last executing test programs: 5.508018494s ago: executing program 2 (id=4104): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000640)=0x810005, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) sendto$packet(r0, &(0x7f00000006c0)="0b03feff4f00", 0x6, 0x24000814, &(0x7f00000002c0)={0x11, 0x0, r1}, 0x14) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610434000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48) (async) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001680)=ANY=[@ANYBLOB="3000000040000701feffffff00000000017c0000040042800c00018006000600800a00000c00028008000d"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r2) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x64, r4, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7e}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x10001}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004814}, 0x24000080) 5.346064018s ago: executing program 2 (id=4107): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280), 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r0, @ANYBLOB="0000000000000000610200000000000095"], &(0x7f0000000d40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000080)={'gretap0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x1, 0x1, 0x401, 0x8, {{0x10, 0x4, 0x3, 0x7, 0x40, 0x65, 0x0, 0x3, 0x29, 0x0, @rand_addr=0x64010102, @broadcast, {[@lsrr={0x83, 0x2b, 0xe9, [@dev={0xac, 0x14, 0x14, 0x1f}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @multicast2, @local, @local, @broadcast, @dev={0xac, 0x14, 0x14, 0x15}, @empty]}]}}}}}) sendmsg$MPTCP_PM_CMD_REMOVE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x60, 0x0, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010101}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x20000800) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000140)=0x3, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x40000, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x537b}, [@IFLA_MASTER={0x8, 0xa, r1}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x101ae128ac94e846) 5.203417285s ago: executing program 2 (id=4110): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000c40)=ANY=[], 0x58}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000640)=@nat={'nat\x00', 0x670, 0x5, 0x378, 0x168, 0x210, 0xffffffff, 0x210, 0x168, 0x2e0, 0x2e0, 0xffffffff, 0x2e0, 0x2e0, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010104, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'geneve1\x00', {}, {0xff}, 0x16}, 0x0, 0x70, 0xb8, 0x48}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x6, @ipv4=@local, @ipv4=@remote, @gre_key=0xb, @port=0x4e23}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x1, 0x7, "db64985cd5f8f89e2d39bd1e973011c78ee53c45d0234524d46e18d7c613"}}}, {{@ip={@multicast2, @broadcast, 0xff, 0x0, 'syz_tun\x00', 'batadv_slave_1\x00', {0xff}}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @empty, @icmp_id=0x68, @icmp_id=0x68}}}}, {{@uncond, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0x4, "1542", 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x11, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @icmp_id, @icmp_id=0x800}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d8) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r2) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000600)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r2, &(0x7f0000000c80)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000640)={&(0x7f0000000900)={0xb0, r3, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_KEY={0x4}, @NL802154_ATTR_SEC_KEY={0x88, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "c70fd630fb25a4612477bd2c3a9377dcb8d4a8b0cf83d71230b50640980ef758"}, @NL802154_KEY_ATTR_ID={0x3c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x24, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}]}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "1130e95f49311be6ef7969e724eb9439648143ed3889dad68117fbffb97d0f25"}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0xb0}, 0x1, 0x0, 0x0, 0x100}, 0x24000000) sendmsg$NL802154_CMD_NEW_SEC_KEY(r2, &(0x7f0000000cc0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000c40)={&(0x7f0000000a40)={0x1e8, r3, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_KEY={0xe8, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_ID={0x88, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x18, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x44, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xfffffff8}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "f6480c27d84b6eaa2cc173a19170315e"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "224c2f205004e3868d5287a24f098a3ae6c09e89c21ab7114769cfde48016cc1"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x73}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "e1773b2a83c39ba04c81e12dcad18c3e"}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_KEY={0xb8, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x8}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "08aef411ffd5a280f9231ace50ce53b3"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "e273df00e75d40856fe1c643ddefc8f88879fb4b1b6ee2e67082acc6849aaef7"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "90301af8232365ad87fd76adfeaa3a5039f975e492be26515518968c0d63f284"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x3}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "9e878402b60865adf6004e458192dfc6d8268f31870b5a593b257c0ec2ac7aef"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "2525a41baf7541a6fe65c0c79c0120b8"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x7}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x9}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x4000}, 0x40080) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r2, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r5, 0x2, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x4024001) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7) sendmsg$NFC_CMD_ENABLE_SE(r7, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r8, 0xf7fb6818eeda6d45, 0x70bd2d, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x2000c010}, 0x440c0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRES16=r1], 0x14}}, 0x0) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x140, &(0x7f0000000180)=[{&(0x7f00000014c0)=""/4095, 0x1014}, {&(0x7f00000003c0)=""/254, 0xf0}], 0x4, 0x0, 0x353}}], 0xebadb096fd1881, 0x0, 0x0) 4.785408329s ago: executing program 1 (id=4115): sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c, 0x0}, 0x0) r0 = accept$netrom(0xffffffffffffffff, &(0x7f0000000140)={{0x3, @null}, [@default, @bcast, @bcast, @default, @null, @remote, @netrom, @netrom]}, &(0x7f0000000400)=0xffffffd4) accept$netrom(r0, &(0x7f0000000200)={{0x3, @default}, [@null, @null, @bcast, @rose, @bcast, @bcast, @bcast, @default]}, &(0x7f0000000280)=0x48) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="624151b50400000100000000c5a77a7f00001000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={r2, 0x58, &(0x7f0000000300)}, 0x10) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x2, 0xc, 0x9, 0x5, 0x7, 0x0, 0xd, 0x25dfdbff, [@sadb_address={0x5, 0x7, 0x33, 0x20, 0x0, @in6={0xa, 0x4e22, 0xfffffffc, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80}}]}, 0x38}}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001780)={0x34, 0x40, 0x1, 0x7fffc, 0x4, {0x3}, [@nested={0x4, 0x48}, @nested={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x10, 0x0, 0x1, [@nested={0x5, 0x8, 0x0, 0x1, [@generic="a8"]}]}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000980)=@base={0x1, 0x4, 0x4, 0x7, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, r5, 0x2, 0x1}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x20000400) r6 = socket$igmp(0x2, 0x3, 0x2) getsockopt$ARPT_SO_GET_ENTRIES(r6, 0x0, 0x61, &(0x7f0000000000)=ANY=[], &(0x7f0000000180)=0x28) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x101140, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r7, 0x401054d5, &(0x7f0000000000)={0x20000000000000cf, &(0x7f0000000040)=[{0x30, 0x3, 0xfd, 0xfffffc09}, {0x6, 0x0, 0x1, 0x1}]}) r8 = socket$l2tp(0x2, 0x2, 0x73) socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x18, r9, 0x1, 0x0, 0x5, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}}, 0x0) bind$inet(r8, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f0000000000)=ANY=[@ANYBLOB="aa08fb2f377810aaaaaaaaaa00000000000008004500fde10000000000119078000007000000000000004e2200189078040000000000000000000000dd000000"], 0x0) 4.569235736s ago: executing program 3 (id=4119): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r3, @ANYBLOB="060015000700fdff0c00168008000100", @ANYRES32=r1], 0x38}}, 0x1010) r4 = openat$cgroup_ro(r2, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x0, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f00000000c0)='io.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000040)=0x20) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) mmap(&(0x7f0000ff2000/0xd000)=nil, 0xd000, 0x2000004, 0x4001011, r6, 0x34da2000) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000002c6a07010000000803000002067c0000"], 0x14}}, 0x0) (async, rerun: 64) r7 = socket$alg(0x26, 0x5, 0x0) (rerun: 64) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000040)="b1afe20b675078080b584bb7afeda819f3f1ed5383bcc0e8a11267ab299672aa5f644f753d109c61c79a97bed2601418ba219e88ed43e6ddb0fbd1a88ae66cd37a7ca7de29a26f42cc3afd2cd4ee", 0x4e) 4.56038626s ago: executing program 0 (id=4120): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c00028005000300000000000800014000000001080002400000000c0900010073797a30000000000900020073797a320000000014000000110001"], 0x80}}, 0x0) 4.494045788s ago: executing program 1 (id=4121): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r0, 0x104, 0x7, &(0x7f0000000500), 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r2, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) listen(r2, 0x7) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x10}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000001c0)='ns/mnt\x00') r5 = ioctl$TUNGETDEVNETNS(r1, 0x54e3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@RTM_NEWNSID={0x34, 0x58, 0x46bda55b888e2167, 0x70bd2b, 0x25dfdbff, {}, [@NETNSA_FD={0x8, 0x3, r4}, @NETNSA_NSID={0x8, 0x1, 0x1}, @NETNSA_NSID={0x8, 0x1, 0x4}, @NETNSA_FD={0x8, 0x3, r5}]}, 0x34}}, 0x4080) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$XFS_IOC_FD_TO_HANDLE(r1, 0xc038586a, &(0x7f0000000180)={r3, &(0x7f0000000000)='/dev/net/tun\x00', 0x80800, &(0x7f0000000080)={@_ha_fsid={[0x6, 0x3]}, {0x2, 0x101, 0x9, 0x1}}, 0x6, &(0x7f00000000c0)={@_ha_fsid}, &(0x7f0000000140)=0xfff}) 4.466166853s ago: executing program 3 (id=4122): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x24, r5, 0x11, 0x0, 0x3, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x24}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000300)={'syztnl0\x00', &(0x7f0000000280)={'ip6tnl0\x00', 0x0, 0x2f, 0x0, 0x9, 0xc4e, 0x54, @mcast1, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x40, 0x8, 0x200, 0x2}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r2, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000128bd7000fedbdf250b000000050037000000000008000300", @ANYRES32=r6, @ANYBLOB="0808030009517c351091d69b008c9cf74055fb0a26ff63e283238ccd4cb1da6b8d706380fc3c3f19a8c631ab97654b1918d76d5ecc8a25b3bb04760c228aff2d730af29881d97b2ad63f91e25eeb356de9fbc594a1a91068cb4828f048499f0046c995e17095ea05ec169377a4a5f2fd0eeecdbb68eba0f6fd4ea1443dbe20fc0e2d4816fa4334b0752ca303", @ANYRES32=r7, @ANYBLOB="0800390004000000"], 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x42010) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000a80), r8) sendmsg$DEVLINK_CMD_PORT_SET(r8, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x44, r9, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x3}}]}, 0x44}, 0x1, 0x0, 0x0, 0xc850}, 0x440c0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r12 = openat$cgroup_int(r11, &(0x7f0000000080)='cgroup.max.depth\x00', 0x2, 0x0) write$cgroup_subtree(r12, &(0x7f00000005c0)=ANY=[@ANYRES16=r11], 0x9) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWTABLE={0x114, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_USERDATA={0x100, 0x6, "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"}]}, @NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x42064bac}, @NFTA_HOOK_DEV={0x14, 0x3, 'netdevsim0\x00'}]}]}], {0x14}}, 0x198}}, 0x41000) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x30, r1, 0x9c3fa077fa966179, 0xfffffffd, 0x0, {{0x7e}, {@void, @val={0xc, 0x99, {0x1, 0x3d}}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x30}, 0x1, 0x0, 0x0, 0x4008804}, 0x4000054) pipe(&(0x7f0000000100)) r13 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) setsockopt$inet_int(r13, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r13, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) syz_emit_ethernet(0x4e, &(0x7f0000000140)=ANY=[@ANYBLOB="0180ca0000030000000000000800456c004000000000fb019078ac1e0001ac1414aa03019078032400004700000400010000000100077f000001640100fe8606ffffffff0000f4aa2bd7e9812fd6"], 0x0) socket$can_raw(0x1d, 0x3, 0x1) socket$inet(0x2, 0x3, 0x7f) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r1, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) 4.348678193s ago: executing program 0 (id=4123): ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x700, 0x80, 0x4, 0xb, {{0x13, 0x4, 0x1, 0x5, 0x4c, 0x65, 0x0, 0x5, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x5, 0x0}, @private=0xa010102, {[@timestamp_addr={0x44, 0x1c, 0x47, 0x1, 0x8, [{@loopback, 0x6}, {@loopback, 0x10}, {@private=0xa010102, 0xfd81}]}, @timestamp_addr={0x44, 0x1c, 0xe0, 0x1, 0x4, [{@empty, 0xe}, {@dev={0xac, 0x14, 0x14, 0xc}, 0x2f}, {@empty, 0x1e4b2bca}]}]}}}}}) (async) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'netdevsim0\x00'}) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000001e0000000c0001"], 0x28}}, 0x80) (async) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @dev}, 0x2}}, 0x2e) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbbbb8a0a63cdec590806000108000604"], 0x0) sendto$packet(r2, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @link_local}, 0x14) (async) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001140)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r8, 0x0, 0xe, 0x0, &(0x7f0000000240)="ffffffff75664a0a90f73e9eb3cf", 0x0, 0x6100, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) r9 = socket$kcm(0x29, 0x2, 0x0) (async) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r10, &(0x7f0000000000)={0x1f, 0x0, @none, 0x0, 0x1}, 0xe) listen(r10, 0xa1) (async) setsockopt$sock_timeval(r10, 0x1, 0x14, &(0x7f0000000040)={0x0, 0x2710}, 0x10) accept4$bt_l2cap(r10, 0x0, 0x0, 0x0) (async) setsockopt$kcm_KCM_RECV_DISABLE(r9, 0x119, 0x1, &(0x7f0000000200)=0xffffff02, 0x4) (async) setsockopt$kcm_KCM_RECV_DISABLE(r9, 0x119, 0x1, &(0x7f0000001840)=0x6, 0x4) r11 = accept4(r6, &(0x7f0000000180)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f00000002c0)=0x80, 0xc0400) sendmsg$NFT_BATCH(r11, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000600)=ANY=[], 0xfc}}, 0x75) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a0000000000006111770000000000850000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) 4.241518014s ago: executing program 4 (id=4124): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a00)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0xa}, @NFT_OBJECT_COUNTER=@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}}], {0x14}}, 0x48}}, 0x0) socket$inet(0x2, 0x2, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000780)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff080049cd3e050067000004069078ac1414aa7f00000194040000070b3dffffffffffffffff000000000000000000000000000000000200004e2000004e2200000000000000000000000400000002000000000000000000000000000000003c16b5413e67d70a4f04918cd824bdd5ac5f2ab8b239d56c65f31a944c3f3e576c0cb3d84a8439c7b563992f77adcd85297c57e852dc229ade8b240c914ba3b140484470c1d1b517d1b03a05b256f629884ec9eb4a8a29abc7c2e5f9a823627811c28d69242f6c4d0f7e7a5b4f2cb5273191083d474b5dc8b61df8f17f50bcb5c0cf70e2daf6488eb80a23d1179f45c816a0177c2c8413caadd9ba1a5717e19a35e74288ac7a614f23c3c5ba2e2ea2049e40379ac8cebbc9d04862f4b9079845"], 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) ioctl$TUNSETVNETBE(r1, 0x400454de, &(0x7f0000000000)=0x1) socket$isdn_base(0x22, 0x3, 0x0) bind$unix(0xffffffffffffffff, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='nv', 0x2) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x8840, 0x0, 0x0) socket(0x1d, 0x2, 0x6) sendmmsg$inet6(r2, &(0x7f0000005200)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="196cb4978bb81d88bb", 0x9}, {0x0}], 0x2, &(0x7f00000032c0)=[@dstopts_2292={{0x10d8, 0x29, 0x4, {0x14, 0x217, '\x00', [@jumbo={0xc2, 0x4, 0x8}, @calipso={0x7, 0x18, {0x1, 0x4, 0x6, 0x1c42, [0xfffffffffffffff9, 0x9]}}, @ra, @generic={0x81, 0x1000, "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"}, @pad1, @generic={0x2, 0x91, "f4f5f9f36357eb6d7feb6ebee3e572ba3cc2ad449d20ef5a199140760ab3361fe4984f6d04e500799b8556de902ce03cd18905bbd2e08164acb02d986f1ee5d9c4ecdbe979c76850858bb6c96444b0eb718f5490f15f73aa3be830985b1d9b7081e14c122e274f5df8dda5311bfc990fbc435ff24a8159d2af074a884859648c4eb50f2d0a8f7c5eebbf8763135c78553b"}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@loopback}}}], 0x1100}}, {{0x0, 0x0, &(0x7f0000002ac0)=[{&(0x7f0000000980)="66031b078aa33132a530c91690a1b2ba0497bca61e63325c4192b379e2703ac35b9a51ad11d73a01167af72f28938d5c7ebb3a2f571f7528ddf7b96332", 0x3d}, {&(0x7f0000000a00)="b1edd140d51ca5a912843747b21e3298a35d66455875db80d21daf2db5de0370310d73d109dc9f56ed6a58fa221b3f4e2b5bb477788bc29a613c5ab0f874a8fd457c47bb547f6275", 0x48}, {&(0x7f0000000a80)="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", 0xf81}, {&(0x7f0000001ac0)="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", 0xbdf}], 0x4}}, {{&(0x7f0000002c00)={0xa, 0x4e20, 0x80000000, @empty, 0x881b}, 0x1c, &(0x7f0000003280)=[{&(0x7f0000002c40)="e7c066507ba3745f7cee6f37", 0xc}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x4, 0x4040040) listen(0xffffffffffffffff, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) connect$unix(r4, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000002640)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000340)="b2", 0x1}], 0x1, &(0x7f00000006c0)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r3], 0x18, 0x8800}}], 0x1, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="bc010000190001000000000000000000000000000000ac06bf0750d3ae41d9d64cb35584b2698b0a73bf1877f818940064b62a1af8adbc2b53531af8e948e18e1414bb000000000000000000000000000012f0bb93ceeffe0e92cdcdf5f10e135db3646dee2dc3b4724d3688332454194e544696c0f89be224816701c626cd48aecbb5526569bcf5375288e4f109099acbf5f3b1eb5121046ad6e76152597a457add8000822017f5974b5526", @ANYRES32=0x0, @ANYRES32], 0x1bc}}, 0x0) r6 = accept(0xffffffffffffffff, 0x0, 0x0) recvmsg$kcm(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x40000122) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000000206010800000000000000000000004005000400000000abb97a702c6d61726b00"/48], 0x30}}, 0x0) sendmsg$IPSET_CMD_SAVE(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800f8ff070603000000000000000000000000010500010a0073797a31000000000000000000000018820b0d18b2c008d95f3e73303664032bf3fca2d887b3108cabcd70fe16bc678643a524db321085bb3de637ed23a66281e8916f14db9a838423ce0a50205e65abf7c3b61242a33a014c5599909851f373a7255e6025d1803b5805b964c4b2c65522d1ca54a3daeb753752e8b4dd428606e0a10bf4447575e28b184bf9aff36a662c723700197d52c4c2c21ddf"], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x8080) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a310000000014000480080002400000000008000140000000000900010073797a300000000054000000060a010400000000000000000100000008000b40000000000900010073797a30000000002c0004802800018008000100666962001c0002800800014000000011080003400000000508000240f9ffff0214000000110001"], 0xdc}}, 0x0) 4.219300697s ago: executing program 2 (id=4125): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000050000000c00020000000000000000000c00060000000000000000000400078008000100", @ANYRES32], 0x38}}, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="001c86af7b66"], 0xffe) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="010000970d9a6e80e6e86b00061000001800128008000100677470000c00028008040100", @ANYRES32=r2, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x440b0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340)={0x0, 0xfffffffd, 0x88f}, 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r4, 0x2000012, 0x100e, 0x2, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000000)={r2}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r4, 0x0, 0x8f, 0xb0, &(0x7f0000000380)="f62c19e2c6b9187a3907a4e122afeb817e67a1ee26b736c84a944621a450b9d831bd7d01240492e17e1357f54c4c21b0fcf096e982a69bd8e5b60dfdb11c7ac945c14093aad629a2a0a9af0b7412b2a5af49a1c93d853689c96e1090fb15ed281ce9c720707c72b2de62a443e0bb99241bd5eb28010383c9a79e760ef8014909da79ed3a08cd765b2bdb116de38102", &(0x7f0000000440)=""/176, 0x0, 0x0, 0xa8, 0xff, &(0x7f0000000500)="2ecd3f5c95618121eab79097ad09a0e71864af169618ad375c34d9c4e07ef86db95a40f4723842a2c0760b806005558709e2796c5a7b85255b94cc32389302f462a621d34fee8fc7fa1a7361da04f50fd4862e3b786de15982717855c90294fada34f96d22f79d2d97e0dc78d8b184991025f5f09765d8f7f7ea59f7155557ee2ae8f2e2b80e92d08523598dbbbde768a2df440e2e20ac63de28e68110b67109af4ef19195dcbdcf", &(0x7f00000005c0)="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", 0x0, 0x0, 0x321}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xd, 0x8031, r6, 0x215eb000) r7 = socket(0x14, 0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x61d0, 0x0) sendto$inet6(r7, 0x0, 0x0, 0x44001, 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r5, 0x114, 0x7, &(0x7f00000002c0)={@rc={0x1f, @any, 0x5}, {&(0x7f0000000140)=""/239, 0xef}, &(0x7f0000000240), 0x2}, 0xa0) 4.165607983s ago: executing program 0 (id=4126): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000000c0)=ANY=[@ANYBLOB='@\x00'/20, @ANYRES32=0x0, @ANYBLOB="020100000000000014000300766c616e3000000000000000000000000a000100bbbbbbbbbbbb0000"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x42) 4.163239792s ago: executing program 1 (id=4127): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) syz_emit_ethernet(0x3e, &(0x7f0000000100)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x7, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010102, @private=0xa010102, {[@generic={0x7, 0x7, "0441b613a3"}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) socketpair(0xf, 0x1, 0x6, &(0x7f0000000000)) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0xc0, 0x24, 0xf0b, 0x0, 0xfffffffc, {0x60, 0x0, 0x0, r2, {0xb, 0x5}, {0x8, 0xffff}}, [@TCA_STAB={0x9c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x51, 0xf7, 0x7733, 0x0, 0x1, 0x1, 0xffc00000, 0x2}}, {0x8, 0x2, [0x200, 0xa]}}, {{0x1c, 0x1, {0x4, 0x1d, 0x6, 0x1000, 0x2, 0x3204536e, 0x100, 0x5}}, {0xe, 0x2, [0x0, 0x3, 0x8, 0x0, 0xf]}}, {{0x1c, 0x1, {0x1, 0x1, 0x9, 0x0, 0x0, 0x7, 0x3, 0x1}}, {0x6, 0x2, [0x5d05]}}, {{0x1c, 0x1, {0x1, 0x4, 0x4, 0x1, 0x2, 0x7529, 0x3b9, 0x1}}, {0x6, 0x2, [0xfffb]}}]}]}, 0xc0}}, 0x0) 4.045896716s ago: executing program 0 (id=4128): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xa}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd63"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xf3f, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x14, 0x2, [@TCA_BASIC_EMATCHES={0x10, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000001100000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000440)={0x2c, r6, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PEERS={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004}, 0x20000010) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x28, r4, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x8) setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f00000000c0), 0x4) r7 = socket(0x2c, 0x2, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}}, 0x0) r9 = socket(0x40000000015, 0x5, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r9, 0x84, 0x9, 0x0, 