][T15696] chnl_net:caif_netlink_parms(): no params data found [ 306.987849][T15696] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.012537][T15696] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.022901][T15696] bridge_slave_0: entered allmulticast mode [ 307.049365][T15696] bridge_slave_0: entered promiscuous mode [ 307.098390][T15762] gretap0: entered promiscuous mode [ 307.109033][T15696] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.133228][T15696] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.151217][T15696] bridge_slave_1: entered allmulticast mode [ 307.179120][T15696] bridge_slave_1: entered promiscuous mode [ 307.218419][T15770] netlink: 'syz.0.2832': attribute type 6 has an invalid length. [ 307.336322][T15696] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 307.380074][T15696] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 307.430389][T15774] netlink: 'syz.3.2834': attribute type 33 has an invalid length. [ 307.538755][T15696] team0: Port device team_slave_0 added [ 307.551097][T15761] syzkaller0 speed is unknown, defaulting to 1000 [ 307.553801][T15696] team0: Port device team_slave_1 added [ 307.602298][ T5877] Bluetooth: hci5: command tx timeout [ 307.652121][T15779] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 307.679575][T15779] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 307.696996][T15696] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 307.714182][T15696] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 307.773764][T15696] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 307.792555][T15696] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 307.806346][T15696] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 307.834455][T15696] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 307.900978][T15793] netlink: 'syz.3.2839': attribute type 16 has an invalid length. [ 307.911425][T15793] netlink: 'syz.3.2839': attribute type 3 has an invalid length. [ 308.144602][T15696] hsr_slave_0: entered promiscuous mode [ 308.151880][T15696] hsr_slave_1: entered promiscuous mode [ 308.159094][T15696] debugfs: 'hsr0' already exists in 'hsr' [ 308.167668][T15696] Cannot create hsr debugfs directory [ 308.586550][T15696] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 308.604793][T15696] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.692012][T15814] netlink: 'syz.4.2845': attribute type 1 has an invalid length. [ 308.722988][T15696] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 308.736394][T15696] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.837198][T15696] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 308.848464][T15696] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.870041][T15818] netlink: 'syz.4.2847': attribute type 29 has an invalid length. [ 308.882798][T15822] netlink: 'syz.4.2847': attribute type 29 has an invalid length. [ 308.898074][T15817] tipc: Enabling of bearer rejected, already enabled [ 308.921940][T15824] netlink: 'syz.4.2847': attribute type 29 has an invalid length. [ 308.982371][T15696] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 309.010845][T15696] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.071758][T15827] syzkaller1: entered promiscuous mode [ 309.087386][T15827] syzkaller1: entered allmulticast mode [ 309.319815][T15696] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 309.360848][T15696] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 309.400140][T15696] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 309.451541][T15696] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 309.665657][T15696] 8021q: adding VLAN 0 to HW filter on device bond0 [ 309.668996][T15866] nftables ruleset with unbound set [ 309.678217][ T5877] Bluetooth: hci5: command tx timeout [ 309.710179][T15696] 8021q: adding VLAN 0 to HW filter on device team0 [ 309.732331][ T7375] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.739628][ T7375] bridge0: port 1(bridge_slave_0) entered forwarding state [ 309.758945][ T1110] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.766155][ T1110] bridge0: port 2(bridge_slave_1) entered forwarding state [ 310.122694][T15871] syzkaller0 speed is unknown, defaulting to 1000 [ 310.321624][T15883] sctp: [Deprecated]: syz.3.2862 (pid 15883) Use of int in maxseg socket option. [ 310.321624][T15883] Use struct sctp_assoc_value instead [ 310.383569][T15885] erspan0: entered promiscuous mode [ 310.536819][T15897] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 310.547177][T15899] __nla_validate_parse: 7 callbacks suppressed [ 310.547194][T15899] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2865'. [ 310.575850][T15898] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2867'. [ 310.678014][T15889] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 310.710009][T15896] veth0: entered promiscuous mode [ 310.801399][T15908] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2868'. [ 310.862514][T15908] bond7: entered allmulticast mode [ 310.880173][T15894] veth0: left promiscuous mode [ 310.903691][T15696] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 310.989125][T15911] sctp: [Deprecated]: syz.0.2870 (pid 15911) Use of struct sctp_assoc_value in delayed_ack socket option. [ 310.989125][T15911] Use struct sctp_sack_info instead [ 311.035228][T15911] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 311.064001][T15913] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2869'. [ 311.081370][T15696] veth0_vlan: entered promiscuous mode [ 311.134637][T15696] veth1_vlan: entered promiscuous mode [ 311.233168][T15696] veth0_macvtap: entered promiscuous mode [ 311.259833][T15924] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2873'. [ 311.266832][T15696] veth1_macvtap: entered promiscuous mode [ 311.333334][T15696] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 311.383889][T15696] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 311.426400][ T78] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.431334][T15931] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 311.442414][T15931] IPv6: NLM_F_CREATE should be set when creating new route [ 311.449611][ T78] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.450370][ T78] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.551796][ T78] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.699479][T15937] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2881'. [ 311.721571][ T1105] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 311.736188][ T1105] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 311.742358][T15941] syzkaller0: entered promiscuous mode [ 311.752547][T15941] syzkaller0: entered allmulticast mode [ 311.759823][ T5877] Bluetooth: hci5: command tx timeout [ 311.842924][ T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 311.858740][ T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 312.015408][T15951] tipc: Enabled bearer , priority 0 [ 312.023328][T15952] syzkaller0: entered promiscuous mode [ 312.029499][T15952] syzkaller0: entered allmulticast mode [ 312.053252][T15951] tipc: Resetting bearer [ 312.090921][T15949] tipc: Resetting bearer [ 312.182681][T15949] tipc: Disabling bearer [ 312.470426][T15968] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2890'. [ 312.692001][T15977] validate_nla: 2 callbacks suppressed [ 312.692018][T15977] netlink: 'syz.2.2893': attribute type 1 has an invalid length. [ 312.879728][T15985] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2892'. [ 312.941180][T15977] bond8: (slave gretap2): making interface the new active one [ 312.956596][ T5871] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 312.972621][ T5871] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 312.982407][ T5871] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 312.984501][T15977] bond8: (slave gretap2): Enslaving as an active interface with an up link [ 313.003857][ T5871] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 313.013830][ T5871] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 313.237463][T16002] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2897'. [ 313.260406][T16002] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2897'. [ 313.396754][T15992] syzkaller0 speed is unknown, defaulting to 1000 [ 313.474274][T16009] netlink: 'syz.1.2900': attribute type 9 has an invalid length. [ 313.835286][ T5871] Bluetooth: hci5: command tx timeout [ 313.900058][T15992] chnl_net:caif_netlink_parms(): no params data found [ 313.992849][T16036] netlink: 'syz.1.2909': attribute type 33 has an invalid length. [ 314.272618][T16051] netlink: 'syz.3.2914': attribute type 1 has an invalid length. [ 315.115536][ T5871] Bluetooth: hci1: command tx timeout [ 315.756109][ T55] block nbd0: Possible stuck request ffff8880254871c0: control (read@0,1024B). Runtime 180 seconds [ 315.766941][ T55] block nbd0: Possible stuck request ffff888025487380: control (read@1024,1024B). Runtime 180 seconds [ 315.778355][ T55] block nbd0: Possible stuck request ffff888025487540: control (read@2048,1024B). Runtime 180 seconds [ 315.789545][ T55] block nbd0: Possible stuck request ffff888025487700: control (read@3072,1024B). Runtime 180 seconds [ 316.990064][T16033] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 317.026745][T15992] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.044394][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.064125][T15992] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.106053][T15992] bridge_slave_0: entered allmulticast mode [ 317.121249][T15992] bridge_slave_0: entered promiscuous mode [ 317.158915][T15992] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.176688][T15992] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.183974][T15992] bridge_slave_1: entered allmulticast mode [ 317.191249][T16058] netlink: 'syz.4.2916': attribute type 1 has an invalid length. [ 317.205085][ T5871] Bluetooth: hci1: command tx timeout [ 317.222267][T15992] bridge_slave_1: entered promiscuous mode [ 317.407934][T15992] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 317.431425][T15992] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 317.556538][T16078] 8021q: adding VLAN 0 to HW filter on device bond9 [ 317.566679][T16078] bond0: (slave bond9): Enslaving as an active interface with an up link [ 317.579217][T15992] team0: Port device team_slave_0 added [ 317.626111][T15992] team0: Port device team_slave_1 added [ 317.751507][T15992] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 317.776502][T15992] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 317.827549][T15992] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 317.861504][T16095] netlink: 'syz.2.2927': attribute type 28 has an invalid length. [ 317.890117][T15992] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 317.905162][T15992] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 317.960695][T15992] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 317.967155][T16104] netlink: 'syz.4.2930': attribute type 15 has an invalid length. [ 318.059444][T16108] __nla_validate_parse: 5 callbacks suppressed [ 318.059461][T16108] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2932'. [ 318.083667][T16109] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2931'. [ 318.100056][T15992] hsr_slave_0: entered promiscuous mode [ 318.122416][T15992] hsr_slave_1: entered promiscuous mode [ 318.130417][T15992] debugfs: 'hsr0' already exists in 'hsr' [ 318.136264][T15992] Cannot create hsr debugfs directory [ 318.155647][T16108] Bluetooth: MGMT ver 1.23 [ 318.336356][T16122] netlink: 'syz.1.2937': attribute type 1 has an invalid length. [ 318.380475][T16122] netlink: 'syz.1.2937': attribute type 14 has an invalid length. [ 318.409781][T16122] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2937'. [ 318.522004][T16122] netlink: 'syz.1.2937': attribute type 14 has an invalid length. [ 318.522366][ T7376] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 318.534821][T16122] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2937'. [ 318.560011][ T7376] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 318.605695][ T7376] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 318.643919][ T7376] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 318.813568][T15992] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.922365][T16149] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2947'. [ 319.011634][T15992] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.034139][T16155] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.2950'. [ 319.056482][T16155] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.2950'. [ 319.081823][T16155] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.2950'. [ 319.109726][T16155] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.2950'. [ 319.131728][T16161] netlink: 'syz.4.2952': attribute type 7 has an invalid length. [ 319.142932][T16155] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.2950'. [ 319.191474][T15992] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.231196][T16161] : entered promiscuous mode [ 319.279526][ T5871] Bluetooth: hci1: command tx timeout [ 319.321728][T16166] bond1: entered promiscuous mode [ 319.348900][T15992] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.525510][T16175] ip6erspan0: entered promiscuous mode [ 319.584247][T16191] netlink: 'syz.2.2961': attribute type 1 has an invalid length. [ 319.605598][T16190] tipc: Enabled bearer , priority 10 [ 319.718870][T15992] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 319.739828][T15992] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 319.770695][T15992] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 319.806260][T15992] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 320.155433][T15992] 8021q: adding VLAN 0 to HW filter on device bond0 [ 320.231374][T15992] 8021q: adding VLAN 0 to HW filter on device team0 [ 320.290082][ T7379] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.297306][ T7379] bridge0: port 1(bridge_slave_0) entered forwarding state [ 320.355088][ T7379] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.363282][ T7379] bridge0: port 2(bridge_slave_1) entered forwarding state [ 320.553193][T16235] bond0: entered promiscuous mode [ 320.571246][T16236] netlink: 'syz.4.2972': attribute type 1 has an invalid length. [ 320.596634][T16235] bond9: entered promiscuous mode [ 320.618321][T16235] bond0: left promiscuous mode [ 320.623196][T16235] bond9: left promiscuous mode [ 320.764076][T16241] netlink: 'syz.3.2973': attribute type 11 has an invalid length. [ 320.966909][T15992] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 321.067032][T15992] veth0_vlan: entered promiscuous mode [ 321.093678][T15992] veth1_vlan: entered promiscuous mode [ 321.094405][T16268] netlink: 'syz.1.2980': attribute type 2 has an invalid length. [ 321.112300][T16268] netlink: 'syz.1.2980': attribute type 2 has an invalid length. [ 321.142396][T15992] veth0_macvtap: entered promiscuous mode [ 321.154629][T15992] veth1_macvtap: entered promiscuous mode [ 321.176490][T15992] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 321.199341][T15992] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 321.222926][ T7379] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.240329][ T7379] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.259564][ T7379] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.277305][ T7379] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.355423][ T5871] Bluetooth: hci1: command tx timeout [ 321.373003][T16279] dummy0: entered promiscuous mode [ 321.379577][T16279] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 321.401306][T16279] x_tables: ip_tables: MARK.2 target: invalid size 8 (kernel) != (user) 16 [ 321.926063][ T1105] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 321.956612][ T1105] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 322.069170][ T7375] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 322.092876][ T7375] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 322.269126][T16291] syzkaller1: entered promiscuous mode [ 322.274917][T16291] syzkaller1: entered allmulticast mode [ 323.073671][T16339] veth0: entered promiscuous mode [ 323.107450][T16338] veth0: left promiscuous mode [ 323.244162][T16345] __nla_validate_parse: 106 callbacks suppressed [ 323.244184][T16345] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2999'. [ 323.294675][T16345] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 323.543051][T16353] netlink: 108 bytes leftover after parsing attributes in process `syz.0.3003'. [ 323.642683][ T5877] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 323.666743][ T5877] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 323.716913][ T5877] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 323.751017][ T5877] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 323.761013][T16363] tipc: Enabled bearer , priority 12 [ 323.772232][ T5877] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 324.124368][T16376] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3007'. [ 325.492042][ T78] tipc: Disabling bearer [ 325.522264][ T78] bond8 (unregistering): (slave gretap2): Releasing backup interface [ 325.835496][ T5877] Bluetooth: hci0: command tx timeout [ 326.022016][ T78] bond0 (unregistering): (slave bond9): Releasing backup interface [ 326.030907][ T78] bond0 (unregistering): Released all slaves [ 326.044673][ T78] bond1 (unregistering): Released all slaves [ 326.139542][ T78] bond2 (unregistering): Released all slaves [ 326.232329][ T78] bond3 (unregistering): Released all slaves [ 326.323696][ T78] bond4 (unregistering): Released all slaves [ 326.414463][ T78] bond5 (unregistering): Released all slaves [ 326.428104][ T78] bond6 (unregistering): Released all slaves [ 326.523301][ T78] bond7 (unregistering): Released all slaves [ 326.538490][ T78] bond8 (unregistering): Released all slaves [ 326.634532][ T78] bond9 (unregistering): Released all slaves [ 326.650167][T16356] syzkaller0 speed is unknown, defaulting to 1000 [ 326.662991][T16388] tipc: Enabled bearer , priority 0 [ 326.846774][T16388] tipc: Disabling bearer [ 326.900749][ T78] : left promiscuous mode [ 327.002595][T16407] tipc: Started in network mode [ 327.010163][T16415] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3020'. [ 327.011384][T16407] tipc: Node identity d64118b16731, cluster identity 4711 [ 327.039599][T16407] tipc: Enabled bearer , priority 0 [ 327.050218][T16408] syzkaller0: entered promiscuous mode [ 327.058955][T16408] syzkaller0: entered allmulticast mode [ 327.073743][ T78] tipc: Disabling bearer [ 327.117063][ T78] tipc: Disabling bearer [ 327.137798][ T78] tipc: Left network mode [ 327.160456][T16406] tipc: Resetting bearer [ 327.202336][T16406] tipc: Disabling bearer [ 327.754631][T16454] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3032'. [ 327.791425][T16356] chnl_net:caif_netlink_parms(): no params data found [ 327.839016][T16459] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.3034'. [ 327.899946][T16458] netlink: 212404 bytes leftover after parsing attributes in process `syz.4.3033'. [ 327.915849][ T5877] Bluetooth: hci0: command tx timeout [ 327.936630][T16460] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3032'. [ 328.041373][T16471] Bluetooth: MGMT ver 1.23 [ 328.221407][T16483] syzkaller1: entered allmulticast mode [ 328.313584][T16489] IPVS: length: 36 != 8 [ 328.359863][T16356] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.372538][T16356] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.383645][T16356] bridge_slave_0: entered allmulticast mode [ 328.400574][T16356] bridge_slave_0: entered promiscuous mode [ 328.454534][T16356] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.461998][T16494] netlink: 84 bytes leftover after parsing attributes in process `syz.1.3044'. [ 328.462093][T16356] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.484182][T16356] bridge_slave_1: entered allmulticast mode [ 328.519094][T16356] bridge_slave_1: entered promiscuous mode [ 328.556580][T16502] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3045'. [ 328.716641][T16508] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3048'. [ 328.767004][T16356] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 328.791105][T16356] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 328.842545][T16516] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3051'. [ 328.861982][T16515] netlink: 108 bytes leftover after parsing attributes in process `syz.1.3049'. [ 328.889485][T16516] batman_adv: batadv0: Removing interface: wlan1 [ 328.912056][T16515] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3049'. [ 328.938155][T16516] bond5: (slave gretap1): Releasing active interface [ 328.950297][T16516] gretap1: left promiscuous mode [ 328.964055][T16516] gretap1: left allmulticast mode [ 329.192141][T16356] team0: Port device team_slave_0 added [ 329.239662][T16356] team0: Port device team_slave_1 added [ 329.358934][T16543] netlink: 100 bytes leftover after parsing attributes in process `syz.4.3057'. [ 329.370283][T16356] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 329.383165][T16356] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 329.412837][T16544] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 329.418326][T16356] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 329.477969][T16356] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 329.487215][T16356] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 329.518888][T16356] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 329.641024][T16552] validate_nla: 32 callbacks suppressed [ 329.641045][T16552] netlink: 'syz.3.3061': attribute type 1 has an invalid length. [ 329.663538][T16552] nbd: error processing sock list [ 329.670047][T16552] block nbd3: shutting down sockets [ 329.726643][T16356] hsr_slave_0: entered promiscuous mode [ 329.740836][T16356] hsr_slave_1: entered promiscuous mode [ 329.759318][T16356] debugfs: 'hsr0' already exists in 'hsr' [ 329.769401][T16356] Cannot create hsr debugfs directory [ 329.995888][ T5877] Bluetooth: hci0: command tx timeout [ 330.042290][ T7561] syzkaller0 speed is unknown, defaulting to 1000 [ 330.068803][ T7561] infiniband syz2: ib_query_port failed (-19) [ 330.590645][T16591] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3072'. [ 330.668286][T16594] netlink: 'syz.3.3073': attribute type 1 has an invalid length. [ 330.714983][T16594] netlink: 184 bytes leftover after parsing attributes in process `syz.3.3073'. [ 330.724466][T16597] netlink: 'syz.1.3074': attribute type 9 has an invalid length. [ 330.747212][T16594] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3073'. [ 330.783058][ T78] hsr_slave_0: left promiscuous mode [ 330.803768][ T78] hsr_slave_1: left promiscuous mode [ 330.823357][T16608] netlink: 'syz.1.3074': attribute type 9 has an invalid length. [ 332.082882][ T5877] Bluetooth: hci0: command tx timeout [ 332.253398][ T5977] IPVS: starting estimator thread 0... [ 332.273579][T16634] hsr_slave_0 (unregistering): left promiscuous mode [ 332.348455][T16638] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 332.355702][T16646] IPVS: using max 31 ests per chain, 74400 per kthread [ 332.406446][ T55] block nbd2: Possible stuck request ffff888025525080: control (read@0,1024B). Runtime 60 seconds [ 332.418505][ T55] block nbd2: Possible stuck request ffff888025525240: control (read@1024,1024B). Runtime 60 seconds [ 332.429794][ T55] block nbd2: Possible stuck request ffff888025525400: control (read@2048,1024B). Runtime 60 seconds [ 332.441059][ T55] block nbd2: Possible stuck request ffff8880255255c0: control (read@3072,1024B). Runtime 60 seconds [ 332.524282][T16356] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 