last executing test programs: 10m40.177897767s ago: executing program 4 (id=6560): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="070000000000000000000200000008002500000000000c0099"], 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="10032cbd7000fbdbdf252100000008000300", @ANYRES32=r3, @ANYBLOB="0c00990004000000530000000d002a00710701ff010101022800000034002d80240000001ca00b4441ed6cea22899f106b1449ebd906d1c8d1daa20983cce07294b1ea9e0a0000000101010101010000"], 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x8000) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000040000000000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f00000001c0)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r4, 0x18000000000002a0, 0x12, 0x0, &(0x7f00000002c0)="b9ff0300600d690cff9e14f086f8e820bd9b", 0x0, 0xe00, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c00000042000701feffffff00000000037c00000400428014000180100076800c0051800500460000000000107dd6459292aefd53d257e6eb3843b5a73409e8f9bffd478c378a8b253fa1f74fbfae98d16d9b5ad499b5962f44d7ba3c62545a0d004b2ee947af53e37025ba78b194d1b6a18474743b1e7998d2aca5b4392974de0fa8ebe93ab6c776d1ddede8"], 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) 10m39.854669604s ago: executing program 4 (id=6561): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0x2, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0xc}, 0x3}, 0x2) (async) openat$tun(0xffffffffffffff9c, 0x0, 0xe8001, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000380)={0xffffffffffffffff, r2, 0x25, 0x0, @val=@tcx}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000340)=ANY=[@ANYRESOCT], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x6d, '\x00', r2}, 0x94) (async) readv(0xffffffffffffffff, &(0x7f00000003c0), 0x0) (async) socket$packet(0x11, 0x3, 0x300) r3 = socket(0x11, 0x3, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, &(0x7f0000000ec0)={0x2, 0x4e25, @multicast1}, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bind$packet(r3, &(0x7f00000001c0)={0x11, 0x2, r5, 0x1, 0x2, 0x6, @broadcast}, 0x14) (async) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) r7 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r7, &(0x7f0000000000)={0x1d, r8}, 0x10) setsockopt$CAN_RAW_FILTER(r7, 0x65, 0x1, &(0x7f00000000c0), 0xf00) bind$can_raw(r7, &(0x7f0000000080), 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) 10m39.646834556s ago: executing program 4 (id=6565): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000002400010122bd7000fd0fff5e79a1e5000800030047"], 0x1c}, 0x1, 0x0, 0x0, 0x449d7}, 0x0) r1 = socket(0x8, 0x3, 0x0) ioctl$sock_netrom_SIOCADDRT(r1, 0x6180, 0x0) close(r1) clock_gettime(0x0, &(0x7f0000004800)={0x0, 0x0}) recvmmsg$unix(r1, &(0x7f00000045c0)=[{{&(0x7f0000000000), 0x6e, &(0x7f0000000680)=[{&(0x7f0000000080)=""/106, 0x6a}, {&(0x7f0000000100)}, {&(0x7f00000001c0)=""/65, 0x41}, {&(0x7f0000000240)=""/252, 0xfc}, {&(0x7f0000000380)=""/72, 0x48}, {&(0x7f0000000400)=""/134, 0x86}, {&(0x7f00000004c0)=""/223, 0xdf}, {&(0x7f00000005c0)=""/191, 0xbf}], 0x8, &(0x7f0000000700)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc8}}, {{&(0x7f0000000800)=@abs, 0x6e, &(0x7f0000000bc0)=[{&(0x7f0000000880)=""/167, 0xa7}, {&(0x7f0000000940)=""/180, 0xb4}, {&(0x7f0000000a00)=""/5, 0x5}, {&(0x7f0000000a40)=""/228, 0xe4}, {&(0x7f0000000b40)=""/81, 0x51}], 0x5, &(0x7f0000000c40)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000000c80)=@abs, 0x6e, &(0x7f00000010c0)=[{&(0x7f0000000d00)=""/130, 0x82}, {&(0x7f0000000dc0)=""/206, 0xce}, {&(0x7f0000000ec0)=""/193, 0xc1}, {&(0x7f0000000fc0)=""/99, 0x63}, {&(0x7f0000001040)=""/96, 0x60}], 0x5, &(0x7f0000001140)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa8}}, {{&(0x7f0000001200), 0x6e, &(0x7f0000001440)=[{&(0x7f0000001280)=""/202, 0xca}, {&(0x7f0000001380)=""/52, 0x34}, {&(0x7f00000013c0)=""/51, 0x33}, {&(0x7f0000001400)=""/10, 0xa}], 0x4, &(0x7f0000001480)}}, {{&(0x7f00000014c0)=@abs, 0x6e, &(0x7f0000002900)=[{&(0x7f0000001540)=""/87, 0x57}, {&(0x7f00000015c0)=""/160, 0xa0}, {&(0x7f0000001680)=""/217, 0xd9}, {&(0x7f0000001780)=""/95, 0x5f}, {&(0x7f0000001800)=""/4096, 0x1000}, {&(0x7f0000002800)=""/93, 0x5d}, {&(0x7f0000002880)=""/114, 0x72}], 0x7, &(0x7f0000002980)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xd0}}, {{&(0x7f0000002a80)=@abs, 0x6e, &(0x7f0000002d80)=[{&(0x7f0000002b00)=""/31, 0x1f}, {&(0x7f0000002b40)=""/74, 0x4a}, {&(0x7f0000002bc0)=""/157, 0x9d}, {&(0x7f0000002c80)=""/9, 0x9}, {&(0x7f0000002cc0)=""/139, 0x8b}], 0x5, &(0x7f0000002e00)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xe0}}, {{&(0x7f0000002f00)=@abs, 0x6e, &(0x7f0000003f80)=[{&(0x7f0000002f80)=""/4096, 0x1000}], 0x1, &(0x7f0000003fc0)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x28}}, {{&(0x7f0000004000)=@abs, 0x6e, &(0x7f0000004300)=[{&(0x7f0000004080)=""/13, 0xd}, {&(0x7f00000040c0)=""/242, 0xf2}, {&(0x7f00000041c0)=""/71, 0x47}, {&(0x7f0000004240)=""/120, 0x78}, {&(0x7f00000042c0)=""/25, 0x19}], 0x5, &(0x7f0000004380)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x90}}, {{&(0x7f0000004440), 0x6e, &(0x7f0000004580)=[{&(0x7f00000044c0)=""/184, 0xb8}], 0x1}}], 0x9, 0x0, &(0x7f0000004840)={r2, r3+60000000}) 10m39.411270621s ago: executing program 4 (id=6570): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000a00)={0x4, &(0x7f0000000c00)=[{}, {@fixed}, {@fixed}, {@fixed}]}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000d5ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000"], 0x7c}, 0x1, 0x0, 0x0, 0x25}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a010200000000000000000200000009000200737900000000000008000440000000000900010073797a3000000000080003400000000a"], 0x64}}, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000000)={0x6b059b26, 0x1000, 0x2, 0x646, 0x6, 0x0, [{0x5, 0x1, 0x0, '\x00', 0x1002}, {0x2ece2a62, 0x7, 0x7f, '\x00', 0x800}, {0x8001, 0x2f57, 0x7e, '\x00', 0xd15}, {0x2, 0xffffffffffff0001, 0xfffffffffffff22d, '\x00', 0x2}, {0xfffffffffffffffe, 0x3, 0x5, '\x00', 0x2f00}, {0x6, 0x7, 0x0, '\x00', 0x2184}]}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_devices(r4, &(0x7f0000000080)=ANY=[@ANYBLOB='b *:* m'], 0x47) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0x3e, &(0x7f00000000c0)=0xffff, 0x4) sendmmsg$inet(r5, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0}}], 0x1, 0x8014) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r4, &(0x7f0000000180)={0x1}) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r8 = socket$inet6(0xa, 0x80002, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000300), 0x8) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000340)) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000003e00090b00000000000800000300000004"], 0x20}}, 0x0) setsockopt$sock_linger(r8, 0x1, 0x3c, &(0x7f0000000040)={0x200000000000001}, 0x8) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r8, 0x29, 0x36, &(0x7f0000001440)=ANY=[], 0xc0) sendmmsg$inet6(r8, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r11 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r7, r10, 0x5, 0x0, @void}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000080)=r11, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r11, r7, 0x4, r7}, 0x6) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c00)=@bpf_tracing={0x1a, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000040000000000000000000000850000000000000095000000458b7144bc1400000004"], &(0x7f0000000a00)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, 0x1c, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x13b02, r2, 0x0, 0x0, 0x0, 0x10, 0xd}, 0x94) 10m39.305504038s ago: executing program 4 (id=6571): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000440)=0x1000, 0x4) sendmsg$inet(r0, &(0x7f0000000700)={&(0x7f0000000380)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000002100)="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", 0xffe3}], 0x1, &(0x7f0000000680)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2f}, @local}}}], 0x20}, 0x0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000500)={@val={0x0, 0x6003}, @void, @eth={@broadcast, @broadcast, @val={@val={0x88a8, 0x0, 0x0, 0x3}, {0x8100, 0x5, 0x0, 0x2}}, {@ipv4={0x800, @udp={{0x26, 0x4, 0x0, 0x0, 0xa8, 0x68, 0x2000, 0xfc, 0x2f, 0x0, @private=0xa010100, @broadcast, {[@ssrr={0x89, 0x23, 0xe6, [@private=0xa010102, @private=0xa010100, @rand_addr=0x64010100, @broadcast, @remote, @rand_addr=0x64010102, @private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @rr={0x7, 0x3, 0x9b}, @ssrr={0x89, 0xb, 0xf2, [@multicast1, @dev={0xac, 0x14, 0x14, 0x22}]}, @noop, @cipso={0x86, 0x50, 0x0, [{0x2, 0xc, "b524dfa8d18dd7a9d323"}, {0x2, 0x7, "82a969bcf1"}, {0x1, 0xe, "4a3bd709638e3f7aa617c047"}, {0x7, 0xa, "9d62bae6890a3c42"}, {0x5, 0x4, "cb99"}, {0x2, 0x11, "b06647e1d135498a4be350dce2afe4"}, {0x2, 0x5, "c9be7a"}, {0x2, 0x5, "eeed74"}]}]}}, {0x8000, 0x6558, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x9, 0x100, @val=0x80}}}}}}}}, 0xc2) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 10m38.492108398s ago: executing program 4 (id=6580): r0 = socket(0xa, 0x3, 0x3a) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000001600)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="18000000030000000000000026d0000095002b000000000093adff012255f674412d02000000880b5f04596a5e99fce658be2f200c699223886d8be4b50000005ab527ee3697f98125f30e6326996a3cfee33025a30b45bdcf2c69d105e5e55a1d273683623f1a5dc6e3c7e20eb7a98ecf3bd2cf898e924abe26ac296f660e69ba982fd76e00dcff7f0000ca6b78ad833488cfe4109eaf009eddcf21f5c63cde2f00150200000001000000520a0000151d010000000100bf00000000cc587424363da52001a3cdf2000000db74596fd72c002a60c1bc7dc8c38b7d2e13c50424b9dd1145d03ff45f70685c6bd9ff41c69b7de406e89dcbb7677e65a88a8407a9e7f9c0e91028b0856eb1ed9474480737a55ebb0bd701f7fb21135c6172eba7eb8a341f07e5a2d1e88b3cfc22df01e4bac9d97328fa2a82b5e8741e02056d93a433f50479387467824262852c7939db5672d07cdbe8e14abf56497e5d56dbe37551b870b2851c3f0a1a9ebfcba105a6ccdd01b0f04edb256c0200000073f6db43661bd7f0e2536ffbfe5ca31b4083145531458b7d1e341c6b351ebc5223f54d6bec93f4ef088e5d1be2515226988d664709ff03f1aa3dc7f1580ace9bf2afd28d0700000000000000d6eb372713255012e028cb2654d493a0b43bf21375709f348f5eda2967199cc936859a538100070000000000dc10e13ef227f627a40000ad1fa253d33fa74f172d3407ae4e1e347c0c6ef9dd2b6bb700000000000000000c586272c3f4d79bc36315745cb149f3cb385e6add14652003c7cdd3324f07d134d3a6c718bbd1aafe1140cff0be4c6f8df084c5e9734ae30aa9af030025f01ab03a9b1074407136bc506031f0916a39d3057d55183612b39e73ae8e6dc30356886a831836469e2051d937eb85f3f2d5ae2c1dca476b97419a3b76ed62409d004d7fbe362145d19605d760df4c5124ca325d374b371867a79b35c6617fc3327191fbf514573f0e30d1d60be2168fffc2f3dccd599a2cb77f124e22f87673675805494db821f39b50d938d5fd8c6b2a3a324c257bc9110971b749ccd74089ed6b86f81ca3ba47d8f71d290ed1b1a11f7a67125170c88c3b6a50692cc0064fc6bbd312536ac15016c85c6332226401b110da9c786eeca22debc99335587b54c13c3107008fa069af8223b38ced735c2d906551004d8dc10d88738488da01ffa4add56474573c964a270000f2f16625c0c10200000000c7a5ca60fdad159f2e44171f39638410020000004825d081f2d987f05c534187738655d7dc958f2046fa0c1619a6554b82d9c162eb61ca74f1ffdaccf0ea5f06e0fca8b27ff3983ab74fd3d560700a1fab44e77e312b3b129e000302d613916c9bcf9f0000fac73a5b6bfb27f88dba816020be760f7b45e001efada8000000000000fdaf4660402f7b3b79a433e08074ea2462974a00040000eb01352638f56dae0249d15ba8767259658878b7492cfbacde9b57cf4de00788adce638190f3570e0b4c80ef682df22201270955afb6008846557ee3bc09fda6dbb6550d597300eb82a184c96ffde5a30e5433e866665b98ca2002c804c22ff2634b7bfbf5c0d586cda5b45fd00dede1e88a4d41dee7cc76d7a23d06acb1d2d4c58faea84158bb440df2a694f4cdcaa4f65c22efffffffffffdd00000000d503d79986958115ae07b70f991430b7fb475d77b869ee02000000000000000000001ffff0ef89b2a68d2b05c995445d8a7700bcdfbec74fb2dd163e863315e84498dfb52bb93f6c9084659ce777ddac563c8596c2b1d8180289a61faa95a82bf1cfb7f2fd7252e9322abe282c33445d443a67467893b9bf0d1c8130ae6b226900000635376413c29f7c6f7b7e29b9a0c64e68328661f0c06e21f7d7dc22174ea4447a6f60edef3a4168d40200fbc71104512efe8e5d7d934aa289b4bd2b870000000000000000000007000000002000000000009b777883a02f0593dfc4cb4114b9f9cf4ad155110cc6ace2b322ac31bfa27847c799c8009a1ea5b98e525e6383ad7fd9795170e7b11e247603c2ff49a11459c7f606d729d3979676bffb3049166bb84a0f061991bd57c2566c10c282352aba05b6164ef876915a3f2491e4793e590dcc71de10da96366c1e992c0068c940dd4422c9882d3aa0f8a797b8fea6efcfb5276b7679f15559edaa977504cc0b2f777acb907ebf5fc14add71d0bca37405ded69b77ab4a3d7487fd04000000de17e1e13b93669b79556abb722d9c085b189b5fd1f30e8dc813f608830b110001732135e8e7262f290000923bfb6b41ff3792cee2fc37eee739c3e36a4bc80112968ec0d8902eced1fe552018014a463abbbf7ccd6a92a5734e3ebfca9b6e88e031f31de2183652e77c164c646a1cfd3710aa4205d8d4d4f974133ccb1e49feb42664eccd809c0ba8917eda87489e8946d5c8156197bcb66fd5606c63e3389ee9e8552381646365066ef9a36a449c96485c22ad1aa423b7b89efbc6cd54000bb0ea5f4f1e8773144fb6ac9a44d43593d77e66aa7ed7f3d4e7b211590c738888d02b2dbb0b2ba73ec72e1d8d7360a128499dd19e1e7b9b0671f4f58515b45ecb9964f3c4ddb8234391d514f8d996d8d6dd7f8fadfee2d7a0035638ce27c2936cb04b30a0eb0cde0000000000000040000000ec3c12ecee8fc3a40000000000000000e215b00ce2570b930723cbadb4033d1b8aaa2cfb3fb89e4a6e89737fd6232218a9e0c099d1eb59d60b3cca089785642f327139bc4394fb6d547a9b3c22599e780c1da7433fb47615d372e3fffe9703e37d5c87d513165278650738efcc04d27b766cf7f60066edd292f6c8a2174f391ed164bb1816819ceb3e378e776d422bc946cd9501accebeac3a5b31d8abc68ae537cd44a04e6bc21c35a7beab2610c51e593676bf635a20f597f4631b91454d182f826071f5210bd6d93173589929b23801e63c2266fde13b5a04b8d48be057c752bc415a756ea9b4d34156c4f73dd5e5924ef101a5fcdaf37c7ba2c4a9de9b000000000000000000000000000000a73b862e4b63c245616b522345587d0ee65a6902bdd0abd941e8aba37510b222ae544f395edd1b92ad53fc68f08ea00edc5e10d768836169dd296d56b306e8b75778c37571792a6c3d8b02ef378ebd59422cdd008bef6f80a80a68641ea5ed4f1126bb676098c10bf663eb3fb8c839364d28fd046dc64b35f9c3397ce6f4ad357b0000000000090000000088c7a8e2638f650a6f04a6f33a090f59414d6ebcbc687e66d600000000bd0a58ea6d36fc2cf9b9a71c137a2a22adb1006f371d4faf47285fd66fe0389afb96854bb360edcdf11b4ff6dd578bba93e949d240cde9b5836cb46032484dc19c93db7b6e5afa10547c78e76a3111557346e52566df196fd630561bb908fff4d2e19562aabd43742a26a43799f8636fa04ceb40c9e4ca1cfbbc7b949cd245a3ee118fd0d4f639444539af8766028d4ac4d4c548e290199e0dacbb4f6796b39bf32934d941ba2f88e3ebd0cf8e24f99eca86e4ca9b2cd2b54044a7fc4631572a6378a32df288785f146275c1f548e2a0c1016744e05f9de5044373d7650125027547eefe7b2d8c8871bb65395fae99d8456883705bfdfb00001854b2e5efa8aaf25827d659f592b1575281ec125de7fb91cd81d91dcb19f5cdf1e1e2b4a8a1389753a09110538689e38e07fb2dc72bd4fd11d7bc16aac5d85c6101bb722895248e463a5fb45ce0e564e90cb19d5993b471687ae4165e29cf2f58082115f5f8569896eedfd798733223e6d6584997510c374912ab798bd4af4654c01bb2c411bc36468ddd62b4eba5cfc8953526e0e5b1359797956152d0098ce47c62c3fe5a23219389622b7f65bf03527d25c3941b9cf1ffeedf6d99082bb57ea871c12213cc40900f83033bc18c529171fae324c315bc6ce358831d0230412212acfd5fc8d5cb0d028cf568e8bb40e27befe2ff01f7c6674a4d86d900633ea36641e0a781ea0ea7f2d928b8b22e2f97dd13348927375baea6863bef4acf4299096ada5cdd2a0eaafaa760a79d102d1e0c0000000000000000007926653b8d79ce16a432f124786a0bc3c5b7d196822492ae1ccf91aeac16406ad6f9cd3d96d57fceba8360ae49f73351814c9c2972f11064aaf3739d9100f9c0e4d0cb17d50c82e305ba7d62cf1cc6da26e34982a8c74dd8122cf5b5e7c34fd2712a0cef05e4d8ec7dd363219676bd9b19943185b132eb35a695e208dfa5cecdb1d6425c8879063c0f11bd64291a4209ee6dc1d9e9010013f6148c603e6a335e298efd6ab5cccc47a2c568c6afec54f8251bd840752addf200371361c9eedf05ed98585cf6d99e9e56055064bda2d373369761238c278147cd0eb7799f6b9c9fcaa3fd282154994f5b25420c86db9b6401e885de1c615a719a1c83e8fbbb181282dbaf3313a4e4a4877e9f37607e2cd6da0cf6371ec06a75f5a4206b2418ad8897ae149085d63f01f22eca44033234b3930b4d5da756669a1d59d69e7de54abf439988ed7ec33c2d0a901bb0985a24878984d8a4340fa9a356d100926fb5f2ef9976366a61b8cc2bcb1c072b0e9c564852388e1edff10d75b3832792e471cc15b40380f94d834243080158603fbc9134d6983c540525447478984611c0d9666941bfc0a30db47a8828b6e5c51aee2094599b4ce52795750e1764f1657ca8c5633c71287239dddf5c651496f7bbd148c937f083d2e4e0197dbc6ff0649c749707b17399b1d7efad23abb8b40b38704737e15662ae4913a4a001cd3b71c7af75b5ffad9780650c800a40ca80ddc41987919142fd28dbf22db5f4c435415a03455e1d55d1783ccef97d7e4655cf839d06f06e137bbe462a03b3100231914b19739dd57b4f12d026ad0c7fd3"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95, 0x10, 0x0, 0xffffffffffffff0f}, 0x48) r3 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000180)={r1, r2}) write(r3, &(0x7f00000027c0)="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", 0x2cc) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000001380)={0xffffffffffffffff}) syz_genetlink_get_family_id$devlink(&(0x7f0000000280), r4) r5 = socket(0x10, 0x3, 0x0) sendto$inet6(r5, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020506050e020409430009003f000c200a0003000d0085a168d0bf46d32345653600648d0a00120081000a0000005ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160012000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) unshare(0x6a040000) sendmsg$nl_route_sched(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000980)=@newtclass={0x24, 0x28, 0x4, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0xa}, {0x5, 0xa}, {0xe, 0xffe0}}}, 0xfdef}, 0x1, 0x0, 0x0, 0x40d1}, 0x40d8) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xcb, 0x0, 0x15) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000032100000000000000000000006112a400010000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) 10m38.00945595s ago: executing program 32 (id=6580): r0 = socket(0xa, 0x3, 0x3a) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000001600)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95, 0x10, 0x0, 0xffffffffffffff0f}, 0x48) r3 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000180)={r1, r2}) write(r3, &(0x7f00000027c0)="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", 0x2cc) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000001380)={0xffffffffffffffff}) syz_genetlink_get_family_id$devlink(&(0x7f0000000280), r4) r5 = socket(0x10, 0x3, 0x0) sendto$inet6(r5, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020506050e020409430009003f000c200a0003000d0085a168d0bf46d32345653600648d0a00120081000a0000005ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160012000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) unshare(0x6a040000) sendmsg$nl_route_sched(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000980)=@newtclass={0x24, 0x28, 0x4, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0xa}, {0x5, 0xa}, {0xe, 0xffe0}}}, 0xfdef}, 0x1, 0x0, 0x0, 0x40d1}, 0x40d8) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xcb, 0x0, 0x15) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000032100000000000000000000006112a400010000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) 15.73126138s ago: executing program 3 (id=10296): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (rerun: 32) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010028bd7000070000000200000008000100", @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) write$nci(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="414601", @ANYRES8=r6], 0x4) (async) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r9, 0x1, 0x10, &(0x7f0000000100)=0xffff, 0x4) (async) shutdown(r8, 0x1) (async) setsockopt$sock_int(r9, 0x1, 0x22, &(0x7f0000000040)=0x7, 0x4) (async) recvmmsg(r9, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/27, 0x1b}, 0x3}], 0x1, 0x2222, 0x0) (async) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000005c0)={0x3c, r7, 0x1, 0x0, 0x0, {0x49}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73}}}]}, 0x3c}}, 0x0) 15.439332389s ago: executing program 3 (id=10299): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x1a6cc7, 0x2b8, 0x0, 0x5802, 0x294, 0x0, 0x294, 0x1e8, 0x378, 0x378, 0x1e8, 0x378, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xc8, 0x52020000}, @unspec=@TRACE={0x20}}, {{@ipv6={@mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [0x0, 0x0, 0x0, 0xffffff], 'ip6erspan0\x00', 'wg0\x00', {0xff}, {}, 0x6c, 0x81, 0x5, 0x1}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x3}}, @common=@mh={{0x28}, {"7aa2", 0x1}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x0, 0x6}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x318) 15.093093906s ago: executing program 3 (id=10302): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000880)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1b00000000000000", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB="e8b93c6e80676120b3c8e24661c295dfe456197ade81e362e641bc8862c193ca8e42c3dbac2f80b799d706dbe19d18c124", @ANYRES64=0x0], 0x20) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1d, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005100000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000c100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lsm, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x30, 0x1412, 0x1, 0x70bd28, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1000000}]}, 0x30}, 0x1, 0x0, 0x0, 0x14}, 0x20000000) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x6, 0x4, 0x1001, 0x2}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r7, &(0x7f0000000180), &(0x7f00000009c0)=""/182}, 0x20) sendmsg$NL80211_CMD_SET_INTERFACE(r2, 0x0, 0x0) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="20010000", @ANYRES16=r3, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32=r5, @ANYBLOB="47000e00800000000802110000000802110000015050505050500000000000000000000064000000000602020202020204060000000000000602000025030034003c040106b80400080026006c09000308000c006400000008000d0000000000a2000f"], 0x120}, 0x1, 0x0, 0x0, 0x90}, 0x0) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042bbd7000fddbdf250f00000005002d00000000000500350003000000050037000100000008003b000100000005002d0001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4000040}, 0x8889c) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r10, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="ef7927bd7000fcdbdf2522000000180001801400020064756d6d79300000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20000848}, 0x4000010) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x3, 0x13, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020200008500000072000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r12, 0xfca804a0, 0xe, 0x0, &(0x7f0000000000)="17724b568c149730350c352f658c", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) recvmsg(r8, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r9, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fbdbdf25270000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) accept4(r9, &(0x7f0000000380)=@rc={0x1f, @none}, &(0x7f0000000800)=0x80, 0x80000) sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000680)={0x170, r13, 0x400, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x6, 0x79}}}}, [@NL80211_ATTR_IE={0x18, 0x2a, [@channel_switch={0x25, 0x3, {0x1, 0xc, 0x2}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x9, 0xa1, 0x1}}, @supported_rates={0x1, 0x7, [{0x2, 0x1}, {0xc, 0x1}, {0xb}, {0x48, 0x1}, {0x36, 0x1}, {0x18}, {0x16, 0x1}]}]}, @NL80211_ATTR_IE={0x126, 0x2a, [@tim={0x5, 0x44, {0x7f, 0x2c, 0x9, "31533d3e294b195d174d9535c78ac08c2467898be782b69cbca811aee6e0a501c8b6e449cb913c57e88748bde64d307f8eb4e4faaa8e7a6d5ef8f2e2c64296f2d6"}}, @random_vendor={0xdd, 0xa7, "c3ff53fd3da157a9d5fa8351996961da9ecbb9a1886f973c654527229d9f67d8634036386ef9f3371b8ecfb2525faa3944d7b88f350da97db97c266a6f76be3fd8d5e000cf3987508751146f40a216661400d8e455bf5318e6a6b5fc8ba3e2029873c682a836a52731c762b1513d4be09202b07c6b3fa1b3add9af398a09424a2fde9afe8bb4836d0ab41752bf7bc95f4d9611e1b3bbff1117ba73ad677c3c19c4cf51ff110ef0"}, @prep={0x83, 0x1f, {{}, 0xa5, 0x4, @device_b, 0x2, @void, 0x10, 0x4, @device_a, 0x8000}}, @chsw_timing={0x68, 0x4, {0x0, 0x6}}, @challenge={0x10, 0x1, 0x55}, @mesh_config={0x71, 0x7, {0x0, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x8}}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0xc, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x7fffffff}]}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}]}, 