last executing test programs: 4.537477971s ago: executing program 4 (id=2251): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x4432150fdb1053ba, 0x90, 0x62, 0x7, 0x48, @ipv4={'\x00', '\xff\xff', @local}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10, 0x40, 0x0, 0x4}}) setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x0, 0x488, &(0x7f0000000180)={{0x11, @private=0xa010101, 0x4e20, 0x3, 'ovf\x00', 0x0, 0x769, 0x42}, {@remote, 0x4e23, 0x1, 0x81, 0x1, 0x9}}, 0x44) sendmsg$nl_route_sched(r0, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@gettfilter={0x34, 0x2e, 0xd04, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xf, 0xe}, {0x1, 0x4}, {0xfff0, 0x9}}, [{0x8, 0xb, 0x1}, {0x8, 0xb, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x0) 4.321656563s ago: executing program 4 (id=2254): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newlink={0x58, 0x10, 0x8, 0x70bd2c, 0x0, {0x0, 0x0, 0x4, 0x0, 0x48723}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast2}}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0xa}]}}}, @IFLA_MASTER={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x8044) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r4, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6, 0x0, 0x6c}]}, 0x10) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x83ed3498554d61f7) sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f00000005c0)={0x274, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}]}, @TIPC_NLA_MEDIA={0x34, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}]}, @TIPC_NLA_NODE={0x24, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x1a, 0x3, "9091284d9a3e4d63e20324022ee341e23b0ba11b881f"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'macsec0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xb}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8001}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7f}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7fff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7f}]}, @TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x85}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xffffb2cc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xbb}]}, @TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x43, 0x4, {'gcm(aes)\x00', 0x1b, "2f1b3714e19c31a45e996182ea892c19f920009c9b418292437cdd"}}]}, @TIPC_NLA_MEDIA={0xe8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ffb}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4ce}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x274}}, 0x40000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) readv(r5, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000040)=""/30, 0x1e}], 0x2) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r6, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="c40000002100080027bd7000ffdbdf250a14800706000000000001000800040009000000140002002001000000000000000000000000000214000200ff02000000000000000000000000000114000200fe80000000000000020000000000003014000200fe80000000000000000000000000002114000100fe80000000000000000000000000000e140002000000000000000000000000000000000014000200fc01000000000000000000000000000114000200fe88000000000000000000000000010165a513700e584472a9f8e4ea07167ffc26210d6640fd9b6517761c967b3d104fb7432899fc74137b95e630b23fdaf7e27ea11c0fd67c094de6fe"], 0xc4}, 0x1, 0x0, 0x0, 0x20004010}, 0x44050) 3.633124604s ago: executing program 2 (id=2258): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="0500"/12, @ANYRES32, @ANYBLOB="32e9e2ea96a40c15d21508205a6760df4accede349e80480934cd518721af6b4396a53fee791c327f124133cbdcab939e100afa75a27d70e0ecb151074d25fd5be4684bb42a87055fa3a2afaddc0df9e62b738d48530ec97b52257a6b643aee689a0630dc10b547dcf9f469f", @ANYRES64=0x0], 0x10) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="0500"/12, @ANYRES32, @ANYBLOB="32e9e2ea96a40c15d21508205a6760df4accede349e80480934cd518721af6b4396a53fee791c327f124133cbdcab939e100afa75a27d70e0ecb151074d25fd5be4684bb42a87055fa3a2afaddc0df9e62b738d48530ec97b52257a6b643aee689a0630dc10b547dcf9f469f", @ANYRES64=0x0], 0x10) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000850000007d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x47, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r1}, 0xc) r2 = socket(0x8, 0x3, 0x0) ioctl$sock_netrom_SIOCADDRT(r2, 0x61d8, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, 0x0, &(0x7f0000000080)='syzkaller\x00'}, 0x94) accept(r0, 0x0, &(0x7f0000000300)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b0000000e000000cc0002000600000005000000", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x50) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b0000000e000000cc0002000600000005000000", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000200)='P', &(0x7f0000000740), 0x4af, r4}, 0x38) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000200)='P', &(0x7f0000000740), 0x4af, r4}, 0x38) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r2) socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'ipvlan1\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=ANY=[@ANYBLOB="8c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0ffe0000000000005000128009000100766c616e0000000040000280060001000000000004000480280003800ca10100400000000600000089e6784300040000000000000c00010006000000090000000600050088a800000800", @ANYRES32=r6], 0x8c}, 0x1, 0xba01}, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, &(0x7f0000000080)=""/231, &(0x7f0000000180), &(0x7f0000000240), 0x2, r4}, 0x38) (async) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, &(0x7f0000000080)=""/231, &(0x7f0000000180), &(0x7f0000000240), 0x2, r4}, 0x38) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002}) writev(r3, &(0x7f00000002c0)=[{&(0x7f0000000080)="0bc3ff", 0x3}, {&(0x7f0000000000)='G', 0x1}, {&(0x7f0000000240)="d336bd7524", 0x5}], 0x3) (async) writev(r3, &(0x7f00000002c0)=[{&(0x7f0000000080)="0bc3ff", 0x3}, {&(0x7f0000000000)='G', 0x1}, {&(0x7f0000000240)="d336bd7524", 0x5}], 0x3) 3.385860624s ago: executing program 2 (id=2260): socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x40, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) pwrite64(r0, &(0x7f00000000c0)="40a616afe62597edbee8cbd95ea796985fe896ea48fe9ec467cb33df72d44bd3c91395322f4b14f3ca3faa942852811b14b92dcde83791b9b01bf9cdda30b05cc5179aa9378b4aa2fffc658541ee868bf173e8b0c3a5004cffcf7f5254bbd1835cac1465659e3bfde42e25e93e71d5ed68d30827b763e9222ffc46b37b8d69948c92966600d3191ea0e222eeb3433d9129c91c936429791f52f4eda27fcb", 0x9e, 0x7) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random}) ppoll(&(0x7f0000000700)=[{r2, 0xa00}], 0x1, 0x0, 0x0, 0x0) 3.103790625s ago: executing program 4 (id=2262): r0 = accept4(0xffffffffffffffff, &(0x7f00000003c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, &(0x7f0000000440)=0x80, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000480)={0x0, 0xac}, &(0x7f00000004c0)=0x8) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000500)={r1, 0x0, 0x2, 0x4}, 0x10) socket$inet_sctp(0x2, 0x1, 0x84) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$cgroup_ro(r2, &(0x7f0000000080)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x54, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x24, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xd13a}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x8}, @TCA_FQ_PIE_ECN={0x8, 0xa, 0x1}, @TCA_FQ_PIE_TARGET={0x8}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) (async) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r6, 0x84, 0xf, &(0x7f0000000300)={r1, @in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x200005, 0x3, 0x8, 0x5, 0x3}, &(0x7f00000001c0)=0x98) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000200)={0x7, 0x3, 0x4, 0x400, 0x520, 0x0, 0x10, 0x3, r8}, 0x20) (async) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="2400000040000b6191dea0b64eff6f0003000000080002000700000006000180000000008f6f4c"], 0x24}}, 0x4040080) r9 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) (async) setsockopt$XDP_TX_RING(r9, 0x11b, 0x3, &(0x7f00000001c0)=0x200000, 0x4) r10 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r10, 0x29, 0xca, &(0x7f0000000000)={0x2, 0x1, 0x0, 0x0, 0x9}, 0xc) (async) setsockopt$MRT6_FLUSH(r10, 0x29, 0xd4, &(0x7f0000000080)=0x9, 0x4) r11 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r11, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) (async) r12 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r12, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1800000007140100000032c83a110000050042"], 0x18}}, 0x0) (async) r13 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="400100001000130400000000fbdbdf25fe800000000000000000000000000000ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffff7f000001000000002b000000ac14140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000008000000000000000000000000000040000000000000000000000010a000000000000000000000050001200726663343130362967636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000004000000025cac521"], 0x140}}, 0x4000080) (async) sendmmsg(r11, &(0x7f0000000280), 0x0, 0x4008000) (async) recvmmsg(r11, &(0x7f0000000d00), 0xf000, 0x10002, 0x0) (async) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000100)={@mcast1, 0x0, 0x0, 0x1, 0x4, 0x4, 0xffff}, 0x0) setsockopt$bt_rfcomm_RFCOMM_LM(r11, 0x12, 0x3, &(0x7f0000000100), 0x4) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) 2.061825629s ago: executing program 0 (id=2267): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0, 0x0, 0x40}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x58}}, 0x80) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0, 0x0, 0x40}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x58}}, 0x80) (async) 2.05801334s ago: executing program 1 (id=2268): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="98000000100001002abd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="a009000000000000140003006e657464657673696d3000000000000008002800babc00005c0016805800018054000c8014"], 0x98}, 0x1, 0x0, 0x0, 0x24040854}, 0x40000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) socket(0x11, 0x1, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x0) 2.052678722s ago: executing program 2 (id=2269): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000ee, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f00000001c0)={0x1, 0xfff, 0x0, 0x8, 0x9, 0xd, 0x4, 0x5, r3}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001780)={0x1b, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r5}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="4c0000003c0007010000000000000000017c00001c00fc80180008800e0031002a27262d2e2b2a7b2e0000000400a7800c00018006000600800a0000080002"], 0x4c}, 0x1, 0x0, 0x0, 0x8}, 0x400c040) socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000ee, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) shutdown(r2, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) (async) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f00000001c0)={0x1, 0xfff, 0x0, 0x8, 0x9, 0xd, 0x4, 0x5, r3}, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000001780)={0x1b, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r5}, 0x10) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="4c0000003c0007010000000000000000017c00001c00fc80180008800e0031002a27262d2e2b2a7b2e0000000400a7800c00018006000600800a0000080002"], 0x4c}, 0x1, 0x0, 0x0, 0x8}, 0x400c040) (async) 1.982397115s ago: executing program 0 (id=2270): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000080000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000100000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r3}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r6) r8 = socket(0x40000000015, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r8, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4) socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000080)=[{r8, 0x800}], 0x1, &(0x7f0000000180)={0x0, 0x3938700}, 0x0, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="796100000000000000007e00000033000300", @ANYRES32=0x0, @ANYBLOB="a739dfe54ad99ffa18c27526b51001fb4f778791377c"], 0x1c}}, 0x4000054) sendmsg$NL80211_CMD_SET_PMK(r2, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="8eae1573", @ANYRES16=r7, @ANYBLOB="00012abd7000fedbdf257b0000000a000600080211000000000014000201fbdf03d2ac1ec6bebdc2132aadb2fb4f1400fe00e544f10afa36df8bae3cdebda92e04d20a00060008021100000000001400fe0085eed30d44ac180c4af93209b0f97d6a140002011dcb9b5bd56ed484b72517d52e864f5a"], 0x7c}}, 0x0) socket$unix(0x1, 0x1, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x1c9200, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000002740)=@delchain={0x1f24, 0x65, 0x2, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xfff1}, {0x9, 0xffe0}, {0xe, 0x9}}, [@TCA_RATE={0x6, 0x5, {0x8, 0x80}}, @TCA_RATE={0x6, 0x5, {0x98}}, @filter_kind_options=@f_u32={{0x8}, {0x15fc, 0x2, [@TCA_U32_POLICE={0x4c0, 0x6, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x8}, @TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x200, 0xfff, 0x6, 0x5, 0x9, 0x3, 0x3, 0xa70, 0x318, 0x9, 0x4, 0x2, 0x40, 0x2, 0x0, 0x3, 0x0, 0x6, 0x9, 0x5, 0x396, 0xf5, 0x5, 0x8fa, 0x1ff, 0x7, 0xfffff9fe, 0x7ff, 0x41, 0x8, 0x15cd, 0xff, 0x8, 0x4, 0x2, 0x9, 0x6, 0x7, 0x101, 0x2, 0x7, 0x97dc, 0x4361, 0xff, 0x0, 0x8, 0x7, 0xff, 0xbb, 0xfffffff9, 0xffffffff, 0x5, 0x4, 0x71, 0x0, 0x5, 0x4, 0x7fff, 0x84, 0x1, 0x1, 0x4, 0x3, 0xfffffc00, 0x80000000, 0x8, 0x1, 0x3ff, 0x2, 0x7, 0x100, 0x3, 0x7, 0xffff7fff, 0x1, 0x6afe, 0x31dace8, 0x9, 0x4, 0x20, 0xcae1, 0x8, 0x5, 0x4e8, 0x176, 0x2, 0x3, 0x800, 0x5, 0x2, 0x2, 0x100, 0xc0000000, 0x6, 0x8, 0xd, 0x8, 0x8, 0x5bd, 0x401, 0x80, 0x7, 0xe00000, 0x5, 0x1000, 0x8, 0x5, 0x3, 0x7, 0xfffffffe, 0x1, 0x0, 0x6, 0x4, 0x1, 0x1, 0x2, 0x0, 0x723b, 0x1, 0x7, 0x7c76, 0x84, 0x4, 0x5, 0x1000, 0x9, 0x2, 0x9c55, 0x9, 0x200, 0x4, 0x5, 0x10001, 0x2, 0x1800, 0x56, 0xeb59, 0xff, 0x8, 0x10001, 0x10001, 0x0, 0x6, 0x1, 0x0, 0x800, 0x70db53d9, 0xff, 0x3, 0x3, 0x8, 0x6, 0x4, 0xffff86f4, 0x0, 0x1788, 0x9, 0x92200000, 0x0, 0xd, 0x8, 0x5, 0x6, 0x5, 0x5, 0x6, 0x8, 0x7, 0x1, 0x8, 0x40, 0x80000000, 0x2, 0x4, 0x9, 0x5, 0x8000, 0x57, 0x800, 0x3, 0xd0, 0x6, 0x30e31787, 0x58, 0x7, 0x9, 0x1ff, 0x1ff, 0x6, 0x10001, 0x6, 0xa5, 0x3aa, 0x401, 0x8, 0x8, 0x27, 0xf0, 0x3, 0x7, 0x1, 0x0, 0x7bf, 0x6, 0xc7, 0x3, 0x6, 0xfffffffb, 0x9, 0x81, 0x6, 0x77, 0x7f, 0x0, 0xa75, 0xa9, 0x5, 0x9, 0x2, 0x5, 0x0, 0xf8e, 0x6, 0x1, 0x6, 0x7f, 0x5, 0x9, 0x9, 0x27d, 0x0, 0x2, 0x4, 0x7ff, 0x8, 0x8, 0x8, 0x80000001, 0x9, 0xadde, 0xc, 0x6, 0x8001, 0x0, 0x5, 0x5, 0x6, 0x5, 0x8, 0x4, 0xb, 0xfffffff0, 0x2, 0x1]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x9}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x8, 0x6, 0x5, 0x8, {0xa, 0x0, 0x8, 0x6, 0x1, 0x8}, {0x0, 0x3, 0x3, 0x5, 0x43a1, 0x9}, 0x3, 0x3}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x6}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x1}, @TCA_POLICE_RATE64={0xc, 0x8, 0xfffffffffffffffe}, @TCA_POLICE_RATE64={0xc, 0x8, 0x1}, @TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0xfffffffffffffffc, 0xe228, 0x2, 0x9, {0x81, 0x0, 0x0, 0x0, 0x9, 0x8}, {0x5, 0x1, 0xc581, 0x8, 0x2008, 0x800}, 0xfffffffd, 0x17, 0x80}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x6864}]}, @TCA_U32_ACT={0x1138, 0x7, [@m_ctinfo={0xf8, 0x1e, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x6d5e, 0x69a, 0x5, 0xfff, 0xb4}}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x40}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x101}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x1}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x9}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x9}]}, {0x8b, 0x6, "02551c706e3abce55af7eb1fcdd283f2fc0e799887afc072b799e675d361f59f3f0f4199fca99ae5e25edb881fb9889e318dff715fd68c7eb6c472c458164ae60ee24cdc94e3e2539fa4df264d0d774180ab60d31f045649824b3c2a2102cb4b518d7a0cc0754894bb0f7eb8e7874bcfc2fa2e7eff6dc9525d088b6228e27576874578fea42140"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3}}}}, @m_tunnel_key={0x174, 0x11, 0x0, 0x0, {{0xf}, {0x7c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x37}}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @mcast1}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x9, 0x6, 0x5, 0x6}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @private2}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e23}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @private2}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e22}]}, {0xcc, 0x6, "0af8a1db5add8694b79f51ac0256e062bdceaa9c3f4a4a6d91e607e51651a88b05c5b2c0a1ff1bd2d39eb5a6a8e93cfe54314ca8267bb14820a05deef4885169dc0c18a5318d2bbb3df9a37839a4bfd880edc41ea20d029f2342bb96a812d4b8252dcf48537edd53e84f9cb2f88f06f4ccebdeca8af7a4ab2fdfbe0dcfbd07bf7375bb62a2dea5d5b16f9398a1ea4a4f90aa5cd065bad8e25df68c1ede9ab1938a8d46098a486423cff5fa6a8b37ef1a629d0a13e909f31a29f42e51ca240d18dd2d21beccc773ff"}, {0xc}, {0xc}}}, @m_tunnel_key={0x10c, 0x6, 0x0, 0x0, {{0xf}, {0x14, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @private=0xa010100}]}, {0xca, 0x6, "87679854cb2beebf4721f80382e942878b1188039c21a3ae78412b329f9567bbdccba3ec400e3dc859d749a4bdb078b459825f275e42cfb2d1b626ece835bc4a44ca3b42d15263da889595b7d7bf8d9d1a1385212efd1683319638aa2c855ade3406250e354cf1fb0632a511c8fedeb172eda6e63543cb3015cfb7291c1872b06ba42753c8de3cbfa7fbc08a249c0d23d51e39e5f6aa75ad777320d258ab32d6877f362b403b6a9cdaae3207ff0127088b2464bf54a01f7065f595b826b7a6fbb1cb7480be5a"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_police={0x958, 0x9, 0x0, 0x0, {{0xb}, {0x89c, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x81, 0x2, 0x0, 0x7, 0x7, 0x4, 0x7e, 0x0, 0xdb8, 0x4, 0x9, 0x3, 0x93, 0xff, 0x93, 0x814, 0x0, 0x9, 0xb65, 0x9, 0x1, 0x7, 0x5db1, 0x3, 0x8, 0xfffffffc, 0xfffff9cc, 0x9, 0xffffff7f, 0x1, 0x0, 0x0, 0xf7b0, 0xf3, 0x0, 0x93f1, 0x8, 0x7, 0x3680, 0x7f, 0x4, 0x0, 0x6, 0x10000, 0x0, 0x2, 0x9, 0x6, 0xf, 0x3, 0x8, 0x8, 0x8, 0x7fff, 0xfffffffe, 0x0, 0xfffffff9, 0x1, 0x7, 0x4, 0x8001, 0x6, 0x10001, 0xd478, 0x6, 0x9, 0x5, 0xd, 0x8, 0xe12, 0x9, 0x2, 0x6, 0x1, 0xfd43, 0x8, 0x2, 0xb6f3, 0x10, 0x8, 0xfffffffb, 0x3, 0xd7c5, 0x189fc, 0x5, 0x2, 0x2e680, 0x0, 0x6, 0x1, 0x510, 0x5c2a, 0x5, 0xfffffffa, 0x9, 0x2, 0xa9803f3c, 0x11c8, 0x0, 0xa3e, 0x3c46, 0x6, 0x4, 0xbb, 0xb683, 0x79, 0x80000001, 0x3ff, 0x8, 0x3, 0x44, 0x6, 0x9, 0x3, 0xfffff000, 0xffffff00, 0x9, 0x6, 0x282f, 0x2, 0x8, 0x7, 0xfffffffd, 0x0, 0x1b8dd5f7, 0xa666, 0xfffffffd, 0xc0, 0x8000, 0x8, 0x6, 0x9ab3, 0x34, 0x4, 0x5, 0x5, 0x4, 0x3, 0xc, 0x7f6, 0x5, 0x9a, 0x9, 0xf, 0x1, 0x3ff, 0x1969c, 0x0, 0x800, 0x8, 0xe, 0x7fff, 0xaae, 0x4, 0xfffffff9, 0xb, 0x9, 0x9, 0x3, 0x8, 0xffffffff, 0x6, 0x200, 0x5, 0x8f7, 0x2, 0x9, 0xffff, 0x8, 0x1, 0x899, 0x8, 0xfffffff6, 0x119, 0x6, 0x4, 0x4, 0x37400, 0x8, 0x3, 0x5, 0x80000000, 0xffff7fff, 0x9, 0x3, 0x80, 0x6, 0x8000, 0x3ff, 0x10, 0x5, 0xfd8d, 0x8, 0x10001, 0x5ee, 0x8, 0x334c, 0x7, 0x0, 0x4, 0x101, 0x2, 0x0, 0x878e, 0x6, 0x0, 0x5, 0x2, 0x94, 0x1, 0xffffffff, 0x8, 0xdf33, 0x26, 0x8000, 0x4, 0x7, 0x0, 0x2c38, 0x400, 0x9, 0xff, 0x11f8dad8, 0xfffff84a, 0x401, 0x8000, 0x1, 0x6, 0x182, 0x6, 0x1, 0xb, 0x1ff, 0x2, 0x2, 0x5836, 0x9, 0x9, 0x6, 0x1, 0x5519, 0x6, 0x4, 0x7, 0x0, 0x3, 0xde0, 0x400, 0xc, 0x6, 0x7ff, 0x3, 0x1, 0x0, 0x3, 0x7]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x80, 0x3, 0xcf, 0x1, 0x1, {0xd8, 0x0, 0x80, 0x5, 0x7, 0xff}, {0x9, 0x1, 0x3, 0xfff, 0x7, 0xd4f}, 0x7ac9, 0xb, 0x8}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1}, @TCA_POLICE_RESULT={0x8, 0x5, 0x2aaf742d}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3b}, @TCA_POLICE_RATE64={0xc, 0x8, 0x4f5}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0xfffffff8}, @TCA_POLICE_RATE64={0xc, 0x8, 0x3}], [@TCA_POLICE_RATE={0x404, 0x2, [0x101, 0x1, 0x8, 0x9, 0x7, 0x800, 0xad, 0x1, 0x1000, 0x2, 0x7ff, 0x6, 0x101, 0xa, 0x7fffffff, 0x0, 0x4, 0x1, 0x9, 0x8, 0x8, 0x5, 0x0, 0x2, 0x6, 0x3, 0x1, 0xe, 0xfffffffe, 0x6, 0x2, 0x1, 0x1, 0x1000, 0x7, 0x2, 0x0, 0x6, 0x196d, 0x0, 0x7, 0x1, 0x1, 0x9, 0x5, 0xfffffff3, 0xffff, 0x3, 0x20000, 0x1ff, 0x1, 0x6, 0x86a9, 0xa3, 0x3, 0xff, 0x4, 0x7, 0x5, 0x4, 0x5, 0x8, 0x899, 0xcdce, 0x8000, 0xf91, 0xc, 0x6d, 0x10, 0x8, 0x100, 0x7, 0x0, 0x9, 0x8, 0x2, 0x7fff, 0xfffffffc, 0x80, 0x10, 0x7ff, 0x4, 0x1000000, 0x1, 0x9, 0x2, 0x0, 0x16b, 0x101, 0x3, 0x4cf7, 0x8, 0x3, 0x30, 0x3, 0x3, 0x6, 0x7, 0x5, 0x6, 0xb, 0x80000000, 0x80000001, 0x2, 0x8faa, 0xb, 0x2, 0x5d, 0x4, 0x4, 0x100, 0x10, 0x9, 0x7, 0x9, 0xf, 0x10001, 0x3, 0x80000001, 0x4, 0x2, 0x3c29d481, 0x5, 0x4, 0x2, 0x5a40, 0x0, 0x81, 0x0, 0x12000, 0x80000000, 0x6, 0x9f, 0x2, 0x101, 0x8, 0x7fffffff, 0x1ff, 0x3, 0x6, 0x382, 0x9, 0x0, 0x2, 0x6, 0x2, 0x39f6, 0xdeab, 0x1000, 0x2, 0x4, 0x9, 0x10, 0x7f, 0x4, 0x8, 0x1, 0x7, 0x8, 0x8, 0x9c3, 0x5, 0xac, 0x0, 0xffffffff, 0x19b, 0x7fffffff, 0xbf, 0xb8de, 0x1, 0xfffffffa, 0x5, 0x41de, 0x9, 0xb12f22, 0x5, 0xa4f, 0x9, 0x6, 0x9, 0x9b, 0x401, 0x80000000, 0x9, 0x0, 0x3, 0x6, 0x80000001, 0x61, 0x5, 0x0, 0x40, 0x9c, 0x8, 0xfffffff7, 0x85, 0x2, 0x6f3, 0xd, 0xff, 0x6, 0x10001, 0x4, 0x6, 0x5, 0x5, 0xb, 0x8, 0xe94c, 0x2, 0x7ff, 0x3, 0x101, 0xfffffff9, 0x7, 0xffffffc0, 0x2, 0x8, 0x80, 0x6, 0x7000, 0x5, 0x4, 0x34, 0xfffffffb, 0x3, 0x0, 0x200, 0x800, 0x8, 0x8000, 0x3, 0x7, 0x5, 0xfffffffc, 0x8, 0xfff, 0x101, 0x2, 0xd5a, 0xffff, 0x8, 0x7, 0xffff124f, 0x563, 0x5, 0x2, 0xb736, 0x3, 0x4, 0x80000001, 0x4, 0x10000, 0x3ff, 0x31, 0x5]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xd}]]}, {0x91, 0x6, "2d8e773b7ff72196eda7e08dab925b889d38312b7db671784324ed526bede675361aaed7750f29e067119d01c8fb99838e007dd260c43131afe6e1de41fe717e40834c7ce4213aa44162c79041a6db4535e3576ca0833050532a606d127267bf23cc34180366ad9c83f9eaeac98186565227496b2bde4d87f7f0f3f462dd3ca21bd2832f82995bd195eccdee10"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_xt={0x3f4, 0x1, 0x0, 0x0, {{0x7}, {0x394, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x5}, @TCA_IPT_TARG={0x31, 0x6, {0x0, 'nat\x00', 0x0, 0x6, "23123a26175298"}}, @TCA_IPT_TARG={0x10c, 0x6, {0x4, 'raw\x00', 0x0, 0xfffa, "140ad98214a39e6917cd6b132455c7b3f2b6c6cafe264f7dc8c362173cc27b75f946897a0bb746cf03aaa2157e471b77a9f5724712a26cd93f0d35448ee4b92942f5dc617e8a2beaddfde37f3eaa920fe44d065ebcea61841da39a90d6bf92ff8ab45ada78a420a0852958402f9c543a3cd06560da8f486cdf57f8a2d1782f3562ff8a952e6c8d8172c7afbc516132e3b27d3cb368307f052999916861f5c04662f7437eea5d66eaf8b072da7761017c84661b534dc90ed7c0ec9e89fe9f70ac8179967167ada8fc3288a4883c946d05248424568ccc8e60e34e3e34317bf968d19b"}}, @TCA_IPT_TARG={0xf9, 0x6, {0x40, 'security\x00', 0x4, 0x6, "c49aeec8cbc96c48f00267f28c1d2a973c707d870c7e3b202924cdc63a0296763d8c3e7fbe04092bfc3f74ebffe695f032a52affbc76045a6053d5f8861700f9aabdc549107d17d15fa7b4f52422846641c8028d73ca656d3ef13cc5ba25aa96dc5122deb514c93fbd5f7827023f5161eeb1ab1bd510cee128ed3294e7860affa93ebd5a84bee60dcd7e61bdb7ccc875bda2fa05cf17e0a1109d739c8b5d290511107245811d15926393995e1af467a2fd46ade60d4d83306487c4bed3c09139ac20dc08de7afa9151cfaec78965bf"}}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_TARG={0xfb, 0x6, {0x9, 'raw\x00', 0x2, 0x6, "6eb6cbd7cafebd68ef2809a29b79f7a04543ff63f1c782ce6bb2fe07d5be408d87994dfebc4bb826117d632368905b5d26c636f27a23bf77890f6666f74a591c31974e03f199ff54f9dedd0b898697fbe5d5e4dfde4b8350ffaa293a20c10f5e3813ce2b1ef6adeb18d8480e5db36c19797fc7488148cbbfd95dc414aeaabd35030adb7d3273254326298fce2ab214c257978b44da6f76ada09fccd90253e1d2d8ccd95eb7c2f0a8d05a39a2b4cbd83e94b3d10ae30579d51b168914e30ff4f2832cb02477b099f71a0556ebbfa1e03ebc"}}]}, {0x3b, 0x6, "78e132bed5791d387bcf35ce21350fa118ad2b1025f22ff32fbc9aaf0dbb0f92edc86aa7c6fd162370e5fe94723ac7e149376f32ca0d1e"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_mpls={0x70, 0x15, 0x0, 0x0, {{0x9}, {0x40, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x5, 0x7, 0xcc}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x4, 0x10000, 0x4, 0x5, 0x40}, 0x3}}, @TCA_MPLS_LABEL={0x8, 0x5, 0x8b2d}, @TCA_MPLS_PROTO={0x6, 0x4, 0xfbfb}, @TCA_MPLS_LABEL={0x8, 0x5, 0x1196f}]}, {0x5, 0x6, "a0"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}, @filter_kind_options=@f_route={{0xa}, {0x24, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0x58}, @TCA_ROUTE4_TO={0x8, 