0x0) connect$qrtr(r7, &(0x7f0000000440)={0x2d, 0x0, 0x1}, 0xc) bind$xdp(r7, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0xc}, 0x10) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200000054000480500001800a000100696e6e65720000004000028008000240200000840800034000000007080004400000000f08000140000000001c0005800c000100707b796c6f6164000c00028008000240000000050900010073797a30000000000900020073797a32"], 0xa8}}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x20000000}, 0x2}}, @TCA_MPLS_LABEL={0x8, 0x5, 0xf4601}]}, {0x4, 0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x6c}}, 0x0) 3.946936215s ago: executing program 1 (id=4129): r0 = socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r1, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)=@gettaction={0x58, 0x32, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0xd}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x9a}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0xffffbb55}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x6}, @action_gd=@TCA_ACT_TAB={0x18, 0x1, [{0x14, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x20044005}, 0x48001) r2 = socket$unix(0x1, 0x1, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000001940)=@raw={'raw\x00', 0x8, 0x3, 0x240, 0x0, 0xffffffff, 0xffffffff, 0x108, 0xffffffff, 0x1a8, 0xffffffff, 0xffffffff, 0x1a8, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0xc0, 0x108, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}, @inet=@rpfilter={{0x28}, {0xa}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@empty, 'nicvf0\x00', {0x7ff}}}}, {{@ip={@local, @dev={0xac, 0x14, 0x14, 0x3e}, 0xffffffff, 0x0, 'veth0_to_team\x00', 'team_slave_0\x00', {}, {0xff}, 0x6c, 0x3, 0x41}, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x2, 0x5, 0x3}, {0xffffffffffffffff, 0x5, 0x2}, 0xda, 0xfffffff8}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfbffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xfff3, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000022c0)=@newtfilter={0x18a8, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0xffff, 0x5}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_u32={{0x8}, {0x187c, 0x2, [@TCA_U32_POLICE={0x85c, 0x6, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x8001}, @TCA_POLICE_TBF={0x3c, 0x1, {0x401, 0x0, 0x8, 0xfffffff4, 0xebe, {0x0, 0x2, 0x9, 0x9, 0x4, 0xfffffff7}, {0xba, 0x2, 0x7f, 0x8, 0x5, 0x1}, 0x10000, 0x7, 0xe11f}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0x2, 0x3, 0x0, 0x3, 0x1, 0x8, 0x9, 0x1, 0x26b8, 0x0, 0x1, 0x8, 0x2, 0x9, 0x0, 0x1, 0x8, 0x7, 0x401, 0x400, 0x9, 0x4b, 0x6, 0x0, 0x32, 0xbd90, 0x10000, 0x40000, 0x7, 0x8b, 0x100007, 0x1000, 0x7, 0x2, 0x4, 0x0, 0x4bc7, 0x4, 0x2, 0x101, 0x0, 0x10001, 0x4, 0xfc9, 0x800000, 0x2, 0x1, 0x1, 0x1, 0x200, 0x7, 0x7, 0x81, 0x32, 0x10, 0x9, 0x101, 0x9, 0x1ff, 0x81, 0x0, 0x7, 0x1, 0x8, 0xf, 0x7, 0x0, 0x8, 0x9, 0x2, 0x1, 0x8, 0x3, 0xfffffffd, 0x6, 0x7, 0x6, 0xc, 0x3, 0x7fff, 0x4be, 0x8f, 0x1ff, 0x49a2, 0x0, 0x2, 0x6, 0x2, 0x9, 0x9, 0x3, 0xfffffffc, 0x7f, 0x0, 0xf, 0x7fff, 0x9, 0xa, 0x800, 0x4, 0x2, 0xff, 0x0, 0x0, 0x7, 0x6a, 0x4, 0x8, 0x1, 0x7fff, 0x2, 0x5, 0x3, 0x9, 0x400, 0x6, 0x9, 0x0, 0x200, 0x4, 0x100, 0xd, 0x0, 0x1000, 0x2, 0x2, 0xd216, 0x0, 0xfffffffb, 0x7, 0x9, 0x6, 0xf, 0x60000, 0x5, 0xe, 0x2, 0x2, 0xfffffffc, 0x0, 0x3, 0xfff, 0x2, 0x8014, 0xfffffffe, 0x3, 0x7, 0x0, 0x59b3, 0x0, 0xffffffff, 0x0, 0x6, 0x2ee, 0x6, 0x333, 0x4, 0x9, 0x54, 0xd36, 0x9, 0x9, 0x1, 0xfffffff4, 0x200, 0xfff, 0x3, 0x3, 0xffffffff, 0x2, 0x6, 0x80, 0x3, 0x1, 0x9, 0x8, 0xaaef, 0x4, 0x7568, 0x7, 0x5ffb, 0x3, 0x10001, 0x584, 0x8, 0x7, 0x40, 0x8, 0x0, 0x401, 0x714, 0x10, 0x0, 0x2, 0x1ff, 0x3, 0x4a, 0x28a, 0x182, 0x9e, 0x3995, 0x9, 0xffff, 0xe984, 0x1, 0x5, 0x0, 0x8, 0x6, 0x8, 0x0, 0x1000, 0x1000, 0x2, 0x9, 0x7, 0xffff8900, 0xfffffff9, 0x9e, 0x1, 0x3, 0x3, 0x100, 0x5, 0x30, 0x4, 0x2, 0x529e, 0x100, 0x10001, 0x3, 0x4a, 0xc0e, 0xffffffff, 0x7, 0x6, 0x3, 0x5, 0x6, 0x60, 0x10, 0x5, 0xb66, 0x9, 0x6, 0x0, 0x1, 0x69e, 0x4, 0xb, 0x8, 0x0, 0xfffffff7, 0xfffffffe, 0x2]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7}, @TCA_POLICE_RATE={0x404, 0x2, [0x8001, 0x9, 0x4, 0x7, 0x0, 0x1, 0x6, 0xad9, 0x2, 0xb0, 0x4, 0xfffffff4, 0xb, 0x9, 0x1, 0x0, 0x2, 0xffff, 0xa, 0x4, 0x5, 0x400, 0x9, 0x3, 0x10001, 0x9, 0x5, 0x0, 0x1, 0x3, 0x9, 0x1, 0xfffffffa, 0x80000000, 0x2, 0xffffffc4, 0x7a, 0xfffff801, 0x0, 0x93d, 0xf, 0xfffffffd, 0x80000000, 0xffff8000, 0xea, 0x3, 0x1, 0x937, 0x6, 0x8, 0x8, 0x2, 0x80, 0xffffffff, 0xfff, 0x0, 0x2, 0x6, 0x5, 0x10, 0x5, 0x0, 0x3, 0x6, 0x5, 0xfff, 0x800, 0x1, 0xffffffc0, 0x1, 0x8, 0x2, 0x5, 0x0, 0x3, 0x7, 0x3, 0x5, 0x7fff, 0x400, 0xffff, 0x0, 0x1, 0xe, 0x74cc105, 0x2, 0x1, 0x2, 0x1, 0x7ff, 0x4, 0x7ff, 0x2, 0x26, 0x81, 0x3, 0x10000, 0x8, 0xb67, 0x0, 0xb3a7, 0x9, 0x10, 0x850, 0xe830, 0x0, 0x6, 0xb3, 0x5, 0x5, 0x0, 0x3, 0x7, 0xffffffff, 0x8, 0x92, 0x6, 0x80, 0x401, 0x5, 0xc8, 0x3, 0xfff, 0x2cff3e46, 0xf, 0x6, 0x9, 0x8001, 0x8, 0xfffffffb, 0x401, 0xb, 0x5, 0x80000001, 0x6, 0x8, 0xd, 0x76, 0x1ff, 0x4, 0x8c9, 0x1, 0x1e0, 0x8, 0xa, 0x3, 0x4e90b505, 0x5, 0x86, 0x1ff, 0x1, 0x0, 0x5, 0xb51, 0x4, 0x7f, 0x3, 0x9, 0x5, 0xfff, 0x3a, 0x1, 0x6, 0x2, 0xfffffffa, 0x3, 0x16000000, 0x8, 0x2, 0x4, 0x1311a983, 0x8a1, 0x2, 0xa5, 0x0, 0x8, 0x0, 0x22, 0x1, 0x81, 0x6, 0xfffffffe, 0x7, 0x7f, 0x8, 0xd3, 0x72c, 0x47f, 0x7, 0x9, 0xff, 0x6a, 0xde5, 0x75, 0x65d78b17, 0x1, 0x7, 0xff, 0x1, 0x3, 0x2, 0x80, 0x7, 0x999, 0xd2be, 0xff8, 0x0, 0x9a00, 0xdd, 0x8efc, 0xf190508, 0xf75d, 0x3e1, 0x100, 0x6, 0xa7d, 0xd, 0x5, 0x0, 0xe, 0x7, 0xc, 0x1, 0x35, 0x3, 0x5, 0x6, 0x9, 0x8, 0x0, 0x4, 0x100, 0x1, 0x2, 0xc8, 0x2, 0xf, 0x0, 0x3, 0xfffffff4, 0x5, 0x80, 0x0, 0x8, 0x4, 0x9, 0x8, 0x46e, 0xb2e, 0xeacb, 0x6, 0x9, 0xb, 0xd8d, 0xf, 0xff800000]}]}, @TCA_U32_POLICE={0x101c, 0x6, [@TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x0, 0x5, 0x2, 0x2, 0xf, 0x5c, 0x2, 0x3, 0x3ff, 0x7ff, 0xffffffff, 0x3, 0x8, 0x21e42725, 0x10, 0x2, 0x10001, 0x3dd, 0x7, 0x5, 0x7, 0x9, 0x1ff, 0x7, 0xfffffd78, 0x0, 0x5, 0x0, 0x3, 0x3, 0x200, 0x39, 0x7f, 0x19, 0x1, 0x4, 0x10, 0x703, 0x2, 0xfffffffd, 0x8001, 0x3, 0x8ffb, 0x3, 0xffff0001, 0x1, 0x1ff, 0x10, 0x2, 0x7f, 0x800, 0x2, 0x8, 0x400, 0x5a, 0x2, 0x3, 0x8, 0x7, 0x0, 0x9, 0x9, 0x84c, 0xe1, 0x0, 0xb00, 0x40, 0x101, 0x2, 0x0, 0x775b, 0x3, 0x4, 0x3ff, 0xfff, 0x6d2, 0x0, 0x200, 0x1ff, 0x200, 0x7, 0x0, 0x253, 0xba6, 0x7, 0xd85, 0x6, 0xc, 0x8, 0x4, 0xab, 0x1089b9f, 0x4c8, 0x200, 0x800, 0x8, 0xd3, 0x8, 0x5, 0x9, 0x6, 0x1, 0x9, 0x9, 0x6424fe1b, 0xfff, 0x5, 0x449, 0x59, 0x8, 0x180, 0x1, 0xe0b7, 0x6, 0x1ebfc, 0x9, 0xffff, 0x2, 0x363, 0xfffff71a, 0xfffffffb, 0xc4, 0x8dbf, 0xaf, 0x9, 0x524, 0x7, 0x3b, 0x3, 0x8, 0x2, 0x8001, 0x8, 0x33e, 0x80, 0x2, 0x34, 0x7, 0xa, 0x8, 0x58e8e5b6, 0x7fffffff, 0x0, 0xe3c5, 0x1, 0x2, 0x5, 0x9, 0xfffffc00, 0x5, 0x5, 0x4, 0x4, 0x0, 0x2, 0x6, 0x0, 0xa, 0x23, 0x2a8c759a, 0xffffff80, 0x1, 0x9, 0x6, 0xc083, 0x10000, 0x371, 0x523369dc, 0x88, 0x80, 0x8, 0x3, 0x5, 0xffffffff, 0xfffffa23, 0x6, 0x5, 0xbfd9, 0x1, 0x800, 0xf0, 0x9, 0xfffff001, 0x7fff, 0x2, 0xd, 0x9, 0x4, 0x0, 0x8, 0x6, 0x2, 0x9, 0x7, 0x52, 0x36f, 0x1000, 0x0, 0x8001, 0x400, 0x6, 0x5, 0x8, 0x3, 0x2, 0x6994, 0x0, 0x100, 0x1, 0x3, 0xaf22, 0x4, 0x8, 0x9, 0x9, 0x7f, 0xf, 0x1, 0x101, 0x401, 0xfffffff8, 0x7f, 0x8, 0x6, 0x6, 0x8, 0x1, 0xff, 0x8, 0x8, 0x58, 0x8000, 0x1fffc, 0x1, 0x1, 0x7d14, 0x20000000, 0x8, 0x7, 0x7, 0xd100, 0x5, 0x1, 0x8, 0x2, 0x401, 0x4, 0xfffffbff, 0x7, 0xed2, 0x200, 0x81, 0x8, 0x5, 0x8]}, @TCA_POLICE_RATE={0x404, 0x2, [0x3ff, 0x6, 0x4, 0x401, 0x0, 0x5, 0x2, 0xc2da, 0x0, 0x4, 0x40, 0x101, 0x1ff, 0xdde, 0x1, 0x6, 0x8001, 0x3000, 0x1fa, 0xffffffff, 0xff, 0xff, 0x4, 0xfffff800, 0x3, 0x48000000, 0x6, 0x36c7, 0x35, 0x4, 0x8, 0x4, 0x3, 0x58b, 0x800, 0x3, 0x7, 0x7f96, 0x2, 0x9, 0x4, 0x1, 0x4, 0x2, 0xa5b5, 0xd5, 0xfff, 0x8, 0xbd0, 0x6, 0x2, 0x2, 0x2, 0x5, 0x10000, 0x9, 0x2, 0x5, 0x8, 0x5, 0x6, 0x5, 0x3, 0xfffffff9, 0x6c3, 0x7, 0x1, 0xffffffff, 0x4, 0x32e8, 0x5, 0xb, 0x1c, 0x1, 0x8, 0x5, 0x2, 0xfffffff9, 0x3, 0x3, 0xfffffff7, 0x7, 0xc, 0x9, 0x6, 0x2, 0x1, 0x7, 0xb04, 0x9, 0x3, 0x3, 0x923b, 0x6, 0x7, 0x7f, 0x1000, 0x7, 0x40, 0x10000, 0x9, 0x2e80, 0x6, 0x1, 0x400, 0x7f, 0x6, 0x1, 0x10001, 0x9, 0x71, 0x9, 0x9, 0x2, 0x7, 0x2, 0x5, 0x5, 0x5, 0xdd, 0xfffffffc, 0x2, 0x1000, 0x10, 0x80000001, 0xffffffff, 0x5, 0x8, 0x5, 0x1000, 0x9, 0x5, 0x6, 0x1, 0x5, 0x10000, 0x0, 0x9a30, 0xfffeffff, 0xffffff80, 0x2, 0x0, 0x4, 0x2, 0x6, 0x8, 0x7, 0x8, 0x10001, 0x400, 0x0, 0x4, 0x101, 0x800, 0x5, 0x8, 0x4, 0x7, 0x1, 0xc, 0x81ec, 0x10, 0x5, 0xe, 0x40, 0x954, 0x3, 0x101, 0x401, 0x6, 0x2, 0x9, 0x5, 0x100, 0x9, 0x400, 0x0, 0x6, 0x8, 0x98b, 0x5, 0x7, 0x82a, 0x6, 0x1c0, 0x0, 0x0, 0x5dea, 0x9, 0x82c, 0x7ff, 0x0, 0x7, 0x9, 0xffffffff, 0x610, 0x1, 0x0, 0x0, 0x608, 0x0, 0x8, 0x2, 0xfffffff7, 0xa, 0x6, 0x1ff, 0x81, 0x7, 0x7ff, 0xfffffffb, 0x1, 0xd32, 0x8, 0xfffffffd, 0x9, 0x80000000, 0x3, 0xd9, 0x3, 0x6, 0x7, 0xd, 0x37, 0xdc, 0x9a6b, 0x8001, 0x81, 0xfffffff9, 0x10000, 0x5, 0x2, 0x4, 0x5, 0xe29, 0x28, 0x4, 0x7ff, 0x5, 0xcb17, 0x0, 0x2, 0x3, 0x4, 0x81, 0xb, 0x6, 0x6, 0x14b3, 0x1, 0xf2b, 0x7, 0x7, 0x2, 0x2, 0x6]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x2}, @TCA_POLICE_RATE={0x404, 0x2, [0x9, 0xffffffc0, 0x1, 0xffffff01, 0x4, 0x4a1df6fc, 0x0, 0x9, 0x2, 0x4, 0x7, 0x9, 0x9, 0xfffffff7, 0xd6, 0xd83, 0x40000006, 0x7f, 0x8, 0x7, 0x2, 0x9e4, 0x7, 0x4, 0x6a82, 0xff, 0x5, 0x9, 0x9, 0x80000000, 0xf, 0x8, 0x5, 0x7, 0x1, 0x3cb29844, 0xd, 0x4, 0x800, 0x6385, 0x2, 0x1, 0x0, 0xf, 0x3, 0x2439, 0x1f57, 0x778c87fc, 0xef3, 0x0, 0xa, 0x8000, 0x4, 0xfffeffff, 0x1f8f1375, 0x1, 0xba17, 0x8, 0x2, 0x630f, 0x2, 0x3, 0x7f, 0x80000000, 0xe, 0x0, 0x37aa3b31, 0x100, 0x6, 0xffffff01, 0x3, 0x9, 0xfff, 0x4, 0x1ff, 0x4, 0x80000001, 0x9, 0x8, 0x5, 0x9, 0xfff, 0x5, 0x1, 0x3, 0x3, 0xffffffff, 0x8, 0x1, 0x6, 0x7, 0x7, 0x9, 0xfffff8e7, 0x7, 0x40, 0xfffffffa, 0xdd3, 0x6, 0xfffffc00, 0x9, 0x8, 0x1ff, 0x0, 0xe3, 0x5, 0xe36, 0x9, 0x5, 0x0, 0x1, 0x1, 0x4a2, 0x40, 0x100, 0xfffffff7, 0x2, 0x3, 0x8, 0x6, 0x9d, 0x0, 0xc, 0x4, 0x0, 0xff, 0x800, 0x4, 0xc6, 0xc7, 0x33, 0x7, 0x10, 0x42f819d8, 0x613, 0x507, 0x6, 0x4, 0x793, 0x9, 0xb7a, 0x3f0, 0xff, 0xffffffe2, 0xac, 0x2c5a, 0x6, 0x888, 0x7, 0x1000, 0xffffffff, 0x1, 0x0, 0xfde1, 0x53e, 0x3, 0x9, 0x6, 0x1, 0x1, 0x4, 0x1, 0x5, 0xffff, 0xffff, 0x8, 0x3, 0x0, 0x5, 0x7, 0xfffffffc, 0x0, 0x9ff8, 0xffffe651, 0x2, 0x4b4, 0x683d, 0x86, 0x8001, 0x4, 0x40, 0x9, 0x335, 0x7ff, 0x4, 0xffffffff, 0xd2, 0xce, 0x8, 0x2, 0x8, 0xf12d, 0x1, 0x40000000, 0x8, 0x6, 0x5, 0x6, 0xfffffffd, 0x3, 0x1, 0x401, 0x200, 0x1, 0x1, 0x7fffffff, 0x0, 0x5, 0xfff, 0x2cbb, 0xf, 0xfffffffa, 0x1, 0x81, 0x5, 0x0, 0x7fff, 0x5e, 0x9, 0xa, 0xfffffffd, 0x1, 0x0, 0x7c23, 0xa, 0xfffffff9, 0xfffffffd, 0xd8, 0x400, 0x8, 0x6, 0x5, 0x9, 0x62d0, 0xb5, 0x9, 0x3, 0x9, 0x6, 0x10000, 0x7, 0xfbe9, 0x13c2, 0x8, 0xc6, 0xa, 0x93, 0xfffffffd, 0x3, 0x5, 0x1, 0x80000001, 0x5, 0x6, 0x200, 0x6]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x80, 0xcba, 0x7fffffff, 0x9, 0x80000000, 0x7, 0x5, 0x9, 0x8, 0xe4, 0x80000000, 0xfffffffc, 0x6, 0x401, 0x10000, 0x4, 0x4, 0xffffff71, 0x9, 0x0, 0x3, 0x100, 0x6, 0x800, 0x2, 0x81, 0x4, 0xc, 0x8, 0x9, 0x7, 0xa, 0x5, 0x3, 0x6, 0x4, 0x9, 0x8, 0x1, 0x501, 0xd, 0x2161, 0x7, 0xe, 0x4, 0x6, 0x3, 0x4, 0x7, 0x2, 0x5, 0x4, 0x7, 0x8, 0x1, 0xfffffff2, 0x1, 0xfffffe00, 0xfffffff9, 0x9, 0x0, 0x8001, 0x5, 0x5a93, 0x0, 0xf2f2, 0x2, 0x10, 0x1000, 0x7, 0x9, 0xfffffff5, 0x8e1f, 0x1e1, 0x6, 0xf0, 0xc072, 0x10000, 0x6, 0x7, 0xffffffff, 0x3, 0x200, 0x3, 0x80000000, 0x2, 0x6fd, 0x3, 0x7, 0x800, 0x7fff, 0xffffffff, 0x401, 0x5, 0xfffffff8, 0x1, 0x2, 0x7, 0xd3, 0x2, 0x6f, 0xd5f, 0x6, 0x3, 0x9, 0x7, 0x1, 0xfffffffd, 0xf, 0x1, 0x0, 0x9, 0x1ff, 0x0, 0x8000, 0xa3, 0x7fff, 0x8, 0x9, 0x55, 0x4, 0x5, 0xff, 0x1, 0x0, 0x6, 0x7, 0x380000, 0x9, 0x1, 0xc7, 0x2de5, 0x9aa, 0x1, 0x80000001, 0x7, 0x3, 0x6, 0x1d, 0x1, 0x200, 0x4, 0x9, 0x7fff, 0xb, 0x200, 0xea, 0x80000000, 0x900, 0x3ff, 0xff, 0xf, 0x1, 0xa, 0x80000000, 0x6, 0x3, 0x704b75d5, 0xd4, 0x3, 0x8, 0x856, 0x10000, 0x5c0c, 0x8, 0xf844, 0x8, 0x3, 0x16, 0x6, 0x4d813ebf, 0xf, 0x3, 0x5, 0x800, 0x8, 0x400, 0x2, 0xfffffffa, 0x3a0d, 0x6, 0x1, 0x7, 0x79e4, 0x9, 0x35, 0x5, 0xb0, 0x2, 0x30, 0x23, 0x7e1, 0x9, 0x0, 0x1, 0x2, 0x9540, 0xfffffffe, 0x0, 0x1ff, 0x5, 0x8000, 0x401, 0x6, 0x9, 0x7, 0x4, 0x5d2d, 0x1, 0x6cb9, 0x9e0, 0x3, 0x0, 0x6, 0x3836, 0x1, 0xf, 0xbb27, 0xfff, 0x8, 0x4c2, 0x7b0e, 0x4, 0x649, 0xa7b, 0x6, 0xfffffff7, 0x8000, 0x80, 0x401, 0x1, 0xffffff79, 0x8, 0x80, 0xd, 0x7, 0x8, 0x4, 0x42a, 0x5, 0xffffffff, 0x2, 0xe, 0xc69b, 0x4, 0x3, 0x5, 0x1ff, 0x5, 0x10000, 0x9, 0x401, 0xffffffff, 0x2, 0x30000000]}]}]}}]}, 0x18a8}}, 0x800) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) r8 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0xc9}]}, 0x2c}}, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r5, 0xc0096616, &(0x7f0000000000)={0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) socket$netlink(0x10, 0x3, 0x0) r11 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000680), 0x20002, 0x0) ioctl$PPPIOCATTACH(r11, 0x4004743d, &(0x7f00000006c0)) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r12 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r12, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r13, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)='\r', 0x1}], 0x1}, 0x4) 3.880925014s ago: executing program 3 (id=4130): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'geneve1\x00'}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8924, &(0x7f00000000c0)={'dummy0\x00', 0x1}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a312000000038000000030a01040000000000000000010000010900010073797a30000000000c0002"], 0xac}, 0x1, 0x0, 0x0, 0x8040}, 0x0) 3.671201334s ago: executing program 4 (id=4131): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, r2, 0xd207f959947d6054}, 0x14}}, 0x48060) 3.651473488s ago: executing program 3 (id=4132): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b15, &(0x7f0000000000)={'wlan1\x00'}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x4, 0xf) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x5c, r2, 0x5, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @crypto_settings=[@NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x10, 0x49, [0xfac0a, 0xfac06, 0xfac0d]}, @NL80211_ATTR_PMK={0x4}, @NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0xfac0c}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x88b5}, @NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0xfac0d}, @NL80211_ATTR_WPA_VERSIONS={0x8}]]}, 0x5c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b15, &(0x7f0000000000)={'wlan1\x00'}) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r0, 0x0, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) socket$inet6(0xa, 0x4, 0xf) (async) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x5c, r2, 0x5, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @crypto_settings=[@NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x10, 0x49, [0xfac0a, 0xfac06, 0xfac0d]}, @NL80211_ATTR_PMK={0x4}, @NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0xfac0c}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x88b5}, @NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0xfac0d}, @NL80211_ATTR_WPA_VERSIONS={0x8}]]}, 0x5c}}, 0x0) (async) 3.476723144s ago: executing program 4 (id=4133): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="12000000070000000400000002"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000080)) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffff}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0xd, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000009800000095"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r0}, &(0x7f0000000a00), &(0x7f0000000a40)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x18000000000002a0, 0xd28, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x4fe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 3.471916472s ago: executing program 0 (id=4134): r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @dev={0xfe, 0x80, '\x00', 0x16}, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}], 0x1, 0xc040) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x10, &(0x7f00000000c0), 0x4) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'veth1_to_bond\x00', 0x1000}) r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r7, 0x104, 0x7, &(0x7f0000000000)=0x1, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000001d00070f2cbd70000000000007000000", @ANYRES32=r8, @ANYBLOB="408052"], 0x1c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xa, 0xffff}}, [@TCA_RATE={0x6, 0x5, {0x5, 0xe}}]}, 0x2c}}, 0x0) 3.348788509s ago: executing program 4 (id=4135): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$sock(r0, 0x0, 0x0, 0x48094) socket$alg(0x26, 0x5, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000016c0)=[{{&(0x7f0000001300)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000001940)=[{&(0x7f0000001340)='Y', 0x1}, {0x0, 0x18}], 0x2}}], 0x1, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl(r3, 0x8b32, &(0x7f0000000040)) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000040)=ANY=[@ANYRES16=r1], 0x5c}, 0x1, 0x0, 0x0, 0x40d5}, 0x0) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0xfffffffd) r4 = accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000001000), 0x581, 0x40000000, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f00000002c0)={0x3, 0x1, 0x2, 0xff, 0xa4, 0x0, 0x1, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2, 0x20}, 0xe) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) 454.888115ms ago: executing program 3 (id=4136): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8001, 0xfffffff9, 0x57, 0x1bc4, 0x1, 0x4, 0x5, 0x400, 0x36}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000016c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_route={{0xa}, {0x14, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0xb9}, @TCA_ROUTE4_IIF={0x8, 0x4, r3}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000940)={0x0, 0x23, "27afca16fc2cf68dfb31937d52d3d3913edc71aba9615ef26343fb71bd3608bdc4712a"}, &(0x7f0000000980)=0x2b) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f00000009c0)={0x0, 0xa7, "3ff50172fdd297cfaf884cb2e93c24f21ff882a70bab726053232a4bc57c2faa6477aa75714c7795de092bc0c2ecf02316956bcd5fce948a3814a2cbb0d7dc08d30633828454764e4876090bc56bad16f8d74c0fb260f63cced72df93ee7a0e7cc021292f0bd427b659a60a367b861539933d8d84bdd6159b4b28dc9c7c11d2160b6e07efa5645dc1641190ed561904044b1828dc728f0189ab21f97dc78d2b40f07878ac48616"}, &(0x7f0000000a80)=0xaf) sendmsg$inet_sctp(r1, &(0x7f0000000b80)={&(0x7f00000001c0)=@in6={0xa, 0x4e24, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6a1}, 0x1c, &(0x7f00000008c0)=[{&(0x7f0000000480)="b41426bdb1d852f122122595b35de33272ca3c1a819eeb6e0a7b460f7790e2705e3364a01ae7d97f32433a9b4e9be0929862a4b4632713229bb187ddcc9a0dae605da65e6178d1ee016f139a53f4f159448bcf805700b63cc8410b983983a5fb2343d23d24e997b23a83756b95302491f84651ded7a92b45e8e2368b3d75cff419b617837334b69c1f328eac0d908a3c0f945a604a5f8bbb85675a21bfcfe891cf87bf2307f1e08ba194ea2320f7d1707134189b7cc5c1ce7236b458576da93287c8b9997c26c511b45c05b1fdb156", 0xcf}, {&(0x7f00000005c0)="07ef1665c570b6a917c82bd373b69baea5166f8fdeb6f0033603c8afb184b4c3e951ab85e39232c6833a330f175593fc2733b6d490ceed5e8dd774f2120f4d1b374a850d9fac5a83840279861ae6cac9593cdcbfa9f774b4018126d1966340237c75b0944008e7333cb97705b4ad72d5784fd739e971b3d026c4aba066bc4c80b2b2c4d5b4d3c5735f26c9c5be0431c5b82b45497b64ba1dfc2086e67165985c6594144d8ae1c217cf7a49b3df", 0xad}, {&(0x7f0000000700)="dfe0771ad80fd7dc0ce4186c8ca12c447fe7491e81a25310a81eb61d35b006ac5c567bd8c9492193c947195ea0501a559837f9eb01cf3a967d6c2871eb51781f7fca3d77191a0f1c17e97f02b7606c00cd183b9a083af5698611a1c4171582a6622ba0712f4467d0a7fc736ad2b756f2be6d457697c5d6adac057dfe3b4f2fb9", 0x80}, {&(0x7f0000000780)="9cd74cc1cb0e9357b4119c060334ae615196cf767605f7b29f0fa7acee71c13b048ff105d23fbb6634b6446f31e1014c8cfc02e315158dd1ffa047bfd27b29e683ca657253c7217b28bfd7ac5d8707e1ddbb03d11aee50e8626f1ad0733e648a16c6d6e6ea08", 0x66}, {&(0x7f0000000800)="f730cf6de03ac930b785e0002d74b16857d098fdfc807ceeccbd25fdb21e15294578454b3543088a3d74c05fbad97e251bedfed3a3e1601b0c821266aafc12a776793cd62cb3573214918b2c2c03cabe5ac393ed93bd20919d3c53b001129c4c03e497c9fe577468bd01fc46a7555f4ff6d1168383414df137286c841593a12b0126a9dc06ac8b2c2db4acc2f167cb5cfba23e1515c65f2602385ac0d1ccfc4f6fac83485578a3276b498276", 0xac}], 0x5, &(0x7f0000000ac0)=ANY=[@ANYBLOB="2000b2dbac14107e7cebd6bd000000000000840000feffff0500ffffff000000000000000000000000aa200000000000000084000000020000000400", @ANYRES32=r4, @ANYBLOB="180000000000000084000000050000002000000074f1000020000000000000008400000008000000fc020000000000000000000000000000200000000000000084000000020000005a0400020d00000001010000", @ANYRES32=r5, @ANYBLOB="1800000000000000840000000000000003007200080058ff"], 0xb0, 0x4000}, 0x81) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000180)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000001400791048000000000069001e000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0xa3}, 0x21) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = socket(0x400000000010, 0x3, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r11 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@getqdisc={0x34, 0x26, 0x4, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x9, 0xf}, {0xc, 0xfff1}}, [{0x4}, {0x4}, {0x4}, {0x4}]}, 0x34}}, 0x0) close(r10) socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000280)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r12, {0xffff, 0x5}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x8, 0x8, 0x8, 0xa, 0x3}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}}, 0x800) socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="44000806000000ff9d476900000000002000", @ANYRESDEC=r2, @ANYBLOB="0000000000000000240012800b00010062726964676500001400028008001b000000000008001a0000000000e2a9e5ddd9eef6ba76cce86c51a6252d567f73265118de00b98ab599e6017a7479d4c91f2f40038b956da0509c49edd0e94ad96b7f1be64b2556fcca4641cc38b0ca5a86fbadbe3fc20df0bff25e8a"], 0x46}}, 0x10) connect$qrtr(r1, &(0x7f0000000000)={0x2a, 0x3, 0x8000}, 0xc) 393.358634ms ago: executing program 4 (id=4137): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000001640)=0x4f1d, 0x4) sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0xf5) r2 = socket(0x2a, 0x2, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x5}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newtfilter={0x58, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {}, {0x1, 0xfff1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x28, 0x2, [@TCA_CGROUP_EMATCHES={0x24, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x14, 0x1, 0x0, 0x0, {{0x3, 0x9, 0x80}, [@TCA_EM_IPT_HOOK={0x4, 0x1, 0x4}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}]}]}}]}, 0x58}}, 0x1) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_ECN={0x8, 0xa, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24004002}, 0x2000400c) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000480)={@local, 0x0}, &(0x7f00000004c0)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000580)={'syztnl1\x00', &(0x7f0000000500)={'ip6tnl0\x00', 0x0, 0x4, 0xff, 0x1, 0x4, 0x40, @local, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x80, 0x8, 0x10000, 0xffffffff}}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000005c0)={'team0\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000003040)=[{{&(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10, &(0x7f0000000400)=[{&(0x7f00000000c0)="8d48daac9e0e296ff9bad867a31b2bd2bb394045a568d67ff757ef26aca26f5ff59551075dfec51210f73d51b8ec8f88c77a4e3dfd9e5ab5fc9b268b86e6469d88573f443b760f021c7ea66b5775718cf78201986f2af1ac0291f5440d8f3c8f98e440e9e5266b0144b64f39838dc677b68fc73508067e", 0x77}, {&(0x7f0000000140)="0abcc723c0d28d57131252dd537dceb7018b927a52536c3135891afc14e5c2b6f1822f1bc7b870c99e8546091c420c853fe0e3fca36c1865aa06caf6f286ee409bb5d58039ba8a79bff096088a4c6687a795afe50480c4983ba8477f60c1e9ee9ba30b229d4553f1f0f570786a799f23e79770a6cfc1e34020736b8b28bf61343d592c38e7370792cad3d3e089b7d8b64ecfcf299f8876dbd55165184fc3dac9e4d8d8167d53a0bb56b234156c626bdaf098c67b13af519b2d202a8be342274d65c7ddab2451a7cdbf20c63b1465", 0xce}, {&(0x7f0000000240)="1f6e2fcd91579455192ebc343588c6a351e52b4da04e6bdb97438015f3c671eb38f16f8ba3d874f3418e7e2d808ffabba501d6b692d980bbc387a6", 