0x170}, 0x1, 0x0, 0x0, 0x44800}, 0x4000000) 13.595214835s ago: executing program 3 (id=10311): r0 = socket$inet6(0xa, 0x3, 0x2) bind$inet6(r0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r2 = socket$kcm(0x10, 0x2, 0x10) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f00000006c0)={{0x0, 0xffffffffffffff8b, 0xa27, 0x6, 0x32, 0xfffffffffffffffc, 0x568, 0x1, 0x0, 0x80, 0x1, 0x3, 0x3ff, 0x0, 0x6}}) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f00000016c0)={{r3, 0x7ffffffc, 0x8000000000000000, 0x6, 0x4, 0xdfd, 0x80, 0x7, 0x2, 0x1, 0xfffffccd, 0x8000000000000001, 0x82, 0x6015, 0x800000000007}}) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1400000017000b63d25a80648c2594f90fa3c92b", 0x14}], 0x1}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x700, 0x2}, 0x50) r6 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r5, 0xf503, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r6, 0x0, 0x60, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r8, &(0x7f0000000080)={&(0x7f0000001340)=@hci={0x1f, 0xa888, 0x31}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000040)="b8b2821400000081000000", 0xb}, {&(0x7f00000002c0)="0d1d88fb", 0x4}], 0x2}, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r7, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB='IS\x00\x00\x00\x00\x00\x00\x00\x00g\x00\x00\x00', @ANYBLOB="0c000392db2fafa46fe200e1070042"], 0x30}}, 0x0) 13.249841165s ago: executing program 3 (id=10315): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r0 = socket(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r0, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000b4bffc)=0x8, 0x4) write(r0, &(0x7f0000000000)='\"', 0x1) recvmmsg(r0, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x8000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r3) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r3) sendmsg$NL802154_CMD_NEW_INTERFACE(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000eeff110000000a0004007778616e3300000008001500", @ANYRES32, @ANYBLOB="080001"], 0x30}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) (async) socket(0x10, 0x3, 0x0) (async) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) (async) write(r0, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) (async) connect$netlink(r0, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1}, 0xc) (async) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000b4bffc)=0x8, 0x4) (async) write(r0, &(0x7f0000000000)='\"', 0x1) (async) recvmmsg(r0, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0) (async) socket(0x10, 0x803, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r2, 0x0, 0x8000) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NFC_CMD_GET_TARGET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r3) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r3) (async) sendmsg$NL802154_CMD_NEW_INTERFACE(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000eeff110000000a0004007778616e3300000008001500", @ANYRES32, @ANYBLOB="080001"], 0x30}}, 0x0) (async) 8.558158852s ago: executing program 2 (id=10353): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000034c0)={0x24, 0x3e, 0x107, 0x3, 0x0, {0x2, 0x7c}, [@nested={0x10, 0x3, 0x0, 0x1, [@typed={0xc, 0x8, 0x0, 0x0, @u64=0x1000}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 8.251090199s ago: executing program 2 (id=10356): r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="670d3a24eed610f627c3091f69f3cc72c14322d4492b33acca3fd0fd82ac559a2f08a678d7819ed02caa2a89c0c699cd1d567beff235178120f6c8b376f463dbeb9508bb2cff88b9e9aca60b62d2eb78a536295ee975cd3b1fb21405c975f56630d99ea74468cb12a2f2c8941e598f0e091b885ef86cc45e74be71e9fa654fa1dd1278f7f21c54bf836c10a08562e078615e33688f4af9d91f2d86e79492f93d631734bb82183d0698acf313007c669308a18d723a2119af4d7956f9", 0xbc) syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000100)={r0}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x26}}, @in6={0xa, 0x4e20, 0x2, @private2, 0x3}, @in6={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00', 0x8}, @in={0x2, 0x4e20, @local}, @in={0x2, 0x4e23, @empty}, @in6={0xa, 0x4e23, 0x800, @private2, 0x2}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x94) ioctl$sock_x25_SIOCADDRT(r1, 0x890b, &(0x7f0000000200)={@null, 0xf, 'veth1_vlan\x00'}) r2 = socket(0x2b, 0x5, 0x80000001) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x28, 0x0, 0x200, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x90}, 0x44000) getsockopt(r0, 0x8, 0x6, &(0x7f0000000440)=""/52, &(0x7f0000000480)=0x34) epoll_create1(0x80000) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup/syz0\x00', 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000500)='memory.numa_stat\x00', 0x0, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_LIST(r6, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x38, r7, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x9081) sendmsg$NL80211_CMD_STOP_AP(r2, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x28, 0x0, 0x8, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x0, 0x6e}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040091) r8 = gettid() sendmsg$nl_generic(r1, &(0x7f0000001b40)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001b00)={&(0x7f00000007c0)={0x1330, 0x38, 0x400, 0x70bd29, 0x25dfdbfd, {0x8}, [@generic="3b6ad44d19afa14734534db02667af87b4927adabfb3c952dfdae9388362986d54b67ae3a2d112f621c3b8ed16d3eb6fe5f77538b83e10cd3a11715fc81f4c28e9eb035807a9596feba809fddd874e481ebd6d6b73b141cbb8e6a0f7e698c9dff4262f7324ccb6d9bb2a42bead278370a25f894563a71592beb830b4002bc75718f0f8b232b860d5de6252b8179eec2b0f721a01", @typed={0xc, 0xa2, 0x0, 0x0, @u64=0x6}, @generic="9a83bffb4661320bc6a4f230879fbedc0862d6bb1c3316ba48ffb1f72f09d333048c458d515d35a9a6c75bc1ecefd1119e054d82b7c33a547e0703b8fdafa75874452a28d684306754b1c0a6f66e1c7503d289243c1d10e5b14e316e5f9f314bed0de9bec46c6412b4a4ead40053913321fd1a0cfd42ea1fd268cc857e35838e844fb9f00eb64d97bc580300ff2220686484c7afbfe8310770a9985e62834448e73cc8920e5a7051365a4d61b60b437b79c758d6f3bd75cc417f01911b3aec5a4bfb5c37d8bde191c8388abb506d6f7853b6522b55d301e11a", @nested={0x24, 0xda, 0x0, 0x1, [@typed={0x8, 0xf0, 0x0, 0x0, @str='\x95\']\x00'}, @typed={0x8, 0xaf, 0x0, 0x0, @u32=0x9}, @typed={0x8, 0xcb, 0x0, 0x0, @pid=r8}, @typed={0x8, 0x11f, 0x0, 0x0, @ipv4=@rand_addr=0x64010101}]}, @nested={0x1179, 0x128, 0x0, 0x1, [@generic="e76dd8e4a3c21dd7e1f9de095b14960fb05610964cb4e800b9fc81f6b6479fdb590e556cb269c90def6fb1342728ad0ce4b43956726a20e5f73109b423a3", @generic="65acfed2b30b93cd086219d8ed5d08db3055bf1795003f516ceaa13118b1ed0793cbf2e1577a87bd2954c3176358337cd6b2e571c422aed0bae5c2ad1ba68719242554f6127c6bdbedb6ac2bd5466f5b1f79fe1dee049ff33f826e757a0a196ca7ec51ffbb2abdbda9c0ef80accdb9b4dd69204a4da91ad6533d3c80504e6c37489b7458b92bc30ae385cace0ae6c25990adda1960537ebab9993404ec94298d11851869dab99499d08230a32dc6f746100e962407a7f1fbe872e572c8e9e3b3118fef4ddaa65e68bfc53b12802085b2139de207b3fe9840bb9362c8575af742bc1db5887d3b88be9605e4cd7164d2f11357551da998d2e122743d7ab5790a428e5b01b1335610b609cf0e02a55aabf71be3b3028ab1ba3b257da74400c4e23842840780bd8b6e5bc670bd2a5654cffeed441a234fb719b9081761add527c5988f8b57d045c5764003dce2ddba19e87138f78d217c90b1ef697205661be3fdbdf3dbd2021dee27bf5ba306352539f34b731895e95d1dae020691fcb713ba272a0514c36eab04b45e51cc059557430be1048a1b75ead465af652f802705e3a4a4ea59e565d4b0c1ee320d50873041682b6f2c49cdeedf2344bb151e8cfe1884133e71713ce6d651d6c87d1a2ae022aa30df4b8baca571d8a266d5e982def21868ad38d7071248eb7b9b0455b3333744faea8398e5d7b363f55c7a7a7a10b749192f1f6f045c72c8e3f0b6dad5a551ecae06ccc38d0f700ff070931817e9e34218d0ff8675206192b3192ed9bbda10753949d9d1bb68bd456bdcbd2605c931aedd535af683ec5da6896b3d3e895ae10c79d2e5fec1f02bbca749b8ff85c577e04d1d37c9412c0f5eba51824af3c424be2e13b2f267025c3f94a9fdd51fe71241871666f9ed64e5dad856c9a85f104637fedceb8687905ad46f43147a213bde5d300659812df156af5366115a566d753ec41ee976d46a73a30070a082cb924aad0f17c02b04f8ac9dcd04ab96cb59b7cd617d5ebcbee501aca41305fe6a784d5af3cc53a444d7687bbc2731a3f469a14ca9168851375b9103a415d00942485dc4557f03ec729e6b4c34788c1da84008fe5927c64476ac4e6eb155d628a2bf8804fe3df51a9d346ed8cfb5aca598376e9655b5b2063a73b8a24e477bf73015d2523256fe614ff7f17cdc70c08a98699c22c235a977a01cbf3ec9fda9b7f40364249ad5d397321701e2c67758baa5e0706ffb31d13a53f2e64a8438f8c64bb7a65c01b31a32b0f371b8060567272b74b6102fcb318a48a57d9fe3efb8777e86d5dfc68a33bbcc4d069bd74c25f2343a24509528947afdbea34619c56b7876396b3331a0f0ec93c29133ffa477d6a70586952127adaa8922a6afa35e0063a98681e2d27640cd68c39a5ffe70199b56ad842e5f7de7c98e193c18e0eba858a9d70d463702fbed25e71c7f35b266573983b0893481c9d1db52c2af074a97181bc1c51c3ccb98022a4cfd24362f700009c56ab9e349c9a2bf0e0c113fa49f2f848b50d7438d8dba18825e333d529c2f2b6759cc3db5eee438025ae7d856eb3b9b50b2b552e1a4add413e5a32f7fd87e5c45f0132a679861a6a327f153598f6fa48922883ffab7465ab5859a64b311b4a05c2ddfa6da84d69b6e39dd95c32b6cf15c22946489c2b477a64b070a212d42d160924fb1ac88f5acf709aee4904cabb7ac1a726ecdf1d5a60d1c5e989b105e3c9bf89946e49358eff00226ddfc7997bdba460dac88209b0e6ffd7e066d076074efbd80bfbdfcc85dc3980aa213ea3ad7340ab535b8fe15bae5c9907ef246fec61e15d1642078cf57998b1cf0d63431ea8431c0a0f5adcec988ef90b4b3e06272d38e26999b8757e82cf9a2383b2dda7956205d8537ed0e7a2889c8387048939826d7f9eeccdec415aa8503490e5bdf78892caf4c41a26183a34e8f5f6574937ca44e0bdd18251b5a228196f905a77a3de54aee511f823695157bf6a700ff28a7121f783ef201f2b91357d3e1e0aa41c972ae5f36a53cd4cd8dea154e564ec4d58d7fe4ca0d0062d136e41505b4d9224536842d258543bb0caddad0263d4af18b271b15a33f0745c88d58a09691625c16e2f7fa4c6117434c61a8092b4424a40b74ca76d8dd1269408c0ee16dbfe485e64acf840af379c815645e6f57c8051f74fb85a0ddc933fcd35e2be256e96abc3832524772550d0c92e9cd8bc068acdc37701953e74e9f37f06f3892eeb41689e8f3b6619cd969ef1b828cf81252d78387fd847fdb6d007c28b7406ab4e1c9f26aa56c0efbe9b904ac3129bbb5af6695622812603115127eb3465356d9f77d905441c08bd6761a50685847b7c56905b140a89e2d381ac24144a226bb9b462f83b3f7ea6306cbac1a75184795257e10d5a8233fec14248975d62874c36c3991ea158743d1c56ebbd475b6d91394dd3236683649ae95bde6e95e349f2d29b6acee7baeb05b105b8562fa4d27bc53a74503b843c29ed5d137b3b1853e3dcc57b016012d082fff9a92890f8b9418029b01b5e6799a813093e825c01f124300a373bccb8f6df36ecf9eda09f0bcc37e6748a65731cb982c05aefcfc950faa8839ff6a967d7dc5db08e9aea6edee3e00f6158a79a674761f99a1c6b3b38d2f0bfd8caeb892b3b937da82ba61f147bf5cfadf90108077d12f74b9109e384d1a91eae1501994e8b255dfe3db06a2d60709b959f064e26859275ecd027d61fa7ff3f3437f076005236525293c6ace6a5f2ce4d9c7a98bf0d82fe590c2c4fa1b90a3815d885ed4d38b2db7860c1924b7d328e1cd0e8e639320e9eb8a15f7f74cd3193c58701bb2259ace17f47cffda2a462d28de53019a26ef4e124d3f755120099dfde80e7667a2f84311a504409c9b8d931b1c85a48011d33c00fd63bff4a199cddbbe47eb6aa7bf06744ef5d39aef39804a95fee4e7a511337515676761905254e0c35e894f2b18f94448fa5da59e3beeadde0bde61f456a3ed72293bb4ce5bfde47cfbd5482b7e699862b62b1123e4f7111c01aa3d3291836bd656188dd39da8c6b717c262c8e9273c814bfa6cc30e833ec618c132e8d001f516d44b3e35c5bc204242e41b440532904ee885095a0dd1ca76cb7c8bdfe09165a151f3ab381f40f6d6446d169aecc2e8ea3cf3eeb6d1400a16c0b1703504a0403539536c7b90cba672214f4eef6a96043cf26d3eaf113c1fed9818b9e05db59059381e2596c68c5cac924aecfe2cbbfa2cc258bde64687add39032b553b71dcc867b2cb46007c62505310de751d741f7d5731999083676ff11267d35193d7ded5ead2972c818ef2c3910ad9442b66cb9d80fb48f1ee4f99ae47ca24bee01e931f8fa809ce26a929ec3e038e790f3f1357681b5cfcdd1f7ff9a62756fc95c1152bd22d53e5423886acee8911731a1602245df46d4515204f16d0f488dfbf5eed5397de009164b4883a95d963ff8c4d9eaa4bcc1397d36bbd1abbce95891639ed457019b1338660a5e792f5e304517ba132003423a6a94192086e7c5e4e7ca617bf98874410947bb215a2f549a238be4841b3cdc2974844a2496d604b7a816c96406b95467bda204809ef4f91edd4582decdc3078984c2ab6624561d3bc52d114bbcf0bd744d8ac7e43631650540816ea3d9a0a0e38889e994339494a1083bc3cc0dcc6a656c2173cf702cd8a2cfe75471695d8754b8f541ce803babd38390c8baf84e61d599bbe2e1a95ae3454431128f3538971c297686ae2368604abacdf3ef98367556689aacb54686cc1d2ed0d0604791bdc477d56d1d69b2cf362964167589ad41d727a633c750f65f74a6f53937d096227e4404f9278e88be8a959cb24b14df7190957b1a37cd800415d6fbfb008b8212bff72f772760236d91c1c982916a399016d8125bd137484a8ece0e06e2c6f3f4384f8c86813a1c623d6a2481fa58677a12ee30a58d677bf249bddba7174d8cc3ae748f6d7b4c1b80d9ff6faa242fc06e40a8c4b881ab916cb8288716fb88b0de73458e94dea4e7a29a0ae1c1a3dc2c0c1b74542f5bb683e2840b9e3f00be7a0a1a77a940606889e6b9ff8478aeaa88821d1b4552ed60cb27a9003e8bf47c510b481b2069b572db1037fc61fe990a62edf723f09c8bdf3150b222fcc5c962b1cf7d8ddf9abedbc3bbe65aabbe2e0d700385dd6701a72e164611ec951def853e3c60bb20401744f2424d758f263132513205e9d7a2bd07c76f4f7d87d129cccaae3e628c7ab59a43efce71e84db92360c067e27f9a450ff13b9f3222ebc771b00ee269dc04c8e080d64583bde44060a7fd0b8498102fdfd05b5b01430f25b71aa1f848aa02514951d383ac5baffe18e99ffb157feee7abaa4bc6f0ba82ca2772fbd9d5c2e43f69707654828a031084fcf1e7bb01afef0ef981c526ee66dddfb95681a0be78c632bb3a8a9ad40246b912e2c8bd7c29df5561a7c4fe82624671b11106e0c6ab76447e06edd7128948e539c559d2e304a0e7d7e151b96b04d739ab4676800d84cf1f74d258ede6c8d295cd173c9f00ae0aeab4668bcdae1d288c95c5bb7b1e3582e2d9eac9a2b44f163de713d51b9d01e9722737877e881e5b6aca6d5b7c6f86c62567122a1c71766a5f422017d90e42c13b66601e9f4249944ae125383c4f9d04f8df27640348977574b28735889ca454bf3ff57c3bbdf5b5d78225420f7dbf9fb79d5af1f8b38e240428aa377463e2cfd14e66aa7ea85c3a812ba8972b8ca74e0a193b0d90734bec03b889d3eb30931c88b3fe4563896cc904793541744183e90b7136eceaa7e9be455acb45b1464be0412404f76542ec50d27cc157582bf775fad63aa733a9a69206e0f2bacb99485608b0362f75ed0e12f8c4ad0ae767c2a9878972eb337a0fe10446c7bacab0683a5202f8def72ce6874da0e78ee6df611694d16d660f465cc7b00eb3e001ce0c964d0a83eb082da9cc67492f2ff6855374c5835f34e87c2229be58c1914c18fb65f876193527e23ad91c2fc0aef673cc1e84f74dbac95d7157054d67039f3ef7cb1b3ef113f921381db3b1124255c9b4e847028d6b0c61ef27060a880f1ab23ac66627edd878c9dd5beeb3670dc4ef187c12c11cd892cc617f9b42928a16c6d2b73f45b86d2f7b3bbd9d119af2aff0f9749d5ff9820247c9cc710185b9d9847162ba67cd3830facca0d8e75314efb397953115a8b053154004397278d6d74612a31f459d2b61b674ce0502b9c77cb0d8b1c77e05b8b978fd920feaac690c9756d0a3094f98da9957ef9b5bc7687943779af68d8d93b2fa72a09a2f68a50a0fbeb7783c956ce8728cce79c11594a6ac45511454f75afd92768e052ca20213fb253a4ba6d518a0ed545cd504cf429ed0e81bdacace061bf0b4d0a7336c5faea47eb7d2eb821b69e685fdedca09e222d5c0d9a5050893c849377505c6872ee057b326107e890bf32bbd5af17466047fa079602d7951094aef343c9e0fca401b06b053e372dfbb1bdc61ac61c17acfdab4caca9667a9bcb6c7f1b06f2447238e5444b8b493db343ff8fda04f96449437982328ff1458c5ecbf1ed1c9831ec877d18368e398bf2758b04fc230e109a4637e941cbc5b532d9eada378868ed5a5f810cd6165c6c468412542010c442c20aa8f816242d9f53940c3579d4a67a079aec523b9befa85f3d59f4a451d5b87c0d00285b98eb2e3c9168f0593af6b7ce12dee034d024b836c480ba46f52b3378a6ad5a4adc4be920892afce58a39cbf9af3060b3b1ed2a8c5330277", @generic="c2523f10bb128940519261c6ae350ca0aa0ab12f6b0de329f010c171159fbe34f67eb433cb78aa6fb3718815557bb2b305b21c7b0671d647ae79ec85c9506c5ebdc0b3e824354a302da9198c3366fac8c41a0dd180e509877ba3ddeee4a46182679ced433c8bbb41fee8962e2004aad7a65e47725f8a4fecedd18fc91a0d843090e3b78f4e952a007052f3ba2feb04", @generic="6a3635d46175c882a9da6a408921818595f1856ac05e48c6b00bf2b30391fe05", @nested={0x4, 0x1b}, @generic="9d7b902d455b55ce66abd90816a383b795315e07e2a6a5ff2cde457f8a5d0a956932f89106a0cbcc07033ce4459db359fe1c4321c0a648b613576ca1ea9e6ab46b0439dd6aa001c8ab665bbfa6a21131d834cd62fec7334f1fad3905ee9527f7213551b7f6808061db83eda337001bcc61370979da6e171e7f88535fdc722a8082f6a382"]}]}, 0x1330}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000010) mmap$xdp(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000000, 0x8010, r1, 0x100000000) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000001b80)={0x2, [0x0, 0x0]}, &(0x7f0000001bc0)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000001c40)={r9, 0x2c, &(0x7f0000001c00)=[@in6={0xa, 0x4e20, 0x35, @mcast2, 0x4}, @in={0x2, 0x4e21, @local}]}, &(0x7f0000001c80)=0x10) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r10, &(0x7f0000001d80)={&(0x7f0000001cc0), 0xc, &(0x7f0000001d40)={&(0x7f0000001d00)={0x24, 0x3, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x6}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x8}]}, 0x24}}, 0x40) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000001dc0)={0x0, @in6={{0xa, 0x4e21, 0xffffffff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}}, 0x3, 0x8, 0xffffc4bd, 0x3}, &(0x7f0000001e80)=0x98) setsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000001ec0)={r11, 0x1, 0x0, 0x38000, 0x1, 0x2}, 0x14) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000001f00)="0769cf3bc57dc2f8a10532aad4b21ae3bd8a147217da0f24940e9c2e6136b2d41861ba6159709a9f17551a0a53b6ae0f6c2e3fec5ccd6d32531665657afc842ab6dfb15619f0a66ea8fe5393de3df363c80060625e44851c82af46d83e5edf81beb943dd97d1e1a3cb127060d8c8d403575c638c051af0a51c8eca2864da571f5055da4a3bf68bc4e3c4deecf734d281a4952a0c864ce411f85957f1c6a727a7529e8da3559e16a0e6768cb682c478674d261617aec66c9569e0871089cf212d1197fb0051eb470c6285663e452c1e2905a198e9", 0xd4) sendmsg$rds(r1, &(0x7f00000020c0)={0x0, 0x0, &(0x7f0000002080)=[{&(0x7f0000002000)=""/68, 0x44}], 0x1, 0x0, 0x0, 0x91}, 0x4000000) getsockname$unix(r2, &(0x7f0000002100)=@abs, &(0x7f0000002180)=0x6e) recvmmsg(r1, &(0x7f00000070c0)=[{{0x0, 0x0, &(0x7f00000025c0)=[{&(0x7f00000021c0)=""/152, 0x98}, {&(0x7f0000002280)=""/70, 0x46}, {&(0x7f0000002300)=""/53, 0x35}, {&(0x7f0000002340)=""/251, 0xfb}, {&(0x7f0000002440)=""/67, 0x43}, {&(0x7f00000024c0)=""/130, 0x82}, {&(0x7f0000002580)=""/4, 0x4}], 0x7}, 0x7}, {{&(0x7f0000002640)=@nl=@unspec, 0x80, &(0x7f0000002a00)=[{&(0x7f00000026c0)=""/171, 0xab}, {&(0x7f0000002780)=""/21, 0x15}, {&(0x7f00000027c0)=""/189, 0xbd}, {&(0x7f0000002880)=""/170, 0xaa}, {&(0x7f0000002940)=""/152, 0x98}], 0x5, &(0x7f0000002a80)=""/42, 0x2a}, 0x1}, {{&(0x7f0000002ac0)=@phonet, 0x80, &(0x7f0000003bc0)=[{&(0x7f0000002b40)=""/4096, 0x1000}, {&(0x7f0000003b40)=""/125, 0x7d}], 0x2, &(0x7f0000003c00)=""/111, 0x6f}, 0x7fff}, {{&(0x7f0000003c80)=@nfc, 0x80, &(0x7f0000003f00)=[{&(0x7f0000003d00)=""/41, 0x29}, {&(0x7f0000003d40)=""/216, 0xd8}, {&(0x7f0000003e40)=""/172, 0xac}], 0x3, &(0x7f0000003f40)=""/30, 0x1e}, 0xfffffffc}, {{&(0x7f0000003f80)=@caif=@util, 0x80, &(0x7f0000005280)=[{&(0x7f0000004000)=""/205, 0xcd}, {&(0x7f0000004100)=""/36, 0x24}, {&(0x7f0000004140)=""/44, 0x2c}, {&(0x7f0000004180)=""/40, 0x28}, {&(0x7f00000041c0)=""/4096, 0x1000}, {&(0x7f00000051c0)=""/184, 0xb8}], 0x6, &(0x7f0000005300)=""/221, 0xdd}, 0xa}, {{&(0x7f0000005400)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f0000005500)=[{&(0x7f0000005480)=""/114, 0x72}], 0x1, &(0x7f0000005540)=""/51, 0x33}, 0x4704}, {{0x0, 0x0, &(0x7f0000006c80)=[{&(0x7f0000005580)=""/4096, 0x1000}, {&(0x7f0000006580)=""/117, 0x75}, {&(0x7f0000006600)=""/229, 0xe5}, {&(0x7f0000006700)=""/249, 0xf9}, {&(0x7f0000006800)=""/84, 0x54}, {&(0x7f0000006880)=""/243, 0xf3}, {&(0x7f0000006980)=""/179, 0xb3}, {&(0x7f0000006a40)=""/133, 0x85}, {&(0x7f0000006b00)=""/235, 0xeb}, {&(0x7f0000006c00)=""/79, 0x4f}], 0xa, &(0x7f0000006d40)=""/105, 0x69}, 0x4}, {{0x0, 0x0, &(0x7f0000006f80)=[{&(0x7f0000006dc0)=""/255, 0xff}, {&(0x7f0000006ec0)=""/53, 0x35}, {&(0x7f0000006f00)=""/96, 0x60}], 0x3, &(0x7f0000006fc0)=""/227, 0xe3}, 0xa}], 0x8, 0x40000021, 0x0) 7.939300088s ago: executing program 2 (id=10358): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x3, &(0x7f0000000040)=[{0xfff, 0x1, 0x86, 0x4be}, {0x2, 0x7, 0xb, 0xff}, {0x9, 0x81, 0x9, 0x4}]}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x20}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0xc000}, @IFLA_IPTUN_LINK={0x8, 0x1, r2}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x3}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 7.179354039s ago: executing program 2 (id=10366): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x9, 0x3032, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0xb) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$IP6T_SO_GET_ENTRIES(r3, 0x29, 0x41, &(0x7f0000000000)={'mangle\x00', 0x5, "f47e6aeb88"}, &(0x7f0000000100)=0x2d) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@delnexthop={0x18, 0x69, 0x10, 0x0, 0x25dfdbfe}, 0x18}}, 0x4000000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x4a}, 0x28) r4 = socket(0x10, 0x3, 0x0) r5 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r5, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@gettaction={0x14, 0x5a, 0xc6b747b6bf1c6b95, 0x0, 0x25dfdbfe}, 0x14}}, 0xc040) 7.059715338s ago: executing program 3 (id=10367): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) unshare(0x62040200) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e24, 0x80000000, @private0, 0x5023}}, [0x62804d17, 0x8, 0x1, 0xfaf, 0x7, 0x7, 0xc000000000000000, 0x83, 0x5, 0x8000, 0x8, 0x2, 0x10, 0x2, 0x100000001]}, &(0x7f0000000180)=0x100) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x96703023c714694c) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r3, 0x84, 0x5, &(0x7f0000000380)={r4, @in={{0x2, 0x4e22, @local}}}, 0x84) bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256\x00'}, 0x58) r5 = accept4(r2, 0x0, 0x0, 0x800) recvmmsg$unix(r5, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) 6.732101355s ago: executing program 2 (id=10369): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00000001c0)='syzkaller\x00'}, 0x80) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r0, r2, 0x25, 0x4, @val=@tcx={@void, @value=r0}}, 0x1c) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) getsockopt$netlink(r3, 0x10e, 0x4, 0x0, &(0x7f00000009c0)) (async) syz_emit_ethernet(0x4e, &(0x7f0000000980)={@local, @random="4a26292432ca", @void, {@ipv6={0x86dd, @tipc_packet={0xe, 0x6, "e0fef6", 0x18, 0x6, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, {[], @payload_conn={{{0x18, 0x0, 0x0, 0x0, 0x1, 0x6, 0x1, 0x2, 0x400, 0x0, 0x1, 0xe, 0x4, 0x0, 0x8, 0x600, 0x1, 0x4e20, 0x4e22}}}}}}}}, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xfff3}}}, 0x24}}, 0x0) 6.473296774s ago: executing program 0 (id=10371): syz_init_net_socket$netrom(0x6, 0x5, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x8}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, &(0x7f0000000440)) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={0x0, 0x2673876e}, &(0x7f0000000100)=0x8) 6.173392446s ago: executing program 0 (id=10373): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0xa, 0x3, 0x3a) socket$kcm(0x2, 0x3, 0x2) socket$kcm(0x2, 0x3, 0x2) r2 = socket$kcm(0x10, 0x2, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000280)=ANY=[@ANYBLOB="573cd2f8b489400fbb1c622cc36e17921d1340a4303e3818b5d37b67b7447ba1d0bb28f72ddb6df98e1316ab28eb682b9d39d92a653440f93134f00606eb8e42b97fa305b3ed7fcb0e993bd8522833dce486c5c8f56164e2da43fc6380bd59234a9c0d2de08945b569854f14574119"], &(0x7f0000000000)='GPL\x00', 0xb, 0x0, 0x0, 0x41000, 0x13}, 0x94) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)="4c000000150097f07059ae08060c040002ff0f0300000000000001870182fa73a69d35a2cca8a308f7abca1b4e7d06a6bd7c493872f7d0375ed08a56041f000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x2c, 0x0, &(0x7f0000000300)) ioctl$SIOCGETSGCNT(r1, 0x89e1, &(0x7f0000000000)={@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x40040000}, 0x4004) getsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000000c0), &(0x7f0000000240)=0x8) 5.933788803s ago: executing program 0 (id=10375): socket$inet_sctp(0x2, 0x5, 0x84) (async) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x2, [0x0, 0x0]}, &(0x7f0000000040)=0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv4_newroute={0x3c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0x18, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_SRC={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @empty}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x44) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_LEAVE_IBSS(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x14, r3, 