332.599740][T16356] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 332.632732][T16356] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 332.685018][T16356] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 332.713705][T16665] netlink: 'syz.0.3091': attribute type 1 has an invalid length. [ 332.788271][T16668] sctp: [Deprecated]: syz.4.3092 (pid 16668) Use of int in maxseg socket option. [ 332.788271][T16668] Use struct sctp_assoc_value instead [ 332.864607][T16680] IPVS: set_ctl: invalid protocol: 94 127.0.0.1:20003 [ 332.909380][ T78] IPVS: stop unused estimator thread 0... [ 333.170668][T16356] 8021q: adding VLAN 0 to HW filter on device bond0 [ 333.249717][T16356] 8021q: adding VLAN 0 to HW filter on device team0 [ 333.300992][T16699] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 333.312276][T16702] macvtap1: entered promiscuous mode [ 333.319419][T16702] vlan0: entered promiscuous mode [ 333.325352][T16702] macvtap1: entered allmulticast mode [ 333.331068][T16702] vlan0: entered allmulticast mode [ 333.336938][T16702] veth0_vlan: entered allmulticast mode [ 333.400207][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.407398][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 333.448338][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.455532][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 333.621698][T16717] netlink: 'syz.4.3106': attribute type 10 has an invalid length. [ 333.655117][T16717] veth0_vlan: entered allmulticast mode [ 333.688564][T16717] tipc: Resetting bearer [ 333.893326][T16737] macvlan2: entered promiscuous mode [ 333.914464][T16737] macvlan2: entered allmulticast mode [ 333.937639][T16737] veth1_to_bond: entered promiscuous mode [ 333.953077][T16737] veth1_to_bond: entered allmulticast mode [ 333.972494][T16737] team0: Port device macvlan2 added [ 334.099385][T16356] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 334.244362][T16356] veth0_vlan: entered promiscuous mode [ 334.291840][T16356] veth1_vlan: entered promiscuous mode [ 334.358511][T16356] veth0_macvtap: entered promiscuous mode [ 334.418223][T16356] veth1_macvtap: entered promiscuous mode [ 334.489787][T16356] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 334.542845][T16356] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 334.581474][T16763] pim6reg1: entered promiscuous mode [ 334.603456][T16763] pim6reg1: entered allmulticast mode [ 334.651842][T16767] __nla_validate_parse: 6 callbacks suppressed [ 334.651858][T16767] netlink: 256 bytes leftover after parsing attributes in process `syz.3.3117'. [ 334.681357][ T78] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.718322][ T78] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.749061][ T78] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.773977][ T78] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.809489][T16769] sctp: [Deprecated]: syz.1.3116 (pid 16769) Use of struct sctp_assoc_value in delayed_ack socket option. [ 334.809489][T16769] Use struct sctp_sack_info instead [ 335.016769][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 335.024629][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 335.160348][ T1164] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 335.179026][ T1164] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 335.503077][T16785] "syz.3.3123" (16785) uses obsolete ecb(arc4) skcipher [ 335.609543][T16801] hsr0 speed is unknown, defaulting to 1000 [ 335.629112][T16801] hsr0 speed is unknown, defaulting to 1000 [ 335.657884][T16801] hsr0 speed is unknown, defaulting to 1000 [ 335.786232][T16801] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 335.917336][T16801] hsr0 speed is unknown, defaulting to 1000 [ 335.946806][T16801] hsr0 speed is unknown, defaulting to 1000 [ 335.967283][T16801] hsr0 speed is unknown, defaulting to 1000 [ 335.982543][T16801] hsr0 speed is unknown, defaulting to 1000 [ 336.013206][T16801] hsr0 speed is unknown, defaulting to 1000 [ 336.028226][T16801] hsr0 speed is unknown, defaulting to 1000 [ 336.046991][T16801] hsr0 speed is unknown, defaulting to 1000 [ 336.350237][T16827] netlink: 'syz.4.3138': attribute type 12 has an invalid length. [ 336.457671][T16827] IPVS: ip_vs_add_dest(): server weight less than zero [ 336.467430][ T5871] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 336.482325][ T5871] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 336.497631][ T5871] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 336.521116][ T5871] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 336.532055][ T5871] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 336.720131][T16845] delete_channel: no stack [ 336.826312][T16851] unknown channel width for channel at 909000KHz? [ 336.834297][T16851] unknown channel width for channel at 909000KHz? [ 336.850647][T16851] unknown channel width for channel at 909000KHz? [ 336.953768][T16859] netlink: 'syz.4.3147': attribute type 3 has an invalid length. [ 337.031182][T16863] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3148'. [ 337.253850][ T5976] IPVS: starting estimator thread 0... [ 337.345112][T16881] IPVS: using max 25 ests per chain, 60000 per kthread [ 337.633304][T16831] hsr0 speed is unknown, defaulting to 1000 [ 337.895268][T16902] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3155'. [ 337.918003][T16902] netlink: 6 bytes leftover after parsing attributes in process `syz.4.3155'. [ 337.924522][T16900] tipc: Enabled bearer , priority 0 [ 337.975352][T16900] syzkaller0: entered promiscuous mode [ 337.980894][T16900] syzkaller0: entered allmulticast mode [ 338.043894][T16900] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 338.087094][T16900] caif0: mtu less than device minimum [ 338.108009][T16899] tipc: Resetting bearer [ 338.149400][T16899] tipc: Disabling bearer [ 338.189262][T16831] chnl_net:caif_netlink_parms(): no params data found [ 338.450712][T16920] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3162'. [ 338.459300][T16922] vlan5: entered