0x3b}, {&(0x7f0000000280)="74aaf08ec5a69209bdccd5a5b2945b45ff4b71ea64a9b896e87dcedc020f1cc6f7d05613f12d8e055a7d358f6184c91b56d3a44b11b0c5181e14d654e9798c570d55ca6988739b929ef3c1424145", 0x4e}, {&(0x7f0000000300)}, {&(0x7f0000000340)="51af884cc86d3578ab26e7ed3a58fbc1055d19fa5b1ea7775f95f7b9e2a38fd46bfafe6ce8b63cc8eca61c5659ea22a9775e9096fbb215927968c1e99f01bed0674a8eb0a89db1dd7cd1cf6078df6b677e782368ebd9a95ff7e4e2cce996342b992ec3449be883a3abcb8d6889857d45a1966e9819a2ecbf54e972900c703d4b4aa75ada3141f327582b2eef612d476c10fe09d98fb180001900", 0x9a}], 0x6, &(0x7f0000000600)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @local, @rand_addr=0x64010102}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x10}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @multicast1, @broadcast}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}, @ip_ttl={{0x14, 0x0, 0x2, 0xa}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @rand_addr=0x64010101, @broadcast}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4c9}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @broadcast, @private=0xa010101}}}], 0x118}}, {{&(0x7f0000000740)={0x2, 0x4e21, @private=0xa010101}, 0x10, &(0x7f00000008c0)=[{&(0x7f0000000780)="aac2de5e02bc20af71a5f7616f76a188621b7a7a464e05a6c8c7fed0bc4ee717fc5e14b0c702f83f33d2495d2bde3dc597bd30b1a3fcdd036582f409ecadd6d2fdd88d3001a85dc00e1d1b1b7cb061cb71477673cd44714e4fa3d3946b061befe8add3b988d88a58549ee6efe153ecc80db37992c6ed0e990a111d576365fa780a02d4d6ce86e857f90ed37784fb428a87c2bfa90690627027382a809bbfa3b9fe5f8bd2fc6f4749a5ce06cc21e1690d94972e03cf95f8b9572789789f799af53586ca45afcfef6e045edab7f16662a5e63e05cb46a2e307c456d3541b9b9f3d69fb966a6d9627ddca42560bd7", 0xed}, {&(0x7f0000000880)="7a102292b9f50d67a2802dcbab4ebaa7f9", 0x11}], 0x2, &(0x7f0000000900)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @empty}}}, @ip_retopts={{0x20, 0x0, 0x7, {[@noop, @ra={0x94, 0x4}, @lsrr={0x83, 0xb, 0x96, [@loopback, @empty]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xfffffffd}}, @ip_ttl={{0x14}}], 0x88}}, {{&(0x7f00000009c0)={0x2, 0x4e21, @multicast1}, 0x10, &(0x7f0000002ac0)=[{&(0x7f0000000a00)="b53259f59b193c056141b4ec34be5c57e78c68341821821171afb7a88feeab31adcbc4eb0e43c65dd3f11c60c7351968b703427e393dc80dccf04174b333a4fdc4f8c2285e5c8e22b79c", 0x4a}, {&(0x7f0000000a80)="8296b3239a5e5442b66bc945164d115b011e81f02d0a2756f3b695f75ec85075f7897de5819158a540fad724104e440ee7ea3154e439dffefcd002cc30b744e8338858e8689971d26b47b990966844ef59ad4d4b83e1fc8df3b1e5ede4f3cef388a80bfa10b710b3a43370a7c304e25f1c4bde0136223d0474226e7469e79dbac3676c4390afb80d7b7b509056914b97f79409a36196fc48de2a90782eff9b2d49e1a861a4c43bc1ace56f71990b91d32aa1ca0864e4587f207f25887fc4dc0afc644cb0a00f08fd297d209cfb2390b563ab0619c5eb6af138d0f3b66911271f31760e4c", 0xe4}, {&(0x7f0000001680)="3913e98f24d2c1d8aeae4d15c7ccb40981317cfcdf164d6d52f1f83bbaf5a965253c60f4a4aca63051ba55938bb1ca60fda07779e66131cac2bdcd90c967a0d86cc8420539cbf2335691e6722bb93b1a3030984e750a003097fbaff8e4cd7700cd0c96db13e9871ba9e2ab935abd3e68f8bac341c7640eed4032e435100b2ce78cef64d81d18648f8e9642a66b86e3b47ffbedd93fad9026c4c92ae0762f39f2d2fc2d7995fee2861755b99cf30ed55f87fdea80ae6b0d82b1f99c7b48a92cdc9e2be5efe64c831a36cc874aa3f70f32d2e88ab0b1c7a4e3f4a03c1bda2af69e4d8d8722a5b54b702ac4a45ee970d2bf3739c87a5aeff38240525de70479fbdd9b5ad6988b1f97c61346aa200e452df7fd63addf9450f0328fd53b111997cff8b2fba04e02cc759405663bad6e14eb457e6141c2355998daefae123c1ff3e5e2817fb1e9299e09c1b86eee7a5b8e52af1c332515f6552bba6970fa9e766d377457f93e653fb67eb4633cf874f0a6f6d55d5b2e4e77588d6c9d3f96ce2db811801f6383095715766aee5eb3d5621b3383db42855c37e569da8617132828fddf89f47ad311ea8ef19f0daffa7fc4b00f37efa3fefaaa4d42cab99fada1048c80a7cacfb67b1716b0fddb5f47e7fe29a5b9d04f10d3d3da1b76a3dfd8815a5b07c3d606593173b6aa04ff3f7f3d51fd67fa126ffcfc8b8d5306339130e8ee9829df3bb28a59d1ec3a8a79d55b00499b7543bbc6eb4fc78abac50ff4ee0bc4d281eea4e2d21e78a0e2c45c309f4375feef4f19322129cdc7a87f9069b3eb4e7d1de86efb82debd59ea4e3e9bb42c010b5ed61b517368533ac529f32f7c3aa1a2998cc305c34ae8b72dda69b785c16a2a77b9a6d3f51e7b8d23d1a55c77b3699a0b1c12bd50d3fa1d88df27f2d3217ff7190e2096dd6a6a89e03827bbee7d3c03f49f4b1d47be272919bf6b6d893ee1641710ba8cc9481cebbe899abca7df4d3cb0dc44857e12e33168ecad6533075e42f578628e107edf2503f12fbf9557f22b1031a934282eec3869a90de68544083e0f87bec4df98df04dc6ecd2a20f66d8af03af740e892fa6e146a5bec2e23f6c4f7b1dc253338c5df6eec841551a3a97577146fa1b5d29b4aa5f191963e9203d30554d72e9283e61c83d665984b7a6e6b9c3ddca055c7df1937d24335c79c5c213d54223776ddcdb0db2aa09b83b9a5fde8f931f1e9fe87ea00d96f9d4f8a80cf9996f070e5579ad8e9bcb0a4c89f593a2329b44722f8eaf0212938e00ae5c855df8a7e547f852d93f8788d392ef31565da9a8ed2800609744b98a715354a0b8fb310d370333e1453e38330660bffac19d86e09f8f108ff9a9f22c59331988543110e3873d4f56a719e062c433461c070c314dce6976893558ff24fe394f87225aeec732f905f135513f0c0210eae41e7c7040191d6ca27d1a3e91dc8a9e5a67cc2e0ddf63a93df3d38ce0a088e32b0776bc28093a04b4f75dc4a4bcbfc4fcd4e2f47647f7589acb6c149d1691899ee0a97dc5a3160063a90208316e4d69d78d665aeacd99de054321f6b64741db63486007807ac9147c9073a5400fc9ccc541a40a4bf1c41b08942b010cd5ea9145d01be3d78c28f5df87d9c46ed4fe83d9d49893c5cd670f0c0926fb292ebcc5963e63d4e8600323cdf17e13613426530fe743cf5eb023ad340ce9d3ec82350d7eca41b761596bb1bf5412e4d3ab627762a23d27f42ff166d95236c447e3d479b33916024cb8847ce13f351c5f9ff65b459d97fe4abb95001f2738eb7ad3e60d1fb67c5fa09bbeeb8892d147f5d4a60ef1258f78290cadaf2b5e55a3ea6c5a7f621575807665b081ec54829e5333d10ec75a6f0ce509111807053660c09e123ef7bdd80d97c8cad61c21660ce2f56ad20d8fe9155a03ac93f0a16ffeead36da432868105dee956b984e689c7b589298147a2b37dd9d3be5562738f4bf6951a04542cc2eaf4675efdcfb2f3441a60cf1ace86356956b0b46757a7b5301df38c957a8398666ddb19d4f09f865b3e75a87297aa03a6086fcde00ecbb4282d296fb0a2de76d6ee7d500c2be40a70ddc18aed0a7853a0ce7faee55f4dffedef2025580b04d4d87c664f8005db74ca525882310f0121cde784a0e75620b6bdeff28f37a1933740db62cbf5a753e0c35cce3886c60af77996b3cf9020c6db045e5684a0c09ebc7017a82d3da8d540720d2d75e2d3a3365907a3a51738f634f5629679fd15d38bbccb4e7faa5d50045b6ef9ed996142ac9f4080cecc1b6d50621ef3d05ef08a00293e77705f110aeff1cb6561c81bfea49ee5328284ad58737a684e6c4498be6edb8703e8634cc0482408a66a16d947113922fbbff9b93bc7805abbfa6e0b77f3fb1c6cc1180059bff6ae6b5d6412d0ee8323f7a92f2812964c9280511bcaf7a18420d1744a808270f437e6e6250256e8c2d8b28858a046e50756c852c0cd265c3b3ce7658e6d39026eb2eda3ff3c9398aa95d3654b993cc69df90f2e286f72e61a2deab87ed8d44417f206459f1ef5628600ff1ffff28137dd5591dba75107c258d302658ef443abaebfb0ddf742fdb6a090090f069fefa99865d197391bf9a573119c2096467e02949558e1bf8abdc1d678605e9ed1963b7f2f44f6fd5fdda24d3aff6c475efcb55636b4f2d18470022935ec269bad66beca6e25e4c3dd818f2af495c46ee93ff6d6ae494d33af07cb43e4981bef68833108c21ae551c4a154b901fdc1cc1b1f38ba85c59e07ede48d5e0ec900b1c96048aaca1c1f8feaa3e6bd6c8aa13e15b1ea5bc5cc11a8be8e758b67df26e6be0fce679941eb4a51c541ed2a37a0481b939b0f7815e32156f28fb2ebe14ebd36226920524f731e82d50a0685bfb855eb1f880513a181c5c27318ee89ebdab73a9cfc613151c6f87d95dc40f3510b3bd40d02159ed08ed62fb4b880c881e7c4cce4219aced508e8fc27c62306df9914d204a9fbf0f802a63a4db78d07b27376b6fd3bf28724909352b1fe9d393455f5f2c269984d67dbcd08474738f10a8f9d0e2a0103accb55b36030e019c16319cf60fde8bbe7e408c86703ea96ce99bd0d651e35696d283663072ab486926442693f7cde9ff2bfa446a461409549c0b9ed297b8147ae66248e81fe0dbbd57f1811cca96214103bd42b8e9f32cbffff1f5e96992c529a3210aa672d59fc8f403273a6f633c71df358c491730e74d8da215973d323f5bb6283ee994afdac2fbcf94f16e619178bafa395ff61583dfe2eeed078715c1a8564bd4ccd73f739b00e366b49bb8134582786c94f6658a4f37bb9bb82b91458ddf1a14c0c7befe5682e0054fddf52e47872d4358c94c26c066c2b2241a8a2a2fb2f1072191067d577b0315c4b0b152df8dcb3af88c547ff9c592458872a9fbf3a191f3cc4ca902a3b569973d0b9d8b0b48ab2a8b126e18022d069a9bf0a964e9d8f1d24c20c76fc22ff2ff38b67b2cac25ee7b110c8f12ce6e0f323ff7afc0de4f9acf41446ae8b84b61818d9eed1b80ca137a90e841733a7fc0ab5888b73c049f4ffa1bd0dba2761b45df89e9d6fcaabe765bfa222714e84ab3faaf6d7fef5e1f3452d75e62c0062aaa64c78bc8da9bb596a61c32698fc65306ec2bf6f90e323ab3f9e49d62ec4b89f6cf48262cd21d6970d7bdb32ff6f18e6e4e46b08231a864361d88e814382ec93c3c55f2dc89c7ec112f83e8c3edbc6a6eb4687670fa533eb81570a869b481bbec20641c9adb6448ce4d2e5320ee1c142776be9477c568fcfc5314555063b50a795086589303e9fb8ff3ee18d4b68ac231b5667f2449795cd63aec08759f86fbbf53bbe68f68736a025476279898ebea665e6f0b76a39ff52e23a731f663a514ce6e5e659133965c0b6b54b6b8faf8614432642dae27e735264a7e9feade896b1cb7bb361376ba442cd66a5a79488c11ec1c316c3f6dce2e24a7cda66a903a2d7047f27c577f1a58649f98eb67b75c12c97dfc7f9f43c0fefe7fc6fd0d27e6b7d523b6c1183a11f07c6be3d7c921eb3d7edf38daeb55753e7416499252f8ebf4b5a8bea9edf311def07f35b9d062c5d1dfd47a8731373fef2afbc432c285e88cff6023c907e9b54e78180c862b48976fa9f4a779de4331af1d9a256ec7bbeeff7adb1277a7bc47e169914979e0a09b70a6317b179e21e2030f4fbbac172b396bc880935cae6bd0a69f2f04392e360548ade46d4510bf1a647124e67ca5f013ee002a0e205e56306a3026affbb1f029385956e1076184d5274fd8b7fdb95caf61f9813d01b9b970925fb15dedb7ec0c8f06b7a8649bfd4eac1678f732c93c777e1124d3ac99eb92bcaa36b35db939ff495fb03ea13d35cfb528a6e403d41f02be94561be99b1f0dd4788f68077047a7a7622dab6efe1cda60ea983bbe7a403d311d07c80fd79613eb9a6f3970a73b429eef65163e994b134630c7dd9779d68d7035a75f4261cdedd696472d2ec289d8ef782a561cd83a2368475cb56e7277d28e3ff11ad44cfcada287da4e5565b84a5c4ec18b94a950217dfff17a5db10e6ad8adfb2357a0650df43393387e99d396a71f31f6035601aa89bc10d76eeeb0f1f268110008207507e9b2a077066ac2043a65bfbf85e5c7522dbe447c005f66fba288dfae750a4a7f651a3df18cb4431fe1176001624b321547cd4cbad38c3ee7cbe3c19d38cc0e6751008da090cab526dedc8030495038e0c0e05168aac15f4dcdb8bd16d0d5d391da207c5d9cfdcd8146f0f884c9118255341ff72e52e6fab3c35e1d64bfe4b860063755f2b5070651294d4e74087ca6c438926715a301e168b2e5e1e16dbeb3a477e5c9b3444ed6e956ed3227ff8622cbeb565c443b55a840ae122feb6e56e92a9fd32a347f905db5506d78cc062ac13b21b9d06da04d50adff050d6b7988ba2e12fc34aa4abf77df49ac2782548fe05538eff7c6fb038160950842fbfeec0c4f22a1c89603b786209be7108bdf4b52252584d80f3ec259c27f16773667422ca9bbbe07bd5ca0fad7a1d304f74d96ed4e8fb4d5e908b7edafe861abbcafcd1cd9b576d185e809928695af5007aef7e773d975e6094680dea32609eba08e9f81a310e7904c199bea97a7239ac57854aafae0b3d87a16f9ac2f7ac82efa3d838115b5e67de4e63ff28ab97b0682ffbd3365777f2e88bcf17e85624e20fb0df30e636e6e46c5cfdc002bc86324821ea28d68cc1dc9cc886450947dad091cc21f94f7447abe64b582fc50a3dcbe9de98a304a15380fe9aebfce8fd2583687a49c3eadd591f24114dc8fee9c641c4b04c49b015ed9dacc24204de815f10c6ae4217db7ec7f1c258884dc70d8c05e5ed3390f74967f5737097b89145f8c02e5d7dbf8f5acffd22d74f70cb61141a20ce0b763a9a8ad38646f6b0ad3849cf75c98b2a3e28223ed5483db4d95cf1958ae13b077a595c64e407499fb85efa6b0582723ffd02679eded7408851909e6c8708556f1ae61546491ac80968c2086d20fd0c2d410151ea4642e5a188e46dac990457099c8e202a050712426be6d7b193e4e0e248465041fbf5371185c62e27e694b46d4cf44c0d6f1862e2acde4867af457f2346789497a66c955e597857531d32d4475c8163ba9114bb036c0aec1407e82a2eb36816b2ac4f0b511f7dc21cc3e034a6176403da79642f54442d47e46890ab86812e6278d1f1afa0aa3d548180cf007ec680e49c4577b31c58a8308accdb5bc63af48c1b3d6c86730da82d759080f991719ae7c6c737ac4a40b", 0x1000}, {&(0x7f0000002680)="1b949ae575a6dd588224e74b547fab1f4bec7808dbd179e9e858043ce39d1114579b1f009a475e5d51f7fab9966cff328fa47a482455fe882cafcdcb042f811c2fb3b200ad6d6812c131a7573760247e1fa5be1163c4eb08ac1b1b0901eff196795d61494f3fb488895903abbb6dbe82c8363682fdfa4c0e653f31153f654d830d09cdeae5b7d50cf08c71c5d1f07e4cf24902ed151b61c3905f76846060b36f6f56af5a2bae932090503d3a", 0xac}, {&(0x7f0000002740)="43403bb50863b5b0f3e6b66f3a7345fd1cda3212aecfe58702767342200da5f800652c97203530b0f315836b8f8750df64da2c84fe31e3ccad7ada7781686642a69658e50679e757ab629696f60333b85efda54e46ecaba1be804f0ab34170d86ab1df2f9c434f81a97ca371cf60458c16046d6930f45bee9f726d347514a3fc70e790ab9497199e9566cd810e18226ee40a6b9c6ff524272cfd23bb83dc46d18dfce7165ca85aa5cd822c3c7adcd4578116d249a0", 0xb5}, {&(0x7f0000002800)="3f8b8869b1d81a48a0a92ad507de158df4fc2254889a621e16aaeb3607a877e73a826ec44a1f252ebe0863fb7c4c3a1b66b97123fde658c28d1cb51d120233bfc5f2eb7804cb3a2943b5dff0783c2d4ee491b477fba76c55f4924f60396d68d56f4658cecc9d56c467682106e2f28fbc7889a49d10049420ed585761ffa97eab17bd6b690314fd81b2921fa14d156c8ddef82a11383029a7c02839441c88e5121c9c17a78dd32500f7624807c486295237", 0xb1}, {&(0x7f00000028c0)="4c88bfb76274694842826bdda0c477ae15a5a95d98060b5ad23e3d1f461ba332bff81d4fc925a3f45bdc58cd755dcdfe5b91f07c77f4a382b61e72919aa6c1c7c73ffbf2ec2197cc8c0286b328f2697790f988f4a36d8fda25720d709a978fc44d4eea2ea03cc92a704f3d72deecf6dbeaf49995aeba25345b5ca70013e95039c97aa0425e71ba63a8e9b54ddc9860c95b5e0ad6", 0x94}, {&(0x7f0000002980)}, {&(0x7f00000029c0)="ee3b6ce10df47af4bcd1a3a117283fb7f1b5d83d955f336965ef1d2bc8d15e34ba763aae786e0d32ead9d170360bec99c79cad05fa6a6f0182e012365b45761a0a423c7734efc963c76df1094179ccfba98d1d2e36650174e66ce8fcdd41a7d238d9f9d20b521ad3d042da2975f6d6aa0d2cc8ab4397a1f280c01c8f0c897e73335ff22430063565840e38c48b0a8bb60beb9a2193259a263bc3e6220aaa6e4334042f0bf3c4018f494f791d42e96f61c03012e9b17509371866a3cc513310db843030cc6439d8d6869ef811d7bfce8060ade207cc05d9", 0xd7}], 0x9}}, {{&(0x7f0000002b80)={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000002f80)=[{&(0x7f0000002bc0)="637e9f1957952a7f83d3fd36a5", 0xd}, {&(0x7f0000002c00)="4b2d3f4588160c038f82cf09d4daa5", 0xf}, {&(0x7f0000002c40)="ecb47c7b5a08892ec6f54bbfcd943d5d7bcd771f075544e6b1fa921dfa95877c9a0961cf7ad51bf4f9a873c28d3260a9e2356cb25726b52d561e29f850c7c310fdc7536e48a9dad03427f038ba048d0b22d0f9bab6f94a8d1fd2a6320d6dc9dafe375c17af0fa7a82051a1d8ef719738aafc3057e8666786b56c48549b35126d1874f00b33fc1e4a1c5d8e34", 0x8c}, {&(0x7f0000002d00)="37a05766d91ff843eae4c432cb55c3cefbeb1f662732535551a047b38197268f41b1c124076f98b3f731887dfefdc8ef7adb0c1594b67cb824f5a77a79de81341ea5036ba9fe0ca0a7c886398cfef7401580ba25433a1a566430a7aac996e58ada73429c0db49c101e7abffe6c141102384fd612151993b6b875398065d42d2458fa7c8ea1ed677923c656ba980db7c3dd9944f8e76e44c823d2a8d67d12942a3537bf3ebd2c21d52fde4ae23c3c2d75bf1b9d99149b0c7392c5b6e784565b9da543d88ed54536e546b1421b6a2d77d531ad3af93971a7af23cab432d99b735ce706c709ba4b69", 0xe7}, {&(0x7f0000002e00)="98bfae0ada4b69a9e1081cf1b003158bb0d7b7551e1625a474b966253e3e5ac1504d5898e2a0d840e2d132d5c88560191a2a333f3b30b6f8c9600ef96b2c4e23ab99cd5568686a6b27b7fab27cc57ba2741f1ff07e88", 0x56}, {&(0x7f0000002e80)="969307eadbab4925aeb0df638f6ce3310df7600af73ac85cabd4b339ba27378b6493876f1f866f246bab58e03403f7b52b0c6e74cc23072b3408a42c78a605a10a23f19ec4e684d972593b5acc1c6ad13b5d224e155b2b935b94895812da0e82a2ba715c17a1cf40aecb8b7613ca4f8e54683caff4d266831ef84c885bb404a4b4a6172b8f439b9a908db40ce78a5ac054e8ddcf65ab3cfc01e8fe6ad450ff2559018fb68d611d5dd22c6f23eff6f068968390675e7f8aca5b4de16b842d9e15935f43a7de5933b5a9277f182f13ecf7e20210ff0f7281b289075c26eec3a93a9c872c1f55a533", 0xe7}], 0x6, &(0x7f0000003000)=[@ip_ttl={{0x14, 0x0, 0x2, 0x81}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}], 0x30}}], 0x4, 0x24008010) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_TIOCOUTQ(r9, 0x5411, &(0x7f0000000000)) 393.128655ms ago: executing program 0 (id=4138): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f00000001c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000003a80)={0x0, 0x1c, &(0x7f0000003980)=[@in6={0xa, 0x2, 0x8001, @private2, 0xffffffff}]}, &(0x7f0000003ac0)=0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x3}, @enum, @func_proto={0x0, 0x2, 0x0, 0xd, 0x2, [{0x10}, {0x0, 0x5}]}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x50}, 0x20) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x6d, &(0x7f0000000080), &(0x7f00000000c0)=0x3930) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f00000000c0)={0x90000005}) epoll_pwait(r3, &(0x7f0000000100)=[{}], 0x1, 0xfffeffff, 0x0, 0x443c000000000000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000013030000000000b0944cc092a9673e02b1515f908df20b821f907c8963cc7a3175708b2f04003c62a36eb0bf8f14a1afc86bd0007a469c174aed8977eb2cd395cf164c418e5c81b6180e1155aa5c7ad53b0008532e2e49c1444b0aa01455c8ed2bbe3650c3a119092b5a6867af9d066b3edde496dca2855762171110a53142db8c70240843cce728427f8be831b3681ea086e1c10aa9090d7f9a767719413e90957469d450a2f13c84911760744b5c8e8c819510df505f26108a46b9"], 0x0, 0x26}, 0x28) connect$unix(r0, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e20}, 0x6e) 351.757591ms ago: executing program 1 (id=4139): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3d, &(0x7f0000000080)={0xb}, 0x8) connect$inet6(r0, &(0x7f0000000040)={0xa, 0xce23, 0x1, @loopback, 0x5}, 0x1c) r1 = socket(0xa, 0x1, 0x0) close(r1) (async) close(r1) socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000010c0)={0x0, 0x1de9, 0x70}, 0xc) (async) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000010c0)={0x0, 0x1de9, 0x70}, 0xc) write(r0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000000), 0x4) (async) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000000), 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$alg(0x26, 0x5, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)={0x118, 0x2c, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x106, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac0b}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @loopback}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29", @typed={0x8, 0x145, 0x0, 0x0, @ipv4=@remote}]}]}, 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) bind$alg(r4, &(0x7f0000000640)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) (async) bind$alg(r4, &(0x7f0000000640)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000200)=[{0x0, 0x0, 0x0}], 0x1, 0x20040802) recvmmsg$unix(r6, &(0x7f0000003900)=[{{0x0, 0x0, &(0x7f0000003bc0)=[{&(0x7f0000000700)=""/218, 0xda}], 0x1}}], 0x1, 0x41, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) (async) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x3c, r9, 0x101, 0x70bd27, 0x25dfdbfe, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x38, 0x40, 0x107, 0xfffffffe, 0x2, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x14, 0x2, 0x0, 0x1, [@nested={0x10, 0x14, 0x0, 0x1, [@typed={0xc, 0x13b, 0x0, 0x0, @u64=0x9}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0x44810) syz_genetlink_get_family_id$ipvs(&(0x7f0000001200), r3) (async) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001200), r3) sendmsg$IPVS_CMD_NEW_SERVICE(r7, &(0x7f00000012c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001280)={&(0x7f0000001240)={0x1c, r10, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1ff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1000}, 0x44) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x30, 0x40, 0x107, 0x70bd25, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x8, 0x3, 0x0, 0x0, @uid}, @typed={0x8, 0xf, 0x0, 0x0, @uid}]}, @nested={0x4, 0x2}]}, 0x30}}, 0xc000) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000100)=@qipcrtr={0x2a, 0x4, 0x1}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)="27031c00160014000000002f1eafacf706e105000000894f00050003ee0b80558ddbba9b37786fd808252372a31e4939884f0abc3c", 0x35}], 0x1}, 0x24004010) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) 180.106939ms ago: executing program 3 (id=4140): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0x11, 0x0, 0x0) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) ppoll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x1}, {0xffffffffffffffff, 0xa08e}, {r1, 0x14c8}], 0x3, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c0000006800e97800000000000000000a00000000000000040004"], 0x1c}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x702, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x18, 0x3, 0xffffdffe) r4 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe}}}]}, 0x38}}, 0x4000) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x800) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)={0x1c, 0x15, 0x301, 0x0, 0x0, {0xa}, [@typed={0x8, 0x2, 0x0, 0x0, @fd=r8}]}, 0x1c}}, 0x20000080) sendmsg$NLBL_UNLABEL_C_STATICADD(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x38}}, 0x40000) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x70}, [@ldst={0x5}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) 105.4188ms ago: executing program 1 (id=4141): r0 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'team_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001c0035742bbd7000fedbdf2502000000", @ANYRES32=r1, @ANYBLOB="1e002606080001"], 0x24}, 0x1, 0x0, 0x0, 0x20000005}, 0x4000004) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001c0035742bbd7000fedbdf2502000000", @ANYRES32=r1, @ANYBLOB='!'], 0x24}, 0x1, 0x0, 0x0, 0x8803}, 0x0) syz_emit_ethernet(0x11dc0, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd602a843500140600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="580080001063c94e0000"], 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140), &(0x7f00000000c0)=0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb01001800000000000000500000005000000002000000090000000000000e03000000010000000a0000000000000203000000000000000500000d0000000006000000010000000000000000000000000000000080000009000000000000000100000003"], 0x0, 0x6a, 0x0, 0x3, 0x7fffffff}, 0x28) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r5, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) setsockopt$inet_sctp6_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f0000000040)=@assoc_value={0x0, 0x9}, 0x8) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000002c0)={0x0, 0xfffffffffffffd87, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[], 0x14}}, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000200), 0x1, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000700)=@mangle={'mangle\x00', 0x64, 0x6, 0x500, 0x340, 0x340, 0x0, 0x340, 0x270, 0x430, 0x430, 0x430, 0x430, 0x430, 0x6, 0x0, {[{{@ipv6={@private0, @private1, [], [], 'ipvlan1\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @HL={0x28}}, {{@ipv6={@private1, @loopback, [0x0, 0x0, 0xff000000], [], 'tunl0\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x270}}, {{@ipv6={@private0, @remote, [], [], 'veth0_to_team\x00', 'tunl0\x00', {}, {}, 0x11, 0x0, 0x3, 0x44}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@loopback, @private2, [], [], 'syzkaller1\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, 'vlan0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x560) socket(0x10, 0x803, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYBLOB="340000141400b59500000000000000000a00000048aa1ff19cb45ccca43971298f3f62b4e3f5ee92d4911347517fd545dff7f31b6fb3daf9e06638347f6ca87363fd889b38cff098bb68435b74920a728e421c75666a1f9c7869688ee8f55cff1f503154da842d33c2345f0448b70c75f8bd74141a1a3064482547b2f886a082748b9cb2f8d34012921175cda61a87a7daadd31ccca5ebf7d4c3a2b696273ef191a107da90ca49df63b0ea8315b042e3e1cd1b6f35b4da87a2ad1e8aa1710033cd75e7924b84567890c3734a95fea6efea4990d25305f65865b9fc0afb91f2", @ANYRES32=r8, @ANYBLOB="1400020000000000000000000000ffff000000000800090008000000"], 0x34}}, 0x0) 103.994747ms ago: executing program 2 (id=4142): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x28, 0x40, 0x107, 0x70bd2b, 0x25dfdbfe, {0x4, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0xc, 0x9, 0x0, 0x1, [@nested={0x8, 0xff, 0x0, 0x1, [@nested={0x4, 0x146}]}]}, @typed={0x4, 0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc1b0000400007012bbd700000000000027c00000400c2800c000180060006008847"], 0x1bbc}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) syz_emit_ethernet(0x11dc0, &(0x7f0000000100)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x4, 0x5}}}}}}}, 0x0) 35.624428ms ago: executing program 4 (id=4143): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x10040000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x3}, 0xfffffd13) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x7, &(0x7f0000001740)={@mcast1, 0x0}, &(0x7f0000001780)=0x14) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000017c0), 0x4) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001940)={0x0, 0x7, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000019c0)={0x11, 0x7, &(0x7f0000001680)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7}, @ldst={0x2, 0x3, 0x4, 0x5, 0x3, 0xffffffffffffff80, 0xffffffffffffffff}]}, &(0x7f00000016c0)='syzkaller\x00', 0x4, 0x2d, &(0x7f0000001700)=""/45, 0x40f00, 0x13, '\x00', r2, 0x0, r3, 0x8, &(0x7f0000001800)={0x4, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001980)=[r1, r0, r1, r4], 