0x400, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x2000000}, 0x20008001) 5.909899508s ago: executing program 1 (id=10376): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000034c0)={0x28, 0x3e, 0x107, 0x3, 0x0, {0x2, 0x7c}, [@nested={0x4, 0x142}, @nested={0x10, 0x3, 0x0, 0x1, [@typed={0xc, 0x8, 0x0, 0x0, @u64=0x1000}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (fail_nth: 1) 5.555604215s ago: executing program 0 (id=10377): unshare(0x22020600) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x400040}, [@ldst={0x1, 0x3, 0x3, 0x2, 0x1, 0x10}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 5.495861043s ago: executing program 1 (id=10378): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) (async) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x1, 0x0, 0x0, @vifc_lcl_ifindex, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10) setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) (async) setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000180)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0xd2}}}}}, 0x0) (async) syz_emit_ethernet(0x2a, &(0x7f0000000180)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0xd2}}}}}, 0x0) socket(0xf, 0x80805, 0x0) (async) r4 = socket(0xf, 0x80805, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) (async) shutdown(r5, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) sendmmsg$inet_sctp(r4, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[], 0x30, 0x4040001}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r4, 0x84, 0x1b, 0x0, &(0x7f0000000280)) (async) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r4, 0x84, 0x1b, 0x0, &(0x7f0000000280)) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) unshare(0x62040200) write$tun(0xffffffffffffffff, 0x0, 0x3e) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000740)={"8c3ef01be86258108b331b07f91efab2", 0x0, 0x0, {0x6, 0x40}, {0x3, 0x1}, 0x6, [0x3, 0x5, 0x9, 0x7, 0x7, 0x5, 0x10, 0x953, 0x1, 0x4, 0x8, 0x9000000000000000, 0x2, 0x4, 0x2, 0x5]}) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000007c0)=ANY=[@ANYBLOB="280300002d00090027bd70000000000004000000130317"], 0x328}}, 0x84) (async) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000007c0)=ANY=[@ANYBLOB="280300002d00090027bd70000000000004000000130317"], 0x328}}, 0x84) 5.092037037s ago: executing program 0 (id=10380): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000020000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="5c0100001000130780fffffffcdbdf252001000000000000000000000000000020010000000000000000000000000001000000004e210002000000006c000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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", @ANYRES32=r2, @ANYRES8=r4], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2000) 4.819076424s ago: executing program 5 (id=10381): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000001600)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x24004004, &(0x7f00000001c0)={0x2, 0x4e23, @local}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x6, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18210000000100000000000080000000181100003a15e1fcca4ee7c6246d8ff4003eee9975510c0000d10a2e6be280a4b9c21bbf4e927418c34b7a34c95223345b9c48c81d1b66af7f3c90f1ce61466fcdbbe6d6630e51b63edb906288a63d74800fc2ae6ac79ccafba6537018740717ddabe573f3ad661a0c3c9b1b6ea1a7a6418941e47cad1544992c553125828a9a4c8d39efb69bb8a2c429dce33f14224659350d141d332d30ada7ee1fecae567f09a79db481ec658b63f3498a7dc24898bf05ba0f37b1b11fd341e6725699", @ANYRES32, @ANYBLOB="0000000000000000b708000001fcffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000820000009500000000000000"], &(0x7f0000000700)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000880)={0x2, 0x5, 0x844}, 0x10, 0x0, 0x0, 0x4, &(0x7f00000008c0)=[0xffffffffffffffff, 0x1], &(0x7f0000000900)=[{0x2, 0x5, 0xc, 0x2}, {0x1, 0x5, 0x10, 0x5}, {0x5, 0x2, 0xc, 0xb}, {0x1, 0x1, 0xc, 0x3}], 0x10, 0x2ee7f97b}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bind$isdn(0xffffffffffffffff, &(0x7f0000000780)={0x22, 0xff, 0x2, 0x9, 0x9}, 0x6) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB="8ff400000000000000000000040000", @ANYRES32, @ANYRES32, @ANYBLOB="020000000000000000000000000800"/24, @ANYRES16=r5], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x2, 0x2, &(0x7f00000004c0)=@raw=[@cb_func={0x18, 0x7, 0x4, 0x0, 0x1}], &(0x7f0000000bc0)='syzkaller\x00', 0x0, 0x69, &(0x7f0000000540)=""/105, 0x41100, 0x66, '\x00', 0x0, @fallback=0x30, r3, 0x8, &(0x7f0000000600)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000640)={0x1, 0x2, 0x800, 0x5}, 0x10, 0x0, r4, 0x0, &(0x7f0000000ac0)=[r5, 0x1, r6], 0x0, 0x10, 0x5}, 0x94) r7 = accept4$netrom(r0, &(0x7f0000000200)={{0x3, @bcast}, [@default, @remote, @rose, @default, @remote, @remote, @rose, @netrom]}, &(0x7f0000000340)=0x48, 0xc0000) ioctl$sock_netrom_SIOCADDRT(r7, 0x890b, &(0x7f0000000280)={0x0, @default, @bpq0, 0xffff, 'syz1\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0xf7fffdbe, 0x2, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r8, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x60000000}, 0x50) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x2, 0x250, [], 0x2, 0x0, &(0x7f0000000100)=ANY=[]}, 0x78) unshare(0x26020480) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) sendfile(0xffffffffffffffff, r10, 0x0, 0xffffffff000) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01000000000000000000030000004c0001800d0000000000000009797a300000000038000400140001000a0000007f0000010000000000000000200002000a00000000000000ff0100000000e200000000000800000100000000"], 0x60}}, 0x0) getsockopt$X25_QBITINCL(r10, 0x106, 0x1, &(0x7f0000000100), &(0x7f0000000140)=0x4) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001800010000000000080000000a370000", @ANYRES32=0x0, @ANYBLOB="0000000014000500fec0ffff9c0703ff0000000000000001"], 0xfffffffffffffffc}}, 0x0) 4.816118451s ago: executing program 1 (id=10382): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, 0x0, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @empty}, 0x10) sendmmsg$inet(r0, &(0x7f0000001f00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x240448d5) 4.688746805s ago: executing program 5 (id=10383): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000034c0)={0x28, 0x3e, 0x107, 0x3, 0x0, {0x2, 0x7c}, [@nested={0x4, 0x142}, @nested={0x10, 0x3, 0x0, 0x1, [@typed={0xc, 0x8, 0x0, 0x0, @u64=0x1000}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 4.638591776s ago: executing program 1 (id=10384): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) recvmmsg$unix(r1, &(0x7f0000002a40)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f00000008c0)=""/200, 0xc8}, {&(0x7f0000000640)=""/249, 0xf9}, {&(0x7f0000004480)=""/4098, 0x1002}, {&(0x7f00000007c0)=""/97, 0x61}, {0x0}, {&(0x7f0000000300)=""/25, 0x19}, {&(0x7f0000000540)=""/130, 0x82}, {&(0x7f00000009c0)=""/133, 0x85}], 0x8}}], 0x1, 0x2080, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=@newlink={0x40, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}, @IFLA_IPTUN_TTL={0x5}]}}}]}, 0x40}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, 0xd07, 0xc041}, [@IFLA_MASTER={0x8}]}, 0x28}}, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, 0x0, 0x10) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xc, 0x0, 0x0) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r4, 0x84, 0x19, &(0x7f00000002c0)={0x0, 0x7}, 0x8) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0100000000000000000003000000300001"], 0x44}}, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="140100002e000100000000000010000004"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000001000000000000001c00000071120a000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_skb=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.536421662s ago: executing program 5 (id=10385): r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/mnt\x00') ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x20, r1, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@void, @void, @val={0xc, 0x99, {0x4, 0x2e}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x40044}, 0x8004) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) connect$l2tp(r6, &(0x7f0000000140)={0x2, 0x0, @empty}, 0x10) splice(r5, 0x0, r4, 0x0, 0xffffffbfffff8000, 0x8) close(r6) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000180)={{0x2f, @multicast2, 0x4e24, 0x4, 'dh\x00', 0x1, 0x8, 0x3f}, {@private=0xa010101, 0x4e21, 0x10007, 0x10, 0x800, 0x7f}}, 0x44) 4.275095725s ago: executing program 5 (id=10386): mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x2000009, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="b7050000000000006110480000000000dc0500001000000095000000000000009abb1723bf24203831c9545b21c751ee4024f479cbe4b89f9808837203000000000000c2d182c7a3221481f5009edaf5f5ac058299e10e790a198f42a715b99fb3d2a73dd025848710155ad1efd7d991408000000000000085a0db0401fa29e075b7ab0408a0d8cfceeb23465bb027ee1151c02af21d8f9aa57e673a6724441d08087aff070eda8abef22b3a806c8226f5a2886c93bd29b37252ba4a6e9cc5f69e75680c431aa855e487ae513abd6c4ee973fce29a26018ed5e0780f8778a602a3533a3dac7da4fe491edf3abfa7bf871c58848ac46ada6776bd9b85df01e626026a59ddfa7a9c879acbfb0bf426785dec7d8611dc850df49ed8633bdb83dd505fb20649f53841a0e200c91f5bf1bb186ed87efc7b6f8859d029c8376ca19265e281fea0a6fd2222f8850c8445758503ede0ce1b3f73ecd8989e8c53c5e679b13802bddf80f3b1d07d6d68bfa12ab34697d40ac1150a842f8bb381344b994c19642a10eb30845a993daaa8bd4aebc595475feb3475d8e802498382e73edb98fcf2df96ab3c870490c4"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x48) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='cubic', 0x5) setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000000)=0xffffffff, 0x4) syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000000600)=0x50d, 0x4) listen(r1, 0xffffffff) 4.018689717s ago: executing program 5 (id=10387): r0 = socket(0x10, 0x3, 0x6) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@newqdisc={0x90, 0x24, 0xf0b, 0x20, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x60, 0x2, {{0x2, [0x0, 0x0, 0x1], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4]}, [@TCA_MQPRIO_SHAPER={0xffffffffffffff8e, 0x2, 0x1}]}}}]}, 0x90}}, 0x20000000) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, &(0x7f0000000000)={0x0, 0x8, 0x1, 0x7, @vifc_lcl_addr=@private=0xa010100, @multicast2}, 0x10) 499.504108ms ago: executing program 0 (id=10388): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000000)={'ip6_vti0\x00', &(0x7f00000000c0)={'ip6_vti0\x00', 0x0, 0x29, 0xa2, 0x8, 0xd, 0x1, @empty, @empty, 0x700, 0x80, 0x2, 0x4}}) (async) r1 = socket(0x11, 0x800000003, 0x0) (async) r2 = socket(0x10, 0x3, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, 0x0}, 0x94) (async, rerun: 32) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r4}, 0x38) (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095000000000000004f83fa927b56215f26004b74c4d6b1ef90e2"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r5}, 0x10) (async) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) (async) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f0000001680)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x200000000280, 0x0, 0x0, 0x2000000002b0, 0x2000000002e0], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000060000000000ffffffff0000000100000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff00000000"]}, 0x108) (async) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="310401080000030000001600000018000180140002006e657464657673696d3000000000000005000300010000000500040001000000050002"], 0x44}}, 0x8000) (async) r8 = syz_init_net_socket$ax25(0x3, 0x5, 0xca) setsockopt$ax25_SO_BINDTODEVICE(r8, 0x101, 0x19, &(0x7f00000001c0)=@bpq0, 0x10) sendmmsg$inet6(r1, &(0x7f0000000180), 0x0, 0x40) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d40)=@newqdisc={0x90, 0x24, 0xf0b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x60, 0x2, {{0x2, [], 0x0, [0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000], [0x0, 0x4]}, [@TCA_MQPRIO_MODE={0x6, 0x4, 0x1}]}}}]}, 0x90}}, 0x0) 404.602398ms ago: executing program 1 (id=10389): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000034c0)={0x28, 0x3e, 0x107, 0x3, 0x0, {0x2, 0x7c}, [@nested={0x4, 0x142}, @nested={0x10, 0x3, 0x0, 0x1, [@typed={0xc, 0x8, 0x0, 0x0, @u64=0x1000}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (fail_nth: 2) 227.091419ms ago: executing program 5 (id=10390): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0xe, &(0x7f00000011c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x1}, 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) socket$inet_sctp(0x2, 0x1, 0x84) bind$l2tp6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x5, @mcast2, 0x1}, 0x20) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r1, &(0x7f0000000380)=[{{&(0x7f0000000300)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00', 0x10001}, 0x1c, &(0x7f0000000cc0)=[{&(0x7f0000000540)='O', 0x1}], 0x1}}, {{&(0x7f0000000600)={0xa, 0x4e24, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x80000000}, 0x1c, &(0x7f0000001000)=[{&(0x7f00000004c0)="06", 0x1}], 0x1, &(0x7f00000018c0)=ANY=[@ANYBLOB="1400000000000000290000003e000000390d000000000000480000000000000029000000390000003a0601010000000020010000000000000000000000000000fe8000000000000000000000000000aafc0200000000000000000000000000018010"], 0x10e0}}], 0x2, 0x880) shutdown(r1, 0x1) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000080)={0x0, 0x4}, 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000503e7100008dc764ba8b0000000000000000000000000000000000000000847f5c074b48c6ee81ca12de81993644744a4e819e4015edd377a3de682cffdf2871b747b0c2c40977c3f212dfb1159f3aa415ab6f36b6dfe4ef4df7f296f0d3f46a14b1ec4310e3b74cfcb4a5c3c79a65ada7969e525ee71c807c21ed51cffde1d5cc5d6e5c731f789ae5cd3aa62302fbde199bac4922bc6681750c44beeb7b79af607eee2164a836ccb6459273088737d469bef9babf5994233abfeb4dabc62ed82a810de1b1ec63a6a0c2699eef92684c227f1823cb2b001c6625414946830e37cf22"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0xd, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000fcffffff000000008000000085000000a800000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000001817020000f8ffffffb703000008000000b70400000200000085000000a60000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0x20, &(0x7f0000000440)={&(0x7f00000003c0)=""/50, 0x32, 0x0, &(0x7f0000000400)=""/46, 0x2e}}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffed850000006d000000a50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r6, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$NFC_CMD_START_POLL(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r6, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) sendmsg$NFC_CMD_ACTIVATE_TARGET(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={0x0, 0x2c}}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000640), r5) ioctl$sock_netrom_SIOCADDRT(r4, 0x890b, &(0x7f0000000000)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x1, 'syz1\x00', @bcast, 0xff, 0x8, [@bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}) sendmsg(r4, &(0x7f00000003c0)={&(0x7f0000000200)=@phonet={0x23, 0x1, 0x81, 0x40}, 0x80, 0x0}, 0x40041) ioctl$SIOCNRDECOBS(r4, 0x89e2) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000740)={'bridge0\x00', 0x0}) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r7, 0x14615, 0x1010}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0x9}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0xb9075000) 141.127567ms ago: executing program 1 (id=10391): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f0000000000)=ANY=[], 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x2, 0x0, 0x3}]}, &(0x7f0000000040)='GPL\x00', 0x9, 0xdb, &(0x7f0000000700)=""/219}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x44b, 0x1000, 0x40, {0x7a, 0x0, 0x0, 0x0, 0x1840}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IPTABLES={0x5, 0x24, 0x1}, @IFLA_BR_NF_CALL_IP6TABLES={0x5}]}}}]}, 0x44}}, 0x0) r2 = socket(0x10, 0x803, 0x0) bind$netlink(r2, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={@empty, 0xaf3d52cc2497bc97, 0x0, 0x60, 0x0, [{@initdev}, {@empty}, {@multicast1}, {@initdev}, {@remote}, {@dev}]}}) socket$nl_route(0x10, 0x3, 0x0) (async) socket$rds(0x15, 0x5, 0x0) (async) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f0000000000)=ANY=[], 0x4) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x2, 0x0, 0x3}]}, &(0x7f0000000040)='GPL\x00', 0x9, 0xdb, &(0x7f0000000700)=""/219}, 0x94) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x44b, 0x1000, 0x40, {0x7a, 0x0, 0x0, 0x0, 0x1840}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IPTABLES={0x5, 0x24, 0x1}, @IFLA_BR_NF_CALL_IP6TABLES={0x5}]}}}]}, 0x44}}, 0x0) (async) socket(0x10, 0x803, 0x0) (async) bind$netlink(r2, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) (async) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) (async) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={@empty, 0xaf3d52cc2497bc97, 0x0, 0x60, 0x0, [{@initdev}, {@empty}, {@multicast1}, {@initdev}, {@remote}, {@dev}]}}) (async) 0s ago: executing program 2 (id=10392): r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r2}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="01000000ff0400000300000000000000a2997126898cef1feae4f2473d0442e46238425ca07e38def519d0df61002af5b842429305423f0600000010aa63bf1eaf10420c2d3c045b2c1680de43df60aceed4d52a523279f9aba734020d6e74de18a655097e67e48e2611", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRESOCT=r2, @ANYRES64=0x2710, @ANYBLOB="030000e00100000004000040010200005f01762a5d8abf8d"], 0x48}, 0x1, 0x0, 0x0, 0x191}, 0x4000010) kernel console output (not intermixed with test programs): 4][ T8041] netlink: 'syz.1.9064': attribute type 1 has an invalid length. [ 1303.257141][ T7847] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 1303.336270][ T8045] Bluetooth: MGMT ver 1.23 [ 1303.352437][T21794] bond13: (slave macvlan4): failed to get link speed/duplex [ 1303.463125][T21794] bond13: (slave macvlan4): failed to get link speed/duplex [ 1303.572349][ T9426] bond13: (slave macvlan4): failed to get link speed/duplex [ 1303.625556][ T8051] tipc: Enabled bearer , priority 0 [ 1303.673211][ T8051] syzkaller0: entered promiscuous mode [ 1303.681749][ T8051] syzkaller0: entered allmulticast mode [ 1303.704314][ T8051] team0: entered allmulticast mode [ 1303.712556][ T8051] tipc: Resetting bearer [ 1303.751571][T21794] bond13: (slave macvlan4): failed to get link speed/duplex [ 1303.759203][ T8053] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9068'. [ 1303.887746][ T8057] tipc: Enabled bearer , priority 0 [ 1303.938404][ T8051] tipc: Resetting bearer [ 1303.953773][ T8053] syzkaller0: entered promiscuous mode [ 1303.959282][ T8053] syzkaller0: entered allmulticast mode [ 1303.981673][ T9426] bond13: (slave macvlan4): failed to get link speed/duplex [ 1304.050543][ T8053] tipc: Resetting bearer [ 1304.081760][ T8054] mac80211_hwsim hwsim87 wlan0: entered promiscuous mode [ 1304.104206][ T8054] batadv_slave_0: entered promiscuous mode [ 1304.136994][ T8054] debugfs: 'hsr0' already exists in 'hsr' [ 1304.161969][ T8054] Cannot create hsr debugfs directory [ 1304.169265][ T8054] hsr0: Slave A (wlan0) is not up; please bring it up to get a fully working HSR network [ 1304.181592][ T8054] hsr0: Slave B (batadv_slave_0) is not up; please bring it up to get a fully working HSR network [ 1304.212683][ T8054] hsr0: entered promiscuous mode [ 1304.226317][ T7847] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1304.252950][ T7847] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1304.290687][ T7847] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1304.353297][ T8058] tipc: Resetting bearer [ 1304.454564][ T8058] tipc: Disabling bearer [ 1304.481738][ T9426] bond13: (slave macvlan4): failed to get link speed/duplex [ 1304.523186][ T7847] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1304.763994][ T8080] netlink: 16 bytes leftover after parsing attributes in process `syz.5.9075'. [ 1304.778500][ T7847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1304.808483][ T8080] netlink: 16 bytes leftover after parsing attributes in process `syz.5.9075'. [ 1304.863509][ T8082] vlan2: entered promiscuous mode [ 1304.880535][ T8082] bond0: entered promiscuous mode [ 1304.891634][ T8082] bond_slave_0: entered promiscuous mode [ 1304.903571][ T8082] bond_slave_1: entered promiscuous mode [ 1304.989479][ T7847] 8021q: adding VLAN 0 to HW filter on device team0 [ 1305.044787][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 1305.052333][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1305.102652][ T8092] netlink: 'syz.1.9079': attribute type 6 has an invalid length. [ 1305.137164][ T9426] bridge0: port 2(bridge_slave_1) entered blocking state [ 1305.144480][ T9426] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1305.298643][ T8096] netlink: 'syz.3.9080': attribute type 7 has an invalid length. [ 1305.307530][ T8096] netlink: 232 bytes leftover after parsing attributes in process `syz.3.9080'. [ 1305.808346][ T8118] wg1 speed is unknown, defaulting to 1000 [ 1305.957035][ T8130] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input6 [ 1305.998602][ T8129] netlink: 'syz.0.9088': attribute type 1 has an invalid length. [ 1306.088350][ T7847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1306.262909][ T8129] 8021q: adding VLAN 0 to HW filter on device bond26 [ 1306.409811][ T8136] veth13: entered promiscuous mode [ 1306.490072][ T8136] bond26: (slave veth13): Enslaving as a backup interface with a down link [ 1306.593047][ T8139] bond24: (slave erspan0): Releasing active interface [ 1306.599864][ T8139] ip6gretap1: entered promiscuous mode [ 1306.643330][ T8139] team0: Port device dummy0 removed [ 1306.651076][ T8139] bond0: (slave bond_slave_0): Releasing backup interface [ 1306.697200][ T8139] team0: Port device team_slave_0 removed [ 1306.714240][ T8139] team0: Port device team_slave_1 removed [ 1306.720775][ T8139] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1306.733474][ T8139] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1306.828873][ T8139] bond10: (slave geneve4): Releasing active interface [ 1306.863125][ T8139] batman_adv: batadv0: Removing interface: ipvlan2 [ 1306.888965][ T8139] bond14: (slave bridge3): Releasing backup interface [ 1306.910562][ T8139] bond13: (slave macvlan4): Removing an active aggregator [ 1306.922837][ T8139] bond13: (slave macvlan4): Releasing backup interface [ 1306.949770][ T8139] bond15: (slave bridge5): Releasing active interface [ 1306.972980][ T8139] bond24: (slave ip6gretap1): Releasing active interface [ 1306.990254][ T8139] bond24: (slave ip6gretap1): the permanent HWaddr of slave - 72:99:d0:e6:28:8b - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 1307.032412][ T8139] ip6gretap1: left promiscuous mode [ 1307.056353][ T8139] bond24: (slave veth11): Releasing active interface [ 1307.084378][ T8139] bond26: (slave veth13): Releasing backup interface [ 1307.330459][T31974] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 1307.351526][T31974] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 1307.360187][T31974] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 1307.443347][T31974] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 1307.570992][ T8161] bridge0: entered promiscuous mode [ 1307.583497][ T8161] bridge0: port 3(macvlan2) entered blocking state [ 1307.590327][ T8161] bridge0: port 3(macvlan2) entered disabled state [ 1307.598408][ T8161] macvlan2: entered allmulticast mode [ 1307.605054][ T8161] bridge0: entered allmulticast mode [ 1307.614748][ T8161] macvlan2: left allmulticast mode [ 1307.619913][ T8161] bridge0: left allmulticast mode [ 1307.628803][ T8161] bridge0: left promiscuous mode [ 1308.528098][ T8175] sctp: [Deprecated]: syz.0.9097 (pid 8175) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1308.528098][ T8175] Use