0x2, 0xe0}, @TCA_ROUTE4_TO={0x8, 0x2, 0x55}, @TCA_ROUTE4_IIF={0x8}]}}, @filter_kind_options=@f_cgroup={{0xb}, {0x8a8, 0x2, [@TCA_CGROUP_ACT={0x154, 0x1, [@m_ife={0xd0, 0x1c, 0x0, 0x0, {{0x8}, {0x10, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0xc, 0x6, [@IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}]}]}, {0x9b, 0x6, "1e6c3ada668fcf54e31556f173182bfa9a636477f425aeafc34497b49d283a2a7760cd6d5fce44ff18f7431a845bb593f4893f233b88fc59c6532afef36b469a4bbe3ee14b4fac159c107575a3180ae6acfab76c66d816da38613fcfa719142cc5981528d6cb4bf9095b1388102771bbfc580306c6a3480b5097a61d3ad0371b0067a8eddab938a726d5051e1bbc30b258d0ed14631d2e"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_simple={0x80, 0xc, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xd, 0x3, '/dev/ppp\x00'}, @TCA_DEF_DATA={0x9, 0x3, 'TIPC\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x9, 0x4, 0x5, 0x9, 0x800}}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}]}, {0x16, 0x6, "34abd6971f6ce94b394ef37b9eb78ede1745"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}, @TCA_CGROUP_ACT={0x2e8, 0x1, [@m_connmark={0x138, 0x14, 0x0, 0x0, {{0xd}, {0x58, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x8, 0x7, 0xba5a, 0x5}, 0x3}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xd, 0x5be26e41f765ea96, 0x2, 0x8}, 0xa}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xa8c9, 0x5, 0x20000000, 0xffffffff, 0x8}, 0xfae}}]}, {0xb2, 0x6, "f166cea11566c07a473a9f75fdebba864640cd5cb9de87aee6a983676e3fc6673adfe45eee0269b2437b429ff968ef81ad17baa305079176fa90f253b99627dad59de6f28b0a5c37ddd61912dd1751e16ad2c65b58c157d216934d6ef79854a93ba044c4f9066887c2428b70abcfb7fc35976e832a1354d381e183cbaa16dec446cf2e76e944075db5f72bf91fb8c6445f6cc9aea1963b9372496d8a01ef94c5bc9c0dcc2c5d0b2b4d29b477f231"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_connmark={0xec, 0x18, 0x0, 0x0, {{0xd}, {0x74, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0x80000000, 0x3, 0x8, 0xff}, 0x7}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0xfffffff7, 0x7, 0x1000}, 0x4}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0xc058, 0x5, 0xa, 0x7}, 0xd2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0x8, 0x5, 0x2bf98091, 0x2bd1}, 0x1ff}}]}, {0x4a, 0x6, "d9114b5626271016a10d47b59a37578b7acba1f9e389cbb1763e948b6dba1bf0ccc087d7dd7c33bf6f845824c1d642122b91b556d53a3e88405a549bab43a21db9e2b5fa923a"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_bpf={0xc0, 0x1, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x5385, 0x7, 0x2, 0x1, 0x8}}]}, {0x7d, 0x6, "3340c8d4402ace819b3601fb7a05e60244ec9c331c80ee97bb0b43e0fbaa9d563cf4c63715588bc1eca84a26ab86684923fb5c87291ef3af26798562ddb7caa89b5f68382068fb05514a1e289d34eb28e7a92ae4705657de71dfada7fa8fc5b9ae2efb7358f98a69a94139f808ac15da0e2e5dab7433dcb120"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}, @TCA_CGROUP_POLICE={0x410, 0x2, [@TCA_POLICE_RESULT={0x8, 0x5, 0x8001}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6be, 0xf46, 0xffff0001, 0x2, 0x1, 0x8, 0xe, 0x5, 0x4, 0x9, 0x4, 0x3ff, 0xa, 0x4, 0x2, 0x3, 0x1, 0x4, 0x57, 0x0, 0x7, 0x1, 0x3ff, 0x7ff, 0xe41, 0x8, 0x9d6, 0x3, 0x0, 0xcd6, 0x7, 0x4, 0x7, 0x2df, 0x0, 0x81, 0x5, 0x7, 0x1, 0x80000000, 0x8000, 0x5, 0xc, 0x10, 0x4, 0x213, 0x5, 0x3, 0x2, 0x0, 0x10000, 0x8, 0x78, 0x12, 0xff, 0x400, 0x80, 0x1, 0xe60e8a7, 0xbf4, 0x9, 0x8000, 0x4, 0x3ff, 0xc56, 0x5c, 0x5, 0x827, 0x4, 0x400, 0x3, 0x3, 0x0, 0xcd7, 0xd1d, 0x0, 0x64d, 0x7, 0x6, 0x7, 0x720c, 0x5, 0x3, 0xb65b, 0x2, 0xffff0001, 0x2, 0xfffffffd, 0x5, 0x6e4, 0x8, 0xff, 0x5, 0xfffffffd, 0x3, 0x1, 0x7, 0x3ff, 0x0, 0x4, 0x2c2, 0x5, 0x7, 0x2, 0x5, 0x1, 0x7, 0x401, 0x5, 0x2, 0x4, 0x9, 0xa727, 0xd, 0xd, 0x2, 0x0, 0x2, 0xbe, 0x100, 0x2, 0x9, 0x6, 0xff, 0x6, 0x3, 0x8, 0xffffff00, 0x1, 0x0, 0x8, 0x6, 0x1, 0x1, 0xd, 0x8, 0x7, 0x2, 0xb24, 0x2, 0xfffff801, 0x80000001, 0x7, 0x2, 0x800, 0x1, 0xec, 0xffffff9e, 0xffffffff, 0x0, 0x0, 0x7, 0x3ff, 0x6, 0x53, 0x2e, 0x2, 0x7, 0x93a, 0x2, 0x7, 0x1, 0x6, 0xfffffff8, 0x5, 0x0, 0x2, 0x7f, 0x7ff, 0x6, 0x7, 0x9, 0x8, 0x4, 0x0, 0x6, 0x2, 0xd, 0x8, 0x3, 0x6, 0x0, 0x2, 0x9, 0xc, 0x7f, 0x100, 0x3c8, 0x4, 0x7, 0xfb, 0xb1, 0x7f, 0xaf6, 0xcdd, 0x9, 0xffffffff, 0x360000, 0xa0c, 0x200, 0x3, 0xcfa, 0x9, 0x1, 0x2, 0x22b6, 0x2, 0x4, 0xfffffc00, 0x7, 0x0, 0x0, 0x1, 0x8, 0x0, 0x5, 0xf, 0xfffffff4, 0xc, 0xff, 0x1, 0x1, 0xc, 0x0, 0x8000, 0xc, 0x9, 0x7, 0xb, 0x4, 0x400, 0xffffff7f, 0x9, 0x7fff, 0x6, 0x2, 0x1ff, 0x101, 0x8001, 0x45, 0xe, 0x5, 0x8, 0x1ff, 0x1, 0xb8b0, 0xb0d6, 0x8, 0xffff7725, 0xc6, 0xd, 0x9, 0x0, 0x1, 0x0, 0x9]}]}, @TCA_CGROUP_POLICE={0x58, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0x7, 0x6, 0x5, 0x9, {0x46, 0x0, 0x6, 0x4c, 0xdae6, 0x428}, {0xa9, 0x0, 0x1ff, 0x9, 0xfff, 0x4}, 0x0, 0xac6, 0x1}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}, @TCA_POLICE_RATE64={0xc, 0x8, 0x2}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x6}]}, 0x1f24}, 0x1, 0x0, 0x0, 0x4001}, 0x4000) ioctl$PPPIOCNEWUNIT(r10, 0xc004743e, &(0x7f0000001c40)=0x4) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) ioctl$PPPIOCSMAXCID(r10, 0x40047451, &(0x7f0000000100)=0xffff0080) ioctl$PPPIOCSMAXCID(r10, 0x40047451, &(0x7f0000000000)=0x8) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x4, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 1.968812343s ago: executing program 1 (id=2271): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$netlink(0x10, 0x3, 0xe) writev(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)="480000001500257f09004b01fcfc8c860a881300f217e0060000e3323909b8f8896e33719fe3bb036e0bc90900000000000000000000ffff5bf1090000d0bd5e000000006203005b", 0x48}], 0x1) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="18000000091401001000000002000000080021"], 0x18}}, 0x0) socket$packet(0x11, 0x3, 0x300) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x29, 0x14, &(0x7f0000000100), 0x120) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000003c0)='westwood\x00', 0x9) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0xc7) getsockopt$inet_mreq(r2, 0x0, 0x24, &(0x7f0000000000)={@rand_addr, @remote}, &(0x7f0000000180)=0x8) socket$nl_rdma(0x10, 0x3, 0x14) (async) socket$netlink(0x10, 0x3, 0xe) (async) writev(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)="480000001500257f09004b01fcfc8c860a881300f217e0060000e3323909b8f8896e33719fe3bb036e0bc90900000000000000000000ffff5bf1090000d0bd5e000000006203005b", 0x48}], 0x1) (async) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="18000000091401001000000002000000080021"], 0x18}}, 0x0) (async) socket$packet(0x11, 0x3, 0x300) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) socket$kcm(0xa, 0x2, 0x0) (async) setsockopt$sock_attach_bpf(r3, 0x29, 0x14, &(0x7f0000000100), 0x120) (async) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000003c0)='westwood\x00', 0x9) (async) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0xc7) (async) getsockopt$inet_mreq(r2, 0x0, 0x24, &(0x7f0000000000)={@rand_addr, @remote}, &(0x7f0000000180)=0x8) (async) 1.942589277s ago: executing program 2 (id=2272): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r0}, 0x8) syz_emit_ethernet(0x76, &(0x7f0000000100)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x15, 0x0, 0x0, 0x0, 0x0, {[@mptcp=@remove_addr={0x1e, 0x3d, 0x0, 0x0, "23f12f4860a44b0bc15ba15ff24af6985862903ebeb97f2918c713975bf95aefc56dc0c47215146671a0c2baf90fa3de0356cd9d9628d4a62674"}]}}}}}}}, 0x0) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_DEV(0xffffffffffffffff, 0x0, 0x8001) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="4d7eb0cf32710400000000fdffffff2a00800008002f0000000000fdff0200", @ANYRES32=r4, @ANYBLOB="060006000300000006000400ffff0000"], 0x34}, 0x4, 0x700000000000000, 0x0, 0x8010}, 0x0) write$tun(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x80) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000380)=@generic={&(0x7f0000000340)='./file0\x00', 0x0, 0x10}, 0x18) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x1b, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x47e6}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@map_val={0x18, 0x0, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0xa9}, @jmp={0x5, 0x0, 0x2, 0x3, 0x9, 0x50, 0xfffffffffffffff0}, @ldst={0x3, 0x2, 0x0, 0xb, 0xb, 0xfffffffffffffff4, 0xffffffffffffffff}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x753d}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r6, 0x0, 0x5}, 0x18) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="020000000400000004000000ff"], 0x50) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xd, 0x6, 0x4, 0x1, 0x0, r7}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r8}, &(0x7f0000000840), &(0x7f0000000880)=r7}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r8, &(0x7f0000000900)}, 0x20) r9 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x101801, 0x0) write$rfkill(r9, &(0x7f0000000000)={0x5, 0x0, 0x3, 0xfc}, 0x8) r10 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f00000003c0)=[@in6={0xa, 0x4e23, 0xd, @mcast1, 0x4}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x14}}], 0x2c) 1.868895464s ago: executing program 4 (id=2273): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r1, &(0x7f0000000700)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xfffffff9, @loopback, 0x9}, 0x1c, &(0x7f00000004c0)}}], 0x1, 0x2400c044) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x33, &(0x7f0000000800)=0x8000, 0x4) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r3, &(0x7f0000002280)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000010f40)=""/17, 0x11}, 0x8}], 0x1, 0x2, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x970b) shutdown(r1, 0x1) bind$alg(0xffffffffffffffff, 0x0, 0x0) r4 = socket$key(0xf, 0x3, 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r6, &(0x7f0000000200)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f0000000500)={'gre0\x00', &(0x7f0000000280)={'tunl0\x00', 0x0, 0x710, 0x8000, 0x0, 0xffffffff, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x5, 0x2f, 0x0, @remote, @private}}}}) sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x2, 0x6, 0x0, 0x9, 0x2, 0x0, 0x0, 0x25dfdbfe}, 0x10}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x3d}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001300)={0xffffffffffffffff, 0x1, 0x18}, 0xc) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x20702, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) 1.769734882s ago: executing program 1 (id=2274): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000005b80)=@delchain={0x24, 0x26, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {0x9}}}, 0x24}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x50, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x0, 0x21018}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_LABEL={0x8, 0xb, 0x1, 0x0, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve0\x00'}]}, 0x50}}, 0x80) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$IP_SET_OP_GET_FNAME(r2, 0x1, 0x53, &(0x7f0000000240)={0x8, 0x7, 0x0, 'syz2\x00'}, 0x0) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockname(r3, 0x0, &(0x7f0000000a80)) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRESDEC, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x40) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xfff3}}}, 0x24}}, 0x0) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000003c0)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x2, 0x8, 0xff1, 0x41600, 0xffffffffffffffff, 0x82f, '\x00', r5, r7, 0x5, 0x5, 0x3}, 0x50) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bind$inet(r6, &(0x7f0000000300)={0x2, 0x4e21, @broadcast}, 0x10) socket$igmp6(0xa, 0x3, 0x2) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000340), r8) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0), r8) pipe(&(0x7f0000000000)) r9 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r9, &(0x7f0000000380)={0xa, 0x14e24}, 0x1c) connect$inet6(r9, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_SECURITY(r10, 0x112, 0x4, &(0x7f0000000080)={0x4, 0xfc}, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@mpls_getroute={0x1c, 0x1a, 0x9e8a232eead7a86d, 0x0, 0x0, {0x1c, 0x20}}, 0x1c}}, 0x0) sendmmsg(r9, &(0x7f00000092c0), 0x4ff, 0x0) 1.535314099s ago: executing program 0 (id=2276): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x483, &(0x7f0000000000)={0x19, @multicast1, 0x4e24, 0x2, 'none\x00', 0x0, 0x2, 0x50}, 0x2c) unshare(0x6a040000) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40002001, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="040100001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800800050001200000080001"], 0x104}}, 0x0) 1.365774761s ago: executing program 1 (id=2278): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) (async, rerun: 64) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1200000007000000040000000200000000000000", @ANYRES32, @ANYBLOB="4000000000000020000500", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (rerun: 64) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r2}, &(0x7f0000000700), &(0x7f0000000740)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) bind$bt_l2cap(r4, &(0x7f0000000180)={0x1f, 0xb, @any, 0x4, 0x1}, 0xe) (async) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x4000, r5}, 0x18) (async) setsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f0000000200)=0x6, 0x4) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_group_source_req(r6, 0x0, 0x2b, &(0x7f0000001fc0)={0x7, {{0x2, 0x4e23, @local}}, {{0x2, 0x4e24, @local}}}, 0x108) (async) ppoll(&(0x7f0000000500)=[{r0}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x40000000000, 0x3, 0x4, 0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (rerun: 32) listen(r4, 0x7) (async) close(0x4) 1.284695608s ago: executing program 3 (id=2279): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a3200000000a4000000060a010400000000000000000100000008000b40000000007c0004804c0001800b000100736f636b657400003c0002800800030000000024080002400000000f08000140000000040000000000000012080002400000000a080003000000001108000240000000162c0001800c00010062697477697365001c0002800800034000000004080001400000001408000240000000120900010073797a30"], 0x118}}, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) ioctl$AUTOFS_IOC_CATATONIC(r2, 0x9362, 0x0) (async) r5 = socket$packet(0x11, 0x2, 0x300) (async) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r6, 0x84, 0x12, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000cc0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x4}, @ptr={0x0, 0x0, 0x0, 0x4}, @decl_tag={0x4, 0x0, 0x0, 0x11, 0x1, 0x1}]}, {0x0, [0x0, 0x0, 0x61, 0x61]}}, 0x0, 0x56, 0x0, 0x1}, 0x28) (async) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x2}, 0x1c) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000440)='wlan0\x00', 0x10) (async) setsockopt$sock_int(r7, 0x1, 0x3e, &(0x7f00000000c0), 0x4) (async) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000000)="89e7ee2c7cdad9b4b47380c988ca", 0x140}], 0x1) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x20000, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) (async) socket(0x400000000010, 0x3, 0x0) unshare(0x2c060000) socket$unix(0x1, 0x1, 0x0) (async) socket(0x10, 0x3, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000100)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r8}, 0x10) 1.083858817s ago: executing program 3 (id=2280): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) close(r0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000540)={{{@in, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in=@local}}, 0xe8) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x3, 0xfffffffd, 0x3, {0xa, 0x4e24, 0x3, @loopback, 0x3}}}, 0x3a) syz_emit_ethernet(0x96, &(0x7f0000000140)={@empty, @broadcast, @val={@val={0x88a8, 0x5, 0x1, 0x1}, {0x8100, 0x1, 0x0, 0x3}}, {@mpls_uc={0x8847, {[{0x1, 0x0, 0x1}], @ipv4=@igmp={{0x1b, 0x4, 0x0, 0x16, 0x7c, 0x65, 0x0, 0x9, 0x2, 0x0, @loopback, @private=0xa010101, {[@rr={0x7, 0x17, 0xca, [@loopback, @remote, @multicast2, @dev={0xac, 0x14, 0x14, 0xe}, @loopback]}, @ssrr={0x89, 0x7, 0x14, [@broadcast]}, @ssrr={0x89, 0x7, 0xd6, [@empty]}, @ssrr={0x89, 0x13, 0x9a, [@loopback, @remote, @local, @private=0xa010101]}, @ssrr={0x89, 0x1f, 0xae, [@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, @rand_addr=0x64010102, @private=0xa010102, @remote]}]}}, {0x12, 0x2, 0x0, @private=0xa010101, "028394e83bd646e7"}}}}}}, 0x0) ioctl$PPPIOCGL2TPSTATS(r2, 0x80487436, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) (async) close(r0) (async) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000540)={{{@in, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in=@local}}, 0xe8) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x3, 0xfffffffd, 0x3, {0xa, 0x4e24, 0x3, @loopback, 0x3}}}, 0x3a) (async) syz_emit_ethernet(0x96, &(0x7f0000000140)={@empty, @broadcast, @val={@val={0x88a8, 0x5, 0x1, 0x1}, {0x8100, 0x1, 0x0, 0x3}}, {@mpls_uc={0x8847, {[{0x1, 0x0, 0x1}], @ipv4=@igmp={{0x1b, 0x4, 0x0, 0x16, 0x7c, 0x65, 0x0, 0x9, 0x2, 0x0, @loopback, @private=0xa010101, {[@rr={0x7, 0x17, 0xca, [@loopback, @remote, @multicast2, @dev={0xac, 0x14, 0x14, 0xe}, @loopback]}, @ssrr={0x89, 0x7, 0x14, [@broadcast]}, @ssrr={0x89, 0x7, 0xd6, [@empty]}, @ssrr={0x89, 0x13, 0x9a, [@loopback, @remote, @local, @private=0xa010101]}, @ssrr={0x89, 0x1f, 0xae, [@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, @rand_addr=0x64010102, @private=0xa010102, @remote]}]}}, {0x12, 0x2, 0x0, @private=0xa010101, "028394e83bd646e7"}}}}}}, 0x0) (async) ioctl$PPPIOCGL2TPSTATS(r2, 0x80487436, 0x0) (async) 769.723978ms ago: executing program 3 (id=2281): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000b40), r1) sendmsg$NFC_CMD_DEP_LINK_DOWN(r1, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x14, r2, 0x1, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x40) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)=0x0) (async, rerun: 64) r4 = socket$netlink(0x10, 0x3, 0x4) (async, rerun: 64) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000080)=0x10) (async, rerun: 32) writev(r4, &(0x7f0000000080)=[{&(0x7f0000000000)="480000001400190d09004beafd0d36020a8429000b4e230f00000000a2bc5603ca00000f7f89004e002050da742dac0000000101ff05020003000200000000000100000000005839", 0x48}], 0x1) (rerun: 32) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r8) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000d40)=ANY=[@ANYBLOB="1c000a00", @ANYRES16=r9, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYBLOB="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"], 0x1c}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)=0x0) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, r2, 0x100, 0x70bd25, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710419000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 767.758041ms ago: executing program 0 (id=2282): syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x18c, r1, 0x4, 0x70bd29, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x200}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x4}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x400}}, {@pci={{0x8}, {0x11}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7fff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x59e}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x6}}]}, 0x18c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000850) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000300)={0xa, 0x4e20, 0x8, @mcast1, 0x29}, 0x1c) (async, rerun: 64) r3 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r3, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0xd4, r1, 0x400, 0x70bd27, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x6}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1}}]}, 0xd4}, 0x1, 0x0, 0x0, 0xc0c6}, 0x20000005) (async) ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f00000005c0)=@get={0x1, &(0x7f0000000500)=""/152}) (async) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000600)={0x0, 0x7f}, &(0x7f0000000640)=0x8) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000000680)={r5, @in6={{0xa, 0x4e21, 0x6, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}}, 0x84) (async) write(r4, &(0x7f0000000740)="cce3b7aa2e51abee0cf10731d3be3cd854d0c5b478987295a120c5a0655c9678607fa2c2241bc8aa21ae171688ad836d14aff58d3874fb3b123fcce18b5b67ce4b993a242ab90af02d231a72a4cfed2fc7bfb87040a61053cca49864f6fb8f509ef0f8dfe8cf7587cb2863eea337b95aa560874d0cd45b3f1e25311882d682fb68d863ae82f3066c472cad0b88e20d2c9f1bb471d4fc1c70d6418b59e7ec958dd4cbc746fd6438aa19ce74e2b9920bc7bea25b40effdd4c9f9c71febfa22b1fea71ee277c4df83113352389cac7c03ae7f21c8f1c6244fec55071fe704d14fa7aec8406d70a8de75992bc43144e380dab1be289d1f405d16571a82", 0xfb) bpf$LINK_DETACH(0x22, &(0x7f0000000840), 0x4) (async) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r4, 0x84, 0x1e, &(0x7f0000000880)=0x363, 0x4) (async, rerun: 32) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000008c0), 0x140, 0x0) (rerun: 32) write$tun(r6, &(0x7f0000000900)={@void, @val={0x2, 0x3, 0x9, 0x2, 0x9, 0x1}, @x25={0x0, 0x7, 0x0, "198eedd9dbd31e69e29615de4d96d948b8f5c027247b17e75a75ef7b33264ca8dea032aff16ec570859488e96b4c3c4eef7c5e8d3045fcb4a129629d3825a46ba2431245076c08f8170ea337ab62311e3a6aea01b4122687e6a668605b2adce86e07eb22b2d289daedd52cb6ebb3d13753de2af40ab7ec6cf79251c47ce2ab8858decfebcb94df7c"}}, 0x95) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000a00)={'vcan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000a40)={'geneve1\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000a80)={'batadv0\x00', 0x0}) (async, rerun: 64) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000ac0)={0x0, @multicast1, @private}, &(0x7f0000000b00)=0xc) (rerun: 64) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f0000000c80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000b40)={0xf4, 0x0, 0x300, 0x70bd2b, 0x25dfdbfb, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x40000}, 0x20040000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000d00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r3, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x2c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x37}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xb4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0xc080) (async) getsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000e00), &(0x7f0000000e40)=0x8) r12 = syz_genetlink_get_family_id$gtp(&(0x7f0000000ec0), r0) sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000f80)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x38, r12, 0x20, 0x70bd2d, 0x25dfdbfb, {}, [@GTPA_TID={0xc, 0x3, 0x2}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_FAMILY={0x5, 0xd, 0x28}]}, 0x38}, 0x1, 0x0, 0x0, 0x20048041}, 0x20044004) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001000), r3) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r0, &(0x7f00000012c0)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x2008008}, 0xc, &(0x7f0000001280)={&(0x7f0000001040)={0x228, r13, 0x8, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_PEER_MEASUREMENTS={0xcc, 0x111, 0x0, 0x1, {0xc8, 0x5, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}]}, {0xb4, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9b4}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_REQ={0x30, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x3c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x18e}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1e6d}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x528d1dc4}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8}]}]}]}}, @NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x8}, @NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x200}, @NL80211_ATTR_PEER_MEASUREMENTS={0x130, 0x111, 0x0, 0x1, {0x12c, 