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x1c, &(0x7f0000001840)=ANY=[@ANYBLOB="1800000000000000000000000300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a0000000bf91000000000000b7020000020000008500000085000000b7000000000002009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001380)={&(0x7f0000001a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)=""/4096, 0xbc, 0x1000, 0x0, 0x5}, 0x28) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r7}, 0xc) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000014c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000001440), &(0x7f0000001480)='%+9llu \x00'}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000015c0)=@bpf_ext={0x1c, 0x18, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xce5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], {{}, {}, {0x85, 0x0, 0x0, 0x42}}}, &(0x7f00000001c0)='GPL\x00', 0x0, 0xbd, &(0x7f0000000200)=""/189, 0x1e00, 0x38, '\x00', 0x0, 0x0, r6, 0x8, &(0x7f00000013c0)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000001400)={0x5, 0xc, 0x6, 0xb54b}, 0x10, 0x4b64, r7, 0x6, &(0x7f0000001500)=[r8, 0xffffffffffffffff, r9], &(0x7f0000001540)=[{0x5, 0x9, 0xc, 0x8}, {0x1, 0x1, 0x0, 0x7}, {0x3, 0x5, 0x2, 0x3}, {0x81, 0x4, 0xb, 0x1}, {0x3, 0x5, 0x3}, {0x5, 0x1, 0x3, 0x9}], 0x10, 0x9}, 0x94) r10 = socket$inet6_udp(0xa, 0x2, 0x0) socket$packet(0x11, 0xa, 0x300) r11 = socket(0x10, 0x3, 0x0) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r13 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r14, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newtfilter={0x50, 0x2c, 0xd27, 0x30bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r14, {0x0, 0xa}, {}, {0x10, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x20, 0x2, [@TCA_FLOW_EMATCHES={0x1c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x401}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xfffffd3d, 0x1, 0x0, 0x0, {{0xe6a7}}}]}]}, @TCA_FLOW_ADDEND={0x0, 0x5, 0x10}, @TCA_FLOW_PERTURB={0x0, 0xc, 0x6}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20048084}, 0x2008c010) setsockopt$inet6_udp_encap(r10, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) bind$inet6(r10, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x47, &(0x7f0000000240)={@link_local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x11, 0x11, 0x0, @local, @mcast2, {[], {0x4000, 0xe22, 0x11, 0x0, @gue={{0x2, 0x0, 0x3, 0x40, 0x100}, "f4"}}}}}}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 0s ago: executing program 2 (id=4144): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) connect$inet(0xffffffffffffffff, 0x0, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000180)={r2, r2, 0x2, 0xe, &(0x7f0000000140)="1758502552f3f293bb858daaf86c", 0x9, 0x5, 0x4, 0x8, 0x3, 0x0, 0xbc25, 'syz1\x00'}) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller0\x00', @broadcast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200504, 0x0) close(r4) r5 = socket$unix(0x1, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0xffffffff, 0x5}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x7ff, 0x100000000, 0x6eb, 0x5, 0x7, 0x2c0b}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) kernel console output (not intermixed with test programs): 7.316094][T15301] bond21: (slave batadv1): making interface the new active one [ 277.331635][T15301] bond21: (slave batadv1): Enslaving as an active interface with an up link [ 277.442394][T15316] bond18: entered promiscuous mode [ 277.458033][T15316] bond18: entered allmulticast mode [ 277.465770][T15316] 8021q: adding VLAN 0 to HW filter on device bond18 [ 277.514344][T15321] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2540'. [ 277.609211][T15323] x_tables: duplicate underflow at hook 2 [ 277.742251][T15330] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2543'. [ 278.057342][T15358] netlink: 268 bytes leftover after parsing attributes in process `syz.3.2552'. [ 278.392304][T15378] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 278.662045][T15388] syzkaller0: entered promiscuous mode [ 278.688937][T15388] 0: reclassify loop, rule prio 0, protocol 800 [ 278.692173][T15394] netlink: 'syz.0.2564': attribute type 1 has an invalid length. [ 278.729937][T15394] 8021q: adding VLAN 0 to HW filter on device bond17 [ 279.079950][T15415] netlink: 'syz.3.2570': attribute type 24 has an invalid length. [ 279.180233][T15414] pim6reg527: entered allmulticast mode [ 279.216199][T15414] netlink: 'syz.0.2571': attribute type 1 has an invalid length. [ 279.348688][T15429] bond17: (slave veth0_to_bond): Releasing active interface [ 279.419046][T15441] netlink: 'syz.3.2577': attribute type 1 has an invalid length. [ 279.458536][T15430] bond22 (unregistering): Released all slaves [ 279.572495][T15431] bond22: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 279.583908][T15431] bond22 (unregistering): Released all slaves [ 279.676626][T15441] 8021q: adding VLAN 0 to HW filter on device bond26 [ 279.845859][T15467] netlink: 'syz.2.2584': attribute type 1 has an invalid length. [ 279.926142][T15472] netlink: 'syz.4.2585': attribute type 1 has an invalid length. [ 279.935643][T15472] netlink: 'syz.4.2585': attribute type 2 has an invalid length. [ 279.997279][T15467] 8021q: adding VLAN 0 to HW filter on device bond22 [ 280.055389][T15473] bond22: (slave geneve6): making interface the new active one [ 280.078338][T15473] bond22: (slave geneve6): Enslaving as an active interface with an up link [ 280.316132][T15492] netlink: 'syz.0.2592': attribute type 2 has an invalid length. [ 280.415571][T15495] bond16: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 280.519075][T15495] bond16: (slave lo): Enslaving as an active interface with an up link [ 280.561639][T15495] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 280.644359][T15510] xt_hashlimit: size too large, truncated to 1048576 [ 280.767338][T15515] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 280.787764][T15522] __nla_validate_parse: 10 callbacks suppressed [ 280.787785][T15522] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2597'. [ 280.812702][T15515] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 280.909531][T15529] tipc: Enabling of bearer rejected, media not registered [ 281.010636][T15537] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.2602'. [ 281.219952][T15548] wg1: entered promiscuous mode [ 281.225933][T15548] wg1: entered allmulticast mode [ 281.240476][T15548] netlink: 'syz.3.2608': attribute type 1 has an invalid length. [ 281.261335][T15548] netlink: 'syz.3.2608': attribute type 3 has an invalid length. [ 281.274082][T15548] netlink: 172 bytes leftover after parsing attributes in process `syz.3.2608'. [ 281.283909][T15548] NCSI netlink: No device for ifindex 813332851 [ 281.521394][T15561] netlink: 'syz.3.2612': attribute type 9 has an invalid length. [ 281.542799][T15561] netlink: 'syz.3.2612': attribute type 6 has an invalid length. [ 281.561178][T15564] netlink: 'syz.3.2612': attribute type 9 has an invalid length. [ 281.840823][T15578] openvswitch: netlink: Flow actions attr not present in new flow. [ 281.852576][T15578] syzkaller0: entered promiscuous mode [ 281.858474][T15578] syzkaller0: entered allmulticast mode [ 281.916333][T15587] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 282.006892][T15595] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2621'. [ 282.416163][T15619] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2627'. [ 282.528756][ T62] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 282.564250][T15619] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2627'. [ 282.570813][ T62] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 282.617947][ T62] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 282.645391][T15619] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2627'. [ 282.658085][T15633] netlink: 212360 bytes leftover after parsing attributes in process `syz.1.2633'. [ 282.840222][T15644] IPv6: NLM_F_CREATE should be specified when creating new route [ 282.920747][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5830 ms [ 282.928890][ C0] lec:lec_tx_timeout: lec0 [ 282.935242][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 283.008408][T15647] pim6reg: entered allmulticast mode [ 283.104541][T15658] openvswitch: netlink: Message has 592 unknown bytes. [ 283.119239][T15658] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 283.616935][T15697] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2650'. [ 283.953781][T15710] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2651'. [ 284.243498][T15717] bond17: Invalid ad_actor_system MAC address. [ 284.258725][T15717] bond17: option ad_actor_system: invalid value (1) [ 284.275318][T15717] bond17 (unregistering): Released all slaves [ 284.473876][T15728] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 284.485720][T15728] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.668683][T15728] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 284.685260][T15728] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.856460][T15728] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 284.875469][T15728] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.900209][T15760] validate_nla: 1 callbacks suppressed [ 284.900283][T15760] netlink: 'syz.1.2666': attribute type 10 has an invalid length. [ 284.938622][T15760] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.946861][T15760] bridge_slave_1: left allmulticast mode [ 284.953539][T15760] bridge_slave_1: left promiscuous mode [ 284.959648][T15760] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.973162][T15760] .`: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 285.061860][T15728] batman_adv: batadv0: Removing interface: netdevsim0 [ 285.216045][ T6938] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 285.227497][ T6938] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.256127][ T6463] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 285.264962][ T6463] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.288193][ T6938] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 285.297817][ T6938] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.318182][ T6938] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 285.326886][ T6938] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.735432][T15757] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 287.951052][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 287.959162][ C0] lec:lec_tx_timeout: lec0 [ 287.964433][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 288.095447][T15808] pimreg: entered allmulticast mode [ 288.155334][T15815] __nla_validate_parse: 9 callbacks suppressed [ 288.155350][T15815] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.2684'. [ 288.218338][T15816] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2684'. [ 288.272203][T15823] netlink: 116 bytes leftover after parsing attributes in process `syz.4.2686'. [ 288.580569][T15843] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2693'. [ 288.611726][T15845] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2694'. [ 288.650348][T15847] workqueue: Failed to create a rescuer kthread for wq "bond23": -EINTR [ 288.776508][T15855] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 288.871745][T15859] ip6t_REJECT: ECHOREPLY is not supported [ 288.878200][T15859] netlink: 7064 bytes leftover after parsing attributes in process `syz.1.2699'. [ 288.888129][T15859] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 288.890572][T15861] netlink: 'syz.2.2700': attribute type 1 has an invalid length. [ 288.898743][T15859] sctp: [Deprecated]: syz.1.2699 (pid 15859) Use of int in maxseg socket option. [ 288.898743][T15859] Use struct sctp_assoc_value instead [ 288.941246][T15859] netlink: 13 bytes leftover after parsing attributes in process `syz.1.2699'. [ 288.950536][T15863] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2700'. [ 289.130209][T15869] FAULT_INJECTION: forcing a failure. [ 289.130209][T15869] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 289.188482][T15874] netlink: 'syz.1.2706': attribute type 1 has an invalid length. [ 289.197552][T15869] CPU: 1 UID: 0 PID: 15869 Comm: syz.0.2702 Not tainted syzkaller #0 PREEMPT(full) [ 289.197577][T15869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 289.197587][T15869] Call Trace: [ 289.197594][T15869] [ 289.197601][T15869] dump_stack_lvl+0xe8/0x150 [ 289.197631][T15869] should_fail_ex+0x412/0x560 [ 289.197660][T15869] _copy_from_user+0x2d/0xb0 [ 289.197680][T15869] ___sys_sendmsg+0x1c6/0x360 [ 289.197706][T15869] ? __lock_acquire+0x6b5/0x2cf0 [ 289.197731][T15869] ? __pfx____sys_sendmsg+0x10/0x10 [ 289.197789][T15869] ? __fget_files+0x2a/0x420 [ 289.197809][T15869] ? __fget_files+0x3a0/0x420 [ 289.197839][T15869] __x64_sys_sendmsg+0x1bd/0x2a0 [ 289.197867][T15869] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 289.197901][T15869] ? __pfx_ksys_write+0x10/0x10 [ 289.197932][T15869] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.197951][T15869] do_syscall_64+0x15f/0xf80 [ 289.197971][T15869] ? trace_irq_disable+0x3b/0x140 [ 289.197989][T15869] ? clear_bhb_loop+0x40/0x90 [ 289.198010][T15869] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.198026][T15869] RIP: 0033:0x7f45eff9c819 [ 289.198043][T15869] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 289.198058][T15869] RSP: 002b:00007f45f0e46028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 289.198077][T15869] RAX: ffffffffffffffda RBX: 00007f45f0215fa0 RCX: 00007f45eff9c819 [ 289.198089][T15869] RDX: 0000000000000094 RSI: 0000200000001f80 RDI: 0000000000000003 [ 289.198100][T15869] RBP: 00007f45f0e46090 R08: 0000000000000000 R09: 0000000000000000 [ 289.198111][T15869] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 289.198121][T15869] R13: 00007f45f0216038 R14: 00007f45f0215fa0 R15: 00007ffe3cc4bdb8 [ 289.198150][T15869] [ 289.388035][T15879] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2705'. [ 289.962418][T15912] tun0: tun_chr_ioctl cmd 1074025675 [ 289.970519][T15912] tun0: persist disabled [ 290.140212][T15929] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2718'. [ 290.219054][T15929] ip6erspan0: entered promiscuous mode [ 290.272397][ T6453] bond0: (slave bond_slave_0): link status definitely down, disabling slave [ 290.888492][T15970] netlink: 'syz.0.2728': attribute type 2 has an invalid length. [ 291.219851][T15985] openvswitch: netlink: Actions may not be safe on all matching packets [ 291.948649][T16019] netlink: 'syz.1.2741': attribute type 17 has an invalid length. [ 292.055437][T16024] netlink: 'syz.3.2742': attribute type 11 has an invalid length. [ 292.090523][T16026] FAULT_INJECTION: forcing a failure. [ 292.090523][T16026] name failslab, interval 1, probability 0, space 0, times 0 [ 292.106687][T16026] CPU: 0 UID: 0 PID: 16026 Comm: syz.0.2743 Not tainted syzkaller #0 PREEMPT(full) [ 292.106713][T16026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 292.106724][T16026] Call Trace: [ 292.106730][T16026] [ 292.106737][T16026] dump_stack_lvl+0xe8/0x150 [ 292.106769][T16026] should_fail_ex+0x412/0x560 [ 292.106796][T16026] should_failslab+0xa8/0x100 [ 292.106813][T16026] ? skb_clone+0x212/0x3a0 [ 292.106830][T16026] kmem_cache_alloc_noprof+0x87/0x650 [ 292.106855][T16026] ? __netlink_lookup+0xc6/0x8b0 [ 292.106882][T16026] skb_clone+0x212/0x3a0 [ 292.106899][T16026] __netlink_deliver_tap+0x404/0x850 [ 292.106932][T16026] ? netlink_deliver_tap+0x2e/0x1b0 [ 292.106956][T16026] netlink_deliver_tap+0x19c/0x1b0 [ 292.106978][T16026] netlink_unicast+0x730/0x8e0 [ 292.107008][T16026] netlink_sendmsg+0x813/0xb40 [ 292.107038][T16026] ? __pfx_netlink_sendmsg+0x10/0x10 [ 292.107063][T16026] ? aa_sock_msg_perm+0xf1/0x1b0 [ 292.107087][T16026] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 292.107114][T16026] ____sys_sendmsg+0x972/0x9f0 [ 292.107138][T16026] ? __might_fault+0xaf/0x130 [ 292.107165][T16026] ? __pfx_____sys_sendmsg+0x10/0x10 [ 292.107196][T16026] ? import_iovec+0x73/0xa0 [ 292.107216][T16026] ___sys_sendmsg+0x2a5/0x360 [ 292.107238][T16026] ? __lock_acquire+0x6b5/0x2cf0 [ 292.107275][T16026] ? __pfx____sys_sendmsg+0x10/0x10 [ 292.107333][T16026] ? __fget_files+0x2a/0x420 [ 292.107353][T16026] ? __fget_files+0x3a0/0x420 [ 292.107382][T16026] __x64_sys_sendmsg+0x1bd/0x2a0 [ 292.107405][T16026] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 292.107437][T16026] ? __pfx_ksys_write+0x10/0x10 [ 292.107471][T16026] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.107488][T16026] do_syscall_64+0x15f/0xf80 [ 292.107506][T16026] ? trace_irq_disable+0x3b/0x140 [ 292.107525][T16026] ? clear_bhb_loop+0x40/0x90 [ 292.107544][T16026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.107558][T16026] RIP: 0033:0x7f45eff9c819 [ 292.107575][T16026] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 292.107590][T16026] RSP: 002b:00007f45f0e46028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 292.107610][T16026] RAX: ffffffffffffffda RBX: 00007f45f0215fa0 RCX: 00007f45eff9c819 [ 292.107623][T16026] RDX: 0000000000000094 RSI: 0000200000001f80 RDI: 0000000000000003 [ 292.107634][T16026] RBP: 00007f45f0e46090 R08: 0000000000000000 R09: 0000000000000000 [ 292.107645][T16026] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 292.107654][T16026] R13: 00007f45f0216038 R14: 00007f45f0215fa0 R15: 00007ffe3cc4bdb8 [ 292.107685][T16026] [ 292.489441][T16036] netlink: 'syz.4.2747': attribute type 11 has an invalid length. [ 292.520302][T16036] netlink: 'syz.4.2747': attribute type 16 has an invalid length. [ 292.529158][T16036] netlink: 'syz.4.2747': attribute type 6 has an invalid length. [ 292.537116][T16036] netlink: 'syz.4.2747': attribute type 5 has an invalid length. [ 292.891823][T16069] pim6reg1: entered promiscuous mode [ 292.907431][T16069] pim6reg1: entered allmulticast mode [ 292.923076][T16068] netlink: 'syz.2.2756': attribute type 1 has an invalid length. [ 292.946858][T16068] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 292.970982][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 292.979087][ C0] lec:lec_tx_timeout: lec0 [ 292.983923][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 293.295308][T16080] netlink: 'syz.3.2759': attribute type 1 has an invalid length. [ 293.414868][T16084] __nla_validate_parse: 13 callbacks suppressed [ 293.414886][T16084] netlink: 11562 bytes leftover after parsing attributes in process `syz.0.2761'. [ 293.546877][T16094] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2764'. [ 293.570271][T16096] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2765'. [ 293.644262][T16098] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2766'. [ 293.676891][T16099] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2766'. [ 293.853737][T16118] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2768'. [ 293.898537][T16117] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2771'. [ 293.944610][T16117] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2771'. [ 294.450326][T16153] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2781'. [ 294.529156][T16158] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2779'. [ 294.695958][T16166] openvswitch: netlink: IPv4 frag type 127 is out of range max 2 [ 294.784600][T16168] macvlan0: left promiscuous mode [ 294.883889][T16174] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 295.048952][T16192] sctp: [Deprecated]: syz.1.2791 (pid 16192) Use of struct sctp_assoc_value in delayed_ack socket option. [ 295.048952][T16192] Use struct sctp_sack_info instead [ 295.184769][T16196] netlink: 'syz.4.2792': attribute type 13 has an invalid length. [ 295.210970][T16196] macvtap0: left promiscuous mode [ 295.216691][T16196] macvtap0: entered allmulticast mode [ 295.494510][T16221] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 295.689005][T16227] FAULT_INJECTION: forcing a failure. [ 295.689005][T16227] name failslab, interval 1, probability 0, space 0, times 0 [ 295.732568][T16227] CPU: 0 UID: 0 PID: 16227 Comm: syz.1.2801 Not tainted syzkaller #0 PREEMPT(full) [ 295.732594][T16227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 295.732605][T16227] Call Trace: [ 295.732612][T16227] [ 295.732619][T16227] dump_stack_lvl+0xe8/0x150 [ 295.732649][T16227] should_fail_ex+0x412/0x560 [ 295.732685][T16227] should_failslab+0xa8/0x100 [ 295.732703][T16227] ? skb_clone+0x212/0x3a0 [ 295.732720][T16227] kmem_cache_alloc_noprof+0x87/0x650 [ 295.732749][T16227] skb_clone+0x212/0x3a0 [ 295.732769][T16227] __netlink_deliver_tap+0x404/0x850 [ 295.732802][T16227] ? netlink_deliver_tap+0x2e/0x1b0 [ 295.732826][T16227] netlink_deliver_tap+0x19c/0x1b0 [ 295.732848][T16227] netlink_sendskb+0x68/0x140 [ 295.732869][T16227] netlink_rcv_skb+0x2b6/0x4b0 [ 295.732896][T16227] ? __pfx_genl_rcv_msg+0x10/0x10 [ 295.732914][T16227] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 295.732948][T16227] ? down_read+0x270/0x2e0 [ 295.732968][T16227] ? genl_rcv+0xd/0x40 [ 295.732987][T16227] genl_rcv+0x28/0x40 [ 295.733002][T16227] netlink_unicast+0x75c/0x8e0 [ 295.733035][T16227] netlink_sendmsg+0x813/0xb40 [ 295.733065][T16227] ? __pfx_netlink_sendmsg+0x10/0x10 [ 295.733091][T16227] ? aa_sock_msg_perm+0xf1/0x1b0 [ 295.733115][T16227] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 295.733144][T16227] ____sys_sendmsg+0x972/0x9f0 [ 295.733168][T16227] ? __might_fault+0xaf/0x130 [ 295.733197][T16227] ? __pfx_____sys_sendmsg+0x10/0x10 [ 295.733230][T16227] ? import_iovec+0x73/0xa0 [ 295.733250][T16227] ___sys_sendmsg+0x2a5/0x360 [ 295.733272][T16227] ? __lock_acquire+0x6b5/0x2cf0 [ 295.733299][T16227] ? __pfx____sys_sendmsg+0x10/0x10 [ 295.733360][T16227] ? __fget_files+0x2a/0x420 [ 295.733380][T16227] ? __fget_files+0x3a0/0x420 [ 295.733410][T16227] __x64_sys_sendmsg+0x1bd/0x2a0 [ 295.733437][T16227] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 295.733469][T16227] ? __pfx_ksys_write+0x10/0x10 [ 295.733501][T16227] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.733520][T16227] do_syscall_64+0x15f/0xf80 [ 295.733539][T16227] ? trace_irq_disable+0x3b/0x140 [ 295.733558][T16227] ? clear_bhb_loop+0x40/0x90 [ 295.733578][T16227] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.733595][T16227] RIP: 0033:0x7fd0d2f9c819 [ 295.733612][T16227] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 295.733626][T16227] RSP: 002b:00007fd0d3e32028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 295.733645][T16227] RAX: ffffffffffffffda RBX: 00007fd0d3215fa0 RCX: 00007fd0d2f9c819 [ 295.733656][T16227] RDX: 0000000000000094 RSI: 0000200000001f80 RDI: 0000000000000003 [ 295.733675][T16227] RBP: 00007fd0d3e32090 R08: 0000000000000000 R09: 0000000000000000 [ 295.733686][T16227] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 295.733696][T16227] R13: 00007fd0d3216038 R14: 00007fd0d3215fa0 R15: 00007ffdb06691e8 [ 295.733722][T16227] [ 296.058196][T16234] netlink: 'syz.2.2804': attribute type 10 has an invalid length. [ 296.121781][T16234] team0 (unregistering): Port device team_slave_0 removed [ 296.136082][T16234] team0 (unregistering): Port device 26±ÿ removed [ 296.154621][T16234] team0 (unregistering): Port device bridge4 removed [ 296.172210][T16234] team0 (unregistering): Port device dummy0 removed [ 296.185828][T16234] team0 (unregistering): Port device gretap2 removed [ 296.206007][T16235] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 296.217428][T16235] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 296.230150][T16235] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 296.238959][T16235] bond0 (unregistering): Released all slaves [ 296.761464][ T5832] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 296.778391][ T5832] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 296.786769][ T5832] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 296.798049][ T5832] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 296.807798][ T5832] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 296.904746][T16261] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 296.939710][T16258] vxcan1 speed is unknown, defaulting to 1000 [ 297.226229][T16273] netlink: 'syz.1.2816': attribute type 4 has an invalid length. [ 297.344729][T16282] veth7: entered promiscuous mode [ 