struct sctp_sack_info instead [ 1308.547244][ T7847] veth0_vlan: entered promiscuous mode [ 1308.577894][ T7847] veth1_vlan: entered promiscuous mode [ 1308.590873][ T8175] sctp: [Deprecated]: syz.0.9097 (pid 8175) Use of int in max_burst socket option deprecated. [ 1308.590873][ T8175] Use struct sctp_assoc_value instead [ 1308.756283][ T7847] veth0_macvtap: entered promiscuous mode [ 1308.838482][ T7847] veth1_macvtap: entered promiscuous mode [ 1308.855559][ T8181] netlink: 36 bytes leftover after parsing attributes in process `syz.3.9099'. [ 1308.906299][ T7847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1308.955562][ T7847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1308.992219][T21794] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1309.014527][T21794] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1309.025319][T21794] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1309.037450][T21794] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1309.197010][T31974] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1309.228461][T31974] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1309.308002][T31945] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1309.341638][T31945] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1309.756463][ T8204] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 1309.893834][ T8206] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9106'. [ 1310.236940][ T8223] wg1 speed is unknown, defaulting to 1000 [ 1310.557691][ T8232] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9114'. [ 1310.887620][ T8235] netlink: 'syz.2.9112': attribute type 1 has an invalid length. [ 1310.972036][ T8235] netlink: 'syz.2.9112': attribute type 1 has an invalid length. [ 1311.067067][ T8235] netlink: 224 bytes leftover after parsing attributes in process `syz.2.9112'. [ 1311.185492][ T8249] netlink: 'syz.0.9118': attribute type 1 has an invalid length. [ 1311.218144][ T8249] netlink: 208 bytes leftover after parsing attributes in process `syz.0.9118'. [ 1311.234215][ T8251] netlink: 'syz.5.9119': attribute type 1 has an invalid length. [ 1311.287344][ T8254] netlink: 'syz.0.9118': attribute type 21 has an invalid length. [ 1311.303366][ T8251] workqueue: Failed to create a rescuer kthread for wq "bond13": -EINTR [ 1311.311667][ T8254] netlink: 'syz.0.9118': attribute type 1 has an invalid length. [ 1311.392192][ T8254] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9118'. [ 1311.866544][ T8280] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9124'. [ 1311.999898][ T8273] tipc: Enabled bearer , priority 0 [ 1312.034607][ T8279] syzkaller0: entered promiscuous mode [ 1312.121303][ T8279] syzkaller0: entered allmulticast mode [ 1312.160067][ T8273] tipc: Resetting bearer [ 1312.492574][ T8266] tipc: Resetting bearer [ 1312.923498][ T8318] netlink: 28 bytes leftover after parsing attributes in process `syz.5.9132'. [ 1312.958602][ T8318] netlink: 'syz.5.9132': attribute type 7 has an invalid length. [ 1312.998674][ T8321] netlink: 16 bytes leftover after parsing attributes in process `syz.5.9132'. [ 1313.039625][ T8318] netlink: 'syz.5.9132': attribute type 8 has an invalid length. [ 1313.057003][T25806] tipc: Node number set to 57500119 [ 1313.072009][ T8318] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9132'. [ 1313.303541][ T8266] tipc: Disabling bearer [ 1313.865216][ T8321] workqueue: Failed to create a rescuer kthread for wq "bond13": -EINTR [ 1314.109173][ T8335] netlink: 'syz.3.9135': attribute type 1 has an invalid length. [ 1314.214186][ T8338] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9135'. [ 1314.476922][ T8337] bond1: (slave veth3): Enslaving as an active interface with a down link [ 1314.534546][ T8334] wg1 speed is unknown, defaulting to 1000 [ 1314.609847][ T8347] netlink: 'syz.5.9140': attribute type 1 has an invalid length. [ 1314.831855][ T8359] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9140'. [ 1314.903793][ T8347] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1314.987318][ T8366] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9142'. [ 1314.990275][ T8355] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 1315.012511][ T8355] bond13: (slave batadv2): making interface the new active one [ 1315.023564][ T8355] bond13: (slave batadv2): Enslaving as an active interface with an up link [ 1315.457427][ T8359] bond13 (unregistering): (slave batadv2): Releasing active interface [ 1315.484111][ T8359] bond13 (unregistering): Released all slaves [ 1315.984991][ T8381] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9147'. [ 1316.025354][ T8381] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9147'. [ 1316.199959][ T8386] validate_nla: 2 callbacks suppressed [ 1316.199980][ T8386] netlink: 'syz.0.9146': attribute type 13 has an invalid length. [ 1316.234791][ T8386] netlink: 'syz.0.9146': attribute type 17 has an invalid length. [ 1316.302462][ T8386] erspan0: left allmulticast mode [ 1316.310835][ T8389] netlink: 'syz.0.9146': attribute type 11 has an invalid length. [ 1316.337568][ T8386] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1316.347592][ T8386] 8021q: adding VLAN 0 to HW filter on device team0 [ 1316.375862][ T8386] net_ratelimit: 8 callbacks suppressed [ 1316.375874][ T8386] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1316.890880][ T8398] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9151'. [ 1317.253819][ T8402] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1317.276746][ T8404] netlink: 'syz.0.9152': attribute type 4 has an invalid length. [ 1317.900020][ T8417] wg1 speed is unknown, defaulting to 1000 [ 1317.910998][ T8424] netlink: 'syz.0.9158': attribute type 10 has an invalid length. [ 1317.950119][ T8424] team0: Port device dummy0 added [ 1318.004814][ T8427] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9159'. [ 1318.203792][ T8431] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9160'. [ 1318.332491][ T8431] syz_tun (unregistering): left allmulticast mode [ 1318.557360][ T8443] wg1 speed is unknown, defaulting to 1000 [ 1318.784958][ T8441] wg1 speed is unknown, defaulting to 1000 [ 1320.400494][ T8495] syzkaller0: entered promiscuous mode [ 1320.406952][ T8507] netlink: 88 bytes leftover after parsing attributes in process `syz.1.9175'. [ 1320.411546][ T8495] syzkaller0: entered allmulticast mode [ 1321.527421][ T8521] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9179'. [ 1322.139506][ T8527] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9180'. [ 1322.293149][ T8529] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9180'. [ 1323.584464][ T8522] bridge7: port 1(veth13) entered blocking state [ 1323.597618][ T8522] bridge7: port 1(veth13) entered disabled state [ 1323.611885][ T8522] veth13: entered allmulticast mode [ 1323.629573][ T8522] veth13: entered promiscuous mode [ 1323.646962][ T8523] bridge7: port 2(veth0_to_bond) entered blocking state [ 1323.655345][ T8523] bridge7: port 2(veth0_to_bond) entered disabled state [ 1323.666314][ T8523] veth0_to_bond: entered allmulticast mode [ 1323.675179][ T8531] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9181'. [ 1323.693573][ T8523] veth0_to_bond: entered promiscuous mode [ 1324.060052][ T8547] netlink: 320 bytes leftover after parsing attributes in process `syz.0.9186'. [ 1324.224547][ T8559] netlink: 200 bytes leftover after parsing attributes in process `syz.5.9187'. [ 1325.000849][ T8567] netlink: 'syz.0.9190': attribute type 4 has an invalid length. [ 1325.165948][ T8576] tipc: Enabled bearer , priority 10 [ 1325.279086][ T8585] netlink: 36 bytes leftover after parsing attributes in process `syz.5.9196'. [ 1325.442281][ T8587] bridge_slave_0: left allmulticast mode [ 1325.486188][ T8587] bridge_slave_0: left promiscuous mode [ 1325.513426][ T8587] bridge0: port 1(bridge_slave_0) entered disabled state [ 1325.861075][ T8587] bridge_slave_1: left allmulticast mode [ 1325.888066][ T8587] bridge_slave_1: left promiscuous mode [ 1325.903459][ T8587] bridge0: port 2(bridge_slave_1) entered disabled state [ 1325.952148][ T8587] bond0: (slave bond_slave_0): Releasing backup interface [ 1325.990583][ T8587] bond0: (slave bond_slave_1): Releasing backup interface [ 1326.042066][ T5830] Bluetooth: hci2: command tx timeout [ 1326.064358][ T8587] team0: Port device team_slave_0 removed [ 1326.133070][ T8587] team0: Port device team_slave_1 removed [ 1326.140262][ T8587] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1326.148695][ T8587] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1326.176843][ T8587] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1326.184966][ T8587] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1326.216497][ T8587] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1326.422307][ T8594] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 1326.638941][ T8598] wg1 speed is unknown, defaulting to 1000 [ 1326.788730][ T8607] netlink: 96 bytes leftover after parsing attributes in process `syz.3.9200'. [ 1327.015693][ T8608] syzkaller1: entered promiscuous mode [ 1327.021279][ T8608] syzkaller1: entered allmulticast mode [ 1327.285646][ T8623] tipc: Enabled bearer , priority 0 [ 1327.368374][ T8623] netlink: 'syz.3.9202': attribute type 83 has an invalid length. [ 1327.476131][ T8627] syzkaller0: entered promiscuous mode [ 1327.499876][ T8627] syzkaller0: entered allmulticast mode [ 1327.547156][ T8627] tipc: Resetting bearer [ 1328.207824][T30248] tipc: Resetting bearer [ 1328.279234][ T8622] tipc: Resetting bearer [ 1330.780331][ T8622] tipc: Disabling bearer [ 1331.177509][ T8666] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9212'. [ 1331.199096][ T8670] netlink: 'syz.3.9214': attribute type 13 has an invalid length. [ 1331.238113][ T8670] netlink: 'syz.3.9214': attribute type 17 has an invalid length. [ 1331.540207][ T8670] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1331.556562][ T8683] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9215'. [ 1331.572552][ T8688] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9217'. [ 1331.581802][ T8683] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9215'. [ 1331.791311][ T8697] netlink: 'syz.3.9219': attribute type 1 has an invalid length. [ 1332.065535][ T8704] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9219'. [ 1332.127584][ T8704] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1332.280323][ T8702] bond2: (slave geneve3): making interface the new active one [ 1332.291159][ T8702] bond2: (slave geneve3): Enslaving as an active interface with an up link [ 1332.304234][T31977] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 1332.313933][T31977] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1332.326469][T31977] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 1332.346839][ T8712] netlink: 144 bytes leftover after parsing attributes in process `syz.1.9223'. [ 1332.406750][T31977] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 1332.812028][ T5830] Bluetooth: hci2: link tx timeout [ 1332.819025][ T5830] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1332.852749][T28374] Bluetooth: hci2: link tx timeout [ 1332.858069][T28374] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1333.883675][ T8745] netlink: 20 bytes leftover after parsing attributes in process `syz.5.9232'. [ 1334.062753][ T8756] pim6reg: entered allmulticast mode [ 1334.075132][ T8753] wg1 speed is unknown, defaulting to 1000 [ 1334.644016][ T8777] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9238'. [ 1334.894021][ T8786] tls_set_device_offload: netdev not found [ 1334.903875][ T8787] smc: net device geneve0 applied user defined pnetid SYZ0 [ 1334.914989][ T8787] netlink: 100 bytes leftover after parsing attributes in process `syz.5.9240'. [ 1334.921712][T28374] Bluetooth: hci2: command 0x0406 tx timeout [ 1335.415759][ T8793] netlink: 44 bytes leftover after parsing attributes in process `syz.5.9244'. [ 1335.462436][ T8793] netlink: 35 bytes leftover after parsing attributes in process `syz.5.9244'. [ 1335.514773][ T8793] netlink: 'syz.5.9244': attribute type 6 has an invalid length. [ 1335.542600][ T8793] netlink: 'syz.5.9244': attribute type 5 has an invalid length. [ 1335.550356][ T8793] netlink: 35 bytes leftover after parsing attributes in process `syz.5.9244'. [ 1335.597724][ T8799] netlink: 'syz.5.9244': attribute type 4 has an invalid length. [ 1335.609860][ T8793] netlink: 196 bytes leftover after parsing attributes in process `syz.5.9244'. [ 1335.619965][ T8793] netlink: 'syz.5.9244': attribute type 4 has an invalid length. [ 1335.822794][ T8753] pim6reg: left allmulticast mode [ 1335.839691][ T8804] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1335.854908][ T8804] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1335.866398][ T8804] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1335.877316][ T8804] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1335.909495][ T8804] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1336.002739][ T8803] wg1 speed is unknown, defaulting to 1000 [ 1336.518340][ T8818] netdevsim netdevsim2 ÿÿÿÿÿÿ: renamed from netdevsim0 (while UP) [ 1336.638299][ T8824] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9253'. [ 1336.979886][ T8835] bridge8: entered promiscuous mode [ 1337.001632][T28374] Bluetooth: hci2: command 0x0406 tx timeout [ 1337.029316][ T8843] vlan2: entered promiscuous mode [ 1337.054261][ T8843] bond0: entered promiscuous mode [ 1337.059487][ T8843] vlan2: entered allmulticast mode [ 1337.068658][ T8843] bond0: entered allmulticast mode [ 1337.099009][ T8843] __nla_validate_parse: 1 callbacks suppressed [ 1337.099031][ T8843] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9258'. [ 1337.184291][ T8843] netlink: 32 bytes leftover after parsing attributes in process `syz.2.9258'. [ 1337.194962][ T8854] x_tables: duplicate underflow at hook 3 [ 1337.204775][ T8855] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9260'. [ 1337.385671][ T8865] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9261'. [ 1337.531928][ T8803] chnl_net:caif_netlink_parms(): no params data found [ 1337.652290][ T8865] bridge_slave_1: left allmulticast mode [ 1337.659257][ T8865] bridge_slave_1: left promiscuous mode [ 1337.681134][ T8865] bridge0: port 2(bridge_slave_1) entered disabled state [ 1337.962468][ T5830] Bluetooth: hci4: command tx timeout [ 1338.268648][ T8865] bridge_slave_0: left allmulticast mode [ 1338.278809][ T8865] bridge_slave_0: left promiscuous mode [ 1338.289166][ T8865] bridge0: port 1(bridge_slave_0) entered disabled state [ 1338.489615][ T8872] netlink: 32 bytes leftover after parsing attributes in process `syz.0.9263'. [ 1338.689960][ T8866] wg1 speed is unknown, defaulting to 1000 [ 1338.923465][ T8803] bridge0: port 1(bridge_slave_0) entered blocking state [ 1338.939826][T31945] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x6 [ 1338.974972][ T8803] bridge0: port 1(bridge_slave_0) entered disabled state [ 1338.994405][ T8803] bridge_slave_0: entered allmulticast mode [ 1339.002937][ T8803] bridge_slave_0: entered promiscuous mode [ 1339.012313][ T8803] bridge0: port 2(bridge_slave_1) entered blocking state [ 1339.019831][ T8803] bridge0: port 2(bridge_slave_1) entered disabled state [ 1339.027583][ T8803] bridge_slave_1: entered allmulticast mode [ 1339.035711][ T8803] bridge_slave_1: entered promiscuous mode [ 1339.124440][ T8803] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1339.161157][ T8803] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1339.175923][ T8904] Cannot find del_set index 2 as target [ 1339.348905][ T8803] team0: Port device team_slave_0 added [ 1339.370028][ T8907] tipc: Enabled bearer , priority 0 [ 1339.437030][ T8803] team0: Port device team_slave_1 added [ 1339.561195][ T8910] syzkaller0: entered promiscuous mode [ 1339.578142][ T8910] syzkaller0: entered allmulticast mode [ 1339.740870][ T8803] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1339.766401][ T8803] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1339.793689][ T8803] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1339.808538][ T8910] tipc: Resetting bearer [ 1339.845180][ T8910] tipc: Disabling bearer [ 1339.910099][ T8803] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1339.932464][ T8803] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1339.967896][ T8803] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1340.043868][T28374] Bluetooth: hci4: command tx timeout [ 1340.125113][ T8926] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9274'. [ 1340.459160][ T8803] hsr_slave_0: entered promiscuous mode [ 1340.484502][ T8803] hsr_slave_1: entered promiscuous mode [ 1340.510722][ T8803] debugfs: 'hsr0' already exists in 'hsr' [ 1340.552141][ T8803] Cannot create hsr debugfs directory [ 1340.697580][ T8935] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9277'. [ 1340.744664][ T8935] 8021q: VLANs not supported on nlmon0 [ 1341.088462][ T8803] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1341.276801][ T8803] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1341.401026][ T8803] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1341.581295][ T8957] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9283'. [ 1341.587025][ T8803] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1341.663492][ T8957] netlink: 'syz.5.9283': attribute type 4 has an invalid length. [ 1341.716644][ T8960] netlink: 'syz.5.9283': attribute type 4 has an invalid length. [ 1342.074097][ T8971] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 1342.125083][T28374] Bluetooth: hci4: command tx timeout [ 1342.174335][ T8803] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1342.264474][ T8803] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1342.278843][ T8803] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1342.304922][ T8978] delete_channel: no stack [ 1342.336045][ T8803] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1342.536945][ T8988] netlink: 24 bytes leftover after parsing attributes in process `syz.5.9291'. [ 1342.561556][ T8991] netlink: 'syz.0.9293': attribute type 4 has an invalid length. [ 1342.585785][ T8992] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9292'. [ 1342.629720][ T8803] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1342.703155][ T8994] tipc: Started in network mode [ 1342.708435][ T8994] tipc: Node identity 7e76b6412bc5, cluster identity 4711 [ 1342.739398][ T8998] Bluetooth: MGMT ver 1.23 [ 1342.758195][ T8994] tipc: Enabled bearer , priority 0 [ 1342.797313][ T8803] 8021q: adding VLAN 0 to HW filter on device team0 [ 1342.818307][ T9002] syzkaller0: entered promiscuous mode [ 1342.837856][ T9004] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9296'. [ 1342.884917][ T9002] syzkaller0: entered allmulticast mode [ 1342.917865][ T9863] bridge0: port 1(bridge_slave_0) entered blocking state [ 1342.925194][ T9863] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1343.003155][ T9001] wg1 speed is unknown, defaulting to 1000 [ 1343.025377][ T9002] tipc: Resetting bearer [ 1343.035011][T21794] bridge0: port 2(bridge_slave_1) entered blocking state [ 1343.042226][T21794] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1343.113495][ T8993] tipc: Resetting bearer [ 1343.167519][ T8993] tipc: Disabling bearer [ 1343.240301][ T9019] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9299'. [ 1343.563775][ T9025] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9301'. [ 1343.868448][ T9038] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9304'. [ 1343.915984][ T9038] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9304'. [ 1344.129839][ T9048] netlink: 'syz.3.9308': attribute type 30 has an invalid length. [ 1344.154823][ T9050] sctp: [Deprecated]: syz.2.9305 (pid 9050) Use of int in max_burst socket option. [ 1344.154823][ T9050] Use struct sctp_assoc_value instead [ 1344.207424][T28374] Bluetooth: hci4: command tx timeout [ 1344.207487][ T9048] bond4: option arp_missed_max: invalid value (0) [ 1344.220030][ T9048] bond4: option arp_missed_max: allowed values 1 - 255 [ 1344.238347][ T9048] bond4 (unregistering): Released all slaves [ 1344.299977][ T8803] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1344.547506][ T8803] veth0_vlan: entered promiscuous mode [ 1344.623898][ T8803] veth1_vlan: entered promiscuous mode [ 1344.748147][ T8803] veth0_macvtap: entered promiscuous mode [ 1344.783275][ T9059] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1344.787105][ T8803] veth1_macvtap: entered promiscuous mode [ 1344.820959][ T8803] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1344.835627][ T9060] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1344.922339][ T8803] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1344.999890][T31974] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1345.048653][T31974] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1345.075175][ T9066] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9312'. [ 1345.089884][T31974] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1345.117483][T31974] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1345.424148][ T9072] netlink: 'syz.5.9314': attribute type 1 has an invalid length. [ 1345.432556][ T9072] netlink: 'syz.5.9314': attribute type 2 has an invalid length. [ 1345.463436][ T9426] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1345.491494][ T9426] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1345.513667][ T9072] netlink: 48 bytes leftover after parsing attributes in process `syz.5.9314'. [ 1345.703983][T31977] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1345.725893][T31977] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1345.804836][ T9094] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9320'. [ 1346.356457][T31974] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1346.419456][ T9103] wg1 speed is unknown, defaulting to 1000 [ 1346.420017][T31974] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1346.478714][T31974] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1346.527699][T31974] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1347.033059][ T9132] RDS: rds_bind could not find a transport for ::ffff:172.30.1.4, load rds_tcp or rds_rdma? [ 1347.321434][ T9105] wg1 speed is unknown, defaulting to 1000 [ 1347.557698][ T9143] tipc: Enabled bearer , priority 0 [ 1347.575240][ T9145] syzkaller0: entered promiscuous mode [ 1347.592846][ T9145] syzkaller0: entered allmulticast mode [ 1347.603565][ T5830] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1347.619285][ T5830] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1347.637042][ T5830] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1347.649628][ T5830] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1347.657709][ T5830] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1347.684639][ T9143] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1347.825456][ T9154] netlink: 'syz.3.9334': attribute type 1 has an invalid length. [ 1347.833535][ T9154] netlink: 'syz.3.9334': attribute type 11 has an invalid length. [ 1347.841527][ T9154] __nla_validate_parse: 4 callbacks suppressed [ 1347.841545][ T9154] netlink: 224 bytes leftover after parsing attributes in process `syz.3.9334'. [ 1347.933435][ T9137] tipc: Resetting bearer [ 1347.970667][ T9156] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9336'. [ 1348.062632][ T9159] netlink: 'syz.1.9337': attribute type 23 has an invalid length. [ 1348.071699][ T9147] wg1 speed is unknown, defaulting to 1000 [ 1348.178558][ T9165] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9337'. [ 1348.228128][ T9167] netlink: 'syz.3.9339': attribute type 1 has an invalid length. [ 1348.352255][ T9136] tipc: Resetting bearer [ 1348.432085][ T9136] tipc: Disabling bearer [ 1348.550379][ T9168] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1348.573049][ T9168] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 1348.626054][ T9169] netlink: 'syz.3.9339': attribute type 10 has an invalid length. [ 1348.825193][ T9181] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9343'. [ 1349.188544][ T9192] netlink: 'syz.3.9346': attribute type 1 has an invalid length. [ 1349.200323][ T9192] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.9346'. [ 1349.437658][ T9195] wg1 speed is unknown, defaulting to 1000 [ 1349.722181][ T5830] Bluetooth: hci5: command tx timeout [ 1349.770142][ T9204] hsr0: entered promiscuous mode [ 1349.788887][ T9203] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9348'. [ 1349.891781][ T9203] hsr_slave_0: left promiscuous mode [ 1349.898329][ T9203] hsr_slave_1: left promiscuous mode [ 1349.991091][ T9203] hsr0 (unregistering): left promiscuous mode [ 1350.160000][ T9216] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9349'. [ 1350.170474][ T9216] netlink: 'syz.1.9349': attribute type 8 has an invalid length. [ 1350.179762][ T9216] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9349'. [ 1350.273428][ T9216] geneve2: entered promiscuous mode [ 1350.302618][ T9216] geneve2: entered allmulticast mode [ 1350.550926][ T9147] chnl_net:caif_netlink_parms(): no params data found [ 1350.779475][ T9239] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9356'. [ 1351.137981][ T9249] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9359'. [ 1351.564904][ T9147] bridge0: port 1(bridge_slave_0) entered blocking state [ 1351.591802][ T9147] bridge0: port 1(bridge_slave_0) entered disabled state [ 1351.609322][ T9147] bridge_slave_0: entered allmulticast mode [ 1351.634534][ T9147] bridge_slave_0: entered promiscuous mode [ 1351.710165][ T6554] IPVS: starting estimator thread 0... [ 1351.737060][ T9286] netlink: 'syz.1.9367': attribute type 13 has an invalid length. [ 1351.770668][ T9286] netlink: 'syz.1.9367': attribute type 17 has an invalid length. [ 1351.781941][ T9147] bridge0: port 2(bridge_slave_1) entered blocking state [ 1351.805734][ T9147] bridge0: port 2(bridge_slave_1) entered disabled state [ 1351.813454][ T9283] IPVS: using max 27 ests per chain, 64800 per kthread [ 1351.820521][ T5830] Bluetooth: hci5: command tx timeout [ 1351.836761][ T9147] bridge_slave_1: entered allmulticast mode [ 1351.845562][ T9147] bridge_slave_1: entered promiscuous mode [ 1351.854050][ T9285] bridge_slave_1: left allmulticast mode [ 1351.859917][ T9285] bridge_slave_1: left promiscuous mode [ 1351.869569][ T9285] bridge0: port 2(bridge_slave_1) entered disabled state [ 1351.889819][ T9285] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 1352.166359][ T9282] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 1352.173984][ C0] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 1352.251592][ T9286] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1352.514275][ T9147] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1352.549493][ T9147] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1352.561791][ T9300] tipc: Enabling of bearer rejected, failed to enable media [ 1352.855128][ T9147] team0: Port device team_slave_0 added [ 1352.893968][ T9147] team0: Port device team_slave_1 added [ 1353.149920][ T9147] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1353.201417][ T9147] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1353.292881][ T9147] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1353.333565][ T9147] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1353.340982][ T9147] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1353.384442][ T9341] __nla_validate_parse: 5 callbacks suppressed [ 1353.384458][ T9341] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9380'. [ 1353.412363][ T30] audit: type=1107 audit(1760294051.889:19): pid=9337 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='žNwtëp³6GüBA½üyݯ£M´§:pL7·©’T¹¶DòâÊ!¶ÅúÒ‘<ÊϺÅt³àhãŽs¡FãáÚÈ [ 1353.412363][ T30] tñ[üëÿke€õé#l¶õøPñÅsŸ“R'Ò®YZh<­=ÑIí×?eƒªo54’®ºý ºð+…kÇtv+ã' [ 1353.440283][ T9341] netlink: 32 bytes leftover after parsing attributes in process `syz.3.9380'. [ 1353.460122][ T9147] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1353.474054][ T9333] tipc: Enabled bearer , priority 0 [ 1353.485935][ T9334] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9378'. [ 1353.664091][ T9335] syzkaller0: entered promiscuous mode [ 1353.669603][ T9335] syzkaller0: entered allmulticast mode [ 1353.699746][ T9147] hsr_slave_0: entered promiscuous mode [ 1353.729927][ T9147] hsr_slave_1: entered promiscuous mode [ 1353.752457][ T9147] debugfs: 'hsr0' already exists in 'hsr' [ 1353.774113][ T9351] netlink: 56 bytes leftover after parsing attributes in process `syz.1.9381'. [ 1353.793628][ T9147] Cannot create hsr debugfs directory [ 1353.819809][ T9327] tipc: Resetting bearer [ 1353.882522][ T5830] Bluetooth: hci5: command tx timeout [ 1353.909148][ T9327] tipc: Disabling bearer [ 1354.004657][ T9354] wg1 speed is unknown, defaulting to 1000 [ 1354.478776][ T9370] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9387'. [ 1354.739214][ T9374] syzkaller0: entered promiscuous mode [ 1354.762482][ T9374] syzkaller0: entered allmulticast mode [ 1355.194650][ T9380] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1355.334286][ T9386] netlink: 36 bytes leftover after parsing attributes in process `syz.2.9392'. [ 1355.391123][ T9385] C: renamed from lo (while UP) [ 1355.400974][ T9385] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1355.401972][ T9388] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9393'. [ 1355.458345][ T9390] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1355.640881][ T9394] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9394'. [ 1355.707637][ T9147] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1355.749949][ T9147] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1355.785984][ T9147] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1355.869086][ T9147] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1355.961901][ T5830] Bluetooth: hci5: command tx timeout [ 1356.111530][ T9414] mac80211_hwsim hwsim135 ªªªªª;€: renamed from wlan0 [ 1356.148133][ T9416] netlink: 165 bytes leftover after parsing attributes in process `syz.3.9400'. [ 1356.187516][ T9416] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9400'. [ 1356.246481][ T9147] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1356.326996][ T9147] 8021q: adding VLAN 0 to HW filter on device team0 [ 1356.374554][T30251] bridge0: port 1(bridge_slave_0) entered blocking state [ 1356.381767][T30251] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1356.439898][T30251] bridge0: port 2(bridge_slave_1) entered blocking state [ 1356.447155][T30251] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1356.820478][ T9435] wg1 speed is unknown, defaulting to 1000 [ 1356.903991][ T9446] netlink: 'syz.2.9407': attribute type 1 has an invalid length. [ 1357.057855][ T9446] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1357.529218][ T9147] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1357.593754][ T9467] batadv1: entered promiscuous mode [ 1357.599125][ T9467] batadv1: entered allmulticast mode [ 1357.609327][ T9467] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1357.632763][ T9461] wg1 speed is unknown, defaulting to 1000 [ 1357.984967][ T9147] veth0_vlan: entered promiscuous mode [ 1358.024816][ T9147] veth1_vlan: entered promiscuous mode [ 1358.136950][ T9147] veth0_macvtap: entered promiscuous mode [ 1358.179876][ T9468] wg1 speed is unknown, defaulting to 1000 [ 1358.209484][ T9147] veth1_macvtap: entered promiscuous mode [ 1358.350651][ T9147] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1358.396225][ T9147] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1358.503832][T31977] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1358.528485][T31977] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1358.547957][T31977] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1358.619359][T31977] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1359.125777][T31977] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1359.142365][T31977] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1359.270424][T30248] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1359.321959][T30248] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1359.554115][ T9484] netlink: 'syz.5.9417': attribute type 15 has an invalid length. [ 1359.610150][ T9486] bond1: option tlb_dynamic_lb: invalid value (71) [ 1359.629548][ T9486] bond1 (unregistering): Released all slaves [ 1359.657165][ T9491] __nla_validate_parse: 2 callbacks suppressed [ 1359.657184][ T9491] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9418'. [ 1359.685939][ T9489] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9326'. [ 1359.722788][ T9489] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9326'. [ 1360.936000][ T9550] tc_dump_action: action bad kind [ 1360.958024][ T9550] netlink: 'syz.3.9433': attribute type 1 has an invalid length. [ 1360.986979][ T9550] netlink: 72 bytes leftover after parsing attributes in process `syz.3.9433'. [ 1361.027033][ T9550] netlink: 97 bytes leftover after parsing attributes in process `syz.3.9433'. [ 1361.103983][ T9552] netlink: 105 bytes leftover after parsing attributes in process `syz.1.9434'. [ 1361.306953][ T9561] netlink: 'syz.3.9437': attribute type 1 has an invalid length. [ 1361.337901][ T9561] netlink: 248 bytes leftover after parsing attributes in process `syz.3.9437'. [ 1361.368202][ T9563] wg1 speed is unknown, defaulting to 1000 [ 1362.341267][ T9603] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9448'. [ 1362.383304][ T9606] mac80211_hwsim hwsim97 wlan1: entered allmulticast mode [ 1362.428966][ T9606] veth0_to_bridge: left allmulticast mode [ 1362.435699][ T9606] veth0_to_bridge: left promiscuous mode [ 1362.443830][ T9606] bridge0: port 3(veth0_to_bridge) entered disabled state [ 1362.454703][ T9610] netlink: 'syz.3.9450': attribute type 58 has an invalid length. [ 1362.472822][ T9610] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9450'. [ 1362.486551][ T9606] bridge_slave_0: left allmulticast mode [ 1362.508272][ T9606] bridge_slave_0: left promiscuous mode [ 1362.524864][ T9606] bridge0: port 1(bridge_slave_0) entered disabled state [ 1362.553672][ T9607] netlink: 'syz.5.9449': attribute type 10 has an invalid length. [ 1362.593774][ T9606] bridge_slave_1: left allmulticast mode [ 1362.599467][ T9606] bridge_slave_1: left promiscuous mode [ 1362.623621][ T9606] bridge0: port 2(bridge_slave_1) entered disabled state [ 1362.625212][ T9613] netlink: 'syz.0.9451': attribute type 11 has an invalid length. [ 1362.647177][ T9606] team0: Port device team_slave_0 removed [ 1362.660621][ T9606] team0: Port device team_slave_1 removed [ 1362.685199][ T9606] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1362.713521][ T9606] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1362.746962][ T9606] bond0: (slave bond7): Releasing backup interface [ 1362.768243][ T9606] bond0: (slave bond7): the permanent HWaddr of slave - ba:6f:fc:e6:dc:ed - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 1362.793808][ T9606] bond0: (slave bond9): Releasing backup interface [ 1362.851110][ T9607] mac80211_hwsim hwsim97 wlan1: left allmulticast mode [ 1362.862522][ T9619] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1363.691638][ T9633] delete_channel: no stack [ 1363.913473][ T9660] netlink: 'syz.0.9460': attribute type 12 has an invalid length. [ 1363.989916][ T9661] tipc: Enabled bearer , priority 0 [ 1363.997868][ T9661] syzkaller0: entered promiscuous mode [ 1364.006168][ T9661] syzkaller0: entered allmulticast mode [ 1364.050256][ T9661] tipc: Resetting bearer [ 1364.068664][ T9655] tipc: Resetting bearer [ 1364.167818][ T9655] tipc: Disabling bearer [ 1364.266513][ T9649] syzkaller1: entered promiscuous mode [ 1364.272300][ T9649] syzkaller1: entered allmulticast mode [ 1364.328268][ T9674] geneve2: entered promiscuous mode [ 1364.547629][ T9686] netlink: 76 bytes leftover after parsing attributes in process `syz.0.9472'. [ 1364.679077][ T9686] mac80211_hwsim hwsim142 wlan1: entered allmulticast mode [ 1364.716753][ T9686] netlink: 52 bytes leftover after parsing attributes in process `syz.0.9472'. [ 1364.792560][ T9690] tipc: Started in network mode [ 1364.811693][ T9690] tipc: Node identity aef425f8d136, cluster identity 4711 [ 1364.859342][ T9690] tipc: Enabled bearer , priority 0 [ 1364.906207][ T9698] syzkaller0: entered promiscuous mode [ 1364.926131][ T9698] syzkaller0: entered allmulticast mode [ 1365.040178][ T9707] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9477'. [ 1365.061729][ T9705] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9476'. [ 1365.076382][ T9701] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9476'. [ 1365.093479][ T9690] tipc: Resetting bearer [ 1365.116257][ T9707] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9477'. [ 1365.164825][ T9707] netlink: 'syz.2.9477': attribute type 12 has an invalid length. [ 1365.202595][ T9707] netlink: 'syz.2.9477': attribute type 11 has an invalid length. [ 1365.438668][ T9863] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1365.506528][ T9706] tipc: Resetting bearer [ 1365.544361][ T9706] tipc: Disabling bearer [ 1365.803674][ T9863] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1365.859188][ T9730] netlink: 'syz.1.9486': attribute type 2 has an invalid length. [ 1366.064879][ T9863] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1366.211773][ T9750] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9491'. [ 1366.299551][ T9763] netlink: 201916 bytes leftover after parsing attributes in process `syz.0.9493'. [ 1366.352161][ T9763] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1366.389707][ T9863] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1366.400361][ T9767] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9493'. [ 1366.496436][ T9756] wg1 speed is unknown, defaulting to 1000 [ 1366.838534][T31974] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20001 - 0 [ 1366.901812][T30251] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20001 - 0 [ 1367.012465][ T9747] delete_channel: no stack [ 1367.031615][T30248] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20001 - 0 [ 1367.075000][T30251] netdevsim netdevsim4 eth4: set [1, 0] type 2 family 0 port 20001 - 0 [ 1367.186288][ T9778] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9496'. [ 1367.291543][ T9784] netlink: 'syz.3.9498': attribute type 10 has an invalid length. [ 1367.299429][ T9784] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9498'. [ 1368.004182][ T9863] bond1 (unregistering): (slave gretap1): Releasing active interface [ 1369.123261][ T9863] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 1369.143972][ T9863] bond0 (unregistering): Released all slaves [ 1369.180879][ T9863] bond1 (unregistering): Released all slaves [ 1369.205446][ T9863] bond2 (unregistering): Released all slaves [ 1369.373498][ T9863] bond3 (unregistering): Released all slaves [ 1369.404010][ T9782] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 1369.422353][ T9782] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 1369.424949][ T9784] batman_adv: batadv0: Adding interface: virt_wifi0 [ 1369.439664][ T9784] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1369.443601][ T9782] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1369.512983][ T9784] batman_adv: batadv0: Interface activated: virt_wifi0 [ 1369.748786][ T9832] netlink: 'syz.0.9509': attribute type 1 has an invalid length. [ 1369.793735][ T9829] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1369.867570][ T9838] __nla_validate_parse: 1 callbacks suppressed [ 1369.867588][ T9838] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9510'. [ 1369.878209][ T9804] wg1 speed is unknown, defaulting to 1000 [ 1370.019830][ T9829] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1370.143783][ T9843] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9512'. [ 1370.202319][ T9829] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1370.397479][ T9829] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1370.590276][ T9834] wg1 speed is unknown, defaulting to 1000 [ 1370.608149][T31945] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1370.632864][T31945] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1370.685133][T31977] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1370.701726][ T9857] netlink: 'syz.5.9514': attribute type 4 has an invalid length. [ 1370.737467][T31977] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1371.256162][ T9864] netlink: 60 bytes leftover after parsing attributes in process `syz.3.9517'. [ 1371.683089][ T9863] hsr_slave_0: left promiscuous mode [ 1371.699927][ T9863] hsr_slave_1: left promiscuous mode [ 1371.769263][ T9863] veth1_macvtap: left promiscuous mode [ 1371.778585][ T9863] veth0_macvtap: left promiscuous mode [ 1371.785426][ T9863] veth1_vlan: left promiscuous mode [ 1371.791048][ T9863] veth0_vlan: left promiscuous mode [ 1373.752630][ T9884] tipc: Enabled bearer , priority 0 [ 1373.759780][ T9885] mac80211_hwsim hwsim131 syzkaller0: entered promiscuous mode [ 1373.778604][ T9885] mac80211_hwsim hwsim131 syzkaller0: entered allmulticast mode [ 1373.818451][ T9885] tipc: Resetting bearer [ 1373.884263][ T9888] tipc: Resetting bearer [ 1373.906551][ T9892] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9520'. [ 1373.951713][ T9892] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9520'. [ 1374.178686][ T9898] netlink: 'syz.5.9522': attribute type 9 has an invalid length. [ 1374.186938][ T9898] netlink: 184 bytes leftover after parsing attributes in process `syz.5.9522'. [ 1374.401126][ T9909] wg1 speed is unknown, defaulting to 1000 [ 1374.410861][ T9863] IPVS: stop unused estimator thread 0... [ 1374.775962][T30251] tipc: Resetting bearer [ 1375.006689][ T9912] veth0_to_batadv: entered allmulticast mode [ 1375.098152][ T9927] wg1 speed is unknown, defaulting to 1000 [ 1375.954448][ T9960] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9539'. [ 1376.256751][ T9968] netlink: 256 bytes leftover after parsing attributes in process `syz.1.9542'. [ 1376.316953][ T9967] team_slave_0: entered promiscuous mode [ 1376.322744][ T9967] team_slave_1: entered promiscuous mode [ 1376.330210][ T9967] macsec1: entered promiscuous mode [ 1376.342683][ T9967] team0: entered promiscuous mode [ 1376.349794][ T9967] team0: Device macsec1 is already an upper device of the team interface [ 1376.382922][ T9967] team0: left promiscuous mode [ 1376.388398][ T9967] team_slave_0: left promiscuous mode [ 1376.393945][ T9967] team_slave_1: left promiscuous mode [ 1377.061807][ T9975] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 1377.315564][ T9988] netlink: 6 bytes leftover after parsing attributes in process `syz.3.9546'. [ 1377.782425][ T9995] wg1 speed is unknown, defaulting to 1000 [ 1377.909689][T10008] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9549'. [ 1378.442349][ T5830] Bluetooth: hci2: command 0x0406 tx timeout [ 1379.226958][T10055] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9559'. [ 1379.748602][T10075] mac80211_hwsim hwsim131 syzkaller0: left promiscuous mode [ 1379.791641][T10075] mac80211_hwsim hwsim131 syzkaller0: left allmulticast mode [ 1379.814715][T10075] tipc: Resetting bearer [ 1380.048679][T10089] sctp: [Deprecated]: syz.3.9566 (pid 10089) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1380.048679][T10089] Use struct sctp_sack_info instead [ 1380.300285][T10106] netlink: 52 bytes leftover after parsing attributes in process `syz.2.9567'. [ 1380.313169][T10104] sctp: [Deprecated]: syz.1.9570 (pid 10104) Use of int in max_burst socket option deprecated. [ 1380.313169][T10104] Use struct sctp_assoc_value instead [ 1380.344064][T10107] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9571'. [ 1380.539781][T10116] wg1 speed is unknown, defaulting to 1000 [ 1380.762551][T10125] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9575'. [ 1380.901719][T10131] Cannot find add_set index 0 as target [ 1381.017637][T10138] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9577'. [ 1381.124230][T10140] 8021q: VLANs not supported on vcan0 [ 1381.514305][T10158] netlink: 'syz.1.9584': attribute type 1 has an invalid length. [ 1381.716163][T10169] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9586'. [ 1382.311513][T10194] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9591'. [ 1382.364525][T10194] netlink: 'syz.1.9591': attribute type 1 has an invalid length. [ 1382.547839][T10194] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1382.871908][T28374] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1382.883735][T28374] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1382.893858][T28374] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1382.903696][T28374] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1382.911814][T28374] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1383.164886][T10208] wg1 speed is unknown, defaulting to 1000 [ 1383.840128][T21794] netdevsim netdevsim5 eth5: set [1, 0] type 2 family 0 port 20001 - 0 [ 1383.886646][T10226] wg1 speed is unknown, defaulting to 1000 [ 1383.963903][T10234] tipc: Enabling of bearer rejected, failed to enable media [ 1384.079212][ T36] netdevsim netdevsim5 eth6: set [1, 0] type 2 family 0 port 20001 - 0 [ 1384.159534][ T36] netdevsim netdevsim5 eth7: set [1, 0] type 2 family 0 port 20001 - 0 [ 1384.191808][T31974] netdevsim netdevsim5 eth8: set [1, 0] type 2 family 0 port 20001 - 0 [ 1384.314495][T10244] netlink: 'syz.3.9604': attribute type 2 has an invalid length. [ 1384.338714][T10244] netlink: 'syz.3.9604': attribute type 9 has an invalid length. [ 1384.383009][T10244] netlink: 'syz.3.9604': attribute type 1 has an invalid length. [ 1384.390910][T10244] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.9604'. [ 1384.443383][T10244] netlink: 'syz.3.9604': attribute type 11 has an invalid length. [ 1384.688532][T10258] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9606'. [ 1384.726621][T10257] netlink: 36 bytes leftover after parsing attributes in process `syz.1.9606'. [ 1385.004473][T28374] Bluetooth: hci1: command tx timeout [ 1385.398056][T30248] bond1 (unregistering): Released all slaves [ 1385.569438][T30248] bond2 (unregistering): Released all slaves [ 1385.588050][T30248] bond3 (unregistering): Released all slaves [ 1385.744995][T30248] bond4 (unregistering): Released all slaves [ 1385.764083][T30248] bond0 (unregistering): Released all slaves [ 1385.916967][T30248] bond5 (unregistering): Released all slaves [ 1385.934936][T30248] bond6 (unregistering): Released all slaves [ 1386.090886][T30248] bond7 (unregistering): Released all slaves [ 1386.108515][T30248] bond8 (unregistering): Released all slaves [ 1386.285222][T30248] bond9 (unregistering): Released all slaves [ 1386.304094][T30248] bond10 (unregistering): Released all slaves [ 1386.322416][T30248] bond11 (unregistering): Released all slaves [ 1386.473086][T30248] bond12 (unregistering): Released all slaves [ 1386.491012][T30248] bond13 (unregistering): Released all slaves [ 1386.508754][T30248] bond14 (unregistering): Released all slaves [ 1386.795380][T30248] tipc: Left network mode [ 1386.997028][T10271] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1387.083899][T28374] Bluetooth: hci1: command tx timeout [ 1387.103946][T10271] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1387.359629][T10271] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1387.455977][T10208] chnl_net:caif_netlink_parms(): no params data found [ 1387.498945][T10271] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1387.534302][T10281] netlink: 'syz.3.9611': attribute type 10 has an invalid