promiscuous mode [ 338.465103][T16922] bridge0: entered promiscuous mode [ 338.503684][T16920] netlink: 180 bytes leftover after parsing attributes in process `syz.0.3162'. [ 338.655151][ T5877] Bluetooth: hci2: command tx timeout [ 338.923240][T16831] bridge0: port 1(bridge_slave_0) entered blocking state [ 338.933695][T16831] bridge0: port 1(bridge_slave_0) entered disabled state [ 338.945120][T16831] bridge_slave_0: entered allmulticast mode [ 338.962329][T16831] bridge_slave_0: entered promiscuous mode [ 339.186814][T16936] lo: entered promiscuous mode [ 339.219680][T16936] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 339.269992][T16831] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.292669][T16831] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.324233][T16831] bridge_slave_1: entered allmulticast mode [ 339.360092][T16831] bridge_slave_1: entered promiscuous mode [ 339.897144][T16963] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3172'. [ 340.080681][T16973] openvswitch: netlink: Duplicate or invalid key (type 0). [ 340.116911][T16973] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 340.196508][T16955] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3169'. [ 340.215553][T16977] openvswitch: netlink: Duplicate or invalid key (type 0). [ 340.253694][T16977] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 340.309518][T16955] netlink: 43 bytes leftover after parsing attributes in process `syz.4.3169'. [ 340.368288][T16955] netlink: 'syz.4.3169': attribute type 5 has an invalid length. [ 340.452289][T16831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 340.471256][T16955] netlink: 43 bytes leftover after parsing attributes in process `syz.4.3169'. [ 340.513614][T16831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 340.580584][T16982] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3174'. [ 340.627106][T16968] vlan0: entered promiscuous mode [ 340.729452][ T5877] Bluetooth: hci2: command tx timeout [ 340.744100][T16831] team0: Port device team_slave_0 added [ 340.781526][T16984] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3174'. [ 340.830400][T16831] team0: Port device team_slave_1 added [ 341.108900][T16831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 341.151530][T16831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 341.254510][T16831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 341.346894][T16831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 341.408068][T16831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 341.590530][T16831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 342.077420][T16831] hsr_slave_0: entered promiscuous mode [ 342.147204][T16831] hsr_slave_1: entered promiscuous mode [ 342.422679][T17019] dvmrp1: entered allmulticast mode [ 342.795750][ T5877] Bluetooth: hci2: command tx timeout [ 342.844441][T17029] netlink: 'syz.4.3186': attribute type 12 has an invalid length. [ 343.195463][T17041] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3189'. [ 343.614737][ C0] sched: DL replenish lagged too much [ 343.626890][T16831] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 343.690671][T16831] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.762148][T16831] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 343.813332][T17051] netlink: 'syz.4.3191': attribute type 28 has an invalid length. [ 343.842215][T17051] netlink: 'syz.4.3191': attribute type 3 has an invalid length. [ 343.875545][T17051] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3191'. [ 344.203896][T17059] netlink: 27 bytes leftover after parsing attributes in process `syz.0.3194'. [ 344.536022][ T30] audit: type=1107 audit(1754760703.350:3): pid=17069 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='nÃqºcíÒ¹—¥¾{Q' [ 344.678848][T17072] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.3199'. [ 344.875488][ T5877] Bluetooth: hci2: command tx timeout [ 345.114133][T17078] netlink: 'syz.1.3201': attribute type 4 has an invalid length. [ 345.283322][T17078] netlink: 'syz.1.3201': attribute type 4 has an invalid length. [ 345.849821][ T25] block nbd0: Possible stuck request ffff8880254871c0: control (read@0,1024B). Runtime 210 seconds [ 345.861326][ T25] block nbd0: Possible stuck request ffff888025487380: control (read@1024,1024B). Runtime 210 seconds [ 345.872981][ T25] block nbd0: Possible stuck request ffff888025487540: control (read@2048,1024B). Runtime 210 seconds [ 345.891507][ T25] block nbd0: Possible stuck request ffff888025487700: control (read@3072,1024B). Runtime 210 seconds [ 346.554557][T16831] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 346.594340][T16831] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.622568][T16831] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 347.171958][T17111] netlink: 'syz.2.3211': attribute type 10 has an invalid length. [ 347.191899][T17111] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.206261][T17111] bridge_slave_1: left allmulticast mode [ 347.212162][T17111] bridge_slave_1: left promiscuous mode [ 347.219061][T17111] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.256259][T17112] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3211'. [ 347.271108][T17111] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 347.284436][T17112] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3211'. [ 348.080204][T17114] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3212'. [ 348.637775][T17127] netlink: 'syz.1.3217': attribute type 1 has an invalid length. [ 348.752732][T17127] 8021q: adding VLAN 0 to HW filter on device bond2 [ 348.930490][T17131] bond2: (slave wlan0): Enslaving as an active interface with a down link [ 348.961052][T17132] vlan2: entered allmulticast mode [ 348.968162][T17132] veth1: entered allmulticast mode [ 348.974490][T17132] veth1: entered promiscuous mode [ 348.987978][T17132] veth1: left promiscuous mode [ 349.004353][T17132] bond2: (slave vlan2): making interface the new