297.577485][T16294] netlink: 'syz.4.2820': attribute type 7 has an invalid length. [ 297.613856][T16294] netlink: 'syz.4.2820': attribute type 8 has an invalid length. [ 297.775842][T16305] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 297.862232][T16305] IPVS: stopping backup sync thread 12730 ... [ 297.892644][T16311] netlink: 'syz.4.2825': attribute type 1 has an invalid length. [ 297.940911][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 297.991041][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 297.999106][ C0] lec:lec_tx_timeout: lec0 [ 298.004092][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 298.171088][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.273559][T16258] chnl_net:caif_netlink_parms(): no params data found [ 298.608988][T16258] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.609911][T16351] netlink: 'syz.0.2836': attribute type 1 has an invalid length. [ 298.627210][T16258] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.643823][T16258] bridge_slave_0: entered allmulticast mode [ 298.659402][T16351] __nla_validate_parse: 26 callbacks suppressed [ 298.659420][T16351] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2836'. [ 298.664107][T16258] bridge_slave_0: entered promiscuous mode [ 298.687015][T16258] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.698333][T16351] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2836'. [ 298.708706][T16258] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.718497][T16351] netlink: 'syz.0.2836': attribute type 2 has an invalid length. [ 298.727633][T16258] bridge_slave_1: entered allmulticast mode [ 298.736593][T16258] bridge_slave_1: entered promiscuous mode [ 298.738898][T16345] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 298.746351][T16351] netlink: 'syz.0.2836': attribute type 2 has an invalid length. [ 298.782351][T16351] netlink: 'syz.0.2836': attribute type 2 has an invalid length. [ 298.845994][T16258] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 298.909215][T16258] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 298.919628][ T5828] Bluetooth: hci5: command tx timeout [ 298.980301][T16258] team0: Port device team_slave_0 added [ 298.989148][T16258] team0: Port device team_slave_1 added [ 299.116336][T16258] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 299.138097][T16258] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 299.197445][T16258] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 299.249196][T16258] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 299.257340][T16258] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 299.287465][T16258] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 299.396104][T16383] syzkaller0: entered promiscuous mode [ 299.414976][T16383] syzkaller0: entered allmulticast mode [ 299.480080][T16258] hsr_slave_0: entered promiscuous mode [ 299.480253][T16383] netlink: 'syz.3.2847': attribute type 1 has an invalid length. [ 299.495390][T16258] hsr_slave_1: entered promiscuous mode [ 299.514164][T16258] debugfs: 'hsr0' already exists in 'hsr' [ 299.522844][T16258] Cannot create hsr debugfs directory [ 299.571698][T16407] xt_hashlimit: size too large, truncated to 1048576 [ 299.605034][T16383] 8021q: adding VLAN 0 to HW filter on device bond0 [ 300.078241][T16426] netlink: 100 bytes leftover after parsing attributes in process `syz.1.2858'. [ 300.184535][T16432] ip6erspan1: entered allmulticast mode [ 300.362487][T16439] sctp: [Deprecated]: syz.0.2863 (pid 16439) Use of struct sctp_assoc_value in delayed_ack socket option. [ 300.362487][T16439] Use struct sctp_sack_info instead [ 300.453674][T16258] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 300.463663][T16447] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2865'. [ 300.474886][T16258] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.505265][T16258] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 300.688206][T16258] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 300.699201][T16258] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.713901][T16258] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 300.733636][T16458] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2868'. [ 300.746002][T16458] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2868'. [ 300.812940][T16458] netlink: 244 bytes leftover after parsing attributes in process `syz.4.2868'. [ 300.836759][T16258] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 300.857989][T16258] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.891219][T16258] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 300.986754][T16470] x_tables: unsorted underflow at hook 2 [ 301.000812][ T5828] Bluetooth: hci5: command tx timeout [ 301.013906][T16258] bond0: (slave netdevsim0): Releasing backup interface [ 301.037504][T16258] netdevsim netdevsim2 netdevsim0 (unregistering): left allmulticast mode [ 301.055801][T16473] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.2872'. [ 301.067537][T16473] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.2872'. [ 301.094971][T16473] geneve4: entered promiscuous mode [ 301.123746][T16473] geneve4: entered allmulticast mode [ 301.142611][ T6463] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 301.182184][ T6463] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 301.189807][T16485] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2874'. [ 301.211150][ T6463] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 301.576117][T16500] bond_slave_0: Caught tx_queue_len zero misconfig [ 301.775851][T16512] validate_nla: 1 callbacks suppressed [ 301.775868][T16512] netlink: 'syz.0.2883': attribute type 5 has an invalid length. [ 301.791171][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 301.803216][T16258] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 301.934927][T16258] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 301.954759][T16258] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 301.992061][T16258] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 302.026617][T16258] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 302.048936][T16258] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 302.057868][T16258] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 302.073265][T16258] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 302.549545][T16258] 8021q: adding VLAN 0 to HW filter on device bond0 [ 302.584619][T16258] 8021q: adding VLAN 0 to HW filter on device team0 [ 302.617820][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.626538][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 302.676622][T16568] team0: Caught tx_queue_len zero misconfig [ 302.719766][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.726990][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 302.788534][T16568] dummy0: Caught tx_queue_len zero misconfig [ 302.924732][T16585] netlink: 'syz.0.2901': attribute type 9 has an invalid length. [ 303.010713][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 303.019218][ C0] lec:lec_tx_timeout: lec0 [ 303.025425][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 303.071703][ T5828] Bluetooth: hci5: command tx timeout [ 303.175465][T16597] bridge4: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 303.508111][T16617] netlink: 'syz.4.2909': attribute type 1 has an invalid length. [ 303.516450][T16617] netlink: 'syz.4.2909': attribute type 1 has an invalid length. [ 303.524897][T16617] netlink: 'syz.4.2909': attribute type 8 has an invalid length. [ 303.565963][T16258] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 303.672197][T16612] __nla_validate_parse: 83 callbacks suppressed [ 303.672216][T16612] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2907'. [ 303.748721][T16627] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2910'. [ 303.766971][T16627] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2910'. [ 303.778781][T16627] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2910'. [ 303.798082][T16627] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2910'. [ 303.803834][T16258] veth0_vlan: entered promiscuous mode [ 303.822131][T16627] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2910'. [ 303.842716][T16627] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2910'. [ 303.896958][T16258] veth1_vlan: entered promiscuous mode [ 304.009652][T16640] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2915'. [ 304.017157][T16258] veth0_macvtap: entered promiscuous mode [ 304.052211][T16258] veth1_macvtap: entered promiscuous mode [ 304.105261][T16258] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 304.157237][T16258] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 304.171602][T16648] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2917'. [ 304.191020][ T9551] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.209305][ T9551] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.235907][ T9551] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.277172][ T9551] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.399267][ T6450] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 304.448341][ T6450] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 304.569198][ T9551] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 304.578779][ T9551] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 304.655776][T16637] bond17: (slave bond_slave_1): Device is not our slave [ 304.665617][T16637] bond17: option active_slave: invalid value (bond_slave_1) [ 304.681510][T16637] bond17 (unregistering): Released all slaves [ 305.089644][T16687] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2926'. [ 305.111147][T16690] tipc: Enabling of bearer rejected, failed to enable media [ 305.154816][ T5828] Bluetooth: hci5: command tx timeout [ 305.182533][T16687] ipt_REJECT: TCP_RESET invalid for non-tcp [ 305.196936][T16695] veth0_macvtap: left promiscuous mode [ 305.573890][ T5832] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 305.590167][ T5832] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 305.600353][ T5832] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 305.613374][ T5832] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 305.626012][ T5832] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 305.713571][T16706] netlink: 'syz.0.2932': attribute type 2 has an invalid length. [ 305.969565][T16703] vxcan1 speed is unknown, defaulting to 1000 [ 306.638651][T16751] h: entered promiscuous mode [ 307.076268][T16703] chnl_net:caif_netlink_parms(): no params data found [ 307.347085][T16791] netlink: 'syz.3.2955': attribute type 1 has an invalid length. [ 307.418235][T16791] 8021q: adding VLAN 0 to HW filter on device bond27 [ 307.462398][T16703] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.486677][T16703] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.511081][T16703] bridge_slave_0: entered allmulticast mode [ 307.520538][T16703] bridge_slave_0: entered promiscuous mode [ 307.590498][T16801] bond20: Unable to set up delay as MII monitoring is disabled [ 307.603082][T16801] bond20 (unregistering): Released all slaves [ 307.686482][T16703] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.696712][T16703] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.705204][T16703] bridge_slave_1: entered allmulticast mode [ 307.721057][T16703] bridge_slave_1: entered promiscuous mode [ 307.723210][ T5832] Bluetooth: hci4: command tx timeout [ 307.861891][T16703] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 307.895795][T16703] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 308.040961][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 308.049136][ C0] lec:lec_tx_timeout: lec0 [ 308.053962][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 308.057504][T16703] team0: Port device team_slave_0 added [ 308.086468][T16703] team0: Port device team_slave_1 added [ 308.220469][T16838] chnl_net:caif_netlink_parms(): no params data found [ 308.291548][T16703] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 308.313890][T16703] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 308.319076][T16843] netlink: 'syz.2.2968': attribute type 1 has an invalid length. [ 308.345253][T16703] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 308.370544][T16846] x_tables: duplicate underflow at hook 2 [ 308.382089][T16703] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 308.400420][T16703] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 308.483106][T16703] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 308.689531][T16703] hsr_slave_0: entered promiscuous mode [ 308.711750][T16703] hsr_slave_1: entered promiscuous mode [ 308.726096][T16703] debugfs: 'hsr0' already exists in 'hsr' [ 308.739730][T16703] Cannot create hsr debugfs directory [ 309.116334][T16894] __nla_validate_parse: 9 callbacks suppressed [ 309.116352][T16894] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2981'. [ 309.144598][T16894] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2981'. [ 309.236011][T16894] geneve3: entered promiscuous mode [ 309.241704][T16894] geneve3: entered allmulticast mode [ 309.359705][T16904] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 309.476133][T16703] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 309.522015][T16703] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.532828][T16703] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 309.559304][T16916] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2986'. [ 309.572293][T16916] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2986'. [ 309.614140][T16916] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2986'. [ 309.787550][T16703] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 309.798637][ T5832] Bluetooth: hci4: command tx timeout [ 309.806381][T16703] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.826889][T16703] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 310.026603][T16703] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 310.065179][T16703] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.096058][T16703] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 310.154646][T16936] erspan0: entered promiscuous mode [ 310.184442][T16941] ip6t_srh: unknown srh invflags 4000 [ 310.382456][T16948] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3000'. [ 310.893388][T16967] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3006'. [ 310.921270][T16967] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3006'. [ 310.933799][T16967] netlink: 31 bytes leftover after parsing attributes in process `syz.2.3006'. [ 310.953126][T16967] netlink: 'syz.2.3006': attribute type 3 has an invalid length. [ 310.967153][T16967] netlink: 'syz.2.3006': attribute type 2 has an invalid length. [ 310.978214][T16967] netlink: 31 bytes leftover after parsing attributes in process `syz.2.3006'. [ 311.028302][T16703] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 311.088595][T16703] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 311.117935][T16703] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 311.136308][T16978] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 311.191720][T16703] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 311.220635][T16976] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 311.253732][T16987] netlink: 'syz.3.3012': attribute type 1 has an invalid length. [ 311.263291][T16976] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 311.289718][T16703] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 311.314782][T16703] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 311.332971][T16703] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 311.353897][T16703] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 311.465709][T17001] netlink: 'syz.3.3015': attribute type 1 has an invalid length. [ 311.628724][T17009] syzkaller0: entered promiscuous mode [ 311.638972][T17009] syzkaller0: entered allmulticast mode [ 311.694873][T16703] 8021q: adding VLAN 0 to HW filter on device bond0 [ 311.888137][ T5832] Bluetooth: hci4: command tx timeout [ 313.074811][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 313.082930][ C0] lec:lec_tx_timeout: lec0 [ 313.088418][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 313.961425][ T5832] Bluetooth: hci4: command tx timeout [ 314.466556][ T6938] team0: left allmulticast mode [ 314.476490][ T6938] team_slave_0: left allmulticast mode [ 314.485484][ T6938] team_slave_1: left allmulticast mode [ 314.501485][ T6938] bridge7: left allmulticast mode [ 314.515312][ T6938] bridge0: port 3(team0) entered disabled state [ 314.546279][ T6938] bridge_slave_1: left allmulticast mode [ 314.554233][ T6938] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.564697][ T6938] bridge_slave_0: left allmulticast mode [ 314.570586][ T6938] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.606498][T17054] __nla_validate_parse: 2 callbacks suppressed [ 314.606517][T17054] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3024'. [ 314.633055][ T6938] dvmrp0: left allmulticast mode [ 314.870318][ T6938] bond8 (unregistering): (slave gretap1): Releasing active interface [ 314.918515][ T6938] bond14 (unregistering): (slave geneve3): Releasing active interface [ 314.933786][ T6938] bond1 (unregistering): (slave geneve2): Releasing active interface [ 315.144845][ T6938] bond13 (unregistering): (slave bridge5): Releasing backup interface [ 315.225741][ T6938] team0: Port device bridge7 removed [ 315.329597][ T6938] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 315.339862][ T6938] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 315.349432][ T6938] bond0 (unregistering): Released all slaves [ 315.362628][ T6938] bond1 (unregistering): Released all slaves [ 315.376771][ T6938] bond2 (unregistering): Released all slaves [ 315.390476][ T6938] bond3 (unregistering): Released all slaves [ 315.406655][ T6938] bond4 (unregistering): Released all slaves [ 315.428075][ T6938] bond5 (unregistering): Released all slaves [ 315.441819][ T6938] bond6 (unregistering): Released all slaves [ 315.456021][ T6938] bond7 (unregistering): Released all slaves [ 315.478498][ T6938] bond8 (unregistering): Released all slaves [ 315.492665][ T6938] bond9 (unregistering): Released all slaves [ 315.506316][ T6938] bond10 (unregistering): Released all slaves [ 315.526163][ T6938] bond11 (unregistering): Released all slaves [ 315.539605][ T6938] bond12 (unregistering): Released all slaves [ 315.559309][ T6938] bond13 (unregistering): Released all slaves [ 315.573510][ T6938] bond14 (unregistering): Released all slaves [ 315.588423][ T6938] bond15 (unregistering): Released all slaves [ 315.607358][ T6938] bond16 (unregistering): (slave lo): Releasing backup interface [ 315.615761][ T6938] bond16 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 315.629770][ T6938] bond16 (unregistering): Released all slaves [ 315.671284][T17049] 8021q: VLANs not supported on ip6_vti0 [ 315.699002][T16703] 8021q: adding VLAN 0 to HW filter on device team0 [ 315.719275][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.726490][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 315.760039][ T6450] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.767349][ T6450] bridge0: port 2(bridge_slave_1) entered forwarding state [ 315.912002][T17069] netlink: 13 bytes leftover after parsing attributes in process `syz.3.3030'. [ 315.957841][T16703] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 316.295506][T17090] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3036'. [ 316.412079][T17100] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3038'. [ 316.466890][T17082] bond28: entered allmulticast mode [ 316.474563][T17102] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3038'. [ 316.518873][T17091] veth7: entered allmulticast mode [ 316.536662][T17093] bond28 (unregistering): Released all slaves [ 316.606115][ T6938] tipc: Disabling bearer [ 316.678244][ T6938] tipc: Left network mode [ 316.690190][T17102] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.697927][T17102] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.016292][T17123] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.3041'. [ 317.053819][T17123] netlink: ct family unspecified [ 317.263009][T17137] netlink: 'syz.2.3045': attribute type 1 has an invalid length. [ 317.394853][T17143] netlink: 212356 bytes leftover after parsing attributes in process `syz.3.3046'. [ 318.915259][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5820 ms [ 318.923361][ C0] lec:lec_tx_timeout: lec0 [ 318.928479][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 319.861948][T17151] netlink: 'syz.3.3049': attribute type 3 has an invalid length. [ 319.868820][T17150] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 319.981901][T17161] netlink: 212328 bytes leftover after parsing attributes in process `syz.0.3051'. [ 320.006777][T16703] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 320.862563][T17202] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 320.955134][T17202] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 321.040235][T17206] ip6_vti0: entered promiscuous mode [ 321.084836][T17206] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3061'. [ 321.241043][T17224] netlink: 'syz.3.3066': attribute type 5 has an invalid length. [ 321.249030][T17224] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3066'. [ 321.369819][T17229] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3066'. [ 321.393308][ T6938] team0 (unregistering): Port device team_slave_1 removed [ 321.412371][ T6938] team0 (unregistering): Port device team_slave_0 removed [ 321.565712][T17227] syzkaller0: entered promiscuous mode [ 321.571773][T17227] syzkaller0: entered allmulticast mode [ 321.704344][T16703] veth0_vlan: entered promiscuous mode [ 321.744984][T16703] veth1_vlan: entered promiscuous mode [ 321.852879][T16703] veth0_macvtap: entered promiscuous mode [ 321.875725][T16703] veth1_macvtap: entered promiscuous mode [ 321.939488][T17242] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3070'. [ 321.959007][T16703] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 322.052594][T16703] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 322.061509][T17246] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.3070'. [ 322.094132][T17249] netlink: 'syz.0.3073': attribute type 1 has an invalid length. [ 322.114353][ T6444] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.116650][ T6938] IPVS: stop unused estimator thread 0... [ 322.138063][ T6444] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.245490][T17249] 8021q: adding VLAN 0 to HW filter on device bond19 [ 322.255859][ T6444] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.304603][ T6444] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.441741][ T6453] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 322.469262][ T6453] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 322.520194][T17263] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3077'. [ 322.526387][ T6444] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 322.545716][T17265] sctp: [Deprecated]: syz.0.3078 (pid 17265) Use of struct sctp_assoc_value in delayed_ack socket option. [ 322.545716][T17265] Use struct sctp_sack_info instead [ 322.566248][ T6444] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 322.655587][T17270] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.2928'. [ 322.715291][T17275] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3079'. [ 323.017795][T17289] netlink: 'syz.1.3085': attribute type 1 has an invalid length. [ 323.213632][T17289] 8021q: adding VLAN 0 to HW filter on device bond20 [ 323.346040][T17302] tipc: Started in network mode [ 323.350169][ T5828] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 323.365225][ T5828] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 323.378545][ T5828] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 323.379520][T17302] tipc: Node identity d6ebe2893e52, cluster identity 4711 [ 323.404553][ T5828] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 323.415463][ T5828] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 323.472296][T17302] tipc: Enabled bearer , priority 0 [ 