0x5, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x44, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x136}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xffffffff}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}]}, {0xc8, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16e9}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}]}, @NL80211_PMSR_PEER_ATTR_REQ={0xa0, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x84, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3ffc}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xa}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x10}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xa5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1d}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}]}]}]}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}]}]}]}}]}, 0x228}, 0x1, 0x0, 0x0, 0x4000000}, 0x4c044) (async) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000001380)) 698.96166ms ago: executing program 4 (id=2283): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$IP_SET_OP_GET_FNAME(r0, 0x1, 0x53, &(0x7f0000000240)={0x8, 0x7, 0x0, 'syz2\x00'}, &(0x7f0000000300)=0x2c) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000ba20702500000000002003007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0x10, 0x10, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\b\x00\x00', &(0x7f0000000300)=""/8, 0x6c00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xfff3}}}, 0x24}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x2, 0x8, 0xff1, 0x41000, 0xffffffffffffffff, 0x82f, '\x00', r2, 0xffffffffffffffff, 0x5, 0x5, 0x4}, 0x50) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x40, '\x00', r2, 0x0}, 0x50) recvfrom$inet6(r3, &(0x7f0000000480)=""/30, 0x1e, 0x60, &(0x7f0000000580)={0xa, 0x4e24, 0x7f, @dev={0xfe, 0x80, '\x00', 0x31}, 0x2}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r5}, &(0x7f0000000280), &(0x7f00000000c0)='%pi6 \x00'}, 0x20) socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x1d, 0x2, 0x6) unshare(0x22020400) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x101, 0x1000, 0x9, 0x3, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0xd, 0xe, 0x2b12, 0x100, 0x6, 0x1c00, 0xb, 0x7, 0xbed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x2, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x180000, 0x4007, 0x8b, 0x5, 0x2af, 0xf7, 0x5, 0x2, 0x6, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10001, 0x2, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x2, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x1, 0x1fc, 0xc5c, 0xffffffff]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r6, 0x0, 0x4}, 0x18) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x10, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000ff0500000000000000000000b7080000000000007b8af8ff00000000b7080000ff0100007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b6f7bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000006c0)={{r5}, &(0x7f00000005c0), &(0x7f0000000600)='%pS \x00'}, 0x20) 597.02049ms ago: executing program 3 (id=2284): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0600000004000000030000000500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000001c460992"], 0x48) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20\x00'}, 0x58) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f0000000040)={0x0, 0x9}, &(0x7f0000000080)=0x8) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r5, 0x6, 0x15, &(0x7f0000000240)=0x52, 0x4) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050002000000000000002e00000008000300", @ANYRES32, @ANYBLOB="0a00340002020202020200000a00060008021100000000000400440028000d01"], 0x68}}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffff3702000008000000b703ba82e1a9ca3062d3da369eacd60c00400100000085000000060000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 453.680863ms ago: executing program 0 (id=2285): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) (async, rerun: 32) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async, rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_MAX_PORTS(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r2, 0x400, 0x70bd28, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040014}, 0x800) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') unshare(0x6a040000) (async) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380), r1) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x4c, r3, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4010}, 0x200c064) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r5, 0x5, 0x14, 0x0, &(0x7f0000000080)="259a001471a76d2688a24e6588a8fb5e0af66395", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x9}, 0x50) socket$packet(0x11, 0x2, 0x300) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x18, r7, 0x1, 0x1fc, 0xfffffffe, {}, [@IPVS_CMD_ATTR_DAEMON={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x6c, r7, 0x8, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x591}, @IPVS_CMD_ATTR_DEST={0x38, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@remote}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x100000}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}]}, 0x6c}, 0x1, 0x0, 0x0, 0x44885}, 0x20000010) 452.732556ms ago: executing program 1 (id=2286): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f00000008c0)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32, @ANYBLOB="00000000000000006100000a00000000180000000000000000000000000000009500000000000000360a00000000000018010000202078252000000000202020631af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b502000000af8a0085000000cb000000950000000000000044fc2463c83f"], &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x41000}, 0x94) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000340)=[{&(0x7f0000000180)="cf", 0x1}, {&(0x7f0000000400)="fd", 0x1}, {&(0x7f0000000300)='0', 0x1}, {&(0x7f00000001c0)="d5", 0x1}, {&(0x7f0000000480)='q', 0x1}], 0x5, 0xa) accept4$inet6(r1, &(0x7f0000000800)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000840)=0x1c, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b4050000200080006110600000000000c60000000000000095000000000000009f33ef60916e6e893f1eeb0be20000d072f5b89c3043c47c896ce0bc8731fa595b6b4d45ef26dcca5582054d54d53cd2b6db714e4b94bdae214fa68a0557eb3c5ca683a4b6fc89398f2b9000f224891060017c4700de60beac671e8e8fdecb03588aa6007e71f871ab5c2ff88afc6002084e5b52710aeee835cf0d78e45f70983826fb8579c1fb47d2c5553d2ccb5fc5b51fe6b174ebd9907dcff414ed55b0d18a93ee341ab59016f81860324b800c00000000000092d9c5fe34ccb80a61ffcb3363073fd8962823ee45f5d7394e9510f4a801efdf008499d7aca1afac6c702cfabe8a9c55c8dafcdb110036e14c1035cafdfef6a358cbfadb3579a285580a3c080d4e0a48d7bdc38a0437c8c1b3aa408a"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x50) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x37}]}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x60}}, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB="260001000000000000000000", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="180000000015000000d503000000000000000000ad000000950000000000b0bbb90290820307db0aad672c7b5209cc073eac6a07e1ef92ab4457e55b"], &(0x7f0000000440)='GPL\x00', 0x4, 0x54, &(0x7f0000000480)=""/84, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@map=r3, 0x5, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={0xffffffffffffffff, 0x1}, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="02007200040000000800000001000000916a942b533562bc8d7fd0af5969025a03be97d92580020000d8f33496a217f5443bad60bd6de549e21be0876ab957c4c827018297a1006bdd977326718a68a0e5828f", @ANYRES32=0x1, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000200"/28], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b707000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r8}, &(0x7f0000000080), &(0x7f0000000240)=r10}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r9, 0x18000000000002a0, 0xd50, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'syztnl0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x8, 0x8b, 0x5, 0x12, @private2, @dev={0xfe, 0x80, '\x00', 0x43}, 0x20, 0x80, 0x3b02, 0x4}}) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, &(0x7f0000000880)=[0x3, 0x1], 0x2) r12 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000500), 0x4) r13 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000005c0)={0xffffffffffffffff, 0x10001}, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0xf, &(0x7f00000001c0)=ANY=[@ANYBLOB="18280000", @ANYRES32=r3, @ANYBLOB="000000000600000018163300", @ANYRES32=r5, @ANYBLOB="00000000000000b7fd60fe008520000004000000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000085100000feffffff65a40001ffffffff8520000001000000181a0000", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], &(0x7f0000000240)='syzkaller\x00', 0x9c2, 0x0, 0x0, 0x41100, 0x40, '\x00', r11, 0x25, r12, 0x8, &(0x7f0000000540)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000580)={0x5, 0xb, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000600)=[r13], &(0x7f0000000640)=[{0x0, 0x1, 0x10, 0xb}, {0x0, 0x1, 0x8, 0xb}], 0x10, 0x5}, 0x94) 422.381478ms ago: executing program 3 (id=2287): r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000140)=@fragment={0xb6, 0x0, 0x92, 0x0, 0x0, 0x1b, 0x65}, 0x8) (async) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000140)=@fragment={0xb6, 0x0, 0x92, 0x0, 0x0, 0x1b, 0x65}, 0x8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xfffc}, [@NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x58}}, 0x4010840) sendto$inet6(r0, 0x0, 0x0, 0x20044080, &(0x7f0000000040)={0xa, 0xcaa1, 0xffffff7c, @local, 0x40000d}, 0x1c) 384.581578ms ago: executing program 0 (id=2288): socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000040)=0x1c, 0x80000) socket$inet_tcp(0x2, 0x1, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000540)='cgroup.kill\x00', 0x275a, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r5) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0xffffffff, 0x800006}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x7fff, 0x267, 0x0, 0x25, 0x19e1, 0x9}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) (async) recvmsg$unix(r0, &(0x7f0000000640)={&(0x7f00000005c0)=@abs, 0x6e, &(0x7f0000001280)=[{&(0x7f0000000740)=""/120, 0x78}, {&(0x7f00000007c0)=""/228, 0xe4}, {&(0x7f00000008c0)=""/138, 0x8a}, {&(0x7f0000001080)=""/224, 0xe0}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000000980)=""/82, 0x52}, {&(0x7f0000001180)=""/109, 0x6d}, {&(0x7f0000001200)=""/84, 0x54}], 0x8, &(0x7f0000000480)=[@cred={{0x1c}}], 0x20}, 0x42) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0xffffffffffffff98, &(0x7f0000000140)={&(0x7f0000001300)=@deltfilter={0x37c, 0x2d, 0x430, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x4, 0xf}, {0xfff1, 0xd}, {0x5, 0xf}}, [@filter_kind_options=@f_bpf={{0x8}, {0x348, 0x2, [@TCA_BPF_ACT={0x344, 0x1, [@m_ife={0x130, 0x12, 0x0, 0x0, {{0x8}, {0x70, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa}, @TCA_IFE_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @TCA_IFE_METALST={0x24, 0x6, [@IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x40}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x81}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x81}, @IFE_META_SKBMARK={0x0, 0x1, @void}]}, @TCA_IFE_TYPE={0x6, 0x5, 0x8f37}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x8, 0x0, 0x458, 0x8}}}, @TCA_IFE_DMAC={0xa}]}, {0x9c, 0x6, "5d006f6e92b1ef45238dc6e6149d5e36457f1d3d82e90f18c056cf383f57f55f8823cd07ff87eeee46e9ad5e4c475e3538d358b4226a9ab0aa31c5e76ad444a43c21acd8a1f37d92bee501c1e7bf908dcde8566825ee1d122f163bfaf80a81693cdd557567f2a6c958bbf9494dc85c735eab0530bcdb2cbd46b1aaf3b3a3eb7fce3407a64e6d55e09cdb6433a1e09bf30359a959b7b62102"}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}, @m_mpls={0x90, 0x1a, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_TC={0x5, 0x6, 0x5}]}, {0x59, 0x6, "e1ed56a47a92943f29c784e29cc77ef6f84574429be2693c7537ca254802963d7603b8bc0c6dbf55c0a256bea5a3f44597b418da180f957367ec5fc182a9b73faf4cba43b05802f15ec45ddd8baadf4b70ef19cc48"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_mirred={0xd4, 0x6, 0x0, 0x0, {{0xb}, {0x84, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x8, 0xffffffffffffffff, 0x5, 0x8000}, 0x0, r8}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x96f, 0x144c, 0xe75a39b826460005, 0x0, 0x80000000}, 0x4, r8}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0xb188, 0x7, 0x81, 0x2}, 0x2, r8}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xfffffff8, 0x1, 0x8, 0x2, 0x8001}, 0x2}}]}, {0x25, 0x6, "8c65f2cb92d3e7655b5627cf9800e70092795801bb504016afdb7f4682445644c1"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}, @m_connmark={0xac, 0x1, 0x0, 0x0, {{0xd}, {0x58, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0x7, 0x4, 0x6, 0xc512}, 0x7}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x8, 0x0, 0xdb3, 0xd5}, 0x8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x9, 0x1, 0x7, 0xfffffaf4}, 0xfe}}]}, {0x28, 0x6, "4dcdbe05517bafd4947ecef1dcba60878cba2f3140c7e43bcc55d8cf2da1d8a6bf1e1d84"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x3ff}]}, 0x37c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) (async) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) (async) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) (async) r9 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180), 0x4) (async) r10 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000002c0)="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", 0x1c0}, {&(0x7f0000000a40)="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", 0x275}], 0x2}, 0x4) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000"], &(0x7f0000000040)='GPL\x00', 0xffffff86, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r11}, 0x10) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) 110.523242ms ago: executing program 2 (id=2289): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_tcp(0x2, 0x1, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="20000000051401002abd7000fcdbdf2508000100000000000800"], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4000010) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000180)=[@in={0x2, 0x4e24, @multicast1}, @in={0x2, 0x4e20, @broadcast}, @in6={0xa, 0x4e23, 0x3d, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x9}, @in6={0xa, 0x4e24, 0x6, @mcast2, 0x101}], 0x58) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x4}}}]}, 0x38}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000001800090000000000000000001c140000fe000001000000000c0013"], 0x28}}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r3, 0x0) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000000)=0x7f, 0x4) listen(r0, 0xfff) 109.811426ms ago: executing program 3 (id=2290): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) close(r1) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0x0, 0x0, @vifc_lcl_ifindex, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000280)={@broadcast, @empty, 0x0, "ffff01e03d64a831683fdc3fd440829c82cfc400"}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000890438000000000095000072"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb=0x1, r1}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000002c0)=ANY=[@ANYRES32=r1, @ANYRES32=r1, @ANYBLOB="0700000072ff7f350b382300", @ANYRES32=0x0, @ANYBLOB="498483e9f066bc3938f77ed147dabe270ffd13d15ea8eff0d1c5a255b8eae66d67343d18de48b84bbde9b4ab8361c3f998227ddcca55136bb10d8eba469e0d8333d10871628778c6bbc8846bd740567959a5b0888515d1aa0ac66c83e4f12013a2d5195922224835395268a586b89b2be6a18524364a11a06f2fb01142320941e8e37685d3efea3a97a6242a67c100b189c47953ac3d3c406c406a009e58cab81a2e0f67c69dc52eab15d5211ca241b178b35e89c4d0d705cf873f115324a3d4e80c8ccaf886486872cfe88997441e39"], 0x20) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000980)=ANY=[@ANYRESDEC=r0], 0x114}], 0x1, 0x0, 0x0, 0x400e084}, 0x24040881) 107.648888ms ago: executing program 1 (id=2291): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = socket(0x400000000010, 0x3, 0x0) (async) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c00170000000000000000000000393a73797a6b616c6c657230e44f9bef04969a8bcf155ff1d605edb5d054b6bea698fcde45c91c6e8fc719a604db11802e379c143932440edef21b03c35d9be0"], 0x38}}, 0x4) (async) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r7) (async) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0x10}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xca4, 0x400, 0x4b, 0x5c75, 0x800, 0xc, 0x1, 0xffffffff, 0x400}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) (async) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r10, {0x0, 0x9}, {0x0, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0xc031}, 0x4008000) (async) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 102.10332ms ago: executing program 4 (id=2292): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000000)='/proc/net/\x00\x00t4/c+\x0fG\xf9aK\fX\a0\x04\x00\x00\x82q\xee'}, 0x39) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) (async) openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000100), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "0000000400", "6abc00000000000000000000001000", "f0630400", "c14ec98dcd2ad89f"}, 0x28) sendto$inet6(r1, &(0x7f0000000140)="b9", 0x1, 0x8000, 0x0, 0x0) (async) sendto$inet6(r1, &(0x7f0000000140)="b9", 0x1, 0x8000, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000000240)="c655", 0x2, 0xc0, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) (async) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000400)="fa", 0x1) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000400)="fa", 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x30}, @IFLA_GRE_IKEY={0x8, 0x4, 0x20000000}]}}}]}, 0x48}}, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) 0s ago: executing program 2 (id=2293): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000000040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x0, 0x0, 0x0, {0x1, 0x0, 0x5}, @NFT_OBJECT_SECMARK=@NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}}, @NFT_MSG_DELCHAIN={0x120, 0x5, 0xa, 0x301, 0x0, 0x0, {0x6, 0x0, 0x9}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_CHAIN_POLICY={0x8}, @NFTA_CHAIN_HOOK={0x20, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'pimreg1\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_USERDATA={0x45, 0xc, "25535dd0762dc1da818a94f9a00e5b166134fc636a1e8490b75e9a2b2bd6110a578fab999ae12e0f38e3d9eba40ccb12925d2e4f3f8a2dd27f8db3667cc39af619"}, @NFTA_CHAIN_HOOK={0x68, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4b7ff10f}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6ba88d0c}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x10a81096}, @NFTA_HOOK_DEV={0x14, 0x3, 'sit0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'ip6gre0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'ipvlan0\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xffffffffffffffff}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELCHAIN={0x3c, 0x5, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffb}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x6}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7f6a2fcb}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x1a4}, 0x1, 0x0, 0x0, 0x20000081}, 0x20000810) recvfrom(r0, &(0x7f0000000280)=""/200, 0xc8, 0x40, &(0x7f0000000380)=@in={0x2, 0x4e21, @remote}, 0x80) r1 = socket$igmp(0x2, 0x3, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000400)={0x0, 0x0}, &(0x7f0000000440)=0xc) setsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000480)={{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6=@mcast2, 0x4e23, 0x4, 0x4e23, 0xa9, 0xa, 0xe0, 0x20, 0x2e, 0x0, r2}, {0xfffffffffffffffb, 0x34b0000000, 0x8, 0xff, 0x200, 0x260, 0x3, 0xbbf2}, {0x0, 0x4, 0x4, 0x400}, 0x668d, 0x0, 0x0, 0x0, 0x5, 0x3}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d6, 0x6c}, 0x2, @in=@loopback, 0x3505, 0x0, 0x0, 0x0, 0x3, 0xffffffff, 0x2}}, 0xe8) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000580), r3) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f00000005c0)=0x6) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000600)={@remote, @rand_addr=0x64010102, 0x0, 0x1, [@private=0xa010102]}, 0x14) sendmsg$IPCTNL_MSG_CT_GET_DYING(r0, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x14, 0x6, 0x1, 0x3, 0x0, 0x0, {0x0, 0x0, 0x7}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000801}, 0x8000) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) write$nci(r4, &(0x7f0000000780)=@NCI_OP_CORE_SET_CONFIG_RSP={0x0, 0x1, 0x2, 0x2, 0x4, {0x1, 0xda, "9e519ae6d87aba696f421ab3dd2d4b443a731acc832e9fb80b400fd57f585ba567fcb3b9bb18375fc470058b646c2c7e363f2b146f790b706ddd0e773af46fccbb8b2f49b3a70bc2bd9543ecfdadafcd04b1bb6fa702861573395d4be878296ab5982389c62f1b5cd645bb32e1f8fa7dd5ecbc1580165032bfebf313172e99efba1b1df7ae2af165c87630d1421449d31c6f98adb8af54ddbebb8a68e4e1972531a47ed5cb9b1b1cd6b1593648e015de552d303ddd3528b92ff1244b560649401a4a1cc47c31f28d612a72339954b451a06dbd9ca020b816c279"}}, 0xdf) r5 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000880)={0x0, @broadcast, @remote}, &(0x7f00000008c0)=0xc) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000900)={r6, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) socket$inet(0x2, 0x5, 0x7fffffff) socket$nl_xfrm(0x10, 0x3, 0x6) r7 = socket$l2tp(0x2, 0x2, 0x73) getpeername$l2tp(r7, &(0x7f0000000940)={0x2, 0x0, @dev}, &(0x7f0000000980)=0x10) listen(r7, 0x100) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a40)={{0x1, 0xffffffffffffffff}, &(0x7f00000009c0), &(0x7f0000000a00)}, 0x20) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000bc0)={&(0x7f0000000a80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x3, [@var={0x9, 0x0, 0x0, 0xe, 0x5}]}, {0x0, [0x0]}}, &(0x7f0000000ac0)=""/214, 0x2b, 0xd6, 0x1, 0x8, 0x10000}, 0x28) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000dc0)={&(0x7f0000000c80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa0, 0xa0, 0x4, [@volatile={0xc, 0x0, 0x0, 0x9, 0x2}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x3, 0x5}}, @float={0xe, 0x0, 0x0, 0x10, 0x4}, @decl_tag={0xc, 0x0, 0x0, 0x11, 0x1, 0x2}, @struct={0xf, 0x7, 0x0, 0x4, 0x1, 0x9, [{0xf, 0x0, 0x101}, {0xf, 0x1, 0x7ff}, {0x0, 0x4, 0x2}, {0xc, 0x0, 0x8}, {0xa, 0x5, 0x80000001}, {0x3, 0x4, 0x86}, {0xc, 0x4, 0x5}]}]}, {0x0, [0x2e, 0x61]}}, &(0x7f0000000d40)=""/74, 0xbc, 0x4a, 0x1, 0x5, 0x10000}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=@bloom_filter={0x1e, 0x8, 0x7f, 0x9, 0x8000, r8, 0xc, '\x00', r6, r9, 0x5, 0x2, 0x4, 0x0, @value=r10}, 0x50) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000e40), r3) sendmsg$IEEE802154_LLSEC_LIST_KEY(r11, &(0x7f0000000f00)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x14, r12, 0x400, 0x70bd2b, 0x25dfdbfd, {}, ["", ""]}, 0x14}}, 0x44000) r13 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000f80), r11) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000001100)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000010c0)={&(0x7f0000001040)={0x68, r13, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_LEVEL={0x24, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x40}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x7}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0xab}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}]}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x400c4}, 0x800) kernel console output (not intermixed with test programs): 3.646': attribute type 1 has an invalid length. [ 139.766256][ T8619] netlink: 'syz.3.646': attribute type 1 has an invalid length. [ 140.063015][ T8530] lo speed is unknown, defaulting to 1000 [ 140.165482][ T5868] tipc: Node number set to 2540066638 [ 140.218052][ T8638] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 140.551057][ T8654] netlink: 'syz.3.656': attribute type 1 has an invalid length. [ 140.554931][ T8656] Bluetooth: MGMT ver 1.23 [ 140.573451][ T8530] lo speed is unknown, defaulting to 1000 [ 140.606755][ T8654] 8021q: adding VLAN 0 to HW filter on device bond1 [ 140.631332][ T8658] 8021q: adding VLAN 0 to HW filter on device bond1 [ 140.640838][ T8658] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 140.653229][ T8658] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 140.692776][ T8652] tipc: Enabled bearer , priority 0 [ 140.700745][ T8652] syzkaller0: entered promiscuous mode [ 140.714822][ T8652] syzkaller0: entered allmulticast mode [ 140.809728][ T8654] veth1: entered promiscuous mode [ 140.839507][ T748] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.859921][ T748] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.942009][ T8530] lo speed is unknown, defaulting to 1000 [ 141.024192][ T8665] __nla_validate_parse: 3 callbacks suppressed [ 141.024211][ T8665] netlink: 4 bytes leftover after parsing attributes in process `syz.3.658'. [ 141.199559][ T8530] lo speed is unknown, defaulting to 1000 [ 141.322604][ T8651] tipc: Resetting bearer [ 141.353700][ T8651] tipc: Disabling bearer [ 141.422894][ T8675] netlink: 140 bytes leftover after parsing attributes in process `syz.3.661'. [ 141.481756][ T8530] lo speed is unknown, defaulting to 1000 [ 141.545716][ T8680] netlink: 36 bytes leftover after parsing attributes in process `syz.1.663'. [ 141.771936][ T8689] netlink: 16 bytes leftover after parsing attributes in process `syz.3.666'. [ 141.800022][ T8691] netlink: 8 bytes leftover after parsing attributes in process `syz.1.667'. [ 141.813741][ T8691] netlink: 4 bytes leftover after parsing attributes in process `syz.1.667'. [ 141.842523][ T8691] netlink: 10 bytes leftover after parsing attributes in process `syz.1.667'. [ 141.844196][ T8530] lo speed is unknown, defaulting to 1000 [ 141.867978][ T8691] nbd: socks must be embedded in a SOCK_ITEM attr [ 141.929693][ T8698] netlink: 28 bytes leftover after parsing attributes in process `syz.3.669'. [ 142.446182][ T8713] netlink: 12 bytes leftover after parsing attributes in process `syz.0.674'. [ 142.457383][ T8712] netlink: 20 bytes leftover after parsing attributes in process `syz.4.673'. [ 142.671981][ T8713] 8021q: adding VLAN 0 to HW filter on device bond3 [ 142.702978][ T8722] netlink: 'syz.0.674': attribute type 1 has an invalid length. [ 144.167571][ T8731] 8021q: adding VLAN 0 to HW filter on device bond2 [ 144.186938][ T8732] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 144.197928][ T8014] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 144.210727][ T8732] bond2: (slave macvlan4): Enslaving as an active interface with an up link [ 144.283513][ T8733] bond0: (slave bond_slave_0): Releasing backup interface [ 144.317045][ T8005] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 144.336452][ T8733] bond0: (slave bond_slave_1): Releasing backup interface [ 144.363173][ T8733] team0: Port device team_slave_0 removed [ 144.380826][ T8733] team0: Port device team_slave_1 removed [ 144.390615][ T8733] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 144.399521][ T8733] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 144.410590][ T8733] bond2: (slave macvlan4): Removing an active aggregator [ 144.425416][ T8733] bond2: (slave macvlan4): Releasing backup interface [ 144.862996][ T8771] bridge_slave_0: left allmulticast mode [ 144.875004][ T8771] bridge_slave_0: left promiscuous mode [ 144.884369][ T8771] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.919734][ T8771] bridge_slave_1: left allmulticast mode [ 144.926747][ T8771] bridge_slave_1: left promiscuous mode [ 144.932566][ T8771] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.972288][ T8783] netlink: 'syz.2.685': attribute type 10 has an invalid length. [ 145.038793][ T8771] bond0: (slave bond_slave_0): Releasing backup interface [ 145.083059][ T8771] bond0: (slave bond_slave_1): Releasing backup interface [ 145.108531][ T8771] team0: Port device team_slave_0 removed [ 145.148496][ T8771] team0: Port device team_slave_1 removed [ 145.229051][ T43] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 145.256216][ T8791] netlink: 'syz.1.690': attribute type 13 has an invalid length. [ 145.289785][ T8791] netlink: 'syz.1.690': attribute type 17 has an invalid length. [ 145.300063][ T8783] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 145.440332][ T8795] netlink: 'syz.3.692': attribute type 1 has an invalid length. [ 145.682416][ T43] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 145.730867][ T8805] netlink: 'syz.3.695': attribute type 13 has an invalid length. [ 146.387865][ T8828] __nla_validate_parse: 5 callbacks suppressed [ 146.387884][ T8828] netlink: 16 bytes leftover after parsing attributes in process `syz.3.700'. [ 146.484484][ T8832] netlink: 20 bytes leftover after parsing attributes in process `syz.0.703'. [ 146.528178][ T8834] netlink: 'syz.3.702': attribute type 9 has an invalid length. [ 146.543578][ T8834] netlink: 212260 bytes leftover after parsing attributes in process `syz.3.702'. [ 146.827837][ T8839] lo speed is unknown, defaulting to 1000 [ 147.146279][ T8845] IPv6: sit1: Disabled Multicast RS [ 147.152642][ T8845] sit1: entered allmulticast mode [ 147.396501][ T8849] netlink: 'syz.1.709': attribute type 4 has an invalid length. [ 147.418225][ T8849] IPVS: set_ctl: invalid protocol: 8 224.0.0.2:20001 [ 147.466198][ T8852] netlink: 'syz.3.708': attribute type 9 has an invalid length. [ 147.575756][ T8858] netlink: 'syz.2.710': attribute type 21 has an invalid length. [ 147.595541][ T8857] netlink: 'syz.0.711': attribute type 1 has an invalid length. [ 147.675408][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 147.793308][ T8857] 8021q: adding VLAN 0 to HW filter on device bond4 [ 147.815583][ T8862] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 147.824919][ T8862] bond4: (slave batadv1): making interface the new active one [ 147.838218][ T8862] bond4: (slave batadv1): Enslaving as an active interface with an up link [ 148.843438][ T8910] netlink: 'syz.2.723': attribute type 23 has an invalid length. [ 148.991022][ T8920] tun0: tun_chr_ioctl cmd 1074025675 [ 148.996621][ T8920] tun0: persist enabled [ 149.002870][ T8920] tun0: tun_chr_ioctl cmd 1074025675 [ 149.011076][ T8920] tun0: persist enabled [ 149.019287][ T8921] tun0: tun_chr_ioctl cmd 1074025675 [ 149.024847][ T8921] tun0: persist enabled [ 149.179643][ T8927] netlink: 'syz.2.727': attribute type 1 has an invalid length. [ 149.189803][ T8927] netlink: 236 bytes leftover after parsing attributes in process `syz.2.727'. [ 149.279979][ T8929] lo speed is unknown, defaulting to 1000 [ 149.550544][ T8873] Can't find ip_set type hash: [ 149.935153][ T8765] Set syz1 is full, maxelem 65536 reached [ 150.104330][ T8951] netlink: 'syz.0.733': attribute type 1 has an invalid length. [ 150.144908][ T8951] 8021q: adding VLAN 0 to HW filter on device bond5 [ 150.221312][ T8963] netlink: 28 bytes leftover after parsing attributes in process `syz.0.733'. [ 150.283179][ T8951] gretap1: entered promiscuous mode [ 150.343007][ T8951] bond5: (slave gretap1): making interface the new active one [ 150.364220][ T8960] netlink: 'syz.3.736': attribute type 1 has an invalid length. [ 150.374914][ T8951] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 150.529770][ T8960] 8021q: adding VLAN 0 to HW filter on device bond2 [ 150.530950][ T8977] netlink: 240 bytes leftover after parsing attributes in process `syz.0.733'. [ 150.641742][ T8982] netlink: 28 bytes leftover after parsing attributes in process `syz.3.740'. [ 150.651328][ T8982] netlink: 28 bytes leftover after parsing attributes in process `syz.3.740'. [ 150.667259][ T8982] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 150.799925][ T8986] netlink: 20 bytes leftover after parsing attributes in process `syz.3.741'. [ 150.809669][ T8986] netlink: 100 bytes leftover after parsing attributes in process `syz.3.741'. [ 150.852516][ T8985] syzkaller0: entered promiscuous mode [ 150.858359][ T8985] syzkaller0: entered allmulticast mode [ 150.876465][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 150.884393][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 151.002913][ T8997] openvswitch: netlink: Flow key attr not present in new flow. [ 151.089910][ T9003] pim6reg1: entered promiscuous mode [ 151.095394][ T9003] pim6reg1: entered allmulticast mode [ 151.159896][ T9004] netlink: 'syz.0.746': attribute type 15 has an invalid length. [ 151.332909][ T8976] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 151.468117][ T9027] __nla_validate_parse: 4 callbacks suppressed [ 151.468134][ T9027] netlink: 12 bytes leftover after parsing attributes in process `syz.4.753'. [ 151.688581][ T9027] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 151.702382][ T9041] netlink: 'syz.3.755': attribute type 5 has an invalid length. [ 151.738981][ T9041] netlink: 24 bytes leftover after parsing attributes in process `syz.3.755'. [ 151.804006][ T9043] netlink: 8 bytes leftover after parsing attributes in process `syz.2.754'. [ 151.834940][ T9039] pim6reg1: entered promiscuous mode [ 151.843329][ T9039] pim6reg1: entered allmulticast mode [ 151.859046][ T9045] ieee802154 phy1 wpan1: encryption failed: -22 [ 152.156370][ T9057] tipc: Resetting bearer [ 152.214614][ T9049] tipc: Resetting bearer [ 152.605772][ T8005] tipc: Resetting bearer [ 152.743326][ T9083] syzkaller0: left promiscuous mode [ 152.750280][ T9083] syzkaller0: left allmulticast mode [ 152.759966][ T9083] tipc: Resetting bearer [ 152.804450][ T9088] netlink: 'syz.3.771': attribute type 58 has an invalid length. [ 152.817554][ T9088] netlink: 20 bytes leftover after parsing attributes in process `syz.3.771'. [ 152.829142][ T9094] netlink: 'syz.0.768': attribute type 1 has an invalid length. [ 152.849094][ T9085] block nbd0: server does not support multiple connections per device. [ 152.859932][ T9085] block nbd0: shutting down sockets [ 153.456998][ T9114] netlink: 12 bytes leftover after parsing attributes in process `syz.3.777'. [ 153.652390][ T9118] netlink: 4 bytes leftover after parsing attributes in process `syz.0.774'. [ 153.670086][ T9118] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input5 [ 153.762799][ T9125] netlink: 40 bytes leftover after parsing attributes in process `syz.4.778'. [ 153.839865][ T9128] netlink: 24 bytes leftover after parsing attributes in process `syz.2.782'. [ 153.907259][ T9132] netlink: 16 bytes leftover after parsing attributes in process `syz.4.783'. [ 153.918344][ T9132] netlink: 216 bytes leftover after parsing attributes in process `syz.4.783'. [ 153.991409][ T9137] pimreg: entered allmulticast mode [ 154.011864][ T9137] pimreg: left allmulticast mode [ 154.891550][ T9171] tipc: Enabled bearer , priority 0 [ 154.941247][ T9171] tipc: Resetting bearer [ 154.949678][ T9169] tipc: Resetting bearer [ 154.981176][ T9169] tipc: Disabling bearer [ 155.146873][ T9177] macvtap1: entered promiscuous mode [ 155.156714][ T9177] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 155.171832][ T9177] mac80211_hwsim hwsim11 wlan1: left promiscuous mode [ 155.517822][ T9191] tipc: Enabled bearer , priority 0 [ 155.629230][ T9195] vxcan3: entered allmulticast mode [ 155.693279][ T9191] syzkaller0: entered promiscuous mode [ 155.694160][ T9198] netlink: 'syz.1.800': attribute type 1 has an invalid length. [ 155.706937][ T9191] syzkaller0: entered allmulticast mode [ 155.875028][ T9195] tipc: Resetting bearer [ 155.902510][ T9190] tipc: Resetting bearer [ 155.960628][ T9190] tipc: Disabling bearer [ 156.003124][ T9212] lo speed is unknown, defaulting to 1000 [ 156.021923][ T9212] lo speed is unknown, defaulting to 1000 [ 156.042538][ T9212] lo speed is unknown, defaulting to 1000 [ 156.085754][ T9212] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 156.127564][ T9212] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 156.162081][ T9216] tipc: Enabled bearer , priority 0 [ 156.309659][ T9212] lo speed is unknown, defaulting to 1000 [ 156.347765][ T9212] lo speed is unknown, defaulting to 1000 [ 156.379300][ T9208] tipc: Disabling bearer [ 156.415624][ T9212] lo speed is unknown, defaulting to 1000 [ 156.423357][ T9212] lo speed is unknown, defaulting to 1000 [ 156.448720][ T9212] lo speed is unknown, defaulting to 1000 [ 156.874563][ T9241] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 156.902630][ T9249] __nla_validate_parse: 5 callbacks suppressed [ 156.902647][ T9249] netlink: 248 bytes leftover after parsing attributes in process `syz.4.814'. [ 157.050984][ T9255] netlink: 12 bytes leftover after parsing attributes in process `syz.1.816'. [ 157.052156][ T9256] sctp: [Deprecated]: syz.0.815 (pid 9256) Use of int in max_burst socket option deprecated. [ 157.052156][ T9256] Use struct sctp_assoc_value instead [ 157.542756][ T5943] lo speed is unknown, defaulting to 1000 [ 157.551489][ T9243] lo speed is unknown, defaulting to 1000 [ 157.761672][ T9262] netlink: 14 bytes leftover after parsing attributes in process `syz.4.818'. [ 157.807192][ T9264] netlink: 'syz.3.819': attribute type 23 has an invalid length. [ 157.962617][ T9270] netlink: 144 bytes leftover after parsing attributes in process `syz.0.817'. [ 157.972617][ T9268] IPVS: set_ctl: invalid protocol: 41 172.20.20.27:20003 [ 157.988093][ T9272] netlink: 60 bytes leftover after parsing attributes in process `syz.1.822'. [ 157.997252][ T9272] netlink: 84 bytes leftover after parsing attributes in process `syz.1.822'. [ 158.133929][ T9262] bond0 (unregistering): Released all slaves [ 158.183151][ T9243] lo speed is unknown, defaulting to 1000 [ 158.459237][ T9286] block nbd0: server does not support multiple connections per device. [ 158.512204][ T9286] block nbd0: shutting down sockets [ 158.598864][ T9301] netlink: 248 bytes leftover after parsing attributes in process `syz.1.828'. [ 158.638110][ T9301] netlink: 48 bytes leftover after parsing attributes in process `syz.1.828'. [ 158.690042][ T9301] rdma_rxe: rxe_newlink: failed to add lo [ 158.763737][ T9286] openvswitch: netlink: Duplicate or invalid key (type 0). [ 158.781742][ T9286] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 158.856769][ T9301] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 158.973017][ T9310] netlink: 830 bytes leftover after parsing attributes in process `syz.4.830'. [ 159.578853][ T9353] netlink: 16 bytes leftover after parsing attributes in process `syz.3.834'. [ 159.597656][ T9353] openvswitch: netlink: Missing key (keys=40, expected=80) [ 159.662564][ T9348] lo speed is unknown, defaulting to 1000 [ 159.935931][ T9369] netlink: zone id is out of range [ 159.945114][ T9369] netlink: zone id is out of range [ 159.950736][ T9369] netlink: zone id is out of range [ 159.956135][ T9369] netlink: zone id is out of range [ 159.961459][ T9369] netlink: zone id is out of range [ 159.967361][ T9369] netlink: zone id is out of range [ 160.218914][ T9348] lo speed is unknown, defaulting to 1000 [ 160.220769][ T9358] lo speed is unknown, defaulting to 1000 [ 160.453005][ T9363] lo speed is unknown, defaulting to 1000 [ 160.460316][ T9388] tipc: Resetting bearer [ 160.565901][ T9358] lo speed is unknown, defaulting to 1000 [ 160.574024][ T9392] nbd: must specify at least one socket [ 160.655518][ T9390] tipc: Resetting bearer [ 160.860483][ T9380] lo speed is unknown, defaulting to 1000 [ 161.012424][ T9401] vlan2: entered promiscuous mode [ 161.020921][ T9401] vlan2: entered allmulticast mode [ 161.168385][ T9380] lo speed is unknown, defaulting to 1000 [ 161.181809][ T9363] lo speed is unknown, defaulting to 1000 [ 161.661018][ T8010] tipc: Resetting bearer [ 161.804144][ T9425] netlink: 'syz.0.852': attribute type 1 has an invalid length. [ 161.987745][ T9435] __nla_validate_parse: 4 callbacks suppressed [ 161.987765][ T9435] netlink: 8 bytes leftover after parsing attributes in process `syz.0.854'. [ 162.155997][ T9441] netlink: 156 bytes leftover after parsing attributes in process `syz.0.856'. [ 162.393778][ T9451] tipc: Enabled bearer , priority 0 [ 162.402481][ T9451] syzkaller0: entered promiscuous mode [ 162.408241][ T9451] syzkaller0: entered allmulticast mode [ 162.445967][ T9451] tipc: Resetting bearer [ 162.461231][ T9450] tipc: Resetting bearer [ 162.478203][ T9450] tipc: Disabling bearer [ 162.617051][ T9455] netlink: 12 bytes leftover after parsing attributes in process `syz.3.859'. [ 162.990420][ T9484] netlink: 60 bytes leftover after parsing attributes in process `syz.3.867'. [ 163.104606][ T9493] syzkaller0: entered promiscuous mode [ 163.110428][ T9493] syzkaller0: entered allmulticast mode [ 163.117318][ T9493] tipc: Resetting bearer [ 163.222734][ T9500] lo speed is unknown, defaulting to 1000 [ 163.627767][ T9509] lo speed is unknown, defaulting to 1000 [ 163.827378][ T9524] IPVS: length: 150 != 84136430776 [ 164.177839][ T9545] netlink: 'syz.1.881': attribute type 33 has an invalid length. [ 164.190165][ T9545] netlink: 152 bytes leftover after parsing attributes in process `syz.1.881'. [ 164.291644][ T9547] pimreg: entered allmulticast mode [ 164.326051][ T9531] lo speed is unknown, defaulting to 1000 [ 164.364087][ T9535] tipc: Enabled bearer , priority 10 [ 164.521644][ T5971] IPVS: starting estimator thread 0... [ 164.530591][ T36] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 164.567318][ T9554] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 164.645566][ T9555] IPVS: using max 40 ests per chain, 96000 per kthread [ 164.939326][ T9568] netlink: 'syz.1.890': attribute type 29 has an invalid length. [ 165.119882][ T9577] netlink: 4 bytes leftover after parsing attributes in process `syz.1.892'. [ 165.155634][ T9573] lo speed is unknown, defaulting to 1000 [ 165.254510][ T9578] netlink: 20 bytes leftover after parsing attributes in process `syz.1.892'. [ 165.449417][ T9586] netlink: 'syz.3.893': attribute type 2 has an invalid length. [ 165.595373][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 165.677239][ T9590] net_ratelimit: 21 callbacks suppressed [ 165.677257][ T9590] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 165.823716][ T5868] lo speed is unknown, defaulting to 1000 [ 165.824531][ T9595] lo speed is unknown, defaulting to 1000 [ 165.957547][ T9595] lo speed is unknown, defaulting to 1000 [ 166.017526][ T9595] lo speed is unknown, defaulting to 1000 [ 166.071551][ T9595] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 166.160928][ T9615] netlink: 'syz.1.901': attribute type 21 has an invalid length. [ 166.378661][ T9595] lo speed is unknown, defaulting to 1000 [ 166.391775][ T9595] lo speed is unknown, defaulting to 1000 [ 166.445657][ T9595] lo speed is unknown, defaulting to 1000 [ 166.462757][ T9595] lo speed is unknown, defaulting to 1000 [ 166.484526][ T9595] lo speed is unknown, defaulting to 1000 [ 166.501676][ T9624] netlink: 24 bytes leftover after parsing attributes in process `syz.0.903'. [ 166.511381][ T9595] lo speed is unknown, defaulting to 1000 [ 166.520690][ T9626] netlink: 4 bytes leftover after parsing attributes in process `syz.1.904'. [ 166.551551][ T9624] netlink: 4 bytes leftover after parsing attributes in process `syz.0.903'. [ 166.786205][ T9635] tipc: Enabled bearer , priority 0 [ 166.793951][ T9635] syzkaller0: entered promiscuous mode [ 166.799901][ T9635] syzkaller0: entered allmulticast mode [ 166.875300][ T9635] tipc: Resetting bearer [ 166.901496][ T9631] tipc: Resetting bearer [ 166.949234][ T9631] tipc: Disabling bearer [ 167.289758][ T9659] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ^>>Mv^侦_xDpj [ 167.472096][ T9668] __nla_validate_parse: 1 callbacks suppressed [ 167.472117][ T9668] netlink: 36 bytes leftover after parsing attributes in process `syz.2.916'. [ 167.611001][ T9672] netlink: 32 bytes leftover after parsing attributes in process `syz.2.918'. [ 167.655625][ T9672] netem: unknown loss type 13 [ 167.660622][ T9672] netem: change failed [ 167.674462][ T9674] netlink: 8 bytes leftover after parsing attributes in process `syz.1.919'. [ 167.868365][ T9679] netlink: 'syz.3.920': attribute type 1 has an invalid length. [ 168.011565][ T9693] netlink: 12 bytes leftover after parsing attributes in process `syz.2.926'. [ 168.167850][ T9704] netlink: 'syz.3.928': attribute type 2 has an invalid length. [ 168.177953][ T9704] netlink: 164 bytes leftover after parsing attributes in process `syz.3.928'. [ 168.372040][ T9718] netlink: 12 bytes leftover after parsing attributes in process `syz.2.932'. [ 168.373553][ T9722] netlink: 60 bytes leftover after parsing attributes in process `syz.4.934'. [ 168.456400][ T9727] netlink: 28 bytes leftover after parsing attributes in process `syz.2.932'. [ 168.500218][ T9725] macvlan1: entered promiscuous mode [ 168.512407][ T9725] ipvlan0: entered promiscuous mode [ 168.522355][ T9725] ipvlan0: left promiscuous mode [ 168.540521][ T9725] macvlan1: left promiscuous mode [ 168.577876][ T9718] macvlan2: entered promiscuous mode [ 168.583338][ T9718] macvlan2: entered allmulticast mode [ 168.590058][ T9718] bond3: (slave macvlan2): Opening slave failed [ 169.303403][ T9741] lo speed is unknown, defaulting to 1000 [ 169.310317][ T9744] netlink: 76 bytes leftover after parsing attributes in process `syz.1.944'. [ 169.338249][ T9753] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0 [ 169.433909][ T9754] syzkaller0: left promiscuous mode [ 169.441038][ T9754] syzkaller0: left allmulticast mode [ 169.445373][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 169.447644][ T9754] tipc: Resetting bearer [ 169.789027][ T9777] netlink: 4 bytes leftover after parsing attributes in process `syz.0.950'. [ 170.101102][ T9741] lo speed is unknown, defaulting to 1000 [ 170.112961][ T9792] lo speed is unknown, defaulting to 1000 [ 170.514272][ T9792] lo speed is unknown, defaulting to 1000 [ 170.576318][ T9771] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 170.864440][ T9805] ip6_vti0: Master is either lo or non-ether device [ 170.874006][ T9807] netlink: 'syz.0.954': attribute type 3 has an invalid length. [ 171.189795][ T9818] sctp: [Deprecated]: syz.0.959 (pid 9818) Use of int in maxseg socket option. [ 171.189795][ T9818] Use struct sctp_assoc_value instead [ 171.495677][ T9828] nbd0: detected capacity change from 0 to 127 [ 171.520391][ T5861] block nbd0: Receive control failed (result -32) [ 171.524252][ T9836] netlink: 'syz.4.962': attribute type 1 has an invalid length. [ 171.618017][ T9836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 171.667246][ T9831] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 171.784828][ T9844] lo speed is unknown, defaulting to 1000 [ 171.819467][ T9850] netlink: 'syz.1.966': attribute type 9 has an invalid length. [ 172.052115][ T9862] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 172.391407][ T9844] lo speed is unknown, defaulting to 1000 [ 172.391423][ T9856] lo speed is unknown, defaulting to 1000 [ 172.600669][ T9879] : renamed from batadv_slave_1 (while UP) [ 172.723463][ T9886] __nla_validate_parse: 8 callbacks suppressed [ 172.723483][ T9886] netlink: 72 bytes leftover after parsing attributes in process `syz.0.977'. [ 172.771228][ T9886] netlink: 'syz.0.977': attribute type 1 has an invalid length. [ 172.788277][ T9856] lo speed is unknown, defaulting to 1000 [ 172.849936][ T9891] netlink: 196 bytes leftover after parsing attributes in process `syz.2.976'. [ 173.046273][ T9899] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 174.012894][ T9935] netlink: 'syz.1.989': attribute type 3 has an invalid length. [ 174.021766][ T9935] netlink: 'syz.1.989': attribute type 3 has an invalid length. [ 174.100600][ T9941] netlink: 'syz.2.991': attribute type 1 has an invalid length. [ 174.241651][ T9946] netlink: 8 bytes leftover after parsing attributes in process `syz.1.992'. [ 174.336990][ T9949] Set syz0 is full, maxelem 0 reached [ 174.404072][ T9952] netlink: 16 bytes leftover after parsing attributes in process `syz.1.995'. [ 174.458704][ T9952] tipc: Enabling of bearer rejected, already enabled [ 174.504197][ T9954] tipc: Enabling of bearer rejected, already enabled [ 174.578588][ T9962] sctp: [Deprecated]: syz.3.996 (pid 9962) Use of struct sctp_assoc_value in delayed_ack socket option. [ 174.578588][ T9962] Use struct sctp_sack_info instead [ 174.780677][ T9969] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1000'. [ 