active one [ 349.026093][T17132] bond2: (slave wlan0): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 349.052068][T17132] veth1: entered promiscuous mode [ 349.059559][T17132] vlan2: entered promiscuous mode [ 349.076738][T17132] bond2: (slave vlan2): Enslaving as an active interface with an up link [ 349.096195][T17137] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 349.624520][T17154] tipc: Enabling of bearer rejected, failed to enable media [ 349.965518][T16831] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 349.991258][T17165] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 350.035252][T16831] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.081235][T16831] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 350.132036][T17170] netlink: 'syz.4.3227': attribute type 4 has an invalid length. [ 351.472514][T17179] 8021q: VLANs not supported on lo [ 351.481484][T17179] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3229'. [ 351.497611][T17179] bridge_slave_0: left allmulticast mode [ 351.503481][T17179] bridge_slave_0: left promiscuous mode [ 351.513280][T17179] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.243088][T16831] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 362.259870][T16831] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.274020][T16831] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 362.515366][ T1105] vlan2: left promiscuous mode [ 363.136030][T17223] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.3238'. [ 363.821560][T17237] netem: change failed [ 363.991576][T17238] bond2: (slave wlan0): Releasing active interface [ 364.029990][T17238] bond2: (slave wlan0): the permanent HWaddr of slave - 08:02:11:00:00:00 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 364.079258][T17238] vlan2: entered promiscuous mode [ 364.413985][T17245] tipc: New replicast peer: 255.255.255.255 [ 364.430731][T17245] tipc: Enabled bearer , priority 10 [ 364.685833][T16831] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 364.719380][T16831] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 364.762206][T16831] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 364.803526][T16831] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 365.021143][T16831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 365.078492][T16831] 8021q: adding VLAN 0 to HW filter on device team0 [ 365.112451][ T1164] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.119681][ T1164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 365.171326][ T1164] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.178571][ T1164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 365.545761][ T7559] tipc: Node number set to 2976913585 [ 365.746012][T16831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 365.824275][T17262] netlink: 'syz.0.3246': attribute type 1 has an invalid length. [ 365.920867][ T25] block nbd2: Possible stuck request ffff888025525080: control (read@0,1024B). Runtime 90 seconds [ 365.933273][ T25] block nbd2: Possible stuck request ffff888025525240: control (read@1024,1024B). Runtime 90 seconds [ 365.946836][ T25] block nbd2: Possible stuck request ffff888025525400: control (read@2048,1024B). Runtime 90 seconds [ 365.958636][ T25] block nbd2: Possible stuck request ffff8880255255c0: control (read@3072,1024B). Runtime 90 seconds [ 365.989309][T16831] veth0_vlan: entered promiscuous mode [ 366.046943][T16831] veth1_vlan: entered promiscuous mode [ 366.170987][T16831] veth0_macvtap: entered promiscuous mode [ 366.232682][T16831] veth1_macvtap: entered promiscuous mode [ 366.539455][T16831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 366.701312][T16831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 366.843244][ T7378] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.875419][ T7378] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.021807][ T7378] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.082337][ T7378] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.599034][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 367.655589][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 367.705482][T17291] netlink: 'syz.1.3256': attribute type 1 has an invalid length. [ 367.742407][T17297] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3257'. [ 367.871157][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 367.904456][T17298] bridge17: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 367.945937][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 368.123915][T17304] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3259'. [ 370.240803][ T5871] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 370.254109][ T5871] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 370.264143][ T5871] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 370.274172][ T5871] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 370.284332][ T5871] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 370.692614][T17339] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3272'. [ 370.779448][T17345] sctp: [Deprecated]: syz.1.3274 (pid 17345) Use of struct sctp_assoc_value in delayed_ack socket option. [ 370.779448][T17345] Use struct sctp_sack_info instead [ 371.048089][T17351] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 372.600882][ T5871] Bluetooth: hci3: command tx timeout [ 374.825077][ T5871] Bluetooth: hci3: command tx timeout [ 377.994247][ T5871] Bluetooth: hci3: command tx timeout [ 378.772398][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 380.551261][ T5877] Bluetooth: hci3: command tx timeout [ 423.555248][T17130] vlan2: left promiscuous mode [ 431.989959][ T5877] Bluetooth: hci5: command 0x0406 tx timeout [ 437.412160][ T5877] Bluetooth: hci1: command 0x0406 tx timeout [ 440.043850][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 448.184302][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 478.590959][ T5883] Bluetooth: hci2: command 0x0406 tx