323.526609][T17305] syzkaller0: entered promiscuous mode [ 323.533326][T17305] syzkaller0: entered allmulticast mode [ 323.601764][T17305] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3090'. [ 323.751131][T17321] tipc: Resetting bearer [ 323.779843][T17324] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 323.787386][T17324] IPv6: NLM_F_CREATE should be set when creating new route [ 323.820191][T17304] vxcan1 speed is unknown, defaulting to 1000 [ 323.940731][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 323.948821][ C0] lec:lec_tx_timeout: lec0 [ 323.956978][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 323.977214][T17332] netlink: 'syz.4.3097': attribute type 1 has an invalid length. [ 324.136730][T17300] tipc: Resetting bearer [ 324.205026][T17300] tipc: Disabling bearer [ 324.397868][T17346] netlink: 'syz.4.3102': attribute type 2 has an invalid length. [ 324.886401][T17304] chnl_net:caif_netlink_parms(): no params data found [ 325.196018][T17304] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.200934][T17371] netlink: 'syz.0.3111': attribute type 1 has an invalid length. [ 325.213732][T17304] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.226069][T17304] bridge_slave_0: entered allmulticast mode [ 325.237063][T17304] bridge_slave_0: entered promiscuous mode [ 325.279079][T17304] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.286571][T17304] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.295323][T17304] bridge_slave_1: entered allmulticast mode [ 325.304622][T17304] bridge_slave_1: entered promiscuous mode [ 325.319505][T17387] netlink: 'syz.1.3112': attribute type 29 has an invalid length. [ 325.326189][T17382] __nla_validate_parse: 5 callbacks suppressed [ 325.326207][T17382] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3112'. [ 325.381674][T17387] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3112'. [ 325.414845][T17384] bridge_slave_1: entered allmulticast mode [ 325.476795][T17388] netlink: 'syz.1.3112': attribute type 29 has an invalid length. [ 325.484317][ T5828] Bluetooth: hci3: command tx timeout [ 325.510562][T17304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 325.559242][T17304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 325.662494][T17304] team0: Port device team_slave_0 added [ 325.687356][T17304] team0: Port device team_slave_1 added [ 325.799901][T17304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 325.820001][T17304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 325.869477][T17304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 325.897114][T17304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 325.908616][T17404] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3115'. [ 325.921822][T17304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 325.926636][T17404] openvswitch: netlink: Flow key attr not present in new flow. [ 325.975336][T17304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 326.157491][T17304] hsr_slave_0: entered promiscuous mode [ 326.168845][T17304] hsr_slave_1: entered promiscuous mode [ 326.189198][T17304] debugfs: 'hsr0' already exists in 'hsr' [ 326.211026][T17304] Cannot create hsr debugfs directory [ 326.806929][T17304] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 326.818808][T17304] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.949728][T17455] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3132'. [ 326.977979][T17304] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 326.990092][T17304] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.132994][T17304] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 327.158918][T17304] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.278789][T17464] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3134'. [ 327.323081][T17304] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 327.333606][T17304] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.562598][ T5828] Bluetooth: hci3: command tx timeout [ 327.911609][T17485] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3141'. [ 327.947937][T17488] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3139'. [ 328.037672][T17494] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3139'. [ 328.183514][T17502] netlink: 92 bytes leftover after parsing attributes in process `syz.1.3144'. [ 328.229591][T17502] netlink: 'syz.1.3144': attribute type 1 has an invalid length. [ 328.268106][T17304] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 328.323060][T17304] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 328.368775][T17304] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 328.417531][T17304] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 328.435121][T17304] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 328.482030][T17304] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 328.506354][T17517] netlink: 'syz.4.3147': attribute type 29 has an invalid length. [ 328.523326][T17517] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3147'. [ 328.535322][T17304] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 328.566961][T17304] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 328.792058][T17304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 328.866959][T17538] bond1: option fail_over_mac: invalid value (16) [ 328.909392][T17538] bond1 (unregistering): Released all slaves [ 328.970697][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 328.978774][ C0] lec:lec_tx_timeout: lec0 [ 328.981151][T17304] 8021q: adding VLAN 0 to HW filter on device team0 [ 328.983456][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 329.099146][ T6453] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.106424][ T6453] bridge0: port 1(bridge_slave_0) entered forwarding state [ 329.153556][ T6453] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.160840][ T6453] bridge0: port 2(bridge_slave_1) entered forwarding state [ 329.529034][T17565] xt_HMARK: spi-set and port-set can't be combined [ 329.631575][ T5828] Bluetooth: hci3: command tx timeout [ 329.883226][T17304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 329.916044][T17586] netlink: 'syz.2.3163': attribute type 1 has an invalid length. [ 329.948409][T17586] netlink: 'syz.2.3163': attribute type 1 has an invalid length. [ 329.952614][T17304] veth0_vlan: entered promiscuous mode [ 329.969413][T17586] netlink: 'syz.2.3163': attribute type 1 has an invalid length. [ 329.983260][T17586] netlink: 'syz.2.3163': attribute type 2 has an invalid length. [ 330.002122][T17304] veth1_vlan: entered promiscuous mode [ 330.075995][T17304] veth0_macvtap: entered promiscuous mode [ 330.112383][T17304] veth1_macvtap: entered promiscuous mode [ 330.215532][T17304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 330.239843][T17603] netlink: 'syz.2.3166': attribute type 1 has an invalid length. [ 330.253072][T17304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 330.280257][T17603] netlink: 'syz.2.3166': attribute type 1 has an invalid length. [ 330.306950][ T62] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.333903][T17608] netlink: 'syz.1.3168': attribute type 1 has an invalid length. [ 330.336150][ T62] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.383243][T17609] h: entered promiscuous mode [ 330.456643][T17619] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 330.531011][T17608] bond21: entered promiscuous mode [ 330.537561][T17608] 8021q: adding VLAN 0 to HW filter on device bond21 [ 330.554806][ T62] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.579689][T17610] macvtap0: entered allmulticast mode [ 330.606262][ T62] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.658844][T17631] netlink: 'syz.1.3174': attribute type 1 has an invalid length. [ 330.701078][T17631] workqueue: Failed to create a rescuer kthread for wq "bond22": -EINTR [ 330.809015][T17638] __nla_validate_parse: 9 callbacks suppressed [ 330.809035][T17638] netlink: 190972 bytes leftover after parsing attributes in process `syz.4.3176'. [ 330.845455][T17638] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3176'. [ 330.879241][T17639] netem: change failed [ 330.946551][ T6444] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 330.967536][ T6444] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 331.003299][T17648] C: Caught tx_queue_len zero misconfig [ 331.083263][T17648] netlink: 164 bytes leftover after parsing attributes in process `syz.0.3179'. [ 331.098633][ T6453] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 331.109692][T17651] tipc: Started in network mode [ 331.115984][ T6453] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 331.126032][T17651] tipc: Node identity de3f1e1a3576, cluster identity 4711 [ 331.138072][T17651] tipc: Enabled bearer , priority 0 [ 331.169610][T17651] syzkaller0: entered promiscuous mode [ 331.185053][T17651] syzkaller0: entered allmulticast mode [ 331.296842][T17651] tipc: Resetting bearer [ 331.326652][T17649] tipc: Resetting bearer [ 331.366375][T17663] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3182'. [ 331.395581][T17649] tipc: Disabling bearer [ 331.560165][T17667] bond1: option min_links: invalid value (18446744073709551614) [ 331.571680][T17667] bond1: option min_links: allowed values 0 - 2147483647 [ 331.609589][T17679] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3185'. [ 331.625684][T17667] bond1 (unregistering): Released all slaves [ 331.711173][ T5828] Bluetooth: hci3: command tx timeout [ 331.850132][T17684] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3187'. [ 331.955558][ T5832] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 331.967355][ T5832] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 331.984544][ T5832] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 332.018534][ T5832] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 332.028457][ T5832] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 332.220456][T17686] vxcan1 speed is unknown, defaulting to 1000 [ 332.880160][T17729] bridge0: port 3(vlan2) entered blocking state [ 332.919062][T17729] bridge0: port 3(vlan2) entered disabled state [ 332.931586][T17729] vlan2: entered allmulticast mode [ 332.943537][T17729] bridge0: entered allmulticast mode [ 332.961486][T17729] vlan2: left allmulticast mode [ 332.971012][T17729] bridge0: left allmulticast mode [ 333.229781][T17753] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 333.277645][T17758] validate_nla: 1 callbacks suppressed [ 333.277665][T17758] netlink: 'syz.0.3207': attribute type 3 has an invalid length. [ 333.297377][T17758] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3207'. [ 333.421528][T17763] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3209'. [ 333.487795][T17763] netlink: 404 bytes leftover after parsing attributes in process `syz.0.3209'. [ 333.953680][T17686] chnl_net:caif_netlink_parms(): no params data found [ 334.001566][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 334.009678][ C0] lec:lec_tx_timeout: lec0 [ 334.017168][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 334.110884][ T5832] Bluetooth: hci0: command tx timeout [ 334.313940][T17686] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.338384][T17686] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.371056][T17686] bridge_slave_0: entered allmulticast mode [ 334.416518][T17686] bridge_slave_0: entered promiscuous mode [ 334.448180][T17686] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.486443][T17686] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.515686][T17686] bridge_slave_1: entered allmulticast mode [ 334.538887][T17795] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 334.540182][T17686] bridge_slave_1: entered promiscuous mode [ 334.653920][T17686] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 334.702566][T17686] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 334.842781][T17808] netdevsim netdevsim4 netdevsim0: IPsec offload requires 128 bit authentication [ 334.858564][T17686] team0: Port device team_slave_0 added [ 334.915077][T17686] team0: Port device team_slave_1 added [ 335.045279][T17686] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 335.058409][T17686] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 335.090349][T17686] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 335.136158][T17686] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 335.168627][T17686] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 335.250232][T17686] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 335.334831][T17829] vlan2: entered promiscuous mode [ 335.339918][T17829] bridge0: entered promiscuous mode [ 335.458993][T17686] hsr_slave_0: entered promiscuous mode [ 335.482036][T17686] hsr_slave_1: entered promiscuous mode [ 335.500356][T17686] debugfs: 'hsr0' already exists in 'hsr' [ 335.520100][T17686] Cannot create hsr debugfs directory [ 335.535937][T17838] netlink: 'syz.0.3225': attribute type 1 has an invalid length. [ 335.614817][T17838] 8021q: adding VLAN 0 to HW filter on device bond20 [ 335.875010][T17853] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3229'. [ 336.191861][ T5832] Bluetooth: hci0: command tx timeout [ 336.293427][T17686] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 336.324520][T17686] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.489751][T17686] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 336.502217][T17686] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.776020][T17884] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 336.791942][T17686] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 336.816145][T17686] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.839602][T17888] netlink: 'syz.0.3238': attribute type 1 has an invalid length. [ 336.851184][T17889] netlink: 'syz.3.3241': attribute type 1 has an invalid length. [ 336.879370][T17891] netlink: 'syz.3.3241': attribute type 3 has an invalid length. [ 336.973627][T17888] 8021q: adding VLAN 0 to HW filter on device bond21 [ 337.023219][T17686] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 337.033959][T17686] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.070892][T17904] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3242'. [ 337.179160][T17909] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3245'. [ 337.188090][ T6448] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 337.188651][T17909] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3245'. [ 337.206975][ T6448] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 337.215558][ T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 337.355135][T17915] netlink: 80 bytes leftover after parsing attributes in process `syz.4.3246'. [ 337.403569][T17915] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3246'. [ 337.420408][T17918] tipc: Enabling of bearer rejected, failed to enable media [ 337.513229][ T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 337.772632][T17686] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 337.798742][T17686] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 337.858167][T17686] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 337.863976][T17937] netlink: 'syz.2.3253': attribute type 1 has an invalid length. [ 337.887457][T17686] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 338.023527][T17937] 8021q: adding VLAN 0 to HW filter on device bond1 [ 338.059078][T17686] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 338.079517][T17686] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 338.098219][T17686] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 338.136549][T17686] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 338.187745][T17941] bond1: (slave geneve2): making interface the new active one [ 338.212990][T17941] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 338.274829][ T5832] Bluetooth: hci0: command tx timeout [ 338.314981][T17952] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3255'. [ 338.325348][T17952] bridge: RTM_NEWNEIGH with invalid ether address [ 338.334843][T17956] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3255'. [ 338.356028][T17956] bridge: RTM_NEWNEIGH with invalid ether address [ 338.363706][T17956] netlink: 192 bytes leftover after parsing attributes in process `syz.3.3255'. [ 338.393302][T17962] IPVS: set_ctl: invalid protocol: 29 172.30.1.1:20004 [ 338.664433][T17686] 8021q: adding VLAN 0 to HW filter on device bond0 [ 338.719126][T17686] 8021q: adding VLAN 0 to HW filter on device team0 [ 338.778883][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 338.785714][T17985] netlink: 572 bytes leftover after parsing attributes in process `syz.0.3263'. [ 338.786092][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 338.864595][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.871789][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 339.007811][T17992] Cannot find add_set index 0 as target [ 339.030730][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 339.038790][ C0] lec:lec_tx_timeout: lec0 [ 339.044124][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 339.609619][T17686] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 339.842024][T17686] veth0_vlan: entered promiscuous mode [ 339.859184][T17686] veth1_vlan: entered promiscuous mode [ 339.923605][T17686] veth0_macvtap: entered promiscuous mode [ 339.963696][T17686] veth1_macvtap: entered promiscuous mode [ 340.042904][T17686] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 340.090212][T17686] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 340.133320][ T62] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.154139][ T62] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.200804][T18024] netlink: 'syz.4.3275': attribute type 4 has an invalid length. [ 340.204748][ T62] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.260941][T18030] netlink: 'syz.4.3275': attribute type 4 has an invalid length. [ 340.307464][ T62] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.363075][ T5832] Bluetooth: hci0: command tx timeout [ 340.557788][ T6460] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 340.594456][ T6460] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 340.609797][T18068] sctp: [Deprecated]: syz.2.3285 (pid 18068) Use of int in maxseg socket option. [ 340.609797][T18068] Use struct sctp_assoc_value instead [ 340.703361][ T9558] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 340.729910][ T9558] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 340.813398][T18077] pimreg3: entered allmulticast mode [ 341.056674][T18088] __nla_validate_parse: 75 callbacks suppressed [ 341.056692][T18088] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3292'. [ 341.160953][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 341.190350][T18093] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3292'. [ 341.254457][T18093] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3292'. [ 341.439572][T18107] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3299'. [ 341.467282][T18107] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3299'. [ 341.500914][T18107] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3299'. [ 341.570128][ T5828] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 341.584179][ T5828] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 341.594070][ T5828] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 341.602473][ T5828] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 341.612495][ T5828] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 341.652886][T18115] netlink: 'syz.4.3300': attribute type 51 has an invalid length. [ 341.752622][T18107] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3299'. [ 341.783755][T18107] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3299'. [ 341.794689][ T9558] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 341.808449][T18107] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3299'. [ 341.837075][ T9558] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 341.881431][T18115] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 341.898264][T18115] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 341.919223][T18115] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 341.951037][T18115] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 342.026367][ T9558] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 342.076453][T18128] netlink: 284 bytes leftover after parsing attributes in process `syz.1.3304'. [ 342.116250][ T9558] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 342.167282][T18111] vxcan1 speed is unknown, defaulting to 1000 [ 342.265415][T18137] hsr_slave_0: left promiscuous mode [ 342.288976][T18137] hsr_slave_1: left promiscuous mode [ 342.380239][T18140] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 342.509370][T18150] sctp: [Deprecated]: syz.4.3309 (pid 18150) Use of struct sctp_assoc_value in delayed_ack socket option. [ 342.509370][T18150] Use struct sctp_sack_info instead [ 342.946150][T18173] openvswitch: netlink: Flow key attr not present in new flow. [ 343.007531][T18172] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 343.024598][T18180] xt_l2tp: unknown flags: 10 [ 343.035006][T18165] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 343.047578][T18165] bond1 (unregistering): Released all slaves [ 343.094780][T18172] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 343.277509][T18190] netlink: 'syz.3.3317': attribute type 12 has an invalid length. [ 343.317593][T18195] tipc: Failed to remove unknown binding: 66,0,0/0:675399401/675399402 [ 343.329877][T18190] netlink: 'syz.3.3317': attribute type 29 has an invalid length. [ 343.355668][T18195] tipc: Failed to remove unknown binding: 66,0,0/0:675399401/675399402 [ 343.513725][T18207] veth0: entered promiscuous mode [ 343.583137][T18111] chnl_net:caif_netlink_parms(): no params data found [ 343.670208][T18211] netlink: 'syz.1.3323': attribute type 8 has an invalid length. [ 343.686886][T18211] sch_fq: defrate 0 ignored. [ 343.707280][T18217] netlink: 'syz.2.3325': attribute type 2 has an invalid length. [ 343.718607][ T5832] Bluetooth: hci1: command tx timeout [ 343.728760][T18213] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 343.757255][T18111] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.764850][T18111] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.777764][T18111] bridge_slave_0: entered allmulticast mode [ 343.786132][T18111] bridge_slave_0: entered promiscuous mode [ 343.796365][T18111] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.804175][T18111] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.812283][T18111] bridge_slave_1: entered allmulticast mode [ 343.820082][T18111] bridge_slave_1: entered promiscuous mode [ 343.967744][T18111] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 343.987351][T18226] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 344.020423][T18226] bond0: (slave lo): Error: Device can not be enslaved while up [ 344.060713][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 344.068809][ C0] lec:lec_tx_timeout: lec0 [ 344.070132][T18111] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 344.074374][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 344.130082][T18233] bridge_slave_0: left allmulticast mode [ 344.146950][T18233] bridge_slave_0: left promiscuous mode [ 344.179585][T18233] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.218895][T18233] bridge_slave_1: left allmulticast mode [ 344.229225][T18243] netlink: 'syz.3.3331': attribute type 13 has an invalid length. [ 344.252226][T18233] bridge_slave_1: left promiscuous mode [ 344.270221][T18233] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.313002][T18233] bond0: (slave bond_slave_0): Releasing backup interface [ 344.347172][T18233] bond0: (slave bond_slave_1): Releasing backup interface [ 344.394400][T18233] team0: Port device team_slave_0 removed [ 344.449186][T18233] team0: Port device team_slave_1 removed [ 344.457358][T18233] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 344.467149][T18233] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 344.479457][T18233] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 344.498866][T18233] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 