length. [ 1387.554248][T10281] team0: Port device dummy0 added [ 1387.830649][T10288] netlink: 48 bytes leftover after parsing attributes in process `syz.0.9613'. [ 1387.874372][T10289] netlink: 'syz.2.9614': attribute type 1 has an invalid length. [ 1388.042767][ T36] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1388.213659][T31974] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1388.237470][T31974] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1388.340992][T10208] bridge0: port 1(bridge_slave_0) entered blocking state [ 1388.386912][T10208] bridge0: port 1(bridge_slave_0) entered disabled state [ 1388.432033][T10208] bridge_slave_0: entered allmulticast mode [ 1388.493944][T10309] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9617'. [ 1388.501666][T10208] bridge_slave_0: entered promiscuous mode [ 1388.525817][T10208] bridge0: port 2(bridge_slave_1) entered blocking state [ 1388.571577][T10208] bridge0: port 2(bridge_slave_1) entered disabled state [ 1388.579593][T10208] bridge_slave_1: entered allmulticast mode [ 1388.630546][T10311] netlink: 'syz.2.9619': attribute type 1 has an invalid length. [ 1388.652216][T10208] bridge_slave_1: entered promiscuous mode [ 1388.670376][T31974] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1388.705438][T10309] bridge_slave_1: left allmulticast mode [ 1388.711127][T10309] bridge_slave_1: left promiscuous mode [ 1388.743324][T10309] bridge0: port 2(bridge_slave_1) entered disabled state [ 1388.784233][T10309] bridge_slave_0: left allmulticast mode [ 1388.789927][T10309] bridge_slave_0: left promiscuous mode [ 1388.800790][T10315] netlink: 156 bytes leftover after parsing attributes in process `syz.1.9620'. [ 1388.832313][T10309] bridge0: port 1(bridge_slave_0) entered disabled state [ 1388.917464][T10320] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9621'. [ 1389.170006][T28374] Bluetooth: hci1: command tx timeout [ 1390.413577][T10307] wg1 speed is unknown, defaulting to 1000 [ 1390.559151][T10208] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1390.597277][T10208] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1390.801818][T10339] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9627'. [ 1390.812180][T10208] team0: Port device team_slave_0 added [ 1390.825581][T10208] team0: Port device team_slave_1 added [ 1391.216375][T10208] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1391.226406][T10208] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1391.265626][T28374] Bluetooth: hci1: command tx timeout [ 1391.282840][T10208] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1391.300968][T10208] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1391.308709][T10208] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1391.335308][T10208] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1391.838597][T10208] hsr_slave_0: entered promiscuous mode [ 1391.847126][T10208] hsr_slave_1: entered promiscuous mode [ 1391.894943][T30248] IPVS: stop unused estimator thread 0... [ 1392.357679][T10391] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9640'. [ 1392.525815][T10389] wg1 speed is unknown, defaulting to 1000 [ 1392.790151][T10208] netdevsim netdevsim5 eth8 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 1393.777155][T10208] netdevsim netdevsim5 eth7 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 1393.805802][T10414] netlink: 36 bytes leftover after parsing attributes in process `syz.3.9646'. [ 1393.896722][T10414] macvlan0: entered allmulticast mode [ 1393.977389][T10208] netdevsim netdevsim5 eth6 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 1394.277720][T10208] netdevsim netdevsim5 eth5 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 1394.676372][T10434] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9650'. [ 1394.861802][T10434] dummy0: entered promiscuous mode [ 1394.887581][T10434] macvtap1: entered promiscuous mode [ 1394.922746][T10434] macvtap1: entered allmulticast mode [ 1394.958935][T10434] dummy0: entered allmulticast mode [ 1395.054029][T10208] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1395.087637][T10208] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1395.143662][T10208] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1395.212070][T10208] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1395.560447][T10208] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1395.634389][T10208] 8021q: adding VLAN 0 to HW filter on device team0 [ 1395.668094][T30248] bridge0: port 1(bridge_slave_0) entered blocking state [ 1395.675338][T30248] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1395.733493][T10470] netlink: 'syz.0.9657': attribute type 10 has an invalid length. [ 1395.788040][T10470] 8021q: adding VLAN 0 to HW filter on device team0 [ 1395.804472][T10470] bond0: (slave team0): Enslaving as an active interface with an up link [ 1395.873809][T31974] bridge0: port 2(bridge_slave_1) entered blocking state [ 1395.881080][T31974] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1396.017776][T10477] netlink: 'syz.0.9659': attribute type 12 has an invalid length. [ 1396.036000][T10477] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.9659'. [ 1396.058757][T10208] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1396.458330][T10491] sctp: [Deprecated]: syz.2.9663 (pid 10491) Use of int in max_burst socket option. [ 1396.458330][T10491] Use struct sctp_assoc_value instead [ 1396.467940][T10493] netlink: 'syz.3.9661': attribute type 1 has an invalid length. [ 1396.540874][T10491] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9663'. [ 1396.614243][T10484] bond8: (slave gretap1): making interface the new active one [ 1396.623580][T10484] bond8: (slave gretap1): Enslaving as an active interface with an up link [ 1396.648641][T10484] netlink: 60 bytes leftover after parsing attributes in process `syz.3.9661'. [ 1396.755475][T10208] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1397.000587][T10513] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9667'. [ 1397.009831][T10513] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9667'. [ 1397.041610][T10513] netlink: 'syz.2.9667': attribute type 14 has an invalid length. [ 1397.050922][T10518] tipc: Started in network mode [ 1397.074157][T10518] tipc: Node identity 525b47f6f722, cluster identity 4711 [ 1397.112546][T10518] tipc: Enabled bearer , priority 0 [ 1397.150630][T10522] netlink: 'syz.1.9670': attribute type 4 has an invalid length. [ 1397.173660][T28374] block nbd0: Receive control failed (result -32) [ 1397.182902][T10523] syzkaller0: entered promiscuous mode [ 1397.228064][T10523] syzkaller0: entered allmulticast mode [ 1397.310509][T10529] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9669'. [ 1397.313543][T10518] tipc: Resetting bearer [ 1397.385743][T10516] tipc: Resetting bearer [ 1397.459029][T10516] tipc: Disabling bearer [ 1397.472270][T10537] netlink: 'syz.2.9672': attribute type 1 has an invalid length. [ 1397.487463][T10526] wg1 speed is unknown, defaulting to 1000 [ 1397.506519][T10537] netlink: 184 bytes leftover after parsing attributes in process `syz.2.9672'. [ 1397.517553][T10537] netlink: 'syz.2.9672': attribute type 1 has an invalid length. [ 1397.777495][T10208] veth0_vlan: entered promiscuous mode [ 1397.839085][T10208] veth1_vlan: entered promiscuous mode [ 1398.023468][T10208] veth0_macvtap: entered promiscuous mode [ 1398.054099][T10208] veth1_macvtap: entered promiscuous mode [ 1398.236426][T10558] netlink: 224 bytes leftover after parsing attributes in process `syz.0.9678'. [ 1398.262607][T10208] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1398.279873][T10556] netlink: 'syz.0.9678': attribute type 4 has an invalid length. [ 1398.299248][T10560] sit0: entered promiscuous mode [ 1398.370964][T10560] netlink: 'syz.1.9679': attribute type 1 has an invalid length. [ 1398.388301][T10208] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1398.446201][T31974] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1398.483481][T31974] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1398.545658][T31974] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1398.606128][T31974] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1398.777790][ T9426] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1398.801715][ T9426] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1398.873910][T10575] __nla_validate_parse: 5 callbacks suppressed [ 1398.873929][T10575] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9684'. [ 1398.901816][T30251] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1398.918004][T30251] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1398.940263][T10575] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1399.078780][T10575] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1399.131021][T10579] syzkaller1: entered promiscuous mode [ 1399.161775][T10579] syzkaller1: entered allmulticast mode [ 1399.183586][T10575] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1399.200699][T10585] netlink: 'syz.3.9687': attribute type 10 has an invalid length. [ 1399.316688][T10575] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1399.379653][T10591] netlink: 16 bytes leftover after parsing attributes in process `syz.5.9588'. [ 1399.410073][T10591] bond0: entered promiscuous mode [ 1399.452121][T10591] bond_slave_0: entered promiscuous mode [ 1399.462202][T10596] netlink: 16 bytes leftover after parsing attributes in process `syz.5.9588'. [ 1399.469901][T10591] bond_slave_1: entered promiscuous mode [ 1399.481792][T10599] netlink: 32 bytes leftover after parsing attributes in process `syz.2.9688'. [ 1399.547911][T10591] bond0: left promiscuous mode [ 1399.573765][T10591] bond_slave_0: left promiscuous mode [ 1399.579789][T10591] bond_slave_1: left promiscuous mode [ 1399.710377][T10594] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9689'. [ 1399.764527][T10596] bond0: entered promiscuous mode [ 1399.769605][T10596] bond_slave_0: entered promiscuous mode [ 1399.796853][T10596] bond_slave_1: entered promiscuous mode [ 1399.818568][T10596] bond0: left promiscuous mode [ 1399.834048][T10596] bond_slave_0: left promiscuous mode [ 1399.851228][T10596] bond_slave_1: left promiscuous mode [ 1400.380447][T10616] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9693'. [ 1400.392401][T31974] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1400.454167][T31974] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1400.463724][T10616] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9693'. [ 1400.487706][T10615] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1400.575558][T10615] bond3: (slave macvlan2): Enslaving as an active interface with a down link [ 1400.634292][T10623] bridge0: port 1(syz_tun) entered blocking state [ 1400.644137][T10623] bridge0: port 1(syz_tun) entered disabled state [ 1400.650828][T10623] syz_tun: entered allmulticast mode [ 1400.677720][T10623] syz_tun: entered promiscuous mode [ 1400.702823][T10623] bridge0: port 1(syz_tun) entered blocking state [ 1400.709419][T10623] bridge0: port 1(syz_tun) entered forwarding state [ 1400.757232][ T9426] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1400.838290][ T9426] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1401.124938][T10644] bridge0: entered promiscuous mode [ 1401.131454][T10644] bridge0: entered allmulticast mode [ 1401.208262][T10615] infiniband syz1: set active [ 1401.222266][T10615] infiniband syz1: added syz_tun [ 1401.228646][T10615] syz1: rxe_create_cq: returned err = -12 [ 1401.260781][T10615] infiniband syz1: Couldn't create ib_mad CQ [ 1401.305119][T10615] infiniband syz1: Couldn't open port 1 [ 1401.474401][T10615] RDS/IB: syz1: added [ 1401.492774][T10615] smc: adding ib device syz1 with port count 1 [ 1401.518622][T10615] smc: ib device syz1 port 1 has no pnetid [ 1401.725229][T10664] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9705'. [ 1401.779700][T10663] wg1 speed is unknown, defaulting to 1000 [ 1402.495248][T10672] bridge1: entered allmulticast mode [ 1403.508570][T10698] wg1 speed is unknown, defaulting to 1000 [ 1403.519205][T10700] validate_nla: 2 callbacks suppressed [ 1403.519225][T10700] netlink: 'syz.3.9719': attribute type 10 has an invalid length. [ 1403.557657][T10700] netlink: 'syz.3.9719': attribute type 10 has an invalid length. [ 1403.582963][T10700] team0: Port device dummy0 removed [ 1403.593864][T10700] dummy0: entered promiscuous mode [ 1403.608346][T10700] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1403.777170][T10703] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1403.807986][T10703] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9720'. [ 1404.144675][T10709] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9722'. [ 1404.304261][T10719] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9722'. [ 1404.405309][T10713] tipc: Enabling of bearer rejected, already enabled [ 1404.415552][T10715] mac80211_hwsim hwsim131 syzkaller0: entered promiscuous mode [ 1404.432642][T10715] mac80211_hwsim hwsim131 syzkaller0: entered allmulticast mode [ 1404.440888][T10715] tipc: Resetting bearer [ 1404.675490][T10728] netlink: 32 bytes leftover after parsing attributes in process `syz.3.9725'. [ 1404.698125][T10728] netlink: 32 bytes leftover after parsing attributes in process `syz.3.9725'. [ 1405.746212][T10767] netlink: 20824 bytes leftover after parsing attributes in process `syz.3.9734'. [ 1405.769858][T10767] netlink: 212284 bytes leftover after parsing attributes in process `syz.3.9734'. [ 1405.779944][T10767] openvswitch: netlink: Message has 25 unknown bytes. [ 1406.058414][T10776] netlink: 32 bytes leftover after parsing attributes in process `syz.5.9736'. [ 1406.944433][T10802] netlink: 'syz.0.9741': attribute type 10 has an invalid length. [ 1407.150380][T10795] bond0: (slave team0): Releasing backup interface [ 1407.230017][T10795] bond0: (slave bond_slave_0): Releasing backup interface [ 1407.282163][T10795] bond0: (slave bond_slave_1): Releasing backup interface [ 1407.336702][T10795] team0: Port device team_slave_0 removed [ 1407.418083][T10795] team0: Port device team_slave_1 removed [ 1407.453025][T10795] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1407.470528][T10795] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1407.513783][T10795] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1407.522678][T10795] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1407.537147][T10795] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1407.555125][T10802] mac80211_hwsim hwsim142 wlan1: left allmulticast mode [ 1407.637826][T10802] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1407.662888][T10802] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1407.675378][T10803] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 1407.685579][T10808] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 1407.741454][T10803] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 1407.784037][T10803] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1408.209212][T10833] IPVS: set_ctl: invalid protocol: 59 224.0.0.1:20001 [ 1408.220482][T10834] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9749'. [ 1408.230036][T10834] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9749'. [ 1408.345703][T10836] netlink: 104 bytes leftover after parsing attributes in process `syz.1.9751'. [ 1408.581934][T10842] netlink: 'syz.1.9751': attribute type 21 has an invalid length. [ 1408.773022][T10849] netlink: 'syz.0.9753': attribute type 10 has an invalid length. [ 1408.783996][T10849] batman_adv: batadv0: Adding interface: virt_wifi0 [ 1408.790701][T10849] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1408.821806][T10849] batman_adv: batadv0: Interface activated: virt_wifi0 [ 1409.164602][T10863] netlink: 'syz.3.9757': attribute type 1 has an invalid length. [ 1409.181700][T10863] netlink: 'syz.3.9757': attribute type 2 has an invalid length. [ 1409.205168][T10863] netlink: 'syz.3.9757': attribute type 1 has an invalid length. [ 1409.250798][T10863] netlink: 'syz.3.9757': attribute type 2 has an invalid length. [ 1409.282689][T10863] __nla_validate_parse: 7 callbacks suppressed [ 1409.282710][T10863] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9757'. [ 1409.297929][T10863] netlink: 'syz.3.9757': attribute type 21 has an invalid length. [ 1413.687525][T10889] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9764'. [ 1414.293769][T10871] wg1 speed is unknown, defaulting to 1000 [ 1415.040042][T10844] wg1 speed is unknown, defaulting to 1000 [ 1415.772685][T10872] wg1 speed is unknown, defaulting to 1000 [ 1416.560138][T10899] wg1 speed is unknown, defaulting to 1000 [ 1417.273565][T10953] netlink: 84 bytes leftover after parsing attributes in process `syz.5.9778'. [ 1417.322135][T10949] bridge_slave_0: left allmulticast mode [ 1417.371224][T10949] bridge_slave_0: left promiscuous mode [ 1417.398019][T10949] bridge0: port 1(bridge_slave_0) entered disabled state [ 1417.485545][T10949] bridge_slave_1: left allmulticast mode [ 1417.517799][T10949] bridge_slave_1: left promiscuous mode [ 1417.533655][T10957] netlink: 'syz.1.9779': attribute type 4 has an invalid length. [ 1417.573270][T10949] bridge0: port 2(bridge_slave_1) entered disabled state [ 1417.628584][T10949] bond0: (slave bond_slave_0): Releasing backup interface [ 1417.727391][T10949] bond0: (slave bond_slave_1): Releasing backup interface [ 1417.928751][T10949] team0: Port device team_slave_0 removed [ 1417.947933][T10949] team0: Port device team_slave_1 removed [ 1417.956042][T10949] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1417.980415][T10949] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1418.146638][T10949] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1418.182838][T10949] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1418.206676][T10949] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1418.316349][T10954] netlink: 'syz.1.9779': attribute type 12 has an invalid length. [ 1418.327403][T10955] team0: Mode changed to "activebackup" [ 1418.413981][T10958] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1418.457399][T10959] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1419.019741][T10974] netlink: 20 bytes leftover after parsing attributes in process `syz.5.9784'. [ 1420.510625][T10984] wg1 speed is unknown, defaulting to 1000 [ 1420.648520][T10994] batadv0: entered promiscuous mode [ 1420.662687][T10994] macvtap1: entered promiscuous mode [ 1420.672663][T10994] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 1420.748556][T10994] batadv0: left promiscuous mode [ 1420.880721][T10995] batadv0: entered promiscuous mode [ 1420.906944][T10995] macvtap1: entered promiscuous mode [ 1420.923653][T10995] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 1420.955431][T10995] batadv0: left promiscuous mode [ 1421.543798][T11003] wg1 speed is unknown, defaulting to 1000 [ 1421.561001][T11008] netlink: 32 bytes leftover after parsing attributes in process `syz.3.9791'. [ 1422.386554][T11007] wg1 speed is unknown, defaulting to 1000 [ 1423.013227][T11025] syzkaller1: entered promiscuous mode [ 1423.021481][T11025] syzkaller1: entered allmulticast mode [ 1423.049846][T11023] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9796'. [ 1423.552891][T11031] netlink: 68 bytes leftover after parsing attributes in process `syz.3.9799'. [ 1423.753025][T11041] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9801'. [ 1423.972054][T11048] netlink: 80 bytes leftover after parsing attributes in process `syz.3.9803'. [ 1424.751489][T11052] wg1 speed is unknown, defaulting to 1000 [ 1425.024495][T11077] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9811'. [ 1425.296501][T11084] A link change request failed with some changes committed already. Interface vcan0 may have been left with an inconsistent configuration, please check. [ 1425.439792][T11086] netlink: 532 bytes leftover after parsing attributes in process `syz.0.9814'. [ 1426.058900][T11090] wg1 speed is unknown, defaulting to 1000 [ 1426.066182][T11101] vti0: entered promiscuous mode [ 1426.265697][T11107] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 1426.291757][T11107] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 1426.308395][T11107] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 1426.328825][T11107] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 1426.348490][T11107] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 1426.384794][T11107] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 1426.410704][T11107] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 1426.521486][T11107] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 1426.528719][T11107] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 1426.546559][T11107] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 1426.553205][T11107] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 1426.566423][T11107] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 1426.597633][T11107] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 1426.622139][T11107] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 1426.646815][T11107] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 1426.690327][T11107] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 1426.715424][T11107] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 1426.743787][T11107] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 1426.789558][T11107] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 1426.810252][T11107] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 1426.835465][T11107] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 1426.862558][T11107] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 1426.883554][T11107] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 1426.907085][T11107] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 1426.931228][T11107] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 1426.956294][T11107] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 1426.962898][T11107] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 1426.977213][T11107] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 1427.028612][T11107] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 1427.328255][T11116] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9822'. [ 1428.142760][T11141] netlink: 'syz.1.9829': attribute type 4 has an invalid length. [ 1428.231918][T11148] netlink: 'syz.1.9829': attribute type 1 has an invalid length. [ 1428.376627][T11150] netlink: 'syz.5.9831': attribute type 7 has an invalid length. [ 1428.439666][T11150] netlink: 'syz.5.9831': attribute type 8 has an invalid length. [ 1428.663437][T11153] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9832'. [ 1428.744373][T11155] Bluetooth: MGMT ver 1.23 [ 1428.824433][T11152] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9832'. [ 1429.064496][T11165] netlink: 24 bytes leftover after parsing attributes in process `syz.5.9833'. [ 1429.686707][T11181] netlink: 'syz.1.9839': attribute type 1 has an invalid length. [ 1429.768461][T11181] netlink: 'syz.1.9839': attribute type 2 has an invalid length. [ 1430.094788][T11191] dvmrp8: entered allmulticast mode [ 1430.163693][T11199] netlink: 'syz.0.9842': attribute type 13 has an invalid length. [ 1430.172310][T11199] netlink: 'syz.0.9842': attribute type 17 has an invalid length. [ 1430.313988][T11199] 8021q: adding VLAN 0 to HW filter on device team0 [ 1430.372464][T11199] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1430.698186][T11188] wg1 speed is unknown, defaulting to 1000 [ 1430.709043][T11210] syzkaller1: entered promiscuous mode [ 1430.728987][T11210] syzkaller1: entered allmulticast mode [ 1430.746172][T11214] pim6reg1: entered promiscuous mode [ 1430.777797][T11214] pim6reg1: entered allmulticast mode [ 1430.878697][T11187] dvmrp8: left allmulticast mode [ 1430.992571][T11230] netlink: 'syz.0.9850': attribute type 10 has an invalid length. [ 1431.015195][T11230] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9850'. [ 1431.070121][T11232] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9851'. [ 1431.854045][T11255] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9855'. [ 1431.901996][T11256] netlink: 'syz.5.9857': attribute type 3 has an invalid length. [ 1455.891542][T28374] Bluetooth: hci2: command 0x0406 tx timeout [ 1469.479992][T11261] 8021q: VLANs not supported on ipvlan0 [ 1469.634562][ T5830] block nbd2: Receive control failed (result -32) [ 1469.824517][T11279] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9865'. [ 1469.916253][T11283] netlink: 224 bytes leftover after parsing attributes in process `syz.5.9866'. [ 1469.973732][T11287] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9866'. [ 1470.180123][T11297] netlink: 32 bytes leftover after parsing attributes in process `syz.2.9870'. [ 1470.198153][T11294] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9869'. [ 1470.634020][T11307] wg1 speed is unknown, defaulting to 1000 [ 1470.682262][T11316] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1470.718115][T11316] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9877'. [ 1470.793727][T11318] IPVS: sync thread started: state = BACKUP, mcast_ifn = tunl0, syncid = 3, id = 0 [ 1471.339354][T11325] tc_dump_action: action bad kind [ 1471.649457][T11328] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9880'. [ 1471.710709][T11330] team0: Cannot enslave team device to itself [ 1471.722022][T11330] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1471.986839][T11336] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9883'. [ 1473.209189][T11367] validate_nla: 1 callbacks suppressed [ 1473.209210][T11367] netlink: 'syz.2.9887': attribute type 1 has an invalid length. [ 1473.241121][T11367] netlink: 140 bytes leftover after parsing attributes in process `syz.2.9887'. [ 1473.269107][T11367] netlink: 96 bytes leftover after parsing attributes in process `syz.2.9887'. [ 1474.033003][T11390] wg1 speed is unknown, defaulting to 1000 [ 1474.215428][T11403] netlink: 'syz.5.9899': attribute type 4 has an invalid length. [ 1474.279579][T11406] netlink: 'syz.5.9899': attribute type 4 has an invalid length. [ 1474.319881][T11407] sctp: [Deprecated]: syz.0.9901 (pid 11407) Use of int in max_burst socket option. [ 1474.319881][T11407] Use struct sctp_assoc_value instead [ 1474.345363][T11404] netlink: 'syz.1.9900': attribute type 1 has an invalid length. [ 1475.108982][T11430] __nla_validate_parse: 8 callbacks suppressed [ 1475.109001][T11430] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9908'. [ 1475.439457][T11427] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 1475.639860][T11427] vti0: left promiscuous mode [ 1475.753995][ T9426] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1475.791449][ T9426] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1475.987199][ T9426] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1476.010831][ T9426] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1476.088994][T11444] netlink: 32 bytes leftover after parsing attributes in process `syz.5.9911'. [ 1476.362548][T28374] Bluetooth: hci5: command 0x0406 tx timeout [ 1476.668307][T11470] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9917'. [ 1477.115694][ T30] audit: type=1800 audit(1760294175.599:20): pid=11467 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.9915" name="memory.events" dev="tmpfs" ino=701 res=0 errno=0 [ 1477.419347][T11488] netlink: 'syz.5.9923': attribute type 9 has an invalid length. [ 1477.461761][T11488] netlink: 224 bytes leftover after parsing attributes in process `syz.5.9923'. [ 1477.684607][T11494] syzkaller1: entered promiscuous mode [ 1477.690302][T11494] syzkaller1: entered allmulticast mode [ 1477.697252][T11494] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 1477.987603][T11496] wg1 speed is unknown, defaulting to 1000 [ 1478.385109][T11509] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9930'. [ 1478.405608][T11507] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9929'. [ 1478.443625][T11507] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1478.618177][T11507] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1478.960076][T11530] netlink: 40 bytes leftover after parsing attributes in process `syz.5.9936'. [ 1478.976222][T11530] netlink: 40 bytes leftover after parsing attributes in process `syz.5.9936'. [ 1479.009950][T11530] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9936'. [ 1479.212038][T11535] netlink: 136 bytes leftover after parsing attributes in process `syz.0.9937'. [ 1480.558644][T11562] wg1 speed is unknown, defaulting to 1000 [ 1481.781668][T11579] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9946'. [ 1481.821141][T11579] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9946'. [ 1481.825019][T11580] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9947'. [ 1481.861938][T11579] netlink: 'syz.1.9946': attribute type 29 has an invalid length. [ 1481.869816][T11579] netlink: 148 bytes leftover after parsing attributes in process `syz.1.9946'. [ 1481.904414][T11582] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9948'. [ 1482.477654][T11600] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9950'. [ 1483.489974][T11609] xt_l2tp: missing protocol rule (udp|l2tpip) [ 1484.203034][T11631] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 1484.229177][T11634] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 1484.489018][T11637] netlink: 36 bytes leftover after parsing attributes in process `syz.1.9957'. [ 1484.662812][T11650] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9961'. [ 1485.352150][T11682] wg1 speed is unknown, defaulting to 1000 [ 1485.463707][T11684] vlan3: entered allmulticast mode [ 1485.468885][T11684] bond0: entered allmulticast mode [ 1485.531742][T11684] bond_slave_0: entered allmulticast mode [ 1485.537757][T11684] bond_slave_1: entered allmulticast mode [ 1485.591642][T11684] dummy0: entered allmulticast mode [ 1485.668595][T11699] netlink: 16 bytes leftover after parsing attributes in process `syz.5.9971'. [ 1485.717252][T11701] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1486.047813][T11715] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9976'. [ 1486.447297][T11723] batadv0: entered promiscuous mode [ 1486.492043][T11723] macsec2: entered promiscuous mode [ 1486.499344][T11727] netlink: 'syz.2.9979': attribute type 6 has an invalid length. [ 1486.509128][T11723] batadv0: left promiscuous mode [ 1487.260452][T11761] block nbd3: Unsupported socket: should be TCP or UNIX. [ 1487.861529][T11778] IPv6: NLM_F_CREATE should be specified when creating new route [ 1488.535712][T11796] veth1_vlan: left promiscuous mode [ 1488.569363][T11798] netlink: 'syz.3.9998': attribute type 12 has an invalid length. [ 1488.587583][T11796] macvlan1: entered promiscuous mode [ 1488.621451][T11796] macvlan1: entered allmulticast mode [ 1488.689077][T11794] veth1_vlan: entered promiscuous mode [ 1488.702753][T11794] veth1_vlan: entered allmulticast mode [ 1488.904040][T11811] IPVS: set_ctl: invalid protocol: 58 172.30.1.2:20003 [ 1489.232615][T11826] wg1 speed is unknown, defaulting to 1000 [ 1489.241538][T28374] Bluetooth: hci1: command 0x0405 tx timeout [ 1489.951191][T11844] __nla_validate_parse: 3 callbacks suppressed [ 1489.951210][T11844] netlink: 56 bytes leftover after parsing attributes in process `syz.0.10011'. [ 1490.046429][T11844] netlink: 'syz.0.10011': attribute type 1 has an invalid length. [ 1490.517819][T11861] netlink: 'syz.5.10013': attribute type 10 has an invalid length. [ 1490.558158][T11861] team0: Port device dummy0 added [ 1490.616330][T11859] netlink: 'syz.5.10013': attribute type 10 has an invalid length. [ 1490.628789][T11859] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 1490.666638][T11859] team0: Failed to send options change via netlink (err -105) [ 1490.710084][T11859] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 1490.747577][T11859] team0: Port device dummy0 removed [ 1490.768921][T11859] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1490.876234][T11864] netlink: 'syz.0.10014': attribute type 1 has an invalid length. [ 1490.942021][T11864] netlink: 224 bytes leftover after parsing attributes in process `syz.0.10014'. [ 1491.161674][T11873] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10017'. [ 1491.448090][T11886] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 1491.986276][T11890] xt_CT: No such helper "syz1" [ 1492.155515][T11907] €Â: renamed from vlan0 (while UP) [ 1492.176962][T11910] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10025'. [ 1492.440326][T11920] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10030'. [ 1492.635600][T11923] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10029'. [ 1492.889413][T11943] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10033'. [ 1492.971733][T11943] netlink: 132 bytes leftover after parsing attributes in process `syz.3.10033'. [ 1493.007847][T11943] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 1493.338392][T11949] netlink: 'syz.1.10035': attribute type 12 has an invalid length. [ 1493.555374][T11960] wg1 speed is unknown, defaulting to 1000 [ 1493.934358][T11980] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10044'. [ 1495.713830][T12027] netlink: 44 bytes leftover after parsing attributes in process `syz.3.10055'. [ 1495.744533][T12021] bond0: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 1495.782331][T12027] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10055'. [ 1496.525117][T12045] netlink: 416 bytes leftover after parsing attributes in process `syz.1.10063'. [ 1496.684044][T12049] netlink: 'syz.3.10064': attribute type 1 has an invalid length. [ 1497.184234][T12064] wg1 speed is unknown, defaulting to 1000 [ 1497.402537][T12072] netlink: 'syz.3.10073': attribute type 1 has an invalid length. [ 1497.596332][T12072] bond13: entered promiscuous mode [ 1497.743066][T12072] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1497.822265][T12082] netlink: 6 bytes leftover after parsing attributes in process `syz.0.10074'. [ 1497.887377][T12082] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1497.935904][T12075] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1497.944277][T12075] bond13: (slave wireguard0): The slave device specified does not support setting the MAC address [ 1497.963386][T12075] bond13: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 1498.001107][T12075] bond13: (slave wireguard0): making interface the new active one [ 1498.016608][T12075] wireguard0: entered promiscuous mode [ 1498.025290][T12075] bond13: (slave wireguard0): Enslaving as an active interface with an up link [ 1498.289761][T12087] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10075'. [ 1498.548261][T12098] lo: entered promiscuous mode [ 1498.553730][T12098] lo: entered allmulticast mode [ 1498.583758][T12100] tipc: Enabling of bearer rejected, already enabled [ 1498.794452][T12105] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10082'. [ 1498.803766][T12105] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10082'. [ 1499.339262][T12116] netlink: 52 bytes leftover after parsing attributes in process `syz.2.10085'. [ 1499.375590][T12115] wg1 speed is unknown, defaulting to 1000 [ 1499.418137][T12120] netlink: 'syz.5.10086': attribute type 10 has an invalid length. [ 1499.495160][T12120] team0: Port device netdevsim0 added [ 1499.612207][T12129] netlink: 48 bytes leftover after parsing attributes in process `syz.0.10088'. [ 1499.768338][T12125] vlan1: entered promiscuous mode [ 1499.835276][T12125] batadv0: entered promiscuous mode [ 1499.884069][T12139] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10089'. [ 1499.913843][T12139] netlink: 'syz.3.10089': attribute type 7 has an invalid length. [ 1499.931968][T12139] netlink: 'syz.3.10089': attribute type 8 has an invalid length. [ 1500.283729][T12147] veth0: entered promiscuous mode [ 1500.722767][T12167] netlink: 'syz.1.10097': attribute type 13 has an invalid length. [ 1501.034627][T12167] bridge0: port 1(bridge_slave_0) entered disabled state [ 1501.181643][T12167] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1501.275959][T12167] veth1_vlan: left allmulticast mode [ 1501.370347][T12167] veth0_virt_wifi: left allmulticast mode [ 1501.468633][T12143] wg1 speed is unknown, defaulting to 1000 [ 1501.474882][T31974] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1501.511752][T31974] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1501.533031][T31974] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1501.545990][T31974] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1501.674973][T12147] veth0: left promiscuous mode [ 1501.887093][T12184] mac80211_hwsim hwsim138 syzkaller0: entered promiscuous mode [ 1501.912656][T12184] mac80211_hwsim hwsim138 syzkaller0: entered allmulticast mode [ 1502.431477][T12191] __nla_validate_parse: 1 callbacks suppressed [ 1502.431497][T12191] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10103'. [ 1503.007492][T12192] tc_dump_action: action bad kind [ 1503.020863][T12192] netlink: 1372 bytes leftover after parsing attributes in process `syz.1.10102'. [ 1503.593119][T12210] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10108'. [ 1505.302884][T12222] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10111'. [ 1505.604019][T12228] netlink: 'syz.1.10114': attribute type 1 has an invalid length. [ 1505.705728][T12233] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_cmd_wq": -EINTR [ 1506.025518][T12252] netlink: 'syz.5.10118': attribute type 10 has an invalid length. [ 1506.174539][T12252] 8021q: adding VLAN 0 to HW filter on device team0 [ 1506.215473][T12252] bond0: (slave team0): Enslaving as an active interface with an up link [ 1506.284354][T12257] netlink: 132 bytes leftover after parsing attributes in process `syz.1.10120'. [ 1506.697862][T12279] netlink: 24 bytes leftover after parsing attributes in process `syz.5.10124'. [ 1506.818137][T12285] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10125'. [ 1507.222566][T12296] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10127'. [ 1507.675689][T12313] xt_hashlimit: size too large, truncated to 1048576 [ 1508.746988][T12333] wg1 speed is unknown, defaulting to 1000 [ 1508.895700][T12336] bridge2: entered promiscuous mode [ 1508.940614][T12336] bridge2: entered allmulticast mode [ 1509.135332][T12343] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10138'. [ 1509.712014][T12368] x_tables: duplicate underflow at hook 1 [ 1509.832417][T12334] wg1 speed is unknown, defaulting to 1000 [ 1509.979122][T12371] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10145'. [ 1510.060962][T12371] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10145'. [ 1510.709952][T12356] wg1 speed is unknown, defaulting to 1000 [ 1511.192956][T12378] netlink: 204 bytes leftover after parsing attributes in process `syz.0.10148'. [ 1511.322839][T12378] block nbd3: Unsupported socket: should be TCP or UNIX. [ 1511.513341][T12386] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10149'. [ 1513.366367][T12427] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10153'. [ 1514.009528][T12450] netlink: 212388 bytes leftover after parsing attributes in process `syz.0.10162'. [ 1514.051500][T12450] openvswitch: netlink: Duplicate key (type 1). [ 1514.183249][T12447] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10161'. [ 1514.712203][T12463] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10167'. [ 1514.918494][T12474] netlink: 36 bytes leftover after parsing attributes in process `syz.0.10170'. [ 1515.498956][T12489] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 1515.521129][T12489] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 1516.110754][T12485] atm:do_vcc_ioctl: ATM_SETSC is obsolete; used by syz.3.10173:12485 [ 1516.610792][T12520] sysfs: cannot create duplicate filename '/class/ieee80211/!å' [ 1516.659745][T12520] CPU: 1 UID: 0 PID: 12520 Comm: syz.5.10180 Not tainted syzkaller #0 PREEMPT(full) [ 1516.659775][T12520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1516.659788][T12520] Call Trace: [ 1516.659797][T12520] [ 1516.659807][T12520] dump_stack_lvl+0x189/0x250 [ 1516.659836][T12520] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1516.659857][T12520] ? __pfx__printk+0x10/0x10 [ 1516.659885][T12520] ? kernfs_path_from_node+0x2f/0x290 [ 1516.659909][T12520] ? kernfs_path_from_node+0x250/0x290 [ 1516.659931][T12520] ? kernfs_path_from_node+0x2f/0x290 [ 1516.659959][T12520] sysfs_warn_dup+0x8e/0xa0 [ 1516.659983][T12520] sysfs_do_create_link_sd+0xc0/0x110 [ 1516.660010][T12520] device_add_class_symlinks+0x1cf/0x240 [ 1516.660044][T12520] device_add+0x475/0xb50 [ 1516.660078][T12520] wiphy_register+0x1c81/0x2aa0 [ 1516.660123][T12520] ? __pfx_wiphy_register+0x10/0x10 [ 1516.660146][T12520] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 1516.660173][T12520] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 1516.660207][T12520] ieee80211_register_hw+0x3473/0x40d0 [ 1516.660243][T12520] ? ieee80211_register_hw+0x14a1/0x40d0 [ 1516.660272][T12520] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 1516.660289][T12520] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1516.660317][T12520] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1516.660339][T12520] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1516.660371][T12520] ? __hrtimer_setup+0x187/0x210 [ 1516.660392][T12520] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1516.660422][T12520] mac80211_hwsim_new_radio+0x2f7a/0x5220 [ 1516.660490][T12520] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1516.660511][T12520] ? trace_kmalloc+0x1f/0xd0 [ 1516.660535][T12520] ? __kmalloc_node_track_caller_noprof+0x587/0x800 [ 1516.660563][T12520] ? kstrndup+0xbf/0x160 [ 1516.660596][T12520] hwsim_new_radio_nl+0xf5b/0x1bd0 [ 1516.660628][T12520] ? __pfx___nla_validate_parse+0x10/0x10 [ 1516.660671][T12520] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1516.660702][T12520] ? rcu_is_watching+0x15/0xb0 [ 1516.660729][T12520] ? __nla_parse+0x40/0x60 [ 1516.660759][T12520] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 1516.660796][T12520] genl_family_rcv_msg_doit+0x212/0x300 [ 1516.660830][T12520] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1516.660871][T12520] ? bpf_lsm_capable+0x9/0x20 [ 1516.660894][T12520] ? security_capable+0x7e/0x2e0 [ 1516.660933][T12520] genl_rcv_msg+0x60e/0x790 [ 1516.660986][T12520] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1516.661011][T12520] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1516.661052][T12520] netlink_rcv_skb+0x205/0x470 [ 1516.661071][T12520] ? __lock_acquire+0xab9/0xd20 [ 1516.661090][T12520] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1516.661118][T12520] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1516.661160][T12520] ? down_read+0x1ad/0x2e0 [ 1516.661190][T12520] genl_rcv+0x28/0x40 [ 1516.661212][T12520] netlink_unicast+0x82f/0x9e0 [ 1516.661256][T12520] ? __pfx_netlink_unicast+0x10/0x10 [ 1516.661284][T12520] ? netlink_sendmsg+0x642/0xb30 [ 1516.661301][T12520] ? skb_put+0x11b/0x210 [ 1516.661325][T12520] netlink_sendmsg+0x805/0xb30 [ 1516.661357][T12520] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1516.661382][T12520] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1516.661411][T12520] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1516.661437][T12520] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1516.661461][T12520] __sock_sendmsg+0x21c/0x270 [ 1516.661494][T12520] ____sys_sendmsg+0x505/0x830 [ 1516.661526][T12520] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1516.661563][T12520] ? import_iovec+0x74/0xa0 [ 1516.661587][T12520] ___sys_sendmsg+0x21f/0x2a0 [ 1516.661615][T12520] ? __pfx____sys_sendmsg+0x10/0x10 [ 1516.661679][T12520] ? __fget_files+0x2a/0x420 [ 1516.661696][T12520] ? __fget_files+0x3a0/0x420 [ 1516.661727][T12520] __x64_sys_sendmsg+0x19b/0x260 [ 1516.661755][T12520] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1516.661790][T12520] ? do_user_addr_fault+0xc85/0x1380 [ 1516.661816][T12520] ? do_syscall_64+0xbe/0xfa0 [ 1516.661844][T12520] do_syscall_64+0xfa/0xfa0 [ 1516.661865][T12520] ? lockdep_hardirqs_on+0x9c/0x150 [ 1516.661888][T12520] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1516.661908][T12520] ? clear_bhb_loop+0x60/0xb0 [ 1516.661933][T12520] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1516.661952][T12520] RIP: 0033:0x7f34fab8eec9 [ 1516.661971][T12520] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1516.661990][T12520] RSP: 002b:00007f34fb95a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1516.662011][T12520] RAX: ffffffffffffffda RBX: 00007f34fade6090 RCX: 00007f34fab8eec9 [ 1516.662025][T12520] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 1516.662037][T12520] RBP: 00007f34fac11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1516.662049][T12520] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1516.662060][T12520] R13: 00007f34fade6128 R14: 00007f34fade6090 R15: 00007ffc213b0a58 [ 1516.662095][T12520] [ 1517.168742][T12524] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10181'. [ 1517.563586][T28374] Bluetooth: hci0: command tx timeout [ 1517.578129][T12539] ipvlan2: entered promiscuous mode [ 1517.860430][T12559] macvlan0: entered promiscuous mode [ 1517.897597][T12559] batadv0: entered promiscuous mode [ 1517.933002][T12559] hsr1: entered allmulticast mode [ 1517.938074][T12559] macvlan0: entered allmulticast mode [ 1518.001499][T12559] veth1_vlan: entered allmulticast mode [ 1518.007559][T12559] batadv0: entered allmulticast mode [ 1518.129879][T12559] macvlan0: left promiscuous mode [ 1518.149089][T12559] batadv0: left promiscuous mode [ 1518.165637][T12578] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10196'. [ 1518.233755][T12574] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10195'. [ 1518.453609][T12570] wg1 speed is unknown, defaulting to 1000 [ 1519.550240][T12623] syzkaller1: entered promiscuous mode [ 1519.574285][T12623] syzkaller1: entered allmulticast mode [ 1519.670019][T12625] netlink: 'syz.0.10211': attribute type 1 has an invalid length. [ 1519.679841][T12627] Cannot find del_set index 2 as target [ 1519.694165][T12625] netlink: 'syz.0.10211': attribute type 1 has an invalid length. [ 1519.735154][T12625] netlink: 224 bytes leftover after parsing attributes in process `syz.0.10211'. [ 1520.252533][T12638] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10215'. [ 1520.653428][T12645] netlink: 32 bytes leftover after parsing attributes in process `syz.5.10216'. [ 1520.683421][T12645] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10216'. [ 1520.763276][T12637] netlink: 'syz.0.10215': attribute type 15 has an invalid length. [ 1521.307425][T12660] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10219'. [ 1521.388708][T12653] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10218'. [ 1522.498783][T12689] wg1 speed is unknown, defaulting to 1000 [ 1522.574581][T12691] syzkaller1: entered promiscuous mode [ 1522.580104][T12691] syzkaller1: entered allmulticast mode [ 1522.759852][T12699] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10232'. [ 1522.866529][T12699] netlink: 'syz.2.10232': attribute type 1 has an invalid length. [ 1522.899488][T12704] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10233'. [ 1523.447053][T12708] netlink: 'syz.0.10235': attribute type 1 has an invalid length. [ 1523.472029][T12708] netlink: 'syz.0.10235': attribute type 3 has an invalid length. [ 1523.479982][T12708] netlink: 224 bytes leftover after parsing attributes in process `syz.0.10235'. [ 