timeout [ 501.860592][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 520.607341][T17260] block nbd2: Possible stuck request ffff888025525080: control (read@0,1024B). Runtime 120 seconds [ 520.637040][T17260] block nbd2: Possible stuck request ffff888025525240: control (read@1024,1024B). Runtime 120 seconds [ 520.667239][ T25] block nbd0: Possible stuck request ffff8880254871c0: control (read@0,1024B). Runtime 240 seconds [ 520.696244][ T25] block nbd0: Possible stuck request ffff888025487380: control (read@1024,1024B). Runtime 240 seconds [ 520.725713][T17260] block nbd2: Possible stuck request ffff888025525400: control (read@2048,1024B). Runtime 120 seconds [ 520.755864][ T25] block nbd0: Possible stuck request ffff888025487540: control (read@2048,1024B). Runtime 240 seconds [ 520.818211][T17260] block nbd2: Possible stuck request ffff8880255255c0: control (read@3072,1024B). Runtime 120 seconds [ 520.848203][ T25] block nbd0: Possible stuck request ffff888025487700: control (read@3072,1024B). Runtime 240 seconds [ 562.914980][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 580.664731][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 580.671876][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P17365/1:b..l [ 580.680468][ C0] rcu: (detected by 0, t=10503 jiffies, g=58685, q=1829751 ncpus=2) [ 580.688556][ C0] task:syz.2.3279 state:R running task stack:28008 pid:17365 tgid:17363 ppid:16356 task_flags:0x400040 flags:0x00004000 [ 580.703390][ C0] Call Trace: [ 580.706682][ C0] [ 580.709633][ C0] __schedule+0x1798/0x4cc0 [ 580.714176][ C0] ? __pfx___schedule+0x10/0x10 [ 580.719062][ C0] ? preempt_schedule_irq+0xaa/0x150 [ 580.724449][ C0] preempt_schedule_irq+0xb5/0x150 [ 580.729582][ C0] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 580.735327][ C0] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 580.741149][ C0] irqentry_exit+0x6f/0x90 [ 580.745581][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 580.751596][ C0] RIP: 0010:__rcu_read_unlock+0xd/0xe0 [ 580.757073][ C0] Code: 89 df e8 c6 ff 7b 00 eb d2 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 41 57 41 56 41 55 41 54 53 <49> bf 00 00 00 00 00 fc ff df 65 48 8b 3c 25 08 f0 9f 92 48 8d 9f [ 580.776704][ C0] RSP: 0018:ffffc9000411f4c8 EFLAGS: 00000286 [ 580.782801][ C0] RAX: af31b3ba97de4200 RBX: ffffffff90404001 RCX: af31b3ba97de4200 [ 580.790790][ C0] RDX: 0000000000000002 RSI: ffffffff8dba39a7 RDI: ffffffff8be32680 [ 580.798779][ C0] RBP: dffffc0000000000 R08: ffffc9000411faa0 R09: 0000000000000000 [ 580.806769][ C0] R10: ffffc9000411f618 R11: fffff52000823ec5 R12: ffffc9000411fab0 [ 580.814751][ C0] R13: ffffc90004118000 R14: ffffc9000411f5c8 R15: ffffffff8172c195 [ 580.822783][ C0] ? unwind_next_frame+0xa5/0x2390 [ 580.828000][ C0] ? unwind_next_frame+0xa5/0x2390 [ 580.833129][ C0] unwind_next_frame+0x19ae/0x2390 [ 580.838263][ C0] ? unwind_next_frame+0xa5/0x2390 [ 580.843568][ C0] ? __kasan_slab_alloc+0x22/0x80 [ 580.848620][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 580.854876][ C0] arch_stack_walk+0x11c/0x150 [ 580.859658][ C0] ? __kmalloc_noprof+0x224/0x4f0 [ 580.864699][ C0] stack_trace_save+0x9c/0xe0 [ 580.869384][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 580.874797][ C0] save_stack+0xf5/0x1f0 [ 580.879077][ C0] ? __pfx_save_stack+0x10/0x10 [ 580.884025][ C0] ? __free_frozen_pages+0xbc4/0xd30 [ 580.889317][ C0] ? __put_partials+0x156/0x1a0 [ 580.894183][ C0] ? put_cpu_partial+0x17c/0x250 [ 580.899131][ C0] ? __slab_free+0x2d5/0x3c0 [ 580.903811][ C0] ? qlist_free_all+0x97/0x140 [ 580.908587][ C0] ? kasan_quarantine_reduce+0x148/0x160 [ 580.914230][ C0] ? __kasan_slab_alloc+0x22/0x80 [ 580.919294][ C0] __reset_page_owner+0x71/0x1f0 [ 580.924251][ C0] __free_frozen_pages+0xbc4/0xd30 [ 580.929403][ C0] __put_partials+0x156/0x1a0 [ 580.934097][ C0] put_cpu_partial+0x17c/0x250 [ 580.938875][ C0] ? put_cpu_partial+0x6d/0x250 [ 580.943739][ C0] __slab_free+0x2d5/0x3c0 [ 580.948164][ C0] ? __phys_addr+0xd3/0x180 [ 580.952765][ C0] qlist_free_all+0x97/0x140 [ 580.957371][ C0] kasan_quarantine_reduce+0x148/0x160 [ 580.963101][ C0] __kasan_slab_alloc+0x22/0x80 [ 580.967964][ C0] __kmalloc_noprof+0x224/0x4f0 [ 580.972858][ C0] ? tomoyo_encode+0x28b/0x550 [ 580.977987][ C0] tomoyo_encode+0x28b/0x550 [ 580.982597][ C0] tomoyo_realpath_from_path+0x58d/0x5d0 [ 580.988253][ C0] ? tomoyo_domain+0xd9/0x130 [ 580.992951][ C0] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 580.998598][ C0] tomoyo_path_number_perm+0x1e8/0x5a0 [ 581.004072][ C0] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 581.010075][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 581.015492][ C0] ? __lock_acquire+0xab9/0xd20 [ 581.020377][ C0] ? __fget_files+0x2a/0x420 [ 581.024984][ C0] ? __fget_files+0x2a/0x420 [ 581.029592][ C0] ? __fget_files+0x3a0/0x420 [ 581.034292][ C0] ? __fget_files+0x2a/0x420 [ 581.038906][ C0] security_file_ioctl+0xcb/0x2d0 [ 581.043949][ C0] __se_sys_ioctl+0x47/0x170 [ 581.048553][ C0] do_syscall_64+0xfa/0x3b0 [ 581.053077][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 581.059150][ C0] ? __switch_to_asm+0x39/0x70 [ 581.063931][ C0] ? clear_bhb_loop+0x60/0xb0 [ 581.068623][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 581.074613][ C0] RIP: 0033:0x7fbbe8f8e7eb [ 581.079043][ C0] RSP: 002b:00007fbbe9eb7050 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 581.087472][ C0] RAX: ffffffffffffffda RBX: 00007fbbe91b6128 RCX: 00007fbbe8f8e7eb [ 581.095567][ C0] RDX: 0000000000000000 RSI: 0000000000006364 RDI: 00000000000000d9 [ 581.103545][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007ffdc87a1ef7 [ 581.111527][ C0] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000001 [ 581.119506][ C0] R13: 00007fbbe91b6128 R14: 00007ffdc87a1e10 R15: 00007ffdc87a1ef8 [ 581.127511][ C0] [ 585.679238][ T31] INFO: task kworker/u9:9:5884 blocked for more than 147 seconds. [ 585.700785][ T31] Not tainted 6.16.0-syzkaller-12084-g33caa208dba6 #0