175.073363][ T9989] IPVS: stopping backup sync thread 6676 ... [ 175.101920][ T9987] lo speed is unknown, defaulting to 1000 [ 175.110900][ T9991] netlink: 'syz.3.1003': attribute type 14 has an invalid length. [ 175.203435][ T9991] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1003'. [ 175.236547][ T9991] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1003'. [ 175.416158][T10011] netlink: 'syz.4.1010': attribute type 10 has an invalid length. [ 175.476012][T10013] netlink: 'syz.4.1010': attribute type 10 has an invalid length. [ 175.516478][T10011] team0: Port device dummy0 added [ 175.619263][T10013] team0: Port device dummy0 removed [ 175.870737][T10033] tipc: Enabled bearer , priority 0 [ 175.997537][T10037] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1017'. [ 176.023133][T10032] tipc: Disabling bearer [ 176.030565][T10039] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1018'. [ 176.067899][T10039] netlink: 'syz.1.1018': attribute type 1 has an invalid length. [ 176.119674][ T9987] lo speed is unknown, defaulting to 1000 [ 176.161234][T10039] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1018'. [ 176.173251][T10039] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 176.322560][T10044] netlink: 'syz.3.1020': attribute type 2 has an invalid length. [ 176.494837][T10054] gretap2: entered promiscuous mode [ 178.061999][T10145] __nla_validate_parse: 5 callbacks suppressed [ 178.062018][T10145] netlink: 1284 bytes leftover after parsing attributes in process `syz.4.1044'. [ 178.136606][T10145] lo speed is unknown, defaulting to 1000 [ 178.380986][T10145] lo speed is unknown, defaulting to 1000 [ 178.573482][T10161] lo: entered allmulticast mode [ 178.612189][T10161] lo: left allmulticast mode [ 178.648206][T10162] netlink: 324 bytes leftover after parsing attributes in process `syz.0.1049'. [ 178.788321][T10170] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1052'. [ 178.810864][T10169] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1053'. [ 179.143492][T10189] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 179.160783][T10189] pim6reg0: linktype set to 768 [ 179.179486][T10193] netlink: 788 bytes leftover after parsing attributes in process `syz.4.1060'. [ 179.400407][T10206] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1063'. [ 179.458158][T10206] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1063'. [ 179.470743][T10212] tipc: Enabled bearer , priority 0 [ 179.486628][T10212] syzkaller0: entered promiscuous mode [ 179.500990][T10212] syzkaller0: entered allmulticast mode [ 179.605134][T10212] tipc: Resetting bearer [ 179.659791][T10208] tipc: Resetting bearer [ 179.714371][T10208] tipc: Disabling bearer [ 179.759816][T10233] netlink: 424 bytes leftover after parsing attributes in process `syz.3.1070'. [ 179.778719][ T5943] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 179.796065][T10233] netlink: 424 bytes leftover after parsing attributes in process `syz.3.1070'. [ 179.815344][T10228] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 179.937570][ T36] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 179.960776][ T36] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 179.961232][T10246] netlink: 'syz.2.1073': attribute type 1 has an invalid length. [ 180.063849][T10246] bond4: entered promiscuous mode [ 180.079179][T10246] 8021q: adding VLAN 0 to HW filter on device bond4 [ 180.089977][T10254] tipc: Resetting bearer [ 180.098827][T10242] lo speed is unknown, defaulting to 1000 [ 180.099069][T10254] openvswitch: netlink: IPv4 tun info is not correct [ 180.150066][T10253] bond4: (slave bridge2): making interface the new active one [ 180.182101][T10253] bridge2: entered promiscuous mode [ 180.201751][T10253] bond4: (slave bridge2): Enslaving as an active interface with an up link [ 180.239397][T10254] tipc: Enabling of bearer rejected, already enabled [ 180.247960][T10257] syzkaller0: entered promiscuous mode [ 180.253656][T10257] syzkaller0: entered allmulticast mode [ 180.278386][T10254] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1075'. [ 180.319155][T10252] tipc: Resetting bearer [ 180.475804][ T5943] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 180.502506][T10244] lo speed is unknown, defaulting to 1000 [ 180.530973][T10242] lo speed is unknown, defaulting to 1000 [ 180.575788][T10274] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 180.641222][T10274] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 180.727812][T10274] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 180.875807][ T5943] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 180.955019][T10244] lo speed is unknown, defaulting to 1000 [ 180.956443][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 180.968038][ C1] bridge0: topology change detected, propagating [ 180.974854][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 180.982129][ C1] bridge0: topology change detected, propagating [ 181.159233][T10296] ipvlan2: entered promiscuous mode [ 181.165887][T10296] bridge0: port 1(ipvlan2) entered blocking state [ 181.173213][T10296] bridge0: port 1(ipvlan2) entered disabled state [ 181.180531][T10296] ipvlan2: entered allmulticast mode [ 181.188264][T10296] bridge0: entered allmulticast mode [ 181.197381][T10296] ipvlan2: left allmulticast mode [ 181.202692][T10296] bridge0: left allmulticast mode [ 181.243386][ T8005] tipc: Resetting bearer [ 181.324387][T10299] tipc: Resetting bearer [ 181.361503][T10297] tipc: Resetting bearer [ 182.240335][T10349] netlink: 'syz.0.1104': attribute type 2 has an invalid length. [ 182.302559][T10349] netlink: 'syz.0.1104': attribute type 8 has an invalid length. [ 182.320650][ T8001] tipc: Resetting bearer [ 182.418868][T10362] batadv_slave_1: entered promiscuous mode [ 182.431454][T10358] lo speed is unknown, defaulting to 1000 [ 182.439211][T10360] batadv_slave_1: left promiscuous mode [ 182.723355][T10358] lo speed is unknown, defaulting to 1000 [ 183.085549][T10379] __nla_validate_parse: 7 callbacks suppressed [ 183.085567][T10379] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1113'. [ 183.089507][T10389] sctp: [Deprecated]: syz.4.1116 (pid 10389) Use of int in max_burst socket option. [ 183.089507][T10389] Use struct sctp_assoc_value instead [ 183.091773][T10379] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1113'. [ 183.295108][T10399] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1120'. [ 183.668037][T10418] siw: device registration error -23 [ 183.675651][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 183.739313][T10422] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1127'. [ 183.761749][T10422] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 183.837672][ T5950] lo speed is unknown, defaulting to 1000 [ 184.004706][T10441] netlink: 'syz.0.1132': attribute type 10 has an invalid length. [ 184.125869][T10449] netlink: 'syz.0.1135': attribute type 4 has an invalid length. [ 184.168983][ T5950] lo speed is unknown, defaulting to 1000 [ 184.174929][ T5950] syz0: Port: 1 Link DOWN [ 184.202055][ T5950] lo speed is unknown, defaulting to 1000 [ 184.210828][T10449] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1135'. [ 184.274831][T10455] lo speed is unknown, defaulting to 1000 [ 184.369653][T10460] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1135'. [ 184.603745][T10455] lo speed is unknown, defaulting to 1000 [ 184.776312][ T30] audit: type=1800 audit(1755465766.907:3): pid=10443 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1130" name="memory.events" dev="tmpfs" ino=1270 res=0 errno=0 [ 185.086480][T10482] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 185.122527][T10482] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1143'. [ 185.138085][T10482] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1143'. [ 185.158735][T10464] team0 (unregistering): Port device team_slave_0 removed [ 185.190011][T10464] team0 (unregistering): Port device team_slave_1 removed [ 185.339319][T10493] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1147'. [ 185.350783][T10493] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1147'. [ 185.411553][T10495] batadv1: entered promiscuous mode [ 185.416739][T10487] nbd2: detected capacity change from 0 to 63 [ 185.428345][ T5861] block nbd2: Receive control failed (result -32) [ 185.627055][T10506] lo speed is unknown, defaulting to 1000 [ 185.684892][T10512] macvlan1: entered promiscuous mode [ 185.697614][ T5861] block nbd1: Receive control failed (result -32) [ 185.715632][T10512] ipvlan0: entered promiscuous mode [ 185.772422][T10512] ipvlan0: left promiscuous mode [ 185.789731][T10512] macvlan1: left promiscuous mode [ 185.871856][T10513] vlan2: entered promiscuous mode [ 185.890828][T10513] bond0: entered promiscuous mode [ 185.897632][T10513] bond_slave_0: entered promiscuous mode [ 185.904182][T10513] bond_slave_1: entered promiscuous mode [ 185.910471][T10513] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 185.944111][T10513] vlan2: entered allmulticast mode [ 185.959603][T10513] bond0: entered allmulticast mode [ 185.975322][T10513] bond_slave_0: entered allmulticast mode [ 185.986274][T10513] bond_slave_1: entered allmulticast mode [ 186.026422][T10513] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 186.294460][T10506] lo speed is unknown, defaulting to 1000 [ 187.851052][T10583] lo speed is unknown, defaulting to 1000 [ 187.932352][T10589] tipc: Enabled bearer , priority 0 [ 187.943383][T10589] syzkaller0: entered promiscuous mode [ 187.952441][T10589] syzkaller0: entered allmulticast mode [ 188.019057][T10591] syz.0.1173 uses old SIOCAX25GETINFO [ 188.058495][T10591] tipc: Resetting bearer [ 188.099597][T10589] tipc: Resetting bearer [ 188.115086][T10593] dummy0: entered promiscuous mode [ 188.148140][T10593] bond0: entered promiscuous mode [ 188.173604][T10593] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 188.196291][T10593] debugfs: 'hsr1' already exists in 'hsr' [ 188.202066][T10593] Cannot create hsr debugfs directory [ 188.255553][T10593] hsr1: entered allmulticast mode [ 188.270980][T10593] dummy0: entered allmulticast mode [ 188.285281][T10593] bond0: entered allmulticast mode [ 188.294260][T10593] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 188.311963][T10587] tipc: Resetting bearer [ 188.353307][T10587] tipc: Disabling bearer [ 188.368745][T10595] tipc: Enabling of bearer rejected, already enabled [ 188.411039][T10583] lo speed is unknown, defaulting to 1000 [ 188.437211][T10590] tipc: Resetting bearer [ 188.882476][T10626] __nla_validate_parse: 7 callbacks suppressed [ 188.882496][T10626] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1183'. [ 188.931245][T10635] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1185'. [ 189.156558][T10640] netlink: 'syz.3.1187': attribute type 5 has an invalid length. [ 189.168718][ T60] tipc: Resetting bearer [ 189.349139][T10649] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1191'. [ 189.603859][T10663] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1196'. [ 189.614914][T10663] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1196'. [ 189.647917][T10666] tipc: Resetting bearer [ 189.697827][T10666] tipc: Enabling of bearer rejected, already enabled [ 189.786352][T10664] tipc: Resetting bearer [ 189.884264][T10671] lo speed is unknown, defaulting to 1000 [ 190.241124][ T8014] tipc: Resetting bearer [ 190.260429][T10697] tipc: Enabled bearer , priority 0 [ 190.306587][T10696] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1203'. [ 190.322567][T10696] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1203'. [ 190.404888][T10697] tipc: Disabling bearer [ 190.466245][T10671] lo speed is unknown, defaulting to 1000 [ 190.472078][T10687] lo speed is unknown, defaulting to 1000 [ 190.551581][T10702] tipc: Resetting bearer [ 190.559287][T10691] netlink: 248 bytes leftover after parsing attributes in process `syz.3.1201'. [ 190.689480][T10700] Bluetooth: MGMT ver 1.23 [ 190.771021][T10717] netlink: 'syz.4.1209': attribute type 2 has an invalid length. [ 190.806569][T10717] netlink: 'syz.4.1209': attribute type 1 has an invalid length. [ 190.982916][T10701] tipc: Resetting bearer [ 191.096494][T10732] IPv4: Oversized IP packet from 127.202.26.0 [ 191.175543][T10738] tipc: Resetting bearer [ 191.195356][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 191.259423][T10738] tipc: Resetting bearer [ 191.338147][T10745] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1216'. [ 191.393224][T10745] lo speed is unknown, defaulting to 1000 [ 191.406464][T10687] lo speed is unknown, defaulting to 1000 [ 191.591436][T10755] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1220'. [ 191.822774][T10765] netlink: 'syz.0.1222': attribute type 10 has an invalid length. [ 191.874707][T10761] bridge_slave_0: left allmulticast mode [ 191.890841][T10767] netlink: 'syz.1.1216': attribute type 13 has an invalid length. [ 191.898745][ T5868] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 191.906778][T10761] bridge_slave_0: left promiscuous mode [ 191.912574][T10761] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.928167][T10767] netlink: 'syz.1.1216': attribute type 17 has an invalid length. [ 191.944149][T10761] bridge_slave_1: left allmulticast mode [ 191.959873][T10761] bridge_slave_1: left promiscuous mode [ 191.968126][T10761] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.985722][T10761] bond0: (slave bond_slave_0): Releasing backup interface [ 191.993754][T10761] bond_slave_0: left promiscuous mode [ 192.002711][T10761] bond_slave_0: left allmulticast mode [ 192.026876][T10761] bond0: (slave bond_slave_1): Releasing backup interface [ 192.038303][T10761] bond_slave_1: left promiscuous mode [ 192.043912][T10761] bond_slave_1: left allmulticast mode [ 192.067896][T10761] team0: Port device team_slave_0 removed [ 192.081654][T10761] team0: Port device team_slave_1 removed [ 192.089267][T10761] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 192.099399][T10761] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 192.109085][T10761] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 192.116885][T10761] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 192.132531][T10761] bond0: (slave wlan1): Releasing backup interface [ 192.140961][T10761] mac80211_hwsim hwsim3 wlan1: left promiscuous mode [ 192.148587][T10761] mac80211_hwsim hwsim3 wlan1: left allmulticast mode [ 192.156634][T10761] tipc: Resetting bearer [ 192.164887][T10761] bond1: (slave veth5): Releasing active interface [ 192.178676][T10761] bond4: (slave batadv1): Releasing active interface [ 192.192421][T10761] bond5: (slave gretap1): Releasing active interface [ 192.218962][T10765] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 192.240466][T10765] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 192.248413][T10765] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 192.285392][T10767] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 192.301874][ T748] tipc: Resetting bearer [ 192.320990][T10745] lo speed is unknown, defaulting to 1000 [ 192.417418][ T5868] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 192.659950][T10779] netlink: 'syz.2.1226': attribute type 21 has an invalid length. [ 192.684978][T10781] netlink: 'syz.2.1226': attribute type 21 has an invalid length. [ 192.844575][T10787] IPVS: set_ctl: invalid protocol: 59 224.0.0.2:20001 [ 193.327695][T10807] sctp: [Deprecated]: syz.4.1232 (pid 10807) Use of struct sctp_assoc_value in delayed_ack socket option. [ 193.327695][T10807] Use struct sctp_sack_info instead [ 193.423164][T10798] netlink: 'syz.0.1228': attribute type 1 has an invalid length. [ 194.364018][T10834] __nla_validate_parse: 3 callbacks suppressed [ 194.364037][T10834] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1237'. [ 194.387119][T10834] netlink: 'syz.0.1237': attribute type 30 has an invalid length. [ 194.424536][T10834] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1237'. [ 194.834206][T10849] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 194.921664][T10854] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1242'. [ 195.143629][T10865] lo speed is unknown, defaulting to 1000 [ 195.624044][T10865] lo speed is unknown, defaulting to 1000 [ 195.657147][T10894] netlink: 'syz.4.1253': attribute type 13 has an invalid length. [ 196.351365][T10912] lo speed is unknown, defaulting to 1000 [ 196.358312][T10912] lo speed is unknown, defaulting to 1000 [ 196.366015][T10912] lo speed is unknown, defaulting to 1000 [ 196.391866][T10912] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 196.475452][ T5870] Bluetooth: hci4: command 0x0406 tx timeout [ 196.481954][ T5870] Bluetooth: hci2: command 0x0406 tx timeout [ 196.488190][ T5870] Bluetooth: hci1: command 0x0406 tx timeout [ 196.538306][T10914] 8021q: adding VLAN 0 to HW filter on device team0 [ 196.561169][T10914] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 196.582939][T10926] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1261'. [ 196.588743][T10912] lo speed is unknown, defaulting to 1000 [ 196.606738][T10912] lo speed is unknown, defaulting to 1000 [ 197.050760][T10919] bond4: left promiscuous mode [ 197.057353][T10919] bridge2: left promiscuous mode [ 197.072880][T10919] hsr1: left allmulticast mode [ 197.080148][T10919] dummy0: left allmulticast mode [ 197.088004][T10919] bond0: left allmulticast mode [ 197.093019][T10919] mac80211_hwsim hwsim5 wlan1: left allmulticast mode [ 197.113511][T10912] lo speed is unknown, defaulting to 1000 [ 197.225379][T10935] pimreg: entered allmulticast mode [ 197.246137][ T60] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.257039][T10912] lo speed is unknown, defaulting to 1000 [ 197.299595][T10942] netlink: 'syz.0.1264': attribute type 5 has an invalid length. [ 197.310792][ T60] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.337275][ T60] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.359877][T10912] lo speed is unknown, defaulting to 1000 [ 197.372258][ T60] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.701250][T10978] tipc: Resetting bearer [ 197.718303][T10978] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 197.724209][T10978] syzkaller0: Linktype set failed because interface is up [ 197.749055][T10976] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1272'. [ 197.779960][T10977] tipc: Resetting bearer [ 197.847997][T10982] netlink: 'syz.4.1275': attribute type 3 has an invalid length. [ 197.903143][T10984] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1276'. [ 198.008654][T10992] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1279'. [ 198.048797][T10994] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1279'. [ 198.079656][ T30] audit: type=1800 audit(1755465780.207:4): pid=11000 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1281" name=CB dev="tmpfs" ino=1508 res=0 errno=0 [ 198.105793][T11001] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1278'. [ 198.125135][T11001] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1278'. [ 198.176035][ T8005] tipc: Resetting bearer [ 198.227292][T11007] bridge0: port 1(netdevsim2) entered blocking state [ 198.234192][T11007] bridge0: port 1(netdevsim2) entered disabled state [ 198.234847][T11006] netlink: 'syz.2.1284': attribute type 1 has an invalid length. [ 198.255838][T11007] netdevsim netdevsim4 netdevsim2: entered allmulticast mode [ 198.270448][T11007] netdevsim netdevsim4 netdevsim2: entered promiscuous mode [ 198.643755][T11011] 8021q: adding VLAN 0 to HW filter on device bond3 [ 198.662573][T11012] bond0: (slave dummy0): Releasing backup interface [ 198.673612][T11012] dummy0: left promiscuous mode [ 198.679012][T11012] dummy0: left allmulticast mode [ 198.688266][T11012] bridge_slave_0: left promiscuous mode [ 198.702134][T11012] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.715910][T11012] bridge_slave_1: left allmulticast mode [ 198.721943][T11012] bridge_slave_1: left promiscuous mode [ 198.727874][T11012] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.742870][T11012] bond0: (slave 77): Releasing backup interface [ 198.750832][T11012] : left promiscuous mode [ 198.756253][T11012] : left allmulticast mode [ 198.771437][T11012] bond0: (slave bond_slave_1): Releasing backup interface [ 198.779841][T11012] bond_slave_1: left promiscuous mode [ 198.785536][T11012] bond_slave_1: left allmulticast mode [ 198.806133][T11012] bond0: (slave wlan1): Releasing backup interface [ 198.813952][T11012] mac80211_hwsim hwsim9 wlan1: left promiscuous mode [ 198.821381][T11012] mac80211_hwsim hwsim9 wlan1: left allmulticast mode [ 199.064445][T11035] syzkaller1: entered promiscuous mode [ 199.092646][T11022] netlink: 'syz.0.1287': attribute type 12 has an invalid length. [ 199.104677][T11035] syzkaller1: entered allmulticast mode [ 199.188565][T11044] tipc: Invalid UDP bearer configuration [ 199.188620][T11044] tipc: Enabling of bearer rejected, failed to enable media [ 200.048172][T11079] batadv_slave_1: entered promiscuous mode [ 200.124163][T11083] __nla_validate_parse: 9 callbacks suppressed [ 200.124184][T11083] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1302'. [ 200.166851][T11086] lo speed is unknown, defaulting to 1000 [ 200.172788][T11083] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1302'. [ 200.245794][T11083] netlink: 'syz.3.1302': attribute type 4 has an invalid length. [ 200.287135][T10937] lo speed is unknown, defaulting to 1000 [ 200.292906][T10937] syz1: Port: 1 Link DOWN [ 200.309767][T11083] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1302'. [ 200.396564][T11083] netlink: 'syz.3.1302': attribute type 4 has an invalid length. [ 200.418919][T10937] lo speed is unknown, defaulting to 1000 [ 200.424778][T10937] syz1: Port: 1 Link ACTIVE [ 200.582803][T11086] lo speed is unknown, defaulting to 1000 [ 200.593782][T11086] lo speed is unknown, defaulting to 1000 [ 200.712954][T11105] lo speed is unknown, defaulting to 1000 [ 200.869229][T11074] batadv_slave_1: left promiscuous mode [ 200.891736][T11107] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1309'. [ 200.945470][T11107] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1309'. [ 201.059598][T11110] netlink: 'syz.0.1310': attribute type 11 has an invalid length. [ 201.080569][T11112] dvmrp0: entered allmulticast mode [ 201.080612][T11107] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1309'. [ 201.096163][T11107] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1309'. [ 201.111086][T11114] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1312'. [ 201.148114][T11114] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1312'. [ 201.362512][T11105] lo speed is unknown, defaulting to 1000 [ 201.403069][T11110] lo speed is unknown, defaulting to 1000 [ 201.459081][T11105] lo speed is unknown, defaulting to 1000 [ 201.936134][T11147] bond0: (slave rose0): Error: Device can not be enslaved while up [ 201.949558][T11147] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1320'. [ 202.115005][T11110] lo speed is unknown, defaulting to 1000 [ 202.137528][T11110] lo speed is unknown, defaulting to 1000 [ 202.349415][T11172] IPVS: set_ctl: invalid protocol: 47 172.20.20.187:20004 [ 202.818441][T11189] lo speed is unknown, defaulting to 1000 [ 202.974472][T11201] delete_channel: no stack [ 202.983353][T11202] IPVS: sync thread started: state = BACKUP, mcast_ifn = gretap0, syncid = 0, id = 0 [ 203.112153][T11189] lo speed is unknown, defaulting to 1000 [ 203.123397][T11189] lo speed is unknown, defaulting to 1000 [ 203.743429][T11233] ip6gre1: entered allmulticast mode [ 203.869508][T11237] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not bonding slave [ 203.881261][T11237] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 204.231867][T11253] sctp: [Deprecated]: syz.2.1353 (pid 11253) Use of int in max_burst socket option. [ 204.231867][T11253] Use struct sctp_assoc_value instead [ 205.599087][T11300] "syz.4.1364" (11300) uses