344.649431][T18111] team0: Port device team_slave_0 added [ 344.679951][T18256] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 344.683106][T18111] team0: Port device team_slave_1 added [ 344.793311][T18111] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 344.842630][T18111] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 344.975356][T18111] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 345.024174][T18111] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 345.049977][T18111] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 345.106875][T18111] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 345.331851][T18111] hsr_slave_0: entered promiscuous mode [ 345.338973][T18111] hsr_slave_1: entered promiscuous mode [ 345.346989][T18111] debugfs: 'hsr0' already exists in 'hsr' [ 345.354954][T18111] Cannot create hsr debugfs directory [ 345.356440][T18289] delete_channel: no stack [ 345.789943][T18111] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 345.802253][ T5832] Bluetooth: hci1: command 0x041b tx timeout [ 345.826797][T18111] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.886904][T18317] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 345.903666][T18319] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 345.913822][T18317] delete_channel: no stack [ 345.948567][T18319] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 345.986671][T18319] bond0 (unregistering): Released all slaves [ 346.057799][T18111] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 346.068610][T18111] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.085358][T18329] __nla_validate_parse: 28 callbacks suppressed [ 346.085378][T18329] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3354'. [ 346.231908][T18111] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 346.247690][T18334] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 346.257044][T18340] netlink: 'syz.2.3358': attribute type 1 has an invalid length. [ 346.265946][T18111] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.342800][T18345] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3358'. [ 346.395012][T18111] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 346.431522][T18111] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.851355][T18111] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 346.867065][T18111] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 346.898976][T18111] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 346.919555][T18111] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 346.936400][T18111] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 346.951505][T18111] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 346.959705][T18367] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3364'. [ 346.976509][T18111] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 347.003610][T18111] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 347.027825][T18373] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3367'. [ 347.239924][T18396] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3370'. [ 347.360378][T18111] 8021q: adding VLAN 0 to HW filter on device bond0 [ 347.414927][T18111] 8021q: adding VLAN 0 to HW filter on device team0 [ 347.446969][ T6460] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.454196][ T6460] bridge0: port 1(bridge_slave_0) entered forwarding state [ 347.505454][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.512707][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 347.626338][T18409] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 347.843105][T18420] IPVS: set_ctl: invalid protocol: 136 0.0.0.0:20002 [ 347.882604][ T5828] Bluetooth: hci1: command 0x041b tx timeout [ 348.234076][T18111] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 348.461961][T18447] netlink: 'syz.3.3384': attribute type 2 has an invalid length. [ 348.494769][T18111] veth0_vlan: entered promiscuous mode [ 348.521438][T18453] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3387'. [ 348.536345][T18111] veth1_vlan: entered promiscuous mode [ 348.665259][T18111] veth0_macvtap: entered promiscuous mode [ 348.702963][T18111] veth1_macvtap: entered promiscuous mode [ 348.714845][T18461] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3389'. [ 348.738484][T18461] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3389'. [ 348.749718][T18459] bridge_slave_0: left allmulticast mode [ 348.757303][T18459] bridge_slave_0: left promiscuous mode [ 348.758371][T18461] netlink: 'syz.2.3389': attribute type 15 has an invalid length. [ 348.778159][T18459] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.859280][T18459] bridge_slave_1: left allmulticast mode [ 348.866493][T18459] bridge_slave_1: left promiscuous mode [ 348.872647][T18459] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.902021][T18459] team0: Port device team_slave_0 removed [ 348.918662][T18459] team0: Port device team_slave_1 removed [ 348.928336][T18459] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 348.959141][T18461] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3389'. [ 348.973972][ T62] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 256 - 0 [ 348.983927][T18461] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3389'. [ 348.996673][ T62] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 256 - 0 [ 349.007424][T18461] netlink: 'syz.2.3389': attribute type 15 has an invalid length. [ 349.032608][ T62] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 256 - 0 [ 349.050504][T18111] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 349.062064][ T6938] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 256 - 0 [ 349.080151][T18111] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 349.120034][ T62] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.140440][T18477] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 2, id = 0 [ 349.151183][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 349.189716][ T62] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.218407][ T62] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.303919][ T62] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.573906][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 349.610081][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 349.693868][ T1097] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 349.718011][ T1097] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 349.880768][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5800 ms [ 349.888846][ C0] lec:lec_tx_timeout: lec0 [ 349.894189][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 349.951297][ T5828] Bluetooth: hci1: command 0x041b tx timeout [ 350.070339][T18519] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 350.598832][T18553] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 350.837563][T18565] netlink: 'syz.3.3420': attribute type 8 has an invalid length. [ 351.054120][T18578] Bluetooth: MGMT ver 1.23 [ 351.176006][T18580] __nla_validate_parse: 1 callbacks suppressed [ 351.176048][T18580] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3426'. [ 351.211728][T18580] netlink: 'syz.3.3426': attribute type 5 has an invalid length. [ 351.394308][T18590] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3431'. [ 351.431987][T18590] IPv6: NLM_F_CREATE should be specified when creating new route [ 351.466893][T18590] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3431'. [ 351.535525][T18590] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3431'. [ 351.581212][T18590] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3431'. [ 351.620350][T18605] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3434'. [ 351.664758][T18590] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3431'. [ 351.676104][T18605] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3434'. [ 351.725549][T18590] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3431'. [ 351.774680][T18590] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3431'. [ 352.033758][ T5828] Bluetooth: hci1: command 0x041b tx timeout [ 352.088194][T18629] netlink: 'syz.2.3439': attribute type 1 has an invalid length. [ 352.102634][T18630] xt_nfacct: accounting object `syz1' does not exist [ 352.207406][T18634] netlink: 'syz.3.3441': attribute type 1 has an invalid length. [ 352.234541][T18629] 8021q: adding VLAN 0 to HW filter on device bond2 [ 352.306452][T18634] 8021q: adding VLAN 0 to HW filter on device bond1 [ 352.335779][T18643] netlink: 'syz.0.3443': attribute type 1 has an invalid length. [ 352.429390][T18635] bond1: (slave veth3): Enslaving as an active interface with a down link [ 353.269717][T18696] netlink: 'syz.2.3458': attribute type 21 has an invalid length. [ 353.280163][T18697] x_tables: unsorted underflow at hook 4 [ 353.334283][T18696] netlink: 'syz.2.3458': attribute type 1 has an invalid length. [ 353.812203][T18734] netlink: 'syz.3.3468': attribute type 3 has an invalid length. [ 354.093548][T18749] bridge1: entered promiscuous mode [ 354.098973][T18749] bridge1: entered allmulticast mode [ 354.118252][T18749] team0: Port device bridge1 added [ 354.139291][T18756] bridge0: port 3(team0) entered blocking state [ 354.165406][T18756] bridge0: port 3(team0) entered disabled state [ 354.186115][T18756] team0: entered allmulticast mode [ 354.202476][T18756] team_slave_0: entered allmulticast mode [ 354.209417][T18756] team_slave_1: entered allmulticast mode [ 354.239272][T18756] team0: entered promiscuous mode [ 354.261929][T18756] team_slave_0: entered promiscuous mode [ 354.287161][T18756] team_slave_1: entered promiscuous mode [ 354.306406][T18756] bridge0: port 3(team0) entered blocking state [ 354.312847][T18756] bridge0: port 3(team0) entered forwarding state [ 354.538703][T18783] netlink: zone id is out of range [ 354.579765][T18783] netlink: zone id is out of range [ 354.587813][T18783] netlink: zone id is out of range [ 354.611667][T18783] netlink: zone id is out of range [ 354.625611][T18783] netlink: zone id is out of range [ 354.647176][T18783] netlink: zone id is out of range [ 354.666026][T18783] netlink: zone id is out of range [ 354.685091][T18783] netlink: zone id is out of range [ 354.718497][T18783] netlink: zone id is out of range [ 354.737901][T18783] netlink: zone id is out of range [ 354.912861][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 354.920954][ C0] lec:lec_tx_timeout: lec0 [ 354.925893][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 355.006040][T18809] ipt_REJECT: TCP_RESET invalid for non-tcp [ 355.264785][T18823] lo speed is unknown, defaulting to 1000 [ 355.292307][T18823] lo speed is unknown, defaulting to 1000 [ 355.334000][T18823] lo speed is unknown, defaulting to 1000 [ 355.409737][T18823] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 355.474464][T18823] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 355.678736][T18823] lo speed is unknown, defaulting to 1000 [ 355.741149][T18823] lo speed is unknown, defaulting to 1000 [ 355.787293][T18823] lo speed is unknown, defaulting to 1000 [ 355.829598][T18823] lo speed is unknown, defaulting to 1000 [ 355.864711][T18823] lo speed is unknown, defaulting to 1000 [ 355.902280][T18823] lo speed is unknown, defaulting to 1000 [ 355.940438][T18823] lo speed is unknown, defaulting to 1000 [ 355.969663][T18823] lo speed is unknown, defaulting to 1000 [ 355.994345][T18823] lo speed is unknown, defaulting to 1000 [ 356.000629][T18861] delete_channel: no stack [ 356.225655][T18870] Bluetooth: MGMT ver 1.23 [ 356.308903][T18877] __nla_validate_parse: 45 callbacks suppressed [ 356.308922][T18877] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3504'. [ 356.416397][T18885] netlink: 'syz.3.3506': attribute type 10 has an invalid length. [ 356.474805][T18885] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.515962][T18885] bridge_slave_1: left allmulticast mode [ 356.536556][T18885] bridge_slave_1: left promiscuous mode [ 356.555472][T18885] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.587488][T18885] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 356.632529][T18892] netlink: 'syz.1.3507': attribute type 13 has an invalid length. [ 356.703142][T18901] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3509'. [ 356.924641][T18913] netlink: 'syz.0.3513': attribute type 18 has an invalid length. [ 356.998684][ T1097] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 357.074804][ T1097] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 357.102454][ T1097] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 357.151252][ T1097] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 357.479938][T18946] netlink: 'syz.1.3520': attribute type 1 has an invalid length. [ 357.558675][T18946] netlink: 'syz.1.3520': attribute type 1 has an invalid length. [ 357.585999][T18946] netlink: 'syz.1.3520': attribute type 1 has an invalid length. [ 357.604793][T18946] netlink: 'syz.1.3520': attribute type 2 has an invalid length. [ 357.643954][T18946] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3520'. [ 358.055477][T18980] netlink: 'syz.4.3529': attribute type 1 has an invalid length. [ 358.192486][T18980] 8021q: adding VLAN 0 to HW filter on device bond0 [ 358.245918][T18984] bond0: (slave geneve2): making interface the new active one [ 358.257054][T18984] bond0: (slave geneve2): Enslaving as an active interface with an up link [ 358.387520][T19001] x_tables: duplicate underflow at hook 3 [ 358.810907][T19025] xt_hashlimit: overflow, rate too high: 0 [ 358.928409][T19026] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 359.247815][T19046] IPVS: set_ctl: invalid protocol: 0 172.20.20.60:20000 [ 359.296120][T19052] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3551'. [ 359.376319][T19050] delete_channel: no stack [ 359.473076][T19055] 8021q: adding VLAN 0 to HW filter on device bond0 [ 359.480382][T19055] bond0: (slave ip6tnl1): The slave device specified does not support setting the MAC address [ 359.504935][T19055] bond0: (slave ip6tnl1): Error -95 calling set_mac_address [ 359.578879][T19057] bond3: entered promiscuous mode [ 359.639578][T19064] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3554'. [ 359.950683][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 359.958791][ C0] lec:lec_tx_timeout: lec0 [ 359.965092][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 360.029244][T19080] tap0: tun_chr_ioctl cmd 1074025672 [ 360.058184][T19080] tap0: ignored: set checksum disabled [ 360.078768][T19080] net_ratelimit: 46 callbacks suppressed [ 360.078789][T19080] openvswitch: netlink: Key 4 has unexpected len 106 expected 12 [ 360.616039][T19101] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3565'. [ 360.747364][T19107] vcan0: tx address claim with different name [ 360.780082][T19107] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3565'. [ 361.010915][T19111] netlink: 'syz.0.3567': attribute type 1 has an invalid length. [ 361.059300][T19111] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3567'. [ 361.098997][T19111] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3567'. [ 361.432653][T19129] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3572'. [ 361.532624][T19138] netlink: 184 bytes leftover after parsing attributes in process `syz.4.3573'. [ 361.558506][T19135] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3574'. [ 361.574882][T19129] pim6reg1: entered promiscuous mode [ 361.598378][T19129] pim6reg1: entered allmulticast mode [ 361.676325][T19142] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3576'. [ 361.903283][T19148] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3578'. [ 362.151973][T19167] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3585'. [ 362.374240][T19178] ip6gre0: Master is either lo or non-ether device [ 362.687439][T19193] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.3592'. [ 363.499624][T19223] vxcan1 speed is unknown, defaulting to 1000 [ 363.839632][T19247] netlink: 'syz.4.3603': attribute type 1 has an invalid length. [ 363.867195][T19247] netlink: 2088 bytes leftover after parsing attributes in process `syz.4.3603'. [ 364.212902][T19271] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 364.269472][T19223] lo speed is unknown, defaulting to 1000 [ 364.302064][T19274] tipc: Enabled bearer , priority 0 [ 364.339216][T19274] syzkaller0: entered promiscuous mode [ 364.349814][T19274] syzkaller0: entered allmulticast mode [ 364.365337][T19279] netlink: 'syz.0.3613': attribute type 83 has an invalid length. [ 364.414206][T19274] tipc: Resetting bearer [ 364.446242][T19272] tipc: Resetting bearer [ 364.494146][T19272] tipc: Disabling bearer [ 364.510890][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 364.753788][T19302] netlink: 1363 bytes leftover after parsing attributes in process `syz.2.3618'. [ 364.980680][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 364.988765][ C0] lec:lec_tx_timeout: lec0 [ 364.994465][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 365.024284][T19314] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3623'. [ 365.178345][T19323] netlink: 'syz.2.3625': attribute type 1 has an invalid length. [ 365.411353][T19328] bond4: (slave bridge3): making interface the new active one [ 365.419679][T19328] bond4: (slave bridge3): Enslaving as an active interface with an up link [ 365.620140][T19346] x_tables: (null)_tables: NFQUEUE.1 target: invalid size 8 (kernel) != (user) 16 [ 365.971180][T19366] netlink: 'syz.0.3639': attribute type 1 has an invalid length. [ 366.061639][T19371] netlink: 'syz.4.3641': attribute type 1 has an invalid length. [ 366.116492][T19377] sctp: [Deprecated]: syz.2.3642 (pid 19377) Use of struct sctp_assoc_value in delayed_ack socket option. [ 366.116492][T19377] Use struct sctp_sack_info instead [ 366.148588][T19366] 8021q: adding VLAN 0 to HW filter on device bond1 [ 366.293602][T19388] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 366.518499][T19376] bond1: (slave geneve2): making interface the new active one [ 366.554102][T19376] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 366.676343][T19392] __nla_validate_parse: 3 callbacks suppressed [ 366.676364][T19392] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3645'. [ 366.725762][T19392] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3645'. [ 367.114481][T19412] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3651'. [ 367.180408][T19416] netlink: 'syz.1.3651': attribute type 1 has an invalid length. [ 367.216131][T19418] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3653'. [ 367.233747][ T5905] hid (null): global environment stack underflow [ 367.246684][T19422] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3651'. [ 367.256045][ T5905] hid-generic 0005:15C2:0004.0003: global environment stack underflow [ 367.266803][ T5905] hid-generic 0005:15C2:0004.0003: item 0 0 1 11 parsing failed [ 367.279014][ T5905] hid-generic 0005:15C2:0004.0003: probe with driver hid-generic failed with error -22 [ 367.304473][T19422] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3651'. [ 367.529540][T19416] bond1: entered promiscuous mode [ 367.538130][T19416] 8021q: adding VLAN 0 to HW filter on device bond1 [ 367.547988][T19444] netlink: 'syz.3.3656': attribute type 1 has an invalid length. [ 367.596843][T19426] bond1: (slave bridge2): making interface the new active one [ 367.638918][T19426] bridge2: entered promiscuous mode [ 367.669149][T19426] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 367.752194][T19459] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3663'. [ 367.770155][T19444] 8021q: adding VLAN 0 to HW filter on device bond2 [ 367.833045][T19447] bond2: (slave geneve2): making interface the new active one [ 367.843262][T19447] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 368.203834][T19487] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3671'. [ 368.559555][T19506] ipt_rpfilter: unknown options [ 368.858614][T19540] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3680'. [ 369.157502][T19556] netlink: 'syz.4.3685': attribute type 11 has an invalid length. [ 369.367407][T19573] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3691'. [ 369.384939][T19573] netdevsim netdevsim4 : renamed from netdevsim0 (while UP) [ 369.435936][T19578] netlink: 'syz.1.3693': attribute type 12 has an invalid length. [ 369.450507][T19578] netlink: 'syz.1.3693': attribute type 12 has an invalid length. [ 369.748673][T19592] openvswitch: netlink: Unexpected mask (mask=201040, allowed=10048) [ 369.863856][T19600] team0 (unregistering): Failed to send port change of device team_slave_0 via netlink (err -105) [ 369.878469][T19600] team0 (unregistering): Port device team_slave_0 removed [ 369.902844][T19600] team0 (unregistering): Failed to send options change via netlink (err -105) [ 369.922703][T19600] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 369.969553][T19600] team0 (unregistering): Port device team_slave_1 removed [ 370.011499][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 370.019543][ C0] lec:lec_tx_timeout: lec0 [ 370.024599][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 370.129509][T19614] vlan3: entered promiscuous mode [ 370.205666][T19620] delete_channel: no stack [ 370.483788][T19640] syzkaller0: entered promiscuous mode [ 370.496797][T19640] syzkaller0: entered allmulticast mode [ 370.716734][T19658] netlink: 'syz.1.3716': attribute type 8 has an invalid length. [ 370.797424][T19662] netlink: 'syz.1.3716': attribute type 17 has an invalid length. [ 370.846687][T19662] gretap0: entered promiscuous mode [ 370.893123][T19662] gretap0: left promiscuous mode [ 370.962176][T19669] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 370.979694][T19669] IPv6: Can't replace route, no match found [ 371.535628][T19696] netlink: 'syz.1.3729': attribute type 1 has an invalid length. [ 371.784974][T19712] __nla_validate_parse: 77 callbacks suppressed [ 371.784992][T19712] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3735'. [ 371.837742][T19713] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3735'. [ 371.866327][T19712] netlink: 'syz.3.3735': attribute type 29 has an invalid length. [ 371.884667][T19713] netlink: 'syz.3.3735': attribute type 29 has an invalid length. [ 371.905511][T19712] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3735'. [ 371.952811][T19713] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3735'. [ 372.911511][T19777] IPVS: length: 239 != 24 [ 372.981858][T19783] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3753'. [ 373.024018][T19785] smc: ib device syz2 ibport 1 applied user defined pnetid SYZ1 [ 373.074102][T19785] sctp: [Deprecated]: syz.2.3754 (pid 19785) Use of struct sctp_assoc_value in delayed_ack socket option. [ 373.074102][T19785] Use struct sctp_sack_info instead [ 373.505418][T19800] netlink: 'syz.3.3760': attribute type 7 has an invalid length. [ 373.561342][T19803] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 373.587343][T19800] tipc: Invalid UDP bearer configuration [ 373.587395][T19800] tipc: Enabling of bearer rejected, failed to enable media [ 373.871235][T19814] syzkaller0: entered promiscuous mode [ 373.876988][T19814] syzkaller0: entered allmulticast mode [ 373.889134][T19828] netlink: 'syz.1.3761': attribute type 1 has an invalid length. [ 373.902876][T19818] netlink: 'syz.3.3762': attribute type 2 has an invalid length. [ 373.981593][T19828] 8021q: adding VLAN 0 to HW filter on device bond2 [ 374.030875][ T5828] Bluetooth: hci0: command tx timeout [ 374.108818][T19844] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3768'. [ 374.124973][T19820] bond2: (slave veth3): Enslaving as an active interface with a down link [ 374.142049][T19842] netlink: 408 bytes leftover after parsing attributes in process `syz.3.3766'. [ 374.157916][T19841] netlink: 408 bytes leftover after parsing attributes in process `syz.3.3766'. [ 374.169593][T19845] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3768'. [ 374.338257][T19841] ±ÿ: renamed from team_slave_1 (while UP) [ 374.642883][T19872] netlink: 120 bytes leftover after parsing attributes in process `syz.0.3775'. [ 374.749581][T19880] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 