1524.085312][T12731] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1524.282401][T12745] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10249'. [ 1525.446080][T12770] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10259'. [ 1525.635473][T12774] sctp: [Deprecated]: syz.2.10261 (pid 12774) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1525.635473][T12774] Use struct sctp_sack_info instead [ 1525.844183][T12777] netlink: 48 bytes leftover after parsing attributes in process `syz.1.10263'. [ 1525.883946][T12777] tipc: Enabled bearer , priority 0 [ 1525.890891][T12777] tipc: Enabling of bearer rejected, already enabled [ 1525.965543][T12783] netlink: 20824 bytes leftover after parsing attributes in process `syz.3.10264'. [ 1526.019701][T12777] tipc: Enabling of bearer rejected, already enabled [ 1526.172394][T12792] netlink: 'syz.3.10264': attribute type 10 has an invalid length. [ 1526.430001][T12799] bridge0: port 2(macvlan2) entered blocking state [ 1526.430705][T12800] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10266'. [ 1526.461720][T12799] bridge0: port 2(macvlan2) entered disabled state [ 1526.493498][T12799] macvlan2: entered allmulticast mode [ 1526.504425][T12799] bridge0: entered allmulticast mode [ 1526.539875][T12799] macvlan2: left allmulticast mode [ 1526.584222][T12799] bridge0: left allmulticast mode [ 1526.869307][T12815] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10271'. [ 1526.881420][T25804] tipc: Node number set to 2143430136 [ 1526.907650][T12815] netlink: 132 bytes leftover after parsing attributes in process `syz.1.10271'. [ 1526.981378][T12815] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 1527.084776][T12818] sctp: [Deprecated]: syz.3.10272 (pid 12818) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1527.084776][T12818] Use struct sctp_sack_info instead [ 1527.313794][T12830] netlink: 404 bytes leftover after parsing attributes in process `syz.1.10274'. [ 1527.350481][T12832] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10275'. [ 1527.429739][T12830] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10274'. [ 1527.439158][T12830] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10274'. [ 1528.402869][T12859] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1528.476943][T12859] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1529.173115][T12878] netlink: 'syz.1.10286': attribute type 1 has an invalid length. [ 1529.201839][T12878] netlink: 'syz.1.10286': attribute type 1 has an invalid length. [ 1529.264757][T12882] netlink: 'syz.3.10288': attribute type 1 has an invalid length. [ 1529.292346][T12882] netlink: 'syz.3.10288': attribute type 1 has an invalid length. [ 1529.402384][T12880] wg1 speed is unknown, defaulting to 1000 [ 1530.364126][T12912] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 1530.887689][T12927] wg1 speed is unknown, defaulting to 1000 [ 1531.134764][T12936] netlink: 'syz.3.10302': attribute type 83 has an invalid length. [ 1531.665536][T12944] __nla_validate_parse: 5 callbacks suppressed [ 1531.665557][T12944] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10305'. [ 1531.740765][T12944] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10305'. [ 1531.781770][T12944] netlink: 'syz.1.10305': attribute type 12 has an invalid length. [ 1531.838590][T12944] netlink: 'syz.1.10305': attribute type 11 has an invalid length. [ 1532.609107][T12960] netlink: 'syz.3.10311': attribute type 66 has an invalid length. [ 1532.872907][T12971] netlink: 104 bytes leftover after parsing attributes in process `syz.2.10314'. [ 1532.917676][T12972] netlink: 'syz.3.10315': attribute type 4 has an invalid length. [ 1534.025302][T13005] FAULT_INJECTION: forcing a failure. [ 1534.025302][T13005] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1534.099944][T13005] CPU: 0 UID: 0 PID: 13005 Comm: syz.1.10323 Not tainted syzkaller #0 PREEMPT(full) [ 1534.099972][T13005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1534.099984][T13005] Call Trace: [ 1534.099992][T13005] [ 1534.100000][T13005] dump_stack_lvl+0x189/0x250 [ 1534.100025][T13005] ? __pfx____ratelimit+0x10/0x10 [ 1534.100047][T13005] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1534.100067][T13005] ? __pfx__printk+0x10/0x10 [ 1534.100097][T13005] should_fail_ex+0x414/0x560 [ 1534.100125][T13005] _copy_to_user+0x31/0xb0 [ 1534.100145][T13005] simple_read_from_buffer+0xe1/0x170 [ 1534.100176][T13005] proc_fail_nth_read+0x1b3/0x220 [ 1534.100200][T13005] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1534.100226][T13005] ? rw_verify_area+0x2a6/0x4d0 [ 1534.100251][T13005] ? __lock_acquire+0xab9/0xd20 [ 1534.100269][T13005] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1534.100295][T13005] vfs_read+0x200/0xa30 [ 1534.100321][T13005] ? fdget_pos+0x247/0x320 [ 1534.100344][T13005] ? __pfx___mutex_lock+0x10/0x10 [ 1534.100371][T13005] ? __pfx_vfs_read+0x10/0x10 [ 1534.100399][T13005] ? __fget_files+0x2a/0x420 [ 1534.100422][T13005] ? __fget_files+0x3a0/0x420 [ 1534.100439][T13005] ? __fget_files+0x2a/0x420 [ 1534.100468][T13005] ksys_read+0x145/0x250 [ 1534.100498][T13005] ? __pfx_ksys_read+0x10/0x10 [ 1534.100526][T13005] ? do_syscall_64+0xbe/0xfa0 [ 1534.100552][T13005] do_syscall_64+0xfa/0xfa0 [ 1534.100571][T13005] ? lockdep_hardirqs_on+0x9c/0x150 [ 1534.100594][T13005] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1534.100621][T13005] ? clear_bhb_loop+0x60/0xb0 [ 1534.100646][T13005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1534.100665][T13005] RIP: 0033:0x7f66ac58d8dc [ 1534.100684][T13005] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1534.100702][T13005] RSP: 002b:00007f66ad3c6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1534.100723][T13005] RAX: ffffffffffffffda RBX: 00007f66ac7e5fa0 RCX: 00007f66ac58d8dc [ 1534.100739][T13005] RDX: 000000000000000f RSI: 00007f66ad3c60a0 RDI: 0000000000000004 [ 1534.100752][T13005] RBP: 00007f66ad3c6090 R08: 0000000000000000 R09: 0000000000000000 [ 1534.100765][T13005] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1534.100777][T13005] R13: 00007f66ac7e6038 R14: 00007f66ac7e5fa0 R15: 00007fff781bfec8 [ 1534.100813][T13005] [ 1534.824358][T13015] wg1 speed is unknown, defaulting to 1000 [ 1534.883409][T13024] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.10329'. [ 1534.911434][T13024] openvswitch: netlink: Message has 512 unknown bytes. [ 1535.287695][T13037] openvswitch: netlink: Flow actions attr not present in new flow. [ 1535.420751][T13042] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10335'. [ 1535.505463][T13045] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10336'. [ 1535.508008][T13048] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10336'. [ 1535.514780][ T6547] IPVS: starting estimator thread 0... [ 1535.609361][T13043] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10334'. [ 1535.631447][T13049] IPVS: using max 30 ests per chain, 72000 per kthread [ 1536.735551][T13079] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10346'. [ 1537.127264][T13098] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10350'. [ 1537.480239][T13108] netlink: 'syz.2.10353': attribute type 8 has an invalid length. [ 1537.645438][T13116] netlink: 'syz.0.10355': attribute type 3 has an invalid length. [ 1537.675738][T13116] netlink: 132 bytes leftover after parsing attributes in process `syz.0.10355'. [ 1538.162138][T13127] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10358'. [ 1538.368515][T13127] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1538.497644][T13131] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1538.525389][T13131] bond8: (slave sit1): The slave device specified does not support setting the MAC address [ 1538.556308][T13131] bond8: (slave sit1): Error -95 calling set_mac_address [ 1538.576399][T13140] netlink: 212388 bytes leftover after parsing attributes in process `syz.5.10362'. [ 1538.614035][T13140] openvswitch: netlink: Message has 8 unknown bytes. [ 1538.769634][T13144] netlink: 96 bytes leftover after parsing attributes in process `syz.0.10363'. [ 1538.831752][T13147] netlink: 'syz.5.10365': attribute type 1 has an invalid length. [ 1538.868444][T13144] tun1: tun_chr_ioctl cmd 1074025675 [ 1538.874073][T13144] tun1: persist disabled [ 1538.881022][T13144] nbd: must specify a size in bytes for the device [ 1538.984397][T13154] vlan0: entered promiscuous mode [ 1539.198852][T13160] wg1 speed is unknown, defaulting to 1000 [ 1539.300747][T13168] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10369'. [ 1539.336884][T13168] bridge0: port 1(syz_tun) entered disabled state [ 1539.553719][T13168] syz_tun (unregistering): left allmulticast mode [ 1539.560197][T13168] syz_tun (unregistering): left promiscuous mode [ 1539.631868][T13168] bridge0: port 1(syz_tun) entered disabled state [ 1539.652059][T13175] sctp: [Deprecated]: syz.0.10371 (pid 13175) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1539.652059][T13175] Use struct sctp_sack_info instead [ 1539.756304][ T6552] syz1: Port: 1 Link DOWN [ 1540.110574][T13187] FAULT_INJECTION: forcing a failure. [ 1540.110574][T13187] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1540.172975][T13187] CPU: 0 UID: 0 PID: 13187 Comm: syz.1.10376 Not tainted syzkaller #0 PREEMPT(full) [ 1540.173005][T13187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1540.173018][T13187] Call Trace: [ 1540.173026][T13187] [ 1540.173036][T13187] dump_stack_lvl+0x189/0x250 [ 1540.173062][T13187] ? __pfx____ratelimit+0x10/0x10 [ 1540.173092][T13187] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1540.173114][T13187] ? __pfx__printk+0x10/0x10 [ 1540.173134][T13187] ? __might_fault+0xb0/0x130 [ 1540.173173][T13187] should_fail_ex+0x414/0x560 [ 1540.173202][T13187] _copy_from_user+0x2d/0xb0 [ 1540.173223][T13187] ___sys_sendmsg+0x158/0x2a0 [ 1540.173250][T13187] ? __pfx____sys_sendmsg+0x10/0x10 [ 1540.173312][T13187] ? __fget_files+0x2a/0x420 [ 1540.173329][T13187] ? __fget_files+0x3a0/0x420 [ 1540.173358][T13187] __x64_sys_sendmsg+0x19b/0x260 [ 1540.173384][T13187] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1540.173418][T13187] ? __pfx_ksys_write+0x10/0x10 [ 1540.173450][T13187] ? do_syscall_64+0xbe/0xfa0 [ 1540.173478][T13187] do_syscall_64+0xfa/0xfa0 [ 1540.173500][T13187] ? lockdep_hardirqs_on+0x9c/0x150 [ 1540.173524][T13187] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1540.173544][T13187] ? clear_bhb_loop+0x60/0xb0 [ 1540.173568][T13187] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1540.173587][T13187] RIP: 0033:0x7f66ac58eec9 [ 1540.173605][T13187] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1540.173622][T13187] RSP: 002b:00007f66ad3c6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1540.173644][T13187] RAX: ffffffffffffffda RBX: 00007f66ac7e5fa0 RCX: 00007f66ac58eec9 [ 1540.173660][T13187] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1540.173673][T13187] RBP: 00007f66ad3c6090 R08: 0000000000000000 R09: 0000000000000000 [ 1540.173686][T13187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1540.173698][T13187] R13: 00007f66ac7e6038 R14: 00007f66ac7e5fa0 R15: 00007fff781bfec8 [ 1540.173732][T13187] [ 1540.633355][ T36] smc: removing ib device syz1 [ 1540.853333][T13192] dvmrp8: entered allmulticast mode [ 1540.968012][T13201] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10380'. [ 1540.979811][T13198] dvmrp8: left allmulticast mode [ 1541.576793][T13214] netlink: 'syz.1.10384': attribute type 1 has an invalid length. [ 1541.584951][T13214] netlink: 208 bytes leftover after parsing attributes in process `syz.1.10384'. [ 1542.339772][T30251] dvmrp8 (unregistering): left allmulticast mode [ 1542.383844][T30251] dvmrp0 (unregistering): left allmulticast mode [ 1543.850477][T30251] bond0 (unregistering): Released all slaves [ 1543.910836][T30251] bond1 (unregistering): Released all slaves [ 1543.977405][T30251] bond2 (unregistering): Released all slaves [ 1544.027470][T30251] bond3 (unregistering): Released all slaves [ 1544.247161][T30251] bond4 (unregistering): Released all slaves [ 1544.264822][T30251] bond5 (unregistering): Released all slaves [ 1544.284554][T30251] bond6 (unregistering): Released all slaves [ 1544.448212][T30251] bond7 (unregistering): Released all slaves [ 1544.466023][T30251] bond8 (unregistering): Released all slaves [ 1544.616424][T30251] bond9 (unregistering): Released all slaves [ 1544.635153][T30251] bond10 (unregistering): Released all slaves [ 1544.652925][T30251] bond11 (unregistering): Released all slaves [ 1544.677705][T30251] bond12 (unregistering): Released all slaves [ 1544.845543][T30251] bond13 (unregistering): Released all slaves [ 1544.863741][T30251] bond14 (unregistering): Released all slaves [ 1544.881185][T30251] bond15 (unregistering): Released all slaves [ 1544.903055][T30251] bond16 (unregistering): Released all slaves [ 1544.929104][T30251] bond17 (unregistering): Released all slaves [ 1544.947646][T30251] bond18 (unregistering): Released all slaves [ 1544.967722][T30251] bond19 (unregistering): Released all slaves [ 1544.988264][T30251] bond20 (unregistering): Released all slaves [ 1545.017432][T30251] bond21 (unregistering): Released all slaves [ 1545.036688][T30251] bond22 (unregistering): Released all slaves [ 1545.058150][T30251] bond23 (unregistering): Released all slaves [ 1545.215671][T30251] bond24 (unregistering): Released all slaves [ 1545.234328][T30251] bond25 (unregistering): Released all slaves [ 1545.402321][T30251] bond26 (unregistering): Released all slaves [ 1545.419216][T13201] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 1545.455902][T13222] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10387'. [ 1545.653094][T13230] FAULT_INJECTION: forcing a failure. [ 1545.653094][T13230] name failslab, interval 1, probability 0, space 0, times 0 [ 1545.731082][T30251] tipc: Left network mode [ 1545.732660][T13230] CPU: 1 UID: 0 PID: 13230 Comm: syz.1.10389 Not tainted syzkaller #0 PREEMPT(full) [ 1545.732686][T13230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1545.732699][T13230] Call Trace: [ 1545.732707][T13230] [ 1545.732715][T13230] dump_stack_lvl+0x189/0x250 [ 1545.732741][T13230] ? __pfx____ratelimit+0x10/0x10 [ 1545.732763][T13230] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1545.732783][T13230] ? __pfx__printk+0x10/0x10 [ 1545.732808][T13230] ? __pfx___might_resched+0x10/0x10 [ 1545.732836][T13230] ? fs_reclaim_acquire+0x7d/0x100 [ 1545.732869][T13230] should_fail_ex+0x414/0x560 [ 1545.732897][T13230] should_failslab+0xa8/0x100 [ 1545.732917][T13230] kmem_cache_alloc_node_noprof+0x77/0x710 [ 1545.732943][T13230] ? __alloc_skb+0x112/0x2d0 [ 1545.732961][T13230] ? netlink_autobind+0xdb/0x300 [ 1545.732987][T13230] __alloc_skb+0x112/0x2d0 [ 1545.733010][T13230] netlink_sendmsg+0x5c6/0xb30 [ 1545.733040][T13230] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1545.733064][T13230] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1545.733091][T13230] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1545.733110][T13230] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1545.733131][T13230] __sock_sendmsg+0x21c/0x270 [ 1545.733162][T13230] ____sys_sendmsg+0x505/0x830 [ 1545.733189][T13230] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1545.733221][T13230] ? import_iovec+0x74/0xa0 [ 1545.733243][T13230] ___sys_sendmsg+0x21f/0x2a0 [ 1545.733268][T13230] ? __pfx____sys_sendmsg+0x10/0x10 [ 1545.733325][T13230] ? __fget_files+0x2a/0x420 [ 1545.733342][T13230] ? __fget_files+0x3a0/0x420 [ 1545.733370][T13230] __x64_sys_sendmsg+0x19b/0x260 [ 1545.733395][T13230] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1545.733427][T13230] ? __pfx_ksys_write+0x10/0x10 [ 1545.733458][T13230] ? do_syscall_64+0xbe/0xfa0 [ 1545.733484][T13230] do_syscall_64+0xfa/0xfa0 [ 1545.733505][T13230] ? lockdep_hardirqs_on+0x9c/0x150 [ 1545.733527][T13230] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1545.733546][T13230] ? clear_bhb_loop+0x60/0xb0 [ 1545.733569][T13230] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1545.733587][T13230] RIP: 0033:0x7f66ac58eec9 [ 1545.733604][T13230] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1545.733621][T13230] RSP: 002b:00007f66ad3c6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1545.733642][T13230] RAX: ffffffffffffffda RBX: 00007f66ac7e5fa0 RCX: 00007f66ac58eec9 [ 1545.733657][T13230] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1545.733670][T13230] RBP: 00007f66ad3c6090 R08: 0000000000000000 R09: 0000000000000000 [ 1545.733682][T13230] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1545.733697][T13230] R13: 00007f66ac7e6038 R14: 00007f66ac7e5fa0 R15: 00007fff781bfec8 [ 1545.733730][T13230] [ 1546.124784][T13232] [ 1546.127145][T13232] ====================================================== [ 1546.134166][T13232] WARNING: possible circular locking dependency detected [ 1546.141197][T13232] syzkaller #0 Not tainted [ 1546.145618][T13232] ------------------------------------------------------ [ 1546.152639][T13232] syz.5.10390/13232 is trying to acquire lock: [ 1546.158804][T13232] ffffffff8f639558 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_ioctl+0x390/0xd50 [ 1546.167969][T13232] [ 1546.167969][T13232] but task is already holding lock: [ 1546.175343][T13232] ffff88805d909170 (&nr_node->node_lock){+...}-{3:3}, at: nr_rt_ioctl+0x193/0xd50 [ 1546.184596][T13232] [ 1546.184596][T13232] which lock already depends on the new lock. [ 1546.184596][T13232] [ 1546.195011][T13232] [ 1546.195011][T13232] the existing dependency chain (in reverse order) is: [ 1546.204036][T13232] [ 1546.204036][T13232] -> #2 (&nr_node->node_lock){+...}-{3:3}: [ 1546.212053][T13232] lock_acquire+0x120/0x360 [ 1546.217093][T13232] _raw_spin_lock_bh+0x36/0x50 [ 1546.222405][T13232] nr_rt_device_down+0x12a/0x720 [ 1546.227884][T13232] nr_device_event+0x137/0x150 [ 1546.233183][T13232] notifier_call_chain+0x1b6/0x3e0 [ 1546.238827][T13232] __dev_notify_flags+0x18d/0x2e0 [ 1546.244375][T13232] netif_change_flags+0xe8/0x1a0 [ 1546.249824][T13232] dev_change_flags+0x130/0x260 [ 1546.255185][T13232] dev_ioctl+0x7b4/0x1150 [ 1546.260020][T13232] sock_do_ioctl+0x22c/0x300 [ 1546.265128][T13232] sock_ioctl+0x576/0x790 [ 1546.269969][T13232] __se_sys_ioctl+0xfc/0x170 [ 1546.275074][T13232] do_syscall_64+0xfa/0xfa0 [ 1546.280095][T13232] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1546.286502][T13232] [ 1546.286502][T13232] -> #1 (nr_node_list_lock){+...}-{3:3}: [ 1546.294319][T13232] lock_acquire+0x120/0x360 [ 1546.299334][T13232] _raw_spin_lock_bh+0x36/0x50 [ 1546.304606][T13232] nr_rt_device_down+0xa9/0x720 [ 1546.309965][T13232] nr_device_event+0x137/0x150 [ 1546.315233][T13232] notifier_call_chain+0x1b6/0x3e0 [ 1546.320854][T13232] __dev_notify_flags+0x18d/0x2e0 [ 1546.326417][T13232] netif_change_flags+0xe8/0x1a0 [ 1546.331874][T13232] dev_change_flags+0x130/0x260 [ 1546.337251][T13232] dev_ioctl+0x7b4/0x1150 [ 1546.342549][T13232] sock_do_ioctl+0x22c/0x300 [ 1546.347674][T13232] sock_ioctl+0x576/0x790 [ 1546.352526][T13232] __se_sys_ioctl+0xfc/0x170 [ 1546.357638][T13232] do_syscall_64+0xfa/0xfa0 [ 1546.362663][T13232] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1546.369071][T13232] [ 1546.369071][T13232] -> #0 (nr_neigh_list_lock){+...}-{3:3}: [ 1546.377066][T13232] validate_chain+0xb9b/0x2140 [ 1546.382348][T13232] __lock_acquire+0xab9/0xd20 [ 1546.387536][T13232] lock_acquire+0x120/0x360 [ 1546.392546][T13232] _raw_spin_lock_bh+0x36/0x50 [ 1546.397817][T13232] nr_rt_ioctl+0x390/0xd50 [ 1546.402740][T13232] sock_do_ioctl+0xd9/0x300 [ 1546.407762][T13232] sock_ioctl+0x576/0x790 [ 1546.412605][T13232] __se_sys_ioctl+0xfc/0x170 [ 1546.417707][T13232] do_syscall_64+0xfa/0xfa0 [ 1546.422721][T13232] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1546.429123][T13232] [ 1546.429123][T13232] other info that might help us debug this: [ 1546.429123][T13232] [ 1546.439333][T13232] Chain exists of: [ 1546.439333][T13232] nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock [ 1546.439333][T13232] [ 1546.453147][T13232] Possible unsafe locking scenario: [ 1546.453147][T13232] [ 1546.460582][T13232] CPU0 CPU1 [ 1546.465932][T13232] ---- ---- [ 1546.471283][T13232] lock(&nr_node->node_lock); [ 1546.476144][T13232] lock(nr_node_list_lock); [ 1546.483245][T13232] lock(&nr_node->node_lock); [ 1546.490522][T13232] lock(nr_neigh_list_lock); [ 1546.495188][T13232] [ 1546.495188][T13232] *** DEADLOCK *** [ 1546.495188][T13232] [ 1546.503316][T13232] 2 locks held by syz.5.10390/13232: [ 1546.509023][T13232] #0: ffffffff8f6395b8 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_ioctl+0x104/0xd50 [ 1546.518595][T13232] #1: ffff88805d909170 (&nr_node->node_lock){+...}-{3:3}, at: nr_rt_ioctl+0x193/0xd50 [ 1546.528282][T13232] [ 1546.528282][T13232] stack backtrace: [ 1546.534177][T13232] CPU: 0 UID: 0 PID: 13232 Comm: syz.5.10390 Not tainted syzkaller #0 PREEMPT(full) [ 1546.534202][T13232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1546.534215][T13232] Call Trace: [ 1546.534224][T13232] [ 1546.534233][T13232] dump_stack_lvl+0x189/0x250 [ 1546.534257][T13232] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1546.534274][T13232] ? __pfx__printk+0x10/0x10 [ 1546.534290][T13232] ? stack_trace_save+0x9c/0xe0 [ 1546.534317][T13232] print_circular_bug+0x2ee/0x310 [ 1546.534340][T13232] check_noncircular+0x134/0x160 [ 1546.534363][T13232] validate_chain+0xb9b/0x2140 [ 1546.534387][T13232] ? look_up_lock_class+0x74/0x170 [ 1546.534409][T13232] ? register_lock_class+0x51/0x320 [ 1546.534427][T13232] __lock_acquire+0xab9/0xd20 [ 1546.534446][T13232] ? nr_rt_ioctl+0x390/0xd50 [ 1546.534463][T13232] lock_acquire+0x120/0x360 [ 1546.534478][T13232] ? nr_rt_ioctl+0x390/0xd50 [ 1546.534502][T13232] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1546.534526][T13232] ? nr_rt_ioctl+0x390/0xd50 [ 1546.534543][T13232] _raw_spin_lock_bh+0x36/0x50 [ 1546.534561][T13232] ? nr_rt_ioctl+0x390/0xd50 [ 1546.534577][T13232] nr_rt_ioctl+0x390/0xd50 [ 1546.534600][T13232] ? __pfx_nr_rt_ioctl+0x10/0x10 [ 1546.534616][T13232] ? lockdep_hardirqs_on+0x9c/0x150 [ 1546.534641][T13232] ? apparmor_capable+0x137/0x1b0 [ 1546.534661][T13232] ? capable+0x89/0xe0 [ 1546.534678][T13232] ? nr_ioctl+0x1b1/0x3b0 [ 1546.534704][T13232] sock_do_ioctl+0xd9/0x300 [ 1546.534729][T13232] ? __pfx_sock_do_ioctl+0x10/0x10 [ 1546.534758][T13232] sock_ioctl+0x576/0x790 [ 1546.534781][T13232] ? __pfx_sock_ioctl+0x10/0x10 [ 1546.534804][T13232] ? __fget_files+0x3a0/0x420 [ 1546.534819][T13232] ? __fget_files+0x2a/0x420 [ 1546.534834][T13232] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1546.534853][T13232] ? __pfx_sock_ioctl+0x10/0x10 [ 1546.534874][T13232] __se_sys_ioctl+0xfc/0x170 [ 1546.534896][T13232] do_syscall_64+0xfa/0xfa0 [ 1546.534917][T13232] ? lockdep_hardirqs_on+0x9c/0x150 [ 1546.534936][T13232] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1546.534953][T13232] ? clear_bhb_loop+0x60/0xb0 [ 1546.534972][T13232] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1546.534989][T13232] RIP: 0033:0x7f34fab8eec9 [ 1546.535006][T13232] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1546.535021][T13232] RSP: 002b:00007f34fb97b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1546.535040][T13232] RAX: ffffffffffffffda RBX: 00007f34fade5fa0 RCX: 00007f34fab8eec9 [ 1546.535053][T13232] RDX: 0000000000000000 RSI: 00000000000089e2 RDI: 000000000000000a [ 1546.535065][T13232] RBP: 00007f34fac11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1546.535076][T13232] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1546.535087][T13232] R13: 00007f34fade6038 R14: 00007f34fade5fa0 R15: 00007ffc213b0a58 [ 1546.535107][T13232] [ 1547.365900][T30251] pim6reg99999999 (unregistering): left allmulticast mode [ 1547.906719][T30251] team0 (unregistering): Port device dummy0 removed [ 1548.252908][T30251] IPVS: stop unused estimator thread 0...