obsolete ecb(arc4) skcipher [ 205.657057][T11312] __nla_validate_parse: 71 callbacks suppressed [ 205.657088][T11312] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1368'. [ 205.931412][T11321] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1370'. [ 206.201995][T11326] lo speed is unknown, defaulting to 1000 [ 206.323272][T11333] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1372'. [ 206.413292][T11333] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1372'. [ 206.515084][T11344] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1373'. [ 206.555347][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 206.555891][T11347] netlink: 'syz.1.1374': attribute type 1 has an invalid length. [ 206.603019][T11347] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1374'. [ 206.677736][T11347] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1374'. [ 206.937122][T11324] lo speed is unknown, defaulting to 1000 [ 206.948337][T11326] lo speed is unknown, defaulting to 1000 [ 206.957454][T11355] netlink: 'syz.1.1377': attribute type 19 has an invalid length. [ 206.977400][T11326] lo speed is unknown, defaulting to 1000 [ 207.172316][T11369] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1380'. [ 207.485871][T11376] tipc: Enabled bearer , priority 0 [ 207.498652][T11324] lo speed is unknown, defaulting to 1000 [ 207.604645][T11387] netlink: 1041 bytes leftover after parsing attributes in process `syz.0.1385'. [ 207.632781][T11324] lo speed is unknown, defaulting to 1000 [ 207.647406][T11390] tipc: Resetting bearer [ 207.701505][T11380] syzkaller0: entered promiscuous mode [ 207.715499][T11380] syzkaller0: entered allmulticast mode [ 207.737198][T11373] tipc: Resetting bearer [ 207.811923][T11373] tipc: Disabling bearer [ 208.412763][T11418] lo speed is unknown, defaulting to 1000 [ 208.479749][T11423] IPVS: set_ctl: invalid protocol: 135 172.20.20.187:20001 [ 208.528948][T11423] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1394'. [ 208.550920][T11423] netlink: 'syz.3.1394': attribute type 5 has an invalid length. [ 208.574979][T11423] netlink: 'syz.3.1394': attribute type 6 has an invalid length. [ 209.243739][T11447] tipc: Resetting bearer [ 209.256664][T11449] netlink: 'syz.2.1402': attribute type 10 has an invalid length. [ 209.265000][T11449] bond0: option arp_all_targets: invalid value (196616) [ 209.289695][T11447] tipc: Enabling of bearer rejected, already enabled [ 209.298494][T11418] lo speed is unknown, defaulting to 1000 [ 209.314871][T11446] tipc: Resetting bearer [ 209.323082][T11418] lo speed is unknown, defaulting to 1000 [ 209.677621][T11459] netlink: 'syz.0.1406': attribute type 10 has an invalid length. [ 209.745900][ T60] tipc: Resetting bearer [ 210.129245][T11492] netlink: 'syz.4.1414': attribute type 4 has an invalid length. [ 210.598042][T11514] 8021q: adding VLAN 0 to HW filter on device bond1 [ 210.609595][T11517] lo speed is unknown, defaulting to 1000 [ 210.697458][T11524] 8021q: adding VLAN 0 to HW filter on device bond1 [ 210.722091][T11524] bond1: (slave vxcan1): The slave device specified does not support setting the MAC address [ 210.775610][T11524] bond1: (slave vxcan1): Error -95 calling set_mac_address [ 210.889514][T11528] __nla_validate_parse: 6 callbacks suppressed [ 210.889534][T11528] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1426'. [ 210.907839][T11517] lo speed is unknown, defaulting to 1000 [ 210.913731][T11528] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1426'. [ 210.916362][T11517] lo speed is unknown, defaulting to 1000 [ 210.990751][T11531] IPVS: set_ctl: invalid protocol: 103 0.0.0.0:20001 [ 211.060724][T11534] IPVS: set_ctl: invalid protocol: 103 0.0.0.0:20001 [ 211.082330][T11531] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1427'. [ 211.098548][T11534] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1427'. [ 211.107643][T11531] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1427'. [ 211.119748][T11534] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1427'. [ 211.318473][T11546] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 211.395312][T11539] lo speed is unknown, defaulting to 1000 [ 211.650953][T11539] lo speed is unknown, defaulting to 1000 [ 211.687505][T11539] lo speed is unknown, defaulting to 1000 [ 212.349903][T11588] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1444'. [ 212.356572][T11599] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1445'. [ 212.468941][T11599] team1: entered promiscuous mode [ 212.474168][T11599] team1: entered allmulticast mode [ 212.615623][T11605] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1447'. [ 212.632012][T11608] openvswitch: netlink: IP tunnel dst address not specified [ 212.743827][T11608] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 212.763154][T11611] siw: device registration error -23 [ 212.797590][T11610] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1449'. [ 212.841582][T11610] syzkaller1: entered promiscuous mode [ 212.850438][T11610] syzkaller1: entered allmulticast mode [ 212.875626][T11610] tipc: Can't bind to reserved service type 1 [ 213.136139][T11623] bond0: entered promiscuous mode [ 213.181969][T11623] bond0: left promiscuous mode [ 213.383618][T11635] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048) [ 213.570239][T11632] netdevsim netdevsim4 netdevsim2: left allmulticast mode [ 213.635351][T11632] netdevsim netdevsim4 netdevsim2: left promiscuous mode [ 213.675807][T11632] bridge0: port 1(netdevsim2) entered disabled state [ 213.953362][T11647] tipc: Enabled bearer , priority 0 [ 213.963645][T11649] syzkaller0: entered promiscuous mode [ 213.970508][T11649] syzkaller0: entered allmulticast mode [ 214.044456][T11651] tipc: Resetting bearer [ 214.149337][T11640] tipc: Resetting bearer [ 214.174380][T11640] tipc: Disabling bearer [ 214.233251][T11671] lo speed is unknown, defaulting to 1000 [ 214.365827][T11681] netlink: 'syz.0.1465': attribute type 1 has an invalid length. [ 214.462594][T11681] 8021q: adding VLAN 0 to HW filter on device bond7 [ 214.503946][T11687] bond7: (slave wlan0): Enslaving as an active interface with a down link [ 214.591337][T11681] vlan3: entered allmulticast mode [ 214.598974][T11681] veth1: entered allmulticast mode [ 214.613913][T11681] bond7: (slave vlan3): Opening slave failed [ 214.674323][T11671] lo speed is unknown, defaulting to 1000 [ 214.692144][T11671] lo speed is unknown, defaulting to 1000 [ 215.051145][T11710] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 215.054005][T11711] tipc: Resetting bearer [ 215.110614][T11711] tipc: Enabling of bearer rejected, already enabled [ 215.205322][ C1] syzkaller0: tun_net_xmit 90 [ 215.433283][T11709] tipc: Resetting bearer [ 215.741121][T11756] netlink: 'syz.1.1482': attribute type 29 has an invalid length. [ 215.753411][T11749] netlink: 'syz.1.1482': attribute type 29 has an invalid length. [ 215.861299][T11749] lo speed is unknown, defaulting to 1000 [ 215.904737][T11767] 8021q: VLANs not supported on wg1 [ 216.156617][ T748] tipc: Resetting bearer [ 216.306596][T11791] __nla_validate_parse: 9 callbacks suppressed [ 216.306618][T11791] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1491'. [ 216.455835][T11795] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1493'. [ 216.510235][T11796] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1492'. [ 216.521001][T11777] lo speed is unknown, defaulting to 1000 [ 216.521837][T11749] lo speed is unknown, defaulting to 1000 [ 216.536918][T11749] lo speed is unknown, defaulting to 1000 [ 216.537557][T11796] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1492'. [ 217.054923][T11783] lo speed is unknown, defaulting to 1000 [ 217.087224][T11827] IPVS: sync thread started: state = MASTER, mcast_ifn = gretap0, syncid = 13, id = 0 [ 217.128091][T11828] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.1501'. [ 217.285809][ T43] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 217.483425][T11848] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1506'. [ 217.558230][T11848] 8021q: adding VLAN 0 to HW filter on device bond4 [ 217.733699][T11847] bond4: (slave veth7): Enslaving as an active interface with an up link [ 217.775379][T11777] lo speed is unknown, defaulting to 1000 [ 217.816663][T11777] lo speed is unknown, defaulting to 1000 [ 217.892603][T11783] lo speed is unknown, defaulting to 1000 [ 217.974285][T11783] lo speed is unknown, defaulting to 1000 [ 218.076436][ T5971] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 218.576398][T11895] unknown channel width for channel at 909000KHz? [ 218.593910][T11895] unknown channel width for channel at 909000KHz? [ 218.658319][T11898] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1521'. [ 219.263039][T11921] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1526'. [ 219.332010][T11924] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1527'. [ 219.576397][T11938] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1530'. [ 219.872129][T11951] tipc: Enabled bearer , priority 0 [ 219.889413][T11951] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode [ 219.906608][T11951] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode [ 219.965312][T11951] tipc: Resetting bearer [ 220.156978][T11968] lo speed is unknown, defaulting to 1000 [ 220.192918][T11975] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 220.209864][T11976] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 220.656633][T11968] lo speed is unknown, defaulting to 1000 [ 220.657701][T11977] lo speed is unknown, defaulting to 1000 [ 220.664430][T11968] lo speed is unknown, defaulting to 1000 [ 220.815125][T12010] netlink: 'syz.2.1548': attribute type 2 has an invalid length. [ 220.834251][T12010] k*]: entered promiscuous mode [ 220.947320][T10933] tipc: Node number set to 4231611066 [ 221.242388][T11977] lo speed is unknown, defaulting to 1000 [ 221.266358][T11977] lo speed is unknown, defaulting to 1000 [ 221.660322][T12040] netlink: 'syz.3.1558': attribute type 1 has an invalid length. [ 221.674153][T12040] __nla_validate_parse: 4 callbacks suppressed [ 221.674172][T12040] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1558'. [ 221.709493][T12040] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1558'. [ 221.813043][T12046] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1559'. [ 222.524536][T12079] lo speed is unknown, defaulting to 1000 [ 222.594368][ T748] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x82 [ 222.861103][T12098] dvmrp0: entered allmulticast mode [ 223.380174][T12128] gretap0: entered promiscuous mode [ 223.403926][T12128] gretap0: left promiscuous mode [ 223.647357][T12104] lo speed is unknown, defaulting to 1000 [ 223.647363][T12079] lo speed is unknown, defaulting to 1000 [ 223.742137][T12079] lo speed is unknown, defaulting to 1000 [ 223.967089][T12087] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1570'. [ 224.032616][T12079] netlink: 'syz.1.1570': attribute type 13 has an invalid length. [ 224.040998][T12079] netlink: 'syz.1.1570': attribute type 17 has an invalid length. [ 224.057507][T12079] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 224.075595][ T43] lo speed is unknown, defaulting to 1000 [ 224.372717][T12161] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1587'. [ 224.396102][T12161] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 224.429876][T12104] lo speed is unknown, defaulting to 1000 [ 224.454185][T12100] lo speed is unknown, defaulting to 1000 [ 224.594507][T12172] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1588'. [ 224.638865][T12172] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1588'. [ 224.674732][T12172] netlink: 38 bytes leftover after parsing attributes in process `syz.1.1588'. [ 224.981638][T12138] lo speed is unknown, defaulting to 1000 [ 225.477550][T12141] lo speed is unknown, defaulting to 1000 [ 225.863142][T12218] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 225.919638][T12218] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1596'. [ 225.947340][T12104] lo speed is unknown, defaulting to 1000 [ 225.950792][T12138] lo speed is unknown, defaulting to 1000 [ 226.044138][T12138] lo speed is unknown, defaulting to 1000 [ 226.059700][T12100] lo speed is unknown, defaulting to 1000 [ 226.119171][T12141] lo speed is unknown, defaulting to 1000 [ 226.159114][T12100] lo speed is unknown, defaulting to 1000 [ 226.294135][T12141] lo speed is unknown, defaulting to 1000 [ 226.360856][T12227] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1598'. [ 227.390406][T12236] 8021q: VLANs not supported on nlmon0 [ 227.555842][T12238] __nla_validate_parse: 6 callbacks suppressed [ 227.555864][T12238] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1602'. [ 227.731221][T12251] lo speed is unknown, defaulting to 1000 [ 227.755327][T12259] netlink: 'syz.4.1609': attribute type 32 has an invalid length. [ 227.802296][T12258] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.1608'. [ 228.105043][T12251] lo speed is unknown, defaulting to 1000 [ 228.112797][T12251] lo speed is unknown, defaulting to 1000 [ 228.353962][T12285] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1615'. [ 228.540647][T12288] netlink: 'syz.3.1616': attribute type 1 has an invalid length. [ 228.754130][T12288] 8021q: adding VLAN 0 to HW filter on device bond4 [ 228.909779][T12293] 8021q: adding VLAN 0 to HW filter on device bond4 [ 228.930707][T12293] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 228.979219][T12293] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 229.504891][T12294] veth7: entered promiscuous mode [ 229.564990][T12294] bond4: (slave veth7): Enslaving as an active interface with a down link [ 230.183414][T12320] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1621'. [ 230.201961][T12320] unsupported nlmsg_type 40 [ 230.319357][T12341] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1627'. [ 231.247895][T12359] caif0: MTU too low for tipc bearer [ 231.253503][T12359] tipc: Enabling of bearer rejected, failed to enable media [ 231.970570][T12387] !: renamed from dummy0 [ 232.229052][T12392] lo speed is unknown, defaulting to 1000 [ 232.432550][T12405] netlink: 'syz.4.1644': attribute type 1 has an invalid length. [ 232.611917][T12412] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1644'. [ 233.373153][T12410] lo speed is unknown, defaulting to 1000 [ 233.396365][T12392] lo speed is unknown, defaulting to 1000 [ 233.403861][T12392] lo speed is unknown, defaulting to 1000 [ 234.167141][T12417] lo speed is unknown, defaulting to 1000 [ 234.462375][T12410] lo speed is unknown, defaulting to 1000 [ 234.482983][T12410] lo speed is unknown, defaulting to 1000 [ 234.517895][T12417] lo speed is unknown, defaulting to 1000 [ 234.567799][T12417] lo speed is unknown, defaulting to 1000 [ 234.707856][T12461] openvswitch: netlink: Message has 8 unknown bytes. [ 235.872836][T12492] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1658'. [ 236.121645][T12494] bond6: (slave geneve2): Enslaving as an active interface with an up link [ 236.161046][ T3586] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 236.199231][ T3586] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 236.252065][T12500] syzkaller1: entered promiscuous mode [ 236.284423][T12500] syzkaller1: entered allmulticast mode [ 236.314101][ T3586] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 236.341264][ T3586] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 236.540571][T12516] lo speed is unknown, defaulting to 1000 [ 236.967459][T12540] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1672'. [ 237.049056][T12544] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1672'. [ 237.049326][T12516] lo speed is unknown, defaulting to 1000 [ 237.147307][T12516] lo speed is unknown, defaulting to 1000 [ 237.275406][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 237.456908][T12564] netlink: 'syz.1.1676': attribute type 13 has an invalid length. [ 238.292622][T12589] netlink: 'syz.0.1683': attribute type 15 has an invalid length. [ 238.359299][T12591] netlink: 'syz.1.1684': attribute type 3 has an invalid length. [ 238.374836][T12592] netlink: 'syz.1.1684': attribute type 3 has an invalid length. [ 238.442096][T12594] netlink: 'syz.1.1685': attribute type 1 has an invalid length. [ 238.506601][T12594] 8021q: adding VLAN 0 to HW filter on device bond6 [ 238.834805][T12620] syzkaller0: entered promiscuous mode [ 238.854809][T12620] syzkaller0: entered allmulticast mode [ 238.992848][T12632] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1695'. [ 239.099763][T12632] netlink: 34 bytes leftover after parsing attributes in process `syz.4.1695'. [ 239.130591][T12637] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1695'. [ 239.181936][T12641] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1697'. [ 239.214108][T12643] netlink: 'syz.1.1698': attribute type 1 has an invalid length. [ 239.252328][T12643] netlink: 'syz.1.1698': attribute type 1 has an invalid length. [ 239.272647][T12641] (unnamed net_device) (uninitialized): option ad_select: invalid value (34) [ 239.281221][T12645] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1699'. [ 239.540194][T12655] netlink: 'syz.3.1702': attribute type 8 has an invalid length. [ 239.713627][T12662] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1705'. [ 239.760152][T12667] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1708'. [ 239.799268][ T8005] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 239.815593][T12670] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1709'. [ 239.831668][ T8005] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.851215][T12670] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1709'. [ 239.883056][T12673] tipc: Enabling of bearer rejected, failed to enable media [ 239.997951][T12681] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1713'. [ 240.040290][T12681] veth1_macvtap: left promiscuous mode [ 240.517269][T12700] tipc: Resetting bearer [ 240.524507][T12700] hsr0: left allmulticast mode [ 240.530779][T12700] hsr_slave_0: left allmulticast mode [ 240.563676][ T8019] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.597321][ T4612] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.628312][ T4612] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.652171][ T4612] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.969202][T12742] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 240.982006][T12742] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.848873][T12756] sock: sock_set_timeout: `syz.4.1729' (pid 12756) tries to set negative timeout [ 243.120810][T12742] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 243.134196][T12742] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.153747][T12751] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 243.276784][T12742] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 243.291407][T12742] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.341572][T12782] tipc: Enabling of bearer rejected, already enabled [ 243.448210][T12791] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 243.470432][T12742] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 243.496772][T12742] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.599852][T12786] lo speed is unknown, defaulting to 1000 [ 243.682745][T12799] syzkaller1: entered promiscuous mode [ 243.695218][T12799] syzkaller1: entered allmulticast mode [ 243.742286][ T8010] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 243.768647][ T8010] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.800368][ T8010] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 243.816370][ T8010] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.861749][T12799] syzkaller1: left promiscuous mode [ 243.867283][T12799] syzkaller1: left allmulticast mode [ 243.873421][ T8014] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 243.903011][ T8014] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.023499][T12796] lo speed is unknown, defaulting to 1000 [ 244.029508][T12786] lo speed is unknown, defaulting to 1000 [ 244.038517][T12786] lo speed is unknown, defaulting to 1000 [ 244.150659][ T8014] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 244.198260][ T8014] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.371519][T12823] __nla_validate_parse: 6 callbacks suppressed [ 244.371538][T12823] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1749'. [ 244.405405][T12823] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1749'. [ 244.584636][T12829] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1750'. [ 244.634146][T12796] lo speed is unknown, defaulting to 1000 [ 244.641737][T12830] tipc: Enabling of bearer rejected, already enabled [ 244.676485][T12796] lo speed is unknown, defaulting to 1000 [ 244.684980][T12833] IPVS: set_ctl: invalid protocol: 59 172.20.20.170:20000 [ 244.692997][T12832] lo speed is unknown, defaulting to 1000 [ 245.208937][T12836] netlink: 'syz.1.1753': attribute type 83 has an invalid length. [ 245.244439][T12846] tipc: Enabling of bearer rejected, already enabled [ 245.415859][T12835] lo speed is unknown, defaulting to 1000 [ 245.492867][T12857] netlink: 'syz.0.1760': attribute type 9 has an invalid length. [ 245.510557][T12859] netlink: 'syz.4.1761': attribute type 10 has an invalid length. [ 245.539064][T12857] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1760'. [ 245.659323][T12835] lo speed is unknown, defaulting to 1000 [ 245.672069][T12832] lo speed is unknown, defaulting to 1000 [ 245.672207][T12835] lo speed is unknown, defaulting to 1000 [ 245.777051][T12832] lo speed is unknown, defaulting to 1000 [ 245.950432][T12866] netlink: 'syz.4.1763': attribute type 1 has an invalid length. [ 245.962645][T12866] netlink: 232 bytes leftover after parsing attributes in process `syz.4.1763'. [ 245.972170][T12866] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1763'. [ 246.143719][T12870] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1764'. [ 246.322963][T12870] bridge4: entered promiscuous mode [ 246.331151][T12870] bridge4: entered allmulticast mode [ 246.579202][T12887] netlink: 'syz.0.1768': attribute type 1 has an invalid length. [ 247.055589][T12905] netlink: 'syz.2.1773': attribute type 1 has an invalid length. [ 247.077640][T12905] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1773'. [ 247.263149][T12917] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1778'. [ 247.388718][T12929] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1779'. [ 247.462825][T12919] netlink: 'syz.2.1779': attribute type 2 has an invalid length. [ 248.551448][T12964] macsec1: entered promiscuous mode [ 248.616441][T12964] !: entered promiscuous mode [ 248.621473][T12964] macsec1: entered allmulticast mode [ 248.661630][T12964] !: entered allmulticast mode [ 248.697392][T12964] !: left allmulticast mode [ 248.702163][T12964] !: left promiscuous mode [ 248.712246][T12974] netlink: 'syz.4.1793': attribute type 10 has an invalid length. [ 248.784923][T12974] veth0_macvtap: left promiscuous mode [ 248.810858][T12974] team0: Device veth0_macvtap failed to register rx_handler [ 248.832112][T12974] syzkaller1: entered promiscuous mode [ 248.848240][T12974] syzkaller1: entered allmulticast mode [ 249.034144][T12995] delete_channel: no stack [ 249.142104][T13001] netlink: 'syz.3.1801': attribute type 1 has an invalid length. [ 249.247406][T13001] 8021q: adding VLAN 0 to HW filter on device bond5 [ 249.284689][T13006] veth9: entered promiscuous mode [ 249.294531][T13006] bond5: (slave veth9): Enslaving as an active interface with a down link [ 249.338464][T13010] tipc: Enabled bearer , priority 0 [ 249.350308][T13010] syzkaller0: entered promiscuous mode [ 249.355961][T13010] syzkaller0: entered allmulticast mode [ 249.382876][T13010] syzkaller0: mtu less than device minimum [ 249.398799][T13013] netlink: del zone limit has 4 unknown bytes [ 249.415855][T13010] tipc: Resetting bearer [ 