375.032256][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 375.040306][ C0] lec:lec_tx_timeout: lec0 [ 375.045482][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 377.771433][T19889] __nla_validate_parse: 2 callbacks suppressed [ 377.771453][T19889] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3778'. [ 377.805837][T19893] x_tables: duplicate entry at hook 2 [ 377.813600][T19893] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3779'. [ 377.848647][T19889] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3778'. [ 378.214575][T19911] x_tables: duplicate underflow at hook 1 [ 378.311641][T19914] syzkaller0: entered promiscuous mode [ 378.317325][T19914] syzkaller0: entered allmulticast mode [ 378.556250][T19933] IPVS: Unknown mcast interface: syzkaller1 [ 378.674505][T19938] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3792'. [ 379.053280][T19965] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3799'. [ 379.085493][T19966] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3801'. [ 379.105995][T19968] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3801'. [ 379.216597][T19975] netlink: 11562 bytes leftover after parsing attributes in process `syz.3.3803'. [ 379.257253][T19975] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3803'. [ 379.458981][T19991] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3808'. [ 379.674803][T19991] macvtap1: entered promiscuous mode [ 379.692774][T19991] vlan0: entered promiscuous mode [ 379.720107][T19991] macvtap1: entered allmulticast mode [ 379.738805][T19991] vlan0: entered allmulticast mode [ 379.751004][T19991] veth0_vlan: entered allmulticast mode [ 380.060684][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 380.068776][ C0] lec:lec_tx_timeout: lec0 [ 380.073729][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 380.118900][T20034] validate_nla: 4 callbacks suppressed [ 380.118915][T20034] netlink: 'syz.0.3820': attribute type 11 has an invalid length. [ 380.529250][T20064] syzkaller1: entered promiscuous mode [ 380.537263][T20064] syzkaller1: entered allmulticast mode [ 380.677778][T20071] openvswitch: netlink: Multiple metadata blocks provided [ 380.700510][T20068] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 380.716601][T20068] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 380.725799][T20068] gretap1: entered promiscuous mode [ 380.733741][T20068] gretap1: entered allmulticast mode [ 380.815627][T20071] bond2: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 380.840436][T20082] netlink: 'syz.3.3829': attribute type 51 has an invalid length. [ 380.845723][T20071] bond2 (unregistering): Released all slaves [ 380.920920][T20086] erspan0: entered promiscuous mode [ 380.955791][T20090] bridge0: entered promiscuous mode [ 380.963887][T20090] macsec1: entered promiscuous mode [ 380.969265][T20090] macsec1: entered allmulticast mode [ 380.974874][T20090] bridge0: entered allmulticast mode [ 380.982600][T20090] bridge0: port 4(macsec1) entered blocking state [ 380.990422][T20090] bridge0: port 4(macsec1) entered disabled state [ 381.003342][T20090] bridge0: left allmulticast mode [ 381.008533][T20090] bridge0: left promiscuous mode [ 381.023842][T20079] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 381.040594][T20079] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 381.052512][T20079] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 381.060045][T20079] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 381.116288][T20087] bond5: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 381.158618][T20087] bond5 (unregistering): Released all slaves [ 381.344555][T20110] xt_hashlimit: size too large, truncated to 1048576 [ 381.656379][T20130] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 381.743630][T20110] xt_hashlimit: size too large, truncated to 1048576 [ 381.874485][T20137] syz_tun: entered promiscuous mode [ 381.928782][T20142] netlink: 'syz.4.3849': attribute type 12 has an invalid length. [ 382.050622][T20110] xt_hashlimit: size too large, truncated to 1048576 [ 382.448655][T20167] openvswitch: netlink: Multiple metadata blocks provided [ 382.508848][T20170] netlink: 'syz.0.3859': attribute type 1 has an invalid length. [ 382.517484][T20173] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 382.619678][T20170] bond2: entered promiscuous mode [ 382.631844][T20170] 8021q: adding VLAN 0 to HW filter on device bond2 [ 383.278870][T20208] __nla_validate_parse: 13 callbacks suppressed [ 383.278888][T20208] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3869'. [ 383.488027][T20214] netlink: 1 bytes leftover after parsing attributes in process `syz.3.3871'. [ 383.517414][T20222] netlink: 'syz.0.3875': attribute type 1 has an invalid length. [ 383.559901][T20222] 8021q: adding VLAN 0 to HW filter on device bond3 [ 383.582050][T20227] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3873'. [ 383.877290][T20249] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3880'. [ 384.053058][T20261] netlink: 'syz.3.3884': attribute type 13 has an invalid length. [ 384.075566][T20264] netlink: 'syz.0.3885': attribute type 3 has an invalid length. [ 384.094322][T20261] gretap0: refused to change device tx_queue_len [ 384.113568][T20261] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 384.287090][T20274] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3887'. [ 384.306221][T20275] netlink: 'syz.0.3888': attribute type 1 has an invalid length. [ 384.340584][T20274] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3887'. [ 384.374665][T20274] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3887'. [ 384.428999][T20275] 8021q: adding VLAN 0 to HW filter on device bond4 [ 384.742386][T20296] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 384.852312][T20298] syzkaller0: entered promiscuous mode [ 384.862743][T20298] syzkaller0: entered allmulticast mode [ 385.090700][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 385.098908][ C0] lec:lec_tx_timeout: lec0 [ 385.104088][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 385.301090][T20322] syzkaller0: entered promiscuous mode [ 385.308808][T20322] syzkaller0: entered allmulticast mode [ 385.367255][T20325] syzkaller0: entered promiscuous mode [ 385.373893][T20325] syzkaller0: entered allmulticast mode [ 385.631442][T20333] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3907'. [ 385.648754][T20337] netlink: 'syz.3.3908': attribute type 10 has an invalid length. [ 385.657394][T20333] netlink: 176 bytes leftover after parsing attributes in process `syz.4.3907'. [ 385.669881][T20333] netlink: 'syz.4.3907': attribute type 5 has an invalid length. [ 385.701727][T20339] vlan1: entered promiscuous mode [ 385.714811][T20339] bridge0: entered promiscuous mode [ 385.723604][T20333] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3907'. [ 386.505965][T20373] syzkaller0: entered promiscuous mode [ 386.534222][T20373] syzkaller0: entered allmulticast mode [ 389.549665][T20444] __nla_validate_parse: 4 callbacks suppressed [ 389.549685][T20444] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3933'. [ 391.396546][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 6290 ms [ 391.404601][ C0] lec:lec_tx_timeout: lec0 [ 391.409608][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 392.191279][T20404] dvmrp8: entered allmulticast mode [ 392.197860][T20421] lo: entered promiscuous mode [ 392.204706][T20421] tunl0: entered promiscuous mode [ 392.211671][T20421] gre0: entered promiscuous mode [ 392.223535][T20421] gretap0: entered promiscuous mode [ 392.233993][T20421] erspan0: entered promiscuous mode [ 392.245805][T20421] ip_vti0: entered promiscuous mode [ 392.259111][T20444] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3933'. [ 392.414076][T20458] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 392.549573][ T10] IPVS: starting estimator thread 0... [ 392.651130][T20471] IPVS: using max 34 ests per chain, 81600 per kthread [ 392.775398][T20478] syzkaller0: entered promiscuous mode [ 392.798103][T20478] syzkaller0: entered allmulticast mode [ 392.815376][T20484] netlink: 'syz.3.3944': attribute type 1 has an invalid length. [ 392.869725][T20487] netlink: 'syz.0.3945': attribute type 1 has an invalid length. [ 393.009747][T20497] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 393.068492][T20497] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3948'. [ 393.098389][T20497] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3948'. [ 393.148816][T20497] netlink: 'syz.1.3948': attribute type 10 has an invalid length. [ 393.243785][T20497] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 393.283987][T20510] netlink: 'syz.3.3954': attribute type 10 has an invalid length. [ 393.318174][T20510] netlink: 396 bytes leftover after parsing attributes in process `syz.3.3954'. [ 393.339242][T20513] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3955'. [ 393.360360][T20513] netlink: 'syz.0.3955': attribute type 8 has an invalid length. [ 393.369592][T20513] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3955'. [ 393.422736][T20517] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3956'. [ 393.550488][T20524] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3956'. [ 393.594537][T20532] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3959'. [ 393.857982][ T1226] IPVS: starting estimator thread 0... [ 393.955944][T20556] xt_hashlimit: size too large, truncated to 1048576 [ 393.962904][T20545] IPVS: using max 28 ests per chain, 67200 per kthread [ 394.070302][T20548] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 394.196428][ T30] audit: type=1804 audit(1776780326.245:3): pid=20560 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.3963" name="/newroot/152/cgroup.controllers" dev="tmpfs" ino=794 res=1 errno=0 [ 394.253947][T20570] tipc: Started in network mode [ 394.273847][T20570] tipc: Node identity e0000001, cluster identity 4711 [ 394.305585][T20570] tipc: Enabling of bearer rejected, failed to enable media [ 394.320915][ T30] audit: type=1800 audit(1776780326.275:4): pid=20560 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3963" name="cgroup.controllers" dev="tmpfs" ino=794 res=0 errno=0 [ 394.786375][T20602] tipc: Invalid UDP bearer configuration [ 394.786425][T20602] tipc: Enabling of bearer rejected, failed to enable media [ 394.965876][T20614] __nla_validate_parse: 4 callbacks suppressed [ 394.965894][T20614] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3983'. [ 395.063447][T20614] 8021q: adding VLAN 0 to HW filter on device bond5 [ 395.205721][T20629] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3988'. [ 395.231193][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 395.334024][T20639] netlink: 17 bytes leftover after parsing attributes in process `syz.2.3989'. [ 395.356305][T20639] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3989'. [ 395.673873][T20657] netlink: 'syz.3.3992': attribute type 12 has an invalid length. [ 395.703157][T20657] netlink: 'syz.3.3992': attribute type 29 has an invalid length. [ 395.722282][T20657] netlink: 148 bytes leftover after parsing attributes in process `syz.3.3992'. [ 395.732905][T20657] netlink: 'syz.3.3992': attribute type 1 has an invalid length. [ 395.743233][T20657] netlink: 47 bytes leftover after parsing attributes in process `syz.3.3992'. [ 396.307535][T20688] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4001'. [ 396.379094][T20702] No such timeout policy "syz1" [ 396.670249][T20717] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4008'. [ 396.910322][T20731] openvswitch: netlink: Tunnel attr 16 has unexpected len 20 expected 0 [ 397.151258][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5740 ms [ 397.159377][ C0] lec:lec_tx_timeout: lec0 [ 397.165122][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 397.220162][T20739] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4015'. [ 397.280113][T20756] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4019'. [ 397.813779][T20778] openvswitch: netlink: Flow actions attr not present in new flow. [ 398.287726][T20805] xt_ecn: cannot match TCP bits for non-tcp packets [ 398.384951][T20807] netlink: 'syz.3.4035': attribute type 1 has an invalid length. [ 398.419006][T20810] netlink: 'syz.3.4035': attribute type 1 has an invalid length. [ 398.565849][T20817] syzkaller0: entered promiscuous mode [ 398.596976][T20817] 0: reclassify loop, rule prio 0, protocol 800 [ 399.004595][T20848] tipc: Invalid UDP bearer configuration [ 399.004641][T20848] tipc: Enabling of bearer rejected, failed to enable media [ 399.168465][T20858] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 399.608151][T20874] x_tables: duplicate underflow at hook 1 [ 399.629477][T20874] sch_tbf: peakrate 4 is lower than or equals to rate 15501174612526079684 ! [ 399.909948][T20900] netlink: 'syz.4.4058': attribute type 4 has an invalid length. [ 399.919168][T20894] openvswitch: netlink: Duplicate key (type 2). [ 399.919168][T20898] openvswitch: netlink: Duplicate key (type 2). [ 400.265750][T20918] syzkaller0: entered promiscuous mode [ 400.281178][T20918] syzkaller0: entered allmulticast mode [ 400.499457][T20930] team0: left allmulticast mode [ 400.516852][T20930] team_slave_0: left allmulticast mode [ 400.527766][T20930] team_slave_1: left allmulticast mode [ 400.544152][T20930] team0: left promiscuous mode [ 400.562414][T20930] team_slave_0: left promiscuous mode [ 400.576614][T20930] team_slave_1: left promiscuous mode [ 400.588313][T20930] bridge0: port 3(team0) entered disabled state [ 400.615379][T20930] bridge_slave_0: left allmulticast mode [ 400.631829][T20930] bridge_slave_0: left promiscuous mode [ 400.642264][T20930] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.668297][T20930] bridge_slave_1: left allmulticast mode [ 400.678026][T20930] bridge_slave_1: left promiscuous mode [ 400.696408][T20930] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.737695][T20930] bond0: (slave bond_slave_0): Releasing backup interface [ 400.780111][T20930] bond0: (slave bond_slave_1): Releasing backup interface [ 400.874697][T20930] team0: Port device team_slave_0 removed [ 400.900046][T20930] team0: Port device team_slave_1 removed [ 400.915127][T20930] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 400.927662][T20930] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 400.942911][T20930] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 400.969731][T20930] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 400.979828][T20930] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 401.168643][T20958] netlink: 'syz.4.4076': attribute type 21 has an invalid length. [ 401.226852][T20958] bond2: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 401.240047][T20958] bond2 (unregistering): Released all slaves [ 401.277415][T20959] ip6gre0: Master is either lo or non-ether device [ 401.514500][T20980] __nla_validate_parse: 13 callbacks suppressed [ 401.514520][T20980] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4084'. [ 401.574056][T20982] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4086'. [ 401.603749][T20980] netlink: 13776 bytes leftover after parsing attributes in process `syz.0.4084'. [ 401.693058][T20989] tap0: tun_chr_ioctl cmd 1074025676 [ 401.698600][T20989] tap0: owner set to 0 [ 402.049662][T21011] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4093'. [ 402.083370][T21012] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4096'. [ 402.228071][T21028] syzkaller0: entered promiscuous mode [ 402.244328][T21028] syzkaller0: entered allmulticast mode [ 402.285822][T21036] netlink: 'syz.3.4101': attribute type 83 has an invalid length. [ 402.342962][T21042] "syz.1.4102" (21042) uses obsolete ecb(arc4) skcipher [ 402.375540][T21033] netlink: 208240 bytes leftover after parsing attributes in process `syz.0.4100'. [ 402.387681][T21042] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4102'. [ 402.435452][T21037] netlink: 208240 bytes leftover after parsing attributes in process `syz.0.4100'. [ 402.464827][T21042] macsec3: entered promiscuous mode [ 402.470229][T21042] bond_slave_1: entered promiscuous mode [ 402.478244][T21042] macsec3: entered allmulticast mode [ 402.484285][T21042] bond_slave_1: entered allmulticast mode [ 402.503235][T21042] bond_slave_1: left allmulticast mode [ 402.508909][T21042] bond_slave_1: left promiscuous mode [ 402.522584][T21045] nbd3: detected capacity change from 0 to 63 [ 402.541768][T21036] block nbd3: NBD_DISCONNECT [ 402.571785][T21036] block nbd3: Disconnected due to user request. [ 402.594080][T21036] block nbd3: shutting down sockets [ 402.619821][ C0] blk_print_req_error: 138 callbacks suppressed [ 402.619856][ C0] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 402.635251][ C0] buffer_io_error: 138 callbacks suppressed [ 402.635268][ C0] Buffer I/O error on dev nbd3, logical block 0, async page read [ 402.649004][ C0] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 402.658132][ C0] Buffer I/O error on dev nbd3, logical block 1, async page read [ 402.666047][ C0] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 402.675168][ C0] Buffer I/O error on dev nbd3, logical block 2, async page read [ 402.682983][ C0] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 402.692074][ C0] Buffer I/O error on dev nbd3, logical block 3, async page read [ 402.704524][T20175] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 402.733043][T21054] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 402.750181][T20175] Buffer I/O error on dev nbd3, logical block 0, async page read [ 402.768144][T20175] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 402.780460][T20175] Buffer I/O error on dev nbd3, logical block 1, async page read [ 402.790440][T20175] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 402.842444][T21062] ip_tunnel: non-ECT from 2.0.0.0 with TOS=0x3 [ 402.847856][T20175] Buffer I/O error on dev nbd3, logical block 2, async page read [ 402.870048][T20175] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 402.906052][T20175] Buffer I/O error on dev nbd3, logical block 3, async page read [ 402.920746][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5750 ms [ 402.928819][ C0] lec:lec_tx_timeout: lec0 [ 402.934277][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 402.938824][T20175] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 402.970427][T20175] Buffer I/O error on dev nbd3, logical block 0, async page read [ 402.994627][T20175] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 403.028511][T20175] Buffer I/O error on dev nbd3, logical block 1, async page read [ 403.075032][T20175] ldm_validate_partition_table(): Disk read failed. [ 403.116858][T20175] Dev nbd3: unable to read RDB block 0 [ 403.147662][T20175] nbd3: unable to read partition table [ 403.198174][T20175] ldm_validate_partition_table(): Disk read failed. [ 403.218967][T20175] Dev nbd3: unable to read RDB block 0 [ 403.220921][T21081] netlink: 'syz.4.4112': attribute type 5 has an invalid length. [ 403.233383][T21082] openvswitch: netlink: Missing valid actions attribute. [ 403.246746][T20175] nbd3: unable to read partition table [ 403.277900][T21082] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 403.444810][T21090] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 403.543637][T21093] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4116'. [ 403.734200][T21106] Bluetooth: MGMT ver 1.23 [ 403.767094][T21097] IPVS: set_ctl: invalid protocol: 137 68.1.1.2:20004 [ 403.843526][T21108] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4121'. [ 407.923398][T21173] netlink: 'syz.1.4139': attribute type 1 has an invalid length. [ 407.931348][T21173] __nla_validate_parse: 4 callbacks suppressed [ 407.931364][T21173] netlink: 228 bytes leftover after parsing attributes in process `syz.1.4139'. [ 407.946691][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 407.946714][ C0] lec:lec_tx_timeout: lec0 [ 407.956347][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 407.975545][T21173] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 407.987900][T21174] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 408.156280][T21185] netlink: 7060 bytes leftover after parsing attributes in process `syz.2.4142'. [ 408.243337][T21188] [ 408.248452][T21188] ============================= [ 408.253420][T21188] WARNING: suspicious RCU usage [ 408.258738][T21188] syzkaller #0 Not tainted [ 408.263439][T21188] ----------------------------- [ 408.264907][T21190] tipc: Started in network mode [ 408.269777][T21188] kernel/events/callchain.c:163 suspicious rcu_dereference_check() usage! [ 408.274497][T21190] tipc: Node identity 56b89a0b4ff7, cluster identity 4711 [ 408.281931][T21188] [ 408.281931][T21188] other info that might help us debug this: [ 408.281931][T21188] [ 408.281946][T21188] [ 408.281946][T21188] rcu_scheduler_active = 2, debug_locks = 1 [ 408.281960][T21188] 1 lock held by syz.4.4143/21188: [ 408.281972][T21188] #0: ffffffff8e95d218 (rcu_tasks_trace_srcu_struct){....}-{0:0}, at: rcu_read_lock_trace+0x25/0x110 [ 408.282047][T21188] [ 408.282047][T21188] stack backtrace: [ 408.282074][T21188] CPU: 0 UID: 0 PID: 21188 Comm: syz.4.4143 Not tainted syzkaller #0 PREEMPT(full) [ 408.282094][T21188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 408.282113][T21188] Call Trace: [ 408.282121][T21188] [ 408.282128][T21188] dump_stack_lvl+0xe8/0x150 [ 408.282159][T21188] lockdep_rcu_suspicious+0x13f/0x1d0 [ 408.282190][T21188] get_callchain_entry+0x2b6/0x3c0 [ 408.282220][T21188] get_perf_callchain+0xd5/0x880 [ 408.282252][T21188] ? __pfx_get_perf_callchain+0x10/0x10 [ 408.282293][T21188] ? __pfx___resched_curr+0x10/0x10 [ 408.282324][T21188] __bpf_get_stack+0x445/0xab0 [ 408.282358][T21188] ? __pfx___bpf_get_stack+0x10/0x10 [ 408.282387][T21188] ? __lock_acquire+0x6b5/0x2cf0 [ 408.282417][T21188] bpf_get_stack+0x33/0x50 [ 408.282439][T21188] ? bpf_prog_aa1f08ea8b241262+0x46/0x4e [ 408.282458][T21188] bpf_get_stack_raw_tp+0x1a9/0x220 [ 408.282483][T21188] bpf_prog_aa1f08ea8b241262+0x46/0x4e [ 408.282503][T21188] bpf_prog_run_pin_on_cpu+0x142/0x470 [ 408.282534][T21188] bpf_prog_test_run_syscall+0x318/0x4c0 [ 408.282562][T21188] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10 [ 408.282586][T21188] ? __fget_files+0x2a/0x420 [ 408.282614][T21188] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10 [ 408.282643][T21188] bpf_prog_test_run+0x2c7/0x340 [ 408.282668][T21188] __sys_bpf+0x643/0x950 [ 408.282689][T21188] ? __pfx___sys_bpf+0x10/0x10 [ 408.282728][T21188] ? rcu_is_watching+0x15/0xb0 [ 408.282761][T21188] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.282781][T21188] __x64_sys_bpf+0x7c/0x90 [ 408.282799][T21188] do_syscall_64+0x15f/0xf80 [ 408.282822][T21188] ? trace_irq_disable+0x3b/0x140 [ 408.282842][T21188] ? clear_bhb_loop+0x40/0x90 [ 408.282865][T21188] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.282889][T21188] RIP: 0033:0x7fb04639c819 [ 408.282906][T21188] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 408.282922][T21188] RSP: 002b:00007fb0445ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 408.282942][T21188] RAX: ffffffffffffffda RBX: 00007fb046615fa0 RCX: 00007fb04639c819 [ 408.282956][T21188] RDX: 000000000000000c RSI: 00002000000004c0 RDI: 000000000000000a [ 408.282969][T21188] RBP: 00007fb046432c91 R08: 0000000000000000 R09: 0000000000000000 [ 408.282980][T21188] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 408.282991][T21188] R13: 00007fb046616038 R14: 00007fb046615fa0 R15: 00007ffd046fc618 [ 408.283027][T21188] [ 408.602476][T21190] tipc: Enabled bearer , priority 0 [ 408.625160][T21194] syzkaller0: entered promiscuous mode [ 408.637294][T21194] syzkaller0: entered allmulticast mode [ 408.677739][T21196] tipc: Resetting bearer [ 408.688830][T21189] tipc: Resetting bearer [ 408.714638][T21189] tipc: Disabling bearer [ 412.960696][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 412.968751][ C0] lec:lec_tx_timeout: lec0 [ 412.973784][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 417.991081][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 417.999146][ C0] lec:lec_tx_timeout: lec0 [ 418.004359][ C0] lec:lec_start_xmit: lec0:No lecd attached