249.490691][T13010] tipc: Disabling bearer [ 249.704312][T13030] tipc: Enabled bearer , priority 10 [ 249.762394][T13030] tipc: Resetting bearer [ 249.782909][T13033] __nla_validate_parse: 4 callbacks suppressed [ 249.782931][T13033] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1812'. [ 249.805910][T13029] tipc: Resetting bearer [ 250.791191][ T55] tipc: Node number set to 983108389 [ 251.605451][ T5861] Bluetooth: hci3: command 0x0405 tx timeout [ 251.764196][T13029] tipc: Disabling bearer [ 251.813127][T13060] vlan2: entered promiscuous mode [ 251.830493][T13060] bond0: entered promiscuous mode [ 251.876773][T13060] vlan2: entered allmulticast mode [ 251.882511][T13060] bond0: entered allmulticast mode [ 251.883754][T13064] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1820'. [ 251.943378][T13070] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1821'. [ 251.969118][T13064] 8021q: adding VLAN 0 to HW filter on device bond9 [ 252.017601][T13077] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1819'. [ 252.047403][T13081] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1821'. [ 252.061668][T13067] bond9: (slave batadv2): Opening slave failed [ 252.259226][T13087] lo speed is unknown, defaulting to 1000 [ 252.504991][T13103] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1825'. [ 253.302296][T13085] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 253.489123][T13087] lo speed is unknown, defaulting to 1000 [ 253.500691][T13087] lo speed is unknown, defaulting to 1000 [ 254.327790][T13178] pim6reg: entered allmulticast mode [ 254.359623][T13181] pim6reg: left allmulticast mode [ 254.696350][T13193] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1840'. [ 254.751745][T13198] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1840'. [ 254.756314][T13193] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1840'. [ 254.803610][T13193] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1840'. [ 254.976432][T13194] syzkaller1: entered promiscuous mode [ 254.981953][T13194] syzkaller1: entered allmulticast mode [ 255.024699][T13207] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1844'. [ 255.044552][T13207] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1844'. [ 255.091739][T13211] pimreg: entered allmulticast mode [ 255.128984][T13211] dvmrp0: left allmulticast mode [ 255.134110][T13211] pimreg: left allmulticast mode [ 255.145387][T13214] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1846'. [ 255.200469][T13215] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1846'. [ 255.363099][T13221] pimreg: entered allmulticast mode [ 255.627200][T13234] lo speed is unknown, defaulting to 1000 [ 255.633329][T13232] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1852'. [ 256.966869][T13287] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1862'. [ 257.018306][T13287] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1862'. [ 257.196839][T13234] lo speed is unknown, defaulting to 1000 [ 257.224573][T13300] netlink: 'syz.0.1863': attribute type 21 has an invalid length. [ 257.252450][T13301] atomic_op ffff88801c30b198 conn xmit_atomic 0000000000000000 [ 257.256213][T13234] lo speed is unknown, defaulting to 1000 [ 257.341599][T13289] ipvlan2: entered promiscuous mode [ 257.571999][ T55] IPVS: starting estimator thread 0... [ 257.594371][T13310] syzkaller1: entered promiscuous mode [ 257.604544][T13310] syzkaller1: entered allmulticast mode [ 257.666323][T13312] IPVS: using max 29 ests per chain, 69600 per kthread [ 257.693588][T13316] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1865'. [ 257.713261][T13318] syzkaller0: tun_chr_ioctl cmd 2147767517 [ 257.853681][T13323] netlink: 'syz.0.1870': attribute type 1 has an invalid length. [ 257.867968][T13323] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1870'. [ 257.901730][T13327] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 258.212005][T13341] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 258.236632][T13341] dvmrp1: linktype set to 773 [ 258.655856][T13367] vti0: entered promiscuous mode [ 258.661363][T13367] vti0: entered allmulticast mode [ 258.705730][T13354] netlink: 'syz.0.1880': attribute type 12 has an invalid length. [ 259.414239][T13393] lo speed is unknown, defaulting to 1000 [ 260.013031][T13393] lo speed is unknown, defaulting to 1000 [ 260.021102][T13393] lo speed is unknown, defaulting to 1000 [ 260.331144][T13433] wg1: left allmulticast mode [ 260.340632][T13433] vlan0: left promiscuous mode [ 260.345748][T13433] vlan0: left allmulticast mode [ 260.350871][T13433] veth0_vlan: left allmulticast mode [ 260.373066][T13433] veth3: left promiscuous mode [ 260.378338][T13433] syzkaller0: left promiscuous mode [ 260.385581][T13433] syzkaller0: left allmulticast mode [ 260.391152][T13433] macvlan2: left promiscuous mode [ 260.400080][T13433] macvlan2: left allmulticast mode [ 260.406176][T13433] veth5: left promiscuous mode [ 260.411769][T13433] gretap1: left promiscuous mode [ 260.419877][T13433] vlan2: left promiscuous mode [ 260.424831][T13433] bond0: left promiscuous mode [ 260.429913][T13433] mac80211_hwsim hwsim3 wlan1: left promiscuous mode [ 260.438891][T13433] vlan2: left allmulticast mode [ 260.443766][T13433] bond0: left allmulticast mode [ 260.448986][T13433] mac80211_hwsim hwsim3 wlan1: left allmulticast mode [ 260.620196][T13449] tipc: Enabling of bearer rejected, already enabled [ 260.693189][T13449] __nla_validate_parse: 4 callbacks suppressed [ 260.693207][T13449] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1904'. [ 261.209072][T13465] lo speed is unknown, defaulting to 1000 [ 261.875986][T13495] netlink: 'syz.2.1914': attribute type 29 has an invalid length. [ 261.891328][T13495] netlink: 'syz.2.1914': attribute type 29 has an invalid length. [ 261.914390][T13499] syzkaller0: entered promiscuous mode [ 261.920090][T13499] syzkaller0: entered allmulticast mode [ 261.926280][T13499] tipc: Resetting bearer [ 261.932423][T13495] netlink: 'syz.2.1914': attribute type 29 has an invalid length. [ 261.936621][T13465] lo speed is unknown, defaulting to 1000 [ 261.944564][T13495] netlink: 'syz.2.1914': attribute type 29 has an invalid length. [ 261.981777][T13501] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1914'. [ 262.031781][T13465] lo speed is unknown, defaulting to 1000 [ 262.221378][T13508] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1918'. [ 262.360541][T13517] tipc: Resetting bearer [ 262.366462][T13517] team0: entered promiscuous mode [ 262.544468][T13523] netlink: 2164 bytes leftover after parsing attributes in process `syz.1.1925'. [ 262.753240][T13536] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1928'. [ 262.800344][T13540] sctp: [Deprecated]: syz.0.1930 (pid 13540) Use of int in max_burst socket option deprecated. [ 262.800344][T13540] Use struct sctp_assoc_value instead [ 263.641153][T13568] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 263.999648][T13574] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1939'. [ 264.021808][T13575] tipc: Enabled bearer , priority 0 [ 264.045518][T13575] syzkaller0: entered promiscuous mode [ 264.063794][T13575] syzkaller0: entered allmulticast mode [ 264.070958][T13578] netlink: 'syz.1.1942': attribute type 1 has an invalid length. [ 264.088312][T13575] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 264.098125][T13578] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1942'. [ 264.121980][T13575] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1940'. [ 264.154477][T13575] tipc: Resetting bearer [ 264.200435][T13572] tipc: Resetting bearer [ 264.271763][T13572] tipc: Disabling bearer [ 264.632648][T13613] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1949'. [ 264.675687][T13613] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1949'. [ 264.872863][T13627] netlink: 'syz.2.1953': attribute type 1 has an invalid length. [ 265.301409][T13654] netlink: 'syz.0.1958': attribute type 10 has an invalid length. [ 265.333308][T13654] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 265.442618][T13662] pimreg: left allmulticast mode [ 265.713253][T13683] tipc: Enabled bearer , priority 0 [ 265.723736][T13683] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 265.732733][T13683] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 265.759997][T13683] tipc: Resetting bearer [ 265.814668][T13689] __nla_validate_parse: 4 callbacks suppressed [ 265.814688][T13689] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1969'. [ 266.153787][T13708] mac80211_hwsim hwsim5 wlan1: left allmulticast mode [ 266.171122][T13708] netlink: 'syz.2.1975': attribute type 10 has an invalid length. [ 266.674535][T13741] netlink: 'syz.0.1987': attribute type 29 has an invalid length. [ 267.125999][T13767] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1991'. [ 267.242262][T13769] netlink: 'syz.0.1992': attribute type 30 has an invalid length. [ 267.252108][T13769] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1992'. [ 267.369354][T13774] netlink: 248 bytes leftover after parsing attributes in process `syz.4.1994'. [ 267.401673][T13780] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1996'. [ 267.503375][T13783] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 267.581621][T13793] netlink: 'syz.4.1998': attribute type 15 has an invalid length. [ 267.673280][T13794] lo speed is unknown, defaulting to 1000 [ 267.706175][T13801] tipc: Enabling of bearer rejected, already enabled [ 267.938884][T13813] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2004'. [ 267.969895][T13813] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2004'. [ 268.027814][T13794] lo speed is unknown, defaulting to 1000 [ 268.035614][T13794] lo speed is unknown, defaulting to 1000 [ 268.051460][T13814] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2004'. [ 268.202672][T13821] tipc: Enabled bearer , priority 0 [ 268.213902][T13820] syzkaller0: entered promiscuous mode [ 268.222905][T13820] syzkaller0: entered allmulticast mode [ 268.248852][T13823] dummy0: entered allmulticast mode [ 268.303901][T13813] wireguard0: entered promiscuous mode [ 268.310624][T13813] wireguard0: entered allmulticast mode [ 268.329196][T13821] tipc: Resetting bearer [ 268.336324][T13820] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2006'. [ 268.365427][T13820] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2006'. [ 268.468832][T13819] tipc: Resetting bearer [ 268.509524][T13819] tipc: Disabling bearer [ 268.563311][T13838] wg1 speed is unknown, defaulting to 1000 [ 268.619749][T13838] wg1 speed is unknown, defaulting to 1000 [ 268.636030][T13836] tipc: Resetting bearer [ 268.677162][T13838] wg1 speed is unknown, defaulting to 1000 [ 268.732703][T13836] tipc: Enabling of bearer rejected, already enabled [ 268.742061][T13838] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 268.805371][T13835] tipc: Resetting bearer [ 268.839476][T13838] wg1 speed is unknown, defaulting to 1000 [ 268.888168][T13838] wg1 speed is unknown, defaulting to 1000 [ 268.954438][T13838] wg1 speed is unknown, defaulting to 1000 [ 268.976702][T13838] wg1 speed is unknown, defaulting to 1000 [ 269.002206][T13838] wg1 speed is unknown, defaulting to 1000 [ 271.191776][ T7995] tipc: Resetting bearer [ 271.373754][T13900] IPv6: sit1: Disabled Multicast RS [ 271.406417][T13901] __nla_validate_parse: 5 callbacks suppressed [ 271.406444][T13901] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2029'. [ 271.411599][T13902] netlink: 'syz.2.2027': attribute type 13 has an invalid length. [ 271.433225][T13901] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2029'. [ 271.451323][T13902] netlink: 'syz.2.2027': attribute type 17 has an invalid length. [ 271.508783][T13902] netlink: 'syz.2.2027': attribute type 27 has an invalid length. [ 271.606286][T13907] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2027'. [ 271.643116][T13908] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2031'. [ 271.739545][T13914] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 271.781668][T13902] 8021q: adding VLAN 0 to HW filter on device bond0 [ 271.811538][T13902] 8021q: adding VLAN 0 to HW filter on device team0 [ 271.824230][T13921] netlink: 'syz.1.2034': attribute type 1 has an invalid length. [ 271.833296][T13921] netlink: 244 bytes leftover after parsing attributes in process `syz.1.2034'. [ 271.862255][T13902] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 271.887552][ T8019] bond0: (slave wlan1): link status definitely down, disabling slave [ 271.918706][ T8019] bond0: now running without any active interface! [ 271.948036][T13916] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2030'. [ 272.006768][T13938] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2037'. [ 272.023892][T13904] lo speed is unknown, defaulting to 1000 [ 272.332476][T13904] lo speed is unknown, defaulting to 1000 [ 272.351737][T13951] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2040'. [ 272.383275][T13951] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2040'. [ 272.403149][T13904] lo speed is unknown, defaulting to 1000 [ 272.429209][T13904] wg1 speed is unknown, defaulting to 1000 [ 272.609476][T13976] tipc: Enabling of bearer rejected, already enabled [ 272.895024][T13992] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2052'. [ 273.510529][T14016] lo speed is unknown, defaulting to 1000 [ 273.520237][T14020] IPVS: Error joining to the multicast group [ 273.529328][T14023] IPVS: Error joining to the multicast group [ 273.714095][T14041] netlink: zone id is out of range [ 273.739133][T14041] netlink: zone id is out of range [ 273.744664][T14041] netlink: zone id is out of range [ 273.777130][T14034] netlink: del zone limit has 4 unknown bytes [ 273.794291][T14041] netlink: zone id is out of range [ 273.814445][T14041] netlink: zone id is out of range [ 273.845700][T14041] netlink: zone id is out of range [ 273.850984][T14041] netlink: zone id is out of range [ 273.869387][T14041] netlink: zone id is out of range [ 273.953141][T14058] sctp: [Deprecated]: syz.3.2070 (pid 14058) Use of struct sctp_assoc_value in delayed_ack socket option. [ 273.953141][T14058] Use struct sctp_sack_info instead [ 274.264002][T14016] lo speed is unknown, defaulting to 1000 [ 274.288518][T14016] lo speed is unknown, defaulting to 1000 [ 274.305526][T14016] wg1 speed is unknown, defaulting to 1000 [ 274.361830][T14075] netlink: 'syz.0.2076': attribute type 13 has an invalid length. [ 274.366424][T14072] lo speed is unknown, defaulting to 1000 [ 274.400501][T14075] netlink: 'syz.0.2076': attribute type 17 has an invalid length. [ 274.430702][T14077] IPVS: set_ctl: invalid protocol: 41 10.1.1.1:20001 [ 274.489110][T14075] 8021q: adding VLAN 0 to HW filter on device bond0 [ 274.503785][T14075] 8021q: adding VLAN 0 to HW filter on device team0 [ 274.511331][ T5875] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 274.531118][ T5971] lo speed is unknown, defaulting to 1000 [ 274.546851][ T5971] sz1: Port: 1 Link ACTIVE [ 274.649552][T14080] netlink: 'syz.4.2079': attribute type 9 has an invalid length. [ 274.774640][ T5971] lo speed is unknown, defaulting to 1000 [ 274.807261][ T8019] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 274.839062][ T8019] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 274.884727][ T5971] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 274.893112][T14072] lo speed is unknown, defaulting to 1000 [ 274.900864][T14072] lo speed is unknown, defaulting to 1000 [ 274.908870][T14072] wg1 speed is unknown, defaulting to 1000 [ 275.101578][ T55] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 276.142167][T14133] vlan2: entered promiscuous mode [ 276.175436][T14133] gretap0: entered promiscuous mode [ 276.672907][T14169] tipc: Enabled bearer , priority 0 [ 276.750416][T14176] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 276.758059][T14176] IPv6: NLM_F_CREATE should be set when creating new route [ 276.814613][T14169] syzkaller0: entered promiscuous mode [ 276.831418][T14169] syzkaller0: entered allmulticast mode [ 276.863917][T14182] tipc: Resetting bearer [ 276.895676][T14169] __nla_validate_parse: 10 callbacks suppressed [ 276.895697][T14169] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.2103'. [ 276.916410][T14191] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2107'. [ 276.987078][T14168] tipc: Resetting bearer [ 278.805358][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 278.928125][T14168] tipc: Disabling bearer [ 279.018460][T14226] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2113'. [ 279.116826][T14230] netlink: 'syz.2.2116': attribute type 46 has an invalid length. [ 279.139663][T14232] netlink: 'syz.2.2116': attribute type 46 has an invalid length. [ 279.391151][T14256] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2124'. [ 279.458970][T14262] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2122'. [ 279.501590][T14261] lo speed is unknown, defaulting to 1000 [ 279.522189][T14266] ..@: renamed from bond_slave_0 [ 279.607096][T14268] netlink: 'syz.0.2126': attribute type 1 has an invalid length. [ 279.631960][T14268] netlink: 244 bytes leftover after parsing attributes in process `syz.0.2126'. [ 279.698679][T14272] tipc: Enabled bearer , priority 0 [ 279.764634][T14272] syzkaller0: entered promiscuous mode [ 279.773264][T14258] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2122'. [ 279.788266][T14272] syzkaller0: entered allmulticast mode [ 279.826646][T14270] tipc: Resetting bearer [ 279.841215][T14276] netlink: 216 bytes leftover after parsing attributes in process `syz.0.2128'. [ 279.851081][T14276] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2128'. [ 279.860310][T14276] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2128'. [ 279.887789][T14270] tipc: Disabling bearer [ 279.944354][T14261] lo speed is unknown, defaulting to 1000 [ 279.993628][T14261] lo speed is unknown, defaulting to 1000 [ 280.006095][T14261] wg1 speed is unknown, defaulting to 1000 [ 280.122212][T14281] net_ratelimit: 25 callbacks suppressed [ 280.122231][T14281] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 280.149532][T14282] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 280.239638][T14287] lo speed is unknown, defaulting to 1000 [ 280.720679][T14309] netlink: 'syz.2.2135': attribute type 1 has an invalid length. [ 280.878277][T14287] lo speed is unknown, defaulting to 1000 [ 280.905434][T14316] bond7: entered promiscuous mode [ 280.921299][T14316] bond7: entered allmulticast mode [ 280.928488][T14316] 8021q: adding VLAN 0 to HW filter on device bond7 [ 280.941005][T14287] lo speed is unknown, defaulting to 1000 [ 280.987485][T14309] bridge7: entered promiscuous mode [ 281.004375][T14309] bridge7: entered allmulticast mode [ 281.011779][T14309] bond7: (slave bridge7): Enslaving as a backup interface with an up link [ 281.015361][ T8019] bond7: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 281.022748][T14287] wg1 speed is unknown, defaulting to 1000 [ 281.186047][ T8019] bond7: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 281.488600][ T8014] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 281.498399][ T8014] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 281.569058][ T8014] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 281.612847][ T7995] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 281.690930][T14342] lo: entered allmulticast mode [ 281.725298][T14338] lo: left allmulticast mode [ 281.986466][ T5971] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 282.041564][T14352] bond7: (slave wlan0): Releasing active interface [ 282.120994][T14352] bond0: (slave wlan1): Releasing backup interface [ 282.151251][ T5971] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 282.166207][T14352] tipc: Resetting bearer [ 282.202306][T14364] team0: Mode changed to "loadbalance" [ 282.208605][T14367] __nla_validate_parse: 6 callbacks suppressed [ 282.208622][T14367] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2151'. [ 282.308989][T14375] FAULT_INJECTION: forcing a failure. [ 282.308989][T14375] name failslab, interval 1, probability 0, space 0, times 0 [ 282.322466][T14375] CPU: 1 UID: 0 PID: 14375 Comm: syz.4.2154 Not tainted 6.17.0-rc1-syzkaller-00215-gbab3ce404553 #0 PREEMPT(full) [ 282.322508][T14375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 282.322537][T14375] Call Trace: [ 282.322544][T14375] [ 282.322552][T14375] dump_stack_lvl+0x189/0x250 [ 282.322577][T14375] ? __pfx____ratelimit+0x10/0x10 [ 282.322599][T14375] ? __pfx_dump_stack_lvl+0x10/0x10 [ 282.322618][T14375] ? __pfx__printk+0x10/0x10 [ 282.322643][T14375] ? __pfx___might_resched+0x10/0x10 [ 282.322678][T14375] should_fail_ex+0x414/0x560 [ 282.322703][T14375] should_failslab+0xa8/0x100 [ 282.322728][T14375] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 282.322751][T14375] ? __alloc_skb+0x112/0x2d0 [ 282.322778][T14375] __alloc_skb+0x112/0x2d0 [ 282.322806][T14375] netlink_sendmsg+0x5c6/0xb30 [ 282.322839][T14375] ? __pfx_netlink_sendmsg+0x10/0x10 [ 282.322866][T14375] ? aa_sock_msg_perm+0xf1/0x1d0 [ 282.322893][T14375] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 282.322911][T14375] ? __pfx_netlink_sendmsg+0x10/0x10 [ 282.322943][T14375] __sock_sendmsg+0x219/0x270 [ 282.322968][T14375] ____sys_sendmsg+0x505/0x830 [ 282.322991][T14375] ? __pfx_____sys_sendmsg+0x10/0x10 [ 282.323019][T14375] ? import_iovec+0x74/0xa0 [ 282.323042][T14375] ___sys_sendmsg+0x21f/0x2a0 [ 282.323062][T14375] ? __pfx____sys_sendmsg+0x10/0x10 [ 282.323117][T14375] ? __fget_files+0x2a/0x420 [ 282.323132][T14375] ? __fget_files+0x3a0/0x420 [ 282.323158][T14375] __x64_sys_sendmsg+0x19b/0x260 [ 282.323179][T14375] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 282.323206][T14375] ? __pfx_ksys_write+0x10/0x10 [ 282.323226][T14375] ? rcu_is_watching+0x15/0xb0 [ 282.323249][T14375] ? do_syscall_64+0xbe/0x3b0 [ 282.323276][T14375] do_syscall_64+0xfa/0x3b0 [ 282.323299][T14375] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.323316][T14375] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 282.323333][T14375] ? clear_bhb_loop+0x60/0xb0 [ 282.323354][T14375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.323371][T14375] RIP: 0033:0x7f805d18ebe9 [ 282.323387][T14375] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 282.323402][T14375] RSP: 002b:00007f805dff2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 282.323421][T14375] RAX: ffffffffffffffda RBX: 00007f805d3b5fa0 RCX: 00007f805d18ebe9 [ 282.323434][T14375] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000005 [ 282.323445][T14375] RBP: 00007f805dff2090 R08: 0000000000000000 R09: 0000000000000000 [ 282.323456][T14375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 282.323466][T14375] R13: 00007f805d3b6038 R14: 00007f805d3b5fa0 R15: 00007ffc575a0868 [ 282.323496][T14375] [ 282.330979][ T30] audit: type=1804 audit(1755465864.457:5): pid=14373 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2152" name="/newroot/405/cgroup.controllers" dev="tmpfs" ino=2098 res=1 errno=0 [ 282.660069][ T30] audit: type=1800 audit(1755465864.587:6): pid=14373 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2152" name="cgroup.controllers" dev="tmpfs" ino=2098 res=0 errno=0 [ 282.719071][T14394] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2157'. [ 282.733035][T14394] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2157'. [ 282.765989][T14394] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2157'. [ 282.776409][T14394] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2157'. [ 282.810694][T14394] netlink: 'syz.0.2157': attribute type 6 has an invalid length. [ 283.298622][T14427] lo speed is unknown, defaulting to 1000 [ 283.408146][T14436] netlink: 176 bytes leftover after parsing attributes in process `syz.0.2173'. [ 283.848362][T14427] lo speed is unknown, defaulting to 1000 [ 283.876333][T14427] lo speed is unknown, defaulting to 1000 [ 283.883753][T14427] wg1 speed is unknown, defaulting to 1000 [ 284.003957][T14466] netlink: 'syz.1.2181': attribute type 6 has an invalid length. [ 284.084604][T14472] FAULT_INJECTION: forcing a failure. [ 284.084604][T14472] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 284.101059][T14472] CPU: 1 UID: 0 PID: 14472 Comm: syz.3.2183 Not tainted 6.17.0-rc1-syzkaller-00215-gbab3ce404553 #0 PREEMPT(full) [ 284.101086][T14472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 284.101097][T14472] Call Trace: [ 284.101103][T14472] [ 284.101111][T14472] dump_stack_lvl+0x189/0x250 [ 284.101136][T14472] ? __pfx____ratelimit+0x10/0x10 [ 284.101159][T14472] ? __pfx_dump_stack_lvl+0x10/0x10 [ 284.101178][T14472] ? __pfx__printk+0x10/0x10 [ 284.101199][T14472] ? __might_fault+0xb0/0x130 [ 284.101233][T14472] should_fail_ex+0x414/0x560 [ 284.101257][T14472] _copy_from_iter+0x1db/0x16f0 [ 284.101279][T14472] ? rcu_is_watching+0x15/0xb0 [ 284.101295][T14472] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 284.101319][T14472] ? __pfx__copy_from_iter+0x10/0x10 [ 284.101336][T14472] ? __build_skb_around+0x257/0x3e0 [ 284.101363][T14472] ? netlink_sendmsg+0x642/0xb30 [ 284.101385][T14472] ? skb_put+0x11b/0x210 [ 284.101403][T14472] netlink_sendmsg+0x6b2/0xb30 [ 284.101435][T14472] ? __pfx_netlink_sendmsg+0x10/0x10 [ 284.101461][T14472] ? aa_sock_msg_perm+0xf1/0x1d0 [ 284.101486][T14472] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 284.101503][T14472] ? __pfx_netlink_sendmsg+0x10/0x10 [ 284.101525][T14472] __sock_sendmsg+0x219/0x270 [ 284.101549][T14472] ____sys_sendmsg+0x505/0x830 [ 284.101573][T14472] ? __pfx_____sys_sendmsg+0x10/0x10 [ 284.101596][T14472] ? import_iovec+0x74/0xa0 [ 284.101619][T14472] ___sys_sendmsg+0x21f/0x2a0 [ 284.101637][T14472] ? __pfx____sys_sendmsg+0x10/0x10 [ 284.101691][T14472] ? __fget_files+0x2a/0x420 [ 284.101706][T14472] ? __fget_files+0x3a0/0x420 [ 284.101731][T14472] __x64_sys_sendmsg+0x19b/0x260 [ 284.101749][T14472] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 284.101774][T14472] ? __pfx_ksys_write+0x10/0x10 [ 284.101794][T14472] ? rcu_is_watching+0x15/0xb0 [ 284.101816][T14472] ? do_syscall_64+0xbe/0x3b0 [ 284.101842][T14472] do_syscall_64+0xfa/0x3b0 [ 284.101863][T14472] ? lockdep_hardirqs_on+0x9c/0x150 [ 284.101883][T14472] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.101899][T14472] ? clear_bhb_loop+0x60/0xb0 [ 284.101917][T14472] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.101932][T14472] RIP: 0033:0x7f0724d8ebe9 [ 284.101947][T14472] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 284.101959][T14472] RSP: 002b:00007f0725bc3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 284.101976][T14472] RAX: ffffffffffffffda RBX: 00007f0724fb5fa0 RCX: 00007f0724d8ebe9 [ 284.101987][T14472] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000005 [ 284.101996][T14472] RBP: 00007f0725bc3090 R08: 0000000000000000 R09: 0000000000000000 [ 284.102006][T14472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 284.102023][T14472] R13: 00007f0724fb6038 R14: 00007f0724fb5fa0 R15: 00007ffe31be8448 [ 284.102053][T14472] [ 284.551009][T14479] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2185'. [ 284.917093][T14493] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 284.917665][T14498] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_tx_wq": -EINTR [ 285.122106][T14515] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2191'. [ 285.140825][T14522] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2194'. [ 285.273433][T14527] FAULT_INJECTION: forcing a failure. [ 285.273433][T14527] name failslab, interval 1, probability 0, space 0, times 0 [ 285.292699][T14527] CPU: 0 UID: 0 PID: 14527 Comm: syz.3.2197 Not tainted 6.17.0-rc1-syzkaller-00215-gbab3ce404553 #0 PREEMPT(full) [ 285.292727][T14527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 285.292737][T14527] Call Trace: [ 285.292743][T14527] [ 285.292749][T14527] dump_stack_lvl+0x189/0x250 [ 285.292773][T14527] ? __pfx____ratelimit+0x10/0x10 [ 285.292796][T14527] ? __pfx_dump_stack_lvl+0x10/0x10 [ 285.292816][T14527] ? __pfx__printk+0x10/0x10 [ 285.292840][T14527] ? __lock_acquire+0xab9/0xd20 [ 285.292874][T14527] should_fail_ex+0x414/0x560 [ 285.292901][T14527] should_failslab+0xa8/0x100 [ 285.292927][T14527] kmem_cache_alloc_noprof+0x73/0x3c0 [ 285.292948][T14527] ? skb_clone+0x212/0x3a0 [ 285.292979][T14527] skb_clone+0x212/0x3a0 [ 285.293001][T14527] __netlink_deliver_tap+0x404/0x850 [ 285.293038][T14527] ? netlink_deliver_tap+0x2e/0x1b0 [ 285.293063][T14527] netlink_deliver_tap+0x19c/0x1b0 [ 285.293088][T14527] netlink_unicast+0x7fa/0x9e0 [ 285.293119][T14527] ? __pfx_netlink_unicast+0x10/0x10 [ 285.293142][T14527] ? netlink_sendmsg+0x642/0xb30 [ 285.293163][T14527] ? skb_put+0x11b/0x210 [ 285.293184][T14527] netlink_sendmsg+0x805/0xb30 [ 285.293217][T14527] ? __pfx_netlink_sendmsg+0x10/0x10 [ 285.293244][T14527] ? aa_sock_msg_perm+0xf1/0x1d0 [ 285.293271][T14527] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 285.293289][T14527] ? __pfx_netlink_sendmsg+0x10/0x10 [ 285.293311][T14527] __sock_sendmsg+0x219/0x270 [ 285.293336][T14527] ____sys_sendmsg+0x505/0x830 [ 285.293358][T14527] ? __pfx_____sys_sendmsg+0x10/0x10 [ 285.293385][T14527] ? import_iovec+0x74/0xa0 [ 285.293408][T14527] ___sys_sendmsg+0x21f/0x2a0 [ 285.293428][T14527] ? __pfx____sys_sendmsg+0x10/0x10 [ 285.293483][T14527] ? __fget_files+0x2a/0x420 [ 285.293498][T14527] ? __fget_files+0x3a0/0x420 [ 285.293528][T14527] __x64_sys_sendmsg+0x19b/0x260 [ 285.293550][T14527] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 285.293579][T14527] ? __pfx_ksys_write+0x10/0x10 [ 285.293598][T14527] ? rcu_is_watching+0x15/0xb0 [ 285.293621][T14527] ? do_syscall_64+0xbe/0x3b0 [ 285.293648][T14527] do_syscall_64+0xfa/0x3b0 [ 285.293669][T14527] ? lockdep_hardirqs_on+0x9c/0x150 [ 285.293690][T14527] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.293707][T14527] ? clear_bhb_loop+0x60/0xb0 [ 285.293727][T14527] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.293743][T14527] RIP: 0033:0x7f0724d8ebe9 [ 285.293760][T14527] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 285.293775][T14527] RSP: 002b:00007f0725bc3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 285.293794][T14527] RAX: ffffffffffffffda RBX: 00007f0724fb5fa0 RCX: 00007f0724d8ebe9 [ 285.293807][T14527] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000005 [ 285.293818][T14527] RBP: 00007f0725bc3090 R08: 0000000000000000 R09: 0000000000000000 [ 285.293829][T14527] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 285.293839][T14527] R13: 00007f0724fb6038 R14: 00007f0724fb5fa0 R15: 00007ffe31be8448 [ 285.293869][T14527] [ 285.653498][T14536] veth0: entered promiscuous mode [ 285.688075][T14535] tipc: Enabling of bearer rejected, already enabled [ 285.851468][T14550] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2204'. [ 285.861717][T14550] netlink: 'syz.3.2204': attribute type 7 has an invalid length. [ 286.253288][T14556] lo speed is unknown, defaulting to 1000 [ 286.277622][T14562] bridge0: port 1(ipvlan2) entered blocking state [ 286.302297][T14562] bridge0: port 1(ipvlan2) entered disabled state [ 286.334051][T14562] ipvlan2: entered allmulticast mode [ 286.340536][T14562] bridge0: entered allmulticast mode [ 286.361246][T14562] ipvlan2: left allmulticast mode [ 286.379310][T14562] bridge0: left allmulticast mode [ 286.500660][T14578] netlink: 'syz.4.2214': attribute type 12 has an invalid length. [ 286.555433][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 286.758208][T14591] nbd: must specify a size in bytes for the device [ 287.116383][T14585] lo speed is unknown, defaulting to 1000 [ 287.127764][T14556] lo speed is unknown, defaulting to 1000 [ 287.159645][T14556] lo speed is unknown, defaulting to 1000 [ 287.183535][T14556] wg1 speed is unknown, defaulting to 1000 [ 287.195251][ T5861] Bluetooth: hci3: link tx timeout [ 287.201032][ T5861] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 287.212505][ T5869] Bluetooth: hci3: link tx timeout [ 287.219111][ T5869] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 287.232965][ T5869] Bluetooth: hci3: link tx timeout [ 287.238176][ T5869] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 287.246751][ T5869] Bluetooth: hci3: link tx timeout [ 287.252227][ T5869] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 287.260512][ T5869] Bluetooth: hci3: link tx timeout [ 287.266756][ T5869] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 287.289109][ T5869] Bluetooth: hci3: link tx timeout [ 287.294534][ T5869] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 287.302365][ T5869] Bluetooth: hci3: link tx timeout [ 287.307871][ T5869] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 287.311756][T14618] __nla_validate_parse: 7 callbacks suppressed [ 287.311775][T14618] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2225'. [ 287.315938][ T5869] Bluetooth: hci3: link tx timeout [ 287.336269][ T5869] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 287.578995][T14634] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2230'. [ 287.616990][T14633] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2230'. [ 287.638391][T14634] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2230'. [ 287.644833][T14633] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2230'. [ 287.694023][T14585] lo speed is unknown, defaulting to 1000 [ 287.694046][T14565] lo speed is unknown, defaulting to 1000 [ 287.704823][T14585] lo speed is unknown, defaulting to 1000 [ 287.713966][T14585] wg1 speed is unknown, defaulting to 1000 [ 287.843003][T14640] netlink: 'syz.1.2232': attribute type 1 has an invalid length. [ 287.927484][T14640] 8021q: adding VLAN 0 to HW filter on device bond7 [ 287.936188][T14645] sctp: [Deprecated]: syz.4.2233 (pid 14645) Use of int in maxseg socket option. [ 287.936188][T14645] Use struct sctp_assoc_value instead [ 288.064034][T14647] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2234'. [ 288.089016][T14651] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2235'. [ 288.126800][T14647] gtp0: entered promiscuous mode [ 288.137553][T14647] gtp0: entered allmulticast mode [ 288.147170][T14565] lo speed is unknown, defaulting to 1000 [ 288.176695][T14565] lo speed is unknown, defaulting to 1000 [ 288.188373][T14565] wg1 speed is unknown, defaulting to 1000 [ 289.152993][T14682] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2241'. [ 289.231737][T14689] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2244'. [ 289.256651][T14684] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2243'. [ 289.280797][ T5869] Bluetooth: hci3: command 0x0405 tx timeout [ 289.334434][ T8016] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.371365][ T8016] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.379721][ T8016] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.415669][ T8016] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.465026][ T43] lo speed is unknown, defaulting to 1000 [ 289.475745][ T43] syz2: Port: 1 Link DOWN [ 289.480718][T14693] netlink: 'syz.0.2245': attribute type 2 has an invalid length. [ 290.750743][T14764] netlink: 'syz.0.2259': attribute type 83 has an invalid length. [ 291.030851][T14764] bridge0: entered allmulticast mode [ 291.288604][T14796] netlink: 'syz.0.2263': attribute type 1 has an invalid length. [ 291.360358][T14795] warn_alloc: 1 callbacks suppressed [ 291.360376][T14795] syz.4.2262: vmalloc error: size 33558528, failed to allocated page array size 65544, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 291.390543][T14795] CPU: 0 UID: 0 PID: 14795 Comm: syz.4.2262 Not tainted 6.17.0-rc1-syzkaller-00215-gbab3ce404553 #0 PREEMPT(full) [ 291.390570][T14795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 291.390580][T14795] Call Trace: [ 291.390587][T14795] [ 291.390595][T14795] dump_stack_lvl+0x189/0x250 [ 291.390624][T14795] ? __pfx_dump_stack_lvl+0x10/0x10 [ 291.390644][T14795] ? __pfx__printk+0x10/0x10 [ 291.390668][T14795] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 291.390689][T14795] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 291.390711][T14795] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 291.390734][T14795] warn_alloc+0x214/0x310 [ 291.390766][T14795] ? __pfx_warn_alloc+0x10/0x10 [ 291.390799][T14795] ? __get_vm_area_node+0x28f/0x300 [ 291.390822][T14795] ? xskq_create+0xbf/0x170 [ 291.390848][T14795] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 291.390903][T14795] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 291.390933][T14795] ? __kasan_kmalloc+0x93/0xb0 [ 291.390958][T14795] vmalloc_user_noprof+0xad/0xf0 [ 291.390981][T14795] ? xskq_create+0xbf/0x170 [ 291.391033][T14795] xskq_create+0xbf/0x170 [ 291.391055][T14795] xsk_init_queue+0xb0/0x110 [ 291.391079][T14795] xsk_setsockopt+0x57b/0x8d0 [ 291.391101][T14795] ? __pfx_xsk_setsockopt+0x10/0x10 [ 291.391122][T14795] ? __pfx_aa_sk_perm+0x10/0x10 [ 291.391150][T14795] ? __fget_files+0x2a/0x420 [ 291.391163][T14795] ? aa_sock_opt_perm+0xff/0x1b0 [ 291.391184][T14795] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 291.391203][T14795] ? __pfx_xsk_setsockopt+0x10/0x10 [ 291.391225][T14795] do_sock_setsockopt+0x17c/0x1b0 [ 291.391248][T14795] __x64_sys_setsockopt+0x13f/0x1b0 [ 291.391271][T14795] do_syscall_64+0xfa/0x3b0 [ 291.391293][T14795] ? lockdep_hardirqs_on+0x9c/0x150 [ 291.391314][T14795] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.391330][T14795] ? clear_bhb_loop+0x60/0xb0 [ 291.391352][T14795] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.391368][T14795] RIP: 0033:0x7f805d18ebe9 [ 291.391384][T14795] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 291.391398][T14795] RSP: 002b:00007f805dfb0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 291.391415][T14795] RAX: ffffffffffffffda RBX: 00007f805d3b6180 RCX: 00007f805d18ebe9 [ 291.391427][T14795] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000008 [ 291.391437][T14795] RBP: 00007f805d211e19 R08: 0000000000000004 R09: 0000000000000000 [ 291.391446][T14795] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000 [ 291.391456][T14795] R13: 00007f805d3b6218 R14: 00007f805d3b6180 R15: 00007ffc575a0868 [ 291.391487][T14795] [ 291.391494][T14795] Mem-Info: [ 291.471489][T14796] bond10: entered promiscuous mode [ 291.476239][T14795] active_anon:7725 inactive_anon:0 isolated_anon:0 [ 291.476239][T14795] active_file:3344 inactive_file:39917 isolated_file:0 [ 291.476239][T14795] unevictable:768 dirty:161 writeback:0 [ 291.476239][T14795] slab_reclaimable:12428 slab_unreclaimable:174353 [ 291.476239][T14795] mapped:30339 shmem:1427 pagetables:1339 [ 291.476239][T14795] sec_pagetables:0 bounce:0 [ 291.476239][T14795] kernel_misc_reclaimable:0 [ 291.476239][T14795] free:1244036 free_pcp:17696 free_cma:0 [ 291.510474][T14796] 8021q: adding VLAN 0 to HW filter on device bond10 [ 291.514549][T14795] Node 0 active_anon:30600kB inactive_anon:0kB active_file:13376kB inactive_file:159464kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:121356kB dirty:644kB writeback:0kB shmem:3972kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13676kB pagetables:5232kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 291.514599][T14795] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:124kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 291.789233][T14795] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 291.820658][T14795] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 291.827503][T14795] Node 0 DMA32 free:1080936kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:30656kB inactive_anon:0kB active_file:13376kB inactive_file:157896kB unevictable:1536kB writepending:644kB present:3129332kB managed:2557476kB mlocked:0kB bounce:0kB free_pcp:48208kB local_pcp:17412kB free_cma:0kB [ 291.832347][T14797] 8021q: adding VLAN 0 to HW filter on device bond10 [ 291.868660][T14795] lowmem_reserve[]: 0 0 1 1 1 [ 291.873599][T14795] Node 0 Normal free:24kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1568kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 291.874045][T14797] bond10: (slave vxcan1): The slave device specified does not support setting the MAC address [ 291.906969][T14795] lowmem_reserve[]: 0 0 0 0 0 [ 291.922488][T14795] Node 1 Normal free:3879624kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:22420kB local_pcp:11684kB free_cma:0kB [ 291.923200][T14797] bond10: (slave vxcan1): Setting fail_over_mac to active for active-backup mode [ 291.958050][T14795] lowmem_reserve[]: 0 0 0 0 0 [ 291.970674][T14797] bond10: (slave vxcan1): making interface the new active one [ 291.977819][T14795] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 291.980847][T14797] vxcan1: entered promiscuous mode [ 291.997545][T14795] Node 0 DMA32: 556*4kB (UME) 1307*8kB (UME) 548*16kB (UME) 549*32kB (UM) 356*64kB (UM) 216*128kB (UM) 154*256kB (UM) 95*512kB (UME) 42*1024kB (UE) 11*2048kB (UM) 205*4096kB (UM) = 1082728kB [ 292.000867][T14797] bond10: (slave vxcan1): Enslaving as an active interface with an up link [ 292.017727][T14795] Node 0 Normal: 0*4kB 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 24kB [ 292.041166][T14795] Node 1 Normal: 206*4kB (UE) 56*8kB (UME) 33*16kB (UME) 80*32kB (UME) 27*64kB (UME) 8*128kB (UME) 3*256kB (UM) 4*512kB (UM) 1*1024kB (M) 1*2048kB (E) 944*4096kB (M) = 3879624kB [ 292.059672][T14795] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 292.070671][T14795] Node 0 hugepages_total=3 hugepages_free=0 hugepages_surp=1 hugepages_size=2048kB [ 292.138157][T14795] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 292.163041][T14795] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 292.177458][T14795] 44614 total pagecache pages [ 292.182931][T14795] 0 pages in swap cache [ 292.188162][T14795] Free swap = 124996kB [ 292.190405][T14816] : entered promiscuous mode [ 292.193180][T14795] Total swap = 124996kB [ 292.201927][T14795] 2097051 pages RAM [ 292.206336][T14795] 0 pages HighMem/MovableOnly [ 292.240499][T14795] 425656 pages reserved [ 292.244702][T14795] 0 pages cma reserved [ 292.306690][T14829] tipc: Resetting bearer [ 292.331573][T14829] tipc: Enabling of bearer rejected, already enabled [ 292.413738][T14838] __nla_validate_parse: 4 callbacks suppressed [ 292.413757][T14838] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2270'. [ 292.455315][ C1] syzkaller0: tun_net_xmit 90 [ 292.516454][T14843] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2274'. [ 292.603467][T14828] tipc: Resetting bearer [ 292.789527][T14850] IPVS: set_ctl: invalid protocol: 25 224.0.0.1:20004 [ 292.877466][T14850] netlink: 192 bytes leftover after parsing attributes in process `syz.0.2276'. [ 292.888187][T14848] lo speed is unknown, defaulting to 1000 [ 292.978002][T14858] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2279'. [ 293.018510][T14860] tipc: Enabled bearer , priority 0 [ 293.064089][T14860] tipc: Disabling bearer [ 293.089160][ T7995] tipc: Resetting bearer [ 293.265431][T14839] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 293.266384][T14848] lo speed is unknown, defaulting to 1000 [ 293.271688][T14839] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 293.279524][T14848] lo speed is unknown, defaulting to 1000 [ 293.294291][T14848] wg1 speed is unknown, defaulting to 1000 [ 293.440869][T14839] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 293.455652][T14839] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 293.502907][T14839] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 293.525776][T14839] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 293.569005][T14839] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 293.575444][T14839] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 293.776727][T14890] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2283'. [ 293.819736][T14839] tipc: Resetting bearer [ 294.045522][T14924] tipc: Resetting bearer [ 294.095312][T14926] tipc: Enabling of bearer rejected, already enabled [ 294.186945][ C1] syzkaller0: tun_net_xmit 90 [ 294.221687][T14915] [ 294.224054][T14915] ============================================ [ 294.230345][T14915] WARNING: possible recursive locking detected [ 294.236515][T14915] 6.17.0-rc1-syzkaller-00215-gbab3ce404553 #0 Not tainted [ 294.243626][T14915] -------------------------------------------- [ 294.249778][T14915] kworker/u8:39/14915 is trying to acquire lock: [ 294.256115][T14915] ffffe8ffffd5fdf8 (&pd_list->lock){+...}-{3:3}, at: padata_do_serial+0x73e/0xb80 [ 294.265550][T14915] [ 294.265550][T14915] but task is already holding lock: [ 294.273179][T14915] ffffe8ffffc60410 (&pd_list->lock){+...}-{3:3}, at: padata_do_serial+0x5b5/0xb80 [ 294.282422][T14915] [ 294.282422][T14915] other info that might help us debug this: [ 294.291387][T14915] Possible unsafe locking scenario: [ 294.291387][T14915] [ 294.298853][T14915] CPU0 [ 294.302249][T14915] ---- [ 294.305534][T14915] lock(&pd_list->lock); [ 294.309865][T14915] lock(&pd_list->lock); [ 294.314239][T14915] [ 294.314239][T14915] *** DEADLOCK *** [ 294.314239][T14915] [ 294.322882][T14915] May be due to missing lock nesting notation [ 294.322882][T14915] [ 294.331394][T14915] 3 locks held by kworker/u8:39/14915: [ 294.336891][T14915] #0: ffff888020770148 ((wq_completion)pencrypt_parallel){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 294.348919][T14915] #1: ffffc9000bd97bc0 ((work_completion)(&pw->pw_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 294.361461][T14915] #2: ffffe8ffffc60410 (&pd_list->lock){+...}-{3:3}, at: padata_do_serial+0x5b5/0xb80 [ 294.371118][T14915] [ 294.371118][T14915] stack backtrace: [ 294.377005][T14915] CPU: 0 UID: 0 PID: 14915 Comm: kworker/u8:39 Not tainted 6.17.0-rc1-syzkaller-00215-gbab3ce404553 #0 PREEMPT(full) [ 294.377025][T14915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 294.377032][T14915] Workqueue: pencrypt_parallel padata_parallel_worker [ 294.377051][T14915] Call Trace: [ 294.377058][T14915] [ 294.377064][T14915] dump_stack_lvl+0x189/0x250 [ 294.377078][T14915] ? __pfx_dump_stack_lvl+0x10/0x10 [ 294.377088][T14915] ? __pfx__printk+0x10/0x10 [ 294.377102][T14915] ? print_lock_name+0xde/0x100 [ 294.377114][T14915] print_deadlock_bug+0x28b/0x2a0 [ 294.377125][T14915] validate_chain+0x1a3f/0x2140 [ 294.377136][T14915] ? __queue_work+0x102/0xfb0 [ 294.377146][T14915] ? look_up_lock_class+0x74/0x170 [ 294.377159][T14915] ? register_lock_class+0x51/0x320 [ 294.377171][T14915] ? __queue_work+0xc56/0xfb0 [ 294.377181][T14915] __lock_acquire+0xab9/0xd20 [ 294.377194][T14915] ? padata_do_serial+0x73e/0xb80 [ 294.377205][T14915] lock_acquire+0x120/0x360 [ 294.377217][T14915] ? padata_do_serial+0x73e/0xb80 [ 294.377228][T14915] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 294.377240][T14915] _raw_spin_lock+0x2e/0x40 [ 294.377252][T14915] ? padata_do_serial+0x73e/0xb80 [ 294.377262][T14915] padata_do_serial+0x73e/0xb80 [ 294.377276][T14915] ? padata_parallel_worker+0x44/0x1d0 [ 294.377287][T14915] padata_parallel_worker+0x75/0x1d0 [ 294.377299][T14915] ? process_scheduled_works+0x9ef/0x17b0 [ 294.377309][T14915] process_scheduled_works+0xade/0x17b0 [ 294.377324][T14915] ? __pfx_process_scheduled_works+0x10/0x10 [ 294.377336][T14915] worker_thread+0x8a0/0xda0 [ 294.377350][T14915] kthread+0x70e/0x8a0 [ 294.377362][T14915] ? __pfx_worker_thread+0x10/0x10 [ 294.377370][T14915] ? __pfx_kthread+0x10/0x10 [ 294.377380][T14915] ? _raw_spin_unlock_irq+0x23/0x50 [ 294.377391][T14915] ? lockdep_hardirqs_on+0x9c/0x150 [ 294.377401][T14915] ? __pfx_kthread+0x10/0x10 [ 294.377412][T14915] ret_from_fork+0x3f9/0x770 [ 294.377423][T14915] ? __pfx_ret_from_fork+0x10/0x10 [ 294.377433][T14915] ? __switch_to_asm+0x39/0x70 [ 294.377444][T14915] ? __switch_to_asm+0x33/0x70 [ 294.377460][T14915] ? __pfx_kthread+0x10/0x10 [ 294.377477][T14915] ret_from_fork_asm+0x1a/0x30 [ 294.377501][T14915] [ 294.599488][T14924] tipc: Resetting bearer [ 295.105839][ T12] tipc: Resetting bearer [ 301.915595][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!